The regulated entities, such as DNFBPs, Financial Institutions, and VASPs, are required by the UAE AML Regulations to evaluate the risk that each customer poses to the company and implement Enhanced Due Diligence procedures to manage high-risk customers.

EDD involves investigating the customer’s identity in depth, whether legal or personal. It also involves inquiring into the customer’s wealth and funding sources and verifying their legitimacy.

EDD allows the regulated entity to distinguish between customers who are simply posing an increased risk and customers who are actually suspected of being connected to financial crime through additional checks.

When it comes to AML CFT, customer due diligence is a crucial element. Customer due diligence is a process of identifying the customers, verifying their identity, and evaluating the potential risk a customer may pose to the business before establishing a business relationship and onboarding such a customer.

CDD process aims to determine whether the business is vulnerable to financial crime risks when dealing with a person and what controls must be deployed to mitigate such risks.

The Enterprise Risk Assessment (EWRA)/ Business Risk Assessment is vital in ensuring AML compliance.

The reporting entities (Financial Institutions, DNFBPs and VASPs) shall conduct ERWA considering the relevant risk factors, their likelihood of occurrence, and countermeasures deployed.

To safeguard the reporting entities (Financial Institutions, DNFBPs and VASPs) from financial crime risks and to remain compliant with AML requirements, an AML Audit must be conducted independently by competent personnel on a periodic basis to ensure that the AML Program of the entity is consistent with AML rules and regulations.

AML Audit is entirely different from a financial audit of the books of accounts. The Independent AML Audit verifies the entity’s AML/CFT compliance framework.

A Suspicious Activity Report (SAR) differs from Suspicious Transaction Report (STR) mainly due to elements of suspicious activity or transaction. SAR comes into picture where suspicious activity is identified, whereas STR comes into picure where suspicious transaction is identified.

According to AML UAE regulations, the reporting entities (Financial Institutions, DNFBPs and Virtual Asset Service Providers) must comply with reporting requirements with FIU on the goAML portal. Based on the red flags identified concerning any suspicious activity/ transaction, the entities must report the same to FIU on the goAML portal by filing a Suspicious Activity Report (SAR)/ Suspicious Transaction Report (STR).

The reporting entities (financial institutions, DNFBPs, and VASPs) must have a robust program in place to ensure compliance with AML rules and regulations. Ensuring the same requires the support of senior management, which plays a vital role in AML compliance.

The reporting entities must design and implement AML Policies and Procedures to ensure compliance with all the mandatory requirements. One of Senior Management’s key responsibilities is appointing a Compliance Officer. The Senior Management has the following roles and responsibilities: