What Does AML Compliance Mean?
Anti-Money Laundering (AML) compliance refers to the set of legal obligations, internal controls, policies, and procedures that businesses must implement to detect, prevent, and report money laundering, terrorism financing, and proliferation financing.
In the UAE, AML compliance is governed primarily by Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering, Combating the Financing of Terrorism and Illegal Organisations, and its implementing regulation, Cabinet Decision No. 10 of 2019 — both of which have been updated as recently as 2024.
The law defines money laundering as the process by which individuals disguise the illicit origin of criminal proceeds in order to make them appear derived from legitimate sources. This includes transferring, concealing, acquiring, or even assisting someone to escape punishment for the underlying crime.
Who Must Comply with AML in UAE?
AML obligations apply to two main categories of regulated entities in the UAE:
- Financial Institutions (FIs) — banks, insurance companies, exchange houses, and investment firms regulated by the Central Bank of the UAE, the Securities and Commodities Authority, and the Insurance Authority.
- Designated Non-Financial Businesses and Professions (DNFBPs) — non-financial businesses regulated by the Ministry of Economy and Tourism (MoET) and other supervisory authorities.
Under the Ministry of Economy and Tourism's supervision, the following four categories of DNFBPs are specifically covered:
| DNFBP Category | Abbreviation | Examples |
|---|---|---|
| Real Estate Agents and Brokers | REAB | Property developers, real estate brokers, rental agents involved in transactions above AED 55,000 |
| Dealers in Precious Metals and Precious Stones | DPMS | Gold traders, diamond dealers, jewellery shops involved in cash transactions above AED 55,000 |
| Independent Accountants and Auditors | IAA | Licensed audit firms, independent accountants, bookkeeping professionals |
| Trust and Corporate Service Providers | TCSP | Company formation agents, registered agent services, corporate secretarial firms |
Why AML Compliance Matters in UAE
The UAE's position as a global commercial hub — with an open economy, advanced financial infrastructure, and major free zones — makes it an attractive target for financial criminals seeking to launder illegal funds. The UAE's own National Risk Assessment (NRA) identifies sectors like real estate, precious metals trading, and corporate service provision as particularly vulnerable to money laundering and terrorism financing risks.
Beyond the legal imperative, robust AML compliance protects your business reputation, maintains your trade licence standing, and supports the UAE's broader efforts to align with FATF (Financial Action Task Force) international standards — which directly affects the country's global financial standing.
Not sure if your business needs AML registration? WhatsApp us for a free check →Core AML Obligations Under UAE Law
The AML/CFT Law and Cabinet Decision set out the following minimum statutory obligations for every regulated DNFBP:
- Identify, assess and understand risks — You must know the ML/TF risks specific to your business type, customers, and geography.
- Appoint a Compliance Officer (MLRO) — A qualified Money Laundering Reporting Officer must be designated and approved by the Ministry of Economy.
- Implement Customer Due Diligence (CDD) — Verify who your clients are, understand the nature of the business relationship, and apply enhanced checks for high-risk clients.
- Conduct a Business-Wide Risk Assessment (BRA) — A formal, documented risk assessment updated at least annually.
- Establish internal policies and controls — Written AML policies approved by senior management, covering CDD, transaction monitoring, record-keeping, and suspicious activity reporting.
- Report suspicious transactions (STRs) — File Suspicious Transaction Reports via the UAE FIU's goAML platform when you have reasonable grounds to suspect criminal activity.
- Maintain records for at least 5 years — All customer files, transactions, and due diligence records must be retained and available to authorities on request.
- Train your staff — All employees relevant to AML must receive adequate, role-specific training.
- Screen against sanctions lists — Regularly check customers and transactions against UN, UAE, and other relevant sanctions lists.
The 3 Stages of Money Laundering
Understanding how money laundering works helps you identify suspicious behaviour in your own business. Money laundering typically moves through three stages:
DNFBPs are particularly exposed at the placement and integration stages, which is why the Ministry of Economy places heavy supervisory emphasis on cash-intensive sectors and professional service providers.
AML Penalties in UAE: What's at Stake
Non-compliance with AML obligations is a serious criminal and regulatory matter in the UAE. The following sanctions apply under the AML/CFT Law:
| Violation | Penalty |
|---|---|
| Failure to report suspicious transactions (Article 15 violation) | Imprisonment + fine of AED 100,000 – AED 1,000,000 |
| "Tipping off" — warning a client about an STR or investigation | Imprisonment (min. 6 months) + fine AED 100,000 – AED 500,000 |
| Violating UN Security Council resolutions on sanctions | Imprisonment or fine AED 50,000 – AED 5,000,000 |
| Committing money laundering (Article 2 acts) | Imprisonment up to 10 years + fine AED 100,000 – AED 5,000,000 |
| Aggravated ML (abuse of position, through NPO, organized crime, recidivism) | Temporary imprisonment + fine AED 300,000 – AED 10,000,000 |
| Using proceeds to finance terrorism | Life imprisonment or min. 10 years + fine AED 300,000 – AED 10,000,000 |
| Any other provision of the AML/CFT Law | Imprisonment or fine AED 10,000 – AED 100,000 |
What Does an AML Compliance Programme Include?
A compliant AML programme for a UAE DNFBP should include all of the following elements:
1. Governance Structure
A formally appointed Compliance Officer / MLRO approved by the Ministry of Economy, supported by clear reporting lines, senior management oversight, and an independent audit function.
2. Business-Wide Risk Assessment (BRA)
A documented, annually updated assessment of your exposure to ML, terrorism financing, and proliferation financing risks — covering your customers, products, geographies, and delivery channels.
3. AML Policies and Procedures
Written internal policies covering customer acceptance, CDD, enhanced due diligence (EDD), transaction monitoring, sanctions screening, record-keeping, and suspicious activity escalation.
4. Customer Due Diligence (CDD)
Verification of customer identity, understanding of the business relationship purpose, and ongoing monitoring — with enhanced checks for high-risk clients, PEPs, and high-risk jurisdictions.
5. goAML Registration & STR Filing
Registration on the UAE FIU's goAML platform and timely submission of Suspicious Transaction Reports (STRs) or Suspicious Activity Reports (SARs) when required.
6. Staff Training
Regular, role-specific AML training for all staff — from frontline employees to board members — covering typologies, red flags, and internal escalation procedures.
7. Record-Keeping
All customer files, transaction records, risk assessments, and STRs must be retained for a minimum of 5 years and made available to the Ministry of Economy or other authorities on request.
Need Full AML Compliance for Your Business?
Fastlane handles everything — MLRO appointment, goAML registration, BRA, policies, staff training, and ongoing monthly compliance. One fixed fee. Full peace of mind.
What is Monthly AML Compliance?
Many DNFBPs complete their initial AML registration and then neglect their ongoing obligations — which is where enforcement actions most commonly occur. Monthly AML compliance services ensure your programme remains active, updated, and audit-ready throughout the year.
Fastlane's monthly AML compliance service covers:
- Ongoing customer risk screening and sanctions list checks
- Review and escalation of any suspicious transactions
- Maintaining and updating your Business-Wide Risk Assessment
- goAML portal monitoring and STR support
- Regulatory updates and Ministry of Economy correspondence
- Annual staff training coordination
- Compliance Officer (MLRO) outsourcing