← Insights

Common Financial Crime Mistakes to Avoid in Dubai

The most damaging steps are usually taken in the first few days, before anyone has spoken to a lawyer.

Two situations are covered here, and the mistakes in each are different. The first is a complaint already filed: how a matter moves from the police station to the Public Prosecution, and what goes wrong along the way — treating a commercial dispute as incapable of becoming a criminal one, giving a statement alone and signing an Arabic record you have not read, ignoring a summons, deleting messages or briefing witnesses, paying to settle without the complaint being formally closed, and assuming the company and the individual can share one lawyer. The second is regulatory exposure under Federal Law No. 20 of 2018, which reaches designated businesses well outside the financial sector, and why an inspection asks what you did about a particular customer rather than whether a manual exists.

Reviewed by Mohamed Noureldin, Founder, Managing Partner & Senior Legal Consultant

Financial crime work in Dubai divides into two situations that feel completely different from the inside. In the first, a complaint has been made — against a company, a manager, or a signatory — and there is a police file. In the second, nothing has been alleged, but the business is supervised under the anti-money laundering regime and its controls would not survive an inspection. The mistakes people make in each situation are different, and the most damaging ones are almost always made in the first days, before anyone has taken advice.

This note sets out what goes wrong in both, from the perspective of a financial crime lawyer in the UAE who is usually called after the first mistake rather than before it.

Part one: when a complaint has been filed

A criminal matter here typically begins with a complaint at a police station. It is reviewed and, if it proceeds, referred to the Public Prosecution, which investigates, takes statements and decides whether to refer the matter to the criminal court or close it. Each of those stages is an opportunity — and each is a place where cases are lost by people acting on instinct.

Assuming a commercial dispute cannot become a criminal one

Businesses often treat a falling-out with a partner, a customer or an ex-employee as purely civil, and are genuinely surprised when the matter surfaces as a criminal complaint alleging breach of trust or fraud. The same facts can support both tracks, and the two proceed in parallel. Anything said or written in the commercial negotiation — a conciliatory email, an offer to repay, an admission made to keep the relationship alive — is capable of appearing in the criminal file.

The reverse error is just as serious. Filing a criminal complaint as leverage in a commercial dispute is a strategy with its own exposure, and a complaint that cannot be substantiated can turn on the person who made it.

Giving a statement without advice, in a language you cannot read

The single most costly mistake is the first interview. People attend alone because they believe attending alone signals innocence, they explain at length, and they sign a written statement recorded in Arabic that they have not read and that summarises their answers in someone else's words. That statement then follows the case through every subsequent stage.

What to do instead is unremarkable: arrange representation before attending, arrange proper translation, answer what is asked without volunteering narrative, and read what you sign — or have it read to you by someone acting for you. Our criminal case representation team attends these interviews with clients as a matter of routine.

Ignoring a summons, or leaving and hoping

Non-attendance does not pause a case. It converts a manageable situation into one where decisions are taken without your account of events, and it can lead to consequences for your ability to travel and to operate accounts. A person who is out of the country when a complaint is filed is far better served by taking advice on the file and arranging representation than by staying away and waiting for it to lapse.

Handling the evidence yourself

Two instincts cause real damage. The first is tidying: deleting messages, clearing a laptop, asking a colleague to remove a file. That converts an arguable case into a much worse one and creates fresh exposure. The second is briefing witnesses on what to say. Both are read exactly as they appear.

The correct step is the opposite — preserve everything. Instruct the business in writing to retain relevant records, emails, messaging accounts and system logs from the moment a problem is identified, and let advisers work out what actually helps.

Settling privately without closing the file properly

Where a matter is capable of being resolved between the parties, payment alone does not end it. The complaint has to be dealt with formally, in the correct forum, with a record of what was agreed and on what conditions. Money handed over on an undertaking to withdraw, with nothing filed, has left more than one payer with both a smaller bank balance and a live case.

Assuming the company and the individual can share one lawyer

Where the allegation involves a transaction the company authorised, the company's interests and the manager's interests may diverge quickly. Deciding early whether separate representation is needed is far cheaper than discovering the conflict halfway through.

Part two: when the exposure is regulatory rather than criminal

The UAE anti-money laundering framework, set out in Federal Law No. 20 of 2018 on Anti-Money Laundering and Combatting the Financing of Terrorism, does not apply only to banks. Firms regulated by the DFSA in the DIFC and by the FSRA in ADGM operate under those regulators' own rulebooks as well, and the framework extends to designated categories of business outside the financial sector altogether. That last point is where most of the surprises happen: a company can be supervised without ever having thought of itself as a financial business, so whether a particular sector is designated is something to establish rather than assume.

Owning a policy rather than a control

The question at an inspection is rarely whether a manual exists. It is closer to a request: show us what you did about this customer. Businesses that come out of the exercise badly can produce the manual and nothing else. The decision to take the client on is unrecorded, the alert that was raised carries no note of how it was resolved, and nobody can say when the staff were last trained or on what. A control that leaves no trace is treated as a control that did not operate, so the useful internal test is whether a customer file picked at random tells its own story from first contact onwards.

Screening once and never again

Due diligence performed at onboarding and never revisited leaves the file describing a customer who no longer exists — different ownership, different beneficial owner, different pattern of activity. Ongoing monitoring is a separate obligation from onboarding, and a business that cannot show it monitored anything is treated as not having monitored.

Hesitating over a suspicious transaction report, or tipping off

Two related errors. The first is delay: internal debate about whether something is "really" suspicious, held up while the transaction completes. Suspicion is a lower threshold than proof, and reporting is the mechanism through which the assessment is made by the body designed to make it. The second is telling the customer. Disclosing that a report has been made, or is being considered, is its own offence and is a much harder thing to explain than the original concern.

Believing a free zone address changes the criminal law

A complaint about conduct inside a firm in the DIFC or ADGM is handled like a complaint about anyone else: at a police station, then by the Public Prosecution. The two centres have their own courts, their own regulators and their own civil and commercial law, and none of that governs a criminal allegation. The practical consequence is two processes running on two timetables that do not co-ordinate with each other, out of the same facts, in which an account given to the regulator is capable of being read by the prosecutor. Run them as separate matters with one consistent version of events.

Assuming a foreign outcome closes the matter here

A settlement, a discontinuance or an acquittal in another country does not automatically end an investigation in the UAE, and a regulator here may take its own view of the same conduct even where no criminal case follows. Cross-border matters need to be managed as parallel processes, with careful attention to what is said in one jurisdiction being read in another.

What actually helps

In an active matter: get the file reviewed before you speak, preserve records, keep one consistent account, and treat every document you sign as final. In a supervised business: run a real risk assessment, keep records that show controls operated, appoint someone with the authority and the time to do the job, and correct weaknesses on your own initiative rather than in response to a finding. Choosing advisers with actual experience of these processes matters more here than in most areas of practice, which is why clients tend to look for the best lawyers in Dubai for exactly this kind of work rather than treating it as general commercial advice. Early advice from a financial crime defence and advisory team changes outcomes in this field more than in almost any other.

Related Services: Explore our financial crime practice in the UAE and our wider financial crime defence services for practical legal support in this area.

Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.

Nour Attorneys Team

Additional Resources

Call Us NowChat With Our Team On WhatsApp