Source of Wealth (SoW): How to Establish and Verify It

What is source of wealth (SoW) in AML compliance?

Source of wealth refers to the total wealth, or the majority of the wealth, of a customer — the activities that have generated or contributed to how that customer accumulated their funds and assets. In plain terms, SoW describes how a customer acquired their total wealth over time and through which sources it was generated. It is a backward-looking picture of an entire financial history, not a snapshot of one payment.

The information you gather on source of wealth has two jobs. It should give an indication of the volume of wealth the client would reasonably be expected to have, and it should provide a picture of how that wealth was acquired. Together, those two things let you judge whether a customer’s profile makes sense — whether the money and assets in front of you are consistent with a plausible, legitimate history.

Source of wealth is a core enhanced-due-diligence tool within every UAE anti-money-laundering compliance programme. It matters most for politically exposed persons and other higher-risk relationships, where the central risk is that wealth may derive from corruption or other criminal activity. Establishing SoW is how a regulated business satisfies itself that a customer’s accumulated wealth has a credible, lawful origin before it takes on — or continues — the relationship.

The guiding principle throughout is proportionality. You are not expected to trace every asset or account for every dirham of a customer’s net worth — that would usually be impossible. You are expected to understand the sources that make up the major part of the wealth, to a depth that matches the risk the customer presents. That balance — enough rigour for the risk, no more — runs through all three steps below.

How is source of wealth different from source of funds?

Source of wealth is the origin of a customer’s entire net worth; source of funds is the origin of the specific money involved in a particular transaction or relationship. They answer two different questions, and confusing them is one of the most common — and most criticised — failures in AML practice. Guidance explicitly names the inability to distinguish the two as poor practice, often caused by poorly designed forms, software or procedures that give staff no real steer.

A worked contrast makes it concrete. A customer transfers AED 2 million into a new relationship. Source of funds asks where that specific AED 2 million came from — and the answer might be the sale of a named property, evidenced by the sale agreement and the bank settlement. Source of wealth asks the larger question: how did this person come to have the property to sell, and the rest of their net worth besides? The answer to that is a career, a business, an inheritance — the whole story behind the balance sheet.

Both are needed for a higher-risk customer, and they reinforce each other. A clean source-of-funds trail for one transaction means little if the customer’s overall wealth has no credible origin; conversely, a plausible source of wealth does not excuse an unexplained, out-of-character transaction. Our guide to handling politically exposed persons covers the source-of-funds side in detail; this guide is the source-of-wealth companion to it.

What are the three steps to establish source of wealth?

Source of wealth is established through a three-step method: obtain information on net worth, obtain information on where that net worth came from, then verify the information on a risk-sensitive basis. The steps run in order — you cannot sensibly verify a source you have not yet identified, and you cannot identify sources without a sense of the scale involved.

1. Estimate net worth — obtain an indication of how much wealth the client has or controls, through representations from the client. An exact figure is not required and is often impractical.
2. Identify the sources — establish where that net worth came from: inheritance, employment, business, investment and so on, ensuring corporate sources reflect legitimate business profits.
3. Verify on a risk-sensitive basis — seek evidence from a reliable, independent source that corroborates the essence of how the major part of the wealth was generated, to a depth set by the client’s risk.

The thread connecting all three is the risk-based approach. The depth of each step — how precisely you pin down net worth, how many sources you break out, how hard you corroborate — is dictated by the client’s risk profile. A low-risk client warrants a light touch; a PEP or other high-risk client warrants rigorous validation and, where appropriate, documented challenge. Applying the same fixed measures to every client regardless of risk is itself a recognised failure, so the method is designed to flex.

The sections that follow take each step in turn, then move on to the evidence you can use, how to document it, and what separates good practice from poor. Throughout, the aim is not perfection — it is a defensible, proportionate understanding of where a customer’s wealth came from, recorded well enough that an independent reviewer could follow your reasoning.

How do you establish a customer’s net worth?

You establish net worth through representations obtained from the client — and you do not need the exact amount. An indication of the client’s net worth is what the first step calls for, because obtaining a precise figure across someone’s entire body of assets is usually impractical and is not the point of the exercise. What you need is a reasonable sense of scale.

That sense of scale is what makes the rest of the analysis work. Once you have an approximate picture of how much wealth a client has or controls, you can test whether the sources they describe could plausibly have generated it, and whether the activity you later see in the relationship is consistent with it. Net worth is the yardstick against which everything else is measured — without it, you cannot tell whether a customer’s story hangs together.

Agents should try to obtain specific information, as far as possible, on how much wealth the client has or controls — but it may not be possible on every aspect of the client’s assets, particularly where information is not voluntarily disclosed. The obligation is to cover those aspects that form the major part of the net worth, not to compile an exhaustive inventory. Focus your effort where the wealth actually is.

There is an honest tension in this step, and the guidance acknowledges it. You rely substantially on what the client tells you about their net worth, yet you must remain alert to the possibility that the picture is incomplete or self-serving. The resolution is not to demand the impossible, but to weigh the reliability of what you are told: where net worth cannot be independently indicated, that limitation is taken into account in establishing its true value, and it feeds directly into how hard you verify at step three.

Where did the wealth come from?

Once net worth is established, the second step is to identify where it came from — inheritance, employment, business, investment and similar categories. The reassuring reality is that, although wealth is rarely traceable to a single source, the categories that make it up are usually few and generally well understood. Most customers’ wealth resolves into a small number of recognisable sources rather than a sprawling, unknowable web.

Where wealth derives from corporate or legal entities, there is an added check: you should ensure it came from profits generated from legitimate business and commercial activities. A business as a source of wealth is only as clean as the trading behind it, so the question is not merely “does the client own a company?” but “did that company earn its profits lawfully?”

The level of detail you go into is set by the client’s risk profile. It is often difficult to identify wealth from all the different sources specifically, and there is no expectation to do so — a low-risk client’s broad categories may be enough, while a high-risk client warrants a finer breakdown of the sources that matter. Where publicly disclosed information exists, agents can rely on it; in its absence, they are left to rely primarily on the client’s declarations, and the inability to verify those declarations must itself be taken into account when establishing the true value of the wealth.

Concentrate on the sources that form the major proportion of the wealth. If eighty per cent of a customer’s net worth came from selling a business they founded, that is where your attention belongs — not on a minor rental income or a modest inheritance that barely moves the total. Effort spent on the dominant sources is effort spent where the risk actually lives.

How do you verify source of wealth on a risk-sensitive basis?

The third step is verification — and it is explicitly risk-sensitive. It is not necessary to corroborate every source or to verify the entire net worth, which is almost always impossible. Instead, depending on the level of risk the client poses, you seek evidence from a reliable, independent source that corroborates the essence of how the wealth was generated, focusing on the sources that produced the major proportion of it. The level of proof reflects the risk profile and must be enough to resolve any red flags.

That word “essence” is the key to keeping this proportionate. You are corroborating the substance of the story — that this person did build a business, or did inherit an estate, or does earn what they say they earn — not auditing every line of a lifetime’s finances. The goal is confidence that the account is true in its essentials, sufficient to lay any red flags to rest.

The two columns are the same three-step method applied at two intensities. For a low-risk client, public information, open sources and official documents the client provides will generally suffice. For a high-risk client — a PEP, or a relationship with unresolved red flags — you move to trust deeds, audited accounts and reliable independent third-party information such as a letter from a lawyer or accountant. The risk drives the evidence, and applying the same measures to clients of very different risk levels is a recognised failure in either direction: too little for the high-risk client, wasted effort on the low-risk one.

Verification also has to resolve red flags specifically. If something about the client prompted concern — a reluctance to disclose, an inconsistency, adverse information — the corroboration you gather must be capable of putting that particular concern to rest. Generic evidence that does not address the actual red flag leaves the risk live, however thick the file looks.

What evidence can you use to corroborate source of wealth?

Source of wealth is established through a combination of sources: publicly available information, external confirmations, and information provided by the client. No single document usually does the job, and the strength of the picture comes from several independent pieces pointing the same way. The richer the combination, the more robust the conclusion.

Some of these deserve emphasis. Public and asset-disclosure registers are particularly valuable for PEPs, whose wealth and interests may be a matter of public record. Reputable internet and social-media research can reveal whether a customer’s visible lifestyle is consistent with their declared income — a mismatch there is a red flag worth pursuing. Tax returns and audited accounts tie wealth to documented, independently prepared figures, which is why maintaining audited financial statements and clean accounting records makes a business owner’s own source of wealth so much easier to evidence.

For business owners specifically, the chain from wealth to evidence usually runs through the company’s financial records. Dividends shown in annual reports, profits shown in audited accounts, and income shown in corporate tax filings all corroborate that a customer’s business genuinely generated the wealth attributed to it. Where those records are absent or unreliable, the source of wealth becomes correspondingly harder to stand behind.

What does a professional confirmation letter need to say?

A confirmation letter from a regulated professional — an accountant or lawyer with knowledge of the client — is one of the strongest pieces of corroboration for a high-risk client, but only if it actually confirms something specific. A vague letter attesting to general good standing adds little. The letter is expected to state which checks were performed and which sources were used to verify the source of funds or wealth, and ideally to give information on the value of the wealth.

In other words, the letter should map onto the evidence. It would be expected to state which of the relevant items — salary documents, tax returns, bank statements, evidence of title, audited accounts and so on — the professional relied upon in reaching their confirmation. That specificity is what makes the letter independent corroboration rather than a character reference: a reviewer can see exactly what was checked and by whom.

Treat the letter as one component, not a substitute for your own judgement. It sits alongside registers, open-source research and the client’s own documents to build the combined picture — and a well-drafted letter that specifies exactly what was verified is worth far more than a general assurance that resolves nothing. If a letter arrives without that specificity, it is reasonable to go back and ask for it.

How do you record and document source of wealth?

All relevant source-of-wealth information should be obtained, collected and appropriately recorded — and the standard the record must meet is specific: it should enable an independent reviewer, whether internal or external, to understand the source of wealth and how it was acquired from the information recorded. If a reviewer cannot follow your reasoning from the file alone, the documentation has failed, however much work went into the underlying analysis.

Two things matter most in the record. First, document the questions asked of, and the answers given by, the client — the SoW assessment is a dialogue, and the dialogue is part of the evidence. Second, retain copies of any supporting material the client provided or that you independently obtained. A conclusion recorded without the questions behind it, or without the documents that support it, is an assertion rather than a record.

This links straight to the wider AML record-keeping obligation. Source-of-wealth records are among the customer-information and ongoing-monitoring records that must be retained and produced to the authorities on request, so the SoW file is not a stand-alone artefact — it is part of the customer record that a regulator may one day ask to see. Building it to the “independent reviewer” standard is what makes it useful if that day comes.

What does poor source-of-wealth practice look like?

Poor source-of-wealth practice has recognisable signatures, and reviewers know them well. The common thread is a failure to be genuinely risk-based — either applying too little rigour where risk is high, or leaning on information that was never really tested. Recognising these patterns in your own process is the fastest way to fix it.

The most damaging of these is face-value acceptance in the presence of red flags. Taking a client’s word is acceptable for a genuinely low-risk relationship with nothing amiss; doing the same when there are warning signs — reluctance to disclose, inconsistencies, a lifestyle out of step with declared income — is exactly the failure that lets illicit wealth through. Red flags are a signal to investigate further, never to record the explanation and move on.

The SoW/SoF confusion is worth singling out because it is so often a design problem rather than a knowledge problem. When forms and systems blur the two concepts, even a competent officer produces a muddled file. Fixing the tooling — separate fields, clear prompts, real guidance — frequently fixes the practice, which is why a procedures-and-forms review is usually the highest-value first step.

What does good source-of-wealth practice look like?

Good practice is the mirror image: risk-based, documented, and willing to challenge. The businesses that get SoW right treat it as a rigorous, evidenced assessment for the clients who warrant it, with clear procedures and genuine escalation behind it. None of it is exotic — it is disciplined application of the three-step method with the paperwork to prove it.

1. Establish and document SoW for PEPs and other high-risk business relationships — not as an afterthought, but as a defined part of onboarding and review.
2. Escalate and advise effectively — with clear procedures for compliance-officer (MLCO) approval where a relationship warrants it.
3. Evidence challenge — be able to show that SoW information was challenged during CDD where appropriate, and that more objective information was sought when needed.
4. Follow up on gaps — proactively chase updates and close gaps in SoW information for PEPs and higher-risk clients throughout the relationship.
5. Set risk-based policies — spell out the nature and extent of EDD required for higher-risk and PEP customers, particularly on source of wealth.
6. Demonstrate the risk-based approach — perform enhanced validation and corroboration for PEPs and higher-risk clients, collecting evidence of challenge where required.

Worked example. A registered agent onboards a PEP whose declared net worth is roughly AED 40 million, said to derive mainly from a manufacturing business built over two decades, plus an inherited property. Because the client is high-risk, the agent does not stop at the declaration: it obtains audited accounts and annual reports showing the dividends drawn from the business, checks the property against the relevant register, runs reputable open-source research that finds the lifestyle consistent with the income, and — on one unresolved point — challenges the client for a lawyer’s confirmation letter specifying exactly which documents were checked. The compliance officer approves the relationship on the strength of that file. Every question, answer and document is recorded so an independent reviewer could follow it. The same client accepted at face value, with the AED 40 million simply noted and no corroboration, is the poor-practice version — and the difference between the two files is what a regulator would scrutinise.

The pattern that ties good practice together is demonstrability. It is not enough to have done the work; you must be able to show it — the risk assessment, the corroboration, the challenge, the escalation. Source of wealth done well is a defensible, evidenced narrative, and that is precisely what protects the business if a relationship is ever questioned. Building that capability is a core part of the source of wealth and EDD support Fastlane provides.

Key terms used in source-of-wealth checks

Source-of-wealth work uses a compact set of terms drawn from the AML and enhanced-due-diligence framework. These are the ones that recur across procedures, files and reviews.