Anti-Money Laundering in UAE: Corporate Compliance Obligations

A UAE trading company that takes cross-border payments must do more than verify who its suppliers and customers are. It must also keep assessing whether the transactions themselves are legitimate. Failure to comply can trigger regulatory sanctions, including hefty fines, licence suspensions, or even criminal prosecution of corporate officers. The federal AML law sets these obligations for designated non-financial businesses and professions as well as for financial institutions.

Related services: Our financial crime and corporate governance advisory services offer practical legal support in this area.

The federal AML decree-law and the instruments around it

The core of AML compliance in the UAE is Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing (the “UAE AML Law”), which repealed Federal Decree Law No. (20) of 2018. It came into effect to align the country’s AML policies with international standards, including those set by the Financial Action Task Force (FATF). Cabinet Resolutions and guidelines issued by the Financial Intelligence Unit (FIU) complement it.

The law outlines the principal obligations for financial institutions and designated non-financial businesses and professions (DNFBPs), including corporate entities that operate within the UAE's jurisdiction. It prohibits the use of the UAE’s financial system for money laundering and terrorist financing. It also provides law enforcement agencies with mechanisms to investigate, prosecute, and seize illicit assets.

Together, these instruments mandate businesses to implement customer due diligence (CDD), monitor and report suspicious transactions, and maintain internal compliance programmes.

Further legal instruments complement this framework, such as international conventions ratified by the UAE, including the United Nations Convention Against Transnational Organized Crime. The UAE Central Bank and the Securities and Commodities Authority also issue sector-specific AML guidelines for financial institutions and market participants.

Where the detailed implementing rules sit

The detailed regulations on implementing AML obligations come from the law's Executive Regulations, including the reporting of suspicious transactions to the FIU.

The regulatory framework is designed to counter the threats posed by international money laundering networks. It requires a structural approach to compliance that integrates both preventative and detective controls.

Knowing the customer, and the owner behind the customer

Customer due diligence is a fundamental pillar of AML compliance. The UAE AML Law requires risk-based CDD procedures to identify and verify the identities of customers and beneficial owners before establishing business relationships or conducting transactions. This includes ongoing monitoring to detect any suspicious or unusual activity that may indicate money laundering. The law also mandates entities to appoint compliance officers responsible for internal adherence to AML policies and regulatory updates.

Corporate entities must have a structured process to verify the identity of clients, beneficial owners, and counterparties. The process involves collecting identification documents, understanding the nature of the business relationship, and assessing the risk profile of each customer. Enhanced due diligence (EDD) is required for higher-risk customers, such as politically exposed persons (PEPs) or clients from jurisdictions with weak AML controls.

A rigorous CDD framework requires the integration of technology and human oversight. Companies must build verification processes that can adapt to challenges such as layered ownership structures or attempts to conceal beneficial ownership. The UAE authorities increasingly emphasise transparency and the disclosure of beneficial ownership. Compliance teams must also build continuous monitoring systems to flag transactions that deviate from expected patterns or show suspicious characteristics.

Consider a UAE real estate developer conducting a transaction with a complex offshore corporate structure. Without sufficient due diligence, such a transaction could provide cover for laundering illicit funds. By applying EDD, the developer would investigate the ultimate beneficial owners, their source of funds, and the economic rationale for the transaction. That approach mitigates risks and aligns with the AML Law’s emphasis on transparency.

Reporting a suspicion to the FIU

When a transaction raises suspicion of money laundering or terrorist financing, entities must promptly report it to the FIU. Failure to do so can result in severe legal and reputational consequences. Suspicious transaction reporting requires an understanding of transaction patterns. It also requires the ability to distinguish legitimate business activities from those that may not be. The FIU uses advanced analytical tools to investigate suspicious transaction reports (STRs). Detailed records, and trained staff who can identify and report suspicious activities, matter for that reason.

Suppose a UAE financial services firm observes an unusual pattern of cash deposits inconsistent with a client’s profile. The compliance officer must evaluate these transactions in context before deciding whether to file an STR. The officer considers factors such as source of funds, frequency, and counterparties. The reporting process must be timely and include all relevant supporting information, so that the FIU can conduct a thorough analysis.

Confidentiality obligations prohibit disclosure of an STR to the subject of the report, as premature disclosure could compromise investigations.

Keeping records, and what a gap costs

The UAE imposes strict record-keeping requirements, mandating that records of transactions and due diligence measures be retained. The retention period helps audits and investigations. It lets a company substantiate its compliance efforts if regulators or law enforcement challenge them. Failure to maintain such records can itself constitute a violation, exposing companies to penalties.

A compliance programme built on the company’s own risk profile

An effective AML compliance programme involves more than regulatory adherence. It requires internal controls designed to anticipate and address money laundering risks. The programme must be tailored to the specific risk profile of the corporate entity, factoring in the nature of its business, customer base, and geographic footprint.

Key components include the appointment of a dedicated AML compliance officer, the implementation of policies and procedures, regular employee training, and an internal audit function to evaluate programme effectiveness. The compliance officer maintains the lines of communication between the company and regulatory bodies, keeping the company current with, and adherent to, evolving AML requirements. Training programmes must be designed to make employees alert to money laundering tactics and warning indicators in everyday operations.

Take a UAE import-export company dealing with multiple jurisdictions and currencies. Its AML compliance programme would incorporate risk assessments tailored to the countries involved, transaction types, and customer profiles. Its policies would specify procedures for verifying suppliers and customers, monitoring transactions for anomalies, and escalating suspicious activities. Regular training sessions would keep staff informed of emerging money laundering trends, such as the misuse of trade-based money laundering techniques.

Internal audit functions play a critical role in testing the effectiveness of AML programmes. Independent audits can identify gaps or weaknesses in policies, controls, or staff awareness, prompting corrective actions. Periodic reviews keep compliance measures in step with changes in business operations or regulatory requirements. The audit results often inform board-level reporting, supporting governance oversight of AML risks.

Carrying AML obligations into governance and contracts

Corporate entities must integrate AML compliance into their governance frameworks. This includes embedding AML considerations into contract drafting and negotiation, especially in transactions involving international parties. Our corporate governance advisory team offers practical legal support on this side of compliance.

Contractual clauses can require counterparties to provide representations about the legitimacy of their funds and compliance with applicable AML laws. Companies may also negotiate audit rights or cooperation clauses to support investigations if suspicious activities arise. These contractual mechanisms complement internal controls by extending compliance obligations beyond the corporate entity itself.

Virtual assets, new technology and foreign regimes

The AML landscape in the UAE is evolving, influenced by global regulatory developments, technological advancements, and the increasing complexity of financial crimes. Money laundering techniques often involve cross-border transactions, virtual assets, and complex corporate vehicles that obscure illicit sources.

Companies must harness data analytics, artificial intelligence, and blockchain technology to enhance transaction monitoring and risk assessment. These tools must be balanced with human expertise to interpret and respond to suspicious activities.

The rise of cryptocurrencies and virtual assets presents a significant challenge. Their pseudonymous nature and rapid transferability can be exploited for money laundering if not properly controlled. UAE law requires virtual asset service providers (VASPs) to obtain a licence, registration or enrolment, and to comply with AML obligations. Corporates engaging with or investing in virtual assets must therefore develop specialised controls and maintain vigilance over such transactions.

Cross-border cooperation also shapes the AML environment. The UAE participates in international initiatives and information-sharing agreements to track illicit flows. Companies involved in international trade or finance must understand the interplay between UAE laws and foreign AML regimes, and comply across jurisdictions. Failure to do so can expose businesses to regulatory action in multiple countries and complicate dispute resolution.

Regulatory expectations around beneficial ownership transparency are likely to increase, with potential requirements for real-time updates and public registries. Companies should anticipate these developments to avoid compliance gaps. Machine learning algorithms for predictive risk modelling are expected to become more prevalent, necessitating investment in compliance infrastructure and skilled personnel.

When a money laundering allegation becomes a dispute

Corporate disputes involving allegations of money laundering require specialised arbitration and litigation expertise to reach resolutions that uphold legal and regulatory standards. Suppose a business partner is suspected of laundering proceeds through joint ventures or contractual arrangements. The company must be prepared to address the issue through dispute resolution channels while cooperating with regulatory authorities. This may involve complex procedural considerations, confidentiality concerns, and coordination with enforcement agencies.

Forward-looking compliance programmes must provide not only preventative controls but also a route for managing AML disputes efficiently. Our financial crime lawyers offer practical legal support where money laundering allegations arise.

Nour Attorneys supports businesses on these obligations through guidance in corporate law, contract drafting, and dispute resolution.

Disclaimer: This article is for informational purposes only and does not constitute legal advice.

Additional Resources

Explore more of our insights on related topics:

• Corporate secretarial services and UAE compliance obligations
• Director liability and personal liability in UAE companies
• Emiratisation compliance obligations for UAE employers
• Data protection under the UAE PDPL and corporate compliance