FATF Compliance in the UAE: 2025 AML Standards
Analyzing the UAE's adherence to the new 2025 FATF anti-money laundering and counter-terrorist financing standards.
Build compliance strategies with practical insights into the UAE's 2025 FATF-aligned anti-money laundering framework.
Reviewed by Mohamed Noureldin, Founder, Managing Partner & Senior Legal Consultant
FATF Compliance in the UAE: The New Anti-Money Laundering Standards of 2025
Money laundering and terrorist financing methods keep changing, and the rules against them change too. The Financial Action Task Force (FATF) sets the international standards that regulators worldwide use as their benchmark. For businesses in the United Arab Emirates (UAE), FATF compliance took on new weight in 2025, a year of comprehensive legislative reform designed to reinforce the country's position as a global financial hub with the highest standards of integrity.
This article explains the new UAE anti-money laundering (AML) standards and the 2025 legal framework, in particular Federal Decree-Law No. 10 of 2025. Understanding and applying these changes is more than a regulatory obligation. It is a business priority for every obligated entity, from financial institutions to Designated Non-Financial Businesses and Professions (DNFBPs).
Related: See our real estate law advisory and legal title verification services.
Related services: See our money laundering and financial crime defence and FATF and AML compliance advisory services for practical legal support in this area.
Understanding FATF Standards and the UAE
The FATF is an inter-governmental body established in 1989. It sets standards and promotes effective legal, regulatory and operational measures to combat money laundering, terrorist financing and other threats to the integrity of the international financial system.
Its influence comes mainly through the 40 Recommendations, a comprehensive framework for countries to adopt.
The UAE's commitment to these standards has been firm, particularly after its inclusion in the FATF's "Jurisdictions under Increased Monitoring" list (often called the Grey List) in 2022. That listing prompted a rapid national action plan and significant legislative and operational improvements.
The goal is clear: to demonstrate the effectiveness of the UAE's AML/CFT (Counter-Financing of Terrorism) regime and secure an exit from the monitoring process. The legislative changes introduced in 2025 are the culmination of this effort and directly address the strategic deficiencies identified by the FATF.
Key FATF Recommendations that have driven the recent UAE reforms include:
| FATF Recommendation | Focus area | UAE 2025 legislative response |
|---|---|---|
| Recommendation 1 | Risk-Based Approach (RBA) | RBA mandated across all sectors, requiring tailored risk assessments. |
| Recommendation 10 | Customer Due Diligence (CDD) | Stricter CDD and Enhanced Due Diligence (EDD) requirements, especially for high-risk customers and transactions. |
| Recommendation 24 | Transparency and Beneficial Ownership | Significant strengthening of Ultimate Beneficial Ownership (UBO) rules and registries. |
| Recommendation 28 | Regulation of DNFBPs | Expanded scope and enhanced supervision of DNFBPs (e.g., real estate, dealers in precious metals and stones, legal professionals). |
The UAE's Legislative Overhaul: Federal Decree-Law No. 10 of 2025
The cornerstone of the UAE's reinforced AML/CFT framework is Federal Decree-Law No. 10 of 2025 on Combating Money Laundering and the Financing of Terrorism and Illegal Organizations. The new law came into effect in late 2025. It replaces the previous Federal Decree-Law No. 20 of 2018 and introduces a more stringent, comprehensive and punitive regime.
The law is supported by the detailed Cabinet Resolution No. (134) of 2025 (the Executive Regulations). Together, they fundamentally change the compliance burden and expectations for all concerned entities. The key changes are set out below.
1. Expanded Scope and Definition of Obligated Entities
The 2025 law broadens the definition of "Financial Institutions" and confirms the inclusion of DNFBPs. Sectors previously considered lower risk are now fully part of the national AML/CFT framework, closing potential loopholes for illicit financial flows.
The law emphasizes that any entity conducting a financial activity or business, regardless of its size or structure, must comply.
2. The Risk-Based Approach (RBA) as a Legal Mandate
The RBA is no longer a suggestion; it is a legal requirement. Obligated entities must conduct a thorough, documented National Risk Assessment (NRA) and develop internal policies and procedures proportionate to the identified risks.
A one-size-fits-all compliance manual is therefore insufficient. Policies must be tailored to the entity's specific customer base, geographical exposure, products and delivery channels.
3. Stricter Penalties and Enforcement Powers
The 2025 law significantly increases the financial and criminal penalties for non-compliance. Fines for administrative breaches are substantially higher.
The law also gives supervisory authorities, including the Ministry of Economy and the Central Bank, greater investigative and enforcement powers. The focus has shifted from simple compliance checks to demonstrating the effectiveness of the controls in place.
4. Enhanced Focus on Ultimate Beneficial Ownership (UBO)
Transparency about the true owners of corporate entities is a critical FATF requirement. The 2025 framework strengthens the existing UBO rules, making it mandatory for all entities to maintain accurate, up-to-date UBO registers and submit this information to the relevant licensing authorities.
Failure to identify and verify the UBO is now a high-risk compliance failure. The new UBO rules and corporate structuring questions require careful attention to detail, and a corporate business lawyer in Dubai can help you manage these requirements and ensure full transparency.
For professional legal guidance, see our business compliance and corporate governance advisory and AML compliance advisory service pages.
Core Pillars of UAE Anti-Money Laundering Compliance in 2025
Compliance with the new UAE standards rests on four connected pillars. Each requires robust internal systems and continuous monitoring.
Pillar 1: Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)
The new law mandates a more rigorous approach to identifying and verifying customers.
- Standard CDD: Requires verification of the customer's identity and the identity of the beneficial owner, and an understanding of the purpose and intended nature of the business relationship.
- EDD: Must be applied to high-risk customers, including Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, and those involved in complex or unusually large transactions. The EDD process must be continuous, not a one-time check.
Pillar 2: Suspicious Transaction Reporting (STR)
The obligation to report suspicious activities to the UAE's Financial Intelligence Unit (FIU) remains paramount. The 2025 law emphasizes the need for a sophisticated internal system that can detect patterns and anomalies that may indicate money laundering or terrorist financing.
The concept of "reasonable grounds to suspect" is key, and it requires trained personnel to make informed judgments. The process must be swift and confidential, and the customer must not be tipped off.
Pillar 3: Internal Controls, Policies and Procedures
Every obligated entity must establish and maintain comprehensive internal controls, which include:
- Written policies: Documented procedures for CDD, EDD, STR, record-keeping and compliance monitoring.
- Designated Compliance Officer: Appointment of a qualified, senior-level Compliance Officer responsible for overseeing the AML/CFT program.
- Independent audit function: Regular, independent audits to test the effectiveness of the AML/CFT controls.
Pillar 4: Training and Awareness
People remain the weakest link in any compliance chain. The 2025 framework places strong emphasis on continuous training for all employees, particularly those in customer-facing roles, transaction processing and management.
Training must cover the latest legal requirements, typologies of financial crime and the entity's internal policies.
Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.
Nour Attorneys Team
Additional Resources
Explore more of our insights on related topics:
- The New Era of Compliance: Navigating Anti-Money Laundering (AML) for UAE Businesses in 2025
- Navigating the New Era: Comprehensive Anti-Money Laundering (AML) Compliance Programs for UAE Businesses in 2025
- Anti-Money Laundering (AML) Compliance for UAE Businesses: Navigating the 2025 Legislative Overhaul
- Navigating the Storm: Expert Financial Crime Defense in UAE for Fraud, Embezzlement, and Money Laundering
