CySEC Advanced study materials
CySEC Advanced study resources

Pelagos Wealth: an opaque BVI subscription, a third-party payer and a PRIIPs KID

CySEC Advanced · Put your knowledge to work in context.

All case studies

Pelagos Wealth: an opaque BVI subscription, a third-party payer and a PRIIPs KID

Pelagos Wealth CIF Ltd, a Cyprus investment firm distributing a Cyprus AIF, receives a subscription request for €2.9 million from Coral Bay Trading Ltd, a company incorporated in the British Virgin Islands. The money will be wired from a Hong Kong account held by Sunrise Nominees Ltd, an entity with no documented connection to Coral Bay. The file shows a sole director resident in Limassol with no employment history, a shareholder that is a Panamanian private foundation, and a declaration that the ultimate beneficial owner is Mr A. Petrov, a national of a country on the EU list of high-risk third countries, who is not a director. Only a copy of Mr Petrov's passport has been obtained: no proof of address, no source of wealth, no explanation of the foundation. The relationship manager has classified Coral Bay as a retail client, says the client called questions about the Hong Kong payment 'an insult', and has already issued the subscription instruction. The AMLCO is on annual leave and no deputy has been appointed.

1. What customer due diligence is required under Law 188(I)/2007 as amended, and can Pelagos accept the subscription on the current file?

Read the worked answer

Risk factors, all pulling towards enhanced due diligence. A company in the BVI, a Panamanian private foundation in the ownership chain, a nominal director with no discernible economic activity, a UBO in a high-risk third country under the EU list, and a payment from a third party with no documented connection. Each is an EDD trigger on its own; combined, simplified measures are out of the question.

What EDD requires. Identify and verify the client and the beneficial owner; the UBO is the natural person owning or controlling more than 25%, or the person exercising control through a foundation, its council or its beneficiaries, not the nominee director. Identity must be verified from a reliable, independent source, and address evidence obtained - a passport copy alone is insufficient. Source of wealth and source of funds must be established with evidence, not assertion; "family money" is not an answer. The commercial rationale for the structure must be documented, senior management approval must be obtained before the relationship is established, and enhanced ongoing monitoring put in place. The foundation's purpose, its beneficiaries and any person exercising effective control must be screened, including for PEP status.

Third-party payment. Paying from an unrelated Hong Kong entity is not prohibited, but Pelagos must establish and document the link between payer and client, obtain the client's written authorisation, identify and verify the payer, and satisfy itself the payment makes commercial sense. Refusal to explain is a red flag, not an inconvenience.

Answer. The subscription cannot be accepted. Where CDD cannot be completed, the firm must refrain from carrying out the transaction, must not establish the relationship, and must consider a report. The RM's instruction must be stopped before the money moves.

2. How should the firm handle the suspicion and the governance failures, and what must it avoid doing?

Read the worked answer

Internal escalation. The combination of an opaque offshore chain, a hidden UBO, a high-risk jurisdiction and an unexplained third-party payer gives objective grounds for suspicion. That suspicion must be recorded and escalated immediately to the AMLCO, or in the AMLCO's absence to the appointed deputy and a member of senior management. The absence of a deputy is itself a breach of the CySEC AML/CFT Directive's governance requirements and must be corrected and reported to the board.

External reporting. A suspicious transaction report must go to MOKAS, the Cypriot FIU, without delay and before any transaction is executed. The firm should not accept the funds first and report afterwards; and if funds have already been received, it must take advice from MOKAS on holding or returning them rather than moving them on.

What must be avoided. Tipping off: the client must not be told that a report has been made or that suspicion exists. The firm must not disclose the reason beyond the minimum operational explanation, and must not warn the RM's contacts or the intermediary. It must not "shop" the client to another institution, must not allow the RM to continue the relationship unsupervised, and must not backdate or reconstruct the CDD file. Records of the decision, the escalation and the report must be retained after the relationship ends.

Also consider. Whether Petrov, the director or foundation officials are politically exposed persons, which would add senior-management approval and source-of-wealth requirements; and whether the RM's conduct itself warrants disciplinary action. Refusing the business does not require refusing politely-worded questions - it requires refusing clearly and documenting why.

3. Separately from the AML issues, what PRIIPs obligations apply given that Coral Bay was classified as a retail client?

Read the worked answer

Classification matters. Coral Bay is a legal person, but on the RM's classification it is a retail client, so the AIF units are being sold to a retail investor and the PRIIPs Regulation (EU) 1286/2014 applies in full.

The KID. A key information document for the AIF must be provided in good time before the client is bound - in practice before the subscription is signed, not with the contract confirmation. It must be in Greek or another language accepted by CySEC, no longer than three sides of A4, and drawn up or adopted by the manufacturer (the AIFM). Pelagos, as distributor, must use the manufacturer's KID, may translate it but may not alter its substance, and must check that it is current: it must be reviewed at least every 12 months and revised whenever there is a material change.

What the KID must show. The nature and features of the product, the intended retail investor, the recommended holding period, the 1–7 risk indicator with its narrative, four performance scenarios (stress, unfavourable, moderate and favourable) with the assumptions stated, what happens if the manufacturer cannot pay out, and costs both over time and on an itemised basis, including transaction costs and any inducements. No ratings, no past-performance tables and no language suggesting the product is risk-free.

Sequencing point. Providing a KID does not cure the AML problem, and the AML refusal does not suspend the PRIIPs duty if the client were accepted. Both must be satisfied before the subscription is executed, and the firm should record that the KID was delivered and when.