AML UAE

Misappropriation of Public Funds

Pathik Shah — Fri, 26 Jun 2026 12:20:12 +0000

Last Updated: 06/26/2026

Protect your business with reliable and effective AML strategies with AML UAE.

Misappropriation of Public Funds - At a Glance

State assets diverted by a public official may generate proceeds of a predicate offence where the underlying conduct amounts to a felony or misdemeanour under applicable UAE law, or a qualifying foreign offence satisfying the conditions in Federal Decree by Law No. (10) of 2025 (FDL 10/2025). Regulated entities that fail to apply PEP enhanced due diligence face significant regulatory penalties. Take reasonable measures to identify source of wealth and source of funds for foreign PEPs and high-risk domestic or international-organisation PEPs, with independent verification where the risk profile requires it, and file STRs immediately when account patterns suggest fund diversion.

Misappropriation of public funds occurs when a public official diverts state money, property, or assets for personal benefit or for another person or entity. In AML compliance, the risk arises when the proceeds are moved through banks, real estate, companies, trusts, money services businesses, or professional advisers. UAE-regulated entities should assess PEP exposure, take reasonable measures to identify source of wealth and source of funds where required, support higher-risk files with independent verification, monitor unusual transactions, and file an STR without delay where suspicion or reasonable grounds arise.

Who should read this article? This article is useful for MLROs, compliance officers, DNFBPs, financial institutions, real estate firms, TCSPs, lawyers, accountants, DPMS businesses, VASPs, and senior managers responsible for PEP risk, source-of-wealth verification, beneficial ownership review, and STR filing in the UAE.

What is Misappropriation of Public Funds?

The United Nations Convention Against Corruption (UNCAC), Article 17, defines this conduct as the intentional embezzlement, misappropriation, or other diversion by a public official of property, public or private funds, securities, or any other thing of value entrusted to that official by virtue of their position, for the official’s own benefit or for the benefit of another person or entity.

In the context of anti-money laundering, misappropriation of public funds may constitute a predicate offence capable of generating criminal proceeds that are subsequently laundered through the financial system. FDL 10/2025 criminalises any attempt to convert, transfer, conceal, disguise, acquire, possess, or use such proceeds in the UAE, regardless of where the underlying theft occurred.

The proceeds of public fund misappropriation are often substantial, long-standing, and protected by the political influence of the perpetrator. This combination makes detection significantly more difficult than for conventional financial crime.

Regulatory Framework related to Misappropriation of Public Funds

The UAE regulatory framework addresses misappropriation of public funds through two intersecting pillars: the criminalisation of money laundering derived from predicate offences, and the enhanced customer due diligence obligations triggered by politically exposed person (PEP) status.

FDL 10/2025, Article 2 criminalises money laundering in four forms, including the conversion, transfer, concealment, and acquisition of proceeds derived from any predicate offence. Misappropriation of public funds generates proceeds of a predicate offence where the underlying conduct amounts to a felony or misdemeanour under applicable UAE law, or a qualifying foreign offence satisfying the conditions in FDL 10/2025; corruption and bribery are recognised under UAE predicate-offence analysis and fall within FATF’s designated categories of offences, and such proceeds may then become the subject of money laundering under Article 2.

Cabinet Resolution No. (134) of 2025, Article 16 establishes the specific obligations applicable to PEPs. Foreign PEPs are subject to the specified enhanced measures, including senior management approval, source-of-funds and source-of-wealth measures, and enhanced ongoing monitoring. Domestic PEPs and PEPs of international organisations are subject to those measures where the business relationship is assessed as high risk.

FATF Recommendation 12 requires countries and their regulated sectors to apply enhanced due diligence measures to foreign PEPs and to take reasonable measures regarding domestic PEPs and PEPs from international organisations. The UAE framework reflects this Recommendation 12 structure.

Politically Exposed Persons: Foreign vs Domestic Obligations

Requirement	Foreign PEP	Domestic PEP / international-organisation PEP
Risk classification	Treated as high risk in all cases	Risk-assessed; enhanced measures apply where the relationship is high risk
Senior management approval	Required before establishing and to continue the relationship	Required where the relationship is high risk
Source of wealth and source of funds	Take reasonable measures to identify, with independent verification proportionate to the risk	Take reasonable measures to identify source of funds and source of wealth where the relationship is high risk, with verification proportionate to the risk
Enhanced ongoing monitoring	Required in all cases	Required where the relationship is high risk
Legal basis	CR 134/2025 Article 16; FATF Recommendation 12	CR 134/2025 Article 16; FATF Recommendation 12

Legal Basis at a Glance

Instrument / Provision	What it covers
UNCAC, Article 17	International definition of embezzlement and misappropriation of public funds by a public official
FDL 10/2025, Article 1	Key definitions, including beneficial owner, proceeds, and suspicious transactions
FDL 10/2025, Article 2	Money laundering offence: conversion, transfer, concealment, and acquisition of predicate-offence proceeds
FDL 10/2025, Article 18	STR obligation to the UAEFIU; professional secrecy carve-out for legal professionals
CR 134/2025, Article 10	Beneficial ownership identification (25% threshold; control and senior-managing-official fallbacks)
CR 134/2025, Article 16	PEP obligations: senior management approval, source of wealth and source of funds, enhanced monitoring
CR 134/2025, Article 18	STR filing procedure via goAML; professional secrecy carve-out
CR 134/2025, Article 25	Record-keeping: minimum of five years

Supervisory Body

The Central Bank of the UAE (CBUAE) supervises licensed financial institutions for AML/CFT compliance, including banks, exchange houses, finance companies, insurance companies, payment service providers, and registered hawala providers, and applies PEP due diligence requirements.

The Ministry of Economy and Tourism (MOET) supervises designated non-financial businesses and professions (DNFBPs), including real estate agents, dealers in precious metals and stones, accountants, and trust and company service providers.

The Ministry of Justice (MoJ) supervises lawyers, notaries, and independent legal professionals.

In the financial free zones, the Dubai Financial Services Authority (DFSA) supervises entities in the DIFC and the Financial Services Regulatory Authority (FSRA) supervises entities in the ADGM.

The Capital Market Authority (CMA) supervises securities and capital-market activities, and the General Commercial Gaming Regulatory Authority (GCGRA) supervises the commercial gaming sector.

The UAE Financial Intelligence Unit (UAEFIU), established as an independent unit within CBUAE under FDL 10/2025 Article 11, is the sole recipient of all suspicious transaction reports from regulated entities. STRs must be filed with the UAEFIU immediately and without delay through its electronic reporting system, currently goAML, or any other channel the FIU approves.

At the international level, the United Nations Office on Drugs and Crime (UNODC) serves as the custodian of the UNCAC framework, which provides the primary global standard for preventing, criminalising, and combating corruption, including the misappropriation of public funds.

Reporting or Compliance Obligations and Channels of Misappropriation of Public Funds

Any regulated entity that suspects a customer is a PEP involved in the diversion of public funds must file a Suspicious Transaction Report immediately and without delay through the UAEFIU’s electronic reporting system, currently goAML, or any FIU-approved channel, as required by FDL 10/2025 Article 18 and Cabinet Resolution No. (134) of 2025 Article 18. Filing must occur regardless of whether a transaction has been completed, merely attempted, or declined.

In addition to STR obligations, regulated entities must apply the specified enhanced measures to foreign PEPs under CR 134/2025 Article 16, and apply enhanced measures to domestic PEPs and PEPs of international organisations where the business relationship is assessed as high risk. An entity may, as a matter of internal risk appetite, treat all PEP relationships as high risk, but that is a policy choice rather than a uniform legal requirement.

For those PEP relationships to which the specified enhanced measures apply, this includes obtaining senior management approval before establishing or continuing the relationship, taking reasonable measures to identify source of funds and source of wealth, and applying enhanced ongoing monitoring for the duration of the business relationship.

Records must be maintained for a minimum of five years from the end of the business relationship under CR 134/2025 Article 25.

Legal professionals should also consider the professional secrecy carve-out where applicable. Lawyers, notaries, other independent legal professionals, and independent legal auditors are not required to file an STR where the relevant information was obtained in circumstances subject to professional secrecy, such as assessing a client’s legal position or representing the client in legal proceedings, under FDL 10/2025 Article 18 and CR 134/2025 Article 18. This does not remove AML obligations generally; it affects the reporting obligation in those protected contexts.

Once a suspicion arises, the entity and its staff must not disclose to the customer or any third party that a Suspicious Transaction Report has been or may be filed, or that an investigation is underway. This tipping-off prohibition applies under FDL 10/2025 Article 29 and CR 134/2025 Article 19, and is the reason an entity should not seek clarification from the customer in a way that reveals the reporting concern.

Recent Developments, Enforcement Actions, or Supervisory Priorities

The UAE’s second National Risk Assessment (NRA 2024) identifies fraud as a High ML threat, with corruption proceeds and foreign predicate offences constituting a significant component of illicit funds entering the UAE financial system. The NRA confirms that legal persons and corporate structures remain a Medium-High vulnerability for beneficial ownership concealment, directly relevant to the layering techniques used in misappropriation schemes.

Supervisory priorities for 2025 to 2026 include strengthening DNFBP compliance, improving beneficial ownership data quality, and enhancing financial intelligence on PEP-linked transactions.

FDL 10/2025, which entered into force on 14 October 2025, replaces the previous AML statute and consolidates criminal and administrative penalties into a single framework. Its Executive Regulation, Cabinet Resolution No. (134) of 2025, took effect on 14 December 2025. The maximum administrative fine for a single AML/CFT violation is now AED 5,000,000 under Article 17.

REGULATORY REFERENCE

FDL 10/2025, Article 1 (definitions); Article 2 (money laundering criminalisation; predicate offences); Article 18 (STR obligation); Article 19 (preventive measures); Article 28 (penalty for STR failure); Article 29 (tipping-off); Cabinet Resolution No. (134) of 2025, Article 10 (beneficial ownership); Article 16 (PEP enhanced due diligence obligations); Article 18 (STR filing procedure); Article 25 (record-keeping); UNCAC Article 17 (Misappropriation, embezzlement or diversion by a public official)

What does Misappropriation of Public Funds Mean?

Think of a trusted employee who manages the petty cash box in an office. Everyone assumes the money is safe because they are the designated custodian. Over time, this person removes notes one at a time, replaces cash receipts with forged ones, and eventually moves the money into their own wallet. Now scale that to a government budget worth hundreds of millions of dirhams, controlled by a single minister or procurement director. That is misappropriation of public funds: the abuse of a position of official trust to redirect state money for personal enrichment.

Why Detecting Misappropriation of Public Funds Matters

The financial damage caused by misappropriation of public funds is rarely contained within the originating jurisdiction. Proceeds move swiftly through the international financial system, exploiting gaps in PEP due diligence, weak beneficial ownership transparency, and the ability of professional enablers to create opaque holding structures. Any regulated entity that accepts, manages, or facilitates financial activity for a foreign PEP, a high-risk domestic PEP, a high-risk international-organisation PEP, or any PEP treated as high risk under its internal policy, without applying the specified enhanced measures under CR 134/2025 Article 16, faces potential regulatory penalties and the risk of becoming an unwitting conduit for stolen state assets.

The professional enablers who help structure misappropriation proceeds, including lawyers who establish nominee companies, accountants who certify false financial statements, and real estate agents who facilitate property purchases with unexplained funds, face criminal exposure under FDL 10/2025 alongside the principal perpetrators. The absence of a direct employee relationship with a corrupt official offers no protection where professional services are rendered knowingly or recklessly. A transaction processed for a PEP without documented, verified source-of-wealth evidence may create supervisory concern, particularly where the customer is a foreign PEP or the relationship is otherwise high risk.

How Does Misappropriation of Public Funds Facilitate Money Laundering?

Misappropriation of public funds operates as a structured, multi-stage scheme rather than a spontaneous act of theft. Each stage is designed to increase the distance between the perpetrator and the stolen funds, while simultaneously creating a surface appearance of legitimacy.

Stage 1: Establishing a Position of Financial Control

The scheme begins when a public official or employee gains control over government financial processes. This control may be legitimate, such as a procurement director with authority to approve contracts up to a defined threshold, or it may be acquired through corruption or appointment by a complicit superior. Centralisation of financial authority in a single individual, with minimal oversight, is the structural precondition for misappropriation.

Stage 2: Diverting the Funds

Once financial authority is established, the official activates one or more diversion mechanisms. Common methods include approving payments to fictitious or shell vendors for services never rendered, inflating contract values and routing the excess to controlled accounts, submitting false expense claims against a government budget line, creating ghost employees on a public payroll, or directly transferring funds to personal accounts during brief windows when oversight is reduced. Business entities and money services businesses are frequently used as conduits at this stage.

Stage 3: Layering to Obscure Origin

After extraction, the proceeds are subjected to layering techniques designed to sever the audit trail. This may involve converting funds into cash, foreign currency, or cryptocurrency; routing through multiple bank accounts held in different names; using DNFBPs such as law firms and company formation agents to establish shell or front companies that receive the funds; and making real estate purchases that generate paper trails appearing to reflect legitimate investment. Shell and front companies are a primary vehicle at this stage.

Stage 4: Integration into the Legitimate Economy

Integration occurs when the layered funds are reintroduced into the economy in a form that is difficult to distinguish from legitimate wealth. A PEP who has misappropriated state funds may invest in commercial real estate, acquire equity stakes in operating businesses, fund luxury asset purchases, or transfer assets to family members and close associates to place them further from scrutiny. Trust beneficial interests and offshore banking services are routinely used at this stage.

Stage 5: Asset Protection and Insulation

The final stage involves protecting the integrated assets from confiscation or recovery proceedings. This is typically achieved through layered corporate structures, trusts settled in secrecy jurisdictions, nominee directors and shareholders, and ongoing use of professional advisers who maintain the appearance of legitimate business activity. The offshore structure creates a legal barrier that requires extensive international cooperation to penetrate.

Illustrative Typology Scenarios of Misappropriation of Public Funds

The following scenarios are constructed from documented typologies and do not represent specific named individuals or cases. They illustrate how the mechanics described in Block 5 manifest in practice.

The Inflated Procurement Scheme

A senior procurement official at a national infrastructure ministry maintains authority to approve contracts up to USD 15 million without secondary sign-off. Over a period of three years, this official awarded a series of contracts to a limited liability company.

The company’s registered beneficial owner is a nominee, while the official’s sibling holds the equity interests. Invoices are submitted for consulting services with no deliverables verified. Payments are received in the company’s account, converted to foreign currency, and transferred to an offshore banking account held in the name of a trust.

A real estate agent later facilitates the purchase of two residential properties by the trust, presenting certified accounts from an accountancy firm as evidence of commercial income.

No PEP check is conducted because the purchase is made through the trust rather than in the official’s personal name. Detection occurs only when a foreign jurisdiction’s asset recovery team requests information on the trust.

Operational lesson: Trusts and nominee structures routinely obscure PEP connections. Source-of-wealth verification must pierce the corporate veil at every customer layer, not just at the direct customer level.

The Ghost Payroll Operation

A human resources manager at a state-owned enterprise controls employee registration and payroll processing. Over eighteen months, this manager creates 40 fictitious employee records, directing salary payments to a cluster of bank accounts that the manager controls through power of attorney arrangements.

The accounts are held at different financial institutions to avoid triggering a single-bank threshold alert. Funds are periodically aggregated through a money services business and wired to a foreign account, which is then used to purchase luxury goods and real estate in a third country. The scheme unravels during an internal financial audit when the fictitious employees cannot be matched to physical workspace records.

Operational lesson: Segregation of duties failures are the structural vulnerability that enables payroll fraud. Compliance teams at financial institutions should scrutinise frequent, regular, identically structured transfers to newly opened accounts held by individuals with no verifiable employment history.

The Emergency Procurement Override

A local government official exploits an emergency procurement protocol during a public health crisis to award contracts without competitive tender. Approved suppliers receive payments at double the market rate. The overpayment is routed to a business entity that the official controls through a silent equity interest. The entity converts the funds through currency exchange services, purchases real estate, and ultimately sells the property to a third party.

Transaction monitoring alerts generated by the original payments are cleared as routine government procurement. Post-clearance review later identifies that the counterparty entity had no prior operating history and no verifiable employees.

Operational lesson: Regulatory urgency or crisis conditions are frequently exploited to bypass oversight controls. Financial institutions serving government agencies or contractors should treat emergency procurement transactions as elevated-risk regardless of the official source of funds.

What Are the Red Flags That Identify Misappropriation of Public Funds?

The following red flags are observed behaviours and account patterns. Each is an observation, not a conclusion. The presence of one or more indicators should trigger enhanced scrutiny and, where suspicion arises, an STR via goAML.

Category	Red Flag
Customer	A public official or PEP holds signature authority over government accounts and also controls personal or corporate accounts at the same institution
Customer	A customer’s declared source of income as a public official is inconsistent with the value and frequency of their personal transactions
Customer	An individual listed as a PEP holds equity interests in entities that receive government contracts or public funds
Customer	A public official resigns or is dismissed shortly after an internal audit identifies anomalous transactions in their area of responsibility
Customer	A customer declares asset holdings in a formal asset declaration that are materially inconsistent with their financial activity at the institution
Customer	Close relatives or associates of a public official open accounts and begin receiving large regular transfers with no verifiable commercial justification
Transaction	Transfers are made from a government or public entity account to personal accounts held by an official who has signing authority over that account
Transaction	Large cash withdrawals are made from an account linked to a public entity, lacking operational justification in the entity’s business profile
Transaction	Payments are made to vendors whose invoices describe services with no verifiable delivery, with amounts just below approval thresholds
Transaction	Structured transactions are made across multiple accounts in amounts that individually fall below reporting thresholds but collectively reflect a pattern of diversion
Transaction	Frequent large-value foreign currency exchanges are conducted by a public official with no legitimate trade or operational purpose
Transaction	Accounts receivable records reflect payments from a government entity to a company that has no employees, no premises, and no prior commercial activity
Geographic	Funds are transferred from a domestic public entity account to bank accounts in jurisdictions with strong secrecy laws, limited BO transparency, or known ML risks
Geographic	A PEP or their close associate makes repeated real estate purchases in jurisdictions commonly used to hold offshore wealth
Geographic	Wire transfer recipients in multiple jurisdictions share a common beneficial owner who is related to or associated with a domestic public official
Product	Trust structures, offshore companies, or nominees are inserted into the ownership chain of assets acquired shortly after a public official is known to have had access to large funds
Product	Accounts managed on behalf of a trust or foundation show inflows inconsistent with the stated purpose of the arrangement
Channel	Government procurement payments are routed through a money services business rather than a regulated bank account
Channel	Transactions linked to public funds are processed through correspondent banking chains in multiple jurisdictions before reaching a final destination account
Channel	Multiple accounts at different institutions, each under different registered controllers, display identical payment patterns linked to a single government source

Which Controls Counter Misappropriation of Public Funds?

Control	What it disrupts	Detects / Prevents / Deters	Specific Limitation
Enhanced Due Diligence (EDD) for PEPs	Identification of beneficial owners connected to public office	Detects and surfaces the official link before the relationship is established	Effective only where PEP lists are comprehensive and up to date; domestic PEPs are often under-screened
Customer Due Diligence (CDD) with source-of-wealth verification	Use of nominees and trusts to mask PEP connection	Detects and forces documentation of wealth origin	Relies on the accuracy of declarations; fabricated documentation is not always detectable at onboarding
Ongoing Due Diligence and account monitoring	Concealment of fund diversion over time	Detects and identifies transaction patterns inconsistent with the customer’s verified profile	Alert thresholds may be set too high to catch structured transactions below reporting levels
Sanctions and Watchlist Screening	Use of sanctioned entities or sanctioned jurisdiction structures	Prevents and blocks relationships with designated persons	Covers only listed individuals; corrupt officials not yet sanctioned will not trigger alerts
OSINT and External Source Verification	Validation of declared sources of wealth against publicly available information	Detects cross-references to asset declarations, corporate registry data, and adverse media	Coverage is incomplete in jurisdictions with limited public records
Transaction Monitoring	Real-time detection of unusual payment flows	Detects and deters; generates alerts on structuring, unusual counterparty patterns, and disproportionate fund volumes	Rules-based monitoring can be gamed by anyone with knowledge of the alert thresholds
Trade Monitoring	Detection of inflated procurement or false invoicing	Detects and surfaces mismatches between payment values and verified market rates	Requires sector-specific market knowledge; generic monitoring rules lack the granularity needed
Service Restriction	Prevention of the account being used as a diversion vehicle once red flags are confirmed	Prevents and deters; removes the regulated entity as a channel	Only effective once suspicion is already established; it does not prevent earlier stages of the scheme
Staff AML Training	Recognition of PEP-linked red flags at the frontline	Deters; trained staff are less likely to be complicit or to miss indicators	Training must be scenario-specific; generic AML awareness does not equip staff to identify PEP misappropriation patterns

How Do AI and RegTech Automate Detection of Misappropriation of Public Funds?

Detection of misappropriation of public funds requires monitoring systems that can connect identities, relationships, and transaction patterns across multiple data dimensions simultaneously. Rules-based transaction monitoring alone is insufficient because the perpetrators of these schemes are typically aware of the reporting thresholds and structure their activity accordingly.

Network analytics and graph technology are the most effective automated tools for detecting the relationship patterns that characterise misappropriation. Graph analytics platforms map connections between customers, counterparties, corporate entities, and beneficial owners, surfacing situations where a public official, their relatives, or entities linked to their equity interests appear in payment chains originating from government accounts. These systems can identify non-obvious links that would never be captured by a single customer-level rule.

Behavioural analytics and machine learning anomaly detection operate by establishing a baseline of expected account activity for each customer segment, including public officials and PEP-adjacent relationships. Machine learning models identify deviations from that baseline, such as a sudden increase in account activity following an appointment to a senior public position, or a change in payment counterparty profiles after a procurement cycle. These models are particularly effective for detecting the early-stage diversion patterns that rules-based systems miss.

Natural language processing (NLP) for adverse media monitoring continuously scans news sources, court filings, regulatory announcements, and open-source intelligence in multiple languages to identify adverse media references linked to customer names, entities, or related parties. For PEPs involved in misappropriation, adverse media often emerges in foreign-language sources or local-jurisdiction media before it reaches international databases. NLP systems that process multi-language feeds in near real time significantly reduce the lag between a public event and a compliance response.

Automated PEP screening platforms use regularly updated databases to perform continuous screening, not only at onboarding but throughout the life of the business relationship. Automated screening platforms reduce the manual effort of PEP identification and ensure that changes in a customer’s political status are captured promptly, triggering an EDD review when a customer is newly designated as a PEP.

Document verification and identity proofing technology examines the integrity of source-of-wealth documentation, cross-referencing declared asset values against public records, corporate registries, and real estate databases. These tools identify inconsistencies between declared wealth and documented holdings, surfacing a critical red flag for misappropriation schemes that rely on false wealth narratives.

What Data Should Compliance Teams Collect to Detect Misappropriation of Public Funds?

Data Point	Source System	What it Reveals
PEP status and screening result	PEP screening platform, watchlist database	Whether the customer holds or has held public office triggers EDD obligations.
Account activity logs	Core banking/transaction monitoring	Patterns of transfers to personal accounts from government entity accounts, structured withdrawals, and unusual counterparty activity
Asset declarations	Customer-provided documentation, OSINT	Declared official assets; discrepancy with observed financial activity suggests undisclosed wealth from diverted funds
Bank account data	Core banking	Account opening patterns, signatories, linked accounts, and payment counterparties that indicate PEP-connected structures
Company and beneficial ownership registries	Corporate registry OSINT, KYC platform	Whether the customer or their associates control corporate vehicles that receive government payments
Contractual and invoice data	Document management system, trade finance platform	Whether invoices from vendors receiving government payments have verifiable service deliverables and market-consistent pricing
Correspondent and cross-border transaction data	Transaction monitoring, correspondent banking system	Fund flows to and from secrecy jurisdictions or high-risk countries associated with offshore wealth structures
Currency exchange transactions	Treasury/FX system, transaction monitoring	Frequency and volume of foreign currency transactions by PEPs lacking operational justification
Adverse media and court filings	NLP adverse media screening platform	Public reports of corruption investigations, asset recovery proceedings, or dismissal from public office
KYC and CDD records	KYC platform	Currency and completeness of source-of-wealth verification, EDD approval records, and ongoing monitoring logs
Real estate and high-value asset ownership records	Real estate registry, OSINT, asset tracing tools	Assets registered in the name of the PEP or associates, cross-referenced against declared wealth
System and network access logs	Audit management system, IT security	For government financial systems: whether the official accessed procurement or payment systems outside normal working patterns
Transaction logs	Transaction monitoring	Aggregate payment volumes over time, including identification of structuring patterns
Geopolitical and jurisdictional risk data	Sanctions databases, FATF high-risk lists, NRA data	Whether the jurisdiction associated with counterparty accounts or corporate vehicles presents elevated ML or secrecy risks
Employee records	HR system (for government entities), background screening	Verifying the employment status and remuneration level of the official to cross-reference against observed wealth
Politically exposed persons list	Dedicated PEP database, commercial screening vendor	Breadth of PEP coverage, including domestic PEPs, their immediate family members, and close associates

How Does Misappropriation of Public Funds Aggravate Customer Risk and Jurisdictional Risk?

Customer Risk is significantly elevated when a public official or PEP is the beneficial owner of an account or entity seeking financial services. The primary driver is the opacity of the origin of wealth: a public official’s salary is a matter of public record, but the true source of their financial activity is not. Where that activity substantially exceeds what salary and declared assets can explain, the compliance team faces a verification gap that heightens the risk that funds are derived from the diversion of public resources. Close associates and family members of the official amplify this risk because they operate outside the direct PEP screening framework, yet may hold assets on behalf of the official.

Jurisdictional Risk is compounded wherever the misappropriated funds originate in, or are routed through, jurisdictions with weak public financial management, limited asset declaration enforcement, opaque BO registers, or secrecy protections for corporate vehicles. The UAE’s geographic position as a regional financial and trade hub means that regulated entities regularly encounter customers whose wealth has been aggregated across multiple high-risk jurisdictions before arriving. Where the originating jurisdiction is identified on FATF’s high-risk and other monitored jurisdictions list, or features in the UAE NRA 2024 as a source jurisdiction for foreign predicate offences, the level of due diligence must be commensurate with that elevated risk.

What Observable Patterns Indicate Misappropriation of Public Funds?

A compliance officer conducting a file review, CDD update, or transaction monitoring review may observe the following patterns in accounts linked to public officials and their associated entities:

Transfers from accounts controlled by a public entity to personal accounts held by an individual with signing authority over that entity, without documented operational justification. Vendor payments that are round-figure amounts, issued to recently incorporated entities with no verifiable track record, and bearing invoices describing broadly worded consultancy or advisory services. A sudden increase in account transaction volumes coinciding with a change in the official’s public role or a procurement cycle. Asset purchases (particularly real estate and equity interests) occurring shortly after large government disbursements, in amounts that exceed the customer’s declared earnings. A pattern of foreign currency exchange transactions, structured wire transfers, or cash withdrawals that individually remain below alert thresholds but cumulatively represent a volume inconsistent with the customer’s legitimate profile.

Sectors at Highest Exposure

The rating column shows each sector’s UAE NRA 2024 residual ML-risk tier (Low, Medium-Low, Medium, Medium-High, High). The reason column explains each sector’s specific exposure to public-fund misappropriation, which can be elevated relative to its general NRA rating.

Sector	Risk Rating	Specific Reason
Financial Institutions (Banks)	Medium-High	UAE NRA 2024 rates mainland banking Medium-High; banks are the primary conduit for initial diversion, structuring, and international transfer of misappropriated proceeds
Real Estate	High	UAE NRA 2024 rates real estate as a high risk; property is the preferred integration vehicle for large-scale misappropriated funds
Trust and Company Service Providers (TCSPs)	Medium	Create the corporate structures used to receive and hold misappropriated funds at arm’s length from the public official
Legal Professionals (Lawyers and Notaries)	Medium	Establish legal vehicles, draft trust deeds, facilitate property transfers, and provide a professional imprimatur to layering structures
Dealers in Precious Metals and Stones (DPMS)	Medium-High	High-value assets that convert cash into portable, underreported wealth
Money Services Businesses	High	Used to convert, exchange, and wire funds quickly with limited counterparty documentation
Accountants and Auditors	Medium-Low	May certify financial statements or accounts that conceal misappropriated fund flows

Geographies and Contexts of Concern

In the UAE context, misappropriation risk may be heightened where customers are linked to high-risk source jurisdictions identified in the UAE NRA 2024, including countries where foreign predicate offences are documented as a significant ML threat. The UAE’s FATF Recommendation 12 PEP obligations apply in full to foreign PEPs regardless of the country of origin, and supervised entities must not apply reduced diligence on the basis that the originating country has its own enforcement system.

Best Practices for Misappropriation of Public Funds Risk Management

Incorporate the UAE NRA 2024 sector findings into the entity’s enterprise-wide risk assessment (EWRA). Cabinet Resolution No. (134) of 2025, Article 5 requires each regulated entity to identify, assess, and document its ML, TF, and PF risks; the public-official and PEP exposures described in this article should be reflected in that assessment and refreshed as national risk findings are updated.
Screen all customers and beneficial owners against comprehensive PEP databases at onboarding and on an ongoing basis. PEP status is not static; a customer may be appointed to public office after a relationship is established. Automated continuous screening is the only reliable way to capture this event and trigger an EDD review. Generic periodic reviews conducted annually are insufficient for a risk category with the velocity and complexity of PEP-linked misappropriation.
Take reasonable measures to identify source of funds and source of wealth for foreign PEPs, high-risk domestic PEPs, high-risk international-organisation PEPs, or all PEPs where the entity’s internal policy treats all PEP relationships as high risk, supported by independent verification where the risk profile requires it, before approving the business relationship. Documentation must be specific, dated, and cross-referenced against independent sources such as corporate registry data, land registry records, and OSINT. Declaration letters signed by the customer alone are not sufficient evidence of the source of wealth; the documentation must be independently corroborated.
Apply a substance-over-form test to all entities in the ownership chain of PEP-associated customers. Where a company or trust holds an account or an asset on behalf of a PEP or their associate, the compliance team must conduct full CDD and EDD as though the PEP were the direct customer. The interposition of a legal vehicle does not reduce the risk; it amplifies it.
Set transaction monitoring rules specifically calibrated to public official risk profiles. Rules must be designed to detect the diversion patterns described in this article: payments from government accounts to personal accounts, round-figure vendor payments to recently incorporated entities, structuring across multiple accounts, and FX transactions inconsistent with the customer’s declared activities. Generic rules designed for mass-market retail customers are not sufficient for this risk category.
Obtain senior management approval before establishing or continuing a business relationship for foreign PEPs, high-risk domestic PEPs, high-risk international-organisation PEPs, or all PEPs where the entity’s internal policy treats all PEP relationships as high risk. Cabinet Resolution No. (134) of 2025, Article 16 requires the same. The approval should be formally documented, including the rationale for risk acceptance and the specific EDD measures applied, and should be revisited at every significant change in the customer’s circumstances.
Maintain and regularly update internal indicators for PEP-linked misappropriation. CR 134/2025 Article 17 requires regulated entities to establish and update indicators of ML suspicion. Indicators for misappropriation must be reviewed following material changes in the customer’s public role, following significant government disbursements in sectors served by the entity’s customers, and whenever a supervisory body or the UAEFIU issues updated guidance.
Conduct enhanced negative news and adverse media checks for PEP customers at onboarding and on a risk-based basis thereafter. Adverse media monitoring should cover sources in the customer’s public role’s language and jurisdiction. Relevant adverse media includes reports of dismissal from public office, parliamentary or audit committee investigations, asset declaration discrepancies, and foreign asset recovery proceedings targeting the customer or their associates.
Build beneficial ownership verification into every transaction involving a corporate or trust counterparty that receives government payments. Where a regulated entity processes payments to entities that receive government procurement funds, the BO of those entities must be identified and screened against PEP databases. The volume of a government payment does not replace the need for BO transparency; it increases it.
Train frontline staff to recognise the specific red flags associated with misappropriation, not only general PEP risk. Staff should be able to identify the patterns described in the red flags table in this article, including the use of nominees, inflated vendor payments, and inconsistency between a public official’s declared salary and their financial activity. Training should include the obligation to escalate to the compliance officer rather than to resolve the concern through direct customer inquiry.
File STRs immediately and without delay when suspicion arises. FDL 10/2025 Article 18 and CR 134/2025 Article 18 require the same. Suspicion does not require certainty; a compliance officer who observes a pattern consistent with misappropriation must report rather than resolve the doubt by seeking further information from the customer. Seeking clarification from a customer who may be involved in misappropriation risks, tipping off.
Maintain comprehensive records of all EDD decisions, including decisions not to apply enhanced measures. Where a regulated entity assesses a PEP-linked customer as standard risk, the rationale for that decision must be documented, dated, and signed off by the compliance officer. Undocumented risk acceptance decisions are treated as the absence of a CDD process in supervisory examinations.
Cooperate fully with information requests from the UAEFIU, supervisory authorities, and foreign authorities under mutual legal assistance frameworks. FDL 10/2025 Articles 11 and 18 require regulated entities to provide information requested by the UAEFIU. Delays, omissions, or obstructive responses to authority information requests are standalone violations, separate from any underlying ML offence.

How Misappropriation of Public Funds and Corruption Are Related

Misappropriation of public funds is a specific sub-technique within the broader concept of corruption. While corruption encompasses any abuse of entrusted power for private gain, including bribery, extortion, nepotism, and influence peddling, misappropriation is the most directly financial form: the actual taking of state property or money entrusted to a public official. The distinction matters for compliance teams because misappropriation generates specific proceeds that enter the financial system and require laundering, whereas other forms of corruption may involve the distortion of decisions rather than the direct removal of funds.

Detection and mitigation strategies for misappropriation of public funds build on the general corruption framework but require additional focus on financial account activity, procurement processes, and asset disclosure verification. A compliance officer who understands corruption as a category will recognise the elevated risk associated with PEPs; one who also understands misappropriation as a sub-technique will know which specific transaction patterns and account structures to investigate.

Related Term

Related Term	Connection
Corruption	Parent technique: misappropriation is a specific form of corruption involving the direct diversion of public property or funds
Politically Exposed Person (PEP)	Primary actor category: public officials and their associates are the core subject of EDD obligations designed to detect misappropriation
Shell Companies	Layering vehicles; shell companies are a primary tool for concealing the beneficial ownership of misappropriated funds
Front Company	Layering vehicle; front companies with no legitimate business purpose receive procurement payments as part of the diversion mechanism
Beneficial Ownership	Control concept: identifying the true beneficial owner of corporate vehicles is the central challenge in detecting misappropriation structures
Enhanced Due Diligence (EDD)	Control mechanism; the specified enhanced-measures framework under CR 134/2025 Art. 16 is the primary regulatory response to PEP-linked misappropriation risk
Customer Due Diligence (CDD)	Foundation control: CDD provides the baseline identity and source-of-wealth verification on which misappropriation detection depends
Suspicious Transaction Report (STR)	Reporting obligation: the required disclosure mechanism when a regulated entity suspects a customer is involved in misappropriation
Source of Wealth	Verification concept: establishing a verifiable wealth origin is the principal challenge in assessing PEP financial activity
Trade-Based Money Laundering (TBML)	Typology overlap; false invoicing used in misappropriation schemes shares characteristics with TBML; both exploit trade documentation
Kleptocracy	Political concept; systemic state capture where misappropriation operates at a national scale; relevant for jurisdictional risk assessment
Asset Recovery	Legal remedy: UNCAC Chapter V and the UAE international cooperation provisions enable the repatriation of misappropriated state assets

Related Process

Related Process	Connection
Procurement Fraud	The most common mechanism for misappropriating public funds at scale; contracts are awarded to controlled entities without competitive oversight
Payroll Fraud	A common diversion mechanism in which fictitious employees or inflated salaries direct public funds to the perpetrator’s accounts
False Invoicing	A documentary technique used in misappropriation to create the appearance of a legitimate transaction, justifying a public payment

Related Control or Obligation

Related Control or Obligation	Connection
PEP EDD (CR 134/2025 Art. 16)	The specific regulatory framework for foreign PEPs and for domestic or international-organisation PEPs where the relationship is assessed as high risk, designed to detect and mitigate misappropriation risk
BO Identification (CR 134/2025 Art. 10)	Mandatory identification of beneficial owners at 25% threshold is essential for piercing corporate structures used in misappropriation
STR Obligation (FDL 10/2025 Art. 18)	Immediate filing obligation triggered when suspicion of misappropriation arises
UNCAC Asset Recovery (Chapter V)	International legal framework enabling the tracing and repatriation of misappropriated public funds across jurisdictions

What Financial Instruments Do Criminals Use in Misappropriation of Public Funds Schemes?

Accounts receivable and commercial invoices are exploited in misappropriation schemes to generate documentary evidence of a legitimate commercial transaction where none exists.

A procurement official approves payment against a fraudulent invoice submitted by a controlled entity. The invoice, which may bear the names of real suppliers or describe real service categories, creates a paper trail that appears to justify the outflow from the government account. Because accounts receivable instruments are routine in public procurement, their misuse is difficult to detect without price benchmarking and counterparty verification.

Bank accounts are the primary vehicle for receiving, holding, and moving diverted funds. Personal accounts, business accounts held in the name of nominees, and accounts at foreign financial institutions are all used at different stages of the scheme. The pattern of multiple accounts, each receiving small tranches of the total diverted amount, is a structuring technique designed to avoid triggering transaction monitoring alerts.

Cash is used for the direct extraction of public funds in contexts where physical cash handling is part of normal government operations, such as cash-based procurement, petty cash accounts, or government disbursements to recipients in areas with limited banking infrastructure. Cash removes the audit trail at the point of diversion, making tracing extremely difficult without forensic accounting.

Equity interests in legal entities provide the structural mechanism for holding misappropriated funds in a form that generates ongoing income and appreciates in value. A public official who uses misappropriated funds to acquire equity in a commercial enterprise creates an asset that is difficult to distinguish from a legitimate business investment. The equity interest also provides an explanation for any future dividend or income that would otherwise be unexplained.

Real estate is the most widely documented integration asset in misappropriation cases globally. Property provides a stable store of value, generates rental income that launders the underlying funds, and can be transferred between beneficial owners through layered corporate structures without appearing on the official’s personal asset declaration.

Trust beneficial interests allow the public official to benefit economically from assets without appearing in any public registry as the owner. A trust settled in favour of the official’s family members or under discretionary terms controlled by a professional trustee holds the assets, while the official retains effective control through mechanisms such as a protector role or a letter of wishes.

Variant or Synonym	Context or Jurisdiction	Distinction from Primary Term
Embezzlement	Common law jurisdictions	Specifically refers to misappropriation by a person who lawfully holds property as an employee or agent; broader than the public-sector-specific framing of misappropriation of public funds
Diversion of State Assets	International law and asset recovery	Preferred terminology in asset recovery and UNCAC discussions; includes both cash and non-cash state property
Kleptocracy	Political science and international relations	Refers to systemic or institutional misappropriation where state structures are captured by ruling elites; the individual typology operates at a smaller scale
Public Sector Corruption	Supervisory and regulatory usage	Broad category covering multiple forms of official misconduct, including misappropriation, bribery, extortion, and abuse of functions
Misuse of Public Office	UK and Commonwealth jurisdictions	A criminal offence distinct from embezzlement; covers deliberate breach of official duty for personal gain, including but not limited to financial diversion
Corruption Proceeds	ML and asset recovery context	Refers specifically to the financial proceeds generated by corruption, including misappropriation; used in the context of predicate offence analysis

What Products and Services Do Criminals Abuse in Misappropriation of Public Funds Schemes?

Currency exchange services are abused in misappropriation schemes to convert diverted funds from the domestic currency of the originating jurisdiction into more widely traded currencies, reducing the traceability of the original source. A public official who has extracted government funds in a local currency will frequently use a money exchange provider to convert those funds into US dollars, euros, or UAE dirhams before moving them into the international financial system. The conversion creates a break in the documentary chain that makes source tracing more difficult.

Offshore banking services are used to receive and hold misappropriated funds outside the jurisdiction in which the theft occurred, placing the assets beyond the immediate reach of domestic law enforcement and asset recovery proceedings. Offshore accounts held in jurisdictions with strong banking secrecy laws, limited information exchange with the originating country, and minimal beneficial ownership disclosure requirements are the preferred deposit vehicle for large-scale misappropriation proceeds.

Offshore company incorporation services are used to create the corporate wrappers through which misappropriated funds are channelled. A public official who cannot hold funds personally without triggering asset declaration scrutiny will direct those funds through a series of offshore companies, each incorporated in a different jurisdiction, with nominee directors and shareholders obscuring the true beneficial owner. Company formation services that fail to conduct rigorous BO identification on their clients are directly complicit in enabling these structures.

Real estate transaction services facilitate the conversion of liquid misappropriated funds into immovable property. Real estate agents and transaction advisers who do not verify the source of funds used to purchase property are a critical vulnerability in the AML control chain. The UAE NRA 2024 identifies real estate as a High-risk sector specifically because large cash transactions, unknown sources of funds, and property price manipulation are documented characteristics of ML in the sector.

Trust and corporate services provided by TCSPs create the legal holding structures that give the misappropriating official long-term control of assets without visible ownership. A discretionary trust with a professional trustee, holding a portfolio of real estate and equity investments on behalf of undisclosed beneficiaries, is one of the most resilient asset-protection structures available to a corrupt official. TCSPs that establish trusts without identifying the settlor’s source of wealth and without conducting ongoing monitoring of the trust relationship are facilitators of the integration stage of misappropriation proceeds.

Wire transfer services move misappropriated funds between accounts, across borders, and through multiple financial institutions at speed. The international wire transfer system is the primary mechanism by which proceeds exit the originating jurisdiction and enter the UAE or other financial centres. Each routing step through an additional correspondent bank adds a layer of opacity to the transaction trail.

How AML UAE Helps in Managing the Risk of Misappropriation of Public Funds

The article above has identified a specific compliance gap: most regulated entities have PEP policies, but far fewer have the operational processes, training, and systems required to detect misappropriation of public funds as a distinct typology. The gap between knowing that PEPs are high-risk and knowing how to detect the specific transaction patterns, corporate structures, and source-of-wealth inconsistencies that signal misappropriation is where most enforcement exposure lives.

AML UAE works with financial institutions, DNFBPs, and professional service firms to build compliance programmes that close that gap. This includes designing PEP EDD frameworks that go beyond name screening to cover source-of-wealth verification, corporate structure mapping, and ongoing monitoring rules specific to public-sector risk profiles. It also includes typology-specific training that equips frontline staff and compliance officers to recognise misappropriation indicators in the account activity and customer documentation they see every day.

For regulated entities that handle government agency relationships, procurement counterparties, or corporate customers with PEP-linked beneficial owners, AML UAE provides structured risk assessment and policy development support aligned to FDL 10/2025, CR 134/2025, and the FATF PEP standards. For entities facing supervisory review or information requests related to PEP-linked accounts, AML UAE provides advisory support grounded in the current UAE regulatory framework.

Frequently Asked Questions

Yes. FDL 10/2025, Article 2 criminalises money laundering in relation to the proceeds of any predicate offence. Misappropriation of public funds generates predicate-offence proceeds where the underlying conduct amounts to a felony or misdemeanour under applicable UAE law, or a qualifying foreign offence satisfying the conditions in FDL 10/2025. A person who launders proceeds derived from public fund misappropriation commits a money laundering offence, independent of whether they were involved in the original misappropriation.

Bribery involves the payment or receipt of a benefit in exchange for an official exercising their discretion in a particular way. Misappropriation is the direct taking of public property or money by an official who has control over it. The two offences may overlap in complex corruption schemes, but their AML implications differ: bribery generates proceeds at the point of receipt by the official, while misappropriation generates proceeds at the point of diversion from public funds.

For foreign PEPs, and for domestic or international-organisation PEPs where the relationship is high risk, it involves obtaining senior management approval before establishing or continuing the business relationship, taking reasonable measures to identify the customer’s source of funds and source of wealth with independent verification proportionate to the risk, conducting enhanced ongoing monitoring of transactions, and updating EDD documentation whenever the customer’s public role or risk profile changes.

Banks, real estate agents and brokers, TCSPs, lawyers, and dealers in precious metals and stones are the sectors with the highest exposure. The UAE NRA 2024 rates real estate as High risk and TCSPs as Medium risk for ML, with PEP-linked misappropriation contributing to both ratings.

Yes, but with different mandatory measures. Under FATF Recommendation 12, foreign PEPs must receive mandatory EDD. Domestic PEPs and PEPs from international organisations must receive risk-based enhanced measures. Under CR 134/2025 Article 16, foreign PEPs receive the full specified measures, including mandatory senior management approval; domestic PEPs and PEPs of international organisations receive these enhanced measures where the relationship is assessed as high risk. An entity may choose to treat all PEPs as high risk as a matter of internal policy.

An STR must be filed immediately and without delay when suspicion arises. Suspicion does not require certainty or proof. Under FDL 10/2025 Article 18 and CR 134/2025 Article 18, the obligation to file is triggered by the formation of suspicion, not by confirmation of a criminal act. A compliance officer who identifies a pattern consistent with misappropriation and delays filing to gather more evidence is in breach of the STR obligation.

Under FDL 10/2025, Article 28, a deliberate or grossly negligent failure to file an STR may result in imprisonment and a fine of AED 100,000 to AED 1,000,000. Separately, supervisory authorities may impose administrative fines of AED 10,000 to AED 5,000,000 per violation under Article 17, with incremental fines where a violation recurs within one year.

The UAE ratified UNCAC and is committed to its provisions, including Chapter V on asset recovery. UNCAC Article 17 defines the misappropriation offence, and Chapter V requires states to provide the widest possible mutual legal assistance in tracing, freezing, seizing, and returning misappropriated assets. Mutual legal assistance and cross-border asset recovery operate between competent authorities under FDL 10/2025 Article 21. Regulated entities, for their part, must provide information requested by the UAEFIU under FDL 10/2025 Articles 11 and 18.

No. Under CR 134/2025 Article 10, beneficial owner identification must pierce nominee arrangements to identify the natural person who ultimately owns or controls the entity. Where a TCSP acts as a nominee for a PEP or PEP associate, the underlying beneficial owner must be identified and subjected to the same EDD framework as a direct PEP customer.

goAML is the UAEFIU’s secure online reporting platform. STRs from regulated entities in the UAE must be filed with the UAEFIU through its electronic reporting system, currently goAML, or any other FIU-approved channel, under FDL 10/2025 Article 18. goAML submissions must include all available data on the customer, the transactions, and the basis for suspicion. Registration on goAML is a mandatory prerequisite for reporting; entities that fail to register are unable to comply with their statutory reporting obligations and may be subject to regulatory enforcement where reporting failures occur.

Under CR 134/2025 Article 25, all CDD and EDD records must be retained for a minimum of five years from the end of the business relationship or the completion of an occasional transaction. For PEP relationships, the EDD documentation includes source-of-wealth verification, senior management approval records, ongoing monitoring logs, and all STRs filed in relation to the account.

No. Corruption is the broader category and misappropriation of public funds is one type of corruption offence. Corruption also covers bribery, abuse of office, trading in influence, and illicit enrichment. Misappropriation specifically involves a public official diverting state money, property, or assets under their control for personal benefit or for another person. For AML purposes, both can generate proceeds of a predicate offence under FDL 10/2025, Article 2.

Under CR 134/2025 Article 16, senior management approval is required before establishing, and to continue, a business relationship with a foreign PEP. For domestic PEPs and PEPs of international organisations, the same approval applies where the relationship is assessed as high risk. The approval should be documented and revisited whenever the customer’s public role or risk profile changes.

Source of funds is the origin of the specific money used in a particular transaction or relationship, for example the salary, sale proceeds, or loan behind a payment. Source of wealth is the origin of the customer’s overall net worth, explaining how the total wealth was accumulated over time. For PEP-linked misappropriation risk, both should be identified through reasonable measures and supported by independent documentation where the risk profile requires it, under CR 134/2025 Article 16.

It can, which is why beneficial ownership identification is central to the control. Trusts and nominee arrangements can place legal title in a name other than the PEP’s while the PEP keeps ultimate control or benefit. Regulated entities must identify the natural person who ultimately owns or controls the customer, applying the 25% ownership or control test and the control and senior-managing-official fallbacks under CR 134/2025 Article 10, and screen those persons for PEP status rather than relying on the named account holder.

Closing Summary

Misappropriation of public funds may generate proceeds of a predicate offence where the underlying conduct amounts to a felony or misdemeanour under applicable UAE law, or a qualifying foreign offence satisfying the conditions in FDL 10/2025, and those proceeds require concealment through the formal financial and professional services sectors.

The regulatory obligation for regulated entities in the UAE is clear: foreign PEP relationships require the specified enhanced measures under CR 134/2025 Article 16, while domestic PEPs and PEPs of international organisations require those measures where the relationship is assessed as high risk, and an entity may choose to treat all PEP relationships as high risk under its internal risk appetite.

Across PEP relationships this means taking reasonable measures to identify source of funds and source of wealth, supported by independent verification where the risk profile requires it, and immediate STR filing when suspicion arises.

The typology described in this article spans the placement, layering, and integration stages of money laundering, exploiting real estate, corporate vehicles, trust structures, wire transfers, and professional service providers at each stage.

Detection requires a combination of accurate PEP identification, network analytics that map relationships between customers and corporate counterparties, and ongoing monitoring rules calibrated to the behavioural signature of public-fund diversion rather than general retail banking risk profiles.

Compliance teams that treat PEP obligations as a static onboarding check miss the dynamic nature of misappropriation risk. A customer’s public role, the procurement cycles affecting their sector, and the geopolitical environment of the originating jurisdiction all change over time. An EDD framework that does not respond to those changes in real time is not fit for purpose against this typology.

Strengthening Your AML Compliance Framework?

Ensure your controls can address risks associated with the misuse of public funds.

Explore Our Services:

AML/CFT Policy Drafting

AML Training

AML Software Selection

Regulatory Reporting

Managed KYC and CDD

AML/CFT Health Check

Risk Assessment Report

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Pathik is an ACAMS-certified AML consultant specialising in governance, risk, and compliance for regulated entities in the UAE. He brings over 28 years of experience, with 1,000+ hours of AML training and 200+ advisory engagements across DNFBPs, VASPs, and FIs. He supports businesses in aligning with AML/CFT requirements from the CBUAE, DFSA, MoET, MoJ, VARA, CMA, FSRA, and FATF. Known for translating complex regulations into audit-ready procedures, Pathik enables operational clarity and compliance readiness.

Reach Out to Pathik

Precious Commodity Smuggling

Pathik Shah — Fri, 26 Jun 2026 12:00:15 +0000

Last Updated: 06/26/2026

Protect your business with reliable and effective AML strategies with AML UAE.

Precious Commodity Smuggling: In Brief

Physically transporting gold, diamonds, or gemstones across borders without customs declaration converts criminal proceeds into portable, untraceable value. DPMS entities represent a structural vulnerability within this typology, as smuggled commodities routinely re-enter the legitimate economy through dealers. They therefore face binding AML/CFT obligations under FDL 10/2025 and CR 134/2025, including customer and enhanced due diligence, sanctions screening, DPMSR filing for covered transactions at or above AED 55,000, and STR filing through goAML where suspicion of money laundering, terrorist financing, or proliferation financing arises. Market-rate comparison and responsible-sourcing checks are practical risk-based controls that support this framework.

What is Precious Commodity Smuggling?

Summary: Precious commodity smuggling is the illegal cross-border movement of high-value goods such as gold, diamonds, and gemstones, hidden from customs to disguise the origin of criminal funds.

Precious Commodity Smuggling is the illegal transportation of highly valuable items, such as gold, diamonds, precious metals, or gemstones, across international or domestic borders while deliberately hiding them from customs and border authorities.

What makes it particularly attractive to criminals is the characteristic of the commodities themselves. The high value, physical compactness, and global convertibility of these assets allow criminals to transport illicit proceeds in a form that resists paper-trail scrutiny. Precious commodities do not require a bank account, do not generate wire transfer records, and can be melted, recut, or alloyed to destroy physical evidence of their origin.

The Financial Action Task Force (FATF) identifies precious metals and stones as high-risk instruments for trade-based money laundering and terrorist financing, owing to their capacity to store and transfer value across jurisdictions with minimal regulatory oversight.

Regulatory Framework Related to Precious Commodity Smuggling

UAE Regulatory Snapshot

Requirement	UAE position
Main AML law	Federal Decree-Law No. 10 of 2025 (FDL 10/2025)
Executive regulation	Cabinet Resolution No. 134 of 2025 (CR 134/2025)
DPMS supervisor	Ministry of Economy and Tourism (MoET)
Financial intelligence unit	UAEFIU, operating within the Central Bank (CBUAE)
Reporting platform	goAML
Threshold report	DPMSR for covered cash transactions, and entity wire transfers, at or above AED 55,000 (single or linked)
Suspicion report	STR or SAR filed where suspicion of money laundering, terrorist financing, or proliferation financing arises

Summary: In the UAE, the obligations sit under FDL 10/2025 and CR 134/2025, which bring dealers in precious metals and stones into DNFBP scope and impose CDD, DPMSR, STR/SAR, and record-keeping obligations according to transaction type, threshold, and suspicion indicators.

The primary legislative instrument governing anti-money laundering obligations in the UAE is Federal Decree-Law No. (10) of 2025 Regarding Anti-Money Laundering, Combating the Financing of Terrorism and Proliferation Financing. (FDL 10/2025).

Article 2 criminalises money laundering, including converting or transferring proceeds from predicate offences to conceal their illicit origin.

Article 10 mandates that any person entering or leaving the state must disclose the amount of cash, bearer negotiable instruments, precious metals and valuable stones they are carrying, in accordance with the national disclosure framework.

Articles 18 and 19 impose statutory reporting obligations and preventive measures on all regulated Financial Institutions (FIs), Designated Non-Financial Businesses and Professions (DNFBPs), and Virtual Asset Service Providers (VASPs). These include filing a Suspicious Transaction Report (STR) on suspicion, identifying customers, and applying enhanced due diligence in higher-risk situations.

Cabinet Resolution No. (134) of 2025 (CR 134/2025) operationalises (FDL 10/2025) for all regulated entities. Article 3(3) brings Dealers in Precious Metals and Stones (DPMS) within the DNFBP scope, triggering customer due diligence, DPMSR, and record-keeping obligations for covered transactions at or above AED 55,000 (single or linked), while an STR or SAR is required where suspicion of money laundering, terrorist financing, or proliferation financing arises.

Article 5 requires all regulated entities to conduct an Enterprise-Wide Risk Assessment that incorporates sector-specific typology intelligence and establish internal policies to manage and mitigate the identified risk.

The Supplemental Guidance for DPMS 2026 obligates DPMS to file a Dealers in Precious Metals and Stones report (DPMSR) for any cash transaction with a resident or non-resident individual at or above AED 55,000, and for any transaction with a corporate entity at or above AED 55,000, whether settled in cash or by wire transfer, including linked transactions.

Ministerial Decree No. (68) of 2024 and the Ministry of Economy & Tourism (MoET) Due Diligence Regulations for Responsible Sourcing of Gold, impose a legally binding five-step supply chain due diligence framework on gold refineries and supply chain participants, directly targeting the smuggling and conflict origin commodity typology.

Regulatory Reference

Federal Decree-Law No. (10) of 2025, Article 2 (ML criminalisation); Article 18 (STR obligation); Article 19 (preventive measures); Article 10 (Disclosure) | Cabinet Resolution No. (134) of 2025, Articles 3(3), 5, 15,16,17, 18,19,20, 23 | Supplemental Guidance for Dealers in Precious Metals and Stones (March 2026) obligating DPMSR goAML threshold reporting | Ministerial Decree No. (68) of 2024: Gold Refinery Responsible Sourcing

Supervisory Body

Summary: The UAE Ministry of Economy and Tourism (MoET) supervises dealers in precious metals and stones for AML/CFT, while the Financial Intelligence Unit, housed within the Central Bank, receives all reports through the goAML portal.

The Ministry of Economy and Tourism (MoET) is the supervisory authority for all DNFBPs, including DPMS entities. MoET conducts risk-based onsite and offsite inspections, issues administrative penalties under (CR 71/2024), and supervises compliance with CDD, goAML reporting, and AML/CFT policy requirements.

The UAE Financial Intelligence Unit (UAEFIU), established as an independent unit within the Central Bank of the UAE (CBUAE), receives all STRs, SARs, and DPMSRs via the goAML platform and conducts strategic analysis of typology patterns, including commodity smuggling.

Reporting Obligations and Channels of Precious Commodity Smuggling

DPMSR, STR and SAR: Which Report Applies

Report	When it applies	Trigger
DPMSR	Covered DPMS transactions	Cash transaction with an individual, or a cash or wire transaction with an entity, at or above AED 55,000 (single or linked transactions)
STR	A specific suspicious transaction	Reasonable suspicion of money laundering, terrorist financing, or proliferation financing, regardless of amount or threshold
SAR	Suspicious activity or conduct	Suspicion relating to activity or behaviour not tied to a single transaction, including attempted or refused dealings

Summary: Regulated dealers file STRs on suspicion and DPMSRs for covered cash or entity transactions at or above AED 55,000, all submitted to the UAEFIU via goAML.

Regulated DPMS entities must file a DPMSR via goAML for every cash transaction at or above AED 55,000, whether conducted by individuals or entities. For entity counterparties, the same threshold applies to wire transfers.

Required DPMSR fields, including the involved person’s nationality, place of incorporation, and business activity, must be fully populated. DPMS entities must also file an STR without delay via goAML when suspicion of money laundering, terrorist financing, or proliferation financing arises, regardless of transaction value.

Gold refineries must additionally comply with the five-step responsible sourcing framework under the MoET Due Diligence Regulations, which requires due diligence on each gold supply, appointment of a compliance officer at the senior level, and an independent third-party audit by an MoET-accredited reviewer.

Enforcement Actions

Summary: CR 71/2024 sets the administrative penalty schedule, with fines reaching AED 500,000 for enhanced due diligence failures and AED 1,000,000 for failing to freeze funds on a sanctions match.

Precious commodity smuggling may involve predicate offences such as customs evasion, fraud, sanctions evasion, and organised crime, and UAEFIU typology analysis recognises the misuse of precious metals and stones as a channel that can support terrorist financing. This typology has been observed in cross-border network schemes.

The UAE’s regulatory authorities have demonstrated a robust and proactive enforcement posture across the DPMS sector. The FDL 10/2025, Cabinet Resolution No. (71) of 2024 (CR 71/2024), together with the 2026 DPMS supplemental guidance, has tightened controls, broadened personal liability, and strengthened supply chain traceability.

REGULATORY REFERENCE

Cabinet Resolution No. (71) of 2024: Administrative Penalties for AML/CFT Violations by DNFBP entities supervised by MoET | Maximum fine for TFS-related violations: AED 1,000,000 (CR 71/2024, Violation 35) | Maximum fine for EDD failures: AED 500,000 (CR 71/2024, Violations 15-17)

What Does Precious Commodity Smuggling Mean?

Summary: The term covers the illicit movement of precious metals and stones to obscure the source of criminal proceeds, overlapping with but narrower than broader commodity smuggling.

Picture a gold trading shop in a busy market having a trade license, looking completely legitimate. Behind the operations, the gold is coming from an illegal mine, smuggled across borders, hidden inside a cargo box or strapped to a courier who declared nothing at customs. Once the gold arrives, it is melted down and reshaped into clean bars or jewellery, sold at full market price and the profit is recorded as normal business income. Through this mechanism, criminals turn illegal gold into legitimate, spendable money.

Why Detecting Precious Commodity Smuggling Matters

Summary: As one of the world’s largest gold trading hubs, the UAE carries concentrated exposure, making precious-commodity controls central to the integrity of its trade and financial system.

Precious commodities carry a high value-to-weight ratio, move across borders without generating bank records and can be melted or recut to permanently destroy evidence of origin. These characteristics make precious commodities a near-perfect vehicle for the placement stage of money laundering.

The UAE sits at the heart of this risk, as one of the world’s largest gold trading hubs. The CBUAE September 2025 Quarterly economic review reports continued year-on-year growth in the UAE’s non-oil foreign trade, with gold and jewellery a significant component. These volumes of transactions make the detailed scrutiny of every deal operationally challenging for both DPMS entities and supervisory authorities.

Recognising this risk, the UAE has responded with a clear regulatory framework. CR 134/2025 requires regulated entities to apply customer due diligence, conduct an enterprise-wide risk assessment, file DPMSRs for covered threshold transactions, and apply enhanced due diligence where higher-risk indicators arise. Failure to maintain adequate controls may expose the entity to administrative penalties under CR 71/2024, which prescribes fines up to AED 500,000 for EDD failures and AED 1,000,000 for failures to freeze assets where a TFS match is identified.

How Precious Commodity Smuggling Operates

Summary: Schemes move through five stages, converting criminal proceeds into physical commodities, concealing and transporting them across borders, then reintroducing the value into the legitimate market.

Stage 1: Criminal Proceeds to Physical Commodity

Criminal proceeds, which may have originated from drug trafficking, fraud, extortion, or other predicate offences, are converted into physical precious commodities through direct cash purchases. Purchases may be split into several transactions kept below the AED 55,000 threshold to avoid reaching the DPMSR and goAML reporting obligations. Multiple transactions across different vendors, spread over days or weeks, aggregate to a significant value without triggering any single filing.

Stage 2: Commodity Concealment and Preparation

Once acquired, the commodity is physically altered to evade customs identification. Gold bars are melted and recast into common objects such as car parts, tools, or jewellery pieces. Gemstones are mixed with legitimate cargo or misclassified on shipping documentation as low-value industrial minerals. Couriers carry commodities in checked luggage declared below customs declaration thresholds, relying on inconsistent enforcement at border crossings.

Stage 3: Cross-Border Movement

The prepared commodity crosses an international border, typically from a conflict-affected region towards a major trading hub, without a declaration reflecting true value or origin. In documented cases, gold has entered the country through land borders, sea cargo, and passenger baggage channels, often after transit through one or more intermediate jurisdictions with minimal customs controls.

Stage 4: Reintroduction into the Legitimate Market

At the destination, the smuggled commodity enters the legitimate precious metals and stones supply chain through DPMS entities, refineries, or jewellery manufacturers. A refinery that melts and reprocesses the commodity destroys its physical traceability. The gold or gems are then sold through normal trade channels, with the sale proceeds appearing on paper as legitimate business income from commodity trading.

Stage 5: Proceeds Integration

Sale receipts from the commodity are deposited into bank accounts, transferred through letters of credit, or applied to loans secured against commodity holdings. At this point, the criminal proceeds have been fully layered and are reintegrated into the financial system as legitimate trade income. The link to the original predicate offence has been severed by the physical transformation and multiple border crossings, making it difficult for authorities to identify the source of funds.

Real-World Examples of Precious Commodity Smuggling

Summary: Common patterns include conflict gold routed through intermediary refineries, structured jewellery purchases converted quickly to cash, and under-invoiced trade documentation.

Conflict Gold Routed Through an Intermediary Refinery

Criminal networks sourcing gold from conflict-affected areas export the commodity to a country with limited due diligence requirements for gold trade. The exporter presents falsified certificates of origin identifying a neutral, low-risk jurisdiction. A refinery in the destination country purchases the gold at market rate, processes it, and sells gold bars carrying the refinery’s own hallmark, which is internationally recognised and trusted. The illicit origin of the underlying gold is permanently obscured by the hallmarking process.

The key detection opportunity lies at the supply chain onboarding stage: a refinery that does not apply the OECD-based five-step due diligence framework per MOE Due Diligence Regulations cannot detect this substitution.

(Source: FATF | https://www.fatf-gafi.org/en/publications/Methodsandtrends/Moneylaundering-gold.html)

Structured Jewellery Purchases and Rapid Conversion

A criminal with significant cash proceeds from fraud makes a series of jewellery purchases at multiple DPMS vendors over several weeks, keeping each transaction below the reporting threshold. The jewellery is transported to a second jurisdiction, where it is sold at market value through a pawnbroker or commodity exchange. The proceeds are deposited into a business account and described as income from jewellery trading.

The detection failure occurs at the DPMS vendor level: no single vendor observes the cumulative value of purchases, no enhanced due diligence is applied despite the customer’s cash-intensive behaviour, and no STR is filed. Aggregating transaction data across vendors, which goAML’s analytical tools support, would reveal the full pattern.

Trade Document Manipulation and Under-Invoicing

An organised crime group exports a consignment of gold bullion from a source country to a trading hub and deliberately under-invoices the consignment, declaring its value as USD 50,000 instead of its actual market value of USD 500,000. The receiving DPMS entity purchases the goods at the declared value and pays the seller accordingly. This under-invoicing allows value to be transferred from the importing jurisdiction to the exporting party without generating a financial transfer record.

Compliance officers reviewing trade documentation against prevailing commodity market price data would identify the discrepancy; the failure occurs when no market-rate cross-check is performed on the declared value of the imported commodity.

How Does Precious Commodity Smuggling Facilitate Money Laundering?

Summary: Precious commodities act as a portable store of value that breaks the audit trail, letting criminals place, layer, and integrate illicit funds without bank records.

The fact that a commodity can be layered into the financial system without a trace is essential to money launderers. Unlike wire transfers and bank deposits, physical commodities do not require an account or institution through which the transfer must be recorded.

A criminal who acquires gold with cash has completed the placement stage and immediately entered the layering stage without engaging any regulated financial institution. Each subsequent border crossing adds a jurisdictional layer that makes the asset’s history harder to reconstruct, particularly once the commodity is processed by a refinery or incorporated into manufactured goods.

How Do Criminals Exploit Precious Commodity Smuggling?

Summary: Criminals exploit weak provenance checks, cash-intensive dealing, and the ease of melting or recutting goods to obscure their origin and ownership.

There are two ways in which precious commodity smuggling is exploited through organised crime groups and shell or front companies.

Organised crime groups provide the operational capacity to execute multi-jurisdictional smuggling routes. They maintain relationships with corruption-prone customs officers, courier networks, and commodity traders across multiple countries.

These groups exploit inconsistencies in precious metal customs controls between jurisdictions, specifically choosing routes where cargo inspection rates are low, declaration thresholds are high, or penalty regimes for under-declaration are modest.

Shell or front companies provide the legal and financial infrastructure through which the commodity purchase and sale are executed. A shell company incorporated in a secrecy jurisdiction may acquire gold from an organised crime group and sell it to a refinery or jeweller, while concealing the identity of the ultimate beneficial owner (UBO)

Front companies that conduct legitimate precious metals trade alongside illicit activity are particularly difficult to detect because they generate real invoices, customers, and banking relationships, which obscure the suspicious transactions.

What Are the Red Flags That Identify Precious Commodity Smuggling?

Summary: Key warning signs cluster around structured or cash payments, opaque ownership, inconsistent trade documents, and sourcing linked to conflict-affected or high-risk areas.

Category	Red Flag
Customer	Multiple cash purchases of gold or diamonds, each below AED 55,000 threshold, within a short period from the same or different vendors.
Customer	Customer’s known financial profile or stated business activity does not align with the scale or frequency of precious commodity acquisitions.
Customer	Customer is associated with registered addresses or counterparties in jurisdictions with limited precious metals regulatory oversight.
Customer	Customer applies for a commodity-backed loan without adequate documentation supporting lawful acquisition of the pledged commodity.
Customer	Customer or associated company appears in adverse media or open-source intelligence (OSINT) databases in connection with smuggling, organised crime, or sanctions.
Transaction	Invoices or shipping documents classify precious metals or gemstones as lower-value materials or omit the commodity type, weight, or purity.
Transaction	Declared transaction value is materially inconsistent with prevailing market rates for the stated commodity specification.
Transaction	Ownership structure of the commodity changes through rapid sequential sales, purchase immediately followed by resale, without definite commercial rationale.
Transaction	Physical commodity holdings are rapidly converted into cash or liquid assets shortly after acquisition without documented commercial rationale.
Transaction	Payment for high-value commodity transactions received from third parties unconnected to the declared buyer or transaction purpose.
Geographic	Precious commodity purchase is immediately followed by international travel to a jurisdiction with limited AML/CFT frameworks for precious metals trade.
Geographic	Counterparty, supplier, or recipient is located at or associated with a Conflict-Affected and High-Risk Areas (CAHRA) region.
Geographic	Commodity routed through multiple intermediary jurisdictions before destination, inconsistent with the direct trade route for a legitimate transaction.
Product	Commodity arrives without verifiable chain of custody, responsible sourcing certification, or supplier due diligence documentation.
Product	Storage in offshore vaults or safe deposit boxes inconsistent with the customer’s declared commercial activity.
Channel	Transactions structured across multiple DPMS vendors so that no single entity observes the full value of purchases.
Channel	Letter of credit used where the underlying trade documentation misrepresents the commodity type or value.

Which Controls Disrupt Precious Commodity Smuggling?

Summary: Effective controls combine risk-based CDD and EDD, source-of-funds verification, responsible-sourcing due diligence, sanctions screening, and timely STR and DPMSR reporting.

Control	What It Disrupts	Type	Limitation
Enhanced Due Diligence (EDD)	Obscured beneficial ownership and false business profiles	Detects	EDD is only as effective as information gathered; sophisticated false documentation may defeat it.
Risk-Based Customer Profiling	Unrestricted access by high-risk customers	Prevents (entry stage)	Profiling depends on data quality at onboarding; post-onboarding risk changes may not be captured.
Trade Monitoring	Document manipulation and under/over-invoicing	Detects	Requires live commodity price data feeds; without benchmarks, invoice comparison cannot be automated.
Transaction Monitoring	Structuring and rapid conversion patterns	Detects	Effective only if transaction data is captured across multiple sessions; cash-only vendors generate no monitorable data.
Information Sharing and Collaboration	Information asymmetry across DPMS vendors, customs, and FIU	Detects (cross-sector)	Formal sharing frameworks between DPMS and customs are not yet standardised in all jurisdictions.

How Do AI and RegTech Automate Detection of Precious Commodity Smuggling?

Summary: AI and RegTech tools automate transaction monitoring, network and graph analytics, sanctions screening, and document verification to surface smuggling patterns at scale.

Transaction monitoring systems configured with precious commodity typology rules can identify threshold structuring, rapid conversion patterns, and counterparty irregularities in real time. Rules calibrated to the AED 55,000 DPMSR threshold can flag cash purchase sequences where multiple transactions aggregate near or above that value within a defined observation window.

Network analytics and graph-based relationship mapping trace connections between customers, counterparties, suppliers, and shell entities, revealing ownership paths that manual CDD reviews may miss. A shell company with undisclosed beneficial ownership linked to a conflict-affected jurisdiction can be flagged automatically when graph analytics identify the connection.

Natural language processing applied to trade documentation can extract commodity descriptions, purity grades, and declared values from invoices and compare them against commodity market databases. Discrepancies between declared values and live market rates trigger a document review alert without requiring a compliance officer to perform the comparison manually.

OSINT platforms aggregate adverse media, customs enforcement records, sanctions lists, and conflict-zone risk databases into scoring models. Machine learning anomaly detection identifies deviations from expected transaction patterns for peer groups of DPMS customers with similar profiles.

What Data Should Compliance Teams Collect to Detect Precious Commodity Smuggling?

Summary: Teams should capture customer and beneficial-owner identity, source of funds and wealth, transaction and shipment detail, provenance records, and counterpart geography.

Data Point	Source System	What It Reveals
Commodity market price benchmarks	London Bullion Market Association (LBMA) price feeds, or others depending on the trade corridors	Enables immediate comparison of declared invoice values against live market rates to identify under/over-invoicing.
DPMS transaction history	Core transaction log or point of sale system	Reveals structuring patterns, threshold avoidance, and rapid conversion behaviour across multiple sessions.
Customs and import/export declarations	Border agency records (via formal information-sharing)	Identifies discrepancies between declared commodity type/value at border and documentation at DPMS entity.
Customer and counterparty jurisdictional risk scores	Geographical risk database (FATF lists, EOCN country data)	Flags transactions involving parties in CAHRA regions, secrecy jurisdictions, or FATF grey/black-listed countries.
KYC records including Beneficial Ownership (BO) documentation	KYC and CDD platform	Supports completeness check required by CR 134/2025 Articles 9 and 10 (customer and beneficial owner identification); identifies gaps indicating deliberate opacity.
Loan agreements and collateral documentation	Lending and credit facility records	Detects commodity backed loan structures used to extract value without generating a sale record.
OSINT and sanctions database results	OSINT platform, Notification Alert System (NAS), sanctions screening engine	Identifies customer or counterparty connections to organised crime, CAHRA sourcing, or Targeted Financial Sanctions listed entities.
Safe deposit box and vault access records	Safe deposit facility or freeport access log	Detects commodity storage patterns inconsistent with the customer’s declared commercial activity.
Trade documentation (invoices, bills of lading)	Trade finance or documentary review system	Source of over/under-invoicing evidence; reveals false classification of commodity type.
goAML DPMSR and STR filing history	goAML reporting system	Cross-references declared transactions against filed reports; identifies gaps in mandatory reporting obligations.

How Does Precious Commodity Smuggling Aggravate Jurisdictional Risk and Product Risk?

Summary: Smuggling raises jurisdictional risk through exposure to high-risk and conflict-affected regions, and product risk through the inherent liquidity and anonymity of precious commodities.

Precious commodities significantly increase Product Risk because the characteristics make them inherently difficult to subject to standard AML controls. Commodities can undergo physical transformation achievable through refining, recutting, or alloying, which permanently detaches the evidential link to the commodity’s origin.

Jurisdictional Risk is elevated because precious commodity smuggling schemes deliberately exploit divergences in regulatory stringency between source, transit, and destination jurisdictions. A gold shipment that originates in a CAHRA region, transits through a country with minimal precious metals customs controls, and enters a major trading hub benefits from the progressive erosion of provenance information at each border.

What Observable Patterns Signal Precious Commodity Smuggling During Transaction Monitoring?

Summary: Monitoring should flag rapid buy-and-resell cycles, threshold-avoiding structuring, mismatches between declared value and shipment, and dealings tied to high-risk corridors.

A compliance officer reviewing a customer file or transaction records for this typology should look for the following observable patterns.

Multiple cash transactions conducted within days or weeks, each structured below the AED 55,000 threshold, cumulatively amounting to a significant aggregate value, signal deliberate avoidance of DPMSR reporting obligations.

A pattern where a customer presents large sums of cash for gold or diamond purchases without accompanying documentation about the source of those funds, and without a verifiable business purpose.

Invoices presented for commodity purchases that describe the goods in vague or incorrect terms: omission of purity or weight specifications, declaration of value materially below the market rate for the commodity, indicate that documentation has been prepared to conceal value rather than describe it.

Loan facilities secured against precious commodity holdings, particularly where the commodity was recently acquired with cash, may indicate an attempt to convert illiquid holdings into liquid funds without generating a direct sale record.

Sectors at Highest Exposure

Sector	Risk Rating	Reasoning
Dealers in Precious Metals and Stones (DPMS)	Critical	Primary direct exposure; processes the transaction for acquisition and introduction into legitimate trade.
Gold Refineries	Critical	The processing stage that destroys traceability of illicit-origin gold.
Commercial Banks and Trade Finance Providers	High	Issues Finance letters of credit and commodity-backed loans exposes TBML risks from under/over-invoiced trade documentation.
Freight Forwarding and Logistics	High	Physical transport of commodity; documentary manipulation and mislabelling occur at this node.
Free Zone Entities	Moderate	Storage and transit of commodity through UAE free zones, which historically have had variable oversight intensity.

Best Practices for Precious Commodity Smuggling Risk Management

Summary: Leading practice pairs an enterprise-wide risk assessment with responsible-sourcing due diligence, robust CDD and EDD, sanctions screening, staff training, and five-year record retention.

DPMS entities must identify and assess risk across customer, supply chain, delivery channels, product type, jurisdiction exposure, and delivery channel, and implement a documented and proportionate risk-based approach to mitigate ML/TF/PF risk.
Gold refiners must implement the five-step responsible sourcing framework for supply chain participants. Gold refineries and supply chain participants must comply with the requirements of due diligence on each supply of gold, a supply chain policy, identification of CAHRA risk, and an independent third-party audit.
Entities should adopt risk-based commodity price checks against recognised market benchmarks, especially for high-value, unusual, cross-border, or CAHRA-linked transactions. A risk-based market-rate comparison, checking the declared or invoice value against a recognised benchmark, disrupts the under-invoicing mechanism that TBML schemes depend on.
Apply EDD and senior management approval on all customers presenting large-volume cash transactions, multi-jurisdictional profiles, or CAHRA-linked supply chains. EDD must establish the source of funds, the source of wealth, and the specific business rationale for each transaction.
Subscribe to and screen against the NAS operated by EOCN. Sanctions screening must be applied to all customers, counterparties, beneficial owners, and associated parties, regardless of transaction value. Failure to subscribe to NAS carries a maximum administrative penalty of AED 1,000,000 under Cabinet Resolution No. (71) of 2024.
Customise transaction monitoring rules to detect structuring below the AED 55,000 threshold. The rule should aggregate cash purchases by customer across a rolling 30-day window and flag when the cumulative value approaches or exceeds AED 55,000, even if no single transaction triggered it.
Verify the chain of custody and certificate of origin for all incoming commodity shipments. Trade documentation review must confirm that the declared origin of the commodity is consistent with the supplier’s geographic profile and due diligence records. Documentation that lacks a certificate of origin should trigger EDD on the supplier.
File an STR without delay when suspicion arises, regardless of whether a transaction has been completed. The obligation to file arises on suspicion, not on certainty, per FDL 10/2025 Article 18.
Maintain a five-year retention record of CDD documentation, transaction records, accurate goAML records, including all DPMSR, STR, and SAR filings, per Article 25 of CR 134/2025.

How Precious Commodity Smuggling and Commodity Smuggling Are Related

Summary: Precious commodity smuggling is a high-value subset of commodity smuggling, sharing concealment and trade-misinvoicing techniques but carrying far greater value density.

Precious commodity smuggling is a variant within the broader typology of Commodity Smuggling.

Commodity Smuggling is the practice of physically moving any goods, such as electronics, tobacco, or pharmaceuticals, across borders without lawful declaration to evade duties, circumvent trade controls, or transfer criminal value. The distinguishing factor between the two is that precious metals and stones carry an enormous amount of money in a very small, lightweight package, while having a consistent global trade value, something that simply isn’t possible with any other kind of commodity.

The compliance officer should vigilantly monitor large-volume freight, as the two typologies can operate simultaneously, and precious commodities may be concealed within bulk shipments of other commodities.

Related Terms

Term	Connection
Commodity Smuggling	Parent typology; the broader category within which precious commodity smuggling operates as a specialised sub-method.
Trade-Based Money Laundering (TBML)	Overlapping technique; under/over-invoicing and false commodity classification are TBML methods employed within precious commodity smuggling schemes.
Shell Companies	Enabling structure; shell companies are used to acquire, hold, and sell smuggled commodity, obscuring the beneficial owner at each stage.
Layering	ML stage; precious commodity smuggling is predominantly a layering mechanism, converting cash to a portable physical asset and moving it across jurisdictions.
Enhanced Due Diligence (EDD)	Primary control; EDD is the mandatory response when a customer or transaction presents indicators associated with this typology.
Dealers in Precious Metals and Stones (DPMS)	Regulated sector; DPMS entities are the direct regulated entities at which the commodity enters the legitimate trade chain.
goAML	Reporting platform; the mandatory platform for DPMSR, STR, and SAR filing for all UAE regulated entities.
Suspicious Transaction Report (STR)	Compliance obligation; the report that must be filed without delay when precious commodity smuggling indicators are identified.
Conflict-Affected and High-Risk Areas (CAHRA)	Geographic risk concept; CAHRA designation is the primary risk trigger for supply chain due diligence on gold sourcing.
Beneficial Ownership	CDD target; identifying the true beneficial owner of shell companies used in commodity smuggling schemes.

What Financial Instruments Do Criminals Use in Precious Commodity Smuggling Schemes?

Summary: Beyond cash, schemes rely on cash equivalents such as cashier’s cheques and money orders, trade finance, and informal value transfer to move and legitimise proceeds.

Jewellery is a uniquely versatile instrument in money laundering because it serves simultaneously as a transport vehicle for moving value across borders and as an entry point into the legitimate economy. Criminal proceeds are used to purchase gold jewellery or gem-set pieces, physically carried as personal items and later sold to dealers, pawnbrokers, or retail consumers, generating a receipt that is indistinguishable on paper from legitimate personal asset disposal.

Precious metals and gemstones in raw or semi-processed form, including gold bars, gold grain, rough diamonds, cut gemstones, and silver bullion, are the primary instruments in wholesale and industrial-scale smuggling schemes. These commodities can be processed in three different ways to generate legal value: provided to refineries for melting and recasting to destroy traceability, traded on commodity exchanges at market price for documented lawful proceeds, or used as collateral against credit facilities through the banking system into legitimate financial transactions.

Variants and Synonyms

Term	Context or Jurisdiction	Distinction
Gold Smuggling	Global; most common variant in enforcement literature	Restricts the typology to gold specifically; the primary term covers all precious metals and gemstones.
Conflict Mineral Smuggling	CAHRA-focused regulatory contexts; OECD; African Union	Emphasises the connection to armed conflict and revenue generation for terrorist or criminal groups.
Gemstone Trafficking	Enforcement contexts involving diamonds, rubies, emeralds	Focuses on cut or rough gemstones rather than metals; common in East and Southern African enforcement cases.
Precious Metals TBML	Financial intelligence and FATF typology reports	Focuses specifically on the invoicing manipulation dimension of the broader smuggling typology.
Illicit PMS Trade	UAE UAEFIU and MoET supervisory communications	Regulatory shorthand used in UAE enforcement notices; equivalent in scope to the primary term.

What Products and Services Do Criminals Abuse in Precious Commodity Smuggling Schemes?

Summary: Refining, jewellery retail, free-zone trading, safe-deposit and consignment services, and trade-finance facilities are the products and services most exposed to abuse.

Freight forwarding and shipping services are abused at the transportation level. Criminal networks build relationships with customs brokers, airline cargo handlers, and port authorities to arrange commodity shipment by preparing cargo manifests and bills of lading that describe the shipments in terms to avoid commodity-specific customs declarations.

Letters of credit are bank-issued payment guarantees that underpin international commodity trade; criminals exploit them by smuggling commodities through the same mechanism, presenting clean shipping documents to the bank that has no visibility into whether the declared value is genuine. Transforming the physically smuggled commodity into a bank-financed, fully documented trade transaction.

Commodity brokers, bullion dealers, and exchange-traded commodity platforms are abused at the integration stage when they purchase precious commodities from sellers who cannot verify legitimate acquisition. A dealer who fails to establish a chain of custody and source of funds effectively completes the laundering process by converting illegal physical assets into clean market proceeds. UAE-registered precious metals trading firms are regulated DNFBPs and are obligated under Cabinet Resolution No. (134) of 2025 to apply customer due diligence to covered transactions and enhanced due diligence where higher-risk indicators arise, treating an unverified source as a primary indicator of illicit origin.

How AML UAE Helps

The regulatory governing principles are substantially sound. The gap lies in detection. Compliance officers may not always identify the relevant indicators or know the appropriate action to take.

AML UAE’s compliance resources are purpose-built to close this detection gap. Our team brings a deep understanding of the UAE regulatory framework and international AML standards, supporting entity employees and senior management in identifying red flags and control gaps, building structural controls to detect precious commodity smuggling, and delivering staff training on commodity-specific red flags and indicators.

We provide UAE-registered entities with Enterprise-wide risk assessment development, incorporating sector-specific typology intelligence, alongside comprehensive CDD and EDD procedure frameworks tailored to the nature and scale of the business.

To meet the STR obligations under FDL 10/2025, AML UAE provides dedicated guidance on goAML registration, DPMSR filing, form completion, and filing protocols, ensuring reporting obligations are met accurately and without procedural delay.

“Over the last 28 years, I have worked with many dealers in precious metals and stones across the UAE. One pattern stands out consistently: the documentation often appears complete on its face. The real scrutiny lies in reconciling commodity values against recognised benchmarks, identifying linked transactions, and verifying the chain of custody beyond the immediate seller. If those checks create unresolved suspicion, the goAML reporting obligation must be considered without delay.”

Pathik Shah - CAMS, FCA, CISA | Founder and Principal Consultant, NIYEAHMA Consultants LLP

Frequently Asked Questions

Precious commodity smuggling involves the physical, undeclared movement of high-value goods across borders. Trade-based money laundering uses legitimate trade documentation to manipulate declared values or misrepresent goods. The two typologies overlap when a smuggled commodity is documented through false invoices, but smuggling can also occur without any trade documentation at all, for example, when a courier carries undeclared gold in personal luggage.

All DPMS entities registered to conduct business in the UAE and engaged in cash or wire transfer transactions in precious metals, gemstones, or jewellery at or above AED 55,000 (single or linked) are subject to full AML/CFT obligations under Cabinet Resolution No. (134) of 2025 Article 3(3).

A DPMSR (Dealers in Precious Metals and Stones Report) is the mandatory goAML report type for DPMS threshold transactions. It must be filed for all cash transactions at or above AED 55,000, and for wire transfers at the same threshold where the counterparty is an entity rather than an individual.

The AED 55,000 threshold applies to both single transactions and linked transactions that, individually below the threshold, together constitute a transaction of or above that amount. Cash-equivalent instruments, including cashier’s cheques, bearer bonds, and money orders, are treated as cash for threshold purposes.

Yes. Sanctions screening obligations are not threshold dependent. All customers, counterparties, beneficial owners, and related parties must be screened against the UAE Sanctions Lists, UN Consolidated Lists, and all applicable TFS databases regardless of transaction value. The AED 55,000 DPMSR threshold affects reporting obligations only, not the obligation to screen.

Cabinet Resolution No. (71) of 2024 prescribes maximum administrative penalties of AED 500,000 for EDD failures (Violations 15-17). MoET may also issue written warnings, suspend licences, and refer cases for criminal prosecution under Federal Decree-Law No. (10) of 2025.

The five-step framework under MOE Due Diligence Regulations Version 9, made legally binding by Ministerial Decree No. (68) of 2024 requires gold refineries and supply chain participants to establish supply chain governance, identify and assess supply chain risks, manage those risks, commission an independent third-party audit, and submit an annual due diligence report.

An STR must be filed without delay via goAML. The compliance officer must not tip off the customer or any associated party about the suspicion or the filing. If the customer matches a TFS designation, an immediate freeze must be implemented and a Confirmed Name Match Report filed with EOCN. All relevant documentation must be retained for a minimum of five years.

The EOCN TFS Strategic Review of Case Studies (2021) documented a pattern in which gold sourced from conflict-affected regions was routed through intermediary countries into UAE refineries, with proceeds transferred to designated terrorist organisations. Gold smuggling is therefore relevant not only to money laundering compliance but also to TFS screening and PF risk assessments.

According to the UAEFIU DPMS Strategic Analysis Report (October 2025), the leading reasons for reporting in the DPMS sector over the period July 2021 to June 2025 were negative media coverage (14%), lack of appropriate documentation (13%), incomplete or missing file documentation (11%), TFS suspicion (10%), and sanctions list inclusion (10%).

Closing Summary

Precious commodity smuggling is a well-documented layering stage typology that exploits the physical and financial properties of high-value goods to transfer criminal value across borders without generating a banking record. The UAE’s position as one of the world’s largest gold trading hubs means that DPMS entities, refineries, and trade finance providers face meaningful operational and compliance exposure to this typology.

The most actionable response is the implementation of specific controls: risk-based market-rate invoice comparison, CAHRA-focused supply chain due diligence, complete DPMSR filing, and enhanced due diligence on all cash-intensive or multi-jurisdictional commodity transactions.

The UAE’s updated AML/CFT framework accommodates all these practices under FDL 10/2025, requiring all entities to include sector-specific risk assessment and development of internal policies and procedures through which the typology usage could be identified and dealt with. The current UAE regulatory framework leaves limited tolerance for material control gaps.

If your institution is exposed to this typology and the procedures are not reviewed under the current FDL 10/2025 and CR 134/2025 framework, the entity and responsible persons may face regulatory findings, administrative penalties under CR 71/2024, and remediation directions. Addressing those gaps now reduces that exposure. AML UAE is available to support the assessment, remediation and ongoing monitoring processes your institution needs to manage the risk within the law.

Want to Strengthen Your Financial Crime Controls?

Our experts can help you identify and mitigate risks linked to precious commodity smuggling.

Explore Our Services:

AML/CFT Policy Drafting

AML Training

AML Software Selection

Regulatory Reporting

Managed KYC and CDD

AML/CFT Health Check

Risk Assessment Report

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Reach Out to Pathik

What is Layering in Money Laundering?

Pathik Shah — Thu, 25 Jun 2026 07:32:00 +0000

Last Updated: 06/25/2026

Protect your business with reliable and effective AML strategies with AML UAE.

Layering at A Glance

Layering in money laundering refers to obscuring the origin of illicit funds by moving them through multiple transactions.
Criminals use complex transfers, shell companies, and investment instruments to distance the money from its criminal source.
The goal of layering is to make detection and tracing extremely difficult.
Strong AML controls, transaction monitoring, and risk-based checks are essential to detect and prevent layering activities

What is Layering in Money Laundering?

Layering in money laundering refers to disguising the source of illicit funds through layers of financial transactions, accounts, entities, assets, or jurisdictions. It is usually the second stage of the money laundering process, after placement and before integration. In simple terms, placement puts illegal money into the financial system, layering hides the money trail, and integration makes the funds appear legitimate.

Layering is often the most complex stage of money laundering to detect because the activity may appear normal when each transaction is viewed in isolation. The suspicion usually becomes clearer when the full pattern is reviewed, such as rapid fund movement, unrelated third-party payments, cross-border transfers, shell companies, complex ownership structures, virtual asset movement, or transactions that do not match the customer profile.

For UAE-regulated entities, understanding the layering stage of money laundering is important because criminals may misuse banks, exchange houses, real estate businesses, dealers in precious metals and stones, virtual asset service providers, lawyers, accountants, auditors, and company service providers to disguise the origin of funds.

This guide explains the meaning of layering in money laundering, how it works, common examples, AML red flags, the differences among layering, placement, integration, structuring, and smurfing, and the controls UAE businesses can use to detect and manage layering risks.

Key Takeaways

Layering is the second stage of money laundering, sitting between placement and integration.

Its purpose is to break the audit trail so funds cannot be traced back to a crime.

Common methods include multiple transfers, cross border movement, shell companies, trade, real estate, precious metals, and virtual assets.

A single transaction may look normal. Layering is usually visible only across the full pattern.

UAE obligations sit under Federal Decree by Law No. 10 of 2025 and its executive regulations in Cabinet Resolution No. 134 of 2025, with suspicious transactions reported to the UAE Financial Intelligence Unit through goAML.

Layering Money Laundering Means, in Simple Terms

Layering is the stage where criminals move, split, convert, transfer, or restructure illicit funds to make the money trail harder to follow. The main goal is to separate the funds from their illegal source by creating several layers of financial activity.

A simple example is this:

Illegal money enters the financial system.
The money is transferred through multiple bank accounts.
It is moved to another country or converted into another currency.
It is passed through a company, an asset, an investment, or a virtual asset wallet.
It later appears to come from a legitimate business, sale, loan, investment, or asset transaction.

The more layers criminals create, the harder it becomes for banks, businesses, regulators, and law enforcement agencies to identify the true origin of the funds.

Money Laundering Layering Definition

Layering is the stage of money laundering where illicit funds are moved through complex transactions to conceal their criminal origin, ownership, control, movement, or destination.

Layering can involve financial transactions, legal structures, business arrangements, trade documents, professional intermediaries, physical assets, or digital assets. The objective is to make illegal funds look disconnected from the crime that generated them.

A strong definition of layering should include four elements:

Element	Explanation
Illicit funds	The money or value comes from criminal activity.
Complex movement	Funds are transferred, converted, split, combined, or moved through multiple channels.
Concealment	The activity is designed to hide the source, owner, controller, or destination.
Broken audit trail	The transaction history becomes harder to trace and verify.

What does Layering Mean in AML?

In AML, layering means using complex transactions, accounts, entities, assets, or jurisdictions to hide the source, ownership, movement, or destination of illicit funds. AML teams identify potential layering by reviewing customer behaviour, transaction patterns, beneficial ownership, sources of funds and wealth, counterparties, jurisdictional risk, and the commercial purpose of transactions.

Layering in AML matters because the activity may not look suspicious as a single transaction. One transfer, invoice, property purchase, virtual asset transaction, or currency exchange may appear ordinary. The risk often becomes visible only when multiple transactions are reviewed together. For example, a customer may receive funds from one company, transfer them to another entity, move part of the money overseas, use part of it to buy precious metals, and later claim that the funds came from business activity. Each step may look explainable on its own, but the full pattern may show an attempt to disguise the origin of funds.

Layering in the wider financial crime context. The same concealment behaviour is sometimes described simply as layering in financial crime or fraud. The principle is identical: value is moved through deliberate layers so the trail back to the original wrongdoing is broken. In an AML programme, this is managed during the layering stage of money laundering, as described throughout this guide.

AML layering risks may appear in many forms:

AML layering risk	What it may indicate
Funds move quickly through an account	The account may be used only as a pass through account.
Multiple unrelated parties are involved	The true owner or controller may be hidden.
Transactions involve high risk jurisdictions	The money trail may be intentionally complicated.
The customer cannot explain the source of funds	The funds may not have a legitimate origin.
The transaction has no clear economic purpose	The activity may be artificial or circular.
Documents appear weak, vague, or inconsistent	The explanation may be created only to support the transaction.

AML teams should not look only at transaction value. They should also consider timing, frequency, counterparties, customer profile, expected business activity, documentation, sources of funds, and whether the transaction makes commercial sense.

What is Layering in Banking?

In banking, layering refers to suspicious movement of funds through multiple accounts, transfers, banking products, customers, or jurisdictions to hide the source or ownership of money. Banks may identify possible layering when funds move rapidly in and out, pass through unrelated accounts, involve third-party payments, or do not match the customer’s expected activity.

Banking pattern	Why it may be suspicious
Funds are received and transferred out quickly	May indicate pass through activity.
Multiple accounts are opened and closed	May be used to break the audit trail.
Funds move through unrelated third parties	May hide the true owner or purpose.
Repeated transfers occur without business rationale	May suggest artificial transaction layers.
Cross border transfers involve high risk jurisdictions	May increase money laundering risk.
Activity does not match the customer profile	May indicate misuse of the account.
Funds move between related companies without clear purpose	May indicate circular movement of funds.

For banks and exchange houses, layering risk is often detected through transaction monitoring, customer due diligence, source-of-funds checks, enhanced due diligence, sanctions screening, politically exposed person screening, and ongoing monitoring of customer behaviour.

Why Layering Matters in AML Compliance?

Layering matters because it is the stage where the money trail becomes harder to follow. At the placement stage, suspicious funds may still be evident through cash deposits, unusual receipts, or unexplained inflows into the financial system. During layering, criminals attempt to create distance between the money and its illegal source. A single transaction may not be enough to prove suspicion. The risk usually becomes apparent when the business reviews the broader pattern.

Pattern	Why it may indicate layering
Funds move in and out quickly with no clear reason	May indicate pass through activity.
Multiple parties are involved without a clear role	May hide the beneficial owner or controller.
Transactions pass through unrelated jurisdictions	May be used to break the audit trail.
Funds are converted into assets or virtual assets	May disguise the form, value, or ownership of money.
Transaction value does not match the customer profile	May indicate activity inconsistent with known income or business.
Documents do not support the stated purpose	May indicate a false or weak explanation.
The customer avoids questions	May suggest unwillingness to disclose the real purpose.

Layering is not limited to financial institutions. It can involve real estate businesses, dealers in precious metals and stones, auditors, accountants, lawyers, trust and company service providers, virtual asset service providers, and other regulated entities.

Where Layering Sits in the Money Laundering Process

Money laundering is commonly explained in three stages: placement, layering, and integration. FATF material refers to the money laundering cycle as including placement, layering and integration. Layering is the second stage. It comes after placement, when illicit funds enter the financial system, and before integration, when the funds are made to appear legitimate.

Stage	Meaning	Simple example
Placement	Illicit funds are introduced into the financial system.	Criminal cash is deposited, exchanged, or used to buy high value goods.
Layering	Funds are moved or converted to hide their origin.	Money is transferred between accounts, companies, countries, assets, or wallets.
Integration	Laundered funds re enter the economy as apparently legitimate wealth.	Funds are used to buy property, securities, luxury goods, or business assets.

The three stages can overlap in practice. A criminal does not always complete placement, then layering, then integration in a neat order. Some schemes combine activities from different stages, especially where companies, trade, real estate, virtual assets, and professional intermediaries are involved.

Looking for the full picture of the stages?

This page focuses on layering. For the complete cycle and each stage in depth, see the dedicated guides:

Layering vs Placement vs Integration

Placement, layering and integration are connected, but each stage has a different purpose.

Comparison	Placement	Layering	Integration
Main purpose	Introduce illicit funds into the system.	Hide the source, ownership, or movement.	Make laundered funds appear legitimate.
Simple phrase	Put the money in.	Hide the trail.	Use the money as clean wealth.
Typical activity	Cash deposits, currency exchange, monetary instruments.	Wire transfers, shell companies, trade, asset and virtual asset movement.	Real estate, business investment, luxury assets, dividends, loans.
AML risk focus	Source of funds and unusual cash activity.	Transaction pattern, beneficial ownership, complexity, jurisdiction risk.	Source of wealth and legitimacy of asset ownership.
Common red flag	Large cash activity inconsistent with profile.	Complex transactions without clear purpose.	Funds used to buy assets with unclear source of wealth.

Layering is about hiding the trail. Integration is about using the funds once they look legitimate. Layering makes integration easier because once funds have moved through several layers, criminals may claim the money came from business activity, asset sale proceeds, investment returns, or loan repayments.

The easiest way to remember the difference is this: placement introduces the money, layering hides the trail, and integration makes the money appear legitimate.

How Layering in Money Laundering Works

Layering works by creating complexity. Criminals move funds through several steps so that investigators, compliance officers, financial institutions, and regulated businesses cannot easily connect the funds to their original criminal source. A typical layering process may look like this:

Illicit funds are introduced into the financial system.
The funds are transferred to another account or entity.
The money is split into different amounts or moved through several counterparties.
Funds are converted into another currency, an asset, an investment, a precious metal, real estate, or a virtual asset.
The funds are moved across jurisdictions or through third parties.
Documents are created to make the transactions appear legitimate.
The funds are later integrated into the economy as business income, loan repayment, asset sale proceeds, investment returns, or property ownership.

The purpose is not always to make each transaction look perfect. The purpose is to make the overall money trail difficult to understand, verify, and challenge.

Common Methods of Layering in AML

Criminals may use a single method or combine several to layer illicit funds.

Method of layering	How it works	AML concern
Multiple bank transfers	Funds are moved through several accounts.	Breaks the audit trail and hides the original source.
Cross border transfers	Money is sent through different countries.	Adds jurisdictional complexity and reduces visibility.
Shell companies	Companies with little or no genuine activity are used.	Hides beneficial ownership and control.
Trade based money laundering	Invoices, goods, shipment values, or trade documents are manipulated.	Makes value movement look like normal trade.
Real estate transactions	Property is bought, sold, transferred, or funded through unclear sources.	Converts illicit funds into high value assets.
Precious metals and stones	Gold, diamonds, jewellery, or other high value items are bought and resold.	Portable assets can store and move value.
Virtual assets	Funds move through wallets, exchanges, tokens, or chains.	Creates complex digital movement that needs specialist monitoring.
Loans and repayments	Fake, circular, or related party loans are created.	Makes funds appear as legitimate debt repayment.
Investment products	Funds are moved through securities, funds, or insurance.	Adds financial complexity and creates a paper trail.
Professional intermediaries	Lawyers, accountants, auditors, or company service providers are misused.	Adds credibility and distance from the criminal source.
Currency conversion	Funds are converted into another currency.	Makes tracing more difficult and may conceal source.
Purchase and resale of assets	Assets are bought and later sold.	Converts criminal funds into apparently legitimate sale proceeds.

Examples of Layering in Money Laundering

Example 1: Shell company transfers

A customer receives funds into a company account from an unrelated third party. The funds are quickly transferred to another company in a different jurisdiction. The customer gives a broad explanation, such as consulting services, but cannot provide contracts, invoices, delivery evidence, or a clear commercial purpose.

Why this may be layering: the transaction chain may be designed to separate the funds from their true source and hide the person who controls them.

Example 2: Real estate purchase through unclear funds

A buyer uses a newly formed company to purchase property. The funds come from multiple accounts, some of which are overseas, and the beneficial owner is difficult to identify. The buyer is unwilling or unable to explain the source of funds or wealth.

Why this may be layering: real estate can be used to convert illicit funds into an apparently legitimate asset.

Example 3: Precious metals and stones

A customer makes repeated purchases of gold, diamonds, or jewellery through different payment sources. The goods are later sold or transferred, and the customer claims the proceeds are legitimate business income.

Why this may be layering: high-value portable assets can be used to move, store, and convert value while hiding the source of funds.

Example 4: Virtual asset movement

Funds are converted into virtual assets, transferred across multiple wallets, exchanged into another token, and later converted back into fiat currency.

Why this may be layering: the movement of value across wallets, platforms, tokens, and jurisdictions can make the money trail harder to follow.

Example 5: Circular loan arrangement

Company A sends money to Company B. Company B sends the money to Company C. Company C later sends the money back to Company A as a loan repayment or investment return. The companies are connected, but the customer does not clearly explain the commercial purpose.

Why this may be layering: circular movement of funds may create an artificial paper trail, making illicit money appear to come from a legitimate transaction.

Example 6: Multiple account movement

Activities performed by criminals like changing the nature of the assets, i.e. changing cash into casino chips, gold into real estate, etc., indicate layering. Further, t

A customer opens several accounts or uses accounts held by related parties. Funds are deposited into one account, transferred through several others, then withdrawn or used for asset purchases.

Why this may be layering: multiple account movement can make it harder to identify where the money came from and who controls it.

hey also engage in carrying out a series of transactions to facilitate cross-border money transfer, to complicate the detection of an illicit source.

Layering vs Structuring

Layering and structuring are related, but they are not the same. Layering is a stage of money laundering. Structuring is a technique where transactions are split into smaller amounts to avoid reporting thresholds, monitoring rules, or detection.

Term	Meaning	Example	Relationship to layering
Layering	Moving or converting funds to hide their source.	Transferring funds through several companies and accounts.	Main money laundering stage.
Structuring	Splitting transactions into smaller amounts to avoid detection.	Repeated smaller deposits instead of one large deposit.	A technique used during placement or layering.
Smurfing	Using multiple people or accounts to structure activity.	Several individuals deposit smaller amounts for one controller.	A form of structuring.
Integration	Reintroducing funds as apparently legitimate wealth.	Buying property or investing in a business.	Usually follows placement and layering.

Key takeaway: structuring and smurfing are techniques. Layering is a stage. They are connected, but they should not be treated as the same thing.

Red Flags of Layering in Money Laundering

A red flag does not automatically prove money laundering. It means the transaction, customer, or activity should be reviewed and, where necessary, escalated in accordance with the organisation’s AML and CFT procedures.

Red flag	What to review
Rapid movement of funds in and out of an account	Business rationale, source of funds, customer profile.
Multiple transfers with no clear economic purpose	Relationship between parties and transaction documents.
Use of shell companies or complex ownership structures	Ultimate beneficial owner and control structure.
Unusual cross border transfers	Jurisdiction risk and reason for overseas movement.
Third party payments unrelated to the customer	Whether the payer or recipient has a legitimate role.
Transactions inconsistent with customer income or business	Customer due diligence and expected activity profile.
Purchase and resale of high value assets	Source of funds, asset valuation, and counterparty relationship.
Circular transactions between related parties	Whether funds move without genuine commercial substance.
Repeated transactions below monitoring thresholds	Possible structuring or smurfing.
Customer avoids questions or provides vague documents	Need for enhanced due diligence or escalation.
Documents do not match the transaction pattern	Possible false or incomplete explanation.
Funds move through many accounts before being used	Possible attempt to create artificial layers.

Businesses should treat these red flags as indicators for review. The decision to escalate, reject, continue, apply enhanced due diligence, or report should be documented based on the facts of the case.

Layering Risks for UAE-Regulated Entities

In the UAE, AML obligations apply to financial institutions, designated non-financial businesses and professions, virtual asset service providers, and non-profit organisations. Federal Decree by Law No. 10 of 2025 is the primary statute on anti-money laundering, combating the financing of terrorism, and the financing of the proliferation of weapons of mass destruction. It was published on 30 September 2025 and took effect about two weeks later, replacing Federal Decree-Law No. 20 of 2018. Cabinet Resolution No. 134 of 2025 sets out the executive regulations under that statute. It was published on 15 November 2025 and took effect on 14 December 2025.

Legal Basis in the UAE

Primary statute: Federal Decree by Law No. 10 of 2025 on anti money laundering, combating the financing of terrorism, and proliferation financing.

Executive regulations: Cabinet Resolution No. 134 of 2025.

Designated sectors: six categories of designated non-financial business and profession under Cabinet Resolution No. 134 of 2025, Article 3: commercial gaming operators; real estate brokers and agents; dealers in precious metals and stones; lawyers, notaries and other independent legal professionals and independent accountants; trust and company service providers; and a sixth, catch-all category that allows further businesses to be designated.

Reporting: suspicious transactions go to the UAE Financial Intelligence Unit within the Central Bank, through goAML (Federal Decree by Law No. 10 of 2025, Articles 11 and 18; Cabinet Resolution No. 134 of 2025, Article 18).

UAE sector	Layering risks to monitor	Practical controls
Banks and exchange houses	Rapid fund movement, cross border transfers, third party payments.	Transaction monitoring, source of funds checks, enhanced due diligence.
Real estate brokers and agents	Purchases through companies, nominees, or unclear funding.	Beneficial owner verification, source of wealth checks, red flag review.
Dealers in precious metals and stones	High value purchases, resale of gold or diamonds, third party payments.	Customer identification, transaction review, suspicious activity escalation.
Lawyers, accountants and auditors	Misuse of client accounts, company structures, nominee arrangements.	Beneficial ownership checks, engagement risk assessment, matter monitoring.
Trust and company service providers	Shell entities, nominee shareholders, incorporation of entities with unclear purpose, complex control structures.	Beneficial owner verification, purpose of entity checks, ongoing monitoring.
Virtual asset service providers	Wallet hopping, chain hopping, high risk wallets, rapid conversion.	Wallet screening, blockchain analytics, transaction monitoring.

Note: the six designated DNFBP categories are set by Cabinet Resolution No. 134 of 2025, Article 3.

Suspicious transactions are reported immediately and directly to the UAE Financial Intelligence Unit through the goAML portal (Federal Decree by Law No. 10 of 2025, Articles 11 and 18; Cabinet Resolution No. 134 of 2025, Article 18). These designated non-financial businesses and professions are supervised by different authorities depending on the sector, for example the Ministry of Economy and Tourism for real estate brokers, dealers in precious metals and stones, accountants and corporate service providers; the Ministry of Justice for lawyers and other independent legal professionals; and the General Commercial Gaming Regulatory Authority for commercial gaming. Each is required to register and report on goAML. The same portal is used for both suspicious transaction reports and activity-based reports.

How Businesses can Detect Layering

Businesses can detect layering by reviewing the full customer and transaction picture rather than looking at transactions in isolation.

1. Know the customer

Customer due diligence should establish who the customer is, what the customer does, who owns or controls the customer, and what level of activity is expected. If the transaction pattern does not match the customer profile, the business should investigate.

Question	Why it matters
Who is the customer?	Confirms identity and risk profile.
What does the customer do?	Helps assess whether activity is expected.
Who owns or controls the customer?	Identifies the beneficial owner.
What is the expected transaction pattern?	Helps detect unusual activity.
Is the transaction consistent with the profile?	Identifies possible suspicious behaviour.

2. Verify source of funds and source of wealth

The source of funds explains where the money for a transaction came from. The source of wealth explains how the customer built their overall wealth. For higher-risk customers or unusual transactions, both may be relevant.

Check	Meaning
Source of funds	Where the money for this transaction came from.
Source of wealth	How the customer generated overall wealth.
Supporting documents	Evidence that supports the customer explanation.
Consistency check	Whether the explanation matches the customer profile.

A customer explanation should be reasonable, specific, and supported by documents. Vague explanations such as business income, family funds, or investment returns may not be enough if the transaction is high-risk or unusual.

3. Monitor transaction behaviour

Transaction monitoring should identify unusual volume, speed, frequency, value, destination, counterparties, and transaction purpose. Layering often appears as a pattern rather than a single suspicious transaction.

Factor	What to review
Speed	Are funds moving in and out quickly?
Frequency	Are there repeated transactions without clear purpose?
Value	Does the transaction value match the customer profile?
Counterparty	Are the payer and recipient connected to the stated purpose?
Jurisdiction	Are high risk or unrelated countries involved?
Purpose	Is there a clear commercial reason?
Documentation	Do documents support the transaction?

4. Review beneficial ownership

Complex ownership structures, nominee arrangements, or unexplained control by third parties may indicate that the true owner is being hidden.

Beneficial ownership issue	Risk
Multiple layers of companies	True ownership may be hidden.
Nominee shareholders or directors	Control may sit with another person.
Ownership in high risk jurisdictions	Reduced transparency.
No clear business purpose for the structure	Possible shell company risk.
Customer avoids beneficial owner questions	Possible concealment.

5. Apply enhanced due diligence where risk is high

Enhanced due diligence may be needed for high-risk customers, high-risk jurisdictions, politically exposed persons, unusual transactions, complex structures, or activity that does not match the customer profile.

Enhanced due diligence measure	Purpose
Additional identity checks	Confirms customer identity.
Beneficial owner verification	Confirms who owns or controls the customer.
Source of funds review	Checks where transaction funds came from.
Source of wealth review	Checks how the customer generated wealth.
Senior management approval	Adds oversight for high risk cases.
More frequent monitoring	Tracks ongoing risk.
Additional documents	Supports or challenges the customer explanation.

6. Escalate suspicious activity

If suspicion remains after review, the matter should be escalated to the compliance officer or money laundering reporting officer in line with internal AML and CFT procedures. Where reporting is required, suspicious activity or suspicious transactions should be reported through the appropriate channel, such as goAML in the UAE.

How to Prevent Layering in Money Laundering

A single control cannot prevent layering. Businesses should use a risk-based AML framework that combines customer due diligence, transaction monitoring, staff awareness, escalation, and reporting.

AML control	How it helps prevent or detect layering
Business risk assessment	Identifies where the business is exposed to money laundering risk.
Customer risk assessment	Identifies customers who need closer monitoring.
Customer due diligence	Confirms identity, activity, ownership, and expected behaviour.
Enhanced due diligence	Applies deeper checks to high risk relationships.
Transaction monitoring	Detects unusual movement, speed, value, or counterparties.
Sanctions and PEP screening	Identifies designated and politically exposed persons.
Beneficial ownership checks	Reveals who ultimately owns or controls the customer.
Source of funds checks	Tests whether transaction funds have a legitimate explanation.
Source of wealth checks	Tests whether customer wealth is reasonable and supported.
Staff training	Helps employees recognise and escalate suspicious patterns.
Independent AML review	Tests whether controls are working effectively.
STR and SAR reporting procedures	Ensures suspicious activity is escalated and reported correctly.
Record keeping	Supports auditability and regulatory review.

The objective is to identify suspicious patterns early, ask the right questions, document decisions, and report suspicious activity where required.

What Should a UAE Business do If It Detects Red Flags of Layering?

If a UAE business detects possible layering, it should not ignore the activity or rely only on the customer’s verbal explanation. The business should follow its AML and CFT policy and apply a documented review process.

Review the customer profile, risk rating, and expected activity.
Check the transaction purpose, counterparties, jurisdictions, and supporting documents.
Request source-of-funds or source-of-wealth information where appropriate.
Assess whether the activity has a reasonable commercial or lawful explanation.
Escalate the matter internally to the compliance officer or money laundering reporting officer.
Decide whether enhanced due diligence, rejection, exit, account restrictions, or reporting is required.
Keep records of the review, decision, and supporting evidence.
File a suspicious transaction report or suspicious activity report where required.

Do not tip off the customer. Do not inform the customer that a suspicious transaction report has been or may be filed, or that an investigation may be underway. This prohibition on tipping off is a legal requirement (Cabinet Resolution No. 134 of 2025, Article 19), and a breach carries criminal penalties (Federal Decree by Law No. 10 of 2025, Article 29). Internal escalation and external reporting should be handled confidentially.

Practical AML UAE Layering Checklist

Use this checklist when reviewing transactions that may involve layering.

Question	Yes or No
Is the transaction consistent with the customer known business or income?
Is the source of funds clear and supported by documents?
Is the source of wealth reasonable for the customer profile?
Are the counterparties connected to the stated transaction purpose?
Are any high risk jurisdictions involved?
Is there a clear commercial reason for the transaction structure?
Are funds moving quickly in and out without a business reason?
Are shell companies, nominees, or complex ownership involved?
Are payments being made by or to unrelated third parties?
Has the customer avoided questions or submitted weak documentation?
Are the transaction documents consistent with the pattern?
Has the customer risk rating been reviewed?
Should enhanced due diligence be applied?
Should the matter be escalated to the compliance officer or MLRO?
Should a suspicious transaction or activity report be considered?

This checklist is a practical review tool, not a substitute for legal advice or the organisation’s AML and CFT policies and procedures.

Quick Answers About the Layering Stage

Which money laundering stage refers to the separation of illicit proceeds from their source?

The layering stage refers to the separation of illicit proceeds from their source. This is done by creating complex layers of financial transactions, accounts, entities, assets, or jurisdictions, making the origin of the funds harder to identify.

Which stage involves multiple transactions designed to separate the money from its source?

The layering stage involves multiple transactions designed to separate illicit money from its source. These may include transfers, conversions, purchases, withdrawals, deposits, movement through different accounts, or movement through different jurisdictions.

What is the main goal of the layering stage in money laundering?

The main goal of the layering stage is to hide the origin of illicit funds and break the audit trail, so that banks, regulators, businesses, and law enforcement agencies cannot easily trace the money back to criminal activity.

Which of the following are methods of the layering stage of money laundering?

Common methods of layering include multiple bank transfers, cross-border transactions, currency conversions, shell companies, trade-based transactions, purchases and resales of high-value assets, virtual asset transfers, and movement through multiple financial institutions.

In the context of money laundering, layering refers to the act of what?

In the context of money laundering, layering refers to moving, converting, transferring, splitting, or restructuring illicit funds through complex transactions to disguise their origin, ownership, movement, or destination.

What stage of money laundering is the most complex and difficult to detect?

Layering is often considered the most complex and difficult stage to detect, because it may involve several transactions, accounts, entities, jurisdictions, assets, and documents. The suspicious pattern may only become clear after the full transaction trail is reviewed.

What is the correct sequence of stages of money laundering?

The commonly used sequence is placement, layering, and integration. Placement introduces illicit funds into the financial system, layering hides the trail, and integration makes the funds appear legitimate.

At which stage is money laundering relatively easy to detect?

Money laundering is often easier to detect at the placement stage, because illicit funds are first introduced into the financial system. Unusual cash deposits or unexplained funds may be more visible before the funds are moved through layers of transactions.

How AML UAE Can Help

AML UAE helps businesses build and strengthen AML and CFT compliance frameworks designed to identify, assess, monitor, and report money laundering risks, including layering risks.

AML support area	How it helps
AML and CFT business risk assessment	Identifies exposure to money laundering, terrorist financing, and proliferation financing risks.
Customer risk assessment methodology	Helps classify customers based on risk.
AML and CFT policies and procedures	Documents how the business manages AML obligations.
Customer due diligence framework	Helps verify customers and understand expected activity.
Enhanced due diligence framework	Applies stronger checks for higher risk customers and transactions.
Transaction monitoring rules	Helps identify suspicious layering patterns.
Red flag indicators	Helps employees identify unusual behaviour.
Suspicious transaction escalation process	Guides internal review and reporting decisions.
goAML registration and reporting support	Assists with reporting readiness.
AML training	Helps employees understand risks and responsibilities.
Independent AML compliance review	Tests whether controls are working effectively.

A strong AML framework helps regulated entities detect suspicious patterns early, document decisions properly, and meet their AML and CFT obligations with greater confidence.

Need help identifying layering risks in your business?

Speak with AML UAE to review your AML and CFT controls, red flags, transaction monitoring framework, and suspicious activity escalation process.

Let us together fight money laundering by preventing the layering of illicit funds

This article has been prepared with reference to the following sources, verified against the UAE AML law library.

Federal Decree by Law No. 10 of 2025 on Anti Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing. Published in the UAE Official Gazette on 30 September 2025, in force from about 14 October 2025.
Cabinet Resolution No. 134 of 2025 on the Executive Regulations of Federal Decree by Law No. 10 of 2025. Published 15 November 2025, in force from 14 December 2025. UAE Official Gazette
UAE Financial Intelligence Unit and goAML reporting, and Ministry of Economy and Tourism guidance on designated non-financial businesses and professions registration. moec.gov.ae
FATF guidance and materials on the money laundering cycle of placement, layering and integration. fatf-gafi.org

FAQs about Layering on Money Laundering

Layering is the stage in which illicit funds are moved through complex transactions, accounts, entities, assets, or jurisdictions to conceal their criminal origin. It is usually the second stage, after placement and before integration.

It is the process of separating illicit funds from their criminal source by moving, converting, or transferring them through multiple transactions, accounts, entities, assets, or jurisdictions.

In AML, layering refers to using complex transactions or structures to conceal the source, ownership, movement, or destination of illicit funds. It is detected through transaction monitoring, customer due diligence, source-of-funds checks, beneficial ownership review, and jurisdiction risk assessment.

The three stages of money laundering are:

Placement
Layering and
Integration

Layering is the second stage of money laundering. What makes layering in money laundering difficult to detect is the way it is broken down into smaller transactions and the conversion of money from one form to another.

Transferring illicit funds through several bank accounts and companies in different jurisdictions, then using the funds to buy property, precious metals, securities, or virtual assets. This creates distance between the funds and their criminal source.

Layering, also known as structuring is the second stage of money laundering.

Layering in banking is the suspicious movement of funds through multiple accounts, transfers, products, customers, or jurisdictions to hide the source or ownership of money. Banks often detect it through transaction monitoring and customer profile reviews.

Layering is the second stage in money laundering. It is a structuring process in which criminally derived funds are legalized and their ownership and source is disguised.

Structuring is the another word for layering.

Layering is structuring a transaction in such a way that the orgin of the criminal proceeds is disguised for the purpose of money laundering.

Several red flags indicate the layering of funds in money laundering. Banking transactions involving large cash deposits into various banks, international bank transfers, investment and resell of jewellery, art, and other high-value items, fund transfer using shell companies, etc., indicates that the funds are being layered to make the detection of their origin as difficult as possible.

The main goal of the layering stage of money laundering is to make the detection of the source of illicit money as difficult as possible.

Placement is the first stage, where illegal funds are introduced into the financial system through small deposits or cash purchases. Layering is the second stage, where those funds are moved through complex transactions such as trusts, shell companies, etc. to hide their criminal origin.

In simple terms: placement puts the money in; layering hides its trail.

Layering is one of the stages in money laundering where the launderer makes numerous transactions to take the illegal proceeds far from their original source. Launderers layer illicit money with several transactions to hide its source.

The four stages in the money laundering process are placement, layering, integration, and spending. At the placement stage, illicit funds are introduced into the financial system. The stage in which money is dispersed and disguised in the system is known as layering, where complex transactions are used to hide the origin of funds. Integration refers to money re-entering the economy as apparently legitimate earnings or profits.

The stage referred to is layering. The stage in which money is dispersed and disguised in the system is known as layering, where criminals move illicitly obtained funds through multiple financial transactions to conceal their origin.

The primary goal behind the layering stage is to separate the illicit proceeds from their questionable origin through layers of multiple financial transactions, making it difficult for investigators to trace money back to the original source of criminal activity.

Placement introduces illicit funds into the financial system. Layering hides their source and movement through complex transactions. Integration makes the funds appear legitimate by using them for assets, investments, or business activity.

Layering is a stage of money laundering. Structuring is a technique in which transactions are split into smaller amounts to avoid detection by reporting thresholds or monitoring rules. Structuring may be used during placement or layering, but it is not the same as layering.

No. Smurfing is a structuring technique that uses multiple people, accounts, or transactions to split funds into smaller amounts. Layering is a broader stage where funds are moved or converted to hide their origin.

Rapid fund movement, third-party payments, shell companies, unexplained cross-border transfers, circular transactions, complex ownership, inconsistent customer activity, and repeated transactions below monitoring thresholds.

By applying customer due diligence, transaction monitoring, source of funds checks, beneficial ownership verification, enhanced due diligence for higher risk cases, staff training, internal escalation, and suspicious transaction reporting where required.

Review the customer and transaction details, collect supporting information where appropriate, escalate to the compliance officer or MLRO, document the decision, and file a suspicious transaction or activity report where required.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Reach Out to Pathik

International Real Estate

Pathik Shah — Wed, 24 Jun 2026 10:44:41 +0000

Last Updated: 06/24/2026

Protect your business with reliable and effective AML strategies with AML UAE.

Key Highlights: International Real Estate

Cross-border property acquisition is a significant money laundering risk because it combines high transaction values, long-term asset holding, offshore ownership structures and multi-jurisdictional opacity.

In the UAE, Federal Decree-Law No. (10) of 2025 and Cabinet Resolution No. (134) of 2025 impose AML/CFT obligations on UAE-regulated real estate brokers and agents when they conclude transactions or settlements on behalf of customers in relation to the purchase or sale of real estate. The supervisory authorities expect beneficial ownership identification through multi-jurisdictional corporate chains to the natural person.

Every compliance team processing a property transaction involving a foreign buyer, foreign property, offshore structure, or cross-border funding source should conduct a heightened risk assessment and apply enhanced due diligence where the customer, jurisdiction, structure, PEP exposure, source of funds, or transaction pattern warrants it.

What is International Real Estate?

Criminals can use international real estate for money laundering, which involves the cross-border acquisition, ownership, and disposal of property to integrate illicit proceeds across jurisdictions. The technique exploits the structural mismatch between AML/CFT supervision, which is national in scope, and property ownership, which is international in practice: for instance, a UAE-based illicit operator can purchase property in London, Dubai, Singapore, or Miami through a chain of offshore companies, and no single supervisory authority possesses a complete view of the transaction. Each jurisdiction sees only the portion within its own borders, with the corporate structure, the source of funds, and the beneficial owner remaining invisible unless multiple regulatory bodies cooperate and share intelligence.

Under Federal Decree-Law No. (10) of 2025 (FDL 10/2025) Article 1, money laundering extends to any act that conceals the illicit origin of proceeds, including the acquisition of property in any jurisdiction when funded by criminal proceeds with a UAE nexus.

Cabinet Resolution No. (134) of 2025 (CR 134/2025) Article 3(2) designates real estate brokers and agents as DNFBPs for all purchase and sale transactions on behalf of their customers.

The DNFBP designation is not framed around a monetary threshold for real estate brokerage activity. Where a UAE real estate broker or agent is involved in the purchase, sale, brokerage, conclusion, or settlement of a real estate transaction, its DNFBP obligations apply to that regulated activity.

Where a UAE bank or financial institution processes the payment, its AML/CFT obligations apply to the payment relationship, customer relationship, and transaction monitoring.

Regulatory Framework Related to International Real Estate

Federal Decree-Law No. (10) of 2025 (FDL 10/2025) is the primary AML/CFT statute. Article 1 defines money laundering as any act of concealment applied to funds derived from a predicate offence, regardless of the jurisdiction in which the property asset is located.

Article 18 requires all DNFBPs to file STRs without delay via goAML when suspicion arises, including when the suspicion derives from cross-border funding patterns, multi-jurisdictional corporate structures, or a beneficial owner residing in a high-risk jurisdiction.

Article 19 mandates CDD, prohibits anonymous accounts, and requires policies covering all customer types, including legal persons with international ownership structures.

Article 26 criminalises money laundering, with penalties of one to ten years’ imprisonment and fines of AED 100,000 to AED 5,000,000 for natural persons; under Article 27, a legal person whose representative, director, or agent commits money laundering in its name or on its account faces fines of AED 5,000,000 to AED 100,000,000.

Article 28 imposes imprisonment and fines of AED 100,000 to AED 1,000,000 for the deliberate or grossly negligent breach of the Article 18 suspicious transaction reporting obligation. CDD failures are addressed separately as administrative breaches under Cabinet Resolution No. (71) of 2024, and may carry wider criminal risk only where linked to laundering conduct.

Cabinet Resolution No. (134) of 2025 (CR 134/2025) provides the operative regulatory framework. Article 3(2) confirms the DNFBP designation for real estate brokers and agents. Article 5 requires an enterprise-wide risk assessment that must include cross-border transaction risks and jurisdictional exposure. Article 10 requires the identification of the beneficial owner of all legal-person customers meeting the 25% threshold. Article 16 requires EDD for all politically exposed persons and their associates, a critical provision given the prevalence of PEP involvement in high-value international property acquisitions. Article 25 requires retention of all CDD records and transaction documentation for a minimum of five years.

Cabinet Resolution No. (109) of 2023 (CR 109/2023) establishes the UAE corporate beneficial ownership register framework. Subject to the statutory exclusions under CR 109/2023, Articles 5, 6 and 8 require UAE-registered legal persons to determine and maintain a Real Beneficiary Register identifying every natural person holding or controlling 25% or more of the company: Article 5 sets the 25% ownership or control threshold, Article 6 requires reasonable measures to keep beneficial ownership information accurate and up to date, and Article 8 mandates the Real Beneficiary Register itself. For international real estate structures that use UAE-incorporated holding companies for foreign property assets, CR 109/2023 creates a domestic transparency obligation on the UAE-domiciled layer of the structure.

Cabinet Decision No. (74) of 2020 (CD 74/2020) governs targeted financial sanctions. Article 21(2) requires all real estate agents and financial institutions to screen all parties against the UAE Local Lists and UN Consolidated List, including foreign buyers and the beneficial owners of foreign corporate purchasers. Under Article 15, an international property transaction involving a sanctioned person or entity requires the funds to be frozen without delay and without prior notice to the listed person, with the match and the freezing action reported through the applicable UAE sanctions reporting mechanism and supervisory channel. For targeted financial sanctions, regulated entities should not limit their analysis to the ordinary 25% beneficial ownership threshold. They should consider whether a listed person or entity owns, controls, benefits from, or acts through any party to the transaction, directly or indirectly.

MoET Circular No. 5 of 2022 (MoET-Cir-5-2022) introduced the Real Estate Activity Report (REAR) filing requirement for specified freehold purchase and sale transactions. A REAR must be filed via goAML where a freehold real estate transaction is settled in physical cash at or above AED 55,000 (whether a single payment or aggregated payments), where the payment is made using a virtual asset, or where the funds are converted from a virtual asset. For international buyers funding UAE property purchases through accounts in multiple jurisdictions, the REAR obligation and source-of-funds verification are concurrent and independent requirements.

UAE Obligations at a Glance

Obligation	What it requires	Legal basis
Risk assessment	Maintain an enterprise-wide risk assessment covering cross-border and jurisdictional exposure.	CR 134/2025 Art. 5
Customer due diligence	Identify and verify the customer and, for legal persons, the beneficial owner at the 25% threshold.	CR 134/2025 Art. 10; FDL 10/2025 Art. 19
Enhanced due diligence	Apply EDD to PEPs and higher-risk customers and countries, proportionate to the assessed risk.	CR 134/2025 Arts. 16, 23
Sanctions screening	Screen all parties against the UN Consolidated and UAE Local Lists; freeze without delay on a match.	CD 74/2020
Suspicious transaction reporting	File an STR via goAML without delay where suspicion arises.	FDL 10/2025 Art. 18
Real estate transaction reporting	File a REAR via goAML for freehold cash transactions at or above AED 55,000 or virtual-asset funding.	MoET Circular No. 5 of 2022
Record keeping	Retain CDD and transaction records for at least five years.	CR 134/2025 Art. 25

Primary Authority or Supervisory Body

The Ministry of Economy and Tourism (MoET) supervises real estate brokers and agents as DNFBPs and conducts risk-based inspections covering international transactions.

The Financial Intelligence Unit (FIU), operating within the CBUAE under FDL 10/2025 Article 11, receives all goAML reports, including those filed in connection with cross-border real estate transactions and shares financial intelligence with domestic law enforcement and, through Egmont Group membership, with foreign FIUs.

The CBUAE supervises banks and financial institutions that process cross-border property payments, correspondent banking flows, and international wire transfers connected to real estate acquisitions.

The UAE implements FATF standards through its national AML/CFT framework, its membership of MENAFATF, and its participation through the GCC, which is a full FATF member. The FATF’s 2022 Risk-Based Approach Guidance for the Real Estate Sector directly informs the supervisory priorities applied to international transactions in the UAE.

Reporting or Compliance Obligations and Channels of International Real Estate

Real estate agents and brokers handling cross-border transactions face a heightened CDD standard. Where the buyer is a foreign national, a non-resident, or a corporate entity with international ownership, the broker must identify the beneficial owner to the 25% threshold under CR 134/2025 Article 10, regardless of the purchasing entity’s jurisdiction of incorporation. This obligation is not discharged by accepting the first layer of corporate documentation; it requires penetrating the ownership chain through every intermediate entity, regardless of jurisdiction, to the ultimate natural person.

The STR obligation under FDL 10/2025 Article 18 applies without threshold to any suspicion arising from an international transaction, including suspicion arising from: the jurisdiction of origin of the purchase funds; the complexity of the ownership structure; the involvement of nominee directors or officers; the absence of a credible commercial rationale for the cross-border acquisition; or the customer’s reluctance to provide source of funds documentation that explains the cross-border movement of the acquisition funds.

The REAR obligation under MoET-Cir-5-2022 applies to qualifying cash or crypto transactions, regardless of the buyer’s nationality or residence. An international buyer who pays cash or crypto of at least AED 55,000 for a UAE freehold property triggers the REAR obligation independently of any STR filing.

Banks and financial institutions processing cross-border property payments are required to apply correspondent banking controls under CR 134/2025 for transactions routed through correspondent relationships and to apply transaction monitoring calibrated to cross-border real estate typologies.

Recent Developments, Enforcement Actions, or Supervisory Priorities

The UAE NRA 2024 identifies the real estate sector as vulnerable to money laundering, particularly due to its attractiveness to domestic and foreign investors and the cross-border nature of many transactions.

It notes that the primary ML methods include the use of unknown sources of funds, complex legal structures, and nominees and family members to obscure beneficial ownership, all of which are characteristic of international real estate ML.

FATF’s February 2024 Plenary highlighted the importance of effective beneficial ownership transparency and of identifying individuals who hide illicit funds through complex corporate structures and legal arrangements.

What does International Real Estate Mean?

Picture two countries, each with its own land registry and its own AML supervisor. A person in Country A has cash they cannot explain. They establish a company in Country B, which in turn establishes a company in Country C, which buys a flat in Country D. The flat is registered in the name of Country C’s company. Country D’s land registry shows a foreign company as the owner. Country D’s real estate agent processed the sale without identifying who controls Country C’s company. Country B and Country C do not share ownership information with Country D unless a formal request is made. The person in Country A is invisible in all four countries simultaneously. International real estate works because property is local, but ownership is global, and AML supervision has not fully closed that gap.

Why International Real Estate Matters

Cross-border property acquisition can provide a durable form of ML integration because it spreads the risk of compliance failure across multiple jurisdictions.

In the UAE context, the intersection of a high-volume international property market, a large non-resident investor population, active use of free zone companies with reduced public disclosure requirements, and significant cross-border fund flows creates an environment in which international real estate ML is both common and difficult to detect without specialist CDD capabilities.

The jurisdictional dimension compounds the compliance challenge for every institution in the transaction chain. A UAE real estate agent handling a purchase by an offshore holding company cannot rely on the CDD performed by the bank in the offshore jurisdiction, because a different regulatory framework defines that bank’s obligations.

How International Real Estate Works

Stage One: Origin: Illicit Funds Identified for Cross-Border Placement

The scheme begins with illicit funds in a source jurisdiction, typically generated through corruption, fraud, drug trafficking, or tax evasion. The illicit operator identifies a target acquisition jurisdiction, selected for a combination of factors: high property values that absorb large sums without generating individual-transaction scrutiny; a real estate market open to foreign buyers; limited CDD requirements for international purchasers; limited information-sharing with the source jurisdiction; and a stable legal system that protects property rights and makes the asset difficult to seize once acquired. Dubai, London, Singapore, and Miami are among the most frequently cited destination markets in international property ML cases documented by FATF and Transparency International. For UAE-originating proceeds, the destination market selection often reflects personal or business connections in the target jurisdiction.

Stage Two: Offshore Vehicle Assembly

Before the acquisition, the illicit operator assembles the corporate structure through which the property will be purchased. A TCSP in a secrecy jurisdiction, such as the British Virgin Islands, the Cayman Islands, or the Seychelles, incorporates a holding company with nominee directors and, where available, bearer shares. The holding company may itself be owned by a second offshore entity, adding a second corporate layer. The UAE-based illicit operator’s connection to the offshore company is documented only in the TCSP’s internal files, which are not publicly accessible and may not be subject to international information-sharing requests from the destination jurisdiction’s supervisor. The TCSP that incorporates the structure and provides nominees does not apply adequate CDD on the ultimate beneficial owner, or accepts a corporate intermediary as the customer rather than the natural person behind it.

Stage Three: Cross-Border Acquisition

The offshore holding company instructs a bank or international payments provider to wire the acquisition funds to the destination jurisdiction. The funds pass through one or more correspondent banking relationships. At each correspondent node, the payment appears as a normal commercial wire transfer from a corporate entity; without direct enquiry into the sending company’s beneficial ownership, the correspondent bank sees a routine cross-border payment. The real estate agent in the destination jurisdiction processes the transaction with the offshore company as the purchaser. Source of funds documentation is not requested, or the offshore company’s bank statement is provided, showing the transfer, without any investigation of the origin of the funds in that account. The property is registered in the name of the offshore company.

Stage Four: Holding, Income, and Value Enhancement

Once the property is acquired, the holding period generates a stream of commercially explainable income. Rental income paid by tenants is credited to the offshore company’s account. The property appreciates over time. The offshore company may make additional improvements to the property funded by further illicit proceeds, record them as capital expenditure, and add them to the asset’s value. Throughout this stage, the property appears on the land registry as a legitimately acquired foreign investment. The illicit operator’s identity is separated from the asset by the corporate structure; the beneficial owner, if any, is visible on the company’s documents and is the nominee.

Stage Five: Disposal and Cross-Border Repatriation

The scheme concludes when the property is sold. The sale proceeds, representing the original illicit funds plus the holding period appreciation, are paid to the offshore company. The offshore company distributes the funds as a dividend, a shareholder loan repayment, or a management fee to another entity in the chain. By the time the funds reach the illicit operator’s personal account or are reinvested into a new asset, they have passed through a property transaction in a foreign jurisdiction, a corporate distribution, and at least two international wire transfers. The funds are indistinguishable from legitimate foreign investment returns. The integration is complete and durable.

Real-World Examples of International Real Estate

The Cross-Border PEP Portfolio

A senior government official in a high-risk jurisdiction accumulates proceeds of corruption over several years. Through a TCSP, the official establishes three offshore holding companies, each with a different nominee director, and two domestic corporate entities that hold minority interests in the offshore structures.

The offshore companies purchase high-value residential properties in multiple international property markets. Each property purchase is processed by a local real estate agent, who verifies the nominee director’s identity and does not trace ownership further. In one transaction, the reporting entity submits the required regulatory report for a high-value cash transaction but does not file a suspicious transaction report because the nominee director presents apparently legitimate corporate documentation.

Over five years, the three properties appreciate, generate rental income, and are refinanced against their increased value, producing additional proceeds that are returned to the offshore structure.

A competent authority eventually identifies the PEP connection through a cross-border intelligence-sharing request. Still, by then, two of the three properties have been sold, and the proceeds have been further layered.

The compliance failure was the failure to apply enhanced due diligence (EDD) measures despite the PEP-connected beneficial ownership of the purchasing structure, resulting in the concealment and integration of illicit proceeds through the real estate sector.

The Correspondent Banking Property Purchase

A financial institution receives a wire transfer instruction from a corporate account held at a foreign bank in a high-risk jurisdiction. The remitting entity is described as a property investment company, and the funds are intended for the purchase of real estate.

The receiving institution processes the wire through its correspondent banking relationship without triggering enhanced scrutiny because the transaction value is within the normal range for that relationship with the remitting bank. The funds are deposited into a real estate agent’s client account.

The agent verifies the purchasing entity’s corporate registration but does not identify the beneficial owner beyond the first layer. No source-of-funds inquiry is conducted because the agent treats the correspondent bank wire as a proxy for source-of-funds verification. The property is purchased and registered.

The purchasing entity is subsequently identified in a foreign law enforcement request as a front company involved in serious predicate offences. The receiving bank’s transaction monitoring failed to flag the combination of a high-risk-jurisdiction origin, a single large payment, and a real estate destination, indicating insufficient CDD.

The Multi-Jurisdictional Property Flip

An illicit operator uses a network of ten shelf companies incorporated across three jurisdictions, connected through nominee shareholding relationships, to execute a series of property transactions across two countries over three years.

Company A, incorporated in jurisdiction 1, purchases a commercial property in jurisdiction 2 for USD 2.5 million below market value from a connected seller. Company B, incorporated in jurisdiction 3 and nominally owned by Company A, sells the property to Company C six months later at market value, generating a paper profit of USD 2.5 million. Company C holds the property for 18 months, undertakes nominal renovations funded by additional illicit proceeds, and sells to an independent third-party buyer at a further premium.

The USD 5 million net gain across the series is distributed as management fees and shareholder dividends through the nominee structure. No single real estate agent or bank involved in any of the individual transactions has a view of the full series. Each institution processed one transaction with an offshore company whose beneficial ownership it did not penetrate.

The scheme is identified only when a cross-border tax investigation in jurisdiction 1 reconstructs the full transaction chain from land registry records in jurisdiction 2.

How Does International Real Estate Facilitate Money Laundering?

International real estate schemes serve the Integration tactic in the money laundering cycle, but their defining characteristic is their exploitation of jurisdictional fragmentation to neutralise national-level CDD. Unlike domestic real estate ML, which can, in principle, be detected by a single supervisory authority with access to all relevant transaction records, international real estate schemes distribute observable transactions across multiple regulatory perimeters.

The placement stage may occur in the source jurisdiction through an initial wire transfer or corporate distribution. The layering stage is completed through the multi-jurisdictional corporate structure that interposes offshore holding entities between the illicit operator and the property. Integration is achieved through the property asset, which appears on the land registry of the destination jurisdiction as a legitimate foreign investment.

The Jurisdictional Risk dimension makes international real estate uniquely durable as an integration vehicle. Once property has been acquired in a foreign jurisdiction through an offshore corporate chain, and the real estate agent’s CDD has been inadequate, the beneficial owner’s connection to the asset is legally obscured in a way that is very difficult to unwind without a coordinated multi-jurisdictional investigation. This durability is what distinguishes international real estate from financial product ML, where the instrument matures or closes, creating a retrospective audit opportunity that property held in a nominee company over decades does not provide.

How Do Criminals Exploit International Real Estate?

The illicit operator is the architect and ultimate beneficiary. This actor selects the destination jurisdiction based on its combination of a strong real estate market, limited CDD requirements for international purchasers, and a history of receptiveness to cross-border investment. The illicit operator directs the TCSP to establish the corporate structure, instructs the bank on the funding route, and selects the property through a real estate professional who may or may not be witting. In cases involving government officials, the illicit operator may have diplomatic connections in the destination jurisdiction that further reduce the scrutiny applied to them.

The nominee provides the identity layer that substitutes for the illicit operator across all documents. A nominee director of the offshore purchasing entity appears on the corporate records presented to the destination jurisdiction’s real estate agent and land registry. A nominee shareholder holds the equity in the offshore company, preventing any public disclosure of the beneficial owner. The nominee is typically a professional service provider in the TCSP’s network, whose identity is entirely legitimate but who has no genuine connection to the property or the funds.

The real estate professional in the destination jurisdiction is the primary gatekeeper. A real estate agent who processes the transaction without identifying the beneficial owner of the offshore purchasing entity, without requesting source-of-funds documentation, and without filing an STR when suspicion arises has enabled the integration.

The shell or front company is the acquisition vehicle and the legal registration holder. The offshore holding company’s name on the land register is the most visible indicator of international real estate ML, as it places the property’s registered title at the maximum distance from the beneficial owner. Front companies that maintain a nominal level of commercial activity, such as a website or a registered trade licence, provide a further layer of apparent legitimacy during basic verification by real estate agents.

TCSPs provide the infrastructure of the entire scheme. A TCSP that incorporates the offshore holding company, provides nominee directors and shareholders, administers the company’s accounts, and routes the acquisition funds without applying the required CDD on the ultimate beneficial owner is the enabling professional whose failure makes every other actor’s concealment possible. In jurisdictions with strong TCSP AML obligations, including the UAE under CR 134/2025, a TCSP that performs these functions without identifying the beneficial owner breaches its own DNFBP obligations.

What Are the Red Flags That Identify International Real Estate?

Category	Redflags
Customer	A customer persistently delays or refuses to provide beneficial ownership documentation for offshore entities used to purchase foreign property, despite multiple requests and clear legal obligations to provide it.
Customer	The purchasing entity is an offshore company with no documented commercial activity other than property holding, incorporated in a jurisdiction with limited disclosure requirements, presenting a nominee director as its sole officer.
Customer	A foreign buyer’s declared income, profession, or business profile is materially inconsistent with the acquisition value of the property being purchased, without a credible source of funds explanation for the discrepancy.
Customer	Multiple foreign real estate holdings are formally registered under different shell companies but are administered by the same individual, the same TCSP, or the same professional address across jurisdictions.
Customer	Overlapping control persons, contact information, or corporate service providers appear across multiple offshore corporations collectively used in cross-border real estate acquisitions.
Transaction	Frequent property transactions completed within short timeframes show large valuation discrepancies between the acquisition price and independent market assessments, without a documented commercial or structural explanation.
Transaction	Large international wire transfers arrive from multiple offshore entities into an account used exclusively for purchasing foreign real estate, without a single identifiable beneficial owner who can be verified.
Transaction	A property acquisition in a high-value range is funded through a series of smaller transfers from multiple foreign jurisdictions, structured in amounts and timing that suggest deliberate fragmentation of a single larger sum.
Transaction	Property transactions involve simultaneous or closely sequenced purchases and disposals between connected offshore entities, at prices that generate a documented capital gain with no independent market justification.
Geographic	Frequent real estate acquisitions are concentrated in jurisdictions characterised by minimal disclosure requirements, limited information sharing with the UAE, or high scores on international corruption indices.
Geographic	The corporate ownership chain of the purchasing entity spans three or more jurisdictions, none of which is the jurisdiction of residence of any of the beneficial owners identified through CDD.
Geographic	Purchase funds originate from or route through jurisdictions on the FATF grey or black list, or through correspondent banking relationships with banks in those jurisdictions.
Product	Property transactions in high-value ranges exceed the customer’s stated income or business revenues without documented source of wealth that explains the accumulation of the acquisition sum.
Channel	The transaction is introduced by a third-party intermediary based in a different jurisdiction, who is unable to identify the ultimate principal behind the purchasing entity or provide documentation on the source of acquisition funds.
Channel	The buyer declines to use escrow services or structured settlement procedures that would require independent source of funds verification, requesting instead a direct transfer to the seller’s account.

Which AML Controls Counter International Real Estate?

Control	What It Disrupts	Detects / Prevents / Deters	Limitation
Country Risk Assessment	Identifies high-risk jurisdictions associated with cross-border property ML, enabling risk-proportionate CDD calibration	Prevents	Requires regular updating against FATF, EOCN, and bilateral risk ratings. A static country risk framework does not respond to jurisdictions that deteriorate or improve.
Customer Due Diligence (CDD)	Forces source of funds and beneficial ownership identification at the point of the transaction, regardless of the jurisdiction of the purchasing entity	Detects and prevents	Effective only when source of funds is actively pursued through the full corporate chain. Accepting first-layer corporate documents without penetrating to the natural person is the most common CDD failure in international real estate.
Enhanced Due Diligence (EDD)	Requires deeper source of wealth inquiry, Senior Management approval, and ongoing scrutiny for high-risk international customers including PEPs and entities in secrecy jurisdictions	Prevents	Depends on correct risk classification. A corporate purchaser with a BVI holding structure may indicate higher risk and should be assessed under the relevant country, ownership, and structure risk factors, with enhanced due diligence applied where the assessment warrants it.
OSINT and External Source Verification	Cross-references customer identity and declared background against adverse media, PEP lists, sanctions databases, and corporate intelligence across multiple jurisdictions	Detects	International adverse media and corporate intelligence varies significantly in quality and completeness by jurisdiction. OSINT is supplementary to, not a substitute for, formal CDD documentation.
Sanctions and Watchlist Screening	Screens all parties to the transaction, including foreign beneficial owners and offshore entities, against the UAE Local Lists and UN Consolidated List	Prevents	Must cover the beneficial owner, not only the presenting corporate entity. A sanctioned person holding a 25% interest through a nominee does not appear in a screening of the company name alone.
Service Restriction	Declines to process transactions where adequate beneficial ownership documentation cannot be obtained, preventing the integration from completing	Deters	Creates business relationship friction. Requires senior management commitment and a documented policy that supports declining high-risk transactions without adequate CDD.
Transaction Monitoring	Identifies anomalous cross-border payment patterns including rapid layering, multiple-jurisdiction fund sourcing, and structured transfers below reporting thresholds	Detects	Most effective for financial institutions. Real estate agents do not typically operate transaction monitoring systems. Calibration must include cross-border real estate typology rules.

How Do AI and RegTech Automate Detection of International Real Estate?

Cross-border corporate ownership graph analytics are the primary technological application for international real estate ML detection. A compliance platform that integrates corporate registry data from multiple jurisdictions can automatically trace the ownership chain of an offshore purchasing entity through intermediate holding companies to the natural person, across dozens of jurisdictions and tens of thousands of corporate records. Graph analytics applied to this data can identify clusters of offshore entities sharing nominee directors, registered addresses, or corporate service providers, revealing coordinated multi-jurisdictional structures that appear unconnected when viewed individually.

Network analytics applied to correspondent banking payment flows can identify patterns characteristic of cross-border real estate ML, including aggregation of funds from multiple foreign accounts into a single acquisition account, rapid layering through multiple correspondent nodes, and routing through jurisdictions on FATF high-risk lists. Where the payment origination jurisdiction, the corporate registration jurisdiction, and the property destination jurisdiction are all different, and none coincides with the beneficial owner’s documented residence, the combination is a structural indicator that automated systems can flag without human intervention.

Machine learning models trained on confirmed international real estate ML cases, using features such as jurisdiction combinations, corporate structure depth, fund flow patterns, and property values relative to declared customer wealth, can assign transaction-level risk scores to incoming cross-border acquisitions. Models of this type can direct the highest-risk transactions to enhanced review queues, concentrating compliance resources on the transactions most statistically similar to confirmed ML cases.

International PEP database integration is particularly valuable for international real estate because PEP involvement is a significant risk factor in cross-border government-official property acquisitions. Automated PEP screening that extends to the beneficial owners of all offshore corporate purchasers and is continuously updated as PEP lists change, provides a second line of detection for the category of international real estate ML that standard CDD most commonly fails to identify.

What Data Should Compliance Teams Collect to Detect International Real Estate?

Data Point	Source System	What It Reveals About International Real Estate
Full beneficial ownership chain across all jurisdictions to the natural person	Company and Beneficial Ownership Registries	Whether the cross-border corporate structure has been penetrated to the ultimate beneficial owner in every jurisdiction through which the chain passes
Correspondent and cross-border transaction records for acquisition funding	Correspondent and Cross-Border Transaction Data	Whether the funds used to acquire the property were aggregated from multiple foreign accounts, routed through high-risk jurisdictions, or structured to avoid individual-transaction scrutiny
Source of funds and source of wealth documentation	KYC and CDD Records	Whether the cross-border funds can be traced to a legitimate commercial activity consistent with the customer’s declared profile and financial standing
Property ownership and transaction history in destination jurisdictions	Real Estate and High-Value Asset Ownership Records	Whether the property has been subject to rapid resales among connected entities, or whether the acquisition price is inconsistent with independently verified market values
Corporate registry extracts and director/shareholder records from all jurisdictions in chain	Company and Beneficial Ownership Registries; Individual, Entity and Public Records Databases	Whether offshore entities in the ownership chain have nominee directors, no commercial activity, recent incorporation, or shared characteristics across multiple properties
Financial, business, and tax records for the declared beneficial owner	Financial, Business and Tax Records	Whether the beneficial owner’s declared financial profile supports the accumulation of the acquisition funds through legitimate commercial activity
Geographical and jurisdictional risk data for all countries in the transaction chain	Geographical and Jurisdictional Risk Data	Whether the jurisdictions involved in the corporate structure, the funding route, or the property location are associated with elevated ML risk per FATF, EOCN, or UAE country risk ratings
Trust information and accounts for trust-held property structures	Trust Information and Accounts	Whether property held through a trust structure has been subjected to the required identification of settlor, trustee, protector, beneficiary class, and controlling person.

How Does International Real Estate Aggravate Jurisdictional Risk and Product Risk?

International real estate schemes elevate both Jurisdictional Risk and Product Risk to levels higher than any other real estate ML sub-typology, because the cross-border dimension compounds each risk independently, and their interaction creates a compounding effect.

Jurisdictional Risk is inherently maximised in international real estate ML because the scheme is specifically designed to exploit the gap between the jurisdictional scope of AML supervision and the geographic reach of property ownership.

An offshore corporate chain that spans three jurisdictions before arriving at a UAE property asset creates three separate layers of jurisdictional risk, each of which reduces the probability that the UAE supervisor can obtain the beneficial ownership information needed to assess the transaction.

Where one or more of the intermediate jurisdictions are secrecy jurisdictions with limited information-sharing obligations, or grey-listed jurisdictions with inadequate AML supervision, the risk compounds further.

The UAE’s CR 134/2025 Article 10 imposes the beneficial ownership tracing obligation on the UAE-licensed real estate agent.

This should be regardless of the jurisdictions through which the ownership chain passes, but the practical difficulty of executing that obligation across non-cooperative jurisdictions remains a significant residual risk.

Product Risk is elevated because international property transactions combine the high-value, long-duration characteristics of all real estate transactions with the additional opacity of cross-border funding and offshore ownership.

A single international property acquisition can absorb tens of millions of dirhams in a single transaction, produce a registered title that persists for decades, and generate rental income and capital appreciation that appear entirely legitimate to any subsequent reviewer who lacks access to the source-of-funds documentation.

The product’s durability means that a CDD failure at the point of the initial cross-border acquisition creates an AML exposure that remains embedded in the institution’s records indefinitely, compounded by each subsequent transaction the same customer completes.

What Cross-Border Patterns Signal International Real Estate to a Compliance Officer?

During CDD review or at the point of transaction processing, a compliance officer reviewing an international property transaction may encounter the following patterns that warrant escalation:

A foreign buyer presenting an offshore corporate entity as the purchaser, whose directors are professional nominees with no documented connection to the property sector or the acquisition rationale. An acquisition funded by a wire transfer from a jurisdiction on the FATF grey list, described in the payment instruction as an ‘investment transfer’ without supporting commercial documentation.

A series of transactions involving the same offshore company across multiple jurisdictions over a short period, each at prices that generate a documented capital gain without an independent market explanation.

A customer whose declared occupation is in a public sector role in a high-risk jurisdiction, purchasing property at a value materially inconsistent with that role’s remuneration.

A corporate ownership chain that cannot be penetrated beyond the second layer because the intermediate company is registered in a jurisdiction that does not respond to information requests.

Sectors at Highest Exposure

These ratings are AML UAE’s operational exposure assessment for compliance risk management. They are not official UAE sector risk ratings.

Sector	Practical Exposure Rating	Reasoning
Real Estate Brokers and Agents	Critical	Process the property transaction in the destination jurisdiction. CDD obligations are not dependent on the AED 55,000 REAR threshold; they arise from the regulated activity and customer relationship. REAR and STR obligations are independent and concurrent. Most commonly identified for CDD failures in MoET enforcement actions.
Banks and Financial Institutions	Critical	Process all cross-border wire transfers used to fund international acquisitions. Are the primary checkpoint for correspondent banking flows and cross-border fund structuring. Must apply country risk assessment to all international transactions.
Trust and Company Service Providers (TCSPs)	High	Establish and maintain the offshore corporate structures used to hold international property. Carry DNFBP CDD obligations. Failure to identify the ultimate beneficial owner is the central enabler of international real estate ML.
Lawyers, Notaries, and Legal Professionals	High	Draft the corporate structures, trust arrangements, and property transfer documentation used in international acquisitions. Carry DNFBP obligations when carrying out specified activities under CR 134/2025.
Real Estate Investment Advisors	Moderate	Provide investment structuring advice to international buyers. May introduce offshore holding structures and cross-border financing arrangements that create the conditions for ML without being aware of the ultimate beneficial owner.

Best Practices for International Real Estate Risk Management

Penetrate the full ownership chain of every offshore purchasing entity to the natural person beneficial owner, regardless of how many jurisdictions the chain traverses. The obligation is not discharged by accepting first-layer corporate documentation; every intermediate entity in the ownership chain must be documented, and every layer must be traced to a natural person whose identity has been independently verified.
Apply country risk assessment to all jurisdictions in the transaction chain, including the jurisdiction of incorporation of the purchasing entity, the jurisdiction of origin of the acquisition funds, and any intermediate jurisdictions through which the funds have passed. CR 134/2025 Article 5 requires an enterprise-wide risk assessment that explicitly addresses jurisdictional exposure. Transactions involving high-risk jurisdictions should trigger enhanced due diligence or a documented enhanced review, proportionate to the assessed risk.
Require source of funds documentation that traces the acquisition funds from the beneficial owner’s confirmed income or business activity to the account from which they were transferred, not merely a bank statement showing the balance in the offshore company’s account at the time of transfer. The offshore company’s account may hold laundered funds transferred from multiple sources; the source-of-funds obligation requires tracing through the offshore account to the ultimate origin.
Apply EDD to all customers identified as PEPs, PEP-connected, or resident in high-risk jurisdictions, regardless of the declared value of the acquisition. CR 134/2025 Article 16 requires EDD for PEPs and their associates.
Conduct sanctions screening that covers the beneficial owner identified through the corporate chain, not only the presenting entity. Regulated entities should screen all parties against the UAE Local Lists and the UN Consolidated List. A sanctioned natural person who holds a 25% interest in an offshore purchasing entity through a nominee does not appear in a screening of the company name; only screening of the identified beneficial owner will reveal the sanctions connection.
File STRs where cross-border transaction circumstances generate suspicion, independently of whether a REAR has been or will be filed. FDL 10/2025 Article 18 requires an STR on suspicion regardless of transaction value. A cross-border property transaction involving a grey-list jurisdiction of origin, an offshore purchasing entity, and a source-of-funds narrative that cannot be independently verified provides multiple concurrent grounds for suspicion requiring STR consideration.
Apply Service Restriction where adequate beneficial ownership documentation cannot be obtained for an offshore purchasing entity. CR 134/2025 does not require a real estate agent to proceed with a transaction when CDD cannot be satisfactorily completed. Where the beneficial owner cannot be identified through reasonable CDD procedures, the obligation is to decline the transaction and, where suspicion has arisen, to file an STR via goAML.
Maintain a documented record of all CDD steps taken in cross-border transactions, including the sources consulted, the documents obtained, the jurisdictions covered, and the rationale for any risk classification decisions. CR 134/2025 Article 25 requires retention of all CDD records for a minimum of five years. For international transactions, this record must include the full ownership chain documentation, the source of funds file, and any EDD materials, organised to allow complete reconstruction of the CDD process if required by MoET inspection.
Establish a dedicated escalation pathway for transactions involving offshore purchasing entities in secrecy jurisdictions, correspondent banking fund flows, or beneficial owners with connections to high-risk jurisdictions. Routine CDD procedures calibrated to domestic transactions are not adequate for international structures. The escalation pathway should include notification to Senior Management for transactions exceeding a value threshold or for any transaction where the full ownership chain cannot be verified within a defined period.
Train compliance staff on the specific cross-border indicators. Staff who can recognise the combination of an offshore purchaser, a grey-list funding jurisdiction, and a nominal source of funds narrative as a structural indicator for EDD, rather than as routine transaction characteristics, are substantially more effective than those applying generic AML training to cross-border transactions.

How International Real Estate and Real Estate-based Methods Are Related

International real estate is a specific sub-typology of real estate-based methods. Real estate-based methods are a broader category that covers all techniques by which illicit proceeds are integrated into property assets, including domestic acquisition, price manipulation, rental income abuse, and construction project schemes.

International real estate applies the same integration objective in the narrower operational context of a cross-border transaction, exploiting the jurisdictional gap between AML supervision and property ownership to reduce the probability that any single authority will detect the beneficial owner’s connection to the illicit funds.

The distinction is practically significant because international real estate introduces a specific set of compliance obligations, including country risk assessment, correspondent banking controls, and multi-jurisdictional beneficial ownership tracing, that do not apply to purely domestic real estate transactions.

A compliance programme calibrated to domestic real estate CDD will not detect the specific indicators that characterise cross-border property ML.

Related Terms

Term	Connection
Real Estate-based Methods	Parent typology; international real estate applies the integration objective of real estate ML in the cross-border context, exploiting jurisdictional fragmentation as the primary concealment mechanism.
Asset Cloaking	The nominee and offshore corporate structures used to conceal beneficial ownership in international property transactions are the operational implementation of asset cloaking applied to cross-border real estate.
Shell Companies	Offshore shell companies are the primary acquisition vehicle in international real estate ML, providing legal title to the property without disclosing the beneficial owner in the destination jurisdiction.
Multi-Jurisdiction Corporate Structures	International real estate ML is built on multi-jurisdictional corporate chains; the sub-typology and the instrument are inseparable in practice.
Construction Project Schemes	A sibling sub-typology of real estate-based methods; construction project schemes exploit the cost structure of a development project, while international real estate exploits the jurisdictional gap in supervision of cross-border acquisition.
High-Cash Flow Real Estate	A sibling sub-typology of real estate-based methods; high-cash-flow real estate exploits rental income as the integration mechanism, while international real estate exploits the cross-border dimension of acquisition and ownership.
Bribery	PEP-connected property ML, where corruption proceeds are integrated through international real estate, is the most prevalent and most value-significant intersection between bribery and the international real estate typology.
Intermediary-Facilitated Transfers	Third-party intermediaries who introduce offshore buyers to real estate agents, or who route acquisition funds through correspondent accounts on behalf of the ultimate beneficial owner, are the channel facilitators in international real estate ML.

Related Processes and Typologies

Process or Typology	Connection
Source of Funds Verification	The CDD measure most commonly deficient in international real estate cases; tracing cross-border acquisition funds from the beneficial owner’s confirmed income through the offshore account to the acquisition payment is the specific investigative challenge.
Correspondent Banking Controls	The transaction monitoring and CDD framework applied to cross-border wire transfers; international real estate acquisition funds invariably pass through correspondent banking relationships that are the primary payment detection point.
Beneficial Ownership Tracing	The CDD process of penetrating multi-jurisdictional corporate structures to the natural person; the central challenge in international real estate ML and the most frequently failed control.
International Information Exchange	The legal frameworks through which UAE supervisory authorities and law enforcement can obtain beneficial ownership information from foreign jurisdictions; a critical but frequently slow tool for international real estate investigations.

What Financial Instruments Do Criminals Use in International Real Estate Schemes?

Bank accounts are the primary payment channel for all international real estate acquisitions. Illicit operators maintain bank accounts across multiple jurisdictions, routing acquisition funds through multiple correspondent relationships to obscure their origin. Accounts held in the names of offshore entities ensure that the transaction record in the destination jurisdiction’s bank shows the corporate entity as the sending party, not the beneficial owner. Where the bank in the source jurisdiction has not applied adequate CDD on the account holder, the payment originated from a point of compliance failure that the destination jurisdiction cannot independently detect.

Nominee shareholding, non-public ownership records, layered corporate ownership, and historically bearer shares have been used to conceal beneficial ownership in offshore property structures. Where any ownership instrument or arrangement allows control to be transferred without transparent public disclosure, the AML risk increases materially. The UAE prohibition on bearer shares in domestic legal persons under CR 109/2023 closes this gap for UAE-registered entities. However, offshore companies in non-prohibitive jurisdictions can still hold UAE property-owning entities through such structures.

Equity interests in offshore legal entities are the standard instrument through which beneficial ownership of international property is separated from the land registry record. A natural person’s beneficial interest in foreign property is expressed as an equity interest in the offshore holding company, rather than as a direct ownership right, thereby preventing the land registry from disclosing the beneficial owner even when the registry is publicly accessible.

Real estate itself is the integration asset. Unlike financial instruments that are liquid and volatile, international property provides a stable, appreciating asset that is physically located in the destination jurisdiction and legally registered in the name of the offshore entity. The property’s immobility makes it a permanent component of the ML integration portfolio, generating income and value while remaining outside the direct reach of the source jurisdiction’s enforcement authorities unless a formal asset-tracing and recovery process is initiated.

Trust beneficial interests are exploited where the property is held through a trust structure administered by a TCSP in a secrecy jurisdiction. The beneficial interest in the trust is defined by the trust deed, which is a private document not accessible to the destination jurisdiction’s land registry or real estate agent. CR 134/2025 Article 10 requires DNFBPs such as real estate agents and banks to identify the settlor, trustee, protector, beneficiary class, and controlling person of any trust that appears in the ownership chain of a purchasing entity. This makes trust-held property subject to the same beneficial ownership tracing obligation as corporate-held property.

What Products and Services Do Criminals Abuse in International Real Estate Schemes?

Offshore banking services are the primary channel through which international acquisition funds are moved and stored. An offshore bank account held in the name of the purchasing entity receives funds from multiple sources, aggregates them, and wires the acquisition price to the destination jurisdiction. The offshore bank, subject to a different regulatory framework from the destination jurisdiction, may not apply CDD standards equivalent to those required in the UAE, creating a gap in the compliance chain that the destination jurisdiction’s real estate agent cannot fill.

Offshore company incorporation services provide the corporate holding vehicles that are the structural foundation of every international real estate ML scheme. A TCSP that incorporates an offshore holding company with nominee directors and shareholders, without identifying the ultimate beneficial owner, has created the concealment infrastructure on which the entire scheme depends. Under CR 134/2025, TCSPs operating in the UAE that provide company incorporation services are subject to DNFBP CDD obligations when performing those specified activities.

Real estate investment services, including cross-border investment advisory and portfolio structuring, are leveraged to provide a commercially credible rationale for large international property acquisitions. An investment advisory mandate covering a portfolio of international properties provides documentation supporting each acquisition as a professional investment decision, reducing the apparent anomaly of large purchases by entities with no prior real estate track record.

Real estate services, broadly, including brokerage and agency services in the destination jurisdiction, are the primary entry point for illicit funds into the international property market. A real estate agent who facilitates the transaction without completing adequate CDD on the offshore purchasing entity and without requesting source-of-funds documentation is the compliance failure that allows the integration to proceed.

Real estate transaction services, including legal conveyancing, notarial services, and title transfer in the destination jurisdiction, are secondary access points. A legal professional processing the transfer of title to an offshore company without independently verifying that company’s beneficial ownership or source of funds provides the legal instrument of integration without detecting it.

Trust and corporate services provide the complete structural package for international real estate ML. A TCSP that incorporates the offshore company, provides nominees, administers the trust overlay, maintains the account, and routes the acquisition funds, all without identifying the ultimate beneficial owner, has constructed an integrated concealment system that operates across jurisdictions simultaneously.

How AML UAE Helps Manage International Real Estate Risks

The compliance challenge in international real estate is not principally a legal uncertainty. The obligations are established and specific. Beneficial ownership must be traced to the natural person regardless of the jurisdictions traversed by the corporate chain; source of funds must be verified at origin, not at the offshore company; EDD must be applied to PEPs and high-risk customers; STRs must be filed on suspicion without a threshold.

The challenge is operational. Cross-border beneficial ownership tracing requires access to multiple corporate registries across multiple jurisdictions, familiarity with each jurisdiction’s disclosure standards, and the analytical capability to assemble a complete ownership picture from fragments of information held in different systems.

AML UAE works with real estate agents, financial institutions, and corporate service providers engaged in cross-border property transactions to build the operational capabilities required by international CDD. The compliance advisory service helps institutions design CDD frameworks for cross-border real estate transactions, including beneficial ownership tracing procedures for multi-jurisdictional corporate structures, country risk matrices, and EDD protocols for PEP-connected international buyers. The risk assessment service helps institutions build the cross-border real estate scenario into their enterprise-wide risk assessment. The AML training service equips compliance staff with the cross-border detection skills needed to identify the specific indicators that distinguish international real estate ML from legitimate cross-border investment.

Frequently Asked Questions

International real estate money laundering uses cross-border property acquisition, through offshore corporate structures, to integrate illicit proceeds across jurisdictions. The technique exploits the gap between AML supervision, which is national, and property ownership, which is global, ensuring that no single authority has a complete view of the transaction, the funding source, and the beneficial owner simultaneously.

Under CR 134/2025 Article 3(2), real estate agents and brokers are considered DNFBPs for the purchase and sale of real estate on behalf of their customers. This triggers the full CDD obligation mandated for DNFBPs, without any monetary threshold, regardless of the buyer’s nationality or residence. For an international buyer purchasing through an offshore corporate entity, the agent must identify the beneficial owner of that entity to the 25% threshold under Article 10, penetrating the ownership chain through every intermediate entity to the natural person, regardless of the jurisdictions traversed.

Yes. The REAR obligation applies to all freehold purchase and sale transactions in cash at or above AED 55,000, and to all transactions where any part of the consideration is funded by virtual asset conversion, regardless of the nationality or residence of the buyer. An international buyer paying cash above the threshold triggers the REAR obligation independently of any STR that may also be required.

The most commonly identified failure is the acceptance of first-layer corporate documentation without tracing the ownership chain to the natural person beneficial owner. Real estate agents who complete CDD on the presenting offshore entity, obtaining the company’s certificate of incorporation and the nominee director’s passport, without penetrating to the ultimate beneficial owner, satisfy the form of the obligation while leaving the beneficial owner entirely invisible.

A PEP identified through the beneficial ownership tracing of a foreign corporate purchaser triggers the full EDD requirement under CR 134/2025 Article 16. EDD requires source-of-wealth verification for the PEP, Senior Management approval for the transaction, and enhanced ongoing monitoring for the duration of the business relationship. The EDD obligation applies regardless of the jurisdiction in which the PEP holds public office, the value of the transaction, or the apparent commercial legitimacy of the acquisition structure.

Real estate round-tripping describes a specific variant of international real estate ML in which proceeds leave the UAE, are integrated into foreign property assets, and are then repatriated to the UAE as foreign investment returns. The technique exploits the fact that inbound investment from foreign jurisdictions may receive different scrutiny than CDD applied to UAE-origin funds, allowing illicit proceeds to re-enter the UAE economy with a foreign-investment provenance that obscures their domestic criminal origin.

Conclusion: International Real Estate

International real estate exploits the fundamental mismatch between the national scope of AML supervision and the global nature of property ownership, giving illicit operators a concealment mechanism that no single regulatory authority can fully close without cross-border cooperation. The offshore corporate structure, the nominee director, the correspondent-banking wire transfer, and the destination-jurisdiction real estate agent who accepts first-layer documentation are the four components of a scheme.

The UAE’s regulatory response is explicit and demanding. CR 134/2025 imposes CDD obligations on UAE-regulated real estate brokers and agents concluding purchase or sale transactions on behalf of customers, regardless of the buyer’s nationality or the complexity of the corporate structure.

The beneficial ownership tracing requirement under Article 10 should apply to every offshore entity in the ownership chain, without any jurisdictional limitation.

EDD under Article 16 is mandatory for every PEP-connected purchaser, regardless of the jurisdiction in which the PEP holds office. And the STR obligation under FDL 10/2025 Article 18 requires filing on suspicion wherever the cross-border circumstances of a transaction give grounds for concern, regardless of whether a REAR has been filed or whether the beneficial ownership has been satisfactorily established.

The implementation challenge is operational, not legal. Cross-border beneficial ownership tracing requires access to corporate registry data across multiple jurisdictions, the analytical capability to assemble a complete ownership picture from partial information, and the procedural infrastructure to promptly escalate when the chain cannot be fully traced. Institutions that have built this capability are fulfilling the substance of the obligation. Institutions that perform identity verification on the presenting entity without penetrating to the beneficial owner are fulfilling their form. In international real estate, the gap between form and substance is precisely where the illicit proceeds are hidden.

Investing in International Real Estate?

Understand the AML risks and due diligence requirements for cross-border property transactions.

Explore Our Services:

AML/CFT Policy Drafting

AML Training

AML Software Selection

Regulatory Reporting

Managed KYC and CDD

AML/CFT Health Check

Risk Assessment Report

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Reach Out to Pathik

The Grey List Effect: Turning FATF June 2026 Updates into Compliance Action

Pathik Shah — Tue, 23 Jun 2026 07:49:36 +0000

The Grey List Effect: Turning FATF June 2026 Updates into Compliance Action

Businesses are required to maintain robust and risk-based AML/CFT and CPF policies and controls.

The Financial Action Task Force (FATF) periodically updates the Blacklist and Grey List, requiring regulated entities to keep up with the change by incorporating and re-tuning their Enterprise Wide Risk Assessment (EWRA) and Customer Risk Assessment (CRA) measures emanating from geographic risk.

Through our upcoming webinar, our in-house AML Expert, Garima Jhanwar, shall help audiences understand the importance of aligning AML/CFT programs with FATF’s June 2026 Grey List Updates. Make sure to register and attend the webinar to develop insights into:

The exact role of FATF as a global AML/CFT and CPF Watchdog

The nexus and consequences of FATF Grey List Updates on your company’s AML, CFT and CPF Control Measures, such as:

Enterprise-Wide Risk Assessment (EWRA)

AML/CFT/CPF Policies and Procedures

Customer Due Diligence (CDD) Measures Concerning Customers or Suppliers Associated with FATF Greylisted Jurisdictions

Recalibrating Configuration of AML Software Solutions

📅 Date: 2nd July, 2026
🕓 Time: 4:00 PM GST
💻 Venue: Online

Register for yet another information-packed webinar where we will discuss the importance of aligning the AML/CFT Program with FATF’s June 2026 Updates and the urgency behind recalibrating AML Compliance measures to align with the latest June 2026 FATF Grey List updates.

Attending the webinar will arm its audiences with the knowledge of the essential role of FATF in combatting ML, FT, and PF risks on a global level while developing an insight into how the changes in the Grey List have a ripple effect on their business’s compliance obligations. 

Effective AML consulting services

make your business dealings brighter, smoother, and better

Share via :

Iraq and Bosnia and Herzegovina Added, Algeria and Namibia Removed from FATF Grey List Countries, 19th June 2026

Pathik Shah — Fri, 19 Jun 2026 17:23:00 +0000

Iraq and Bosnia and Herzegovina Added, Algeria and Namibia Removed from FATF Grey List Countries, 19th June 2026

Outcome of FATF Plenary, 19th June 2026

The FATF June 2026 Plenary added Iraq and Bosnia and Herzegovina to the grey list and removed Algeria and Namibia.
The grey list, formally Jurisdictions Under Increased Monitoring, now stands at 22 jurisdictions.
The black list, formally High-Risk Jurisdictions Subject to a Call for Action, is unchanged: Iran, North Korea and Myanmar.
The Plenary, held in Paris from 17 to 19 June, was the final one under Mexico’s Presidency. The United Kingdom takes over from 1 July 2026.
UAE FIs, DNFBPs and VASPs should feed the change into their country risk, EWRA, screening and due diligence using a risk-based approach, without indiscriminate de-risking.

On 19 June 2026, FATF added Iraq and Bosnia and Herzegovina to its grey list and removed Algeria and Namibia. The grey list now includes 22 jurisdictions under increased monitoring. The FATF black list remains unchanged, covering Iran, North Korea and Myanmar.

Key takeaways of the FATF Plenary June 2026

On 19 June 2026, the Financial Action Task Force (FATF) concluded its June Plenary and updated its lists of monitored and high-risk jurisdictions. This FATF grey list update for June 2026 is summarised below.

Added to the Grey List: Iraq; Bosnia and Herzegovina
Removed from the Grey List: Algeria; Namibia
Black List (Call for Action): No Change: Iran, North Korea, Myanmar

What changed on the FATF Grey List in June 2026

The FATF reviews its grey list of jurisdictions under increased monitoring at each Plenary, which meets three times a year, in February, June and October. At the June 2026 Plenary it made two additions and two removals.

Countries Added to Increased Monitoring on 19th June 2026

Bosnia and Herzegovina and Iraq were added to the list of jurisdictions under increased monitoring. Both have committed to action plans to address strategic deficiencies in their measures against money laundering, terrorist financing and proliferation financing, within agreed timeframes.

Countries Removed from FATF Grey List on 19th June 2026

Algeria and Namibia were removed after successful on-site visits confirmed they had completed their action plans. Algeria will continue working with its FATF-style regional body, MENAFATF, and Namibia with ESAAMLG, to sustain the improvements.

FATF Grey List countries in full, as of 19 June 2026

The following 22 jurisdictions are under increased monitoring after the June 2026 Plenary. Official FATF names are used, with the common name in brackets where helpful. The two newest additions are marked.

12. Laos
13. Lebanon
14. Monaco
15. Nepal
16. Papua New Guinea
17. South Sudan
18. Syria
19. Venezuela
20. Vietnam
21. Virgin Islands (UK)
22. Yemen

FATF Blacklist countries in full, as of 19 June 2026

The FATF blacklist for 2026, formally High-Risk Jurisdictions Subject to a Call for Action, was not changed at this Plenary. These three jurisdictions remain subject to enhanced due diligence and, in the most serious case, countermeasures.

Iran: Call for action and countermeasures by FATF members.
Democratic People’s Republic of Korea (North Korea): Call for action and countermeasures by FATF members.
Myanmar: Call for enhanced due diligence proportionate to the risk.

What the grey list and black list actually mean

The grey list identifies jurisdictions that are actively working with the FATF to fix strategic AML/CFT/CPF deficiencies under an agreed action plan. Importantly, FATF does not call for enhanced due diligence to be applied to a jurisdiction solely because it is grey-listed, and it discourages indiscriminate de-risking. Grey-list status is an input into a firm’s risk assessment, not an automatic trigger for enhanced measures.

The black list identifies jurisdictions with serious deficiencies, where the FATF calls on members to apply enhanced due diligence and, for the highest risk, countermeasures.

Wider outcomes of the June 2026 Plenary

Beyond the list changes, the Plenary agreed several measures that shape the year ahead:

Presidency handover: This was the final Plenary under the Mexican Presidency of Elisa de Anda Madrazo. Giles Thomson of the United Kingdom becomes FATF President from 1 July 2026, with priorities on fraud, the risk-based approach and information sharing.
New Vice-President: Vivek Aggarwal of India was appointed incoming FATF Vice-President for July 2026 to June 2027.
Recommendation 6 updated: Targeted financial sanctions standards now carry the humanitarian exemption in UN Security Council Resolutions 2664 and 2761, so sanctions do not block humanitarian assistance and basic human needs.
Recommendation 16 consultation: A public consultation was approved on guidance to implement the strengthened cross-border payment transparency standard.
Mutual evaluations: The Plenary adopted the mutual evaluation reports of Canada and Turkiye, to be published in late 2026.

UAE AML compliance: What regulated entities should do now

UAE Financial Institutions, Designated Non-Financial Businesses and Professions (DNFBPs) and Virtual Asset Service Providers (VASPs) should treat this FATF grey list update as a trigger to reassess exposure, not as a reason to de-risk wholesale. Recommended actions:

Refresh the country risk model and the Enterprise-Wide Risk Assessment (EWRA) to reflect Iraq and Bosnia and Herzegovina as higher risk, and to re-rate Algeria and Namibia.
Update screening and risk metrics so country risk lists, customer risk assessment scoring and transaction monitoring rules carry the revised grey list.
Apply a risk-based approach to due diligence. Apply enhanced due diligence or enhanced monitoring where the risk assessment warrants it, particularly for customers, beneficial owners, counterparties, transactions or delivery channels linked to higher-risk jurisdictions. For jurisdictions subject to a FATF call for action, apply enhanced due diligence and countermeasures, where required, in line with applicable UAE regulatory requirements and the firm’s risk-based framework.
Refresh sanctions and name screening and confirm regulatory reporting workflows reflect the updated risk landscape.
Update policies, procedures and controls to evidence the change, and record the rationale to demonstrate a risk-based approach.
Brief and train staff so front-line and compliance teams handle affected relationships consistently.

Does the FATF grey list affect UAE customer onboarding?

Grey-list status should be used as an input into country risk scoring, customer risk rating, due diligence decisions, transaction monitoring and senior management escalation. It should not lead to automatic rejection or blanket de-risking of customers connected to a grey-listed country. A UAE firm should document how the listing feeds its risk-based approach, and reserve enhanced measures for relationships its own assessment rates as higher risk.

FAQs on FATF Greylist update June 2026

Iraq and Bosnia and Herzegovina were added to the list of jurisdictions under increased monitoring at the 19 June 2026 Plenary.

Algeria and Namibia were removed after completing their action plans and passing on-site visits.

The following twenty-two jurisdictions are under increased monitoring after the June 2026 Plenary:

1. Angola
2. Bolivia
3. Bosnia and Herzegovina (Added 19th June 2026)
4. Bulgaria
5. Cameroon
6. Cote d’Ivoire
7. Democratic Republic of Congo
8. Haiti
9. Iraq (Added 19th June 2026)
10. Kenya
11. Kuwait
12. Laos
13. Lebanon
14. Monaco
15. Nepal
16. Papua New Guinea
17. South Sudan
18. Syria
19. Venezuela
20. Vietnam
21. Virgin Islands (UK)
22. Yemen

The black list, formally High-Risk Jurisdictions Subject to a Call for Action, is unchanged: Iran, North Korea and Myanmar.

No. Grey-listing is not a sanction, and FATF does not call for enhanced due diligence solely because a country is grey-listed. It signals that a risk-based approach should be applied, with enhanced measures reserved for relationships a firm’s own assessment rates as higher risk.

After each Plenary, which is held three times a year, in February, June and October.

Need Support Updating Compliance Framework with FATF List Updates?

We help you assess the impact of recent grey list changes on your business and update your risk assessment, policies, procedures, and controls accordingly.

Share via :

What are FATF Blacklist and Grey List Countries? 19th June 2026

Pathik Shah — Fri, 19 Jun 2026 16:28:23 +0000

Protect your business with reliable and effective AML strategies with AML UAE.

Updated FATF Grey-Lists and Blacklists at a glance:

Currently, 22 jurisdictions are under FATF Grey List.
New Additions to Grey List: Iraq, Bosnia and Herzegovina
Deletions from Grey List: Algeria and Namibia
Blacklist: Remains unchanged (Iran, North Korea, Myanmar) as of 19 June 2026

What are FATF Blacklist and Grey list countries? June 2026

The Financial Action Task Force (FATF) is an independent organisation that works internationally to prevent money laundering and terrorism financing. It provides several recommendations for governments that help them to make their AML compliance framework sturdy and robust. FATF has issued a blacklist. This blacklist mentions the names of the countries which do not cooperate in the global efforts to prevent financial crimes such as money laundering, financing of terrorism, and financing of proliferation of weapons for mass destruction.

While the other list issued is the grey list of countries where the AML regulations are not entirely compelling and efficient enough to counter money laundering and terrorism financing.

About the FATF Blacklist and Grey list

In layman terms, blacklist is a word used to refer a list that needs to be avoided or considered unacceptable due to certain peculiarities, features, or attributes which are the cause for such ‘blacklisting’.

FATF blacklist is a list of countries that are not in alignment with FATF standards such as having in place, an AML/CFT and CPF regime to prevent the spread of ML/FT and PF.

Greylist is a word used to refer to a list that isn’t blacklisted for obviously unacceptable attributes and is neither white-listed nor considered fully standardised. Simply put, a greylist refers to a ‘grey’ area denoting ‘work-in-progress’ towards achieving standards required to move out of the grey area and be fully standardised.

FATF greylist is a list of countries with AML/CFT and CPF regimes in place, but such a regime has certain deficiencies and shortcomings that need to be worked on.

FATF Blacklist 2026 - Updated as of June 2026

What is FATF Blacklist?

The FATF Blacklist enlists the countries that do not have an efficient AML system or instead do not intend to control financial crimes. Their trade activities are not guided to prevent money laundering, financing of terrorism, or proliferation financing. Their AML frameworks are insufficient to deal with the global threat of money laundering. Their trade activities also put other countries at risk of financial fraud and jeopardised their economic system.

The FATF blacklist countries are officially known as High-Risk Jurisdictions subject to a Call for Action, which acts as a deterrent for countries doing business with the listed countries because of their non-cooperation in the global fight against financial crimes. The FATF blacklist makes other countries aware of the status of the blacklisted country, and they know that doing business with such a country or person hailing from these countries would be dangerous for their economy and the global economy.

With the FATF black list, the countries know which countries they need to put on the sanction lists, which helps their business organisations understand which countries they should not do business with. When FATF has deemed the blacklisted countries insufficient, other countries should cut off ties with the blacklisted countries until they improve their AML frameworks and satisfy the FATF criteria of being AML compliant, sufficient enough to remove their name from the FATF blacklist.

Please note that the FATF updates the blacklist three times annually, so businesses must continuously check them for new listing and delisting. The number of countries on the blacklist varies depending on the effectiveness of the AML compliance framework – if the blacklisted countries have improved their AML efforts to curb the evils of financial crimes. The FATF analyses the same and makes an informed decision about their continued listing or delisting. The FATF continuously monitors the country’s contribution and efforts to check on financial crimes and gathers reliable information on which the listing process is based.

As FATF does not have direct powers to ban a country from conducting business with other countries, its issuance of a blacklist is a recommendation to other countries dealing with a blacklisted country – not to continue such trade as it will put their business and the country’s financial system at risk.

As of 19 June 2026, only the Democratic People’s Republic of Korea (DPRK), commonly North Korea, Iran, and Myanmar are mentioned in the FATF blacklist – countries subject to a Call for Action.

FATF Grey List 2026 - Updated as of 19th June 2026

What is FATF Grey List?

Along with the blacklist, the FATF also issues the grey list, which enlists FATF Grey List countries with a higher risk of money laundering and terrorism financing (yes, definitely less than the blacklisted countries). These countries are put on the grey list because FATF is assured that they are working towards improving their AML compliance structure.

The main difference between the countries mentioned on the blacklist and the FATF grey list is that the former shows no signs of making an effort toward the AML compliance structure. At the same time, the latter follows the FATF recommendation to fix the issues in their AML compliance and regulatory framework.

The FATF scrutinises the grey list countries regularly to check the specified countries’ progress towards an efficient AML compliance framework. The FATF assesses the progress of the countries on the grey list. At present (as of 19th June 2026), 22 countries are on the FATF Grey list, including Angola, Côte d’Ivoire, Lebanon, and many more.

The FATF Grey List is also updated thrice annually, and de-listings and new additions are made based on the performance of the countries and the thorough analysis done by the FATF basis various parameters.

FATF Grey List – FATF Jurisdictions under Increased Monitoring – Update History

On 19^th June 2026, Iraq and Bosnia and Herzegovina were added to the FATF Grey List, while Algeria and Namibia were removed.

On 13th February 2026, Kuwait and Papua New Guinea were added to the FATF Grey List.

On 24th October 2025, South Africa, Nigeria, Mozambique, and Burkina Faso were removed from the Grey List.

On 13^th June 2025 , Croatia, Mali, and Tanzania were removed from the Grey List while Bolivia and the Virgin Islands (UK) were added to Grey list.

On 21^st February 2025, Philippines was removed from the FATF Grey List and Nepal, and Laos – Lao People’s Democratic Republic (Lao PDR or LPDR) were added to the Grey List, which is also known as jurisdiction under an increased monitoring list.

On 25 October 2024, Senegal was removed from the FATF Grey List and Algeria, Angola, Côte d’Ivoire, and Lebanon were added to the Grey List, which is also known as jurisdiction under an increased monitoring list.

On 28th June 2024, Jamaica and Türkiye were removed from the FATF Grey List and Monaco, and Venezuela were added to the Grey List.

On 23rd February 2024, UAE was removed from the FATF Grey List.

Source: Financial Action Task Force (FATF): Jurisdictions under Increased Monitoring as of 19 June 2026.

What is the difference between FATF blacklisted countries and greylisted countries?

Let us understand the difference between the FATF black list and the FATF grey list. The FATF blacklisted countries or jurisdictions suffer from strategic deficiencies in combating money laundering, terrorist financing, and financing the proliferation of weapons of mass destruction. The FATF blacklisted jurisdictions are subject to enhanced due diligence and sanctions to protect the global financial system from the risks of money laundering, terrorist financing, and proliferation financing.

The FATF Greylisted countries are the jurisdictions working closely with the FATF to address strategic deficiencies in their regimes to counter money laundering, terrorist financing, and proliferation financing. The Greylisted jurisdictions are committed to resolving the identified issues within agreed timeframes and are subject to increased monitoring.

How many countries does the FATF grey list include?

The exact number of countries on the FATF grey list can be found by accessing the latest grey list issued by the FATF, as it is updated three times a year. Click here to know the number of countries included in the FATF list at present, as well as in previously issued grey lists.

AML Compliance pertaining to grey-listed and blacklisted countries

All Financial Institutions (FIs) and Designated Non-Finance Businesses and Professions (DNFBPs) are required to have appropriate risk-based AML/CFT protections in place to limit the potential of money laundering and terror financing posed by countries subject to increased monitoring or listed as high-risk jurisdictions subject to a “Call for Action” by FATF.

As a result, FI and DNFBPs must screen customers against the FATF Jurisdictions under Increased Monitoring and High-Risk Jurisdictions Subject to a Call for Action while onboarding and continuously monitor their transactions throughout their business relationship. DNFBPs should ensure that their customer due diligence measures verify their customer’s residence in, or business with, listed countries and that their transaction monitoring measures can examine the size, frequency, and pattern of transactions involving high-risk countries to determine the possibility of occurrence of financial crimes such as money laundering.

FIs and DNFBPs must file suspicious transaction/activity reports (STR/SAR) to the Financial Intelligence Unit (FIU) when red flags are observed so that enforcement actions can be conducted.

Further, FIs and DNFBPs are obligated to report the transaction or activity with high-risk countries subject to a “Call for Action” to the FIU by filing High-Risk Country Transaction Report or High-Risk Country Activity Report (HRC/HRCA), as the case may be

How many countries are part of FATF?

FATF, as of 27^th October 2023, is composed of 40 members (still 40 as of 19 June 2026), with the latest addition of Indonesia. It relies on FATF-Style Regional Bodies (FSRBs) to achieve its goals and objectives. As of now, there are 9 FSRBs working closely with the FATF. Over 200 jurisdictions around the world have committed to the FATF recommendations through the global network of FSRBs and FATF membership.

What happens if FATF blacklists a country?

Once a country is placed on the FATF blacklist, the FATF member states and other international bodies will impose sanctions and restrictive measures against the blacklisted country. The blacklisted country can experience a negative impact on its economy as the economic sanctions imposed by various countries and global financial institutions will make it difficult for a blacklisted country to secure funds.

Further, the blacklisted country will experience declining international trade and foreign exchange inflows. International trade will become costly, and the blacklisted country’s banking system will find it difficult to survive.

What happens when a country is grey-listed?

Grey-listing is not a sanction and does not ban anyone from dealing with the country. It is a public signal that a jurisdiction has strategic deficiencies in its AML/CFT framework and is working under an agreed action plan to fix them. Even so, the signal carries real economic and financial consequences, because investors, global banks and counterparties treat grey-listing as a risk marker and adjust their behaviour accordingly.

Capital inflows decline on average by 7.6% of GDP when a country is grey-listed.

Source: Kida and Paetzold, The Impact of Gray-Listing on Capital Flows, IMF Working Paper WP/21/153 (2021).

The most studied effect is on capital flows. A 2021 IMF working paper found that capital inflows decline on average by 7.6 percent of GDP when a country is grey-listed, with foreign direct investment and portfolio inflows each falling by around 3 percent of GDP. Much of this is driven by higher compliance costs and de-risking, where global banks reduce or cut ties to avoid the added cost and risk, which in turn can lower financial inclusion and push some flows into less regulated channels.

In practice, a grey-listed country tends to experience the following:

Consequence	What it means in practice
Lower capital inflows	Foreign direct and portfolio investment slows as investors reprice country risk
Correspondent banking pressure	Global banks may restrict or withdraw correspondent relationships, making cross-border settlement harder
Costlier, slower payments	Cross-border payments and trade finance attract more checks, higher fees and delays
Currency and funding strain	Reduced inflows and confidence can weigh on the currency and raise the cost of external funding
Heavier external scrutiny	Foreign financial institutions apply enhanced checks, on a risk basis, to customers and transactions linked to the jurisdiction
Domestic compliance burden	The country must deliver its action plan within agreed timeframes to exit, which absorbs supervisory and institutional resources

What grey-listing does not mean

It is worth being precise, because this is widely misread. Grey-listing does not require firms anywhere to terminate relationships with the country, and FATF does not call for enhanced due diligence to be applied simply because a jurisdiction is grey-listed. The expectation is a risk-based approach: regulated entities treat the listing as one input into their country and customer risk assessment, and apply enhanced due diligence or monitoring only where their own assessment warrants it. This is different from the black list, where FATF does call for enhanced due diligence and, for the highest risk, countermeasures.

What it means for UAE regulated entities

For UAE Financial Institutions, DNFBPs and Virtual Asset Service Providers, a new grey-listing is a trigger to update the country risk inputs in the Enterprise-Wide Risk Assessment, refresh screening lists, and apply enhanced measures on a risk basis to relationships connected to the jurisdiction. Where transactions or activity involve a country subject to a call for action, the High-Risk Country Transaction or Activity Report (HRC or HRCA) obligations continue to apply. The aim is calibrated risk management, not blanket de-risking.

Grey-listing is also reversible. When a country completes its action plan and exits the list, these effects typically unwind as investor confidence and banking access recover, as the UAE saw after its own removal in February 2024.

Why North Korea is blacklisted by the Financial Action Task Force (FATF)

The Financial Action Task Force (FATF) has blacklisted North Korea because the Democratic People’s Republic of Korea (DPRK) has failed to address the deficiencies in its money-laundering and terrorist financing (AML/CFT) regime, and it poses serious threats to the integrity of the global financial system. The FATF has serious concerns about North Korea’s illicit activities related to the proliferation of weapons of mass destruction (WMDs) and its financing.

Is Russia on FATF blacklist?

As of 19 June 2026, Russia is not on the FATF blacklist. The Russian Federation is also not part of the FATF grey list. Instead, the FATF has suspended the Russian Federation’s membership and asked countries to remain vigilant for the emerging risks and apply necessary measures to mitigate the risks.

FATF Grey List, Blacklist, and AML Compliance

The FATF Grey List and Blacklist serve as a guiding light for businesses to assess the risks associated with jurisdictions and customers. The regulated entities take a risk-based approach and decide if the risks posed by a customer are within its risk appetite. The FATF lists for jurisdictions subject to a call for action, and jurisdictions under increased monitoring undergo review and change 3 times a year.

Are grey list countries high risk?

FATF grey list countries have a strategic deficiency in their AML/CFT regime, and depending on the risk-based approach taken by an entity, grey list countries are treated as high-risk countries.

Are blacklist countries high risk?

Yes, countries on the FATF black list are high-risk countries for money laundering, terrorist financing, and proliferation financing.

FATF Blacklist and Grey list - Screening & monitoring process

Financial institutions and the designated non-financial businesses and professions, including virtual asset service providers, must continuously monitor their customer databases against FATF Blacklist and Grey list countries.

The screening will help them be alert against the non-cooperative countries that are not taking the AML compliance process seriously. It will protect them from doing business with such countries, which can cause financial losses and reputational damage. So, continuous monitoring is necessary to protect a nation’s financial system from the risk of money laundering and non-compliance with the AML laws and regulations.

So, they should keep the identity verification, Customer Due Diligence, and Enhanced Due Diligence process updated and screen the customers regularly against the sanction lists, the FATF blacklist, and the grey list. Identification of suspicious transactions and accounts should be immediately reported to the authorities. With the timely submission of STRs and SARs – institutions will contribute to and help strengthen the fight against money laundering and financing of terrorism.

FAQs About the FATF Blacklist and Grey list

As per the FATF 19 June 2026 Plenary, there are 22 countries on the FATF Grey List, i.e., “jurisdictions under increased monitoring”.

Countries placed on the FATF Grey List are committed to addressing strategic deficiencies in their AML/CFT frameworks within agreed timelines. While these jurisdictions work towards strengthening their AML/CFT regimes, designated entities should apply a risk-based approach when dealing with customers connected to such countries.

Where the customer is from a FATF Grey List jurisdiction, or has a close business or transactional association with such a jurisdiction, the entity should assess whether the relationship presents a higher level of ML/TF risk. Where higher risk is identified, appropriate enhanced due diligence measures may be applied, such as obtaining additional information on the customer’s source of funds and source of wealth, understanding the purpose and intended nature of the transaction or business relationship, and seeking senior management approval before onboarding or continuing the relationship.

India is not included in the FATF grey list, as its measures to combat money laundering (ML)/terrorist financing (TF) and proliferation financing (PF) are comprehensive, according to the latest Mutual Evaluation of India, conducted in 2024.

In the latest Mutual Evaluation, India’s AML/CFT framework is found to be Compliant and Largely Compliant in most technical assessment parameters, with a moderate to Substantial level of effectiveness in the Effectiveness Parameters.

The 2024 Mutual Evaluation highlights India’s ability to effectively prevent, tackle and mitigate ML/TF and PF risks with relative ease, despite its large population. Currently, it is categorised as “regular follow-up,” requiring reporting to the Plenary within three years of the latest assessment.

Turkiye was included in the FATF grey list in 2021, but was removed from the same in 2024 due to significant measures taken to combat ML/TF.

Since February 2024, UAE is not on the FATF grey list.

Since 22^nd June 2025, KSA is not on the FATF grey list.

Yes, as of 19 June 2026, Kuwait is on the FATF grey list.

Yes, as of 19 June 2026, Papua New Guinea is on the FATF grey list.

Our timely and accurate AML consulting services

For your smooth journey towards your goals

Share via :

About the Author

Jyoti Maheshwari

CAMS, ACA

Jyoti has over 11 years of hands-on experience in regulatory compliance, policymaking, risk management, technology consultancy, and implementation. She holds vast experience with Anti-Money Laundering rules and regulations and helps companies deploy adequate mitigation measures and comply with legal requirements. Jyoti has been instrumental in optimizing business processes, documenting business requirements, preparing FRD, BRD, and SRS, and implementing IT solutions.

Reach Out to Jyoti

goAML Registration Guide – Dubai, UAE

Pathik Shah — Thu, 18 Jun 2026 06:22:00 +0000

goAML registration guide

Last Updated: 03/31/2026

Protect your business with reliable and effective AML strategies with AML UAE.

goAML Registration Guide: Key Facts

goAML is the official online reporting platform used by the UAE Financial Intelligence Unit (FIU) to collect and disseminate suspicious financial transactions related to money laundering, terrorism financing, and proliferation financing.
Who must register: Financial Institutions, Designated Non-Financial Businesses and Professions (DNFBPs) and Virtual Assets Service Providers (VASPs)
Purpose: Submitting Suspicious Activity Reports (SAR), Suspicious Transaction Reports (STR), other AML compliance-related filings such as HRC, HRCA, and TFS related filings such as CNMR and PNMR
goAML Registration Cost: Registration on goAML is free of charges
Registration Process: goAML registration is a two-step process
- SACM Registration
- goAML Portal Registration
Regulator: UAE Financial Intelligence Unit
Penalty for goAML reporting failure: Regulated Entities will be subject to fines/penalties and/or imprisonment.

What is goAML in UAE?

goAML is an official reporting platform used by the UAE FIU to collect and disseminate suspicious activity and transaction reports from regulated entities, related to ML/TF or PF.

The goAML is a software application used by the UAE’s Financial Intelligence Unit (FIU) to curb money laundering and terrorist financing. The ownership of goAML lies with the United Nations Office on Drugs and Crime (UNODC). It is one of the UNODC’s strategic responses to money laundering and terrorist financing.

The goAML portal takes care of data collection, management, analytical, document management, workflow, and statistical needs of the UAE’s Financial Intelligence Unit.

goAML is used by the UAE FIU to:

Receive Suspicious Activity and Transaction Reports (SARs/STRs)
Monitor, disseminate, and analyse SARs/STRs filed
Support AML/CFT and CPF investigations
Ensure compliance with UAE AML/CFT/CPF and TFS laws.
Article 46 of the Cabinet Resolution No. 134 of 2025 empowers the UAE FIU to receive reports from regulated entities, including FIs, DNFBPs, and VASPs.

What is goAML registration?

goAML registration is nothing but the registration with the goAML portal maintained by the UAE FIU. Once the entities fulfil AML registration requirements, they get an email from the FIU regarding their successful Anti-Money Laundering registration.

Regulated entities in UAE must perform this anti-money laundering registration to report suspicious activities and transactions to the FIU.

Why should you register on UAE FIU goAML portal?

Is goAML registration mandatory?

No AML/CFT matters can be reported to the FIU or the regulatory authorities without registration on the goAML Portal. To ensure timely reporting of the following reports with the FIU and the concerned supervisory authority, the regulated organizations must register themselves on the goAML Portal:

Suspicious Activity Report (SAR)
Suspicious Transaction Report (STR)
Additional Information File without Transaction (AIF) 
Additional Information File with Transaction/s (AIFT) 
Request for Information without Transactions (RFI) 
Request for Information with Transaction/s (RFIT) 
Dealers in Precious Metals and Stones Report (DPMSR)
Real Estate Activity Report (REAR)
Confirmed Name Match Report (CNMR)
Partial Name Match Report (PNMR)
High-Risk Country Transaction Report (HRC)
High-Risk Country Activity Report (HRCA)

Who should register with goAML system in UAE?

In order to curb financial crimes, some businesses in the UAE are required to perform anti-money laundering registration. goAML Dubai is a state-of-the-art platform utilized by regulated entities in Dubai to fight money laundering and ensure regulatory compliance. The regulated organizations subject to the latest AML regulations in the UAE are required to carry out goAML reporting, including Suspicious Activity Report (SAR) and Suspicious Transaction Report (STR), to the FIU and the regulatory authorities. Accordingly, all the following AML-regulated organizations must register on the UAE FIU’s goAML Portal:

Financial Institutions
Virtual Asset Service Providers (VASPs)
Designated Non-Financial Businesses and Professions (DNFBPs)
- Dealers in Precious Metals and Stones
- Real Estate Agents and Brokers
- Trust and Corporate Service Providers
- Lawyers, Notaries, and independent legal professionals
- Independent Accountants and Auditors

UAE goAML Registration Deadline

For the regulated organization that existed as on 31st March 2021, the deadline prescribed by the Ministry of Economy for the UAE FIU registration on the goAML portal was 31st March 2021. The date was later extended to 30th April 2021.

The regulated organisations which did not register then as per the deadline mentioned above can still register with the goAML UAE.

The companies newly incorporated in the UAE post the given deadline must register on the goAML system in UAE once they receive their Commercial or Trade License.

What are the documents required for goAML registration in UAE?

The following documents are required for goAML registration in UAE:

The organisation’s Authorisation Letter (Click to download goAML Registration Authorisation Letter template) in favour of the designated AML/CFT Compliance Officer
A copy of the passport, resident visa, and Emirates ID of the Compliance Officer
A copy of the organization’s commercial or trade license

In addition to the documents, the organization must also download the ‘Google Authenticator’ application on the mobile of the registered contact number.

How much does it cost to register for goAML?

The goAML registration does not involve any charges, and it is free for all DNFBPs, VASPs, and Financial Institutions.

UAE goAML Registration Type

The goAML Portal offers three types of goAML registration, as prescribed by the UAE’s Financial Intelligence Unit:

Reporting Entity
Stakeholder
Supervisory Body

Financial Institutions (FIs), VASPs, and DNFBPs must register on the goAML Portal with Registration Type “Reporting Entities”.

What are the steps to register on the goAML Portal in UAE?

Regulated Entities must adhere to the steps enumerated in the goAML System Registration Guide published by the Ministry of Economy and Tourism.

The goAML registration is a two-stage process enabling you to obtain the goAML login in UAE:

Stage 1: Register in the Service Access Control Manager (SACM) system of the UAE FIU to get Username and the Secret Key for accessing Google Authenticator.

Stage 2: Registration on the UAE FIU’s  goAML Portal, furnishing information about the organization and the Compliance Officer.

Stage 1 of goAML Registration: SACM Registration and Obtaining the Secret Key

The first stage is registering the entity to get the username and the SECRET CODE to access the Google Authenticator application on the mobile device.

a. Access https://services.uaefiu.gov.ae/sacm/registration.php and complete this form, attaching the documents mentioned above.

b. goAML Pre-registration Phase Guide – Key considerations to be taken care of while performing SACM Registration:

Mandatory fields marked with (*) must be completed
Select “Registration Type” as Reporting Entity
Appropriate Supervisory Authority must be selected
Under “ID Number/Reg. No.” captures the License Number as mentioned in the Trade License
Phone number and email address must be entered accurately to receive OTPs
Attachment of the supporting documents is allowed as PDF only
The documents to be uploaded – Authorization Letter, Trade/Commercial License, copy of Passport, Emirates ID and Residence Visa – must be merged and uploaded as a single pdf file
Do not forget to TICK the acceptance of the “goAML Portal Service Terms and Conditions” block
Ensure that the e-mail IDs are whitelisted – no-reply.sacm@uaefiu.gov.ae and no-reply.goaml@uaefiu.gov.ae

Upon submission of this form, you will receive an email on the registered email ID, capturing the Email OTP and URL to access the username and the Secret Key for setting up the Google Authenticator application.

The OTP is valid for 24 hours only.

c. Set up Google Authenticator

Install the Google Authenticator application on the mobile, with a contact number registered on the SACM.

Now create an account on the application, capturing the following details:

Capture the Account Name as “goAML Portal”.
Under Your Key field, enter the Secret Key received via email.

Stage 2 of goAML Registration: Completing goAML Registration

Now, complete the goAML registration.

a. SACM Portal Login https://services.uaefiu.gov.ae/goaml/ and log in using the username received post-SACM registration and a 6-digit code on the Google Authenticator as a Password.

b. Upon Sign In, you will be directed to the goAML homepage.

c. Initiate the registration by clicking “Register as a New organization”.

d. goAML Registration Phase Guide – Key considerations to be taken care of while registering on FIU’s goAML Portal:

Select “Registration Type” as Reporting Entity
Mandatory fields marked with (*) must be completed
Accurately furnish organizational details and the details about the Compliance Officer
If you face any issues while registering, you can write to us at info@amluae.com and in case of any Portal related issue, write to goAML@uaefiu.gov.ae

e. Wait for email confirmation about the approval of your registration application, and you will get a unique “Org ID”, which is each organization’s unique goAML identity number.

UAE FIU goAML Registration Approval

The registration applications submitted on UAE the FIU’s goAML Portal are approved by the organization’s Supervisory Authorities in the UAE. Some of the examples of such supervisory authorities include:

Central Bank of the UAE
Ministry of Economy and Tourism
Ministry of Justice
Capital Market Authority
Virtual Assets Regulatory Authority
Dubai Financial Services Authority
Financial Services Regulatory Authority
General Commercial Gaming Regulatory Authority

What should I do if I do not receive an email OTP for my goAML Pre-registration request?

Firstly, confirm whether email ID – no-reply.sacm@uaefiu.gov.ae has been whitelisted by your IT team. Also check your spam or junk emails.

If not received, write an email to goaml@uaefiu.gov.ae, with a request to resend the email OTP for the purpose of SACM login on the goAML Platform.

What if a business in UAE fails to Register in goAML?

Is goAML registration mandatory?

All Financial Institutions, VASPs and DNFBPs must register on the UAE FIU’s goAML Portal.

The failure to register on goAML Portal is a failure on the part of the regulated organization to implement necessary procedures to detect and “Report” suspicious transactions related to money laundering or terrorism financing.

What is the penalty for failure to register on the goAML portal?

Failure to register on the goAML portal, the FIU’s electronic reporting system, is an administrative violation. The fine is between AED 50,000 and AED 200,000.

This is set out in Cabinet Resolution No. 71 of 2024 (Violation 23), which gives effect to the registration obligation under Article 17(1) of Federal Decree-Law No. 10 of 2025 and Article 20(2) of Cabinet Resolution No. 134 of 2025. The fine can be doubled for repeat violations, and it does not prevent the supervisory authority from imposing further measures such as licence suspension.

Note that registering on goAML is separate from registering on the EOCN sanctions screening system, which carries its own penalty of AED 50,000 to AED 1,000,000.

Anti Money Laundering Registration and Subsequent Access to UAE goAML Portal

How do you log in to the goAML portal in the UAE?

Once registered successfully, you can access the UAE FIU goAML portal for your reporting purposes by navigating to the goAML Login URL: https://services.uaefiu.gov.ae/goaml/

Sign-in to this pop-up using the username received post-SACM registration, and your Password would be the 6-digit code appearing on the Google Authenticator.

How to register as a “Person” on the UAE goAML Registration Portal?

Once the regulated organization is registered on the goAML Portal, new users can be added. For this, the person intending to access the organisation’s goAML Portal must first register on the goAML Portal.

Registration on goAML Portal as a “New User”

Following the below-mentioned steps for registering on the goAML Portal as a new user:

1. The new user must register on the SACM Portal by navigating https://services.uaefiu.gov.ae/sacm/registration.php

2. Upon approval of the SACM application or goAML pre-registration, the user will get an email for Username and Security Key

3. Download the Google Authenticator application on the mobile device and set up the app using Secret Key received

4. Access https://services.uaefiu.gov.ae/goaml/

5. Upon Sign In, you will be directed to the goAML homepage.

6. Initiate the registration by clicking “Register as a New Person”.

7. The application for accessing the goAML Portal as a “new user” will be sent to the Compliance Officer of the organization (an ADMIN user for the organization’s goAML Portal access), who shall approve the new user request.

Key considerations to be taken care of while registering on FIU’s goAML Portal as a “New Person”:

Capture the “Organization ID” accurately to access your organization’s goAML Account
Mandatory fields marked with (*) must be completed

Approval of the “New User” Request by the Compliance Officer on the goAML Portal

Upon accessing goAML Portal, the Compliance Officer will be directed to the homepage.

1. Login https://services.uaefiu.gov.ae/goaml/

2. The Compliance Officer shall navigate the “ADMIN” menu and select “User Request Management” from the dropdown list.

3. The “User Change Request” page shall be displayed, and the Compliance Officer should click “Preview“ to verify the details

4. The Compliance Officer can approve or reject the new use request and may also add the comments for rejection, if any.

5. Upon finalisation of the request by the Compliance Officer, the user will get an email notification on the registered email ID.

Setting Access Rights for Users on the UAE goAML Portal for registered Reporting Entity?

The Compliance Officer of the reporting entity can specify the roles (as ADMIN or as USER) of various users on the goAML Portal, as under:

a. Login https://services.uaefiu.gov.ae/goaml/

b. Navigate the “ADMIN” menu and select “User-Role Management” from the dropdown list.

c. Select the user from the available list and specify the role for the person

The Compliance Officer can also create more roles, apart from ADMIN and USER, if required, by selecting “Role Management” option from the “ADMIN” menu.

Now, the Compliance Officer can add any new roles for the users and specify the corresponding access rights by clicking on “Add a new role for this entity” button.

How to disable an active user on the UAE goAML Portal?

The ADMIN user of the organization’s goAML Account can disable an active use, by clicking on “Disable” icon, as under:

I have forgotten my Password for the UAE goAML Portal. How do I reset it?

The goAML Portal Password can be reset as under:

1. Click on “Forgot Password” button

2. A pop-up will be provided to capture Username and Email ID (registered with goAML Portal)

3. An email shall be received on the registered email ID capturing the link to set a new Password.

I have forgotten my Username for accessing the UAE goAML Portal for 2nd Stage registration. How do I retrieve my FIU UAE goAML Login ID?

To retrieve the forgotten FIU UAE goAML Login Username, write an email to goAML Support Team on goaml@uaefiu.gov.ae, capturing the following information:

Name of the organization
Organization ID
First and last name as registered on the goAML Portal
Registered Email ID
Emirates ID and Passport Number
Date of Birth
Nationality

Do I get UAE FIU goAML Registration Certificate?

The Financial Institutions, Virtual Asset Service Providers, and Designated Non-Financial Businesses and Professions have to register with the UAE FIU goAML system.

Once registered, the FIU UAE will share an email confirming the approval of the registration.

What is the UAE FIU goAML Contact Number?

goAML helpdesk contact number is: +971 2 6915599.

You may also contact goAML helpdesk by email: contact@uaefiu.gov.ae.

How do I update the changes in the organizational details on the UAE goAML Portal?

The Compliance Officer can update the changes in the organizational details as under:

a. Login https://services.uaefiu.gov.ae/goaml/

b. The Compliance Officer shall go to the “My goAML” menu and click on “My Org Details” from the dropdown list.

c. The Compliance Officer can now update the details like –

Organization name and address
Incorporation number
Nature of business activities
Website, Email ID and Contact number
Contact Person

d. Upon submission of the change details, the Supervisory Authority will verify and approve these changes. The Compliance Officer shall get an intimation for the approval by way of email on the registered email ID.

How do I deregister from the UAE FIU goAML Portal?

goAML Deregistration Procedure:

Write an email to aml@economy.ae and cc it to goaml@uaefiu.gov.ae
Include the following information in your goAML deregistration email:
- goAML Registration Number
- Entity Name
- Individual Name
- Supervisory Body
- Date of Cancellation of Trade License
Attach your Trade License copy and Clearance Certificate issued by the relevant authority

You should received goAML Deregistration email conformation shortly.

How to access goAML message board?

To access the goAML message board, log in to the goAML portal and select message board from the menu bar. You will be able to see the inbox. Further, the messages can only be exchanged between a registered entity and the FIU.

Five reasons goAML registrations get rejected, and how to avoid them

Across 200-plus advisory engagements, most rejected or delayed registrations trace back to the same handful of avoidable errors:

Reason	What goes wrong	How to avoid it
Wrong registration type	Entity selects Stakeholder instead of Reporting Entity	Always select Reporting Entity for FIs, DNFBPs, and VASPs
Mismatched supervisory authority	The chosen authority does not match the licence	Confirm your supervisor before submitting
Documents not merged	Files uploaded separately and rejected	Merge all documents into a single PDF
Licence number entered in the wrong field	Registration number captured instead of the trade licence number	Enter the licence number exactly as on the trade licence
OTP expired	The 24-hour email OTP lapses before use	Complete the step the same day you receive it

How to change MLRO in goAML?

In order to change MLRO in goAML, the new MLRO needs to register as an individual using the same organisation ID.

The regulator will then approve the newly registered MLRO, and then the new MLRO needs to inform the support team of goAML – goaml@uaefiu.gov.ae to deactivate the old MLRO and activate him as the new MLRO.

How AML UAE Can Help with goAML Registration

Navigating goAML registration and AML compliance requirements in UAE can be complex. AML UAE provides end-to-end support to help regulated entities register efficiently and remain compliant with AML/CFT and CPF requirements. AML UAE helps with:

Identifying goAML registration requirements
Preparing and reviewing required documentation
Assisting with SACM and goAML portal registration
Supporting ongoing reporting obligations such as SAR/STR filings
Advising on AML/CFT policies, procedures, and risk assessments

With expert AML consultants for support, businesses in UAE can avoid common goAML registration and reporting errors, reduce delays, and ensure compliance with regulatory requirements.

FIU UAE goAML Registration Step-by-Step Guide

Download UAE goAML registration guide: UAE Financial Intelligence Unit (FIU)

FIU UAE goAML Registration Step-by-Step Guide: Video

UAE’s Financial Intelligence Unit (FIU) launched a new anti-money laundering platform called goAML in UAE with the aim to regulate and control organized financial crimes.

goAML registration is the process that financial institutions and designated non-financial businesses and professions (DNFBPs) must follow to register on the goAML system. It includes registration on the goAML portal’s protection system (SACM) followed by registration on the goAML system.

goAML is an integrated system used to fight against money laundering and terrorism financing. The United Nations Office on Drugs and Crime (UNODC) built this system. All financial institutions and DNFBPs required to comply with AML guidelines are supposed to register on this platform.

To register for anti-money laundering in UAE, relevant entities must register into the FIU goAML system. This system collects data on the SAR, STR, REAR, DPMSR, HRC, HRCA, CNMR, and PNMR submitted by entities.

Visit https://services.uaefiu.gov.ae/ Systems >> GOAML
Login using username received from no-reply.sacm@uaefiu.gov.ae &Google Authenticator Passcode as the password
Login using the username and password created at the time of registering on goAML Portal

In response to money laundering and terrorist financing, the goAML application is available to more than 60 member states of the United Nations Office on Drugs and Crime (UNODC) through their country FIUs.

goAML collects data on suspicious transaction reports, Dealers in Precious Metals and Stones Report (DPMSR) and other reports from country-specific FIUs, evaluates them, disseminates intelligence reports to relevant authorities and exchanges reports or data with other global authorities.

For goAML Login, click on link: https://services.uaefiu.gov.ae/ for goAML login. Then click on Systems, click on goAML, then provide your Username and the Google Authenticator Passcode as the Password. Click Sign In. You will now be redirected to the goAML UAE homepage. Now, click the Login button and provide the Username and Password created at the time of registering on the goAML portal and click login.

UAE Financial Intelligence Unit (FIU) is empowered to receive Suspicious Transactions Reports (STR), Suspicious Activity Reports (SAR), Dealers in Precious Metals and Stones Report (DPMSR), Real Estate Activity Report (REAR) via a portal specifically maintained for the purpose viz., goAML. DNFBPs and FIs in UAE are required to file these reports with goAML UAE.

DNFBPs in UAE have to register with the goAML portal and provide all mandatory information and supporting documents. The FIU UAE will verify this information and send an email notifying the approval of the registration.

1. If you ever forget your UAEFIU goAML login password, hit forget password button as highlighted below:

2. It will pop up the reset password request window. You need to enter your user name, registered email, CAPTCHA, and hit submit

3. You will receive a link on your registered email which will help you reset your UAE goAML password

In order to update organization detail, the registered user needs to login to the UAE FIU goAML portal, go to the My goAML Menu, and then click My Org Details Menu.

Here, the user can update information like business name, licensed activity, incorporation number, email, website, contact person, telephone number, and address.

The supervisory authority will verify the information, and upon approval, an automated confirmation email will be sent to the organization’s registered email.

Registering for goAML in the UAE involves pre-registration on the SACM portal, where documents such as the trade license, the MLRO’s ID, and the authorisation letter are uploaded, after which the email containing the goAML login credentials is received. The goAML website can be logged in to using credentials received from SACM and Google Authenticator, and registration as a new organisation can be completed.

If you are not receiving emails from CBUAE’s goAML system, make sure you have white-listed the emails no-reply.sacm@uaefiu.gov.ae and no-reply.goaml@uaefiu.gov.ae.

Yes, delegating your CBUAE FIU goAML reporting responsibilities to third parties is possible. You may outsource goAML reporting responsibilities for STR, SAR, DPMSR, REAR, etc., to external parties, but it is recommended that such parties create an account on the goAML portal before providing such services.

The admin user of the goAML portal should click the change Selected Delegating Organization, provide the Organization ID associated with the delegated party, and submit the request. The supervisory authority will verify the information and approve the change.

Yes, you can. Navigate to My goAML menu and make the required changes. The admin user of your organization must approve the change in email, and then the supervisory authority will verify the information and approve the change.

You need to click the preview button before submitting an STR/SAR/DPMSR/PNMR/CNMR/REAR and then click the print button to print the report.

The CBUAE FIU goAML registration in UAE is approved by the respective regulator or supervisory body.

The goAML Message Board facilitates communication between the FIU UAE and the goAML users. The reporting entities can come to know of the status of their submitted reports immediately through the message board. The FIU also requests its information requirement through the message board. The goAML message board is not specific to a particular user, but it is for the reporting entity as a whole.

The United Nations Office on Drugs and Crime (UNODC) developed the goAML software. It is an integrated system for Financial Intelligence Units to receive, analyse, and distribute Suspicious Transactions Reports (STRs) in an efficient way. The UAE is the first country in the Gulf to adopt this modern STR reporting system.

UNODC is the United Nations Office on Drugs and Crime. You can reach UNODC at https://www.unodc.org/

The goAML portal is maintained by the FIU UAE. For all IT and technical related issues, please send an email to goAML@uaefiu.gov.ae

One can contact the FIU UAE on +971 2 6915599, email: contact@uaefiu.gov.ae.

One needs to register with the UAE FIU goAML portal. The detailed guide for FIU registration process is available here: https://amluae.com/goaml-registration-guide/

goAML is a communication medium between the reporting entity and the Financial Intelligence Unit (FIU). All the suspicion reports and reporting of designated transactions prescribed under AML/CFT regulations will be reported via the goAML Portal. So to submit these reports, a reporting entity shall initially have to register with the goAML.

Failure to register on the goAML portal, the FIU’s electronic reporting system, is an administrative violation. The fine is between AED 50,000 and AED 200,000.

All FIs, DNFBPs & VASPs must register on the goAML portal and implement the policies and procedures to identify and report any suspicious transactions related to money laundering or terrorism financing.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Reach Out to Pathik

Supplemental Guidance for Lawyers, Notaries, and Other Legal Professionals in the UAE

Pathik Shah — Wed, 17 Jun 2026 06:02:16 +0000

Last Updated: 06/18/2026

Protect your business with reliable and effective AML strategies with AML UAE.

Legal Professionals Guidance in Nutshell

Lawyers, notaries, and other independent legal professionals in the UAE are classified as Designated Non-Financial Businesses and Professions (DNFBPs) under Cabinet Resolution No. 134 of 2025 when they prepare or carry out transactions for clients involving:

buying or selling real estate;
managing client money, securities or other assets;
managing bank, savings or securities accounts;
organising contributions for the creation, operation or management of companies; or
creating, operating or managing legal persons or arrangements, including buying and selling business entities.

When acting in these capacities, they must:

register on goAML;
conduct risk-based customer due diligence;
screen against the UAE Local Terrorist List and UN Consolidated List;
file Suspicious Transaction Reports without delay through goAML;
appoint an MoJ-approved Compliance Officer;
retain records for five years; and
implement AML/CFT/CPF policies, training, and independent audit.

If you run a law firm, work as a legal consultant, or operate a notary practice in the UAE, you have a specific set of anti-money laundering (AML) obligations that go beyond what most people assume. The Ministry of Justice (MoJ) has issued guidance, grounded in Federal Decree-Law No. 10 of 2025, that spells out exactly what is expected of legal professionals.

This article covers what inspectors actually look for when they inspect law firms, the most common gaps we see during compliance reviews, real-world scenarios, and a self-assessment checklist at the end. Whether you are a senior partner, a newly appointed compliance officer, or a fee earner who simply wants to understand your personal obligations, this guide is for you.

What this article covers:

Why legal professionals are classified as DNFBPs and what that means in practice
The legal framework that applies to your firm right now
Risk assessment: what it means and how to do it properly
Customer due diligence: the rules, thresholds, and how to apply them
Enhanced due diligence: when it applies and how deep you need to go
Suspicious transaction reporting: your personal obligation and timeline
Sanctions screening: the EOCN, UNSC, and UAE Cabinet lists
Proliferation financing: an often-overlooked obligation
Compliance officer appointment: conditions and responsibilities
Recordkeeping, training, and penalties
A compliance readiness self-assessment table

What Is a DNFBP and Why Does It Include Legal Professionals?

DNFBP stands for Designated Non-Financial Business or Profession. The term was developed by the Financial Action Task Force (FATF) to capture sectors outside banking that can still be used to launder money or finance terrorism. In the UAE, this category is defined in Federal Decree-Law No. 10 of 2025 and its executive regulations issued under Cabinet Resolution No. 134 of 2025.

Lawyers, notaries, and other independent legal professionals fall into the DNFBP category, but only when they are performing specific types of work on behalf of clients. This is a critical distinction.

Activity	Does it trigger AML obligations?
Buying or selling real estate on behalf of a client	Yes
Managing client funds in a client account	Yes
Managing a client’s bank, savings, or securities account	Yes
Setting up a company, trust, or other legal arrangement for a client	Yes
Buying or selling a business on a client’s behalf	Yes
Organising capital contributions for a business	Yes

The key takeaway here is that your AML obligations attach to the transaction, not the relationship. A client you have known for 20 years still needs to go through due diligence if you are handling their property purchase or company formation.

The Legal Framework: What Laws Apply to Your Firm Today

The UAE overhauled its AML legal framework in 2025. Two instruments now form the foundation of everything:

Primary Law: Federal Decree-Law No. 10 of 2025 on AML/CFT/CPF
- Effective 14 October 2025. This replaces the previous 2018 legislation.
- Defines money laundering, terrorism financing, and proliferation financing offences.
- Sets out the obligations of DNFBPs, including all legal professionals.
Executive Regulations: Cabinet Resolution No. 134 of 2025 (Executive Regulations)
- Effective 14 December 2025.
- Provides detailed rules on CDD, enhanced due diligence, third-party reliance, compliance officer requirements, and reporting.

Important: Do not rely on pre-2025 guidance

Any AML policy, procedure, or training material your firm produced before October 2025 must be reviewed and updated. The 2018 and 2019 primary legislation has been superseded. The core framework is now Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. However, a number of supporting instruments remain operative and should not be discarded, including Cabinet Decision No. 74 of 2020 (TFS obligations), Cabinet Decision No. 71 of 2024 (administrative penalty schedule), Cabinet Decision No. 65 of 2024 (MoJ AML Department), and Minister of Justice Decision No. 248 of 2025 (supervisory procedures). If your compliance officer is using the old primary legislation as their reference, your firm is already out of date.

The Ministry of Justice (MoJ) is the designated supervisory authority over lawyers and notaries in the UAE, including entities in free zones and financial free zones. This was established by Cabinet Decision No. (3/1 W) of 2019 and reinforced under the current framework.

Within the MoJ, the Anti-Money Laundering and Counter-Terrorism Financing Department carries out inspections, issues guidance, maintains a database of compliance officers, imposes administrative sanctions, and liaises with the Financial Intelligence Unit.

Is your AML/CFT framework anchored to the 2025 legislation?

NIYEAHMA provides AML compliance gap assessments for law firms and legal consultancies in the UAE, benchmarked against Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025.

Risk Assessment: The Foundation of Everything

The risk assessment is not optional, and it is not a one-time exercise. Every law firm and legal consultancy in the UAE must identify, assess, and document the money laundering and terrorism financing risks it faces, and must update this assessment periodically. The MoJ can request your written risk assessment at any time.

Why does a risk assessment matter?

Think of it this way: your risk assessment is the document that justifies every other decision you make in your compliance programme. If you apply enhanced due diligence to a particular client, the reason should trace back to your risk assessment. If you decide simplified due diligence is appropriate in a specific situation, the logic must be documented in writing.

Without a credible, up-to-date risk assessment, your entire compliance programme is built on sand. The MoJ inspection team will look for it first.

The risk dimensions you must assess

The framework requires you to assess risk across three categories:

Risk Dimension	What you need to assess
Client risks	What types of clients do you serve? Are any in high-risk categories: PEPs, non-residents, clients with complex ownership structures, clients who prefer non-face-to-face interaction, or clients from high-risk countries?
Geographic risks	Where do your clients operate? Where does money move to and from? Are any jurisdictions identified by FATF, MENAFATF, the UAE National Committee for Combating Money Laundering, or other competent UAE authorities as high-risk or subject to enhanced monitoring?
Service and delivery channel risks	Which of your services are most vulnerable to misuse? Are you delivering services remotely without identity verification safeguards? Are clients using intermediaries or agents to avoid direct contact with your firm?

Scoring your risks

Once you have mapped your risks across these three dimensions, you need to assign a risk level to each: high, medium, or low. You then overlay the controls you already have in place and identify residual risk. Residual risks that fall outside your current controls require additional mitigating action.

This should be a written document, reviewed and signed off by senior management, and updated at least annually or whenever there is a material change to your client base, services, or operating environment.

“The most common misunderstanding I see in law firms is the assumption that because they are lawyers, they are automatically covered by legal professional privilege and do not need AML systems. That is wrong. Privilege protects certain communications. It does not exempt you from CDD, screening, or reporting obligations when you are handling a triggering transaction. The MoJ’s inspection regime is specifically designed to test whether firms understand this line.”

Pathik Shah - CAMS, FCA, CISA | Founder and Principal Consultant, NIYEAHMA Consultants LLP

Does your risk assessment reflect your firm as it operates today?

NIYEAHMA helps UAE law firms build, review, and maintain risk assessments that are inspection-ready and proportionate to their actual operations.

Customer Due Diligence: The Rules, Thresholds, and How to Apply Them

Customer due diligence (CDD) is the process of identifying who you are dealing with, understanding the nature of your relationship with them, and verifying that the information they have given you is genuine. It is not just an onboarding exercise. It continues throughout the relationship.

When is CDD required?

CDD must be applied in the following circumstances, without exception:

When establishing a new business relationship with any client
When there is any suspicion of criminal activity, regardless of the amount
When you have doubts about the accuracy or completeness of the identification data you have already collected

What does CDD require you to collect?

The requirements differ depending on whether your client is an individual or a company.

Client Type	What to collect and verify
Natural person (individual)	Full name as per valid identity card or passport (certified copy attached). Nationality. Address and place of birth. Employer name and address. Confirmation of whether the individual is a Politically Exposed Person (PEP) to obtain senior management approval for onboarding.
Legal person (company)	Name, legal form, and articles of incorporation. Registered address or principal place of business. If foreign entity: name and address of UAE legal representative. Memorandum of association or equivalent, approved by the competent UAE authority. Names of senior management.
Legal arrangement (trust etc.)	Identity of trustee, settlor, and equivalent roles. Identity of beneficiaries or classes of beneficiaries. Identity of any person exercising ultimate effective control.

Identifying the beneficial owner: the 25% rule

For companies, you must identify the natural person who ultimately owns or controls 25% or more of the entity. If that person cannot be identified, or if the controlling shareholder is not the true beneficial owner, you must identify the natural persons holding senior management positions instead.

Do not stop at the first layer of ownership. If your client is a holding company owned by another holding company, you need to work through the structure until you reach the natural person at the top.

What if CDD cannot be completed?

This is a hard rule: if you cannot complete CDD, you cannot take on the client, you cannot proceed with the transaction, and you cannot continue an existing relationship. In addition, you must consider filing a Suspicious Transaction Report (STR) with the Financial Intelligence Unit via the goAML system. Not completing CDD is not a neutral outcome. It triggers a reporting obligation.

Enhanced Due Diligence: When Standard CDD is Not Enough

Enhanced due diligence (EDD) applies when you are dealing with higher-risk clients or transactions. It means doing more: collecting more information, verifying it more rigorously, updating it more frequently, monitoring the relationship more intensively, and obtaining senior management approval before proceeding.

High-risk clients: who they are

The following client types are considered high-risk by default and require EDD:

Clients from countries identified by FATF, MENAFATF, the UAE National Committee for Combating Money Laundering, or other competent UAE authorities as high-risk or subject to enhanced monitoring
Non-residents who do not hold a valid UAE identity document
Clients with complex ownership structures that make it difficult to identify the beneficial owner
Clients conducting large cash transactions
Clients conducting complex transactions with unclear economic or legal purpose
Clients transacting with unknown third parties
Clients who refuse face-to-face interaction and cannot be verified through other robust means
Politically Exposed Persons and their immediate family members and close associates
Any client whom the lawyer reasonable determines to present high risk

Politically Exposed Persons (PEPs): a closer look

A PEP is any person who holds or has held a prominent public function, including heads of state, senior politicians, senior government officials, senior judiciary or military officers, senior executives of state-owned enterprises, and senior officials of international organisations. The definition also extends to their immediate family members and known close associates.

When you identify a PEP in your client base, you must:

Take reasonable steps to identify the source of their funds and their wealth
Assess the legitimacy of that source, including their professional and financial background
Obtain senior management approval before establishing or continuing the relationship
Apply enhanced ongoing monitoring throughout the relationship

For domestic PEPs and former international organisation officials, EDD applies only when the relationship is classified as high-risk. But given the inherent nature of PEP relationships, that threshold is almost always met in practice.

High-risk countries: where to find the lists

The FATF publishes two lists: the ‘black list’ of countries subject to a call for action, and the ‘grey list’ of countries under increased monitoring. Both are updated regularly. In addition, the National Committee for Combating Money Laundering publishes its own guidance on high-risk jurisdictions. You should check both the FATF list and the UAE national list before establishing any relationship involving a foreign jurisdiction.

Simplified due diligence: when is it allowed?

Simplified due diligence (SDD) is only permitted for clients you have assessed as low-risk, based on a documented risk assessment. It allows you to verify identity after the relationship starts (rather than before), update information less frequently, and reduce the intensity of ongoing monitoring.

SDD is never allowed when there is any suspicion

Even a single indicator of suspicious activity removes the option of applying simplified due diligence. If your compliance officer spots a red flag, SDD must stop immediately, standard or enhanced CDD must be applied, and the suspicious transaction must be reported. There is no middle ground.

Need help building your CDD and EDD procedures?

NIYEAHMA has designed CDD and EDD frameworks for law firms across the UAE, calibrated to the MoJ's inspection criteria and the 2025 regulatory framework.

Suspicious Transaction Reporting: Your Personal Obligation

Reporting suspicious transactions is one of the most serious obligations in the AML framework. It is not limited to your compliance officer. Every lawyer and member of staff in your firm has a personal obligation to report internal suspicions to the compliance officer. The compliance officer then decides whether to file an STR externally via goAML.

What counts as suspicious?

A suspicious transaction is any dealing involving funds that you suspect, or have reasonable grounds to suspect, are connected to a crime, terrorism financing, or proliferation financing. The suspicion does not need to be proven. It does not need to reach a specific value. It can relate to a transaction that was attempted but never completed.

Suspicion can arise from:

The pattern or structure of transactions that seems unusual for the client
Information gathered during the CDD process that does not add up
A client who is evasive about the purpose of a transaction or the source of funds
A transaction that has no obvious legitimate economic or legal purpose
A client who is on or connected to a sanctions list

The tipping-off prohibition

Once a suspicion has been identified and reported internally, you must not tell the client that they have been reported or that a report is being prepared. This is the tipping-off prohibition. Breaching it is itself a criminal offence. The only thing a lawyer can do without breaching this prohibition is attempt to dissuade a client from engaging in unlawful conduct, which is not considered disclosure.

The timeline: what 'without delay' means

The regulations require STRs to be submitted ‘without delay.’ In practice, this means:

Every member of staff must report internal suspicions to the compliance officer immediately upon identifying them
The compliance officer must file the external STR via goAML at the moment they determine that the suspicion is genuine and reportable

There is no grace period. If you know, you report. Sitting on a suspicion for days while waiting to gather more evidence is not compliant behaviour.

The legal professional privilege exemption

Lawyers are exempt from the STR obligation only when the information giving rise to the suspicion was obtained in the course of assessing the client’s legal position, or when defending or representing the client in judicial proceedings, arbitration, or mediation. This exemption applies before, during, and after those proceedings.

Critically, this exemption does not apply to the CDD obligation, the sanctions screening obligation, or the obligation to maintain records. It only applies to the STR reporting obligation in the specific privileged contexts described above.

Not sure whether to file an STR? Let us help.

NIYEAHMA provides confidential advisory support to compliance officers at law firms facing STR decisions, including red flag analysis and goAML filing guidance.

Targeted Financial Sanctions and Sanctions Screening

Sanctions compliance is not the same as AML compliance. It is a parallel obligation, and the consequences of missing a sanctions match are severe. Every UAE law firm must screen its clients, beneficial owners, counterparties, and transaction parties against two sets of lists.

The two applicable lists

The UAE Domestic Terrorism List: Issued by the UAE Cabinet, this list includes individuals, entities, and organisations involved in or connected to terrorist activities.
The UN Security Council Consolidated Sanctions List: Maintained by the United Nations, this list covers individuals and entities designated for activities threatening international peace and security, including terrorism and weapons proliferation.

Both lists are accessible through the Executive Office for Control and Non-Proliferation (EOCN) at https://www.uaeiec.gov.ae/en-us/. Register on the EOCN platform to receive email notifications whenever the lists are updated.

The freezing obligation

If you identify a match during screening, you must freeze the client’s assets immediately, without notice to them.

You must also establish internal policies that prohibit staff from informing the matched individual or any third party that a freeze is being implemented.

Who must be screened, and when?

Screening should be applied to:

All existing clients in your database
All new clients before onboarding
All prospective clients before any serious engagement
Beneficial owners of all clients
All individuals and entities with direct or indirect relationships to your clients
All parties to any transaction you are handling

Re-screening must be triggered whenever a new name is added to either list. The term ‘without delay’ in this context means within hours of a designation by the UN Security Council or the UAE Cabinet, not within days.

“When we conduct compliance gap assessments for law firms, the first thing we check is whether the firm’s policies are anchored to the 2025 Decree-Law and the 2025 executive regulations. Almost every firm we have assessed in the past year was still referencing the old legislation. The MoJ’s inspection team will check this immediately. Getting your legal references right is not a detail, it is a foundational credibility test.”

Jyoti Maheshwari - Partner, NIYEAHMA Consultants LLP

Countering Proliferation Financing: The Obligation Most Firms Overlook

Proliferation financing refers to the risk that funds, assets, or economic resources are raised, moved, or used to support the development or acquisition of weapons of mass destruction. This includes nuclear, chemical, and biological weapons, their delivery systems, and dual-use technologies that could be exploited for weapons programmes.

It is an area that many law firms have not fully integrated into their compliance programmes. The MoJ guidebook makes clear that this is a standalone obligation, not a subset of AML or CFT.

What are dual-use goods?

Dual-use goods are products with legitimate civilian applications that can also be used for weapons development. If you are acting on a transaction involving goods that could potentially be dual-use, you should request technical specifications, end-use declarations, and end-user information from your client.

This is particularly relevant for law firms acting in trade finance, logistics, and cross-border commercial transactions.

What must your policies cover?

Periodic updating of policies to reflect new proliferation risks and regulatory guidance
Enhanced CDD for clients connected to cross-border transactions involving dual-use materials
Screening against EOCN and UNSC sanctions lists as part of routine onboarding
Staff training on proliferation financing red flags
Documentation of all procedures, with records retained for five years

The EOCN has published a dedicated guidance manual on countering proliferation financing for DNFBPs, available on their website at https://www.uaeiec.gov.ae/en-us/. The MoJ AML Department specifically recommends that law firms review this manual. It is practical, accessible, and directly relevant to the inspection criteria.

Is proliferation financing covered in your AML/CFT/CPF framework?

NIYEAHMA provides CPF risk assessments and policy reviews for UAE law firms, incorporating EOCN guidance and FATF Recommendation 7.

Appointing a Compliance Officer: Conditions, Duties, and the MoJ Approval Process

Every law firm and legal consultancy in the UAE must appoint a compliance officer. This person is the single point of accountability for your AML/CFT/CPF programme. They must be genuinely empowered to perform their role, given access to all relevant information and client files, and supported by senior management.

Who can be appointed?

The compliance officer must meet all of the following conditions:

Be at least 21 years of age
Hold a university or higher institute qualification recognised in the UAE
Possess appropriate competence and experience in AML/CFT
Be fully legally competent, of good conduct and reputation
Have no conviction for a felony or a misdemeanour involving dishonesty or breach of trust

Critically, prior approval from the MoJ Anti-Money Laundering and Counter-Terrorism Financing Department is required before the appointment is formalised. This is not a post-appointment notification. You cannot let a compliance officer start work and then notify the MoJ. Approval must come first.

The eight core duties

Once appointed, the compliance officer’s core duties are:

Monitor all transactions related to potential criminal activity
Review records, assess suspicious transaction indicators, and decide whether to file or retain with documented reasons
Review the firm’s internal AML/CFT/CPF systems and assess their consistency with the 2025 Decree-Law
Evaluate the firm’s adherence to its own policies and recommend improvements
Prepare semi-annual reports for senior management and submit a copy to the MoJ AML Department
Build, implement, and document ongoing training programmes for all staff
Cooperate fully with the MoJ, the FIU, and other competent UAE authorities
Verify suspicious transactions, file STRs, and provide information to authorities as required

Need support for your compliance officer function?

NIYEAHMA provides outsourced compliance officer support, co-sourced arrangements, and training for newly appointed compliance officers at UAE law firms.

Recordkeeping, Training, and Internal Policies

The five-year retention rule

All records related to client due diligence, transaction monitoring, STRs, and business correspondence must be retained for a minimum of five years. The five-year clock starts from the latest of the following events:

Completion of the transaction
Termination of the business relationship
Account closure
Completion of a one-off transaction
Completion of an MoJ inspection
Conclusion of an investigation
Issuance of a final court judgment

Records must be organised in a way that allows data analysis and transaction tracing. They must be made available to the MoJ immediately upon request. This means your record-keeping system needs to be searchable, not just stored.

Training: what the programme must actually cover

Your training programme must go beyond explaining the law. It must cover:

The firm’s own internal policies, procedures, and controls
The specific responsibilities and duties of each category of staff under UAE legislation
How to identify red flags in client behaviour, transactions, and instructions
How to report internally to the compliance officer
Updates on new risks, typologies, and emerging methods of money laundering

Training records must be maintained and made available to MoJ inspectors on request. The MoJ AML Department also runs its own annual training programme, including workshops that are available free of charge. Your compliance officer should be attending these as a minimum.

Looking for AML training designed specifically for UAE law firms?

NIYEAHMA delivers in-person and online AML/CFT/CPF training programmes for law firms and legal consultancies, including staff awareness sessions and compliance officer masterclasses.

Administrative Sanctions and Criminal Penalties: What Non-Compliance Looks Like

Non-compliance with AML/CFT/CPF obligations exposes your firm and your individual staff members to both administrative and criminal consequences. The MoJ inspection regime is active, risk-based, and increasingly data-driven.

The inspection process

The MoJ conducts both desk-based and field inspections. When a violation is identified, the process is:

The MoJ notifies the firm of the alleged violation and sets a deadline for corrective measures and supporting documentation
The MoJ reviews the response and either accepts it or refers a report to the Undersecretary
If referred, a reasoned decision is issued imposing one or more sanctions
The firm is notified of the sanction decision within 20 business days of its issuance

The MoJ can bypass the corrective measures step entirely when: a previously corrected violation recurs, there is clear governance failure, or there is a serious breach of AML/CFT procedures.

The seven types of administrative sanction

Warning
Administrative fine
Prohibition from working in the relevant sector for a specified period
Restriction of the powers of managers found responsible
Suspension of managers found responsible, or request for their replacement
Suspension or restriction of professional practice for a specified period
Revocation of licence

The MoJ may also publish imposed sanctions through media outlets. In a reputation-sensitive sector like legal services, this is a significant deterrent.

The appeal process

A firm can appeal an administrative sanction within 30 business days of notification by submitting a substantiated appeal with supporting documentation to the Minister of Justice. If no response is received within 40 business days of submission, the appeal is deemed rejected. Legal challenge cannot be initiated before the appeal process is completed.

Criminal liability is personal

The criminal penalties under Federal Decree-Law No. 10 of 2025 (Arts. 26–35) apply to individuals, not just firms. A lawyer or compliance officer who knowingly fails to report a suspicious transaction, or who tips off a client, faces personal criminal exposure. AML compliance is not just a firm-level obligation.

“A risk assessment needs to be a living document. I have seen firms spend significant time producing a beautiful risk assessment in year one and then leave it untouched for three years. By the time the inspector arrives, the client base has changed, the firm has expanded into new services, and the assessment no longer reflects reality. The MoJ is increasingly sophisticated in cross-referencing your assessment against your actual client files. Gaps are very visible.”

Dipali Vora - Partner, NIYEAHMA Consultants LLP

Compliance Readiness Self-Assessment

Use the table below to assess your firm’s current compliance status. This is not a substitute for a formal compliance review, but it will give you a clear picture of where your gaps are.

Compliance Requirement	Category	Your Status (tick or note)
Business-wide risk assessment documented and signed off by senior management	Required
Internal AML/CFT/CPF policies, procedures, and controls in place	Required
Compliance Officer appointed and approved by MoJ AML Department	Required
Compliance Officer semi-annual reports submitted to management and MoJ	Required
CDD procedures applied for all clients at onboarding	Required
EDD applied for high-risk clients, PEPs, and high-risk country connections	Required
Sanctions screening against the UAE Local Terrorist List and the UN Security Council Consolidated Sanctions List, with NAS registration on the EOCN platform for list update notifications	Required
goAML account registered and STR reporting channel tested	Required
Records retained for minimum 5 years from transaction completion	Required
Staff AML/CFT training programme documented with attendance records	Required
Proliferation financing risks assessed and addressed in internal policies	Required
Dual-use goods awareness embedded in onboarding and transaction review	Good Practice
Third-party reliance agreements documented with controls	If applicable
Emerging technologies assessed before use in client service delivery	Good Practice

If you find more than three items marked as incomplete or uncertain, your firm should prioritise a formal compliance review before your next MoJ inspection cycle.

Ready to close the gaps?

NIYEAHMA provides full AML compliance reviews for UAE law firms, covering policies, procedures, risk assessments, CDD files, STR records, and training documentation.

Frequently Asked Questions

Below are the questions we hear most often from lawyers, compliance officers, and legal firm staff in the UAE.

Size is not the determining factor. Any law firm, legal consultancy, or individual lawyer who performs triggering activities (such as real estate transactions, company formations, or management of client funds) must comply, regardless of firm size. The principle of proportionality applies to how you implement your compliance programme, not whether you need one.

If your firm performs any of the triggering activities listed in the DNFBP definition (real estate, company formation, management of client accounts, and so on), yes, you need a compliance officer. If your firm is genuinely limited to pure legal advice and litigation representation, take a risk-based approach.

There is no explicit prohibition, but it creates a practical problem. A practising lawyer has client relationships that create conflicts of interest in assessing suspicious transactions. The MoJ expects the compliance officer to be independent in their judgement. For larger firms, a dedicated compliance officer is strongly advisable. For sole practitioners, the role can be self-held, but then proper risk-based controls must be in place.

At a minimum, annually. In addition, the risk assessment must be updated whenever there is a material change: a new service line, a significant change in client demographics, a new jurisdiction entering your practice, a change in the national risk assessment published by the UAE, or a new regulatory requirement. The MoJ will check the date on your risk assessment as one of the first steps in any inspection.

goAML is the electronic platform operated by the Financial Intelligence Unit (FIU) at the Central Bank of the UAE, through which suspicious transaction reports are submitted. Your compliance officer needs to be registered on the system. Registration is done through the FIU’s portal. The MoJ AML Department can assist with guidance on registration. Do not wait until you have a report to file before registering.

Nothing negative happens to you or your firm. The law explicitly provides that no administrative, civil, or criminal liability attaches to a lawyer or their staff for filing a report in good faith. The protection is absolute. Conversely, not filing when you should have creates serious personal and corporate exposure.

There is a specific exemption that allows lawyers to skip verifying the identity of shareholders, partners, or beneficial owners when the client, or its controlling shareholder, is listed on a regulated securities exchange subject to financial supervision and disclosure requirements. This is a narrow exemption and applies to the beneficial ownership verification step only, and the firm is still required to identify UBOs from reliable sources, including stock exchange, corporate registry, etc.

The regulations use ‘without delay’ deliberately rather than specifying a fixed number of hours. In practice, it means immediately upon the compliance officer forming a genuine suspicion. There is no permitted waiting period for additional investigation before filing. If you have reasonable grounds to suspect, you file. Additional information can be provided as a supplementary report.

Share via :

About the Author

Pathik Shah

FCA, CAMS, CISA, CS, DISA (ICAI), FAFP (ICAI)

Reach Out to Pathik

Professional Intermediaries

Pathik Shah — Tue, 16 Jun 2026 10:28:55 +0000

Last Updated: 06/16/2026

Protect your business with reliable and effective AML strategies with AML UAE.

Professional Intermediaries: Briefly

Professional intermediaries such as accountants, lawyers, and TCSPs can facilitate money laundering by introducing layers of professional privilege and corporate opacity between criminal proceeds and the financial system. The UAE FIU Strategic Analysis of May 2025 highlights lawyers, accountants, and corporate service providers within its terrorist-financing facilitator typologies, distinguishing witting from unwitting facilitators. Under Cabinet Resolution No. (134) of 2025, professional intermediaries such as lawyers, notaries, independent legal professionals, independent accountants, real estate brokers, and TCSPs are classified as DNFBPs when they conduct specified activities for clients, and are subject to AML/CFT obligations.

What are Professional Intermediaries?

Professional intermediaries are licensed professionals such as accountants, lawyers, real estate agents, trust and company service providers (TCSPs), and other licensed professionals who are intentionally or unintentionally used by criminals to facilitate money laundering. Their involvement creates a layer of separation between illicit funds and the financial system, making transactions appear legitimate and reducing the likelihood of scrutiny.

Professional intermediaries are categorised as a Typology because the use of a professional’s role, credibility, and infrastructure is itself used as a mechanism of concealment. Funds routed through a lawyer’s client account, a company established by a TCSP, or a property transaction facilitated by an agent can inherit the professional’s legitimacy and be supported by documentation that appears to reflect genuine commercial or legal activity. This enables illicit funds to blend into the financial system under the appearance of legitimate business transactions.

Professional intermediary involvement is not suspicious in itself. Lawyers, accountants, notaries, real estate professionals, and TCSPs perform legitimate and necessary functions, and most engagements have a genuine commercial or legal purpose.

Complex or cross-border structures often have sound reasons, including tax-neutral holding arrangements, succession and estate planning, investment pooling, regulatory licensing, asset ring-fencing, and cross-border joint ventures.

The money-laundering risk arises only where the professional relationship is misused to obscure beneficial ownership, disguise the source of funds, or lend legitimacy to an illicit transaction, particularly where the structure or instruction has no clear commercial rationale.

Enhanced scrutiny is therefore applied on a risk-based basis: enhanced due diligence is triggered by higher-risk indicators in the customer, transaction, structure, jurisdiction, ownership chain, or source of funds, not automatically for every professional firm.

What is professional intermediary risk in money laundering?

Professional intermediary risk arises when lawyers, accountants, TCSPs, real estate professionals, or other advisers are misused to conceal beneficial ownership, move client funds, establish opaque structures, or give illicit transactions the appearance of legitimacy. In the UAE, these professionals may be subject to AML/CFT obligations as DNFBPs when they conduct specified activities for or on behalf of clients.

Are professional intermediaries always suspicious?

No. Professional intermediaries provide legitimate and necessary services. The AML risk arises only when those services are used to conceal the source of funds, beneficial ownership, control, transaction purpose, or the identity of the true client.

Regulatory Framework Related to Professional Intermediaries

The UAE AML/CFT legislative framework imposes a range of compliance requirements on professional intermediaries.

The UAE has established a comprehensive DNFBP classification framework that captures professional intermediaries across multiple sectors. Article 3 of Cabinet Resolution No. (134) of 2025 defines DNFBP to include lawyers, notaries, legal professionals, Independent accountants, TCSPs and real estate agents when conducting various types of financial transactions on behalf of their customers. The framework further, in Articles 5 & 10, outlines the compliance requirements for verifying customer identity and beneficial ownership structure.

Federal Decree Law No. (10) of 2025, Article 18 (1) obligates Financial Institutions, DNFBPs and Virtual Asset Service Providers to file a Suspicious Transaction report when reasonable suspicion arises, regardless of the transaction value. However, Article 18(3) exempts lawyers, notaries, legal professionals, and independent auditors from this obligation only when the suspicious information is obtained under professional secrecy while determining a client’s legal position or representing a client in legal proceedings. This exemption is limited and does not apply when these professionals act in a financial transaction capacity rather than a purely legal advisory role.

Cabinet Resolution No. (71) of 2024 prescribes administrative penalties for DNFBP non-compliance, including maximum penalties of AED 500,000 for STR failures and AED 200,000 for CDD failures, directly applicable to professional intermediaries who fail their AML/CFT obligations.

Regulatory Reference

Federal Decree-Law No. (10) of 2025, Article 18 — STR Obligation and Professional Secrecy Exemption; Cabinet Resolution No. (134) of 2025, Article 3,5,10,17 — DNFBP Scope

Primary Authority in the UAE

The Ministry of Economy and Tourism (MOET) supervises AML/CFT compliance for DNFBPs, including accountants, real estate agents and TCSPs.

The Ministry of Justice (MoJ) supervises lawyers, notaries and legal professionals.

The UAE FIU, established under Federal Decree-Law No. (10) of 2025, Article 11, within the Central Bank of the UAE, receives all suspicious transaction reports via goAML from all DNFBPs, including professional intermediaries.

Reporting or Compliance Obligations and Channels of Professional Intermediaries

Professional intermediaries classified as DNFBPs must file STRs without delay via goAML, in accordance with Federal Decree-Law No. (10) of 2025, Article 18, whenever they carry out financial transactions and have reasonable grounds for suspicion. The professional secrecy exemption under clause 3 is limited purely to legal advisory and representation functions and does not apply to financial transaction activities.

Customer due diligence (CDD) as required under Cabinet Resolution No. (134) of 2025, Articles 6 – 9, must be conducted for all clients on whose behalf financial transactions are carried out. Beneficial ownership must be identified in accordance with Article 10, applying the 25% ownership threshold.

According to Article 25, Records must be retained for a minimum of five years. In addition, Entity-wide risk assessments must incorporate UAE FIU intelligence on professional intermediaries as terrorist-financing facilitator sectors under Cabinet Resolution No. (134) of 2025, Article 5.

Beyond reporting, professional intermediaries that are DNFBPs must register on the goAML portal and maintain a standing AML/CFT compliance programme. This includes appointing a qualified Compliance Officer, adopting internal policies, procedures, and controls, delivering ongoing staff training, and arranging an independent audit to test the programme, in line with Cabinet Resolution No. (134) of 2025, Articles 21 and 22.

Screening obligations also apply. Intermediaries must screen clients and beneficial owners against the UN Consolidated List and the UAE Local Terrorist List and apply targeted financial sanctions without delay under Federal Decree-Law No. (10) of 2025, Article 19, including freezing relevant funds and filing the required notifications. They must also identify politically exposed persons (PEPs) and apply enhanced due diligence, such as senior-management approval and source-of-wealth checks, to higher-risk PEP relationships.

Recent Developments, Enforcement Actions, or Supervisory Priorities

The UAEFIU Strategic Analysis on TF Typologies and Facilitators, published in May 2025, based on STR/SAR reporting analysis covering January 2021 to December 2024, recognises lawyers, accountants, and corporate service providers as relevant facilitators within TF risk frameworks, reinforcing the importance of their role in preventive controls.

This is one of the most significant recent regulatory developments for professional intermediaries in the UAE, as it establishes that these professionals are not merely a theoretical risk category but a documented supervisory and risk priority.

In parallel, the NAMLCFTC Joint Guidance on Satisfactory and Unsatisfactory AML Practice has provided clear expectations for professional intermediaries, particularly on improvement in source of wealth verification and beneficial ownership understanding as key areas for enhancement.

What does the term “Professional Intermediaries” Mean?

Think of the role a translator plays in a negotiation between two parties who speak different languages. The translator is necessary, is trusted by both sides, and owns no part of the deal. Professional intermediaries function similarly in money laundering: they sit between the criminal and the financial system, providing the technical capability to structure transactions, establish entities, or advise on ownership, while the professional’s involvement is used as evidence of legitimacy. The criminal benefits from the professional’s credibility; the professional may or may not know the true purpose of the work being commissioned.

Why Professional Intermediaries Matter

Professional intermediaries perform services that can be used to introduce an additional layer of complexity and perceived legitimacy into financial flow. Lawyers, accountants, and corporate service providers are identified as operational intelligence-based risk factors for every stage of the money laundering process based on the UAEFIU strategic analysis.

When funds move through a lawyer’s client account, a TCSP-established company, or an accountant-managed structure, the professional’s involvement may obscure the underlying source of funds. This creates an environment where standard transaction monitoring alone may not penetrate to identify the ultimate beneficial owner or to conclude the legitimacy of the transaction.

As a result, financial institutions and DNFBPs are obligated to question the source of funds and to assess whether the professional is acting in a transactional capacity rather than a purely advisory one, which is both a legal requirement and a compliance necessity.

The consequences of not fulfilling these obligations are significant under Cabinet Resolution No. (71) of 2024, failure to file an STR with the UAE FIU via goAML may attract a penalty of up to AED 500,000; failure to complete the CDD procedure, up to AED 200,000; and failure to perform EDD for high-risk clients, up to AED 500,000.

How Professional Intermediaries Work

How Accountants May Be Misused for Corporate Concealment

Professional intermediaries providing accounting services perform several money-laundering functions beyond the obvious advisory role. They prepare financial statements that support a false revenue narrative for front companies and structure transactions to create the appearance of legitimate commercial income. They also advise on corporate arrangements that obscure beneficial ownership.

When an accountant prepares accounts for a front company without adequately verifying the source of funds, the resulting service product and the certified accounts can serve as evidence that investigators must rebut before the underlying illicit proceeds can be attributed to the company.

How Lawyers' Client Accounts May Be Misused

Lawyers who use client accounts to receive and transfer funds on behalf of clients can create a layer of separation between criminal proceeds and the financial system. Funds held in a lawyer’s client account are nominally maintained on behalf of the client for a legitimate purpose. However, if those funds consist of criminal proceeds, the use of a client account structure inserts the lawyer’s professional identity between the criminal proceeds and the financial system, making the traceability of the criminal origin more difficult.

Financial institutions that suspect funds are linked to illegal activity are required to report their suspicions to the FIU and not disclose the same to the client in accordance with the no-tipping-off obligation of Cabinet Resolution No. (134) of 2025, Article 19.

How Real Estate Professionals May Be Misused to Layer Property Proceeds

Real estate agents who facilitate property transactions for anonymous buyers or corporate entities enable the conversion of criminal proceeds into property assets. Their involvement in the transaction provides an appearance of legitimacy, suggesting that the transaction occurred at a fair market value and followed standard commercial procedures.

DNFBPs are mandated to perform CDD under Federal Decree Law (10) of 2025. Therefore, if the agent fails to conduct adequate CDD to identify the ultimate beneficial owner behind the purchasing entity, a transaction used to conceal the origin of illicit funds appears legitimate due to the agent’s involvement in the transaction.

How TCSP Structures May Be Used to Create Opacity

Trust and company service providers establish legal entities, trusts, and nominee arrangements that allow beneficial owners to hold and control assets without appearing in any public register.

A criminal who instructs a TCSP to establish a series of nested companies across multiple jurisdictions creates a corporate structure whose ultimate ownership is effectively invisible to standard due diligence enquiries.

Each layer of the structure is technically valid; each entity is properly registered; each directorship is properly documented, but the aggregate structure conceals the beneficial owner behind multiple legal barriers.

How Client Accounts Create Financial Distance

The most straightforward professional intermediary money laundering mechanism is the routing of illicit funds through the client account of a professional firm.

The firm receives funds, records them as held on behalf of a client for a specified purpose, and disburses them as instructed. The firm’s account statement shows a transfer from a professional firm, not from the ultimate source of the funds.

Financial institutions that see only the professional firm’s account as the fund source, without looking through to the underlying client, are unable to identify the true beneficial origin of the funds.

Real-World Examples of Professional Intermediaries

The Advisory Fee Layering Scheme

A compliance officer at a private bank reviews an account held by a management consulting firm. The account regularly receives large inbound wire transfers described as “advisory fees” from a foreign company. The consulting firm’s registered address is a shared office, and its declared activities are not consistent with the scale of fees received. The onboarding documentation is minimal.

Further, the investigation reveals that the consulting firm’s accounts have been used to receive proceeds from a commercial fraud scheme conducted in another jurisdiction, with the funds redescribed as “advisory fees” to provide a commercially plausible explanation for large cross-border transfers. The consulting firm is registered by a TCSP on behalf of a beneficial owner who does not appear in any public record.

The detection lesson is that advisory fee payments from offshore companies to professional service firm accounts, particularly where the firm has no verifiable client base or service delivery record, are a documented intermediary layering pattern.

The Nested Corporate Structure

A TCSP client requests the establishment of a holding structure comprising three companies across two jurisdictions, each with a nominee director. The ultimate beneficial owner provides identification to the TCSP but instructs that beneficial ownership information should not be shared with third parties.

The TCSP establishes the structure without adequately assessing whether the request for ownership opacity is commercially justified or is itself a risk indicator. The structure is subsequently used to hold real estate assets purchased with illegal proceeds.

The detection lesson is that requests for nominee director arrangements and confidentiality instructions that extend beyond standard professional privilege may indicate that the structure is being designed for concealment rather than legitimate commercial purposes.

The Real Estate Intermediary

A real estate agent facilitates the sale of a commercial property to a company whose beneficial ownership is held through two offshore holding companies, each administered by a different TCSP.

The agent completes the transaction and receives commission but does not conduct adequate CDD on the beneficial owner behind the purchasing structure, as the purchasing entity presents legal documentation confirming its good standing.

Post-transaction investigation by law enforcement reveals that the funds used to acquire the property were derived from organised crime proceeds. The agent did not file a suspicious transaction report.

The detection lesson is that real estate transactions involving purchasing entities with multi-layer offshore beneficial ownership structures require the agent to look through the corporate veil to identify the ultimate beneficial owner, regardless of the documentation quality at the corporate level.

How Do Criminals Exploit Professional Intermediaries?

Accountants, real estate professionals, and trust and company service providers are the three service provider categories that most frequently appear in professional intermediary money laundering operations.

Accountants are exploited for their ability to certify financial statements and provide the appearance of legitimate revenue.

Real estate professionals are exploited for their access to high-value asset transactions that can absorb large amounts of illicit proceeds in a single deal.

TCSPs are exploited for their ability to establish legal entity structures that conceal beneficial ownership.

The tactic is concealment. Professional intermediaries do not generate illicit proceeds; instead, they provide the services and structures that make already generated proceeds appear legitimate. Their role in the money laundering process is primarily at the layering and integration stages, where they help disguise the origin of illicit funds and facilitate their entry into the legitimate economy.

How Do Professional Intermediaries Facilitate Money Laundering?

Professional intermediaries enable the concealment mechanisms that make illicit proceeds undetectable once they have been placed into the financial system. At the layering stage, client accounts, advisory fee payments, and multi-entity corporate structures create documentary trails that appear legitimate. At the integration stage, the professional’s certification, whether through audited accounts, legal documentation, or property transfer deeds, provides the evidential basis on which the proceeds appear to be clean. The professional’s involvement is not incidental; it is the mechanism of concealment. This is why the UAEFIU identifies professional intermediaries as facilitators rather than merely as passive service providers.

What Are the Red Flags That Identify Professional Intermediaries?

Category	Red Flag Observation
Customer	Professional intermediary advises or instructs clients to structure or conceal transactions to circumvent AML obligations.
Customer	Adverse media reports or public records link the professional or firm to alleged criminal or regulatory violations.
Customer	Professional service provider consistently refuses or fails to provide requested details about the origin or destination of funds.
Customer	Professional intermediary provides minimal due diligence documentation despite routing all transactions through professional accounts.
Transaction	Large advisory, legal, or consultancy fees significantly above industry norms with no evidence of actual services rendered.
Transaction	Multiple or repeated fund transfers through client accounts managed by a professional service provider that lack a legitimate commercial explanation.
Transaction	Rapid in-and-out movement of funds through accounts controlled by a professional intermediary, without any corresponding commercial activity.
Transaction	Rapid succession of fund transfers among accounts linked to the same professional intermediary, accompanied by minimal or absent documentation of the underlying commercial purpose.
Product	Establishment or use of nested corporate entities or trusts with no apparent commercial or economic rationale.
Product	Detected alterations, irregularities, or signs of forgery in documentation prepared by professional intermediaries, such as invoices, contracts, or corporate records.
Channel	All transactions are routed exclusively through professional intermediary channels, preventing direct access to the ultimate beneficial owner.
Customer	Professional intermediary instructs clients to use specific financial institutions or accounts that are outside the client’s normal banking relationships without a legitimate commercial reason.

Which Controls Counter Professional Intermediaries?

Control	What It Disrupts	Detects / Prevents / Deters	Specific Limitation
Enhanced Due Diligence (EDD)	High-risk professional intermediary relationships	Detects source of funds and beneficial ownership inconsistencies during EDD review	EDD is sometimes applied at the professional firm level only, without looking through to the underlying client’s beneficial ownership
Third-Party Risk Management	Use of professional intermediaries as layering vehicles for third-party client funds	Detects intermediary accounts that route funds for multiple unrelated third parties	Professional privilege may limit information sharing between the intermediary and the institution
OSINT and External Source Verification	Adverse media connection between professionals and criminal proceedings	Detects court filings and regulatory actions linking the professional to money laundering facilitation	OSINT coverage of professional disciplinary proceedings and civil cases is inconsistent
Risk-Based Customer Profiling and Segmentation	Misclassification of professional intermediary accounts as low risk	Prevents correct risk classification triggers appropriate monitoring	Professional intermediaries are frequently misclassified as low risk due to their professional credentials
Staff AML Training and Awareness	Failure to apply enhanced scrutiny to professional service firm accounts	Deters — training builds recognition of professional intermediary red flags	Training may focus on end-customer indicators without addressing the specific characteristics of intermediary accounts
Targeted Financial Sanctions (TFS) Screening	Dealings with designated persons and terrorist-financing networks operating through intermediary accounts	Prevents — screening clients and beneficial owners against the UN Consolidated List and the UAE Local Terrorist List blocks prohibited dealings and triggers freezing without delay	Screening relies on accurate beneficial-ownership data; names held behind nominee or nested structures may evade list matching
PEP Screening and Source-of-Wealth Checks	Misuse of intermediary structures to move funds connected to politically exposed persons	Detects PEP involvement and unexplained wealth, triggering senior-management approval and enhanced ongoing monitoring	PEP status may be concealed where the intermediary is the named client and the underlying PEP is not disclosed

How Do AI and RegTech Automate Detection of Professional Intermediaries?

Transaction monitoring platforms can be configured to apply specific alert rules to accounts identified as belonging to professional service firms, law firms, accountancy firms, and TCSPs. Accounts in these categories that exhibit fund-in-fund-out patterns, where inbound and outbound flows are of similar amounts and occur within a short timeframe, without corresponding client engagement documentation, should be flagged for enhanced review.

Network analytics tools are particularly effective in identifying professional intermediary structures because these schemes are often characterised by distinctive network patterns. A professional firm account that routes funds from multiple unrelated source parties to multiple unrelated destination parties is structurally identifiable through graph analysis, even when no individual transaction triggers a threshold-based alert.

Document verification tools can be applied to the contracts, invoices, and corporate records submitted by professional intermediary accounts. It helps identify alterations, inconsistencies, and forgery indicators that can be missed in manual review.

Natural Language Processing tools applied to the text of submitted documents can analyse boilerplate or template language that suggests documents have been generated to support a predetermined transaction narrative rather than to evidence genuine services.

Adverse media monitoring tools that maintain up-to-date feeds from legal regulatory bodies, court filing systems, and financial crime reporting sources can provide early warning of enforcement actions, disciplinary proceedings, or other risk indicators involving professional intermediaries that may hold accounts with the institution.

These tools should support, not replace, human judgment. Because legitimate professional firms routinely handle third-party funds and operate pooled client accounts, intermediary-focused rules tend to generate false positives, and alerts need analyst review before escalation. Firms should govern these systems deliberately, documenting rule logic and alert thresholds, testing and validating models, tuning to manage false positives, and recording escalation and decision rationale so the monitoring framework remains explainable to supervisors.

What Data Should Compliance Teams Collect to Detect Professional Intermediaries?

Data Point	Source System	What It Reveals About Professional Intermediaries
Adverse media and court filings	OSINT platform / external data feed	Links professional firms and named professionals to regulatory actions, criminal proceedings, and disciplinary actions
Contractual and invoice documentation	Document management system	Identifies fabricated or altered commercial documentation submitted to justify advisory fee payments
Company and beneficial ownership registries	Company registry / KYC platform	Identifies beneficial ownership structures, nominee arrangements, and nested entity relationships
Communication records	CRM / secure messaging logs	Identifies patterns of instruction that suggest the professional is directing transactions rather than advising on them
Geographical transaction data	Core banking / geolocation	Maps fund flows to jurisdictions associated with TCSP-facilitated opacity and beneficial ownership concealment
Professional licensing and affiliation databases	External professional registry data	Confirms current registration status of professionals and identifies regulatory warnings or disciplinary actions
KYC and CDD records	KYC platform	Enables periodic reassessment of beneficial ownership consistency behind professional intermediary accounts
Trust information and accounts	Trust register / trust administration records	Identifies trust structures managed by TCSPs for anonymous ultimate beneficiaries
Transaction logs for client accounts	Core banking	Identifies fund-in-fund-out patterns in client accounts held by professional firms
Document verification results	Document verification platform	Identifies altered or forged commercial and corporate documents submitted by intermediary accounts

How Do Professional Intermediaries Aggravate Customer Risk and Jurisdictional Risk?

Professional intermediaries aggravate Customer Risk by introducing a layer of professional privilege and corporate documentation between the service provider and the ultimate beneficial owner of the funds.

When a service provider deals with a professional firm’s client account rather than the end client directly, it becomes difficult to trace the true source of the funds through the standard CDD process.

The involvement of professionals can also create a false sense of reduced risk, as their credentials and registration status provide an apparent risk mitigation, even though the true beneficial ownership is masked.

Professional intermediaries aggravate Jurisdictional Risk by enabling the creation of complex cross-border corporate structures.

These structures involve multiple jurisdictions, with each layer of the structure subject to a different regulatory framework and BO disclosure standard.

As a result, tracing the ultimate beneficial owner becomes challenging, and no single authority or compliance team can fully assess the structure without international cooperation.

How Do Transaction Patterns Reveal Professional Intermediaries?

An account used by a professional intermediary in a money laundering operation exhibits a characteristic pattern: funds received from multiple sources with different stated commercial purposes, aggregated in the professional’s client account, and then distributed to multiple destinations based on the client’s instructions. Each inflow and outflow is accompanied by supporting documentation such as an invoice, a fee agreement, or a corporate resolution that provides a surface-level commercial explanation for the transaction.

The key Indicator is the aggregate pattern of activity rather than any individual transaction. The volume, geographic diversity, and transactional complexity reflected in the account show inconsistency with the legitimate business activities, size and scope of the declared professional.

Additionally, the documentation submitted in support of the transactions frequently contains inconsistencies, boilerplate language, or typographical anomalies that suggest the documents were produced to support the transactions rather than to evidence real commercial activity.

Sectors at Highest Exposure

Sector	Risk Rating	Specific Reasoning
Trust and company service providers	Higher exposure	TCSPs are a primary vehicle for establishing beneficial ownership concealment structures; the UAE FIU highlights trust and company service providers within its TF facilitator typologies
Law firms and legal professionals	Higher exposure	Client accounts can create financial barriers; professional secrecy can create information-sharing obstacles; the UAE FIU highlights lawyers within its TF facilitator typologies
Accountants and audit firms	Elevated exposure	Corporate structure certification and financial statement preparation can support false revenue narratives; the UAE FIU highlights accountants within its TF facilitator typologies
Real estate professionals	Elevated exposure	Real estate transactions are a documented TF fund source in UAE intelligence; property transactions facilitate integration of large illicit proceeds
Notary services	Moderate exposure	Notarial certification of documents and transactions provides legitimacy to intermediary facilitated arrangements

Geographies and Contexts of Concern

Corporate structure establishment as a method is used to move and conceal funds. Lawyers, accountants, and corporate service providers are used as facilitators based on the UAEFIU Strategic Analysis on TF Typologies and Facilitators (May 2025).

Attention should be given to the structures that involve multiple jurisdictions, especially in countries with weaker transparency standards or limited beneficial ownership disclosure requirements. Also, when the structures include entities located in the FATF increased monitoring jurisdictions, the risk increases and AML/CFT obligations are to be followed more severely.

The EOCN TFS Typologies Paper (2021) identifies TCSPs in UAE free zones and nominee director and shareholder arrangements as active TFS circumvention tools. While these structures have a legitimate commercial purpose, they warrant enhanced scrutiny, particularly when those structures serve UAE-based beneficial owners with no commercial rationale for the offshore element.

Best Practices for Professional Intermediaries Risk Management

Apply enhanced due diligence to all accounts held by professional service firms acting in a financial transaction capacity. Cabinet Resolution No. (134) of 2025, Article 9, requires EDD measures for high-risk customers. Professional service firms whose accounts show fund-in-fund-out patterns, large advisory fees without documented evidence of service delivery, or multi-jurisdictional fund routing must be classified as high risk and subjected to EDD regardless of the professional’s regulatory registration status.
Identify the ultimate natural person who owns the corporate entity. Article 10 of Cabinet Resolution No. (134) of 2025 requires the identification of the ultimate beneficial owner using the 25% ownership threshold. For accounts held by professional firms on behalf of clients, institutions must identify the ultimate beneficial owner behind the professional’s client, not merely the professional firm itself.
Conduct OSINT verification of the professional firm and named professionals at onboarding and periodically thereafter. Adverse media screening for regulatory actions, disciplinary proceedings, and criminal investigations involving the professional firm or its named professionals should be conducted during onboarding and at least annually thereafter. The UAEFIU has identified these professionals as a named enforcement priority; therefore, this intelligence must be reflected in monitoring and risk assessment frameworks.
Apply document verification tools to contracts, invoices, and corporate records submitted to justify professional fee payments. Document verification should include analysis of boilerplate language, formatting inconsistencies, and metadata anomalies that indicate documents were architected to support transactions rather than to evidence genuine services.
Configure transaction monitoring systems to detect fund-in-fund-out patterns in professional service firm accounts. Professional intermediary accounts that show inbound and outbound flows of similar amounts within close timeframes, without corresponding commercial activity, should trigger enhanced monitoring alerts. This pattern is not captured by standard threshold-based monitoring rules.
Assess whether the professional is acting in a financial transaction capacity or a purely advisory capacity before applying the professional secrecy exemption. Federal Decree-Law No. (10) of 2025, Article 18, limits the professional secrecy exemption to genuine legal advisory and representation functions. Professional intermediaries who manage client funds, establish companies, or execute property transactions are acting in a financial transaction capacity and are not exempt from STR obligations for those activities.
Train compliance staff on the specific red flags regarding professional intermediary involvement. Staff training must specifically address the indicators that distinguish legitimate professional service firm accounts from intermediary layering accounts, including the advisory fee anomaly, the fund-in-fund-out pattern, and the nested corporate structure indicators. Generic AML training that does not address the professional intermediary context is insufficient.
File suspicious transaction reports without delay when professional intermediary red flags are confirmed. Federal Decree-Law No. (10) of 2025, Article 18, requires immediate filing without delay. The professional registration of the account holder does not reduce the STR obligation. An account held by a registered law firm or accountancy practice is subject to the same STR threshold as any other account.
Integrate the UAEFIU May 2025 intelligence finding into the entity-wide risk assessment. The UAE FIU’s identification of lawyers, accountants, and corporate service providers among its TF facilitator typologies is material intelligence that should be reflected in regulated entities’ risk assessments under Cabinet Resolution No. (134) of 2025, Article 5. Failure to integrate this intelligence into the EWRA is a separately penalised compliance failure.
Retain all professional intermediary investigation records for a minimum of five years. Article 25 of Cabinet Resolution No. (134) of 2025 requires retention of all CDD, transaction, and STR records for a period of five years. In the context of professional intermediary investigations, all document verification results, OSINT reports, and internal escalation documentation must be preserved.

Related Terms and Concepts

Professional intermediaries connect to a wide range of AML typologies because their service offering navigates the full money laundering process. They are used in the placement stage to certify false business revenue, in the layering stage to create fund routing documentation, and in the integration stage to establish the corporate and property structures through which proceeds become assets.

Understanding the professional intermediary typology requires understanding the specific financial products and services each profession offers to criminals.

Related Term	Connection
Shell Companies	Construction and management by TCSPs are the primary mechanism for beneficial ownership concealment
Beneficial Ownership	Professional intermediaries are the primary obstacle to effective beneficial ownership identification
Client Account Misuse	Lawyers and accountant’s route illicit funds through client accounts to create professional-privilege barriers
Real Estate Money Laundering	Real estate professionals are the transaction facilitators for property-based proceeds integration
Offshore Company Incorporation	TCSPs are the service providers for offshore structures used in professional intermediary concealment
Trust Structures	Trusts established and administered by TCSPs conceal beneficial ownership of criminal assets
Enhanced Due Diligence (EDD)	The mandatory compliance response for high-risk professional intermediary relationships
goAML	Reporting platform STRs by and against professional intermediaries are filed through goAML

What Financial Instruments Do Criminals Use in Professional Intermediaries Schemes?

Professional firm client accounts are the primary financial instrument. Illicit funds are deposited into the lawyers’, accountants or other professional firms ‘ accounts from criminal clients, held on their behalf under the professional privilege shield, and then transferred elsewhere under the appearance of a legitimate professional transaction.

Bearer shares are used in corporate structures established by TCSPs, as they allow ownership to be transferred without any public registry record. A corporate structure that includes bearer shares enables the beneficial owner to transfer ownership of the entire structure without any DNFBP or financial institution being aware of the change.

Cash is used for direct payment of professional services where the criminal wants to avoid creating a traceable transaction record. Usually, the transaction amounts are paid through multiple transactions to avoid triggering CDD and reporting DNFBP’s obligations.

Equity interests in legal entities managed by TCSPs on behalf of anonymous beneficial owners, allowing criminal proceeds to be held in the form of company shares whose ultimate ownership is concealed behind nominee structures.

Real estate is often used during the integration stage of money laundering. Proceeds that have been layered through professional intermediary structures are used to purchase property by a TCSP-administered company on the instruction of an anonymous beneficial owner, integrating criminal proceeds into a registered, legally documented asset.

Trust accounts allow TCSPs to hold and manage assets on behalf of beneficiaries whose identities are not disclosed in any public register, making them a primary opacity tool for professional intermediary schemes.

Trust beneficial interests enable an individual to benefit from trust assets without appearing on any corporate register or property title, as all the formal legal documentation names the trustee.

Variant / Synonym	Context or Jurisdiction	Distinction from Primary Term
Gatekeepers	FATF and international AML terminology	Emphasises the regulatory gatekeeping function that professionals are expected to perform
Enablers	Policy advocacy and enforcement discourse	Emphasises the active facilitation role; used particularly when discussing professional liability
DNFBPs (Designated Non-Financial Businesses and Professions)	UAE regulatory framework	The formal legal classification that determines which obligations apply to professional intermediaries
Professional money laundering	Enforcement terminology	Refers specifically to the use of professional services as a deliberate laundering mechanism

What Products and Services Do Criminals Abuse in Professional Intermediaries Schemes?

Accounting, auditing, and bookkeeping are the services through which professional accountants help criminals integrate illicit funds into the financial system. When professionals prepare financial statements for front companies and present false revenue as legitimate business income, criminals gain the documentary foundation for the integration stage of money laundering.

Client accounts of lawyers and accountants are used when professionals allow illicit funds to be routed through their professional client accounts, creating a financial layer of separation between the criminal proceeds and the originating offence.

Legal advisory services provided by legal professionals for structured transactions, establishing entities, or advising on corporate arrangements that are used to conceal illicit proceeds, particularly where the professional fails to assess the ultimate purpose of the engagement.

Notary services, such as verifying affidavits, declarations, and real estate deeds, are applied to documents and transactions that are themselves part of a money laundering scheme, providing official certification to fraudulent or illicit arrangements.

Offshore company incorporation services are misused by TCSPs to establish structures that conceal the identity of the beneficial owner. The use of jurisdictions with limited BO disclosure requirements creates impenetrable ownership opacity.

Professional consultancy services are misused when advisory fee payments between related entities, particularly cross-border, are used to create seemingly legitimate commercial explanations for large financial transfers that are, in fact, movements of illegal funds.

Real estate services are misused when agents facilitate property transactions on behalf of anonymous corporate purchasers without conducting adequate CDD, allowing illicit proceeds to be converted into property assets under a professional’s transaction certification.

Trust and corporate services are the primary professional intermediary product category for beneficial ownership concealment. TCSPs that establish complex corporate and trust structures for clients without adequate ultimate beneficial owner identification are providing the core infrastructure for professional intermediary money laundering.

How AML UAE Helps

The detection of professional intermediary facilitated money laundering requires compliance frameworks that are specifically calibrated to the characteristics of professional service providers. The generic compliance framework is designed to assess the risk of individual customers and not professional service providers.

AML UAE helps regulated entities address the risk through Enterprise-Wide Risk Assessment, which would enable businesses to assess where professional intermediary involvement may create additional ownership, CDD or transaction monitoring challenges.

For compliance teams seeking to strengthen their controls, AML UAE provides transaction monitoring and AML framework review services to assess whether existing monitoring rules adequately identify professional intermediary risk indicators, including nominee arrangements and multi-layer corporate structures.

We also deliver AML/CFT training programmes that equip senior management and employees of the company with the practical skills needed to identify and assess professional intermediary red flags.

AML UAE also works directly with law firms, accountancy practices, real estate professionals and TCSPs that are classified as DNFBPs and are subject to AML/CFT obligations under the UAE regulatory framework. Through tailored compliance programmes, risk assessments, and staff training that enable professional firms to meet their obligations under Cabinet Resolution No. (134) of 2025 and to avoid the administrative penalties prescribed in Cabinet Resolution No. (71) of 2024.

Professional intermediaries provide legitimate business services, but those services may be misused to support complex financial arrangements. Regulated entities must look beyond professional involvement and assess the true purpose of each transaction or structure. The key compliance question is not whether the firm is registered, but what the account is actually doing. A strong risk-based approach and effective due diligence are essential to managing this risk and mitigating professional intermediary risk.

Dipali Vora - CAMS, ACS

Frequently Asked Questions

Yes. Under Cabinet Resolution No. (134) of 2025, Article 3. Lawyers and legal professionals engaged in designated financial transaction activities are classified as DNFBPs. When conducting these activities, they are required to comply with all applicable UAE AML/CFT obligations and regulatory requirements.

The UAEFIU Strategic Analysis on TF Typologies and Facilitators, published in May 2025, highlights lawyers, accountants, and corporate service providers within its terrorist-financing facilitator typologies, based on STR/SAR reporting analysis from January 2021 to December 2024. The report distinguishes witting (complicit) from unwitting facilitators, so professional involvement is a risk indicator to assess rather than a finding of wrongdoing.

Federal Decree-Law No. (10) of 2025, Article 18 (3), exempts lawyers, notaries, legal professionals, and independent auditors from the STR filing obligation when the information raising suspicion is obtained under professional secrecy in connection with determining the client’s legal position or representing the client in legal proceedings. The exemption is limited and does not apply when the financial transaction capacity is exceeded.

Cabinet Resolution No. (71) of 2024 prescribes administrative penalties for DNFBPs. Failure to file a suspicious transaction report may result in a penalty of up to AED 500,000 (Serial Number 22). Failure to comply with CDD obligations may result in a penalty of up to AED 200,000 (Serial Numbers 9, 11-14). Failure to comply with EDD obligations may result in a penalty of up to AED 500,000 (Serial Numbers 15-17).

Cabinet Resolution No. (134) of 2025, Article 10, requires the identification of any natural person who owns or controls more than 25% of a legal person, directly or indirectly, as the beneficial owner. For professional intermediary accounts, the institution must look through the professional’s account to identify the ultimate beneficial owner of the funds being managed, not merely the professional firm itself.

A financial institution should apply a risk-based approach to lawyers’ client accounts. Cabinet Resolution No. (134) of 2025, Article 10, requires identification of the ultimate beneficial owner of funds, not merely the immediate account holder. Where a client account is used to hold or move third-party funds, the institution should understand the nature and purpose of the account, the expected activity and source of funds, and, where legally permissible and risk-appropriate, seek information on the underlying client or beneficial owner. Access to that information may be affected by legal privilege, account structure, and applicable law.

Yes. Trust and company service providers who carry out the specified activities listed in Cabinet Resolution No. (134) of 2025, Article 3, are classified as DNFBPs and are subject to the full UAE AML/CFT framework.

Advisory fee payments from offshore companies to professional service providers should trigger source of funds verification when the fees are significantly above industry norms, no verifiable evidence of services rendered, or when the paying entity has no identifiable commercial purpose. These are documented indicators of professional intermediary layering schemes.

Cabinet Resolution No. (134) of 2025, Article 25, requires a minimum five-year retention of all CDD records, transaction records, and documentation related to the professional’s AML/CFT obligations. This includes all due diligence obtained on clients for whom financial transactions are carried out.

goAML is the UNODC-developed platform through which the UAE FIU receives all suspicious transaction reports. Federal Decree-Law No. (10) of 2025, Article 11, confirms that the FIU exclusively receives STRs through this platform. All the regulated entities under the UAE AML framework that identify suspicious transactions must file their reports via goAML.

Closing Summary

Professional intermediaries have become a key focus area within the UAE AML/CFT framework. The UAEFIU Strategic Analysis (May 2025) establishes that lawyers, accountants, and corporate service providers can play a significant role in facilitating the movement and concealment of illicit funds in the UAE. This analysis changes the compliance obligation for every entity that interacts with professional service firm accounts.

The regulatory framework is clear, and the penalties are specific. Cabinet Resolution No. (134) of 2025 requires CDD at the beneficial owner level, EDD for high-risk clients, and immediate STR filing when suspicion arises. Cabinet Resolution No. (71) of 2024 prescribes penalties up to AED 500,000 for STR failures and AED 200,000 for CDD failures. Professional intermediaries who are classified as DNFBPs are subject to exactly the same obligations and the same penalty exposure as any other regulated entity.

Compliance teams that integrate the UAEFIU’s May 2025 intelligence into their entity-wide risk assessments, configure monitoring to detect professional intermediary-specific patterns, and apply EDD to high-risk professional firm accounts will be positioned to meet both the letter and the operational intent of UAE AML law in this risk area.

Need Better Intermediary Controls?

Strengthen due diligence for professional firms that handle client funds or establish corporate structures.