AML Regulations for Dealers in Precious Metals and Stones (DPMS) in UAE

AML Regulations for Dealers in Precious Metals and Stones (DPMS) in UAE

Blogs

Last Updated: 04/27/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Key Highlights

  • DPMS are brought into the AML/CFT perimeter at an AED 55,000 transaction threshold defined in Article 3(3) of Cabinet Resolution 134 of 2025.
  • The Anti-Money Laundering Department of the Ministry of Economy and Tourism supervises DPMS operating in the mainland and commercial free zones.
  • Every threshold-crossing transaction must be captured in a Dealers in Precious Metals and Stones Report (DPMSR) filed on goAML (MoE Circular 08/AML/2021).
  • Gold refiners and supply-chain participants are subject to an additional 5-step responsible sourcing framework under Ministerial Decree 68 of 2024.
  • Administrative fines for AML/CFT violations range from AED 50,000 to AED 1,000,000 per violation under Cabinet Resolution 71 of 2024.
  • The UAE’s 2024 National Risk Assessment rates the sector’s inherent ML/TF risk as medium-to-high.

AML Regulations for Dealers in Precious Metals and Stones (DPMS) in UAE

The AML Regulations for DPMS in UAE sit inside the wider Designated Non-Financial Businesses and Professions (DNFBP) framework explained in our parent guide, AML Regulations for DNFBPs in UAE. Precious metals and stones markets combine high intrinsic value, cross-border mobility and deep cash reliance, which is why Federal Decree Law 10 of 2025, Cabinet Resolution 134 of 2025 and a dedicated set of Ministry of Economy and Tourism (MoET) circulars bring dealers in precious metals and stones inside the UAE’s AML/CFT/CPF perimeter.

This page explains the legal framework, the supervisory architecture, the 5-step gold sourcing overlay and the obligations that every DPMS must meet when it crosses the AED 55,000 threshold set out in Article 3(3) of the Executive Regulations.

At a Glance

Perimeter: Any dealer in precious metals or precious stones carrying out a single cash transaction, or linked cash transactions, equal to or above AED 55,000 (Cabinet Resolution 134/2025, Article 3(3)).

Primary supervisor: Ministry of Economy and Tourism (MoET) for mainland and commercial free zone DPMS.

Governing law: Federal Decree Law 10 of 2025 (AML/CFT/CPF); Cabinet Resolution 134 of 2025 (Executive Regulations).

Reporting trigger: DPMSR filed on goAML for each cash or wire transaction at or above AED 55,000 (MoE Circular 08/AML/2021).

Gold sourcing overlay: Gold refineries and supply chain entities must apply the 5-step Due Diligence Regulations for Responsible Sourcing of Gold (Ministerial Decree 68/2024; Circular 2/2024).

Penalty range: AED 50,000 to AED 1,000,000 per violation (Cabinet Resolution 71 of 2024).

Sector risk rating: Medium-to-high ML/TF risk (UAE National Risk Assessment 2024).

Population on goAML: 8,191 DPMS registered as of 30 June 2025; 1,448,825 DPMSRs filed Jul 2021 – Jun 2025 (UAEFIU Strategic Analysis Report on DPMS, Sept 2025).

Scope note

This page explains AML regulations applicable to dealers in precious metals and stones (DPMS) in the UAE, with specific coverage of gold sourcing and the AED 55,000 reporting threshold. Broader AML obligations that apply across all DNFBPs are explained in AML Regulations for DNFBPs in UAE.

What this DPMS Guide Covers

Three substantive sections walk you through perimeter, supervisor and the layered AML regulations for DPMS in UAE.

1. Who Counts as a DPMS in the UAE

2. AML Supervisory Authority for DPMS

3. AML Regulations Applicable to DPMS

Who Counts as a Dealer in Precious Metals and Stones (DPMS) in the UAE?

A dealer in precious metals and stones (DPMS) is any natural or legal person who, in the course of business, trades in precious metals or precious stones and who carries out a single cash transaction, or several linked cash transactions, at or above AED 55,000. This perimeter is set in Article 3(3) of Cabinet Resolution No. 134 of 2025 concerning the Executive Regulations of Federal Decree Law No. 10 of 2025.

The term covers gold retailers, jewellers, refineries, bullion wholesalers, diamond and coloured-stone traders, pearl traders and recycling operations within the Ministry of Economy and Tourism’s supervisory remit. The trigger is the AED 55,000 cash value; the rule applies equally to a single retail sale and to a string of related transactions that together cross the threshold. Transactions below AED 55,000 remain inside the AML system for record-keeping and suspicious transaction reporting, but they do not by themselves create DPMSR reporting exposure. The DPMSR reporting obligation and the applicability of the AML/CFT federal law are two different things. One should not confuse the applicability of the law with the DPMSR submission obligations.

Legal test

“Dealers in valuable metals and precious stones, when carrying out any single cash transaction or several transactions that appear to be linked and whose value equals or exceeds fifty-five thousand dirhams (AED 55,000).” — Article 3(3), Cabinet Resolution No. 134 of 2025.

Dealers established in the Abu Dhabi Global Market (ADGM) and the Dubai International Financial Centre (DIFC) are supervised by their own regulators (the ADGM RA and the DFSA, respectively) under rulebooks that mirror the federal AML/CFT regime; the substantive obligations and threshold logic track federal law, but the primary touchpoint is the financial free zone regulator rather than MoET.

AML Supervisory Authority for DPMS in the UAE

The Anti-Money Laundering Department within the Ministry of Economy and Tourism (MoET) is the federal supervisor for DPMS operating in the mainland and commercial free zones. This mandate is grounded in Cabinet decisions that assign DNFBP supervision to MoET and is reaffirmed in the DNFBP Guidelines issued by the Ministry in September 2025, which list DPMS among the four supervised categories alongside real estate agents and brokers, independent accountants and auditors, and trust and corporate service providers.

MoET enforces the AML/CFT obligations through on-site inspections, thematic reviews, administrative penalties imposed under Cabinet Resolution No. 71 of 2024, and circular-based guidance. It coordinates closely with the UAE Financial Intelligence Unit (UAEFIU), which operates the goAML reporting platform, and with the Executive Office for Control and Non-Proliferation (EOCN), which administers targeted financial sanctions. DPMS in ADGM and DIFC report to the ADGM RA and DFSA, respectively; DPMS in financial free zones follow the free zone’s AML framework, which cross-references to federal law.

1. Federal Supervisor

MoET is the primary AML/CFT supervisor for DPMS in mainland UAE and commercial free zones.

2. Financial Intelligence Unit

UAEFIU receives all Suspicious Transaction Reports, Confirmed Name Match Reports (CNMRs), PNMRs and DPMSRs through the goAML system.

3. Sanctions Authority

The Executive Office for Control and Non-Proliferation (EOCN) administers targeted financial sanctions and the Notification Alert System (NAS).

4. Financial Free Zone Regulators

ADGM RA and DIFC DFSA supervise DPMS authorised inside their respective jurisdictions under rulebooks aligned with federal AML law.

AML Regulations Applicable to DPMS in the UAE

The AML regulations for DPMS in UAE are organised in five concentric layers: the federal AML statute and its executive and penalty regulations; cross-sector overarching guidance from the National Committee, the EOCN, the UAEFIU and other federal bodies; the National Risk Assessment; DNFBP sector-specific guidance and circulars issued by MoET; and sector-specific DPMS guidance addressing gold sourcing, goAML reporting and precious-metals typologies. The subsections below walk through each layer and cite the applicable instruments.

The Five Regulatory Layers for DPMS

Three substantive sections walk you through perimeter, supervisor and the layered AML regulations for DPMS in UAE.

1. Federal AML Laws and Executive Regulations

2. Overarching AML Guidance

3. NRA, SRA, and Other Important Guidelines

4. DNFBP Sector-Specific Guidance

5. Sector-Specific DPMS Guidelines

Federal AML Laws and Executive Regulations Applicable to Dealers in Precious Metals and Stones

Federal primary and secondary legislation sets the baseline AML/CFT/CPF obligations that every DPMS must meet, regardless of whether it trades in gold bars, loose diamonds or polished jewellery. The federal layer is reinforced by two dedicated penalty resolutions and a beneficial-owner framework that every DPMS legal entity has to implement independently of its AML obligations.

Federal AML laws and executive regulations at a glance

Seven primary and secondary instruments that set the baseline AML/CFT/CPF obligations for every DPMS.

1. Federal Decree Law No. 10 of 2025

2. Federal Law No. 7 of 2014

3. Cabinet Resolution No. 134 of 2025

4. Cabinet Decision No. 74 of 2020

5. Cabinet Resolution No. 71 of 2024

6. Cabinet Decision No. 109 of 2023

7. Cabinet Resolution No. 132 of 2023

Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing

Federal Decree Law No. 10 of 2025 is the current primary AML/CFT/CPF statute in the UAE. It defines Designated Non-Financial Businesses and Professions as persons engaged in commercial or professional activities specified in the Executive Regulations, and makes those persons subject to the full suite of preventive obligations, including customer due diligence, record-keeping, suspicious transaction reporting, internal controls, training and cooperation with supervisory authorities.

Article 10 of the Decree Law (Chapter Four — Disclosure) confirms that every person entering or leaving the State must disclose the carriage of currencies, bearer negotiable instruments, precious metals or valuable stones in accordance with the disclosure system issued by the Federal Authority for Identity, Citizenship, Customs and Port Security in coordination with the Central Bank, which directly supports the precious-metals control environment within which DPMS operate.

The Decree Law establishes the UAEFIU, sets out criminal offences and sanctions, and empowers supervisory authorities to impose administrative penalties alongside judicial consequences. For the details of what each obligation means in practice, DPMS must read the Decree Law together with its Executive Regulations (Cabinet Resolution 134 of 2025) and the MoET DNFBP Guidelines.

Federal Law No. (7) of 2014 Combating Terrorism Crimes

Federal Law No. 7 of 2014 defines terrorism offences, terrorist organisations and the financing of terrorism. It is the criminal-law backbone behind the AML/CFT regime: when a DPMS identifies suspected terrorism-financing activity, the predicate offence is located in this Law and the related UNSC-implementing Cabinet Resolution 74 of 2020. Article 1 of Decree Law 10 of 2025 expressly refers to Federal Law 7 of 2014 in defining terrorist acts, thereby anchoring the AML statute within the criminal framework.

Cabinet Resolution No. (134) of 2025 Concerning the Executive Regulations of Federal Decree Law No. (10) of 2025

Cabinet Resolution 134 of 2025 is the executive regulation for Decree Law 10 of 2025 and contains the operational details that DPMS apply daily. Article 3(3) brings DPMS inside the perimeter at the AED 55,000 cash-transaction threshold. Article 7 sets out the triggers for customer due diligence, commencement of a business relationship, suspicion of a crime, doubts about previously obtained data, and occasional transactions at or above the thresholds. Article 8 requires ongoing monitoring, and subsequent articles set out enhanced due diligence, PEP handling, reliance on third parties, record-keeping and reporting obligations.

Where previous guidance, circulars or notifications refer to Federal Decree Law 20 of 2018 or Cabinet Resolution 10 of 2019, they continue to apply to the extent they are not repealed or inconsistent with Decree Law 10 of 2025 and Cabinet Resolution 134 of 2025. DPMS should therefore read every circular issued prior to 2025 through the lens of the new federal law.

Cabinet Decision No. 74 of 2020 Regarding Terrorism Lists Regulation and Implementation of UN Security Council Resolutions

Cabinet Decision No. 74 of 2020 regulates the UAE Local Terrorist List and the UAE’s implementation of United Nations Security Council resolutions on the suppression of terrorism, terrorism financing and the proliferation of weapons of mass destruction. It creates the legal basis on which DPMS must screen customers, beneficial owners and transaction counterparties against the UAE Local Terrorist List and the UN Consolidated List, apply freezing measures without delay, and report confirmed and partial name matches to the EOCN. The Cabinet Decision is enforced alongside circulars issued by MoET and EOCN that translate the obligations into reporting timelines.

Cabinet Resolution No. (71) of 2024 Regulating Violations and Administrative Penalties for DNFBPs Under the Ministry of Justice and the Ministry of Economy

Cabinet Resolution No. 71 of 2024 replaced Cabinet Resolution 16 of 2021 and sets out the unified list of AML/CFT violations and administrative fines for DNFBPs supervised by the Ministry of Economy (now MoET) and the Ministry of Justice (MoJ). Article 3 authorises the Ministry to impose one of the administrative penalties in Article 14 of the Decree Law, or the administrative fines in the annexed schedule, or both.

The annexed schedule covers more than forty categories of violations. Failure to adopt internal policies and controls is fined between AED 100,000 and AED 200,000. Failure to identify, assess and update crime risks is fined between AED 50,000 and AED 500,000. Failure to apply customer due diligence before or during a transaction at or above AED 55,000 is fined between AED 50,000 and AED 200,000. Failure to promptly file suspicious-transaction reports with the UAEFIU is fined between AED 100,000 and AED 500,000. Failure to implement UN Security Council sanctions decisions, directly relevant to DPMS given typology exposure, is fined between AED 100,000 and AED 1,000,000. Article 4 gives the violator thirty working days to grieve the penalty, and Article 5 permits the Ministry to amend, uphold or cancel the fine on review.

Cabinet Decision No. (109) of 2023 on Regulating the Beneficial Owner Procedures

Cabinet Decision No. 109 of 2023 regulates the identification, verification and continuous maintenance of the real (ultimate) beneficial owners of companies established in the UAE. A DPMS operating as a corporate licensee must maintain a register of beneficial owners, notify the licensing authority of changes within fifteen days and keep information current. Customer due diligence on corporate clients under Article 9 of the AML Executive Regulations draws on the same beneficial-owner concept, so the two frameworks operate in parallel: Decision 109 governs the DPMS’s own legal-person transparency, and the AML rules govern beneficial-owner identification of the DPMS’s customers.

Cabinet Resolution No. (132) of 2023 on Administrative Penalties for Beneficial Owner Violations

Cabinet Resolution No. 132 of 2023 sets out the administrative penalties for breaches of Cabinet Decision 109 of 2023. A DPMS that fails to disclose, update or maintain accurate beneficial-ownership data is exposed to written warnings to the legal person and financial penalties that escalate with repetition of the violation. Under Article 3(2) of Cabinet Resolution 132 of 2023, for violations committed for the third time, the Registrar has the right to suspend the commercial licence and close the commercial store of the violating legal person until the fine is paid and the breach is rectified. The penalty schedule is enforced by the Ministry of Economy and Tourism as the beneficial-owner registrar for most DPMS legal persons.

DPMS policy templates aligned to Decree Law 10/2025 and Cabinet 134/2025

AML UAE maintains up-to-date internal policies, customer due diligence procedures, DPMSR workflows and beneficial-owner registers engineered for the precious metals and stones sector.

Overarching AML Guidance Applicable to DPMS in the UAE

Alongside the federal statute, a catalogue of cross-sector guidance binds DPMS into the national AML/CFT/CPF architecture. These instruments explain how to implement targeted financial sanctions, counter proliferation finance, file reports on goAML and grieve sanctions-related decisions. Where a circular or guideline refers to the old Federal Decree Law 20 of 2018 and its executive regulation, it remains valid to the extent consistent with Decree Law 10 of 2025 and Cabinet Resolution 134 of 2025.

Thirteen cross-sector instruments from the EOCN, UAEFIU and National Committee that frame DPMS sanctions, CPF and reporting obligations.

1. EOCN TFS Guideline (Jan 2021, last amended Jul 2025)

2. UAEFIU TF Strategic Analysis (May 2025)

3. TFS Strategic Review (Nov 2021)

4. PF Institutional Risk Assessment Guidance (Dec 2023)

5. TF and PF Red Flags Guidance (updated Dec 2023)

6. Unlicensed VASP Joint Guidance (2022)

7. Counter Proliferation Financing Guidance (Nov 2022)

8. Satisfactory/Unsatisfactory Practice Joint Guidance (Jun 2021)

9. Sanctions Circumvention Typologies (Mar 2021)

10. EOCN Grievance Procedures Guideline

11. Online Grievance System User Guide

12. Combating PF and Sanctions Evasion

13. EOCN NAS Subscription Simple Guide

1. Guideline on Targeted Financial Sanctions for Financial Institutions, DNFBPs and VASPs — Executive Office for Control and Non-Proliferation (EOCN), issued January 2021, last amended July 2025

The EOCN TFS Guideline is the authoritative reference for how DPMS implement UN-led and UAE-local sanctions obligations. It explains the scope of TFS measures, the concept of ‘funds or other assets’, the screening expectations on customers, beneficial owners and counterparties, and the freezing obligation that must be executed without delay. The Guideline also sets the five-business-day reporting window for Confirmed Name Match Reports (CNMRs) and Partial Name Match Reports (PNMRs) on goAML, and DPMS rely on it to calibrate screening frequency, to interpret partial-match handling and to build CNMR and PNMR workflows.

2. UAEFIU’s Strategic Analysis Report on Terrorist Financing Typologies and Facilitators — May 2025

This UAEFIU strategic analysis sets out the dominant terrorist-financing typologies observed in the UAE and the facilitators most frequently exploited. For DPMS, the relevance lies in the report’s analysis of how precious metals and cash movements intersect with TF networks, and in the red-flag indicators that should feed into the DPMS’s transaction-monitoring rules and staff training.

3. Strategic Review on Targeted Financial Sanctions Case Studies 2019-2021 (IEC-SR.01.22) — Executive Office, November 2021

The Strategic Review compiles sanitised case studies from 2019 to 2021 where UAE private-sector obligations to apply TFS were tested. DPMS use these case studies to benchmark their own sanctions screening, to understand which typologies should trigger enhanced due diligence and to test the strength of their freezing and reporting playbooks.

4. Proliferation Finance Institutional Risk Assessment Guidance for FIs, DNFBPs and VASPs — December 2023

This Guidance explains how an institutional proliferation-finance risk assessment should be structured. DPMS, because of their exposure to dual-use goods pathways and to jurisdictions subject to UNSC proliferation-related sanctions, must run a specific proliferation-finance assessment as part of their wider business-wide risk assessment, separate from the ML and TF analyses.

5. Terrorist and Proliferation Financing Red Flags Guidance — December 2023

This cross-sector red-flag bulletin lists concrete indicators that front-line DPMS staff should watch for in transactions involving gold, bullion, high-value stones and jewellery. Where one or more red flags are present, the DPMS must escalate and, if suspicion persists, file an STR with the UAEFIU without delay.

6. Joint Guidance on Combating the Use of Unlicensed Virtual Asset Service Providers in the UAE — Central Bank, SCA, VARA, DFSA, FSRA and Ministries of Justice and Economy (2022)

DPMS frequently encounter customers who wish to settle precious metals purchases through virtual assets. This Joint Guidance from the Central Bank, CMA, VARA and ADGM/DIFC regulators sets out the obligations to deal only with licensed VASPs, and the red flags that indicate a counterparty is operating without a UAE VASP licence. DPMS integrating virtual-asset settlement must apply these expectations alongside their own AML controls.

7. Guidance on Counter Proliferation Financing for FIs, DNFBPs and VASPs — November 2022

This is the authoritative cross-sector CPF guidance. It explains the definition of proliferation financing in UAE law, the institutional risk assessment framework, the specific red flags linked to dual-use goods and the interaction with UNSC resolutions 1718 (DPRK) and 1737/2231 (Iran). DPMS sourcing or selling bullion and stones in trade-finance-heavy structures use this Guidance to build their CPF controls.

8. Joint Guidance on Satisfactory and Unsatisfactory Practice — June 2021

This joint supervisors’ Guidance contrasts observed satisfactory practice against unsatisfactory practice across governance, risk assessment, CDD, record-keeping and reporting. It is the single most practical benchmarking document for DPMS that want to self-assess the maturity of their AML programme before an inspection.

9. Typologies on the Circumvention of Targeted Sanctions — March 2021

This typology paper walks through common techniques used to circumvent sanctions, including the use of front companies, intermediaries in jurisdictions with lighter controls, and trade-based disguise of value. DPMS face each of these typologies in their own market; the paper informs its enhanced due diligence expectations for trades involving high-risk jurisdictions.

10. Guideline on Grievance Procedures

This EOCN Guideline explains how a DPMS, a customer or a designated person requests de-listing, removal of a freezing measure or permission to use frozen funds. It sets out the information to include, the review process and the timelines. DPMS need it when handling a CNMR or PNMR that is subsequently contested.

11. Online Grievance System User Guide

The Online Grievance System is the digital channel for submitting grievances to the EOCN. The User Guide walks through account creation, grievance submission, document uploads and status checks. DPMS with dedicated compliance functions should register up-front so they are not delayed if a grievance becomes necessary.

12. Combating Proliferation Financing and Sanctions Evasion

This EOCN awareness document synthesises the CPF and sanctions-evasion obligations into a practitioner-oriented narrative. DPMS training curricula should map each module of this document to one or more of their internal controls, so staff can explain the underlying risk in the context of real-world gold and stone transactions.

13. Simple Guide to Subscribe to the EOCN Notification Alert System (NAS)

The NAS is the EOCN’s subscription channel for updates to the UAE Local Terrorist List, the UN Consolidated List and related designations. The Simple Guide explains the step-by-step subscription process. DPMS compliance officers must subscribe to the NAS so that screening lists are refreshed as soon as designations change.

NRA, SRA, and Other Important Guidelines Applicable to DPMS in the UAE

The UAE’s risk-based approach begins with the National Risk Assessment. For DPMS, the NRA sets the baseline expectation on how seriously to treat sector-inherent risks.

UAE ML/TF National Risk Assessment — 2024

The UAE Money Laundering and Terrorist Financing Risk Assessment 2024 rates the inherent risk of the DPMS sector at medium-to-high, highlighting the combination of trade scale, cash intensity, international exposure and the persistent risk of conflict-affected or high-risk gold entering the supply chain. The NRA instructs DPMS to use these findings as a floor for their own business-wide risk assessment, and to apply enhanced due diligence where sectoral risk factors are present. The Practical Guide for DNFBPs, published alongside the NRA, translates the findings into operational actions for DPMS compliance officers.

Align your business-wide risk assessment with the UAE NRA 2024

AML UAE runs NRA-aligned business-wide risk assessments for DPMS, covering customer, geography, product, channel and delivery dimensions.

DNFBP Sector-Specific Guidance Applicable to DPMS in the UAE

MoET issues dedicated circulars and guidance for all DNFBPs under its supervision. These instruments are the everyday operating manual for DPMS compliance officers and are usually addressed to real estate brokers and agents, DPMS, auditors and accountants, and corporate service providers in parallel.

DNFBP sector-specific guidance at a glance

Ten MoET circulars and implementation guides that govern DPMS screening, CDD, risk-based approach and sanctions obligations

1. Circular No. 1 of 2026 — High-Risk Country Lists

2. AML/CFT DNFBP Guidelines (Sep 2025)

3. Circular No. 3 of 2025 — Sanctions and Terrorist List Screening

4. Circular No. 4 of 2025 — Understanding the NRA 2024

5. Circular No. 6 of 2025 — Risk-Based CDD

6. Circular No. 7 of 2025 — Re-Imposition of UN Sanctions on Iran

7. Circular No. 8 of 2025 — High-Risk Country Update

8. CRA Implementation Guide (Nov 2024)

9. CDD Implementation Guide (Nov 2024)

10. Circular No. 2 of 2022 — UNSCRs 1718 and 2231

1. Circular No. (1) of 2026 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures

Issued on 11 March 2026 as MOET/AML/001/2026, this Circular transposes National Committee Resolution No. 15 of 2025 into DNFBP practice. It reminds DPMS that the Resolution reaffirms existing obligations, updates country listings, and requires alignment of screening, enhanced due diligence and risk-based measures with the revised lists. The Circular cites Federal Decree Law 10 of 2025, Cabinet Resolution 134 of 2025 and Cabinet Decision 74 of 2020 as its legal basis.

2. AML/CFT Guidelines for Designated Non-Financial Businesses and Professions — September 2025

The Revised DNFBP Guidelines are the consolidated MoET rulebook for DNFBPs. Part I sets out the legal framework; Part II covers compliance administration; Part III sets out the identification and assessment of ML/TF/PF risks; Parts IV and V address mitigation controls, customer due diligence, reporting and record-keeping. The Guidelines name DPMS among the four supervised categories and incorporate the CNMR (Confirmed Name Match Report), PNMR, and DPMSR reporting typologies into the compliance officer’s remit.

3. Circular No. (3) of 2025 on Emphasising the Importance of Screening Sanctions and Terrorist Lists

Issued on 19 March 2025 as MOEC/AML/003/2025, this Circular is the clearest recent statement that DPMS must screen every customer, beneficial owner and transaction counterparty against sanctions and terrorist lists, irrespective of transaction value, payment method or whether the transaction crosses the AED 55,000 reporting threshold. Screening is not optional below the threshold; only the DPMSR reporting trigger is threshold-based.

4. Circular No. (4) of 2025 on the Importance of Understanding the UAE 2024 National Risk Assessment

This Circular directs DPMS to read the National Risk Assessment 2024 and to map its findings into their own business-wide risk assessment, customer risk matrix and transaction-monitoring rules. Where the NRA identifies a sectoral threat or typology, conflict-affected gold, trade-based money laundering, or shell companies, the DPMS is expected to demonstrate that the threat has been analysed and that mitigating controls are in place.

5. Circular No. (6) of 2025 on Emphasising the Implementation of Risk-Based Customer Due Diligence Measures

Issued on 5 August 2025 as MOET/AML/6/2025, this Circular reinforces the risk-based approach and clarifies the appropriate use of simplified due diligence (SDD). DPMS must apply enhanced due diligence to high-risk customers, standard CDD to medium-risk customers where no suspicion exists, and may apply SDD only to low-risk customers where no suspicion of ML, TF or PF exists. The Circular cross-references to the Customer Risk Assessment and CDD implementation guides issued by the Ministry.

6. Circular No. (7) of 2025 Regarding the Re-Imposition of United Nations Sanctions Related to Iran

Issued on 19 December 2025 as MOET/AML/007/2025, this Circular flags the re-imposition of UN sanctions under Security Council Resolution 1737 (2006) and subsequent resolutions. DPMS must update screening systems to the latest UN Consolidated List, re-screen existing customers and counterparties, apply freezing measures without delay, and report confirmed name matches (CNMR) and partial name matches (PNMR) to the EOCN via goAML in accordance with the procedures in the EOCN TFS Guideline (which sets a five-business-day reporting window from the freeze or suspension measure).

7. Circular No. (8) of 2025 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures

Issued on 25 December 2025 as MOET/AML/008/2025, this Circular (later superseded by Circular 1 of 2026) updates the high-risk country lists in line with National Committee Resolution 15 of 2025 and the FATF country review. DPMS must monitor the FATF lists, align customer risk categorisation and transaction monitoring, and apply the measures required by the Ministry when a customer, beneficial owner or counterparty is connected to a listed jurisdiction.

8. Implementation Guide for DNFBPs on Customer Risk Assessment (CRA) — November 2024

The CRA Implementation Guide walks DPMS through the construction of a customer risk matrix, identifying customer, product, service, geography, channel and delivery risk factors; weighting them; and assigning a final risk rating that drives the intensity of CDD, monitoring and review frequency. DPMS use the guide to design their client-onboarding questionnaires and periodic-review templates.

9. Implementation Guide for DNFBPs on Customer Due Diligence (CDD) — November 2024

The CDD Implementation Guide is the operational companion to the CRA guide. It explains how to identify and verify customers and beneficial owners, when to apply simplified, standard or enhanced due diligence, how to approach politically exposed persons, and how to document decisions. DPMS staff handling threshold transactions reference this Guide when collecting identification under MoE Circular 08/AML/2021.

10. Circular No. (2) of 2022 on Implementation of Targeted Financial Sanctions under UNSCRs 1718 (2006) and 2231 (2015)

Issued on 31 March 2022, this Circular covers the implementation of TFS related to the Democratic People’s Republic of Korea (DPRK) and Iran. It requires DPMS to screen every transaction party against the DPRK and Iran sanctions regimes, to apply enhanced due diligence to transactions linked to those jurisdictions, to verify cross-border transactions suspected of involving dual-use goods, and to file confirmed and partial name matches via goAML. The Circular has been superseded in part by later EOCN guidance, but its operational obligations continue to apply.

Build DPMS-ready screening and goAML reporting workflows

AML UAE designs sanctions-screening, PEP-screening and goAML-filing workflows engineered to the MoET circular stack and the CNMR/PNMR reporting timelines.

Sector-Specific Guidelines Applicable to DPMS in the UAE

A final layer of guidance targets DPMS directly. These documents address gold sourcing, DPMSR reporting, compliance officer appointment and DPMS typologies. They sit on top of the federal and DNFBP layers and are the instruments regulators cite most often in DPMS inspections.

DPMS sector-specific guidelines at a glance

Eight directly applicable instruments covering gold sourcing, DPMSR reporting, compliance-officer appointment and precious-metals typologies.

1. UAEFIU Strategic Analysis Report on DPMS (Sep 2025)

2. Ministerial Decree No. 68 of 2024 — Gold Refineries

3. MoE Circular No. 2 of 2024 — Responsible Sourcing of Gold

4. Due Diligence Regulation for Responsible Sourcing of Gold

5. MoE Circular No. 2 of 2023 — DPMS Data Disclosure Notice

6. MoE Circular No. 08/AML/2021 — DPMSR Reporting

7. MoET Circular No. 2 of 2021 — DNFBP Obligations

8. Supplemental Guidance for DPMS (May 2019)

1. UAEFIU’s Strategic Analysis Report on Misuse of Precious Metals and Stones in Financial Crime — September 2025

This is the most recent UAEFIU strategic analysis covering the DPMS sector. It notes that UAE foreign trade in precious stones, metals and their articles grew from AED 497 billion in 2021 to more than AED 959 billion in 2024, and that 8,191 DPMS were registered on goAML as of 30 June 2025, an 81 per cent increase over June 2022. The report analyses 1,448,825 DPMSRs filed between July 2021 and June 2025, as well as around 700 STRs and SARs related to the sector. It identifies five dominant typologies: conflict-affected and high-risk gold; gold smuggling; use of front and shell entities; trade-based money laundering; and the use of precious metals and stones in terrorist financing. It concludes with thirty-two DPMS-specific red-flag indicators covering customer due diligence, trade activities and behavioural triggers.

2. Ministerial Decree No. (68) of 2024 Regarding Gold Refineries’ Adherence to the Policy of Due Diligence Regulations for Responsible Sourcing of Gold

Ministerial Decree 68 of 2024 was issued on 29 March 2024 by the Minister of Economy. Article One requires every entity engaged in refining gold or recycling its products, and every supply-chain stakeholder operating in the UAE (including commercial free zones under MoE supervision), to adhere to the attached Due Diligence Policy for Responsible Sourcing of Gold. Supply-chain participants and precious-metals dealers must establish strong management systems, assess gold-supply-chain risks and implement a management strategy to respond to identified risks. Refineries (and recyclers) must additionally appoint an independent third-party auditor and submit a due diligence report on the gold supply chain. Article Three confirms that administrative penalties apply to violations of the Decree and the attached Policy.

3. Circular No. (2) of 2024 regarding Due Diligence Regulation for Responsible Sourcing of Gold

MoE Circular No. 2 of 2024, dated 29 March 2024, directs every regulated entity with gold refineries as an activity in its licence operating in the UAE to undertake the 5-step framework of the Due Diligence Regulation for Responsible Sourcing of Gold. The Circular confirms that from 1 January 2023, gold refineries must conduct an independent third-party audit of their due diligence measures, with audits expected to be completed within 90 days of the effective date (that is, 90 days from 31 December 2023). The Ministry has a dedicated inbox at ResponsibleSourcing@economy.ae. Entities that fail to comply are subject to administrative actions under the AML/CFT framework.

4. The Due Diligence Regulation for Responsible Sourcing of Gold

The Due Diligence Regulation for Responsible Sourcing of Gold is the policy instrument annexed to the Ministerial Decree and referenced in Circular 2 of 2024. It is built around five steps: (1) establishing an effective governance framework, including a board-approved sourcing policy, management structures and a confidential grievance mechanism; (2) identification and assessment of supply-chain risk, including the use of red flags and enhanced due diligence for conflict-affected and high-risk areas (CAHRAs); (3) management of supply-chain risk through a risk-control plan, continuous monitoring and senior-management reporting; (4) an independent third-party audit of the due-diligence measures; and (5) annual reporting on management systems, risk assessment and risk management. The Regulation is the detailed implementation manual behind Ministerial Decree 68 of 2024.

5. Circular No. (2) of 2023 — Data Disclosure Notice for Dealers in Precious Metals and Stones

MoE Circular No. (2) of 2023 instructed DPMS to display prominently in customer-facing premises a notice informing customers that the dealer will collect identification documents, and they should disclose their data.  

6. Ministry of Economy Circular No. (08/AML/2021) on the Dealers in Precious Metals and Stones Report

MoE Circular 08/AML/2021, dated 2 June 2021, is the DPMSR reporting foundation. Effective 12 June 2021, it requires DPMS to: (1) obtain Emirates ID or passport for resident individuals and ID or passport for non-resident individuals on any cash transaction at or above AED 55,000, and register the information in the UAEFIU’s goAML platform using the DPMSR form; (2) obtain trade licence and ID for corporate counterparties on transactions at or above AED 55,000 in cash or by wire transfer, and register the information in goAML as a DPMSR; and (3) keep records of every document and piece of information relating to the above transactions for a minimum of five years. The Circular refers queries to AML@economy.ae and continues in force under the new federal law.

7. MoET Circular No. (2) of 2021 on AML/CFT Obligations for DNFBPs

MoE Circular 2 of 2021, dated 4 February 2021, is the baseline DNFBP implementation circular. It confirms that MoE supervises real estate brokers and agents, dealers in precious metals and stones, account auditors and company services providers. It requires each supervised entity to appoint a compliance officer in accordance with Article 21 of the Executive Regulations, adopt internal policies, deliver staff training, register on goAML and cooperate with supervisory inspections. DPMS compliance officers cite this Circular when explaining the governance perimeter of their role.

8. Supplemental Guidance for Dealers in Precious Metals and Stones — May 2019

The 2019 Supplemental Guidance is the most detailed sector-specific narrative issued for DPMS. It explains why precious metals and stones are inherently vulnerable to ML/TF: high intrinsic value in a compact form, ability to maintain or increase in value, ease of physical transport, cash-based and decentralised markets, difficulty in tracing specific items and low compliance-awareness among smaller participants. It walks through the AED 55,000 ‘covered transactions’ concept, introduces sector-specific red flags and sets out expectations for customer due diligence, record-keeping and reporting. It continues to serve as a training reference for DPMS compliance teams.

Conclusion

The AML regulations for DPMS in UAE are dense but internally coherent. Federal Decree Law 10 of 2025 and Cabinet Resolution 134 of 2025 set the primary obligations; Cabinet Resolutions 71 of 2024, 109 of 2023 and 132 of 2023 govern penalties and beneficial ownership; a stack of EOCN and UAEFIU guidance operationalises targeted financial sanctions, proliferation-finance controls and reporting; the 2024 NRA sets the risk baseline; and a layer of MoET DNFBP and DPMS-specific circulars translates the regime into daily practice. On top of that, Ministerial Decree 68 of 2024 and Circular 2 of 2024 impose a 5-step responsible sourcing overlay on gold refiners and supply-chain participants.

A DPMS that wants to remain compliant must: submit DPMSR wherever applicable; screen every customer, beneficial owner and counterparty against the local terrorist list and the UN Consolidated List, regardless of transaction size; run a proliferation-finance assessment alongside the ML and TF assessments; integrate the five-step gold sourcing framework where applicable; and make sure that every circular, whether issued under the old Decree Law 20 of 2018 or the new Decree Law 10 of 2025, is understood through the lens of the current federal law.

Talk to AML UAE about your DPMS compliance programme

We design, test and audit AML programmes for gold retailers, refineries, jewellers and diamond traders across the UAE. From business-wide risk assessment to goAML DPMSR workflows and health check, we have you covered.

FAQs

Who counts as a DPMS under UAE AML law?

Under Article 3(3) of Cabinet Resolution 134 of 2025, a dealer in precious metals and stones is any person, natural or legal, trading in precious metals or precious stones in the course of business who carries out a single cash transaction, or several linked cash transactions, equal to or above AED 55,000. The definition covers gold retailers, jewellers, refineries, bullion wholesalers, diamond and coloured-stone traders and recyclers. Below AED 55,000, AML obligations still apply for screening, record-keeping and suspicion-based reporting, but no DPMSR is triggered.

MoE Circular 08/AML/2021 requires DPMS to file a Dealers in Precious Metals and Stones Report (DPMSR) on the UAEFIU’s goAML platform for every cash transaction at or above AED 55,000 with a resident or non-resident individual, and for every transaction at or above AED 55,000 with a legal entity, whether paid in cash or by wire transfer. Separately, any suspicion of ML, TF or proliferation financing, regardless of amount, must be filed as a Suspicious Transaction Report via goAML, and confirmed and partial name matches against sanctions lists must be filed as CNMR or PNMR within five business days of the freeze or suspension.

Yes. Under Ministerial Decree 68 of 2024 and MoET Circular 2 of 2024, entities that engage in refining or recycling gold must adhere to the 5-step Due Diligence Regulations for Responsible Sourcing of Gold and, additionally, appoint an independent third-party auditor and submit an annual due diligence report on the gold supply chain. The audit obligation has applied since 1 January 2023. Refineries remain subject to all the generic DPMS obligations under Decree Law 10 of 2025 and Cabinet Resolution 134 of 2025 in parallel.

The UAEFIU Strategic Analysis Report on DPMS (September 2025) lists thirty-two sector-specific indicators. The most common include: refusal to provide identification; inability to demonstrate funding sources; forged certificates of origin, refinery stamps or fake invoices; supply chains transiting conflict-affected or high-risk jurisdictions; large or frequent cash transactions inconsistent with the customer’s profile; structuring through multiple visits or split invoices just below AED 55,000; payments via multiple third parties or offshore entities without clear commercial link; and repeated requests for duplicate invoices or refunds after cash purchases.

DPMS established in ADGM and DIFC are supervised by the AFDGM Registration Authority (RA) and the Dubai Financial Services Authority (DFSA), respectively. Their rulebooks implement UAE federal AML/CFT law and the UAE’s international AML/CFT commitments, so the substantive obligations and the AED 55,000 threshold logic track federal law. The procedural touchpoints licensing, inspections, filings and enforcement are, however, with the financial free-zone regulator rather than MoET. DPMS in commercial free zones outside ADGM and DIFC remain under MoET supervision.

Was this guide useful?

If this DPMS guide helped your compliance team, a short Google review genuinely helps other jewellers, refineries and dealers find the same answers quickly.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

AML Regulations for DNFBPs in UAE

Blogs

Last Updated: 04/24/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

AT A GLANCE

What a DNFBP is: A non-financial business or profession listed in Article 3 of Cabinet Resolution 134 of 2025, the Executive Regulations of Federal Decree Law No. 10 of 2025.

Six DNFBP categories: Commercial gaming operators, real estate brokers and agents, dealers in precious metals and stones, lawyers/notaries/legal professionals, independent accountants and auditors, company and trust service providers, and any other businesses added by Supervisory Authority resolution.

Federal AML statute: Federal Decree-Law No. 10 of 2025 (replacing FDL 20 of 2018) and Cabinet Resolution 134 of 2025.

DPMS cash threshold: AED 55,000 threshold for single or linked cash transactions per Article 3(3) of CR 134/2025.

Commercial gaming threshold: AED 11,000 single or linked financial transactions per Article 3(1) of CR 134/2025; gaming chips alone do not count.

Supervisors: MoET for accountants, auditors, TCSPs, DPMS and real estate; MoJ for lawyers and notaries; GCGRA for commercial gaming; DFSA in DIFC; RA in ADGM.

STR channel: All DNFBPs must report suspicious transactions immediately via the goAML portal of the UAE Financial Intelligence Unit per Article 18 of FDL 10/2025.

Maximum administrative fine: AED 5,000,000 per violation under Article 17(1)(b) of FDL 10/2025; criminal penalties on top.

AML Regulations for DNFBPs in UAE

Quick Overview

AML regulations for DNFBPs in UAE are anchored in Federal Decree-Law No. (10) of 2025 on Anti-Money Laundering, Combating the Financing of Terrorism and Proliferation Financing and its Executive Regulations in Cabinet Resolution No. (134) of 2025. Article 3 of CR 134/2025 designates six categories of Designated Non-Financial Businesses and Professions (DNFBPs): commercial gaming operators, real estate brokers and agents, dealers in valuable metals and precious stones, lawyers/notaries/other legal professionals and independent accountants, company and trust service providers, and any other category added by Supervisory Authority resolution. DNFBP-wide guidance issued by the Ministry of Economy and Tourism applies alongside sector-specific instruments, while the Ministry of Justice supervises lawyers and the General Commercial Gaming Regulatory Authority (GCGRA) supervises licensed gaming activity.

This guide explains who qualifies as a DNFBP, the supervisory map across MoET, MoJ and GCGRA, the federal AML legal framework, the cross-sector guidance issued by the Executive Office for Control and Non-Proliferation (EOCN) and the UAE Financial Intelligence Unit (FIU), and the dedicated guides for each DNFBP sector. Common AML obligations are summarised next, with sector-specific depth in the linked child pages.

DEFINITION

A DNFBP is any business or profession listed in Article 3 of Cabinet Resolution 134 of 2025 that, although not a financial institution, is exposed to money-laundering, terrorist-financing or proliferation-financing risk and must therefore meet the same federal AML statute, customer due diligence rules, beneficial-owner reporting and goAML suspicious-transaction reporting obligations as financial institutions.

What Is a DNFBP Under UAE AML Law?

A DNFBP is a non-financial business or profession that, by reason of the activities it carries out, is brought within the federal AML/CFT/CPF perimeter. Article 1 of Federal Decree-Law No. (10) of 2025 defines DNFBPs by reference to Article 3 of its Executive Regulations. Article 3 of Cabinet Resolution No. (134) of 2025 sets out six categories that qualify as DNFBPs in the UAE.

The six categories in Article 3 of Cabinet Resolution 134 of 2025.

1. Trust and company service providers (TCSPs)

2. Real estate brokers and agents (purchase or sale of real estate)

3. Dealers in valuable metals and precious stones (AED 55,000 cash threshold)

4. Lawyers, notaries, other legal professionals and independent accountants

5. Commercial gaming operators (AED 11,000 single or linked threshold)

6. Other businesses or professions added by Supervisory Authority resolution

Company and trust service providers (TCSPs)

Per Article 3(5) of CR 134/2025, TCSPs are DNFBPs when, on behalf of customers, they: act as agent in the incorporation of legal persons; act as a director or secretary, partner or in a similar position; provide a registered office or correspondence address; act as trustee of an express trust or in an equivalent function for another legal arrangement; or act as a nominee shareholder.

Real estate brokers and agents

Per Article 3(2) of CR 134/2025, real estate brokers and agents are DNFBPs when concluding transactions or settlements on behalf of customers in relation to the purchase or sale of real estate. The UAE National Risk Assessment 2024 rates the sector as having a high residual ML risk, given high-value cash dealings and the use of third parties.

Dealers in valuable metals and precious stones (DPMS)

Per Article 3(3) of CR 134/2025, DPMS are DNFBPs when carrying out any single cash transaction or linked transactions equal to or exceeding AED 55,000. The NRA 2024 rates the sector Medium-High residual ML risk on the mainland and in commercial free zones, citing cash intensity and de-risking by some financial institutions.

Lawyers, notaries, other legal professionals and independent accountants

Per Article 3(4) of CR 134/2025, lawyers, notaries, other independent legal professionals and independent accountants are DNFBPs when they prepare, conduct or execute financial transactions on behalf of customers in relation to: (a) buying and selling real estate; (b) managing customer funds; (c) managing bank, savings or securities accounts; (d) organising contributions for the establishment, operation or management of companies; or (e) establishing, operating or managing legal persons or legal arrangements, or selling or purchasing commercial entities.

Commercial gaming operators

Per Article 3(1) of CR 134/2025, commercial gaming operators are DNFBPs when they conduct a single financial transaction or several linked transactions equal to or exceeding AED 11,000, including gaming on board vessels, halls and internet gaming licensed by the General Commercial Gaming Regulatory Authority. A transaction limited to gaming chips or instruments is not a financial transaction for this purpose.

Catch-all category

Per Article 3(6) of CR 134/2025, any other businesses or professions may be brought within the DNFBP perimeter by a resolution issued by the Supervisory Authority in coordination with the National Committee.

Who supervises each DNFBP sector?

Supervisory responsibility is split across three federal authorities and two financial-free-zone authorities:

DNFBP sector Mainland & commercial FZ ADGM DIFC 
Real estate brokers and agents MoETRADFSA
Dealers in precious metals and stones (DPMS) MoETRADFSA
Company and trust service providers (TCSPs)MoETRADFSA
Independent accountants and auditorsMoETRADFSA
Lawyers, notaries and legal professionals MoJRADFSA
Commercial gaming operators GCGRANANA
Federal AML law applies Yes (FDL 10/2025)Yes (FDL 10/2025)Yes (FDL 10/2025)

ADGM AND DIFC READERS

Federal Decree-Law 10 of 2025 applies across the entire UAE, including the Abu Dhabi Global Market and the Dubai International Financial Centre. The difference is operational supervision: DNFBPs in DIFC follow DFSA rules and DNFBPs in ADGM follow FSRA rules. For ADGM-specific or DIFC-specific guidance see our jurisdiction pages.

Need help confirming whether your business is a DNFBP?

AML UAE assists professional firms across real estate, gold and jewellery, accountancy, legal practice and trust services to confirm scope and build a compliant AML programme.

Core AML obligations for DNFBPs

Every DNFBP, regardless of sector, must implement the same core obligations set by Articles 18 to 20 of Federal Decree-Law No. (10) of 2025, as expanded by Cabinet Resolution No. (134) of 2025Cabinet Resolution No. (109) of 2023 on Beneficial Owner Procedures, and the September 2025 AML/CFT Guidelines for DNFBPs. These obligations apply alongside any sector-specific rules and are summarised below. 

Cross-cutting duties under FDL 10/2025, CR 134/2025 and CR 109/2023.

1. Business-wide ML/TF/PF risk assessment and risk-based approach

2. Customer due diligence (CDD), simplified due diligence (SDD), and enhanced due diligence (EDD)

3. Beneficial owner identification, register and ongoing updates

4. Targeted financial sanctions screening against EOCN lists

5. Suspicious transaction reporting via the FIU goAML portal

7. Compliance officer appointment, staff training and independent audit

8. Record-keeping for at least five years and licence-or-registration discipline

Risk-based approach and business-wide risk assessment

Article 19(1)(a) of FDL 10/2025 requires DNFBPs to identify, understand, manage, assess, document and continuously update ML/TF/PF risks in their business, in line with the National Risk Assessment. Article 5 of CR 134/2025 obliges entities to keep this assessment current and to make it available to the Supervisory Authority on request. The Ministry of Economy and Tourism’s Implementation Guide for DNFBPs on Customer Risk-Assessment (CRA), November 2024, sets out the methodology in detail. 

Article 19(1)(b) of FDL 10/2025 requires DNFBPs to apply CDD measures and continuous monitoring, with scope set by the multiple risk dimensions and the NRA outcomes. Articles 6 to 17 of CR 134/2025 expand the rules: identification and verification of the customer, beneficial owner identification, ongoing monitoring, EDD for high-risk situations including PEPs, and SDD only where the documented risk is genuinely low. The Implementation Guide for DNFBPs on Customer Due Diligence (CDD), November 2024 and Circular No. (6) of 2025 on Risk-Based CDD with a Focus on Simplified Due Diligence guide application across DNFBP sectors. 

Beneficial owner identification and reporting

Articles 4 to 8 of Cabinet Resolution No. (109) of 2023 requires legal persons licensed or registered in the UAE (excluding wholly Government-owned companies and entities in financial free zones) to disclose their real beneficiary information to the Registrar, maintain a Real Beneficiary Register and a Partners or Shareholders Register, and notify changes within 15 days. Failures attract administrative fines under Cabinet Resolution No. (132) of 2023, with three-strike escalation that can include suspension of the commercial licence and closure of the commercial store. 

Targeted financial sanctions (TFS) screening

Article 19(1)(e) of FDL 10/2025 requires DNFBPs to implement, without delay, the instructions of the Executive Office for Control and Non-Proliferation (EOCN) and other competent authorities on TFS. Cabinet Decision No. (74) of 2020 governs the UAE Local Terrorist List and the implementation of UN Security Council resolutions on terrorism and the proliferation of weapons of mass destruction. DNFBPs must subscribe to the EOCN’s Notification Alert System (NAS) and the Automatic Reporting System (ARS), screen customers and counterparties pre-transaction and on an ongoing basis, and freeze and report matches without delay. The duty to screen and act applies before any transaction is executed. 

Suspicious transaction reporting via goAML

Article 19(1)(d) of FDL 10/2025 requires DNFBPs to establish internal policies, controls and procedures approved by senior management, applied to all branches and majority-owned subsidiaries, and reviewed continuously. Section 7 of the September 2025 AML/CFT Guidelines for DNFBPs prescribes a designated Compliance Officer, staff training and screening, group oversight, an independent audit function and senior-management responsibility, with proportionality for resource-limited DNFBPs. 

Internal policies, governance and training

Article 18(1) of FDL 10/2025 requires DNFBPs that suspect, or have reasonable grounds to suspect, that a transaction or funds are linked to ML/TF/PF to notify the FIU without delay through the goAML portal with all available data. Article 18(2) carves out a narrow professional-secrecy exception for lawyers, notaries, other legal professionals and independent legal auditors where the information was obtained under circumstances of professional secrecy. Tipping off the customer or third parties is prohibited under Article 24 and carries criminal penalties under Article 29 (imprisonment and a minimum AED 50,000 fine). 

Record-keeping and licensing

Article 19(1)(f) of FDL 10/2025 obliges DNFBPs to retain transaction records, CDD documentation and supporting data and ensure their immediate availability to competent authorities. Section 11 of the September 2025 DNFBP Guidelines confirms a minimum five-year retention period. Article 20 of FDL 10/2025 prohibits any natural or legal person from carrying on DNFBP activities without a licence, registration or enrolment from the competent authority or relevant Supervisory Authority; breach is a criminal offence under Article 32, punishable by imprisonment and a fine of AED 200,000 to AED 10,000,000.

Penalties for non-compliance

Article 17 of FDL 10/2025 empowers Supervisory Authorities to impose administrative penalties on DNFBPs ranging from a written warning to a fine of AED 10,000 to AED 5,000,000 per violation, restriction of board powers, suspension of personnel, suspension or restriction of activity and revocation of licence. Recurrence within one year may attract incremental fines, and penalties may be published. The Unified List of Violations and Administrative Fines under Cabinet Resolution No. (71) of 2024 sets the violation-by-violation tariff for DNFBPs supervised by MoET and MoJ. Criminal penalties under Articles 26, 28, 29, 32, 33 and 35 of FDL 10/2025 apply on top, with imprisonment and fines from AED 10,000 up to AED 100,000,000 for legal persons convicted of ML, TF or PF. 

Build a defensible AML programme that meets all eight core obligations

Our team designs and operates end-to-end AML programmes for UAE DNFBPs, from CDD and goAML setup to staff training, risk assessment and supervisory inspection readiness.

AML Legal Framework Applicable to DNFBPs in UAE

The legal and regulatory framework that governs DNFBPs in the UAE has four layers: (1) the federal AML statute and its executive regulations; (2) overarching guidance issued by the Executive Office for Control and Non-Proliferation (EOCN), the FIU and the Anti-Money Laundering Department of the Ministry of Foreign Affairs and International Cooperation; (3) the National Risk Assessment and supervisory risk reports; and (4) DNFBP-wide guidance and circulars issued by the Ministry of Economy and Tourism (MoET).

Four layers, working from federal statute down to DNFBP-wide guidance.

1. Federal AML laws and Executive Regulations applicable to DNFBPs in UAE

2. Overarching AML guidance applicable to all reporting entities

3. National Risk Assessment, SRA and other important guidelines for DNFBPs

4. DNFBP-wide guidance applicable across all DNFBP sectors

Federal AML Laws and Executive Regulations Applicable to DNFBPs in UAE

The federal layer sets the binding legal duties for every DNFBP. There are seven federal instruments to know.

The statutes and cabinet resolutions every DNFBP compliance officer should keep at hand.

Seven federal instruments that bind DNFBPs

1. FDL 10/2025 — federal AML/CFT/CPF statute (replacing FDL 20/2018)

2. FL 7/2014 — Combating Terrorism Crimes

3. CR 134/2025 — Executive Regulations of FDL 10/2025

4. CD 74/2020 - Terrorist Lists and UNSCR implementation

5. CR 71/2024 — Unified Violations List for MoJ/MoE-supervised DNFBPs

6. CR 109/2023 — Beneficial Owner Procedures

7. CR 132/2023 — Administrative Penalties under CR 109/2023

1. Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing

FDL 10/2025 is the supreme AML statute in the UAE. It defines DNFBPs (Article 1 read with Article 3 of CR 134/2025), prescribes core obligations (Articles 18 to 20), grants Supervisory Authorities supervisory and inspection powers (Article 16), sets administrative penalties up to AED 5,000,000 per violation (Article 17), and prescribes criminal penalties for ML, TF and PF (Articles 26 to 35). Article 41 expressly repeals Federal Decree-Law No. (20) of 2018; existing executive regulations, resolutions and circulars issued under FDL 20/2018 remain effective only insofar as they do not conflict with FDL 10/2025, until superseded. 

2. Federal Law No. (7) of 2014 Combating Terrorism Crimes

FL 7/2014 defines terrorist acts, terrorist purposes, terrorist organisations and terrorist offences, and is the predicate criminal regime cross-referenced by FDL 10/2025 for the financing of terrorism. DNFBPs encountering customers, transactions or counterparties on UAE Local Terrorist Lists must apply CD 74/2020 measures and report immediately to the FIU.

3. Cabinet Resolution No. (134) of 2025 Concerning the Executive Regulations of Federal Decree-Law No. (10) of 2025

CR 134/2025 is the operative rulebook. Article 3 designates the six DNFBP categories and the gaming-AED 11,000 and DPMS-AED 55,000 thresholds. Articles 5 to 17 set the rules for risk assessment, CDD, beneficial owner identification, EDD, PEPs, ongoing monitoring, reliance on third parties, and the conditions for SDD. Articles 18 to 32 cover STR procedures, group-wide AML programmes, training, audit, record-keeping and the conditions on TFS implementation.

4. Cabinet Decision No. (74) of 2020 Regarding Terrorism Lists Regulation and Implementation of UN Security Council Resolutions

CD 74/2020 governs the UAE Local Terrorist List and the operational implementation of UNSCR 1267 / 1989, 1988, 1718 (DPRK) and other targeted sanctions resolutions. DNFBPs must screen against the consolidated lists communicated by the EOCN, freeze without delay any matched funds, and report matches to the EOCN and the FIU.

5. Cabinet Resolution No. (71) of 2024 Regulating Violations and Administrative Penalties for DNFBPs Subject to MoJ and MoE Supervision

CR 71/2024 is the Unified List of Violations and Administrative Fines for DNFBPs supervised by the Ministry of Justice and the Ministry of Economy. It replaces Cabinet Resolution No. (16) of 2021. The schedule sets specific fine ranges for failures of internal policies, CDD, beneficial owner procedures, sanctions screening, STR filing and record-keeping, with the right to double a fine on repeat violation (Article 5(2)).

6. Cabinet Resolution No. (109) of 2023 On Regulating the Beneficial Owner Procedures

CR 109/2023 sets the federal beneficial owner regime that applies to legal persons licensed or registered in the UAE (excluding wholly Government-owned companies and entities in financial free zones). Article 5 sets the test for who is a real beneficiary (25 percent ownership or ultimate effective control) and Articles 6 to 8 prescribe the Real Beneficiary Register, the Partners or Shareholders Register and the obligation to notify changes within 15 days.

7. Cabinet Resolution No. (132) of 2023 Concerning Administrative Penalties under CR 109/2023

CR 132/2023 attaches a tariff of administrative fines to violations of CR 109/2023, with an annexed schedule of fine amounts and a three-strike escalation that empowers the Registrar to suspend the commercial licence and close the commercial store of a violating legal person until the violation is corrected and the fine paid (Article 3).

AML Guidance Applicable to All Reporting Entities

These EOCN, FIU and AMLD publications are written for all reporting entities (FIs, DNFBPs and VASPs) and bind DNFBPs as a matter of supervisory expectation. There are 13 documents to be aware of.

Cross-sector EOCN, FIU and AMLD instruments that DNFBPs must apply.

Thirteen overarching guidance publications

1. EOCN TFS Guidance for FIs, DNFBPs, VASPs (March 2026)

2. FIU Strategic Analysis Report on Terrorist Financing (May 2025)

3. Strategic Review on TFS Case Studies (April 2024)

4. PF Institutional Risk Assessment Guidance (December 2023)

5. Terrorist and Proliferation Financing Red Flags Guidance (December 2023)

6. Joint Guidance on Combating Unlicensed VA Providers (November 2023)

7. Counter Proliferation Financing Guidance for FIs/DNFBPs/VASPs (November 2022)

8. Joint Guidance on Satisfactory and Unsatisfactory Practice (June 2021)

9. Typologies on TFS Circumvention (March 2021)

10. Guideline on Grievance Procedures

11. Online Grievance System User Guide

12. Combating Proliferation Financing and Sanctions Evasion

13. Simple Guide to Subscribe to the EOCN NAS

1. Guidance on Targeted Financial Sanctions for FIs, DNFBPs and VASPs (EOCN, last amended March 2026)

The EOCN’s TFS Guidance is the principal operational manual for sanctions compliance. It prescribes the duty to subscribe to the NAS, the workflow for screening and freezing, the immediate reporting obligation to the EOCN and the FIU, treatment of partial matches and false positives, communication with customers under the no-tipping-off rule, and unfreezing on de-listing. DNFBPs must align internal policies, screening tools and CDD records to this guidance

2. FIU Strategic Analysis Report on Terrorist Financing — May 2025

The UAEFIU’s Strategic Analysis Report on terrorist financing typologies and facilitators sets out current TF typologies, indicator clusters and case observations relevant to UAE DNFBPs. It informs DNFBP risk-assessment scenarios and STR-quality expectations.

3. Strategic Review on Targeted Financial Sanctions Case Studies (EOCN, April 2024)

The Strategic Review for the private sector (IEC-SR 01 22v2) presents anonymised TFS case studies covering 2019 to 2021, drawing common breakdown points and supervisory expectations. DNFBPs should benchmark internal screening practice against the case studies and self-assess against satisfactory and unsatisfactory practice indicators.

4. Proliferation Finance Institutional Risk Assessment Guidance for FIs, DNFBPs and VASPs (EOCN, December 2023)

This guidance walks DNFBPs through the steps of an institutional PF risk assessment: identifying inherent PF risk (customer, geography, product, channel), assessing residual risk after mitigation, documenting controls and reporting findings. It supports the obligations under FDL 10/2025 Article 19(1)(a) and CR 134/2025 Article 5.

5. Terrorist and Proliferation Financing Red Flags Guidance (EOCN, updated December 2023)

This document lists indicators for TF and PF specific to the UAE economy, including red flags relevant to DNFBP touchpoints such as cash-intensive trade, shell companies, dual-use goods and high-risk geographies. It is the reference list for tagging customer behaviours during CDD and ongoing monitoring.

6. Joint Guidance on Combating the Use of Unlicensed Virtual Asset Providers in the UAE (CBUAE/EOCN/FIU, November 2023)

Although directed at FIs and VASPs, this guidance binds DNFBPs that interact with virtual-asset payments. It explains how to detect interactions with unlicensed VA providers, the duty to refuse such transactions, and the STR-filing expectations.

7. Guidance on Counter Proliferation Financing for FIs, DNFBPs and VASPs (EOCN, November 2022)

The original CPF Guidance (PF.01.22) sets the foundational definitions of WMD, PF and dual-use goods and prescribes minimum CPF measures, including BO transparency, sanctions screening and trade-financing red flags.

8. Joint Guidance on Satisfactory and Unsatisfactory Practice (June 2021)

Issued jointly by the AML/CFT Supervisory Authorities, this guidance illustrates supervisory expectations through paired examples of satisfactory and unsatisfactory practice across CDD, screening, STR filing, governance and training. DNFBPs benefit by mapping internal procedures against the satisfactory column.

9. Typologies on the Circumvention of Targeted Sanctions against Terrorism and the Proliferation of Weapons of Mass Destruction (March 2021)

The TFS Typology Paper documents common circumvention techniques, including the use of front companies, nominee shareholders and trade-based laundering. DNFBPs use it to design typology-based monitoring rules and EDD checklists.

10. Guideline on Grievance Procedures (EOCN)

The Guideline on Grievance Procedures sets out the channel and timing for designated persons or third parties to challenge a TFS designation or sanctions match. DNFBPs should be ready to assist customers procedurally without breaching the no-tipping-off rules.

11. Online Grievance System User Guide (EOCN)

The User Guide is the operational manual for filing a TFS grievance through the EOCN’s online portal. DNFBPs should retain the link in their compliance manuals for customers who wish to challenge a designation.

12. Combating Proliferation Financing and Sanctions Evasion (EOCN)

This awareness publication summarises WMD definitions, PF mechanics and sanctions-evasion techniques. It is widely used in DNFBP staff training programmes.

13. Simple Guide to Subscribe to the EOCN Notification Alert System (NAS)

The Simple Guide explains how to register for the EOCN NAS to receive UN and Local list updates via email. NAS registration is the front-line operational requirement for sanctions compliance and is the practical means of complying with the immediacy duty under FDL 10/2025 Article 19(1)(e).

NRA, SRA, and Other Important Guidelines Applicable to DNFBPs Sector

This layer is the national risk evidence base. DNFBPs must align their business-wide risk assessments with NRA findings.

UAE ML/TF National Risk Assessment — 2024

The UAE National ML/TF Risk Assessment 2024 (issued by the National Anti-Money Laundering and Combatting Financing of Terrorism Committee) sets the benchmark for residual ML/TF/PF risk by sector. For DNFBPs, the NRA assesses real estate as High residual ML risk, DPMS as Medium-High, TCSPs as Medium, accounting and audit as Medium-Low, and the legal-professionals sector as Medium-Low. It also notes the establishment of the General Commercial Gaming Regulatory Authority (GCGRA) in September 2023. Every DNFBP must read the NRA findings into its own business-wide risk assessment, as required by Circular No. (4) of 2025 and the November 2024 Implementation Guide on CRA.

DNFBP Sector-Specific Guidance Applicable Across All DNFBP Sectors

These ten MoET publications form the DNFBP-wide baseline that every DNFBP, regardless of sector, must observe alongside any sector-specific instruments.

Ten DNFBP-wide MoET publications

MoET circulars and implementation guides that supplement the federal statute.

1. Circular No. (1) of 2026 — High-Risk Country List update

2. AML/CFT Guidelines for DNFBPs (September 2025)

3. Circular No. (3) of 2025 — Sanctions and terrorist list screening

4. Circular No. (4) of 2025 — Risk-Based CDD with focus on SDD

5. Circular No. (6) of 2025 — Sanctions and terrorist list screening ​

6. Circular No. (7) of 2025 — Re-imposition of UN Iran sanctions (UNSCR 1737)

7. Circular No. (8) of 2025 — High-Risk Country List update

8. Implementation Guide on CRA (November 2024)

10. Circular No. (2) of 2022 — TFS under UNSCRs 1718 and 2231

1. Circular No. (1) of 2026 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures

Issued 11 March 2026 (MOET/AML/001/2026), this circular updates the High-Risk Country and Increased-Monitoring lists used by DNFBPs in CDD and EDD decision-making, and prescribes the related counter-measures. DNFBPs must update screening rules and country-risk matrices accordingly.

2. AML/CFT Guidelines for Designated Non-Financial Businesses and Professions — September 2025

The September 2025 DNFBP Guidelines (76 pages) are the consolidated MoET handbook for DNFBPs. They cover the legislative and regulatory framework, statutory obligations, governance, risk-based approach, business-wide risk assessment, CDD/SDD/EDD, ongoing monitoring, STR procedures, record-keeping and the supervisory map (MoET, MoJ, DFSA, FSRA). The Guidelines apply alongside any sector-specific MoET supplemental guidance.

3. Circular No. (3) of 2025 on Emphasising the Importance of Sanctions and Terrorist List Screening

Issued 19 March 2025 (MOEC/AML/003/2025), this circular re-emphasises the duty to screen all customers and counterparties against UN, UAE and other applicable sanctions lists in real time, with documented evidence of screening at onboarding and on an ongoing basis.

4. Circular No. (4) of 2025 on Understanding the Importance of the UAE 2024 National Risk Assessment

Issued 9 June 2025 (MOEC/AML/004/2025), this circular tells DNFBPs how to align internal business-wide risk assessments with the 2024 NRA findings. It is supplemented by the MoE’s NRA 2024 Practical Guide for DNFBPs.

5. Circular No. (6) of 2025 on Emphasising the Implementation of Risk-Based Customer Due Diligence Measures (with a Focus on Simplified Due Diligence)

Issued 5 August 2025 (MOET/AML/6/2025), this circular reinforces the conditions on SDD: SDD is permitted only where the documented risk is genuinely low and may not be applied where TFS, sanctions or higher-risk indicators are present. It also reaffirms that EDD is mandatory for high-risk customers, PEPs and high-risk jurisdictions.

6. Circular No. (7) of 2025 Regarding the Re-Imposition of United Nations Sanctions Related to Iran Pursuant to UNSCR 1737 (2006) and Subsequent Resolutions

Issued 19 December 2025 (MOET/AML/007/2025), this circular communicates the re-imposition of UN sanctions related to Iran, with operational guidance on screening, freezing and reporting. DNFBPs must reassess Iran-linked customers, beneficial owners and counterparties immediately.

7. Circular No. (8) of 2025 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures

Issued 25 December 2025 (MOET/AML/008/2025), this circular updates the high-risk country list and the increased-monitoring list communicated to DNFBPs, and prescribes the related counter-measures to be applied in CDD and EDD.

8. Implementation Guide for DNFBPs on Customer Risk Assessment (CRA) — November 2024

This MoE Implementation Guide on CRA (Version 0.3.1.1) sets the methodology for assessing client, geographic, product, channel and transaction risk. It is the practical companion to FDL 10/2025 Article 19(1)(a) and CR 134/2025 Article 5, and must be read with the September 2025 DNFBP Guidelines.

9. Implementation Guide for DNFBPs on Customer Due Diligence (CDD) — November 2024

This MoE Implementation Guide on CDD (Version 0.3.2.1) explains how DNFBPs apply CDD, SDD and EDD measures, including the KYC stage, identification and verification of natural and legal persons, identification of beneficial owners and ongoing monitoring. It supports CR 134/2025 Articles 6 to 17.

10. Circular No. (2) of 2022 regarding Implementation of Targeted Financial Sanctions (TFS) on UNSCRs 1718 (2006) and 2231 (2015)

Issued 31 March 2022, this circular sets the TFS implementation rules for the UNSCR 1718 (DPRK) and UNSCR 2231 (Iran nuclear) regimes. Although issued under FDL 20/2018, it remains in force pursuant to the saving in Article 41(3) of FDL 10/2025 insofar as it does not conflict with FDL 10/2025.

Map your DNFBP obligations to the right circular and guideline

AML UAE maintains a current matrix of every DNFBP obligation against its source instrument and its supervisor. We translate this into your firm's policies, procedures and inspection-readiness pack.

DNFBP Sector Guides

Each DNFBP sector has its own dedicated guide on amluae.com. The cards below summarise the scope and supervisor; click through for the full sector article.

One card per DNFBP sector, with the supervising authority noted.

1. TCSPs — supervised by MoET

2. Accountants and auditors — supervised by MoET

3. Lawyers, notaries and legal professionals — supervised by MoJ

4. Real estate brokers and agents - supervised by MoET

5. Dealers in precious metals and stones — supervised by MoET

6. Commercial gaming operators — supervised by GCGRA

MoET Circular No. (4) of 2021

Supervisor: Ministry of Economy and Tourism (MoET). Company and trust service providers fall within DNFBPs under Article 3(5) of CR 134/2025 when they incorporate legal persons, act as directors or secretaries, provide a registered office, act as trustees of an express trust or act as nominee shareholders for customers.

Read the full guide: AML regulations for TCSPs in UAE.

AML Regulations for Accountants and Auditors in UAE

Supervisor: Ministry of Economy and Tourism (MoET). Independent accountants and auditors are DNFBPs under Article 3(4) of CR 134/2025 when they prepare, conduct or execute financial transactions for a customer in relation to real estate, fund management, account management, company contributions or the establishment, operation or sale of legal persons.

Read the full guide: AML regulations for accountants and auditors in UAE.

AML Regulations for Lawyers, Notaries, and Other Legal Professionals in UAE

Supervisor: Ministry of Justice (MoJ). Lawyers, notaries and other independent legal professionals are DNFBPs under Article 3(4) of CR 134/2025 for the same five trigger activities, with a narrow professional-secrecy carve-out from STR filing under Article 18(2) of FDL 10/2025; MoJ supervises this sector on the mainland.

Read the full guide: AML regulations for lawyers, notaries and legal professionals in UAE.

AML Regulations for Real Estate Agents and Brokers in UAE

Supervisor: Ministry of Economy and Tourism (MoET). Real estate brokers and agents are DNFBPs under Article 3(2) of CR 134/2025 when they conclude transactions or settlements for a customer in relation to the purchase or sale of real estate; the NRA 2024 rates this sector High residual ML risk on the mainland and in commercial free zones.

Read the full guide: AML regulations for real estate agents in UAE.

AML Regulations for Dealers in Precious Metals and Stones (DPMS) in UAE

Supervisor: Ministry of Economy and Tourism (MoET). Dealers in valuable metals and precious stones are DNFBPs under Article 3(3) of CR 134/2025 when carrying out single or linked cash transactions equal to or exceeding AED 55,000; the NRA 2024 rates the sector Medium-High residual ML risk.

Read the full guide: AML regulations for DPMS in UAE.

AML Regulations for Commercial Gaming Operators in UAE

Supervisor: General Commercial Gaming Regulatory Authority (GCGRA). Commercial gaming operators are DNFBPs under Article 3(1) of CR 134/2025 for single or linked financial transactions equal to or exceeding AED 11,000 (gaming chips alone do not count); GCGRA was established in September 2023 and licenses, regulates and supervises commercial gaming activity in the UAE.

Read the full guide: AML regulations for commercial gaming operators in UAE.

Conclusion

AML regulations for DNFBPs in UAE are anchored in a single federal statute, FDL 10/2025, supplemented by Cabinet Resolution 134/2025 and a layered set of overarching guidance, the National Risk Assessment, and DNFBP-wide MoET circulars and implementation guides. Six DNFBP categories are in scope, supervised by MoET (real estate, DPMS, TCSPs, accountants and auditors), MoJ (lawyers, notaries and other legal professionals) or GCGRA (commercial gaming operators). The core AML obligations, business-wide risk assessment, CDD/SDD/EDD, beneficial owner identification, sanctions screening, goAML reporting, governance, training and record-keeping, are the same across sectors; the sector guides linked below detail how each obligation translates into sector practice.

THE SINGLE LEGAL TEST FOR DNFBP SCOPE

If your business carries out one or more activities listed in Article 3 of Cabinet Resolution 134 of 2025, you are a DNFBP and the full federal AML framework applies. Free-zone status does not exclude you, although DIFC and ADGM businesses are operationally supervised by DFSA and ADGM RA respectively.

FAQs

What are DNFBPs under the UAE AML law?

 A DNFBP is a Designated Non-Financial Business or Profession listed in Article 3 of Cabinet Resolution No. (134) of 2025 (the Executive Regulations of FDL 10/2025). Six categories qualify: commercial gaming operators (AED 11,000 threshold); real estate brokers and agents; dealers in valuable metals and precious stones (AED 55,000 cash threshold); lawyers, notaries, other independent legal professionals and independent accountants when carrying out specified financial transactions; company and trust service providers (TCSPs); and any other category added by Supervisory Authority resolution.

Three federal authorities supervise DNFBPs on the mainland and in commercial free zones: the Ministry of Economy and Tourism (MoET) supervises accountants, auditors, TCSPs, dealers in precious metals and stones and real estate brokers and agents; the Ministry of Justice (MoJ) supervises lawyers, notaries and other legal professionals; and the General Commercial Gaming Regulatory Authority (GCGRA) supervises commercial gaming operators. The Dubai Financial Services Authority (DFSA) and the Registration Authority (RA) supervise DNFBPs operating in the DIFC and ADGM, respectively.

 Yes for the federal layer. Every DNFBP is bound by FDL 10/2025, CR 134/2025 and the same DNFBP-wide MoET guidance and circulars. The core obligations, business-wide risk assessment, CDD, beneficial owner identification, sanctions screening, goAML reporting, internal policies, training and record-keeping, are the same. Sector-specific MoET supplemental guidance and the September 2025 DNFBP Guidelines layer on top, calibrated to each sector’s typical customer types and risk drivers.

 All six DNFBP categories warrant a dedicated guide because their CDD trigger activities, customer types and risk profiles diverge. amluae.com publishes individual sector guides for TCSPs, accountants and auditors, lawyers/notaries/legal professionals, real estate agents and brokers, dealers in precious metals and stones, and commercial gaming operators. Each guide explains the sector-specific MoET or MoJ supplemental guidance, registration, goAML enrolment and the typical inspection focus.

Federal Decree-Law No. (10) of 2025 applies across the entire UAE, including the Dubai International Financial Centre and the Abu Dhabi Global Market. The federal AML statute therefore binds DNFBPs in DIFC and ADGM. The difference is operational: in DIFC, the Dubai Financial Services Authority (DFSA) supervises and applies its own AML Module; in ADGM, the Regulatory Authority (RA) supervises and applies its AML and Sanctions Rulebook. For full operational guidance, see our dedicated ADGM and DIFC pages.

Under Article 17(1)(b) of Federal Decree-Law No. (10) of 2025, a Supervisory Authority can impose an administrative fine of not less than AED 10,000 and not exceeding AED 5,000,000 for each violation, alongside warnings, restriction of board powers, suspension of personnel, suspension of activity and revocation of licence. Repeat violations within one year may attract incremental fines. The Unified List under Cabinet Resolution No. (71) of 2024 sets the violation-by-violation tariff for MoJ- and MoE-supervised DNFBPs, and Cabinet Resolution No. (132) of 2023 sets the BO-specific tariff with a three-strike escalation that can include suspension of the commercial licence.

Talk to AML UAE about your DNFBP obligations

Whether you are a real estate broker, gold dealer, accounting firm, law firm, TCSP or licensed gaming operator, we will help you build, run and defend a compliant AML programme.

Legal disclaimer: This guide is for general information only and reflects publicly available UAE law and guidance current as of 18 April 2026. It is not legal advice. AML/CFT/CPF obligations depend on specific facts and the supervisory authority for your business. Consult AML UAE for tailored advice.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

AML Regulations for Accountants and Auditors in UAE

Federal AML Laws and Executive Regulations Applicable to Accountants and Auditors

Blogs

Last Updated: 04/17/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Key Highlights

  • Accountants and auditors become DNFBPs when they carry out covered activities under Article 3 of Cabinet Decision No. 134 of 2025, such as real estate transactions, managing client funds or securities, managing bank, savings or securities accounts, organising contributions for the creation or management of companies, and creating, operating or managing legal persons or arrangements.
  • The Ministry of Economy and Tourism (MoET) is the designated AML/CFT supervisory authority for accountants and auditors operating in the UAE mainland and commercial free zones.
  • Federal Decree-Law No. 10 of 2025 (replacing Federal Decree-Law No. 20 of 2018) and Cabinet Resolution No. 134 of 2025 set the baseline AML/CFT obligations; MoET has issued the DNFBP Guidelines of September 2025 and the Supplemental Guidance for Independent Accountants and Auditors (IAA) of April 2026 to explain sector expectations.
  • The 2024 UAE National Risk Assessment flags audit and accountancy services as exposed to trade-based money laundering, shell company abuse and sanctions evasion risks.

Independent accountants and auditors in the UAE become subject to anti-money laundering (AML) obligations when they prepare for or carry out specified financial transactions for clients. They are designated non-financial businesses and professions (DNFBPs) supervised by the Ministry of Economy and Tourism (MoET). This guide covers the AML regulations for accountants in UAE mainland and commercial free zones, including the Federal Decree-Law No. (10) of 2025 framework, sector-specific MoET guidance, and practical compliance expectations.

At a Glance: Accountants, Auditors and AML Regulations in UAE

Supervisory authority 

Ministry of Economy and Tourism (MoET) for mainland and commercial free zones 

Primary federal law 

Federal Decree-Law No. (10) of 2025 on AML/CFT/PF 

Executive regulation 

Cabinet Resolution No. (134) of 2025 

Beneficial ownership 

Cabinet Decision No. (109) of 2023 

Primary sector guidance 

MoET AML/CFT Guidelines for DNFBPs (September 2025) 

Accountant-specific guidance 

MoET Circular No. (3) of 2021 and Supplemental Guidance for Independent Accountants and Auditors (April 2026) 

STR filing channel 

UAE FIU goAML portal 

NRA 2024 risk rating 

Medium-low inherent vulnerability for independent accountants and auditors 

ADGM accountants 

Supervised by RA under the AML and Sanctions Rulebook 

DIFC accountants 

Supervised by DFSA under the AML Module 

When is an accountant or auditor a DNFBP?

An accountant or auditor becomes a designated non-financial business or profession (DNFBP) under UAE law when they prepare for or carry out financial transactions on behalf of clients, such as buying or selling real estate, managing client money or securities, managing bank accounts, organising contributions for the creation of companies, or creating and managing legal persons or arrangements.

Independent accountants and auditors occupy a critical gatekeeper position in the UAE anti-money laundering (AML) and counter-financing of terrorism (CFT) framework. The moment an accountant or auditor prepares for or carries out specified financial transactions on behalf of a client, the firm becomes a reporting entity for AML compliance for audit firms UAE purposes.

The UAE has placed independent accountants and auditors within the DNFBP category under Federal Decree-Law No. (10) of 2025, Cabinet Resolution No. (134) of 2025, and a layered suite of sector-specific guidance and circulars. The 2024 National Risk Assessment rates accountants and auditors as a medium-low risk DNFBP sector while acknowledging specific vulnerabilities tied to the profession’s gatekeeper role in financial transactions. DNFBP-wide rules set the baseline; sector-specific guidance layers on top.

This article covers the AML/CFT framework applicable to accountants and auditors operating in the UAE mainland and commercial free zones supervised by the MoET. For the broader DNFBP pillar, see our AML Regulations for DNFBPs in UAE guide. For the primary federal legislation, visit our guide to AML laws in UAE and the dedicated federal AML laws and executive regulations page. If your firm operates in a financial free zone, refer to AML Regulations in ADGM or AML Regulations in DIFC respectively.

Scope of this page

This page covers accountants and auditors supervised by MoET in UAE mainland and commercial free zones. For accountants in ADGM and DIFC, refer to the dedicated jurisdiction pages. Lawyers, notaries, trust and corporate service providers have their own sector pages and are only referenced here where covered activities overlap.

Who Counts as an Accountant or Auditor for AML Purposes in the UAE?

Not every accounting professional is a DNFBP. Under Federal Decree-Law No. (10) of 2025 and its Executive Regulations (Cabinet Resolution No. (134) of 2025), accountants and auditors are classified as DNFBPs only when they prepare for or carry out specific financial transactions for their clients.

The covered activities that bring an accountant or auditor into the AML perimeter are the following five transactions, mirrored from the Financial Action Task Force (FATF) definition:

1. Real Estate Transactions

Buying and selling real estate on behalf of a client, including structuring, escrow, or payment handling.

2. Managing Client Money

Managing client money, securities, or other assets held in trust, on account, or under power of attorney.

3. Bank and Savings Accounts

Managing bank, savings, or securities accounts on behalf of a client, including signatory or authorised-user arrangements.

4. Company Contributions

Organising contributions for the creation, operation, or management of companies, including capital raising and share issuance.

5. Legal Persons and Arrangements

Creating, operating, or managing legal persons or legal arrangements, including buying and selling business entities and trust structures.

Key legal test:

If an independent accountant, external auditor or audit firm performs one or more of these covered activities for a client in the ordinary course of business, the full AML/CFT compliance regime under Federal Decree-Law No. 10 of 2025 and its Executive Regulations applies.

These covered activities are specified in Federal Decree-Law No. (10) of 2025 and Cabinet Resolution No. (134) of 2025, as reflected in the AML/CFT Guidelines for DNFBPs (September 2025) published by the Ministry of Economy and Tourism (MoET), and align with FATF Recommendation 22. It is the nature of the financial transaction being prepared or carried out that determines whether AML obligations apply for a given engagement.

The Supplemental Guidance for Independent Accountants and Auditors (April 2026) further clarifies the scope by explaining how the auditing function intersects with AML obligations. Auditors who, in the course of their professional work, encounter indicators of money laundering, terrorist financing, or other financial crimes are expected to take appropriate action, including filing suspicious transaction reports (STRs) via the goAML portal operated by the UAE Financial Intelligence Unit. This is an overlay obligation: even where a routine audit engagement places the firm inside the DNFBP perimeter and the statutory reporting duty under Federal Decree-Law No. (10) of 2025 is triggered.

Engagement-level analysis is therefore essential. Firms should map each client relationship and engagement type to the covered-activity list, document the reasoning, and refresh the assessment whenever the scope of work changes. Cross-link this analysis with the lawyers, notaries and legal professionals page where accountant-lawyer joint engagements on corporate structuring or real estate are common.

AML Supervisory Authority for Accountants and Auditors in UAE

The Ministry of Economy and Tourism (MoET) is the designated AML/CFT supervisory authority for independent accountants and auditors operating in the mainland UAE and in commercial free zones (excluding ADGM and DIFC). MoET is responsible for day-to-day supervision, desk-based reviews, on-site inspections, thematic reviews, and enforcement action.

MoET supervises four DNFBP categories: real estate agents and brokers, dealers in precious metals and stones (DPMS), independent accountants and auditors, and trust and corporate service providers (TCSPs). For a consolidated view of all supervisors, see our AML supervisory authorities in UAE page.

During inspections, MoET follows a structured process. It sends a formal notification letter; conducts the on-site visit; completes structured inspection checklists covering governance, business-wide risk assessment, CRA, CDD, sanctions screening, STR filing, record keeping, and training; and issues a findings report. Firms are expected to remediate any identified deficiencies within the timelines set by the Ministry. Failure to do so may result in administrative sanctions under Cabinet Resolution No. (71) of 2024, which can include written warnings, fines up to AED 5 million, licence suspension, or licence revocation.

Jurisdictional comparison at a glance

Federal Decree-Law No. (10) of 2025 applies across the entire UAE. The operational supervisor, rulebook, and penalty regime differ by jurisdiction.

DimensionMainland & Commercial Free Zone ADGM DIFC 
Federal Decree-Law No. (10) of 2025 applies Yes YesYes 
Primary supervisorMinistry of Economy and Tourism (MoET)Registration Authority (RA)Dubai Financial Services Authority (DFSA)
Operational rulebookMoET AML/CFT Guidelines for DNFBPs (September 2025) and MoET circularsFSRA AML and Sanctions Rulebook (AML)DFSA AML, CTF and Sanctions Module
Reporting channelgoAML operated by the UAE Financial Intelligence UnitgoAML operated by the UAE Financial Intelligence UnitgoAML operated by the UAE Financial Intelligence Unit
Scope of this guide Covered in full on this pageRefer to AML Regulations in ADGMRefer to AML Regulations in DIFC

Unsure whether an engagement makes your firm a DNFBP?

AML UAE helps accounting and audit firms triage engagements, scope covered-activity exposure, and build a proportionate AML/CFT compliance programme aligned with MoET expectations.

AML Regulations Applicable to Accountants and Auditors in UAE

The AML/CFT regulatory framework applicable to accountants and auditors in the UAE is layered. At its foundation sits a suite of federal laws and executive regulations that apply to all reporting entities. Above that foundation sit cross-sector guidance instruments applicable to all DNFBPs, and finally sector-specific guidance directed at the accounting and auditing profession.

The UAE AML/CFT Regulatory Framework for Accountants and Auditors: Three Layers

Each layer builds on the one below it. All three apply simultaneously to accountants and auditors in UAE mainland and commercial free zones.

LAYER 3 (TOP)

Accountant and Auditor Sector-Specific Guidance

MoET Circular No. (3) of 2021 and Supplemental Guidance for Independent Accountants and Auditors (April 2026). Contains obligations calibrated to the accounting and audit profession, including scope of AML work, red flag indicators, and STR filing from an audit lens.

LAYER 2 (MIDDLE)

DNFBP Cross-Sector Guidance

MoET AML/CFT Guidelines for DNFBPs (September 2025), numbered MoET circulars of 2025-2026, CRA and CDD Implementation Guides (November 2024). Shared across every MoET-supervised DNFBP including real estate agents, dealers in precious metals and stones, accountants and auditors, and trust and corporate service providers.

LAYER 1 (FOUNDATION)

Federal Laws and Executive Regulations

Federal Decree-Law No. (10) of 2025 on AML/CFT/PF, Cabinet Resolution No. (134) of 2025, Federal Law No. (7) of 2014 on Combating Terrorism Crimes, Cabinet Decision No. (74) of 2020, Cabinet Decision No. (109) of 2023, and related administrative penalty resolutions. Apply to every reporting entity across the UAE, including ADGM and DIFC.

Federal AML Laws and Executive Regulations Applicable to Accountants and Auditors

Seven federal legislative instruments form the backbone of every accountant’s and auditor’s compliance programme. Non-compliance with any of these can trigger criminal prosecution, administrative fines, licence suspension, or deregistration. These instruments are deliberately broad: they apply to every natural and legal person that is a reporting entity, including MoET-supervised accountants and auditors.

1. Federal Decree-Law No. (10) of 2025

Primary AML/CFT/CPF statute. Confirms accountant/auditor DNFBP status.

2. Cabinet Resolution No. (134) of 2025

Executive regulations. Operational reference for CDD, BRA, record keeping.

3. Cabinet Resolution No. (71) of 2024

Administrative penalties under MoJ/MoE, up to AED 5 million.

4. Cabinet Decision No. (109) of 2023

Beneficial owner identification and UBO register obligations.

5. Cabinet Resolution No. (132) of 2023

Administrative penalties for beneficial ownership violations.

6. Cabinet Decision No. (74) of 2020

Terrorism lists, UNSCRs, WMD proliferation countermeasures.

7. Federal Law No. (7) of 2014

Criminal combating of terrorism crimes and terrorist financing.

1. Federal Decree-Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing

Federal Decree-Law No. (10) of 2025 is the primary AML/CFT/CPF statute in the UAE. It replaced and consolidated the earlier Federal Decree-Law No. 20 of 2018 and its amendments. The law defines predicate offences for money laundering, classifies accountants and auditors among the DNFBPs subject to AML/CFT obligations, and establishes the core compliance duties: customer due diligence (CDD), record keeping, suspicious transaction reporting, internal controls, staff training, and the appointment of an anti-money laundering compliance officer (MLCO). The law requires every accountant and auditor performing covered activities to verify the identity of customers and beneficial owners before establishing a business relationship or carrying out an occasional transaction above the prescribed threshold.

2. Cabinet Resolution No. (134) of 2025 Concerning the Executive Regulations of Federal Decree-Law No. (10) of 2025

Cabinet Resolution No. (134) of 2025 is the executive regulation that operationalises the primary AML/CFT law. It sets out the practical requirements for CDD, including the specific documents that must be collected for natural persons, legal persons, and legal arrangements. It defines the triggers for enhanced due diligence (EDD) and the conditions under which simplified due diligence (SDD) may be applied. For accountants and auditors, the resolution prescribes the requirements of a business-wide risk assessment, the frequency of customer file reviews, the qualifications and reporting line of the compliance officer, and the training requirements for staff performing covered activities. It also requires that all CDD documentation, transaction records, and risk assessments be retained for a minimum of five years after the end of the business relationship.

3. Cabinet Resolution No. (71) of 2024 Regulating Violations, Administrative Penalties Imposed on Violators of Measures for Confronting Money Laundering and Combating Financing of Terrorism Subject to the Control of the Ministry of Justice and the Ministry of Economy

Cabinet Resolution No. (71) of 2024 sets out the graduated administrative penalty regime applicable to entities supervised by the MoET and the Ministry of Justice, including accountants and auditors. Its annexed schedule starts at AED 50,000 for lower-severity breaches and rises to AED 1,000,000 for the most serious scheduled violations, with Article 5(2) permitting the Ministry to double the fine on repeat offences, while Article 3(1) preserves the Ministry’s power to stack any of the Article 14 sanctions under Federal Decree-Law No. (10) of 2025, namely written warnings, fines of up to AED 5,000,000 per violation, business restrictions, removal of senior management, and suspension or revocation of the professional licence.

4. Cabinet Decision No. (109) of 2023 on Regulating the Beneficial Owner Procedures

Beneficial ownership transparency is a core element of the UAE AML/CFT framework. This cabinet decision requires company registrars and corporate entities to identify and verify the identity of their beneficial owners, defined as any natural person who ultimately owns or controls 25 per cent or more of the shares or voting rights, or who exercises effective control through other means. Accountants and auditors who assist clients with company formation, corporate secretarial work, or ongoing management must ensure that beneficial ownership information held by the client is accurate, current, and available to competent authorities upon request, and that the UBO register is maintained at the client’s registered office.

5. Cabinet Resolution No. (132) of 2023 Concerning the Administrative Penalties against Violators of Cabinet Decision No. (109) of 2023 on Beneficial Owner Procedures

This companion resolution prescribes the specific fines and administrative measures that apply to entities and individuals that fail to comply with beneficial ownership requirements. Penalties include fines, suspension of activity, public warnings, and referral to criminal prosecution in cases of deliberate concealment of beneficial ownership information. Accountants who advise on corporate structuring should treat the BO regime and its penalty schedule as part of the first-line client-risk assessment.

6. Cabinet Decision No. (74) of 2020 Regarding Terrorism Lists Regulation and Implementation of UN Security Council Resolutions

Cabinet Decision No. (74) of 2020 implements the UN Security Council resolutions on the suppression and combating of terrorism, terrorism financing, and proliferation of armaments. Under Article 15, any person who holds funds on the UN Consolidated Sanctions List or the UAE Local Terrorist List must freeze those funds without prior notice and without delay, and notify the Executive Office for Control and Non-Proliferation (EOCN) within five working days. The operational mechanics for DNFBPs, including subscription to the EOCN Notification Alert System (NAS), filing of Confirmed Name Match Reports (CNMRs) and Partial Name Match Reports (PNMRs), and ongoing sanctions-list screening, are set out in the EOCN Targeted Financial Sanctions Guidance and are supervisory expectations for every accountant and auditor.

7. Federal Law No. (7) of 2014 Combating Terrorism Crimes

The Federal Law No. (7) of 2014 criminalises terrorism-related offences and defines terrorism crimes, terrorist organisations, and associated penalties. Knowingly providing accounting, tax, or corporate services to a designated terrorist or a terrorist organisation can constitute a criminal offence, independent of the firm’s AML reporting obligations.

Ready to map your obligations under Federal Decree-Law No. (10) of 2025?

AML UAE builds policies, business-wide risk assessments, and inspection-ready files aligned with the 2025 federal framework and MoET guidance.

Overarching AML Guidance Applicable to Accountants and Auditors

In addition to the federal legislative framework, accountants and auditors must follow a set of overarching guidance documents issued by national-level bodies including the Executive Office for Control and Non-Proliferation (EOCN) and the UAE Financial Intelligence Unit (FIU). While these are not primary legislation, they represent binding supervisory expectations and are treated as standards during MoET inspections.

1. TFS Guidance for FIs, DNFBPs and VASPs

EOCN. Most current TFS implementation guidance.

2. FIU Strategic Analysis on TF

Terrorist financing trends and red flags.

3. Strategic Review on TFS Case Studies

Real-world TFS implementation and evasion cases.

4. PF Institutional Risk Assessment

PF-IRA methodology for FIs, DNFBPs, VASPs.

5. TF and PF Red Flags Guidance

Indicators for monitoring and staff training.

6. Joint Guidance on Unlicensed VASPs

Identifying and mitigating unlicensed VASP risks.

7. Counter PF Guidance

Dual-use goods screening, trade monitoring, EDD.

8. Satisfactory/Unsatisfactory Practice

Joint good-practice benchmarks for inspections.

9. Typologies on TFS Circumvention

Front companies, nominee structures, layering.

10. Guideline on Grievance Procedures

How designated persons or entities may seek review.

11. Online Grievance System User Guide

Step-by-step instructions for the grievance portal.

12. Combating PF and Sanctions Evasion

Practical controls against sanctions evasion.

13. NAS Subscription Simple Guide

How to subscribe to the EOCN alert system.

1. Guidance on Targeted Financial Sanctions for Financial Institutions, DNFBPs and VASPs (EOCN, March 2026)

The most current TFS guidance from the EOCN. It details the procedures for screening, freezing, unfreezing, and reporting in relation to UN and local sanctions lists. Accountants and auditors must implement screening procedures covering all customers, beneficial owners, authorised signatories, and transaction counterparties. Confirmed matches must be reported via a Confirmed Name Match Report (CNMR) and partial matches via a Partial Name Match Report (PNMR), both submitted through the goAML system. Freezing measures must be implemented without delay upon a confirmed match, which the EOCN interprets as same-business-day at the latest.

2. FIU Strategic Analysis Report on Terrorist Financing — May 2025

The FIU’s strategic analysis report provides insight into current terrorist financing trends, methods, and red-flag indicators in the UAE. Accountants and auditors should use this report to inform their internal risk assessments and to train staff on emerging TF typologies, including small-value transfers layered through professional services, misuse of charitable structures, and abuse of corporate service vehicles.

3. Strategic Review on Targeted Financial Sanctions Case Studies — November 2021 (covering 2019-2021, EOCN reference IEC-SR.01.22)

This strategic review presents anonymised case studies illustrating how targeted financial sanctions have been applied and, in some cases, evaded. It serves as a practical reference for understanding sanctions evasion schemes and how compliance teams should respond, with examples that include the use of nominee directors, complex trust structures, and indirect ownership chains that frustrate first-layer screening.

4. Proliferation Finance Institutional Risk Assessment Guidance for FIs, DNFBPs and VASPs — December 2023

Accountants and auditors are required to incorporate proliferation financing (PF) risks into their business-wide risk assessments. This guidance explains the methodology for conducting a PF Institutional Risk Assessment (PF-IRA), including the identification of PF risk factors, the assessment of existing controls, and the documentation of findings. The PF-IRA is a stand-alone exercise distinct from the AML business-wide risk assessment and must be reviewed at least annually.

5. Terrorist and Proliferation Financing Red Flags Guidance — December 2023

This document sets out the red-flag indicators that may suggest terrorist or proliferation financing activity. Accountants and auditors should embed these indicators into their transaction monitoring processes, CDD escalation triggers, and staff training programmes. Typical red flags include unexplained wire transfers to high-risk jurisdictions, layered corporate structures with no clear commercial rationale, and clients reluctant to disclose the source of wealth.

6. Joint Guidance on Combating the Use of Unlicensed Virtual Asset Providers in the UAE — 1 March 2022

Relevant to accountants and auditors who encounter clients using virtual assets or dealing with virtual asset service providers. It highlights the risks associated with unlicensed VASPs and the steps that DNFBPs should take to identify and mitigate those risks, including refusing to process payments to suspected unlicensed VASPs and filing STRs where appropriate.

7. Guidance on Counter Proliferation Financing for FIs, DNFBPs and VASPs — 1 March 2022 (EOCN reference EOCN-PF.01.22)

This guidance supplements the PF risk assessment guidance by explaining the practical counter-proliferation financing controls, including dual-use goods screening, trade-related transaction monitoring, and enhanced due diligence for clients with links to sanctioned jurisdictions such as the DPRK and Iran.

8. Joint Guidance on Satisfactory and Unsatisfactory Practice — June 2021

Issued jointly by UAE supervisory authorities, this guidance provides examples of good and poor compliance practice observed during inspections. Accountants and auditors should review the examples to benchmark their own compliance programmes and to calibrate remediation plans where MoET has identified a weakness.

9. Typologies on the Circumvention of Targeted Sanctions against Terrorism and the Proliferation of Weapons of Mass Destruction — March 2021

This document examines the techniques used to evade targeted financial sanctions, including the use of front companies, nominee structures, identity concealment, and complex layering schemes. Valuable for training compliance staff and calibrating EDD triggers.

10. Guideline on Grievance Procedures

Sets out how designated persons or entities may seek review of listing decisions and how supervisory authorities and DNFBPs should handle grievance requests. Accountants acting as registered agents or in nominee roles should be familiar with the process so they can respond appropriately where a client is listed.

11. Online Grievance System User Guide

Step-by-step instructions for using the EOCN online grievance portal, including the information required, supporting documents, and processing timelines.

12. Combating Proliferation Financing and Sanctions Evasion

Practical guidance for implementing counter-proliferation and sanctions-evasion controls. Useful when designing transaction monitoring scenarios and calibrating escalation triggers in higher-risk trade corridors.

13. Simple Guide to Subscribe to the EOCN Notification Alert System (NAS)

Explains how accountants and auditors should register for the EOCN NAS to receive real-time alerts when sanctions lists are updated. Subscription to NAS is a mandatory supervisory expectation for DNFBPs and is commonly checked during MoET inspections.

Need a PF-IRA template, TFS screening procedure, or training deck?

AML UAE delivers EOCN-aligned templates and train-the-trainer sessions calibrated to the size and risk profile of accounting and audit firms.

NRA, SRA, and Other Important Guidelines Applicable to Accountants and Auditors

The UAE National Risk Assessment (NRA) is the single most important national-level risk document for every DNFBP. It synthesises risk findings across the UAE economy and prescribes calibration of supervisory and firm-level controls. Accountants and auditors must treat the NRA as a live input into their business-wide risk assessment, not a background reference.

UAE ML/TF National Risk Assessment — 2024

The 2024 National Risk Assessment describes the audit and accounting sector as small, with medium inherent vulnerability and medium-low residual risk. The NRA acknowledges specific vulnerabilities, including the gatekeeper role that accountants play in financial transactions, the potential for professional services to be misused to obscure beneficial ownership, and identified gaps in screening and monitoring practices across parts of the profession.

Accountants and auditors are required to review the NRA findings, conduct a gap analysis between their current compliance programme and the NRA expectations, incorporate the findings into their business-wide risk assessments, and update their internal controls, CRA weighting, and training materials accordingly. MoET has confirmed that inspection teams will probe whether NRA findings are reflected in BRAs and in the calibration of the CRA.

DNFBP Sector-Specific Guidance Applicable to Accountants and Auditors

These guidance and circular instruments are issued by MoET and apply across its DNFBP perimeter. They are not accountant or auditor-specific but form the operational backbone against which inspections are conducted, and they must be read in conjunction with the federal laws above.

1. Circular No. (1) of 2026

Updated high-risk country list and related measures.

2. AML/CFT Guidelines for DNFBPs

Primary compliance manual covering governance, CDD, EDD, STRs.

3. Circular No. (3) of 2025

Sanctions and terrorist list screening at onboarding and continuously.

4. Circular No. (4) of 2025

NRA 2024 is a live input to BRAs.

5. Circular No. (6) of 2025

Risk-based CDD with focus on simplified due diligence.

6. Circular No. (7) of 2025

Reimposition of UN sanctions relating to Iran under UNSCR 1737.

7. Circular No. (8) of 2025

Further high-risk country list updates.

8. CRA Implementation Guide

Methodology for customer risk assessment and review frequencies.

9. CDD Implementation Guide

Identity, verification, beneficial ownership, SDD, EDD.

10. Circular No. (2) of 2022

TFS implementation for UNSCRs 1718 (DPRK) and 2231 (Iran).

1. Circular No. (1) of 2026 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures

This circular updates the lists of jurisdictions classified as high-risk (FATF black list) or subject to increased monitoring (FATF grey list) and directs accountants and auditors to apply enhanced due diligence to all relationships and transactions involving those jurisdictions. It also prohibits establishing branches or subsidiaries in high-risk jurisdictions and reliance on third parties in those countries for CDD performance.

2. AML/CFT Guidelines for Designated Non-Financial Businesses and Professions — September 2025

Published by MoET in September 2025, these comprehensive guidelines replace earlier DNFBP guidance and provide the definitive regulatory expectations for all MoET-supervised DNFBPs, including accountants and auditors. They cover the full compliance lifecycle: governance and the MLCO role, business-wide risk assessment, customer risk assessment, CDD (including SDD and EDD), ongoing monitoring, STR filing through goAML, record keeping, staff training, and sanctions screening. This is the single most important reference document for building an AML/CFT compliance programme for accounting and audit firms.

3. Circular No. (3) of 2025 on Emphasising the Importance of Screening Sanctions and Terrorist Lists (MOEC/AML/003/2025, dated 19 March 2025)

This circular reiterates the obligation to screen customer databases against the latest sanctions and terrorism lists without delay. Screening must cover not only the customer but also all beneficial owners, authorised signatories, and transaction counterparties. MoET inspection teams treat sanctions screening evidence as a priority test area.

4. Understanding the Importance of the UAE 2024 National Risk Assessment — A Practical Guide for DNFBPs (Ministry of Economy)

This practical guide directs all MoET-supervised DNFBPs to study the 2024 NRA, incorporate its findings into internal risk assessments, and allocate resources to address identified gaps. The NRA is a binding input to the firm’s compliance programme, not merely a reference document.

5. Circular No. (6) of 2025 on Emphasising the Implementation of Risk-Based Customer Due Diligence Measures (with a Focus on Simplified Due Diligence)

This circular provides practical direction on when and how SDD may be applied. SDD may never be applied where there is any suspicion of money laundering or terrorist financing. Firms must apply EDD for high-risk customers, standard CDD for medium-risk customers, and SDD only for genuinely low-risk customers where the firm has documented its risk rationale and there is no suspicion.

6. Circular No. (7) of 2025 Regarding the Reimposition of United Nations Sanctions Related to Iran pursuant to UNSCR 1737 (2006) and Subsequent Resolutions

This circular requires accountants and auditors to update screening systems with the latest UN Consolidated Sanctions List, re-screen all existing customers and beneficial owners for exposure to Iran sanctions, apply freezing measures without delay upon a confirmed match, and report confirmed matches (via CNMR) and partial matches (via PNMR) through the goAML system.

7. Circular No. (8) of 2025 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures

A subsequent update to the high-risk country list published within 2025. The updated lists must be reflected in the firm’s jurisdictional risk assessment, CRA, and CDD policies, and all existing relationships with nexus to the updated jurisdictions must be reviewed for potential EDD.

8. Implementation Guide for DNFBPs on Customer Risk Assessment (CRA) — November 2024

The Ministry of Economy’s Implementation Guide for DNFBPs on Customer Risk Assessment sets out a ten-step methodology for scoring customers across five risk-factor categories, Customer, Geographic, Product/Service/Transaction, Delivery Channel, and Other, using a one-to-five scale from Low to High. The guide requires accountants and auditors to apply the CRA at onboarding, at periodic reviews, and whenever there is a change in risk factors such as a shift in ownership, a new product, adverse media, a sanctions listing, or an update to the National or Sectoral Risk Assessment. It indicates example review cadences of every six months for high-risk clients, every one year for medium and medium-high risk clients, every eighteen months for low-medium risk clients, and every two years for low-risk clients, and it requires DNFBPs to maintain a comprehensive audit trail of all due diligence steps, risk scores, and justifications, available upon request by the competent supervisory authority.

9. Implementation Guide for DNFBPs on Customer Due Diligence (CDD) — November 2024

This companion guide details practical CDD steps, including identity verification for natural and legal persons, beneficial ownership identification using the 25 per cent threshold, SDD and EDD conditions, ongoing monitoring, and procedures when CDD cannot be completed. It also addresses the tipping-off prohibition: once a suspicious transaction is contemplated or reported, the firm must not disclose that fact to the client or to any third party who is not authorised to receive it.

10. Circular No. (2) of 2022 Regarding Implementation of Targeted Financial Sanctions on UNSCRs 1718 (2006) and 2231 (2015)

This circular provides implementation instructions for TFS related to DPRK and Iran proliferation sanctions. EDD is required for all transactions with a nexus to North Korea and Iran, including verification of cross-border transactions for potential dual-use goods, shipment documents, and end-user declarations.

Sector-Specific Guidelines Applicable to Accountants and Auditors

Beyond the DNFBP-wide instruments, the following documents are addressed specifically to the accounting and auditing profession and reflect the sector’s particular risk exposures and operational realities.

Ministry of Economy Circular No. (3) of 2021 (dated 4 February 2021)

Issued by the then Ministry of Economy Anti-Money Laundering Department (prior to the ministry’s rebranding as the Ministry of Economy and Tourism), this circular is addressed directly to independent accountants and auditors. It outlines core AML/CFT obligations, including the requirement to register with the Ministry, appoint a compliance officer, conduct customer due diligence, and file suspicious transaction reports via the goAML system.

Supplemental Guidance for Independent Accountants and Auditors — April 2026

The MoET Supplemental Guidance for the Independent Accountants and Auditors – April 2026, explains how UAE Independent Accountants and Auditors should manage money laundering, terrorism financing and proliferation financing risks under Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025.

It highlights that accountants and auditors act as gatekeepers because they often see ownership structures, financial records, tax information, audit evidence and corporate transactions. This position allows them to identify hidden beneficial ownership, unusual fund movements, false documents, weak controls and suspicious activity.

The guidance expects firms to apply a risk-based AML/CFT/CPF framework. This includes a documented business risk assessment, clear policies and procedures, the appointment of a qualified Compliance Officer or MLRO, staff training, senior management oversight, independent audit, customer due diligence, sanctions screening, ongoing monitoring, suspicious activity reporting, and proper recordkeeping.

Key risks include complex ownership structures, foreign or high-risk jurisdictions, politically exposed persons, shell companies, nominee arrangements, weak beneficial ownership transparency, unusual payment methods, false invoices, unexplained wealth, third-party payments and customers pressuring firms to reduce scrutiny.

The document also provides typologies, red flags and case studies showing how professional services may be misused to create a false appearance of legitimacy, launder corruption proceeds, support trade-based money laundering, misuse real estate structures, hide sanctions exposure or move illicit funds through companies and charities.

Overall, the guidance requires IAAs to combine professional scepticism with a documented judgement on compliance and timely reporting when suspicion arises.

Are you an accountant or auditor in ADGM or DIFC?

Accountants and auditors operating in the Abu Dhabi Global Market are supervised by the ADGM Registration Authority (RA) and must comply with the ADGM AML and Sanctions Rulebook. Those in the DIFC are supervised by the DFSA and must comply with the DFSA AML, CTF and Sanctions Module. The overarching federal laws and cabinet resolutions apply across the entire UAE, including ADGM and DIFC. See our ADGM and DIFC pages for the operational rulebook that applies to your firm.

Conclusion

The AML/CFT regulatory framework for accountants and auditors in the UAE is both comprehensive and continuously evolving. From the primary Federal Decree-Law No. (10) of 2025 through the detailed implementing regulations, overarching EOCN and FIU guidance, DNFBP-wide MoET circulars, and sector-specific MoET guidance, the obligations are clear and enforceable. The common thread is risk-based thinking: firms must identify where they sit in the ML/TF/PF risk landscape, calibrate controls accordingly, and be able to evidence the judgement at inspection.

For accountants and auditors operating in mainland UAE and commercial free zones, the practical priorities are as follows. Firms that invest in the controls below now will be best placed to adapt to future updates to the UAE AML/CFT/CPF framework and to avoid the significant penalties that attach to non-compliance.

1. Conduct and document a business-wide risk assessment (BRA) informed by the 2024 NRA and the September 2025 DNFBP Guidelines. Review at least annually and on trigger events such as new product lines, new jurisdictions, or new circulars.

2. Maintain a proliferation financing institutional risk assessment (PF-IRA) calibrated to client and transaction exposure to DPRK, Iran, and other proliferation-sensitive jurisdictions.

3. Apply a documented customer risk assessment to every client before providing covered services. Verify identity using reliable independent documents. Identify beneficial owners at the 25 per cent ownership or effective-control threshold. Apply EDD for high-risk clients, standard CDD for medium-risk, and SDD only where documented low-risk rationale exists and no suspicion is present.

4. Monitor client relationships continuously for changes in ownership, business activity, transaction patterns, and risk profile. Review frequencies should follow the CRA Implementation Guide: high-risk every 6 months, medium-high every 12 months, medium every 12 months, low-medium every 18 months, and low-risk every 24 months.

5. Screen all clients, beneficial owners, authorised signatories, and transaction counterparties at onboarding and continuously against the UAE Local Terrorist List, UNSC consolidated lists, and FATF-designated jurisdictions. Subscribe to the EOCN NAS for real-time alerts and register with the ARS.

6. File STRs via goAML whenever the firm knows, suspects, or has reasonable grounds to suspect that a transaction relates to ML, TF, or PF. File FFRs for confirmed matches and PNMRs for partial matches. Respect the tipping-off prohibition at all times.

7. Appoint an MLCO with adequate seniority, independence, and direct reporting to senior management. Deliver periodic AML/CFT training covering CDD, red flags, STR filing, sanctions screening, and the tipping-off prohibition to all staff performing covered activities.

8. Retain CDD documentation, transaction records, STR filings, sanctions hits, risk assessments, and training logs for a minimum of five years after the end of the business relationship or the date of the occasional transaction.

Build your accountant or auditor AML programme with AML UAE

We design, document, and stress-test AML/CFT compliance programmes for accounting and audit firms across UAE mainland and commercial free zones, including BRA/PF-IRA, CRA, CDD, screening, STR filing workflows, training, and inspection readiness.

Frequently Asked Questions

When are accountants treated as DNFBPs in the UAE?

Accountants and auditors are treated as DNFBPs when they prepare for or carry out specified financial transactions on behalf of clients. The five covered activities are buying and selling real estate, managing client money or securities, managing bank or savings accounts, organising contributions for the creation or management of companies, and creating or managing legal persons or arrangements. 

The Ministry of Economy and Tourism (MoET) is the designated AML/CFT supervisory authority for independent accountants and auditors operating in mainland UAE and in commercial free zones. Accountants and auditors licensed in the ADGM are supervised by the FSRA, and those in the DIFC are supervised by the DFSA. Federal AML laws apply in all three jurisdictions; the difference is the operational rulebook and the supervisory interface.

Risk-based customer due diligence is expected. This includes verifying the identity of the customer and all beneficial owners at the 25 per cent ownership or effective-control threshold, understanding the purpose and intended nature of the business relationship, conducting ongoing monitoring of transactions and customer information, and keeping records for at least five years. Enhanced due diligence is required for high-risk customers; simplified due diligence may be applied only to genuinely low-risk relationships where no suspicion of ML or TF exists.

Common red flags for accountants include unexplained large cash transactions or payments in rounded amounts, complex multi-jurisdictional structures with no clear business rationale, clients reluctant to provide identification or beneficial ownership information, inconsistencies between reported revenue and observable business activity, transactions involving high-risk or sanctioned jurisdictions, use of nominee directors or shell companies with no substantive operations, and sudden changes in transaction patterns or payment flows without a clear commercial reason.

Yes. ADGM and DIFC are financial free zones with their own regulatory authorities, the ADGM Registration Authority (RA) and the DFSA respectively. Audit firms licensed in those jurisdictions follow the AML/CFT rulebook issued by their regulator. However, the overarching federal laws and cabinet resolutions, including Federal Decree-Law No. (10) of 2025 and Cabinet Decision No. (134) of 2025, apply across the entire UAE, including ADGM and DIFC. The supervisor and the operational rulebook differ by jurisdiction, not the federal statute.

Enjoying this guide?

Leave us a review on Google. It helps other compliance professionals discover AML UAE and supports our ongoing research into UAE AML regulations.

Disclaimer : This article is published by AML UAE (amluae.com) for informational and educational purposes only. It does not constitute legal, regulatory, or compliance advice. The UAE AML/CFT regulatory framework is subject to change, and references to named laws, circulars, and guidance documents reflect the position known at the time of publication. For advice specific to your firm, consult a qualified AML compliance professional or licensed legal advisor. AML UAE accepts no responsibility for decisions taken in reliance on this article alone.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

AML Regulations for Trust and Corporate Service Providers (TCSPs) in UAE

AML Regulations Applicable to TCSPs in UAE

Blogs

Last Updated: 04/16/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Quick Overview on AML Regulations for Trust and Corporate Service Providers (TCSPs)

  • AML regulations for TCSPs in the UAE apply to any business that, on a commercial basis, forms companies, acts as or supplies a director, shareholder or trustee, provides registered office services or a business address, or acts as a nominee shareholder.
  • Mainland and commercial free zone TCSPs are supervised by the Ministry of Economy and Tourism (MoET) and must comply with Federal Decree-Law No. 10 of 2025, Cabinet Resolution No. 134 of 2025, Cabinet Decision No. 74 of 2020 on targeted sanctions, Cabinet Decision No. 109 of 2023 on beneficial ownership, Cabinet Resolutions No. 71 of 2024 and No. 132 of 2023 on administrative penalties, MoET Circular 4 of 2021 and the Supplemental Guidance for Trust and Company Service Providers (May 2019).
  • The full body of DNFBP-wide guidance issued by MoET, EOCN and the UAE Financial Intelligence Unit also applies to TCSPs alongside this sector-specific framework, as TCSPs are one of the designated DNFBP categories under UAE law.

Who this guide is for

  • This TCSP AML compliance UAE guide is written for trust and company service providers in the UAE mainland and commercial free zones, supervised by the Ministry of Economy and Tourism.
  • If you are licensed inside ADGM, use the ADGM AML page. If you are licensed inside DIFC, use the DIFC AML page. Those jurisdictions apply separate rulebooks and supervisors.

Definition of TCSP

A Trust and Company Service Provider (TCSP) is a business that, on a commercial basis, provides one or more of these services to third parties: forming companies or other legal persons; acting as (or arranging for another to act as) a director, secretary, partner or similar officer; providing registered office services or a business, correspondence or administrative address; providing trustee services for an express trust or equivalent legal arrangement; or acting as (or arranging for another to act as) a nominee shareholder for another person.

Who Counts as a TCSP in the UAE?

Under UAE AML/CFT law, a trust and company service provider is defined by the activities it performs. Article 3 of Cabinet Resolution No. 134 of 2025 (Executive Regulations of Federal Decree-Law No. 10 of 2025) lists the five activities that bring a business within the DNFBP definition of a TCSP. These are the activities at the heart of AML laws for tcsp UAE.

The five TCSP activities recognised by UAE AML law:

  1. Acting as a formation agent of legal persons.
  2. Acting as, or arranging for another person to act as, a director or secretary of a company, a partner of a partnership, or a similar position in other legal persons.
  3. Providing a registered office, business address, correspondence or administrative address for a company, partnership or any other legal person or legal arrangement (registered office services).
  4. Acting as, or arranging for another person to act as, a trustee of an express trust or performing an equivalent function for another form of legal arrangement (trustee services).
  5. Acting as, or arranging for another person to act as, a nominee shareholder for another person.

If your business carries out even one of these activities as part of its regular commercial offering, you are a TCSP for AML purposes. This typically includes corporate services firms, PRO and business setup consultancies acting as registered agents, law and accounting firms offering company formation or directorship on the side, family office administrators holding nominee roles and free-zone registered agents in IFZA, Meydan, SPC, RAKEZ and similar commercial free zones.

Being licensed under a mainland Department of Economic Development or a commercial free zone authority does not change the classification. The moment a licensee offers any of the five activities above, the AML/CFT framework applies in full. This is the position taken in both MoET Circular 4 of 2021 and the May 2019 Supplemental Guidance for Trust and Company Service Providers.

Key TCSP AML Terms

  • BO (Beneficial Owner): The natural person who ultimately owns or controls the customer, typically any individual holding 25 percent or more of shares or voting rights, or exercising control by other means.
  • CDD (Customer Due Diligence): Identifying and verifying the customer, beneficial owner and the purpose of the business relationship.
  • EDD (Enhanced Due Diligence): Additional checks applied to higher-risk customers, such as PEPs or customers from high-risk jurisdictions.
  • SDD (Simplified Due Diligence): Reduced verification measures, permitted only where risk is assessed as low.
  • CRA (Customer Risk Assessment): The customer-level risk rating that drives CDD intensity and ongoing monitoring.
  • STR / SAR: Suspicious Transaction / Activity Report filed through goAML to the UAE Financial Intelligence Unit.
  • TFS: Targeted Financial Sanctions under UN Security Council resolutions and the UAE Local Terrorist List.
  • PEP: Politically Exposed Person, plus family members and close associates.
  • goAML: UAE FIU reporting portal where DNFBPs register and file STRs, SARs, HRC and other reports.

AML Supervisory Authority for Trust and Corporate Service Providers in UAE

The Ministry of Economy and Tourism (MoET), previously the Ministry of Economy, is the supervisory authority for mainland and commercial free zone TCSPs. Supervision is delivered through the MoET Anti-Money Laundering Department, working with the Executive Office for Control and Non-Proliferation (EOCN), the UAE Financial Intelligence Unit and local licensing authorities.

In practice, MoET issues sector-specific circulars, conducts thematic inspections and reviews AML/CFT risk assessments, examines customer due diligence files, and verifies goAML registration and reporting. TCSPs should expect both announced and unannounced inspections, request-for-information exercises and follow-up reviews after remediation.

The two foundational MoET publications for trust and company service providers AML UAE are MoET Circular No. 4 of 2021 and the May 2019 Supplemental Guidance for Trust and Company Service Providers. Together they define the sector, set the core obligations and explain the higher-risk typologies unique to corporate structures and trusts.

Mainland & commercial free zone TCSPs vs ADGM TCSPs vs DIFC TCSPs

The federal AML framework (Federal Decree-Law No. 10 of 2025 and its executive regulations) applies across the entire UAE, including ADGM and DIFC. What differs is the sector rulebook, supervisor and reporting surface.

DimensionMainland & Commercial Free Zone TCSPsADGM TCSPsDIFC TCSPs
Federal lawFederal Decree-Law 10/2025 and Cabinet Resolution 134/2025 apply in full.Federal Decree-Law 10/2025 and Cabinet Resolution 134/2025 apply in full.Federal Decree-Law 10/2025 and Cabinet Resolution 134/2025 apply in full.
Primary supervisorMinistry of Economy and Tourism (MoET)ADGM Registration AuthorityDubai Financial Services Authority (DFSA)
Operational rulebookCabinet Decisions 74/2020 and 109/2023, Cabinet Resolutions 71/2024 and 132/2023,
MoET DNFBPs Guideline, Circulars, May 2019 Supplemental Guidance.
ADGM FSRA AML Rulebook (AML and sanctions) and related guidance.DIFC DFSA AML, Counter-Terrorist Financing and Sanctions Module (AML Module)
and related guidance.
Reporting channelgoAML (UAE FIU)goAML (UAE FIU), plus FSRA notificationsgoAML (UAE FIU), plus DFSA notifications
This guide applies?YesNo. Use the ADGM AML page on amluae.com.No. Use the DIFC AML page on amluae.com.

Not sure if your activity makes you a TCSP?

Our team can review your licence, services and client book and confirm whether the UAE TCSP AML regime applies to you.

AML Regulations Applicable to TCSPs in UAE

TCSPs must comply with a layered framework made up of federal laws, executive regulations, Cabinet decisions, overarching guidance, the National Risk Assessment, DNFBP-wide circulars and TCSP sector-specific guidance. The sections below follow the regulatory architecture that the UAE uses to supervise the sector.

AML rules that apply to TCSPs: the five layers at a glance

Layers 1 to 4 apply because a TCSP is a DNFBP. Layer 5 adds the sector playbook. Mainland and commercial free zone TCSPs are supervised by MoET; ADGM and DIFC TCSPs follow their own free-zone AML rulebooks alongside the federal statute.

LAYER 1 | FOUNDATION | 7 INSTRUMENTS

1. Federal AML Laws and Executive Regulations Applicable to TCSPs in UAE

Federal Decree-Law 10 of 2025, Federal Law 7 of 2014, Cabinet Resolution 134 of 2025, Cabinet Decisions and Resolutions on targeted sanctions, beneficial ownership and administrative penalties.

LAYER 2 | CROSS-SECTOR | 14 PUBLICATIONS

2. Overarching AML Guidance Applicable to TCSPs

Cross-sector guidance from EOCN and the UAE FIU on targeted financial sanctions, proliferation financing, red flags, typologies, and EOCN NAS and ARS reporting systems.

LAYER 3 | RISK BASELINE | 1 CORE ASSESSMENT

3. NRA, SRA, and Other Important Guidelines Applicable to TCSPs

The UAE ML/TF National Risk Assessment 2024 sets the sector risk rating that must be reflected in every TCSP enterprise-wide risk assessment and customer risk engine.

LAYER 4 | DNFBP-WIDE | 10 PUBLICATIONS

4. DNFBP Sector-Specific Guidance Applicable to TCSPs

Ministry of Economy circulars and implementation guides that bind all DNFBPs: September 2025 DNFBP Guidelines, CRA and CDD Implementation Guides (November 2024), and 2025 and 2026 circulars on sanctions, NRA emphasis, SDD and high-risk countries.

LAYER 5 | SECTOR-SPECIFIC | 2 PUBLICATIONS

5. TCSP Sector-Specific Guidance

MoET Circular No. 4 of 2021 defining the five covered TCSP activities and core obligations, and the May 2019 Supplemental Guidance for Trust and Company Service Providers covering risk factors, CDD, ongoing monitoring and typologies unique to corporate structures and trusts.

Federal AML Laws and Executive Regulations Applicable to TCSPs in UAE

1. Federal Decree-Law 10 of 2025

AML/CFT/PF statute

2. Federal Law 7 of 2014

Combating Terrorism Crimes

3. Cabinet Resolution 134 of 2025

Executive Regulations of FDL 10/2025

4. Cabinet Decision 74 of 2020

Terrorism lists and UN sanctions

5. Cabinet Resolution 71 of 2024

Administrative penalties (MoJ/MoE)

6. Cabinet Decision 109 of 2023

Beneficial Owner procedures

7. Cabinet Resolution 132 of 2023

BO administrative penalties

1. Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing

Federal Decree-Law No. 10 of 2025 is the foundational AML/CFT/CPF statute in the UAE. It criminalises money laundering, terrorism financing and proliferation financing; establishes the Financial Intelligence Unit, the Supreme Committee for AML/CFT and the National AML/CFT Committee; and sets out the duties of financial institutions, DNFBPs and VASPs. As a DNFBP, every mainland and commercial free zone TCSP must implement the obligations flowing from this law and its executive regulations.

Key obligations that flow to TCSPs include identifying and verifying customers and beneficial owners, assessing and managing ML/TF/PF risk, applying targeted financial sanctions, filing suspicious transaction reports with the Financial Intelligence Unit through goAML, appointing a compliance officer, maintaining records for at least five years, and cooperating fully with supervisors.

2. Federal Law No. (7) of 2014 Combating Terrorism Crimes

Federal Law No. 7 of 2014 criminalises a range of terrorism-related offences, including the financing of terrorist organisations and individuals. It underpins the UAE Local Terrorist List regime and supports the obligation on TCSPs to screen customers and beneficial owners against both the Local Terrorist List and the UN Consolidated Sanctions List, and to freeze and report any relevant funds or assets without delay.

3. Cabinet Resolution No. (134) of 2025 Concerning the Executive Regulations of Federal Decree-Law No. (10) of 2025 Concerning Combating Money Laundering, Terrorist Financing, and the Financing of the Proliferation of Weapons

Cabinet Resolution No. 134 of 2025 operationalises Federal Decree-Law No. 10 of 2025. It defines DNFBPs (including the five TCSP activities), sets out the detailed requirements for customer due diligence, simplified and enhanced due diligence, ongoing monitoring, record keeping, internal controls, customer risk assessment and the appointment and duties of compliance officers. For TCSPs, this regulation is the operational rulebook that converts the statute into day-to-day procedures.

4. Cabinet Decision No. (74) of 2020 Regarding Terrorism Lists Regulation and Implementation of UN Security Council Resolutions on the Suppression and Combating of Terrorism, Terrorist Financing, Countering the Proliferation of Weapons of Mass Destruction and related resolutions

Cabinet Decision No. 74 of 2020, together with its amendments, implements the UAE Local Terrorist List and the targeted financial sanctions arising from UN Security Council resolutions. TCSPs must screen all customers, beneficial owners and related parties at onboarding and on an ongoing basis, freeze funds and assets without delay where a match is confirmed, and report any freeze or attempted transaction to EOCN and the Financial Intelligence Unit.

5. Cabinet Resolution No. (71) of 2024 Regulating Violations, Administrative Penalties Imposed on Violators of Measures for Confronting Money Laundering and Combating Financing of Terrorism Subject to the Control of the Ministry of Justice and the Ministry of Economy

Cabinet Resolution No. 71 of 2024 sets out the administrative fines and penalties that MoET and the Ministry of Justice can impose on DNFBPs, including TCSPs, for AML/CFT breaches. Fines range from a few thousand dirhams to AED 1,000,000 per violation, depending on severity. Penalties escalate for repeat violations and can include written warnings, suspension of licence, removal of board members or compliance officers and referral for criminal prosecution.

6. Cabinet Decision No. (109) of 2023 On Regulating the Beneficial Owner Procedures

Cabinet Decision No. 109 of 2023 governs the identification, disclosure and registration of beneficial owners of UAE legal persons. TCSPs are doubly affected because they help clients set up and administer the very entities this regulation targets.

TCSPs must help clients identify the ultimate beneficial owner (typically anyone owning or controlling 25 per cent or more of shares or voting rights, or exercising control by other means), maintain up-to-date beneficial ownership registers and share information with the registrar on request. TCSPs that act as nominee shareholders or nominee directors must disclose their nominee status and the identity of the person they act for. See our guide to beneficial ownership in the UAE for the federal beneficial ownership section in detail.

7. Cabinet Resolution No. (132) of 2023 Concerning the Administrative Penalties against Violators of The Provisions of the Cabinet Resolution No. (109) of 2023 Concerning the Regulation of Beneficial Owner Procedures

Cabinet Resolution No. 132 of 2023 specifies the administrative fines for breaches of the beneficial ownership regime. Typical TCSP-relevant breaches include failing to maintain an accurate beneficial ownership register, failing to notify changes to the registrar within the prescribed timelines, and failing to disclose nominee arrangements.

Overarching AML Guidance Applicable to TCSPs

The Executive Office for Control and Non-Proliferation (EOCN) and the Financial Intelligence Unit publish cross-sector guidance that binds TCSPs alongside the federal laws. The most relevant pieces are listed below.

1. EOCN TFS Guidance

March 2026

2. FIU Terrorist Financing Report

May 2025

3. TFS Case Studies

April 2024

4. PF Institutional RA Guidance

December 2023

5. TF/PF Red Flags Guidance

December 2023

6. Unlicensed VASPs Joint Guidance )

November 2023

7. Counter PF Guidance

November 2022

8. Satisfactory/Unsatisfactory Practice

June 2021

9. TFS Circumvention Typologies

March 2021

10. Grievance Procedures Guideline

11. Combating PF & Sanctions Evasion

12. EOCN NAS Subscription Guide

13. Registration in the Automatic Reporting System

1. Guidance on Targeted Financial Sanctions for Financial Institutions, Designated Non-Financial Business and Professions (DNFBPs) and Virtual Asset Service Providers (VASPs) issued by the Executive Office for Control and Non-Proliferation (EOCN) – March 2026

The latest EOCN sanctions guidance restates the expectation that DNFBPs, including TCSPs, screen all customers, beneficial owners and counterparties at onboarding, periodically through the lifecycle and immediately following sanctions list updates. It also clarifies expectations around proportionate list-management technology, subscription to the EOCN Notification Alert System (NAS) and registration on the Automatic Reporting System.

2. FIU’s Strategic Analysis Report on Terrorist Financing – May 2025

The FIU strategic analysis report flags the misuse of shell and front companies, nominee structures and opaque trusts as recurring terrorism financing typologies. TCSPs should read the report as a risk map, focusing on red flags around rapid changes of ownership, unclear source of funds and clients whose stated business does not match their transaction behaviour.

3. Strategic Review on Targeted Financial Sanctions Case Studies - April 2024

The EOCN case studies illustrate real sanctions-evasion attempts through UAE corporate structures, including layered ownership, use of nominee directors and diversion of funds through related-party loans. TCSPs should cross-refer the typologies back to their own customer book during enterprise and customer risk assessments.

4. Proliferation Finance Institutional Risk Assessment Guidance for FIs, DNFBPS, and VASPs - December 2023

This guidance expects DNFBPs to conduct a specific proliferation financing risk assessment (separate from, but aligned with, the ML/TF risk assessment). TCSPs are particularly exposed because front companies in dual-use trade sectors are a classic proliferation financing typology.

5. Terrorist and Proliferation Financing Red Flags Guidance - December 2023

The red flags guidance lists behavioural, transactional and documentary indicators that should drive enhanced scrutiny and, where appropriate, STR or SAR filings. TCSPs should consider the TCSP-relevant red flags in their customer risk rating engine and ongoing monitoring rules.

6. Joint Guidance on Combating the Use of Unlicensed Virtual Asset Providers in the UAE – November 2023

Where a TCSP forms or services a client whose activity involves virtual assets, the client must be licensed by the competent UAE VASP supervisor or equivalent. TCSPs must not knowingly enable unlicensed VASP activity and should treat any such red flag as grounds for enhanced due diligence and, if suspicion persists, an STR.

7. Guidance on Counter Proliferation Financing for FIs, DNFBPs, and VASPS - November 2022

This foundational guidance underpins the UAE proliferation financing framework. TCSPs should use it to structure their proliferation financing policy, controls and staff training.

8. Joint Guidance – satisfactory/unsatisfactory practice – June 2021

The satisfactory/unsatisfactory practice note sets supervisory expectations by describing examples of good and poor AML/CFT practices observed during inspections. TCSPs can use the unsatisfactory examples as a self-assessment checklist.

9. Typologies on the circumvention of Targeted Sanctions against Terrorism and the Proliferation of Weapons of Mass Destruction - March 2021

The March 2021 typologies note describes methods used to evade targeted financial sanctions, many of which involve TCSPs unknowingly. It should shape the red flags built into the sanctions screening and ongoing monitoring framework.

10. Guideline on Grievance Procedures

11. Online Grievance System User Guide

The online grievance system user guide gives step-by-step instructions for submitting and tracking grievances and supporting documentation.

12. Combating Proliferation Financing and Sanctions Evasion

A practical reference on recognising and responding to proliferation financing and sanctions-evasion schemes, including transaction monitoring techniques and reporting expectations.

13. Simple Guide to Subscribe to the EOCN Notification Alert System (NAS)

The NAS delivers real-time updates on amendments to the UAE Local Terrorist List and UN sanctions lists. TCSPs are expected to subscribe to and integrate NAS alerts into their sanctions screening workflow.

NRA, SRA, and Other Important Guidelines Applicable to TCSPs

UAE ML/TF National Risk Assessment — 2024

The NRA 2024 confirms that trust and company service providers sit in the medium-high vulnerability band for money laundering and terrorism financing, driven by the sector’s use of nominee arrangements, complex ownership structures and international flows. Every TCSP must read the NRA, reflect its findings in the enterprise-wide risk assessment and document how the NRA drives the customer, product, geography and delivery-channel risk ratings inside the customer risk assessment engine.

DNFBPs Sector-Specific Guidance Applicable to TCSPs

Ministry of Economy and Tourism circulars apply to the entire DNFBP population, but the practical impact on TCSPs is particularly significant because of the way TCSPs interact with ownership, control and cross-border flows.

1. Circular 1 of 2026

High-risk country list update

2. DNFBP AML/CFT Guidelines

September 2025

3. Circular 3 of 2025

Sanctions list screening

4. Circular 4 of 2025

NRA 2024 emphasis

5. Circular 6 of 2025

Risk-based CDD (SDD focus)

6. Circular 7 of 2025

UN sanctions on Iran

7. Circular 8 of 2025

High-risk country list update

8. CRA Implementation Guide

November 2024

9. CDD Implementation Guide

November 2024

10. Circular 2 of 2022

TFS under UNSCRs 1718 and 2231

1. Circular No. (1) of 2026 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures

Circular 1 of 2026 rolls the latest FATF public statements into UAE supervisory expectations. TCSPs must apply enhanced due diligence and, where required, counter-measures to customers, beneficial owners and transactions connected to jurisdictions identified as high-risk or subject to increased monitoring.

2. AML/CFT Guidelines for Designated Non-Financial Businesses and Professions – September 2025

The September 2025 DNFBP Guidelines consolidate MoET expectations across the full AML/CFT lifecycle: enterprise risk assessment, customer risk assessment, CDD, EDD, simplified due diligence, ongoing monitoring, sanctions screening, beneficial ownership, record keeping, training, independent audit, governance and reporting. TCSPs should treat the Guidelines as the default baseline and only deviate where a supervisor confirms otherwise.

3. Circular No. (3) of 2025 on emphasize the importance of screening sanctions and terrorist lists

Circular 3 of 2025 emphasises the importance of screening customers, beneficial owners, counterparties and transactions against both the UAE Local Terrorist List and the UN Consolidated List, at onboarding and on an ongoing basis, including following every list update.

4. Circular No. (4) of 2025 on emphasize the importance Understanding the Importance of the UAE 2024 National Risk Assessment

Circular 4 of 2025 instructs DNFBPs to embed NRA 2024 findings in their risk frameworks. For TCSPs, this means reflecting the sector rating in the enterprise risk assessment and calibrating CDD intensity, sanctions screening scope and transaction monitoring rules accordingly.

5. Circular No. (6) of 2025 on Emphasizing the Implementation of Risk-Based Customer Due Diligence Measures (with a Focus on Simplified Due Diligence)

Circular 6 of 2025 clarifies that simplified due diligence is permitted only where the underlying risk is assessed as low and no red flags are present. TCSPs should default to standard CDD and document any application of SDD with a clear low-risk rationale.

6. Circular No. (7) of 2025 Regarding the Reimposition of United Nations Sanctions Related to Iran Pursuant to United Nations Security Council Resolution No. 1737 (2006) and Subsequent Resolutions

Circular 7 of 2025 addresses the reimposition of UN sanctions related to Iran under UNSCR 1737 (2006) and subsequent resolutions. TCSPs must update screening lists, review existing customer books and file reports as required.

7. Circular No. (8) of 2025 on Updating the Lists of High-Risk Countries, Countries Subject to Increased Monitoring, and Related Measures.

Circular 8 of 2025 aligns UAE supervisory measures with the latest FATF public statements on high-risk and increased-monitoring jurisdictions.

8. Implementation Guide For DNFBPs on Customer Risk Assessment (CRA) – November 2024

The CRA Implementation Guide provides a methodology and template for rating individual customer risk. TCSPs should align their customer risk assessment engine to this guidance, covering customer type, beneficial ownership risk, geography, product, delivery channel and transaction risk.

9. Implementation Guide For DNFBPs on Customer Due Diligence (CDD) – November 2024

The CDD Implementation Guide sets out step-by-step expectations for identifying and verifying natural and legal persons, identifying and verifying beneficial owners, understanding the purpose and intended nature of the business relationship, verifying the source of funds and conducting ongoing monitoring.

10. Circular No. (2) of 2022 regarding Implementation of Targeted Financial Sanctions (TFS) on UNSCRs 1718 (2006) and 2231 (2015)

Circular 2 of 2022 operationalises targeted financial sanctions in relation to proliferation financing, particularly the regimes around the DPRK (UNSCR 1718 of 2006) and Iran (UNSCR 2231 of 2015).

TCSP Sector-Specific Guidance

1. MoET Circular No. 4 of 2021

Core sector circular

2. Supplemental Guidance for TCSPs

May 2019 — sector playbook

1. MoET Circular No. (4) of 2021

MoET Circular No. 4 of 2021 remains the foundational sector-specific circular for corporate and trust service providers. It defines the activities that make a business a company service provider, sets out core obligations around appointment of a compliance officer, customer due diligence, record keeping, STR reporting through goAML, targeted financial sanctions and registration on the supervisory portal, and outlines inspection procedures and supervisory expectations. This is the single most-cited reference in MoET inspections of the sector.

2. Supplemental Guidance for Trust and Company Service Providers – May 2019

The 2019 Supplemental Guidance is the most detailed publicly available view of how MoET expects TCSPs to manage their specific risk profile. It covers covered activities and services, customer risk factors (including nominee arrangements, complex structures, cross-border beneficial owners, PEPs and high-risk source of funds), CDD expectations at onboarding and through the lifecycle, ongoing monitoring, suspicious transaction reporting typologies, record keeping, training and independent audit. Used alongside the September 2025 DNFBP Guidelines, it is the core playbook for TCSP AML compliance UAE.

Practical TCSP AML compliance programme

The sequence below converts the regulatory framework into a practical implementation path, ordered so that earlier steps feed later ones (for example, the enterprise risk assessment must exist before you can risk-rate customers under the customer risk assessment engine).

  1. Register on goAML as a DNFBP reporting entity and set up users, alert subscriptions and reporting permissions.
  2. Register on the MoET supervisory portal and complete or refresh the AML/CFT returns.
  3. Appoint a Compliance Officer and an alternate, and document the reporting line to senior management or the board.
  4. Carry out an enterprise-wide ML/TF/PF risk assessment that reflects NRA 2024, the DNFBP Guidelines and the TCSP Supplemental Guidance.
  5. Develop AML/CFT policies and procedures covering customer risk assessment, CDD, EDD, SDD, beneficial ownership, sanctions screening, PEP handling, ongoing monitoring, record keeping and reporting.
  6. Build a customer risk assessment engine aligned with the November 2024 CRA Implementation Guide.
  7. Operationalise CDD and EDD at onboarding and throughout the lifecycle, aligned with the November 2024 CDD Implementation Guide.
  8. Implement sanctions and PEP screening at onboarding, periodically and immediately after any list update, including subscription to the EOCN Notification Alert System.
  9. Configure ongoing monitoring with rules and red flags drawn from FIU strategic reports, EOCN typologies and sector-specific guidance.
  10. File STRs or SARs through goAML without delay where suspicion arises and maintain tipping-off controls.
  11. Maintain records for no less than five years after the end of the relationship or the completion of the transaction.
  12. Deliver annual AML/CFT training to all relevant staff, covering typologies and red flags specific to TCSP activity.
  13. Commission an independent audit or review of the AML/CFT programme on a risk-sensitive frequency, at least annually for higher-risk TCSPs.
  14. Escalate any sanctions hit, STR or SAR to senior management immediately, with evidence retained in the case file.

Ready to operationalise your TCSP AML programme?

AML UAE can deliver the full programme for mainland and commercial free zone TCSPs

Conclusion: AML regulations for TCSPs in the UAE

AML regulations for TCSPs in the UAE are comprehensive and exacting for a reason: the sector sits at the gateway of UAE company ownership and control. If you operate as a mainland or commercial free zone TCSP, the practical stance is simple. Treat Federal Decree-Law 10 of 2025, Cabinet Resolution 134 of 2025, Cabinet Decisions 74 of 2020 and 109 of 2023, Cabinet Resolutions 71 of 2024 and 132 of 2023, MoET Circular 4 of 2021 and the 2019 Supplemental Guidance as the non-negotiable spine of your programme. Layer on the September 2025 DNFBP Guidelines, the November 2024 CRA and CDD Implementation Guides and the latest MoET and EOCN circulars as operational detail.

Prioritise beneficial ownership, sanctions screening and customer risk assessment. Keep documented evidence of every risk-based decision. Where uncertainty exists, escalate to senior management and, where appropriate, seek supervisory clarification rather than improvising. And if you are inside ADGM or DIFC, move to the dedicated jurisdiction pages rather than using this guide as your rulebook.

Build a Robust AML Compliance Program

We provide customised AML/CFT Policies and Procedures that are compliant with UAE Laws

Frequently Asked Questions

Who is treated as a TCSPS under UAE AML law?

Any natural or legal person who, on a commercial basis, forms companies, acts as or arranges a director, partner, secretary, trustee or nominee shareholder, or supplies registered office services or a business address for a legal person or legal arrangement. The test is activity-based under Cabinet Resolution 134 of 2025 and MoET Circular 4 of 2021.

The Ministry of Economy and Tourism (MoET) supervises mainland and commercial free zone TCSPs. ADGM TCSPs are supervised by the ADGM Registration Authority, and DIFC TCSPs by the DFSA under their own AML rulebooks.

TCSPs must register on goAML, appoint a compliance officer, run an enterprise-wide ML/TF/PF risk assessment, implement CDD and EDD, verify beneficial ownership, screen against sanctions and PEP lists, subscribe to the EOCN Notification Alert System, conduct ongoing monitoring, file STRs/SARs without delay, keep records for at least five years, train staff and commission an independent audit.

Because TCSPs get involved in various services (company formation, nominee shareholder and trustee services) that are used to obscure ownership. Cabinet Decision 109 of 2023 places strict obligations on the legal person and, in practice, on the TCSP administering it, to identify and keep current the 25% or more beneficial owner or anyone otherwise exercising control, and to disclose nominee arrangements.

Yes. ADGM and DIFC operate as financial free zones with their own AML rulebooks, supervised by the FSRA and DFSA, respectively, with their own rulebook-level penalties. The federal statute Federal Decree-Law 10 of 2025 still overarches the UAE AML system, but the operational rulebook for ADGM and DIFC TCSPs is the free-zone one, not the MoET Circulars. Use the dedicated ADGM and DIFC jurisdiction pages on amluae.com for those regimes.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

Proliferation Financing Institutional Risk Assessment by FIs, DNFBPs, and VASPs

Blogs

Last Updated: 04/1/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Proliferation Financing Risk Assessment: At a Glance

  • Proliferation Financing Risk Assessment is the process of identifying, analysing, and mitigating risks related to the financing of Weapons of Mass Destruction (WMD).
  • The Federal Decree Law 10 of 2025 and Cabinet Resolution 134 of 2025 make PR Risk Assessment a mandatory part of the AML/CFT & CPF framework, particularly for DNFBPs, FIs, and VASPs.
  • Guidance from EOCN and FATF requires businesses to assess PF risk at both enterprise and customer levels.
  • The PF Risk Assessment process includes evaluating inherent risk, control effectiveness, residual risk, and ongoing monitoring.
  • A robust Proliferation Financing Compliance Framework integrates governance, risk assessment, and control mechanisms across the business.

What is Proliferation Financing Risk Assessment?

Proliferation Financing Risk Assessment is the process of identifying, analysing, and assessing the risk that a business may be exposed to activities involving the financing of weapons of mass destruction (WMD).

In simple terms, Proliferation Financing Risk Assessment enables businesses to assess their exposure across customers, geographies, products, and transactions, and implement appropriate PF risk control measures to prevent and mitigate PF risks.

Identifying and assessing your business’s vulnerabilities to the threats of proliferation financing is essential.

The Executive Office for Control and Non-Proliferation (EOCN)has issued a Proliferation Financing Institutional Risk Assessment Guidance for FIs,DNFBPs, and VASPs.

In its recommendations, the FATF included a thorough assessment of the PF risk and the development of adequate counter-proliferation financing (CPF) measures for managing this risk. As an active member of FATF, the UAE commits to developing detection, prevention, and mitigation measures against PF.

Let us discuss the key highlights of the guidelines and the authority’s recommendations to the private sector.

EOCN’s Guidance on Proliferation Financing Risk Assessment

EOCN released a guidance on Proliferation Financing Institutional Risk Assessment for Financial Institutions (FIs), Designated Non-Financial Businesses and Professions (DNFBPs), and Virtual Asset Service Providers (VASPs).

The guidelines discuss various risk categories and factors associated with proliferation financing, the methodology the regulated entities must consider in assessing the overall PF risk the business is exposed to, the customer-specific PF risk, and the risk mitigation measures to be implemented as part of CPF.

Let us now understand the importance of proliferation financing risk assessment in safeguarding the business.

Why Proliferation Financing Risk Assessment is Important?

Proliferation financing means supporting or facilitating the proliferation of weapons of mass destruction (WMD) and their delivery systems. It means providing funds for or facilitating the following activities related to nuclear, biological, and chemical weapons:

  • Manufacturing
  • Using
  • Developing
  • Possessing
  • Transporting
  • Brokering
  • Trading
  • Transferring
  • Transshipping
  • Stockpiling

It also includes financing or facilitating the delivery of these weapons or their related materials, i.e., dual-use goods or technologies used for illegal purposes.

Unless you identify the potential vulnerabilities, your business may be unknowingly exploited for the above-mentioned proliferation financing activities. Thus, to counter proliferation financing risk, you must assess the potential PF threats at the business level and also at the business relationship level. You must learn how your business is vulnerable to PF risks. You must know the characteristics of PF risks, which you can spot and raise an alert.

You will face enormous penalties if you do not apply CPF measures or willingly or unwillingly engage in proliferation financing activities. It may result in various national and international sanctions, leading to irreversible reputational damage and loss of customer trust and revenue.

So, it becomes essential for you to identify and prevent the proliferation financing risks. This is possible with timely and accurate PF risk assessment and developing an integrated risk management framework, combing anti-money laundering, combating terrorism financing, and countering proliferation financing. The PF risk assessment at the entity level is popularly known as Proliferation financing Institutional Risk Assessment, Proliferation financing Business Risk Assessment, or Proliferation financing Enterprise-Wide Risk Assessment.

Steps in Proliferation Financing Risk Assessment

The guidelines also elaborate on the various questions that can be included in the Know Your Customer (KYC) and Customer Risk Assessment process to assess the PF risk posed by each customer or transaction.

The guidelines also discuss some of the best practices the regulated entities must implement to identify and counter the proliferation financing risk.

While evaluating the risks of ML and TF, entities must also assess the PF risks. During this procedure, you must handle the following steps:

Assess inherent risks

You must analyze the inherent proliferation financing risk your business is exposed to considering the following risk factors:

  • Customer and the nature of business activities the customer is associated with
  • Geography
  • Products, services, and transactions
  • Delivery channels
  • Cyber risks to software and systems

The assessed inherent PF risk can be classified as low, medium, or high, considering the PF vulnerabilities, the risk appetite of the business, etc.

Check the adequacy and effectiveness of controls

The next step is checking the adequacy and effectiveness of control measures. These measures aim to manage and mitigate the inherent risks identified in Step 1.

A control measure is adequate only if it is accurate in risk detection and prevention. The control effectiveness must be determined considering the quality of the control design and the operation efficacy of the controls. The outcome of the control effectiveness can be determined only based on the degree and extent of how well the controls can manage the impact of the risk on the business.

Based on the analysis of the adequacy or deficiencies in the design and operation of the controls, the control measures can be classified as effective, partially effective, or ineffective.

You must conduct frequent reviews of control measures to test effectiveness and sufficiency. If found otherwise, you must take corrective actions.

Identify residual risks

Residual risk = inherent risk (less) controls’ effectiveness

It means whatever risk remains from the inherent risk after considering control measures is the residual risk.

Ongoing risk assessment

When new, emerging risks arise, a risk assessment must be conducted. Based on these new risk scenarios, your control measures must change. Thus, you must frequently review and update PF risk assessment for the business and particular customer.

Key Risk Factors in PF Risk Assessment

A documented proliferation financing risk framework is essential for DNFBPs. A well-designed PF assessment ensures that the risk assessment for proliferation financing is proportionate to the nature, size and complexity of the business.

DNFBPs should document their understanding and assessment of PF risk. The approach for PF risk assessment should be commensurate with DNFBP’s nature and size of business. DNFBP’s PF risk assessments shall include the following categories:

a. Geographic Risk: 

Geographic risk in proliferation financing involves exposure to high-risk or sanctioned jurisdictions. Regional risks PF extend beyond sanctioned countries, as proliferators often rely on third-country routing. A proper geographic PF assessment considers both direct and indirect geographic exposure.

DNFBPs should identify and assess their business locations, where it conducts business and their target markets.  

As mentioned above, North Korea and Iran are the major source of PF risk. However, it is pertinent to note that geographic risk is not limited to these countries only, as such countries and terrorist groups depend on global networks, such as using neighbouring countries to route the money or procure the proliferation materials. 

b. Customer Risk:

Customer risk in proliferation financing is primarily identified through PF customer screening and may arise from the following aspects:  

Sanctions Exposure – Where the customer is a UN-sanctioned person or entity. 

Entities owned by UN-sanctioned persons – During the CDD process, DNFBPs must identify the UBO of such entities and screen them against the TFS list.  

Customer business activities – Customers producing proliferation-sensitive goods can pose PF risk on DNFBPs.  

Geographic exposure– DNFBPs shall assess customers’ locations (residence and business place).  

c. Product and Service Risk:

Product and service risk in proliferation financing exists where products and/or services can be misused to raise, move, or disguise funds or procure sensitive goods.

DNFBPs shall assess the PF product risks that their products or services may be exploited for proliferation financing in any way; either to obtain funding for WMD activities or to disguise the funds or to obtain proliferation-sensitive goods.  

Proliferation Financing Risk Assessment as part of AML/CFT Framework

An effective proliferation financing risk assessment should form an integral part of an organisation’s AML/CFT Framework.

Integrating PF Risk Assessment within the AML/CFT framework ensures alignment with UAE regulatory requirements, FATF Recommendations, and targeted financial sanctions (TFS) obligations.

A comprehensive proliferation financing assessment enables DNFBPs to evaluate PF risk in AML/CFT across customers, products, services and geographic exposure.

Businesses need to understand the Key Components of Proliferation Financing Risk Assessment:

1. Proliferation Financing Threats

Proliferation Financing threats refer to persons and entities that have previously caused or have the potential to evade, breach, or exploit a failure to implement TFS related to Proliferation. 

Key risk factors associated with PF threats include links to sanctioned countries like North Korea and Iran, sanctioned entities, front or shell companies, and actors involved in the procurement of dual-use goods.

Terrorist organisations and illicit networks may also present PF threats where there is an interest in acquiring nuclear, chemical, or biological materials.

2. Proliferation Financing Vulnerabilities 

Vulnerabilities in proliferation financing refers to weaknesses that may facilitate the breach, non-implementation, or evasion of TFS related to Proliferation.

Vulnerabilities may include features of a particular sector, a financial product, or a type of service that make it attractive for a person or entity engaged in the breach, non-implementation, or evasion of TFS related to Proliferation. 

PF vulnerabilities may be based on factors such as business structure or sector (banking or insurance), products or services (virtual assets or money transfer services), customers and transactions (customers from high-risk jurisdictions like Iran). 

To identify the PF vulnerabilities, DNFBPs should consider the international reports on PF typologies and the sectoral reports on PF issued by UAE authorities. 

What is the principal vulnerability and driver of proliferation financing?

Principal Vulnerability refers to the immediate PF risk that a business is exposed to. The principal vulnerability would differ from business to business, depending on its PF risk assessment. The Drivers of such principal vulnerability will also differ from one business to another, as no two businesses are the same, including their PF risk factors.

3. Proliferation Financing Consequences  

Consequence  refers to the outcome where funds or assets are made available to proliferators, which could be used to procure the materials, items, or systems for developing illicit nuclear, chemical, or biological weapon systems, causing the threat of use of WMD.  

The consequences of proliferation financing are severe. The risks of financing proliferation include enabling the procurement of WMD materials, compromising global security, and exposing DNFBPs to regulatory sanctions, criminal liability and reputational damage.

Proliferation Financing Risk Mitigation Measures

The business must apply adequate PF risk mitigation measures based on the assessed risk and adopt a risk-based approach.

The measures you apply to combat ML and TF risks may also help you fight the PF risks. But pay attention to the PF risk factors while applying these measures to avoid missing the PF-specific threats to your business. These risk-mitigating measures include:

KYC and CDD during client onboarding

During this process, you will identify customers and verify their identities. You learn about customer’s:

Further, you must include detailed questions in the KYC and customer risk assessment questionnaire to uncover the PF risk the customer may pose. Such questions may relate to the following:

  • geographies the customer is associated with,
  • the jurisdictions proposed to be involved in the transactions,
  • the consistency between the proposed transaction and the customer’s social and economic profile,
  • ease and cooperation in identifying the UBOs,
  • ease in identifying the customer’s source of funds and wealth,
  • delivery channels used – mode of interacting with and onboarding the customer,
  • customer’s business segment, whether associated with a high-risk industry,
  • nature of the products or services requested by the customer,
  • customer’s legal structure – is it overly complex,
  • reasonableness of the transaction value,
  • frequency of the transactions executed by the customer, etc.

As applied to the customer, the KYC and  customer due diligence measuresmust also be adopted for the beneficial owners, senior management, power of attorney, and authorized signatories of the customer.

Understanding the customer’s association with dual-use goods or controlled items, either as direct trading or involvement in the shipment or transshipment of goods, is essential to assessing the PF risk.

The customer details must be periodically reviewed to ensure their validity, relevance, and accuracy and to identify any change in the customer profile that may impact the customer’s PF risk assessment.

Customer screening against sanctions and adverse media

As one of the CPF measures, you must screen your customers against a comprehensive and accurate database pertaining to sanctions, watchlists, and adverse media. You must screen the customer and connected persons, including the ultimate beneficial owners, directors, attorney holders, and authorized signatories.

Screen them against various lists to find matches with:

  • Adverse media or news
  • Criminal cases
  • PEPs or close relations with PEPs
  • Sanctions or association with sanctioned persons
  • Links with proliferators or proliferation financing activities

The screening results must be considered for determining the customer’s risk profile and the risk mitigation measures required.

Enhanced Due Diligence (EDD)

When the PF risk arising from a business relationship is high, you must apply enhanced due diligence measures. The following is an illustrative list of customer attributes that call for EDD measures:

  • If a customer is a PEP
  • If the customer is residing in or has business operations in a high-risk jurisdiction
  • If the customer engages in products or services with higher risks of PF
  • If the customer has a highly complex and opaque ownership structure
  • If the customer is associated with a high-risk business sector
  • If the customer uses international corporate vehicles for asset structuring and investment needs

Considering the above and other factors, if the customer is assessed as posing an increased risk, you must collect more information from independent sources for customer identification and identity verification purposes. In such high-risk corporate customers, you may reduce the beneficial ownership threshold from 25% to 10% to apply checks on more individuals associated with the customer.

You must conduct frequent and more rigorous transactions and business relationship monitoring. Check their financial data, litigation history, and criminal records to build their risk profile. Whether you start, continue, or exit the business relationship with them, you must get approval from the senior management.

Ongoing monitoring – Business Relationship and Transaction

You must continuously monitor the customer profile and transactions to check the consistency between the customer’s risk profile and the transactions executed by the customer. The frequency of reviewing and updating the KYC and CDD details highly depends on the existing risk profile of the customer. If a customer’s risk profile changes, necessary measures must be immediately applied to manage the changed level of risks, e.g., if the risk changes from low to high, EDD measures must be applied. You must note and report anything found suspicious in a transaction or customer.

Suspicious Activity Reporting

Stay alert to unusual behaviour while onboarding the customer, managing the transaction, and performing ongoing monitoring. If you detect any suspicion indicating the involvement of proliferation financing or customer’s association with PF, conduct further investigation, and if required, submit a Suspicious Activity Report (SAR)or Suspicious Transaction Report (STR) via the goAML portal.

Employee screening and training

Besides screening your customers, conduct employee screening before hiring them. Check for their competence, integrity, and ethical behaviour. Assess their background to find any linkages with proliferation financing activities.

Everyone in the entity must align with the goals to fight against ML, TF, and PF. So, they must undergo relevant training to detect and deter the exploitation of the business for proliferation financing activities. All employees, including senior management, must participate in PF-specific training. Customer-facing employees or those whose job duties expose them to PF risks must undergo specialized training. Employees who perform transaction monitoring, CDD, KYC, EDD, risk assessments, and screening must get focused training to identify the PF risks while performing their duties.

In order to mitigate PF risks adequately, businesses must adopt the following Best Practices for Proliferation Financing Risk Management.

Want to contribute to a safe and trustworthy global business environment?

Conduct Proliferation financing Institutional Risk Assessment with the help of our experts!

Best Practices for Implementing a Proliferation Financing Compliance Framework

Implementing an effective PF compliance framework requires a well-structured approach that aligns. risk assessment, governance, and control mechanisms across the business.

All these measures help you identify, assess, and combat PF risks. For effective implementation of the counter-proliferation financing framework, adopt the following best practices:

  • Including the proliferation financing risk factors while conducting an overall Enterprise-Wide Risk Assessment.
  • Including and integrating CPF in the business’s overall governance framework.
  • Information manuals on proliferation financing risks must be developed and communicated across the organization, covering the policies, procedures, and controls to identify and effectively mitigate PF risk.
  • CPF policies must provide guidance on dealing with dual-use goods and detecting and reporting PF-related suspicious activity.
  • Adequate screening systems that enable timely detection of customers associated with dual-use goods and sanctioned lists must be implemented.
  • A proper process and system must be deployed to apply asset-freezing measures when any designated entity or person is identified entities. It should also support prompt termination or suspension of business relationships and timely reporting to the EOCN.
  • The effectiveness and adequacy of the CPF measures must be periodically tested and enhanced.
  • Before launching new products or services, the entity must assess the PF vulnerabilities.
  • Process and system must be implemented for mandatory senior management approval before onboarding a customer posing PF risk.

AML UAE’s role in proliferation financing institutional risk assessment

Since you have understood the necessity of assessing and combating the proliferation financing risk, why not give it the importance it deserves? You must be proactive enough to include them in your overall AML/CFT framework. If you need any support, AML UAE is at your service.

We are a leading provider of AML, CFT, and CPF compliance services in the UAE. We help our clients fight well against financial crimes, including money laundering, terrorism financing, and proliferation financing. Besides AML compliance services, our consultants and expert professionals help you:

  • Understand the importance of CPF in the context of financial crimes
  • Detect and assess the emerging risks of PF
  • Identify the appropriate measures against PF
  • Implement these CPF measures and controls to mitigate or prevent PF risks

Intend to stop the risks of proliferation financing to your business?

Partner with AML UAE to assess PF risks and apply mitigation measures.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

Responsible AI Adoption in AML Compliance

How to Ensure Responsible AI Adoption in AML Compliance

Blogs

Last Updated: 03/31/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Responsible AI Adoption in AML Compliance: Key Takeaways

  • Businesses are increasingly relying on Artificial Intelligence (AI) to streamline transaction monitoring, customer risk profiling, and AML investigations.
  • Responsible AI Adoption in AML Compliance ensures that AI systems are established with controls proportionate to their regulatory and operational impact.
  • AI use cases that influence regulatory reporting or AML compliance decisions require stronger oversight and human review.
  • Effective AI Governance in AML compliance includes model validation, human oversight, data governance, and continuous monitoring, which supplements responsible AI Adoption in AML compliance.
  • Aligning AI risk management with existing risk-based AML frameworks helps businesses adopt AI responsibly while ensuring regulatory compliance.
  • Embedding Human-in-Command, Human-in-the-Loop, and Human-on-the-Loop oversight within existing AML governance frameworks helps ensure responsible AI Adoption in AML Compliance with UAE laws.
  • The UAE’s regulatory framework, guided by the National Committee and Supervisory Authority, recognises the impact of new and developing technologies, including AI, in financial crime detection and calls for responsible AI Adoption in AML compliance.
  • UAE regulations consistently emphasise that Senior Management and the appointed Compliance Officer remain fully accountable for the outcomes of AI-assisted compliance processes.
  • The Senior Management is legally vested with the authority to make strategic decisions and is required to approve all internal controls, acting as the ultimate “Human-in-Command”.

Definition: Responsible AI Adoption in AML Compliance

Responsible AI Adoption in AML Compliance refers to the practice of responsibly implementing artificial intelligence systems according to their potential impact on regulatory reporting, AML compliance decisions and financial crime risk management

With this approach, businesses can apply governance controls that are proportionate to the extent of ML/TF and PF risk associated with each AI application. This ensures that AI tools support AML compliance processes without undermining regulatory accountability or professional judgment.

What Is Responsible AI Adoption in AML Compliance?

A Responsible AI Adoption in AML Compliance involves evaluating and implementing AI applications according to their potential impact on regulatory compliance, operational risk, and financial crime detection outcomes.

This concept aligns with the risk-based approach already embedded in AML/CFT frameworks, where businesses allocate resources and controls in proportion to the level of financial crime risk.

In terms of practical application, responsible AI Adoption in AML compliance or risk-based AI governance involves:

  • Identifying where AI is used within AML compliance and ML/TF, and PF risk mitigation processes
  • Assessing the risks associated with such AI applications
  • Implementing governance controls commensurate with those risks
  • Maintaining human accountability for AML compliance decisions.

By applying commensurate oversight, businesses can ensure that AI tools used during ML/TF and PF risk mitigation measures support AML compliance operations without replacing human judgment.

This structured approach ensures that AI improves operational efficiency concerning compliance obligations without undermining regulatory compliance or accountability or exposing the business to unidentified or incidental risks arising from relying on AI tools.

Why Businesses Are Using AI in AML Compliance

Businesses face increasing pressure to detect and report financial crime schemes while managing growing volumes of data. AI technologies offer a tremendous opportunity to simplify and streamline AML programs by improving the speed and accuracy of analysis and output. AI can support AML compliance teams by:

  • Detecting complex transaction patterns and anomalies
  • Assisting with Customer Risk Profiling
  • Accelerating investigative and reporting workflows
  • Summarising large volumes of due diligence documentation and case files.

These capabilities of AI tools allow compliance professionals like KYC Analysts, Screening Analysts, Transaction Monitoring Analysts, Risk Analysts, and AML Compliance Officers to focus on high-risk cases and regulatory reporting activities, improving the overall efficacy of AML programs.

The use of AI across various ML/TF and PF risk mitigation measures is elaborated below, necessitating responsible AI Adoption in AML compliance with use cases depicting how AI can be leveraged by the compliance function across the AML lifecycle.

AI Use Cases Across the AML Lifecycle

In order to understand the risks of AI use in AML compliance and ensure responsible AI adoption in AML compliance, it’s important to understand some of its use cases where AI is usually relied upon by compliance teams while carrying out AML compliance obligations.

AML Compliance Stages  Potential AI Use Cases in AML Compliance 
Customer Onboarding / KYC Using Gen AI to ingest KYC documentation and customer identity verification
Sanctions Screening Alert analysis, primary disambiguation and entity resolution
Customer Risk Profiling AI-assisted customer risk scoring and customer risk profiling
Transaction Monitoring Pattern detection and anomaly identification
Enhanced Due Diligence  Source of Wealth and Source of Funds analysis and comparative analysis with customer profile
AML Investigations Case summarization and evidence review
Suspicious Activity/ Transaction Reporting Drafting internal SAR/STR narratives for escalation to AML Compliance Officer or MLRO
Ongoing Monitoring  Trend detection across transactions and behaviour
Recordkeeping  Automated compliance documentation, archival, and retrieval 
While these applications of AI in ML/FT and PF risk management can improve team efficiency and reduce output timelines, they must be deployed within a structured governance framework to ensure responsible AI Adoption in AML compliance. 

Thinking of Using AI in Your AML Program?

We provide Risk Assessments and AML Compliance Advisory

How to Ensure Responsible AI Adoption in AML Compliance

Businesses considering the use of AI in compliance environments should adopt a structured risk evaluation process. This process typically involves four core stages:

  • Step 1: Defining the Context of AI Use in AML Compliance
  • Step 2: Assessing the Regulatory and Operational Impact of Errors
  • Step 3: Categorising AI Applications by Risk Levels
  • Step 4: Applying Proportionate Guardrails and Human Oversight

Let us discuss each step in detail.

Step 1: Defining the Context of AI Use in AML Compliance

The first step is to determine how AI outputs will be used by compliance teams within the organisation. Businesses must be mindful of distinguishing between internal analytical and escalation use and external regulatory reporting use.

Internal uses of AI in AML compliance may include:

  • Summarising transaction monitoring alerts during initial AML investigations
  • Generating case summaries for internal escalation to the AML Compliance Officer or MLRO
  • Analysing transactions as well as behavioural patterns and indicators linked to potential money laundering typologies
  • Supporting customer risk profiling and re-CDD
  • Assisting with instant CDD file reviews
  • Summarising and tracing beneficial ownership documentation
  • Analysing adverse media and sanctions screening outcomes for quicker disambiguation
  • Conducting regulatory research and policy implementation
  • Generating internal risk briefings for compliance committees or senior management for review
  • Assisting with EWRA reviews and recalibrations.

In the context of internal uses, AI primarily functions as a decision support or a productivity tool, enabling compliance teams to process large datasets, identify patterns, and summarise information more efficiently. However, the outputs must remain subject to human review and professional judgment, as businesses regulated under UAE’s AML regime remain responsible for the accuracy and completeness of compliance requirements.

Businesses must ensure that internal AI outputs are validated before influencing compliance decisions such as risk ratings, investigation outcomes, or escalation to the Compliance Officer.

External uses of AI in AML compliance may include:

External use refers to situations where AI outputs contribute towards documents, records, or communications that may be reviewed or inspected by regulators, supervisory authorities, or law enforcement agencies. Examples of AI assistance are as follows:

  • Suspicious Transaction Reports (STRs) or Suspicious Activity Reports (SARs) narratives and details to be submitted to the UAE FIU through the goAML portal
  • Documentation supporting SAR/STR and CNMR/PNMR decision-making
  • Responses to supervisory authorities’ queries or information requests
  • Documentation supporting account freezing or reporting decisions for TFS compliance
  • Internal escalation and investigation reports that may be later disclosed to relevant authorities during inspection.

Under UAE AML legislation, businesses are required to file these reports without delay to FIU. Because these reports may trigger investigations, freezing orders, or other enforcement actions, any AI involvement in their preparation must undergo scrutiny by an AML Compliance Officer or MLRO, as most of these responsibilities come under their accountability under AML law and any inaccuracy could undermine investigations and expose the business to regulatory risk.

Why does the distinction matter?

Defining the context of AI use facilitates businesses to align AI governance with the UAE AML/CFT framework is necessary as AML laws in UAE require regulated businesses to:

  • Identify and assess risks associated with products, services, geography, customers, and technologies.
  • Implement and establish internal policies, procedures and control measures approved by the senior management and overseen by AML compliance officer.
  • Ensure that controls are proportionate to the ML/TF and PF risks the business faces.

By distinguishing between internal analytical uses and externally relied upon outputs, businesses can ensure that governance controls are calibrated according to risk proportion. This helps ensure that internal analytical assistance is separated from outputs that could influence regulatory obligations or supervisory involvement, substantiating responsible AI Adoption in AML compliance by businesses.

Step 2: Assessing the Regulatory and Operational Impact of Errors

Once the intended use of the AI system has been established, businesses need to evaluate the consequences of potential errors. Questions that businesses should consider include:

  • Could inaccurate outputs by AI-assisted or AI-generated compliance processes affect regulatory reporting?
  • Could the use of an AI system influence customer risk classification/ratings?
  • Could errors create legal, financial, or reputational consequences, such as fines, penalties, a ban, or license revocation?

Where the potential consequences due to AI system use, or errors, are materially significant, businesses should apply stronger oversight mechanisms and validation procedures to make sure their operations are embedded with responsible AI Adoption in AML compliance.

Step 3: Categorising AI Applications by Risk Levels

Following the risk assessment of the regulatory and operational impact of errors, AI applications or tools used by businesses need to be further categorised according to their potential impact on AML compliance outcomes.

  • Low-Risk AI Applications: These involve routine operational activity with minimal regulatory implications. Examples include administrative summarisation tasks or internal documentation support. The oversight model that can be relied upon to mitigate risk is a human-in-the-loop supervision, where compliance teams monitor AI outputs and intervene if and when necessary.
  • Medium-Risk AI Applications: These involve AI systems whose use may influence investigative workflows or compliance analysis, but do not directly determine regulatory outcomes. Examples include transaction monitoring analysis or document summarisation at the time of due diligence reviews. The oversight model that can be relied upon to mitigate risk is human-in-the-Loop (HITL) validation prior to decision-making, to ensure that AI outputs are reviewed before influencing compliance actions.
  • High-Risk AI Applications: These involve AI use cases that directly contribute to regulatory reporting or compliance decisions with legal implications. Examples include SAR, STR, CNMR, PNMR, and similar regulatory reporting activities, as well as communications with regulatory or supervisory authorities. The oversight model that can be relied upon to mitigate risk is human-in-the-loop (HITL) review and approval, which needs to be mandatory, while human-in-command (HIC) governance helps ensure that AI systems used in such sensitive processes operate within the business’s risk appetite.

Step 4: Applying Proportionate Guardrails and Human Oversight

After categorising AI systems by risk levels, businesses need to implement controls that are strictly proportional to the risk materiality of the AI system’s use case. Because KYC and AML reporting processes pose a high risk, they may require rigorous, extensive enforcement of guardrails. Chief among these is HITL, with mandates that human experts review and validate the extracted data and retain ultimate responsibility for the final compliance decision.

The guardrails involving human oversight and their categories are discussed. More at length in further paragraphs, enabling businesses to understand responsible AI Adoption in AML compliance.

Aligning Human Oversight Models with UAE AML Regulatory Expectations

When AI is used within AML programs, the responsibilities of Senior Management and the AML Compliance Officer (or MLRO) could ideally align closely with locally as well as internationally recognised and layered human oversight models, which guide a responsible AI Adoption in AML compliance.

Three human oversight models that are commonly applied to ensure responsible AI Adoption in AML compliance are:

  • Human-in-Command (HIC)
  • Human-in-the-Loop (HITL)
  • Human-on-the-Loop (HOTL)

These models help businesses implement risk-based AI governance for AML compliance while maintaining accountability under UAE law.

Human-in-Command (HIC)

Human-in-Command refers to the highest level of oversight in AI governance. Under this model, humans retain ultimate strategic authority over the establishment, governance, and risk appetite for the use of AI systems.

UAE Governance Alignment: In accordance with legal requirements, Senior Management functions as the Human-in-Command layer for the overall AML/CFT governance framework. Their responsibilities for the HIC layer include:

  • Approving and finalising AML/CFT policies, internal controls, and procedures
  • Defining the business’s ML/TF/PF risk appetite
  • Approving technology and monitoring systems used in AML programs
  • Reviewing AML compliance reports submitted by the AML Compliance Officer
  • Directing enhancements to AML systems and controls where deficiencies are identified.

In the context of AI governance, Senior Management ensures that AI systems used in AML compliance operate within the business’s approved risk management framework, which helps ensure responsible AI Adoption in AML compliance.

Human-in-the-Loop (HITL)

Human-in-the-Loop oversight refers to direct human review and approval before a medium- or high-risk decision is finalised. This model is essential where AI outputs directly influence regulatory reporting or compliance decisions.

UAE Governance Alignment: In accordance with legal obligations, both Senior Management and the Compliance Officer act as HITL control points for critical compliance decisions.

– Senior Management HITL responsibilities: Include approval of certain high-risk business decisions, including:

  • Continuing or establishing business relationships with Politically Exposed Persons (PEPs)
  • Approving correspondent banking relationships
  • Authorising specific high-risk financial transactions and business relationships.

These approvals require mandatory human review before high-risk actions are taken.

– Compliance Officer HITL responsibilities: The AML CO or MLRO acts as the primary HITL for suspicious activity or transaction detection and reporting. Their responsibilities include:

  • Reviewing alerts generated by monitoring systems
  • Analysing customer records, transaction patterns, and reports or files created
  • Making a final decision on whether to file SAR/STR or CNMR/PNMR with the FIU when internal reports are escalated to them.

Even when AI or automated systems detect anomalies, the AML CO or MLRO must independently review and validate their findings before initiating regulatory reporting to ensure responsible AI Adoption in AML compliance.

Human-on-the-Loop (HOTL)

Human-on-the-Loop oversight refers to continuous monitoring of systems rather than reviewing every individual output. The human supervisor oversees system performance and intervenes when anomalies or risks arise.

UAE Governance Alignment: In alignment with UAE laws, the AML Co or MLRO performs the HOTL role for ongoing AML operations, including:

  • Overseeing transaction monitoring systems
  • Reviewing alerts generated by automated or AI-assisted monitoring tools
  • Assessing whether internal processes are aligned with the prevailing regulations
  • Identifying emerging financial crime risks and system weaknesses
  • Recommending improvements to AML controls and systems.

Through this function, the AML CO or MLRO ensures responsible AI Adoption in AML compliance and makes sure that including AI tools remains effective, compliant, and responsive to emerging ML/TF risks.

Accordingly, regulated Businesses in UAE must demonstrate the following measures to substantiate that there exists a responsible AI Adoption in AML compliance:

  • Documented AI Governance Frameworks: Internal policies, controls, and procedures must be expressly approved by Senior Management.
  • Clear accountability for AI-assisted decisions: Ensuring the Compliance Officer maintains independent decision-making authority for reviewing and analysing suspicious transactions or activities, serving as the required human-in-the-loop.
  • Proactive Risk Assessments: Documenting risk assessments conducted prior to the launch or use of any new AI technologies, products, or processes.
  • Transparent Validation and Ongoing Monitoring: Deploying an independent audit function to test the effectiveness and adequacy of the AI-assisted internal policies and controls.

However, businesses remain exposed to risks when relying on AI for their compliance programs, a fact that warrants adequate consideration.

AI Risks in AML Compliance Programs

The introduction of AI into AML processes introduces a number of distinct risk categories that regulated businesses must manage. These risks include: Model Risk, Data Privacy Risk, Regulatory Risk, Bias Risk, Operational Risk, and Vendor Risk.

  • Model Risk: Arises where AI systems produce inaccurate alerts or flawed findings, such as customer risk ratings, due to training data limitations or model design issues.
  • Data Privacy Risk: Arises when sensitive customer information is processed through AI systems without explicit consent, unclear purpose limitations, and appropriate safeguards.
  • Regulatory Risk: Emerges if AI-generated outputs contribute to inaccurate regulatory reporting and incorrect or inadequate regulatory submissions and correspondence.
  • Bias Risk: Presents itself when training data leads to unfair or inaccurate customer risk ratings or risk allocation.
  • Operational Risk: Develops when compliance teams become overly reliant on automated outputs and fail to implement risk-based HITL, HOTL, or HIC oversight.
  • Vendor Risk: Arises where businesses depend on third-party AI systems which lack transparency, governance controls or adequate safeguards.

These risks reinforce the importance of structured governance of AI-reliant compliance frameworks to ensure responsible AI Adoption in AML compliance.

Unsure How to Assess AI Risks in AML Compliance?

We assist with the AML Health Check support

Governance Controls for AI in AML Compliance

Effective governance for AI systems used for AML compliance requires both technical safeguards and operational oversight. Key governance measures to ensure responsible AI Adoption in AML compliance usually include:

  • Establishing robust human oversight mechanisms for high-risk outputs, such as HIC or HITL
  • Conducting AI model testing and validation to ensure accuracy and reliability
  • Establishing strong governance frameworks aligned with UAE AML laws to protect sensitive information, as well as ensure cybersecurity, and ensure data integrity
  • Relying on explainability tools or taking measures to allow AI outputs to be interpreted and justified in the event of regulatory inspections
  • Creating detailed audit trails and documentation to support regulatory review and ensure compliance with record-keeping requirements
  • Conducting continuous monitoring to identify model drift or performance degradation and take remedial measures to bridge the gap between expected outcomes and achieved outcomes.
  • Ensuring comprehensive vendor risk management when engaging with third-party AI providers.

These controls help ensure that AI systems remain aligned with both regulatory expectations and institutional risk management standards.

AI Guardrails Businesses Can Implement Across the AML Lifecycle

Guardrails are safety measures that businesses can implement across various use cases of AI in AML compliance. Some of the AML obligations, example use cases, corresponding risks and recommended guardrails are tabulated hereunder: 

AML Obligations Example of AI Use Case Key Risks When Relying on AI Tools Recommended Guardrails to Mitigate Risks of AI in AML Compliance  
Customer Onboarding / KYC CDD Document extraction and UBO identification in complex ownership structures Data Privacy risks Human review and secure AI systems 
Sanctions Screening Alert analysis and disambiguation False Positives or Negatives Analyst validation 
Risk Profiling Customer risk scoring and profiling Model bias Model validation and explainability 
Transaction Monitoring Pattern detection through behaviour and transaction analysis Model drift Continuous monitoring 
AML Investigations Case summarization and reporting Hallucinated or inaccurate outputs Fact-checking 
Enhanced Due Diligence Sources of Funds and Sources of Wealth analysis Inaccurate analysis Cross-checking information 
Regulatory Reporting Draft narratives and preliminary internal reports Regulatory inaccuracies or misalignment Human approval  
Ongoing Monitoring Trend analysis in terms of behaviour and transactions Model degradation and redundancies Periodic recalibration of ongoing monitoring model 

Implementing governance safeguards directly into AML processes ensures that AI adoption remains consistent with the broader risk-based framework used in financial crime compliance and ensures responsible AI Adoption in AML compliance.   

Best Practices for Responsible AI Adoption in UAE AML Compliance

Businesses implementing AI within AML programs should adopt several practical measures to ensure responsible use that complies with Federal Decree Law and Cabinet Resolutions pertaining to AML compliance. These best practices include: Establishing Internal AI Governance Policies, Documenting AI Use Cases and Associated Risk Assessments, Maintaining Human Accountability for Compliance Outcomes, Conducting Ongoing Model Validation and Performance Monitoring, and Training Compliance Teams on AI Limitations and Risks.

  • Establishing Internal AI Governance Policies: Creating and regularly updating risk-based procedures and controls to mitigate ML/TF and PF risks and ensuring that such procedures and protocols are formally approved by Senior Management and that due process for such approval is followed and documentation maintained.
  • Documenting AI Use Cases and Associated Risk Assessments: Identifying and assessing specific ML, TF, and PF risks that arise from using new AI technologies before they are implemented takes businesses a step closer to responsible AI Adoption in AML compliance.
  • Maintaining Human Accountability for Compliance Outcomes: Making sure that AML CO or MLRO at the management level actively monitors internal reports on filing CNMR/PNMR, implementing freezing measures, suspicious activities and transactions and takes the final decision on regulatory reporting to the FIU through goAML portal helps businesses ensure responsible AI Adoption in AML compliance.
  • Conducting Ongoing Model Validation and Performance Monitoring: Conducting and relying on independent controls and systems audit to ensure that AI systems remain consistent with the provisions of the Decree-Law and Cabinet Decision No. 134 of 2025, ensuring responsible AI Adoption in AML compliance.
  • Training Compliance Teams on AI Limitations and Risks: Developing, implementing, and documenting ongoing training programs and capacity building to ensure that the AML CO/MLRO and compliance team understand technology and related crime-prevention methods and contribute towards achieving responsible AI Adoption in AML compliance.

Together, these best practices support responsible technological innovation while maintaining the compliance integrity demanded by UAE’s financial ecosystem.

How AML UAE Helps with Responsible AI Adoption in AML Programs

At AML UAE, our AML Consultants assist Regulated Entities in responsibly integrating AI into their AML Compliance Program. Our advisory services include risk assessments, AML compliance department setup, AML software testing and validation, and integrating AI controls into existing AML policies and procedures.

This ensures that AI technologies enhance compliance effectiveness while remaining aligned with regulatory obligations, risk-based AML fundamentals, and help ensure responsible AI Adoption in AML compliance.

Final Thoughts: Balancing AI Innovation and AML Compliance

AI presents significant opportunities to strengthen AML compliance programs. However, its responsible adoption in AML compliance must be substantiated by clear governance, structured risk assessments, and strong human oversight.

By relying on a risk-based approach to AI integration, businesses can enhance financial crime detection capabilities while maintaining regulatory compliance and operational resilience within their AML compliance program.

Build a Robust AML Compliance Program

We provide customised AML/CFT Policies and Procedures that are compliant with UAE Laws

Frequently Asked Questions on AI in AML Compliance

Can artificial intelligence replace AML compliance professionals?

No, AI cannot replace AML compliance professionals. AI simplifies and makes the responsibilities of compliance professionals easy by helping them analyse large datasets, identify suspicious transactions or patterns, draft narratives and reports for escalations. In fact, regulatory expectations require human professionals to remain accountable for compliance decisions, regulatory reporting, and communication.

– Main risks of using AI in AML compliance programs are:

  • Model errors
  • Bias in risk scoring
  • Data privacy concerns
  • Over-reliance on automated outputs

Therefore, businesses must take adequate measures to ensure responsible AI Adoption in AML compliance.

Human oversight ensures that AI outputs are reviewed, validated, and accurately interpreted before influencing compliance decisions, such as regulatory reporting and filings. High-risk compliance tasks, such as SAR/STR filings, require human-in-the-loop review and approval.

Yes, AML Consultants can assist businesses in conducting AI risk assessments, designing governance frameworks, validating models and helping businesses with responsible AI Adoption in AML compliance.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

A detailed analysis of the AML/CFT requirements for lawyers, notaries, and legal professionals in the UAE

Blogs

Last Updated: 03/30/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

AML Requirements for Lawyers in the UAE: Key Takeaways

  • Lawyers, notaries, and legal professionals in the UAE, classified as DNFBPs, are subject to the prevailing AML/CFT/CPF framework, which includes:
    • Federal Decree-Law No. (10) of 2025 and Cabinet Resolution No. (134) of 2025
  • Lawyers, notaries, and legal professionals in the UAE are supervised by the Ministry of Justice (MoJ), which includes:
    • Regulatory oversight and inspections
  • AML obligations only apply when legal professionals engage in “covered activities, such as managing client funds, real estate transactions, or company formation, making scope identification a critical first step in compliance.
  • Legal professionals must implement a risk-based AML program, including:
    • Client and firm-level risk assessments
    • Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)
    • Beneficial ownership identification
    • Ongoing transaction monitoring
    • Suspicious Transaction Reporting (STR) to the FIU
    • Sanctions and PEP screening
  • 2025 and 2026 regulatory updates provide emphasis on ensuring:
    • Inspection readiness and audit trails
    • Documented risk assessment methodologies
    • Alignment with FATF high-risk jurisdiction updates
    • Integration of counter-proliferation financing (CPF) controls
  • Lawyers and legal professionals found noncompliant can face severe regulatory action, including:
    • Financial penalties
    • License suspension
    • Practice ban
    • License revocation

When do AML/CFT and CPF Regulations Apply to lawyers, notaries, and legal professionals in the UAE?

AML obligations apply to legal professionals in UAE only when they engage in “covered activities”, including:

  • Purchase and sale of real estate
  • Managing customers’ bank accounts, savings, or securities accounts, creating, operating, or managing legal persons
  • Management of customer’s funds
  • Organising contributions for the establishment, operation, or management of the company
  • Selling and buying commercial entities

In simple words, not all legal services and advisory falls within the ambit of AML/ obligations, AML compliance is only triggered when lawyers engage in specific financial or transactional activities defined under UAE AML/CFT and CPF regulations.

Lawyers, notaries, and legal professionals come under the purview of AML obligations only when they carry out certain “covered activities” or services. It is therefore important to know when AML/CFT and CPF regulations apply to lawyers and legal professionals, i.e., so that they can ensure adequate AML/CFT and CPF compliance.

AML Legal Framework for lawyers, notaries, and legal professionals in the UAE

Core AML Legislation

Regulatory Updates (2022-2026)

These regulatory developments in the legal sector reflect a shift towards stringent enforcement, increased supervisory oversight, and a significant emphasis on proactive risk management.

Supervisory Authority

In the context of lawyers, notaries, and legal professionals or law firms licensed in UAE, other than Abu Dhabi Global Market (ADGM) and Dubai International Financial Centre (DIFC), the Ministry of Justice is the AML supervisory authority.

AML Requirements for Lawyers in UAE

What Lawyers Must Do to Comply with AML Obligations

In order to ensure AML compliance, lawyers, notaries, and legal professionals in the UAE must formulate and implement a structured methodology based on a risk-based approach that requires continuous risk assessment, verification, monitoring, and reporting across the practice and client lifecycle.

  • Conducting Risk Assessment at the Firm Level: Identifying, evaluating and understanding the inherent ML/TF and PF risks associated with the business is a must for lawyers, notaries, and legal professionals, assessing ML/TF and PF risks on a practice/business level.

Lawyers must be specifically aware of the ways illicit money can enter their ordinary course of business. The entry or placement of illegal funds may be from the client’s side, transaction type, or geography. This understanding will enable the legal practitioner to be careful before taking up any work.

  • Performing Customer Due Diligence (CDD/EDD): Lawyers and notaries must implement simplified or enhanced due diligence measures based on customers’ low or high risks, respectively.
    The client’s risk may also vary based on the type of transaction, which may require an update on the due diligence measures.

With all this information about the client, lawyers can prepare a risk profile and allocate a risk rating. At timely intervals, review and update this information in proportion to their risk rating.

  • Monitoring Client Activity and Transactions: Another essential consideration is monitoring the transactions and relationships with clients. This monitoring ensures consistency and alignment between the information lawyers have about the client and the type of transactions. Any unusual nature of inconsistency will alert lawyers at the right time to take relevant actions.
  • Ensuring Regulatory Reporting: Lawyers, notaries, and all legal professionals and practitioners must report any suspicious transaction or activity indicating potential ML/TF or PF risks to FIU. They must provide all relevant supporting information to the authority for further investigation. Adequate internal policies related to this best practice help legal professionals to comply with it.
  • Maintaining Adequate AML Records: Legal professionals must document and save all the compliance measures taken and activities performed for future reference and inspection readiness.

Where Lawyers Face ML/TF and PF Risks

Due to the inherent nature of legal services, certain activities and client behaviours present higher exposure to ML/TF and PF risks. The UAE’s National Risk Assessment (NRA) identifies Professional Money Laundering (PML) as one of the highest threats where criminals target legal professionals to create complex structures and legal arrangements to gain a veneer of respectability while laundering illicit funds.

High Risk Legal Activities

Lawyers, notaries and legal professionals are exposed to high ML/TF and PF risks, and are subject to AML obligations when they step beyond general legal advisory and prepare, conduct, or execute financial transactions on behalf of their clients relating to the following “covered activities” referred to above.

Types of Money Laundering Red Flags

  • Client Behaviour Red Flags
    • Concealing identity: The client actively avoids personal contact without sufficient cause, insists on using intermediaries for all transactions, or uses informal representation such as family or close associates acting as nominee shareholders with the intent to obscure the identities of true Ultimate Beneficial Owner (UBO) without justifiable reason.
    • Refusing Documents: Clients showcasing reluctance or inability to provide personal information, refusal to clarify their sources of wealth or supply the standard documentation required to facilitate and conclude transactions. This also includes instances of customers resorting to providing falsified, forged, or counterfeit documents.
  • Transaction Red Flags
    • Unusual Funding: The transaction involves an unexplained influx of large sums of cash, especially when used as collateral rather than direct payment, third-party funding with no apparent nexus or legitimate explanation, or private loans lacking supporting documents or regular interest repayments
    • No Business Rationale: The prospective transaction or proposal for the same appears entirely incompatible with the client’s socio-economic, educational, or professional profile. It may also include the client insisting on shortcuts or loopholes or exceptionally expedited processing, while offering to pay substantially higher fees than usual without a legitimate reason.
  • Structural Red Flags
    • Complex ownership changes: The business relationship shows frequent or inexplicable changes to the ownership, management, or beneficiaries of the client, especially when the lawyer is not notified in a timely manner or when last-minute changes are made to the identity of the parties before a transaction is completed.
    • Multiple jurisdictions: The client insists upon creation of a complex web of legal persons or arrangements spanning multiple countries, often involving offshore entities, tax havens, or jurisdictions with strict secrecy laws specifically designed to divert financial flows, obscure the money trail, and disguise beneficial ownership.

Beyond establishing and implementing operational control measures, AML regulations in the UAE require lawyers, notaries, and legal professionals to also establish a structured governance framework that ensures ongoing compliance and inspection readiness.

Save yourself from non-compliance penalties

By hiring AMLUAE for AML/CFT compliance

AML Governance and Internal Controls

  • Compliance Officer: Lawyers, notaries, and legal professionals, when engaging in covered activities, are required to appoint an independent, management-level officer to oversee AML controls and serve as the firm’s primary liaison with the Ministry of Justice and the Financial Intelligence Unit (FIU)
  • Documented AML Framework: Legal professionals are required to maintain and continuously update risk-based AML/CFT, and CPF policies, procedures, systems and controls to mitigate ML/TF and PF risks specifically arising from the firm’s covered business

Download Free AML Policy Template for lawyers, notaries, and legal professionals and practitioners

  • Management Oversight: Senior Management within the law firms or lawyers or notaries working independently, without a firm structure, must approve AML/CFT and CPF policies, establish their practice’s risk appetite, allocate adequate resources and assign clear accountability and delegation.
  • Independent Audit & Review: Legal professionals are required to conduct periodic, independent evaluations that are internal as well as external, to test the effectiveness of the firm’s AML framework and remediate control gaps identified.
  • Regulatory Inspection Readiness: Lawyers are required to securely retain all risk assessment methodologies, outcomes, Customer Due Diligence (CDD) files and transaction records for a minimum of five years to ensure prompt responses during supervisory inspections.

Penalties on Lawyers for AML Non-Compliance

Supervisory Authorities may issue warnings, mandate submission of periodic remediation reports, or appoint a temporary supervisor to oversee the legal professional’s compliance.

Administrative Penalties

  • Financial penalties: Fines of not less than AED 10,000 and up to AED 5,000,000 for each individual violation, and these fines can be applied incrementally if the legal professional repeats the same violation within a year.
  • License suspension: The supervisory authorities, upon coming across violation, can suspend or restrict the activity or profession for a specific period determined.
  • Practice ban: Lawyers, Notaries, and legal professionals may also be subject to a practice ban, preventing them from engaging in the legal sector for a specified period. Authorities may also suspend or restrict the powers of specific directors, partners, or executive personnel proven responsible for the compliance failure
  • License revocation: In the event of systemic non-compliance, complete revocation of legal license may also be directed.

Criminal Sanctions

  • Failure to Report: If lawyers, notaries, and legal professionals intentionally or through negligence fails to report a suspicious transaction to the FIU (in cases where the statutory professional secrecy exemption does not apply) then they are liable to imprisonment and a fine ranging from AED 100,000 to AED 1,000,000.
  • Tipping Off: If a lawyers, notaries, and legal professionals intentionally or unintentionally warns their client that an SAR/STR is underway, they can face a minimum of six months in prison and a fine between AED 100,000 and AED 500,000.
  • General Violations: Violation of any other provisions of AML/CFT and CPR Decree-law can lead to imprisonment or a fine of between ED 10,000 and AED 100,000

AMLUAE makes

your business less risky and more compliant

How Lawyers Can Implement AML Compliance Effectively

  • Risk Assessment Execution: lawyers, notaries, and legal professionals must adopt a risk-based approach to understand their ML/FT risks and implement relevant measures. These risks will be different and unique for each firm or individual. The chances depend on the type of services, geographies of operation, and client base of the legal practitioner.Before commencing any business relationship, lawyers are required to conduct a risk assessment of the client. For this, they may consider national reports or sectoral reports undertaken by supervisory authorities. For instance:
  • Policy Implementation: Lawyers, notaries, and legal professionals need to focus on developing and implementing policies and procedures for the company’s operations. These policies, procedures, and internal controls must manage the risks that the business faces. These controls, policies, and procedures must be:
    • Applicable to all branches, subsidiaries, departments, and functions of the company
    • Reviewed and approved by the management
    • Reasonable, effective for the identified risks, and consistent with the results of their risk assessments. 
  • Training programs: Lawyers, notaries, and legal professionals in the UAE, in order to ensure the effectiveness of ML/TF and PF risk assessment and mitigation measures deployed, must ensure that their employees have adequate knowledge and understanding of risks and awareness of the internal procedures to mitigate such risks.

Conclusion

lawyers, notaries, and legal professionals Legal professionals carry out certain activities that have higher vulnerability to ML/FT risks. They are at increased risk, whether they give tax advice, facilitate property transactions, represent clients in disputes and mediations, or act as intermediaries. Financial criminals take advantage of this vast range of services to engage in money laundering and terrorism financing.

So, they need to be careful about their entity’s risk exposure and employ the above requirements. UAE has categorized them in the DNFBPs list and expects regular compliance with the AML/CFT law provisions. Such compliance with the national AML/CFT requirements will enable them to keep themselves safe from money laundering risks.

To plan and implement any of these measures, you can also take the support of AML consultants in the UAE. A professional AML consultant will be better equipped to help lawyers, notaries, and legal professionals legal professionals and practitioners with suitable, relevant measures against money laundering. The consultant will ensure that industry-specific steps are taken in the fight against money laundering and terrorism financing.

Engage with AMLUAE

to achieve AML/CFT compliance

Role of AML UAE

AML UAE is a leading AML compliance services provider in UAE. We help lawyers, notaries, and legal professionals you with fulfilling all the requirements for AML and CFT in UAE. Our spectrum of AML compliance services is not restricted to national boundaries, but we also make sure that lawyers, notaries, and legal professionals you comply with the global regulations of AML. 

We can help you with:

  • Creating firm-specific AML policies, procedures, internal controls, best practices, and guidelines for lawyers, notaries, and legal professionals your smooth business operations
  • Setting up an expert AML compliance department for your firm that can handle all AML-related activities
  • Selecting the most effective and appropriate AML software for lawyers, notaries, and legal professionals your business needs to ensure AML compliance
  • Helping you in filing and submitting annual AML/CFT risk assessment reports with the UAE government
  • Conducting training for lawyers, notaries, and legal professionals your employees in handling KYC, screening, risk profiling, CDD, EDD, and filing of STRs

Frequently Asked Questions (FAQs)

Here are a few frequently asked questions when it comes to the need and importance of sanction and PEP screening in the customer onboarding process.

Is it compulsory to have a compliance team in your company?

It is a good practice to appoint an AML compliance team in your company that will take care of the compliance. The team will assess the risks, implement an AML/CFT compliance program, and execute CDD measures. If you do not wish to appoint an AML team internally, you can take the services of AML consultants who will help you manage all these activities. 

Legal professionals are required for the transfer of property by law or by market practice. Money launderers and financial criminals invest their illicit money in property. They do this by concealing the identity of the source of funds. They may also hide the identity of owners by using false identities. So, legal professionals must be careful when engaging in such real estate transactions. They must carry out due diligence measures for the party they are representing and the transaction. 

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

The Complete Guide to the Ultimate Beneficial Owner Verification

Blogs

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Complete Guide to the UBO Verification: Key Takeaways:

  • Cabinet Decision No (109) of 2023 On Regulating the Beneficial Owner Procedures, calls for corporate entities in the UAE to maintain an accurate and complete register of beneficial owners
  • Cabinet Decision No.(132) of 2023 contains provisions on fines and penalties for violation of the Cabinet Decision No. (109) of 2023
  • Businesses need to have well-documented processes and workflows in place to identify and verify UBOs of legal entity customers

Ultimate Beneficial Owner (UBO) Verification

Identifying the Ultimate Beneficial Owners (UBO) when engaging with corporate customers is a key component of the Customer Due Diligence process under anti-money laundering regulations.

The Anti Money Laundering (AML) compliances in UAE are governed by the following legislations:

The Federal Decree by Law No. (10) of 2025 and the Cabinet Resolution No. (134) of 2025 require the Designated Non-Financial Businesses and Professions (DNFBPs), Financial Institutions and Virtual Assets Services Providers (VASPs) to adopt a risk-based approach while onboarding a body corporate, foundation, legal entity, or legal arrangement customers.

Let AMLUAE address your money laundering
concerns

While you focus on your core processes

What is UBO (Ultimate Beneficial Owner)?

A legal entity, legal arrangement, foundation or partnership cannot run itself, and so we often get asked what is the meaning of UBO in UAE? One or more natural persons who are ultimately responsible for running any business and enjoying benefits or profits derived from operating such a business. Such a natural person is known as the “Ultimate Beneficial Owner” or UBO.

What are the Ultimate Beneficial Owners as per the UAE Regulations?

As per the UAE regulations, ultimate beneficial owner needs to be identified for ensuring compliance with prevailing AML/CFT laws and the ultimate beneficial owner of a corporate structure is any person owning 25% or more of the shares, controlling 25% or more of the voting rights, or the person exercising ultimate control or influence over the company and its management is termed as UBO.

Reporting entities in the UAE, such as DNFBPs and VASPs, are required to perform adequate due diligence measures to identify the ultimate beneficial owner of a corporate structure, who is a natural person behind the transactions, when engaging with a legal person or legal arrangement. The UBO checks are important to safeguard the business from money laundering (ML) financing of terrorism (FT), and proliferation financing (PF) of weapons of mass destruction risks, attempted behind the corporate veil.

Why is UBO different than shareholder?

A shareholder is someone who holds some percentage (%) of shares in the company. A shareholder can be a body corporate or a natural person. An ultimate beneficial owner of a corporate structure is a natural person who ultimately owns or controls a body corporate and/or the natural person on whose behalf a transaction is being conducted. It also includes those persons who exercise ultimate effective control over a legal person or arrangement.

To conclude, a shareholder may or may not be a natural person, and they may or may not own or control the company. Whereas a UBO is a natural person having ownership or controlling rights over the company. The ultimate beneficial owner needs to be identified for the purposes of ensuring AML/CFT compliance.

UBO Regulations in UAE

Further, the significance of decoding the corporate structure and bringing transparency around the UBO has also been highlighted by the Ministry of Economy in Cabinet Decision No (109) of 2023 On Regulating the Beneficial Owner Procedures 

  • This resolution overrides the earlier legislation known as the Cabinet Decision No. (58) of 2020 concerning the regulation of Beneficial Ownership Procedures. Thus, the resolution on the UBO procedures mandates the corporates entities in the UAE to maintain complete and updated register of its beneficial owners and furnish the same with the Registrar, ensuring adequate disclosure.

Cabinet Decision No (109) of 2023 was enacted to set forth the benchmark requirements applicable to the registrar concerning the identification of beneficial owners, maintaining registers, and maintaining a database for them.

Further, Cabinet Resolution No. (132) of 2023 sets out the administrative fines and penalties applicable to businesses in UAE for violation of the Cabinet Decision No (109) of 2023, resulting into inadequate disclosure or transparency around the UBOs.

Ultimate Beneficial Owner under AML - KYC and CDD requirements

The provisions of the Federal Decree by Law No. (10) of 2025 requires businesses in UAE, particularly the DNFBPs and VASPs to adopt a risk-based approach while assessing the ML/FT and PF risk arising out of conducting business with legal entities or legal arrangements.

As a part of risk-based assessment, DNFBPs and VASPs are required to identify the natural person who is/are the UBO of the legal entity. The ultimate beneficial owner needs to be identified for ensuring alignment with the AML/CFT and CPF framework of a DNFBP or VASP. Identifying and verifying the UBO can be done according to the Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures set within the business

UBO International Standards

The UAE AML/CFT and CPF laws are enacted in alignment with the international standards laid down by the Financial Action Task Force (FATF) as UAE is a signatory of United Nations (UN).

The Cabinet Decision No (109) of 2023 specifies that the Ministry of Economy shall share the data of Beneficial Owner’s Record and the Register of Partners or Shareholders (as mandated under the cabinet decision) with the relevant authorities of countries with whom international cooperation is established. It shall facilitate the exchange of data and information by providing and obtaining data pertaining to UBOs with and from their foreign counterparts.

Step-by-Step Process for Identification and Verification of UBO for AML Compliance

Ideally, the KYC and CDD procedure for identifying and verifying the UBO requires taking the following steps, which are unique from a case-to-case basis:

1. Obtain the Legal Entity/ Legal Arrangement Documents

The first step of identifying UBO starts with the collection of Legal Entity/ Legal Arrangement documents which helps in establishing the ownership or controlling structure of the entity/legal arrangement, such as:

  • Organisational structure;
  • Memorandum of association;
  • Shareholders agreement/partners register;
  • Partnership Deed;
  • Register of senior management/ governing body;
  • Charter and documentary evidence of the Foundation/ regarding the appointment of the guardian or any other natural person who may exercise powers upon the foundation;
  • Trust deed and documentary evidence of the trustee’s appointment or any other person exercising powers for the trust.

Upon document collection, the document needs to be read out carefully to identify ownership structure of the legal entity/ legal arrangement and determine who would qualify as the UBO.

2. Identify Ownership Structure and Percentage

Once any of the abovementioned relevant document is collected, the regulated entity must look out for the details mentioning the name of a natural person having 25% or more of the shares or voting rights of the entity or legal arrangement. If such details are clear, then such individual is to be construed as UBO according to the UAE laws, for applying necessary AML checks and verification measures. The difference between beneficial owner and ultimate beneficial owner is that the UBO has 25% or more of the shares or voting rights of the entity or legal arrangement, while the beneficial owner may hold lesser percentage or diluted control.

How to Identify the Ultimate Beneficial Owner when UBO cannot be identified based on shareholding threshold?

If in an event that no natural person owns 25% or more of the shares/voting rights, then a natural person with the controlling right  (This could be accomplished through a control chain or by having the power to appoint or remove the majority of the company’s management) over the entity, including the management’s decision shall be considered as a UBO.

If in any event, the shares/voting rights of a legal entity are held by another legal entity/entities, then UBO of such another entity must be identified by looking into the company documents and decoding the multiple corporate layers. This process needs to be repeated until a natural person having 25% or more of the shares/voting rights, or the ability to influence or exert control over the management’s decision is identified.

It is crucial to identify the UBO structure and know about the individuals who have a stake in the company, directly or indirectly, via another party or jointly with another person.

Under circumstances when the UBO cannot be identified based on the shareholding or controlling rights, the senior management of the entity must be treated as the UBO for the purpose of AML compliance. As it is clear that the difference between beneficial owner and ultimate beneficial owner comes down to the percentage of shares or control held, DNFBPs and VASPs must equip their staff to identify and verify UBOs and document beneficial owner details as well to ensure complete

3. Collection and Verification of UBO Identity Documents

Once the shareholding pattern of a legal entity/ legal arrangement is established and identity of the UBO is ascertained, the process of collection of identity documents of the UBOs must be carried out. The following details need to be collected from the UBOs:

  • the full name as specified in the identification card (including alias),
  • date of birth,
  • nationality,
  • legal domicile,
  • current residential address, other than post office box,
  • place of birth; and
  • percentage of shareholding or the designation in the entity.

The DNFBPs and VASPs are required to ensure that the information collected is reviewed and verified against an original, current, and valid passport or similar documents, such as:

  • an official government identification document issued by a competent government authority in digital form,
  • a valid identification card or travel document,
  • any official identification document that includes a photograph,
  • a UAE pass for verifying the addresses of individual customers who are residents, of the UAE.

4. Perform AML/KYC/CDD checks on all persons identified as UBOs

Once the UBO identification details are collected and verified, the DNFBPs and VAPS are required to carry out name screening or sanctions screening of the UBOs to ascertain if the UBO is:

  • sanctioned, under any of the relevant local and international terrorist lists, sanctions lists and watchlists,
  • a politically exposed person (PEP),
  • appears in adverse media checks and has negative information regarding their involvement in ML/FT/PF or predicate offences,
  • have a criminal record.

Following this, in line with the internal AML policies and procedures, the DNFBPs and VASPs must carry out further customer onboarding processes such as:

  • assessing the risk posed by the UBO,
  • assigning UBO appropriate risk rating according to AML/CFT and CPF policies, procedures and controls,
  • evaluating the effect of the UBO’s risk rating on the overall customer risk,
  • applying adequate CDD measures on the UBO and the corporate customer,
  • onboarding Legal Entity/Legal Arrangement as a customer, in line with the Customer Acceptance Policy.

Ultimate Beneficial Ownership and AML Compliance

Automated solutions are the futuristic way to comply with the AML/ CFT and CPF requirements as they make the detection and validation of UBOs a seamless and quick process. AML UAE can help you with compliance with the AML/CFT and CPF requirements.

Check out how to find UBO of a company

Identify UBO to ensure AML Compliance in UAE

FAQs

How do you find the ultimate beneficial owner? 

A UBO is an individual having significant control over the business through shareholding or voting rights. A UBO must have at least 25% shareholding (direct or indirect) in the company, the right to vote, and the right to appoint or dismiss directors/managers. An individual/s holding such control is your UBO.  

Entities in UAE are required to comply with UBO rules. These rules require entities to declare who their beneficial owners are and maintain a register for the same. The declaration of UBO ensures that the entity does not have a relation with money launderers or terrorist organizations and is safe to carry out transactions with.  

‘Knowing your Customer’ is essential to keep oneself safe from financial crimes and money laundering activities. By knowing the ultimate beneficial owners, you can match the list with Sanctions lists, PEPs, and terrorist lists and decide whether to onboard the customer or notify the authorities.  

UBO is a person or persons who owns or controls, whether directly or indirectly, through shares or bearer shares: 

  • 25% or more of the legal person’s share capital or  
  • 25% or more of the legal person’s voting rights 

Yes, the UBO declaration is mandatory for entities in the UAE. Declaration of UBO is essential to know your customers and their legal owners. This information helps you decide whether to enter into a business relationship with them. It is a way to detect money laundering, terrorism financing, and other financial crimes.  

A UBO is the one with ultimate control over the business. They are a natural person who owns or controls, directly or indirectly, at least 25% of the company’s share capital or at least 25% of the voting rights or have the right to appoint or dismiss a majority of the managers or directors.  

The legal person must maintain a Register of Beneficial Owners and must submit the same to the Registrar within 60 days of its registration. Also, if any changes occur in the Register, it must be notified to the Registrar within 15 days of the change.  

To verify the identity of the UBO, obtain any of the identity documents of the UBO, such as Emirates ID, valid passport, driving license, or any other ID issued by the government. Screening of the UBO is mandatory to verify whether the UBO has been listed in any of the sanctions or is a PEP. Also, obtain the details of its shareholding or any other details which qualify the person as UBO.
KYC UBO suggests identification and verification of the identity of the customer’s UBO. This is a critical part of performing KYC for any corporate entity, identifying and knowing the owners and controllers of the organization running the business operations.
As per UAE AML regulations, UBO is the natural person:
– who owns or controls, whether directly or indirectly, 25% or more of the legal person’s share capital or 25% or more of the legal person’s voting rights,
– A person having the power to appoint or remove the majority of the company’s management, or
– In case UBO could not determine any of the above criteria, then the Senior Management would be construed as the UBO of the legal entity from AML perspective.

An ultimate beneficial owner of a corporate structure is a natural person who holds 25% or more of the shares/voting rights

Steps to identify UBO include”

  • Obtaining the legal entity/legal arrangement documents
  • Identifying ownership structure and percentage
  • Collecting and verifying of UBO identity documents
  • Performing AML/KYC/CDD checks on all persons identified as UBOs

Our timely and accurate AML consulting services

For your smooth journey towards your goals

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

What is Placement in Money Laundering?

Methods of placement in money laundering

Blogs

Last Updated: 03/27/2026

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Placement in a nutshell:

  • Definition: When criminals introduce proceeds of crime (cash, negotiable instruments, precious metals, precious stones, movable assets, etc.) into the legitimate economy, it is called placement. Placement is the stage in money laundering.
  • Why it matters: It’s the criminal’s first interaction with the legitimate economy, and detection at this stage can prevent potential layering and integration.
  • How it is done: cash deposit, hawala, black-market peso exchange, unlicensed money services, casinos, gambling, prepaid cards, mobile payments, alternative payment methods, money mules.
  • Who is exposed: Banks, money service businesses, lawyers, accountants, corporate service providers, DPMS, VASPs, real estate brokers, etc.
  • What AML UAE does: Assess placement risk in EWRA, redesign AML controls and monitoring scenarios, provide placement-focused training and help submit STRs related to placement.

Placement in Money Laundering

Placement in money laundering refers to the initial step where criminals introduce illicit cash into the financial system. Money laundering is all about hiding the source and nature of the illicit funds to make them appear as if they were obtained from some legitimate activities. The process of money laundering begins with the aim of disguising the original source of the criminal proceeds, and to do so, the illegal funds must be introduced first in the open economy. Placement is the first stage of money laundering where criminals use various methods like gambling, blending of funds, currency smuggling, etc., to introduce proceeds of crime into financial system.

What is Placement in Money Laundering?

The placement stage of Money Laundering is the point at which illegal proceeds first enter the financial system. A person who has received some ill-gotten gains will surely be on the lookout for measures to clean them in order to use them freely without any stipulations from regulators.

So in order to use the funds, the criminal needs to disguise the source of proceeds to appear as the funds to be legitimate. In simple terms, the placement meaning in money laundering is the physical injection of dirty money into legitimate channels.

Money laundering involves a series of transactions to make its detection as difficult as possible. However, money laundering can broadly be classified into three stages. 1. Placement, 2. Layering, and 3. Integration. The placement stage of money laundering involves the physical introduction of cash or other assets derived from criminal activity into the financial system.

Criminals use various placement techniques like structuring, blending of funds, currency smuggling, etc., to commit money laundering.

Definition of Placement in Money Laundering

Placement is the first stage of money laundering, where dirty money is introduced into the financial system. It is the most vulnerable stage, and the chances of a criminal getting caught are the highest. 

The goal of Placement in Money Laundering:

  1. To hide the source of illicit money
  2. To distance the money from its illegitimate source
  3. To introduce dirty money into the financial system

The crimes like corruption, fraud, bribery, kidnapping, illegal arms trade, drug trafficking, smuggling, etc., are committed for money. Criminals obtain illegal proceeds, and then they try to find a way for their disposal without attracting the eyes of law enforcement.

Stages of Money Laundering

Stages of money laundering-01

First: Placement Stage

The placement stage of money laundering is the point at which illegal proceeds first enter the financial system. The money launderer puts unlawful funds into circulation by depositing cash into the bank, executing any transactions to buy any luxury goods or using them in other legitimate businesses. This is the stage where the money launderer gets rid of illegal proceeds by placing them into the legitimate financial system.

The placement stage of money laundering is the most challenging for the launderer as the disposal of illegal proceeds by introducing them into the financial system causes suspicion.

Second: Layering Stage

Layering is the second stage of the three-step process. Under layering, the launderers make numerous transactions to distance the true owner and the source of illegal money, making it harder for the authorities to track. This can typically be as easy as using illegitimate funds to invest in something legitimate so that the funds now appear to be “clean”.  Such funds are then transferred to purchase goods and services, making their detection nearly impossible.

Third: Integration Stage

Integration is the final stage of the money-laundering process. It is the stage where the disguised criminal proceeds are returned to and used by the money launderer, with a legitimate appearance given to the criminal proceeds.

When it comes to terrorist financing, integration is accomplished by distributing funds to terrorists and terrorist organizations.

Methods or Examples of placement in money laundering:

The following placement methods are amongst the most widely documented examples of placement in money laundering:-

  • Smuggling illegitimate cash or liquid monetary instruments.
  • Blending unlawful proceeds with legitimate proceeds, such as illegitimate funds introduced into the cash-intensive grocery business.
  • Repayment of debt using illegal proceeds.
  • Buying stored value cards with illegitimate money.
  • Depositing small amounts into several bank accounts to evade reporting threshold. It is also called smurfing, one of the most common money laundering techniques.
  • Buying foreign currency with illegitimate funds.
  • Cash purchase of a security or insurance.
  • Invoice fraud – over-invoicing or under-invoicing.

However, it is not always the case that criminals resort to the placement stage of money laundering. Criminals can use illegal proceeds for various purposes without resorting to money laundering. Black money can be used to pay salaries to partners in crime, bribery, etc.

The placement stage of money laundering is only relevant if the criminals have to introduce money to the legitimate financial system. If the black money is going to be utilized for other criminal activities, then the placement of funds will not occur.

Businesses prone to the placement of illegal proceeds:

Challenges and risks associated with Placement in Money Laundering

Since criminals use a variety of techniques in the placement stage of money laundering, its detection becomes a challenge for financial institutions and authorities. The AML/CFT laws and regulations require regulated entities to employ various control mechanisms to counter placement in money laundering. Placement has a negative impact on the global financial system as various cross-border financial crimes are committed to facilitate placement in money laundering.

As per the UNODC report, the total amount of criminal proceeds generated in 2009, excluding those derived from tax evasion, may have been approximately $2.1 trillion, or 3.6 per cent of GDP in that year (2.3 to 5.5 per cent). 

Risk Factors for criminals in the placement stage:

  1. Regulated entities consider large cash deposits as a red flag and submit a Suspicious Transaction Report (STR) with the FIU for further investigation.
  2. There are KYC and CDD requirements which require the customers to pass through the ID verification and Due Diligence checks. In high-risk situations, a source of funds and a source of wealth is required.
  3. Regulated entities perform increased scrutiny when they suspect money laundering or terrorist financing, as their goal is to counter illegal money entering the financial system.

Strategies for detecting and preventing placement in money laundering

Law enforcement agencies must keep themselves updated with the new money laundering typologies used by criminals to fight money laundering. The AML authorities need to detect money laundering crimes early to prevent them from getting too complex for their detection. The early detection of money laundering at the placement stage would save a country from harmful socio-economic impact.

AI helps institutions detect money laundering activities at the transactional level. AI systems tend to be simplistic and rule-based; a transaction will be flagged as suspicious and require a human-conducted review to determine if it fails to pass a set of rules outlined by the governing authorities. A proper set of AI tools can also minimize the rate of false positives.

The UAE government has significantly tightened measures for money laundering and financing of terrorism. Since it entered countries under increased monitoring set by global watchdog FATF, they have developed enhanced policies and guidelines for different sectors, especially where financial crime rates are relatively high.

How AML UAE can assist you in detecting and preventing of the placement of illegal funds?

AML UAE provides AML compliance services to Financial Institutions, Designated Non-Financial Businesses & Professions (DNFBPs) and Virtual Asset Service Providers (VASPs) in the UAE.

AML UAE can assist you with performing your AML Business Risk Assessment to understand how your business can be exploited during the placement stage of money laundering and customizing the AML/CFT Policies, Procedures, and Controls to mitigate the risk, including imparting necessary training to effectively implement the AML framework.

Get in touch with us to remain compliant with the AML regulations in UAE.

FAQs About Placement in Money Laundering

What is placement in money laundering?

Placement is the first stage in which illegal proceeds are introduced into the legitimate financial system.

The placement process in the money laundering process is the first step where illegally obtained money, usually through predicate crimes, is introduced by criminals into the economy with the goal of integrating.

Placement is the most dangerous step for criminals because cash movements are heavily monitored, making detection, reporting, and seizure more likely at this stage.

Placement refers to the act of injecting unlawful cash into legitimate financial systems using methods like structuring, smuggling, or cash-intensive businesses.

  • Structuring and smurfing
  • Wire transfer
  • Insurance purchase
  • Gambling
  • Currency smuggling
  • Currency exchange
  • Blending funds
  • Loan repayment

Structuring in money laundering refers to breaking large illicit cash amounts into smaller deposits to avoid detection during the placement stage of money laundering.

Structuring splits large illicit funds into smaller transactions, while smurfing goes further by using multiple individuals or accounts to place those funds into the financial system.

Placement is the first stage of money laundering. Here the black money from a crime is entered into a legitimate financial system.

Placement is the first stage of money laundering, where dirty money gets injected into the legitimate financial system. Layering is the second stage of money laundering, where the source of illegal money is concealed through a series of transactions.

Placement is the most vulnerable stage of money laundering for criminals, as placing large amounts of cash into the legitimate financial system may catch the eyeballs of law enforcement agencies.

Placement is the most vulnerable stage for money launderers as it’s the introduction of illicit funds for the first time into the system. So having an effective red flag indicators list will help mitigate the risks of money laundering in the initial stages itself.

Under Federal Decree-Law No. 10 of 2025, Individuals guilty of money laundering face 1-10 years imprisonment and a fine of AED 100,000 to AED 5,000,000 or the value of criminal property, whichever is greater. Legal entities face fines up to AED 100 million.

The process of putting the criminal proceeds into the legit financial system is construed as the “placement” stage, from where the money laundering activity begins.

Some common placement methods in money laundering.

  • Smuggling illegitimate cash or liquid monetary instruments.
  • Mixing unlawful funds with legal business activities.
  • Repayment of the loan using illegal funds.
  • Buying stored value cards (Debit cards) with illicit money.

Placement is the most vulnerable stage for money launderers as it’s the introduction of illicit funds for the first time into the system. So having an effective red flag indicator will help identify and mitigate the risks money laundering in the very beginning itself.

Yes, several industries are prone to money laundering, especially in the placement stage:

  • Money Exchanges
  • Banks
  • Capital Market
  • Trust and Company Service Providers
  • Lawyers
  • Dealers in Precious Metals and Stones
  • Virtual Asset Service Providers
  • Casinos
  • Art and antique dealers

The money laundering process begins with the placement stage, wherein the proceeds of financial crime are placed into the legitimate economy.

The act of depositing illicit money in a financial institution corresponds with the placement stage of money laundering.

Money laundering is easy to detect at the placement stage. It is the riskiest point for criminals, as AML detection measures such as KYC, adverse media screening, tracing beneficial owner information, and ongoing monitoring are triggered, resulting in SAR/STR reporting and enforcement action by the UAE FIU.

Our Timely and Accurate AML consulting Services

For your smooth journey towards your goals

Add a comment

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

Socio-economic impact of money laundering

Socio-economic impact of money laundering feature img

Socio-economic impact of money laundering

Table of Contents

Protect your business with reliable and effective AML strategies with AML UAE.

Socio-economic impact of money laundering

  • Money Laundering has severe social and economic consequences at the national as well as global level
  • Its socio-economic impacts include weakened financial systems, increasing crime rates, disruption of economic stability, particularly harming developing countries, key impacts include:
    • Increase in the number of criminal activities and corruption, enabling criminal networks to establish foothold in the mainstream economy
    • Weakened financial institutions, damaging credibility and stability of banks and financial markets
    • Reduced foreign direct investment due to reduced global trust
    • Economic instability distorting capital flows, exchange rates, and resource allocation
    • Loss of tax revenue, encouraging tax evasion and informal economic activity
    • Reputational damage to countries, leading to sanctions and isolation risks
  • Significant social consequences include:
    • Shift of economic power to criminal syndicates
    • Increased government spending on enforcement and welfare
    • Reduced public trust in institutions
  • Significance of AML compliance has never been more important as it helps prevent financial crimes, detect and report wrongdoers, supports economic growth, strengthens institutions and promotes transparency.

Socio-economic impact of money laundering

Money laundering is a crime that involves occupying money through illegal means. Corrupt anti-money laundering regimes in various countries allow terrorists and money launderers to use their financial gains in order to expand their criminal pursuits and expand their unlawful purposes and encourage many illegal activities like corruption and drug trafficking.

Although terrorist financing and money laundering can occur in any part of the world, it has particularly many social and economic consequences for developing countries. The developing countries are more susceptible to disruptions from the effects of money laundering, on the economy having significant social and economic implications due to fragile financial systems. This article talks briefly about the socio-economic impact of money laundering.

Social impact of money laundering

The effects of money laundering on the economy have  dramatic repercussions when it comes to economic and social consequences of money laundering. But even society bears the repercussions of money laundering activities. Generally, money laundering allows criminals or launderers to expand their operations deliberately.

This exponentially increases the cost that the government has to bear due to enhanced law enforcement and the need to invest in the healthcare sector and public welfare in order to combat the negative consequences.

Money laundering transfers the economic power from the citizens, government, and the entire market to money launderers or criminals.

Social Impact of Money Laundering

Money laundering can cause a virtual takeover of the political party in power. Overall, money laundering activities arise pretty dynamic and complex challenges to the world community.

As a preventive measure, the government reduces the overall public spending in order to expand the spending on AML regulations, resulting in the ordinary citizens getting affected dramatically.

Compliance. Trust. Transparancy

Customized and cost-effective AML compliance services to support your business always

Economic impact of money laundering

Money laundering activities dramatically affect the Financial Institutions (FIS) and Designated Non-Financial Businesses and Professions (DNFBPs), critical for economic growth. Activities related to money laundering promote corruption and crime that slow down the overall development of the economy and intensely reduce productivity in the nation-development sectors such as real estate and infrastructure.

Money laundering is a persistent problem in the world’s major financial markets as well as emerging markets. Effects of money laundering on the economy. As the emerging markets are in the development phase, it becomes easy for launderers to disguise and target such developing markets to expand their spread.

Macroeconomic consequences of Money Laundering

  • Weaker banks and financial institutions
  • Increased crime and corruption
  • Discourages foreign investments in the country
  • Economic instability leading to distortion of major markets
  • Wide-spread tax evasion and loss of tax revenue
  • Reputational risks for the country
  • International sanctions
  • Undue advantage to money-launderers
  • Depreciation in the value of the official currency of the country
Economic Impact of Money Laundering
Furthermore, due to the unpredictable flow of money in the economy without a traceable source, the money demand too changes. This results in dramatic fluctuations in international capital flows and the overall exchange rates. The adverse results of money laundering activities on the economy affect various economic concepts like growth rates, money demand, tax revenues, income distribution, and financial institutions.

What are the various adverse implications of money laundering for the developing countries

Financing of terrorism and money laundering can happen anywhere, irrespective of the country. However, the economic and social consequences of money laundering   will definitely differ from one country to another, depending on the financial and social stability of the country. For developing countries, the economic and social consequences of money laundering can have a severe social and economic impact because the markets of these countries are relatively small and more prone to disruption from activities such as terrorism and other criminal activities.

In addition to that, money laundering and terrorist financing also have a tremendous adverse impact on countries with fragile financial systems, as weaker social status, economic condition, and security measures aid the mala fide intentions of the criminals for terrorist financing or for money laundering activities.

The extent of the effect that money laundering has on each of the aspects of society and economy varies, as discussed hereunder:

1. International consequences and foreign investment

Any developing country which has a standing for money laundering activities or terrorist funding activities could experience a significant negative impact on their overall growth and development. Foreign financial institutions (FIs) can limit all their transactions with enterprises from money laundering heavens, make transactions more expensive, subject such transactions to extra scrutiny, and stop their overall investments.

Every legitimate business enterprise residing in money laundering heavens can suffer from restricted access to world markets or higher costs because of extra scrutiny of their ownership, control systems, and organizations.
International Consequences And Foreign Investment

As a result, loose implementation of AML and CTF policies in a country may lead to hardships in receiving foreign private investments in such a country’s economy. Furthermore, for developing countries, eligibility for foreign state help is more likely to be severely restricted.

2. Exponential increase in corruption and crime

Exponential Increase in Corruption And Crime

A country that is known as money-laundering heaven is more likely to attract criminals and encourage corruption. Various factors lead to increased corruption and crime. For instance, a weak AML or CTF regulation, weak or selective enforcement of AML/CTF provisions, burdensome seizure provisions, and limited sanctions against money laundering activities. If a country is more prone to criminal activities like money laundering, corruption is bound to happen with high intensity and value.

Criminals or money launderers take the help of bribery before the central institutions of the countries in order to make their money laundering efforts successful.

The counterparties to the bribery could be lawyers, employees, and management of financial institutions, legislatures, accountants, police officials, prosecutors, supervisory authorities, and courts.

Effective and timely practices around anti-money laundering and combating the financing of terrorism in countries can significantly reduce the scope of criminal activities, as such practices would exponentially affect the profit margins from the proceeds of financial frauds or laundering.

3. Private sector

Money launderers utilize shell companies as these companies have distinct commercial existence that might appear legal or legitimate but are actually powered and controlled by the criminals. These shell companies basically mix illegal funds with legal or legitimate funds in order to hide their unfair and unexplainable share of income. Thus, the front face companies are not merely focusing on booking profit but also protecting their illegally occupied sum.

By leveraging the power of shell companies and other investments in legit companies, the proceeds from money laundering can be used to control all industries and sectors of the economies of particular countries.
Weakened Financial Institution
This elevates the probability of monetary instability due to improper allocation of resources. It also facilitates a way to avoid taxation and hence depriving the income of the country.

4. Weakened financial institution

Problem Solving
Money laundering can damage the soundness of the country’s financial sector and the stability of financial institutions like banks. The negative consequences are usually defined as operational, reputational, concentration, and legal risks that are interrelated. Each of these risks comes with its costs associated with it.

For example, when a financial institution experiences reputational risks, they are more likely to lose public trust in the financial institution because of negative publicity.
As a result, customers, depositors, borrowers, and investors end their business relationships with the financial institutions whose reputation has been distorted by allegations of criminal activities like terrorist financing and money laundering.

5. Privatization efforts

Money launderers and criminals threaten the economies of several countries through privatization. All of these criminal organizations may surpass the legitimate buyers of any former state-owned businesses. Moreover, when the illegally occupied funds are utilized or invested in this way, money launderers enhance their potential to conduct even more criminal activities and impact the growth of the country on a negative side.
Privatization Efforts

Compliance. Trust. Transparancy

Customized and cost-effective AML compliance services to support your business always

Advantages of a powerful AML / CTF framework

One of the excellent ways to reduce money laundering is to implement AML and CTF programs effectively. Here are a few benefits of having a robust AML / CTF framework:

1. Elevating the stability of financial institutions

Money laundering gives birth to many financial risks, and fortunately, there are sound banking practices that reduce these risks. These risks include the potential for financial institutions and individuals to suffer due to fraud, violation of laws and regulations. Lack of adequate internal controls directly aids the execution of money laundering and other criminal activities. Customer Due Diligence (CDD) processes  and Know Your Customer (KYC) are the essential part of an effective AML and CTF regime. The AML and CTF framework ensure the safe and effective functioning of organizations at higher money laundering risk.

Elevating The Stability of Financial Institutions

The AML and CTF policies or framework make an effective risk management tool. In addition to that, an effective AML and CTF regime also reduces the probability of damage to the organization due to fraudulent activities.

2. Encouraging economic development

Encouraging Economic Development
Money laundering directly impacts the economy of a country in a negative manner. Funds occupied through illegal means take a different path in the country’s economy than the statutory funds. The laundered amount is usually placed in sterile investments to preserve their original value or making them more easily transferable to other productive avenues for further investments. These investments clearly include high-value consumption assets like real estate, jewelry, art, luxury cars, or antiques. These investments simply do not create any additional products for the broader economy.

Not just this, criminal organizations can turn even the productive businesses into vicious investments by operating illegal funds for the sole purpose of laundering instead of profit-making enterprises.
Unlike the investments for legally occupied funds, a country’s response towards sterile investments ultimately reduces the productivity of the entire economy. Therefore, sturdy AML/CTF regimes are hurdles to the execution of criminal intentions in any country’s economy. Furthermore, this allows the investments to be transformed into something productive that responds to the customer’s needs and aids the economy’s overall productivity.

3. Fighting corruption and crime

A steady AML and CFT institutional framework, which incorporates a broad premise for crimes like money laundering, helps in fighting corruption and crime. Money laundering is the crime that facilitates the criminals or money launderers through underlying criminal acts and the laundering of illegally occupied funds. Likewise, an AML and CFT framework incorporates bribery as a primary offense, and its effective enforcement provides a lot fewer opportunities for the concerned person to bribe public officials or to corrupt them in any other manner.

An effective AML and CFT framework regime is a deterrent to any sort of criminal activity.

Fighting Corruption And Crime

Such sturdy regimes make it difficult for the criminals or the money launderers to get benefitted from any of their actions planned amidst the robust AML/CFT regulations. In this context, the confiscation and seizure of the proceeds of money laundering activities are vital to the success of any AML program. Loss of revenues from money laundering activities nullifies the profits and therefore reduces the incentives for criminals to take criminal actions.

Final words

With this, we now understand what social and economic impact money laundering has on the economy of the country and how to overcome or reduce the adverse effects of the same on the economy. For this, AML UAE can help, as an expert, in better implementation of AML/CFT policies in one’s organization and contribute towards minimizing the negative socio-economic impact of money laundering activities.

Frequently Asked Questions (FAQs)

Here are a few frequently asked questions about the socio-economic impact of money laundering activities.

What are the effects of money laundering? 

Money laundering’s effects on economies, businesses, and societies are damaging. It promotes crime, drug trafficking, terrorism, and corruption, thereby destroying the growth of economies and societies.  

Money laundering disturbs the economic stability of a country because of the entry of illicit money into the legitimate financial system. Government revenues reduce, due to which the development schemes do not receive enough financing. Also, investors lose confidence in the country, and international trade suffers.  

The effects of money laundering on society are enormous in terms of disturbing the world’s social structure, causing inflation in the product process, rise in corrupt practices, escalation of healthcare costs, and wastage of tax revenues collected by the Government.  

Economic and social consequences of money laundering are devastating and include economic instability, loss of revenues, entry of criminal companies into the economy, liquidity problems, and negative reputation.  

  • Weaker banks and financial institutions
  • Increased crime and corruption
  • Discourages foreign investments in the country
  • Economic instability leading to distortion of major markets
  • Wide-spread tax evasion and loss of tax revenue
  • Reputational risks for the country
  • International sanctions
  • Undue advantage to money-launderers
  • Depreciation in the value of the official currency of the country

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik