Fatf Compliance in the UAE: Navigating the New Anti-Money Laundering Standards of 2025

Details the UAE's adaptation to new FATF anti-money laundering standards and compliance imperatives in 2025.

Deploy authoritative compliance frameworks to master the updated AML obligations under FATF regulations in the UAE.

By Nour Attorneys / 6 February 2025

Fatf Compliance in the UAE: Navigating the New Anti-Money Laundering Standards of 2025

Nour Attorneys deploys a structural legal architecture engineered to neutralize complex legal challenges and create asymmetric advantages. Every engagement is approached with strategic precision, ensuring decisive outcomes for our clients.

The global financial landscape is a dynamic environment, constantly evolving to counter the sophisticated threats posed by money laundering and terrorist financing. At the heart of this international effort is the Financial Action Task Force (FATF), whose standards serve as the benchmark for regulatory compliance worldwide. For businesses operating in the United Arab Emirates (UAE), 2025 marks a pivotal year, characterized by a comprehensive legislative overhaul designed to cement the nation’s position as a global financial hub with the highest standards of integrity.

This article provides a deep dive into the new Anti-Money Laundering (AML) standards in the UAE, focusing on the implications of the 2025 legal framework, particularly the landmark Federal Decree-Law No. 10 of 2025. Understanding and implementing these changes is not merely a regulatory obligation; it is a strategic imperative for every entity, from financial institutions to Designated Non-Financial Businesses and Professions (DNFBPs).

Related Services: Explore our Money Laundering Defense Uae and Fatf Compliance Uae services for practical legal support in this area.

The Global Imperative: Understanding FATF Standards

The FATF is an inter-governmental body established in 1989 to set standards and promote effective implementation of legal, regulatory, and operational measures for combating money laundering, terrorist financing, and other related threats to the integrity of the international financial system. Its influence is exercised primarily through the 40 Recommendations, which provide a comprehensive framework for countries to adopt.

The UAE’s commitment to these standards has been unwavering, particularly following its inclusion in the FATF’s "Jurisdictions under Increased Monitoring" (often referred to as the Grey List) in 2022. This process spurred a rapid and robust national action plan, leading to significant legislative and operational enhancements. The goal is clear: to demonstrate the effectiveness of the UAE’s AML/CFT (Counter-Financing of Terrorism) regime and secure an exit from the monitoring process. The legislative changes introduced in 2025 are the culmination of this intensified effort, directly addressing the strategic deficiencies identified by the FATF.

Key FATF Recommendations that have driven the recent UAE reforms include:

FATF Recommendation	Focus Area	UAE 2025 Legislative Response
Recommendation 1	Risk-Based Approach (RBA)	Mandated RBA across all sectors, requiring tailored risk assessments.
Recommendation 10	Customer Due Diligence (CDD)	Stricter CDD and Enhanced Due Diligence (EDD) requirements, especially for high-risk customers and transactions.
Recommendation 24	Transparency and Beneficial Ownership	Significant strengthening of Ultimate Beneficial Ownership (UBO) rules and registries.
Recommendation 28	Regulation of DNFBPs	Expanded scope and enhanced supervision of DNFBPs (e.g., real estate, dealers in precious metals and stones, legal professionals).

The UAE’s Legislative Overhaul: Federal Decree-Law No. 10 of 2025

The cornerstone of the UAE’s reinforced AML/CFT framework is Federal Decree-Law No. 10 of 2025 on Combating Money Laundering and the Financing of Terrorism and Illegal Organizations. This new law, which came into effect in late 2025, replaces the previous Federal Decree-Law No. 20 of 2018 and introduces a more stringent, comprehensive, and punitive regime.

The new legislation, supported by the detailed Cabinet Resolution No. (134) of 2025 (the Executive Regulations), fundamentally shifts the compliance burden and expectation for all concerned entities.

Key Changes and Implications of the 2025 Law

1. Expanded Scope and Definition of Obligated Entities

The 2025 law broadens the definition of "Financial Institutions" and solidifies the inclusion of DNFBPs. This expansion ensures that sectors previously considered lower risk are now fully integrated into the national AML/CFT framework, closing potential loopholes for illicit financial flows. The law emphasizes that any entity conducting a financial activity or business, regardless of its size or structure, must comply.

2. The Risk-Based Approach (RBA) as a Legal Mandate

The RBA is no longer a suggestion; it is a legal requirement. Obligated entities must conduct a thorough, documented National Risk Assessment (NRA) and develop internal policies and procedures that are proportionate to the identified risks. This means a one-size-fits-all compliance manual is insufficient. Policies must be tailored to the entity’s specific customer base, geographical exposure, products, and delivery channels.

3. Stricter Penalties and Enforcement Powers

The 2025 law significantly increases the financial and criminal penalties for non-compliance. Fines for administrative breaches are substantially higher, and the law grants greater investigative and enforcement powers to supervisory authorities, including the Ministry of Economy and the Central Bank. The focus has shifted from mere compliance checks to demonstrating the effectiveness of the implemented controls.

4. Enhanced Focus on Ultimate Beneficial Ownership (UBO)

Transparency regarding the true owners of corporate entities is a critical FATF requirement. The 2025 framework strengthens the existing UBO rules, making it mandatory for all entities to maintain accurate, up-to-date UBO registers and submit this information to the relevant licensing authorities. Failure to identify and verify the UBO is now a high-risk compliance failure. Navigating the complexities of the new UBO rules and corporate structuring demands careful attention to detail. Consult with a leading Corporate Business Lawyer in Dubai to manage these requirements and ensure full transparency.

For professional legal guidance, explore our Business Compliance Advisory, Business Compliance Advisory Services, Strategic Business Compliance Advisory Solutions In..., and Strategic Transactions Compliance Advisory Solutions In... service pages.

Core Pillars of 2025 AML Compliance

Compliance with the new UAE standards revolves around four interconnected pillars, each requiring robust internal systems and continuous monitoring.

Pillar 1: Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)

The new law mandates a more rigorous approach to identifying and verifying customers.

Standard CDD: Requires verification of the customer's identity, the identity of the beneficial owner, and understanding the purpose and intended nature of the business relationship.
EDD: Must be applied to high-risk customers, including Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, and those involved in complex or unusually large transactions. The EDD process must be continuous, not a one-time check.

Pillar 2: Suspicious Transaction Reporting (STR)

The obligation to report suspicious activities to the UAE’s Financial Intelligence Unit (FIU) remains paramount. The 2025 law emphasizes the need for a sophisticated internal system capable of detecting patterns and anomalies that may indicate money laundering or terrorist financing. The concept of "reasonable grounds to suspect" is key, requiring trained personnel to make informed judgments. The process must be swift, confidential, and protected from tipping-off the customer.

Pillar 3: Internal Controls, Policies, and Procedures

Every obligated entity must establish and maintain comprehensive internal controls, which include: 1. Written Policies: Documented procedures for CDD, EDD, STR, record-keeping, and compliance monitoring. 2. Designated Compliance Officer: Appointment of a qualified and senior-level Compliance Officer responsible for overseeing the AML/CFT program. 3. Independent Audit Function: Regular, independent audits to test the effectiveness of the AML/CFT controls.

Pillar 4: Training and Awareness

The human element remains the weakest link in any compliance chain. The 2025 framework places a strong emphasis on continuous training for all employees, particularly those involved in customer-facing roles, transaction processing, and management. Training must cover the latest legal requirements, typologies of financial crime, and the entity’s internal policies.

Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.

Nour Attorneys Team

Additional Resources

Explore more of our insights on related topics: