Key Takeaways
4 insights · 10 min readAML compliance is mandatory for UAE DNFBPs — auditors, accountants, real estate agents, precious-metals dealers and corporate service providers — under Federal Decree-Law No. 20 of 2018.
The core duties: appoint an MLRO, register on goAML, run a risk assessment, apply customer due diligence, train staff and file STRs.
Penalties are severe and personal as well as corporate — fines from around AED 10,000 up to AED 10 million, plus imprisonment.
The UAE exited the FATF grey list in February 2024 — strong DNFBP compliance is what keeps it off. Fastlane handles AML end to end.
AML compliance in the UAE is the set of legal obligations, controls and procedures a business must implement to detect, prevent and report money laundering and terrorism financing — primarily under Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019. It applies to financial institutions and to Designated Non-Financial Businesses and Professions (DNFBPs): auditors and accountants, real estate agents, precious-metals dealers, and corporate service providers. The essentials are an MLRO, goAML registration, a risk assessment, CDD, staff training and STR filing. Fastlane handles the full AML compliance programme.
In this guide
What AML compliance means Who must comply Why it matters Core obligations The 3 stages of ML Penalties What a programme includes Ongoing compliance How Fastlane helpsIf your business operates in the UAE as a regulated professional — an auditor, accountant, real estate broker, precious-metals dealer or corporate service provider — AML compliance is a legal obligation, not a formality. This guide sets out what AML compliance means, who it applies to, exactly what the law requires, and the (serious) consequences of getting it wrong — and how Fastlane delivers a complete AML compliance programme so you meet every obligation.
What does AML compliance mean?
Anti-Money Laundering (AML) compliance is the set of legal obligations, internal controls, policies and procedures a business must implement to detect, prevent and report money laundering, terrorism financing and proliferation financing.
In the UAE, AML is governed primarily by Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism and Illegal Organisations, together with its implementing regulation, Cabinet Decision No. 10 of 2019. Both have been amended several times, including in 2021 and 2024, as the UAE has strengthened its regime.
The law defines money laundering as the process by which people disguise the illicit origin of criminal proceeds to make them appear legitimate — including transferring, concealing or acquiring such proceeds, or assisting an offender to escape punishment.
Legal framework at a glance
Federal Decree-Law No. 20 of 2018 (as amended) and Cabinet Decision No. 10 of 2019 (as amended) form the backbone of AML compliance in the UAE, supported by supervisory guidance from the Ministry of Economy and the UAE Central Bank. The exact amending instruments are periodically updated — always work from the current consolidated version.
Who must comply with AML in the UAE?
AML obligations apply to two broad groups of regulated entities:
- Financial Institutions (FIs) — banks, insurance companies, exchange houses and investment firms, supervised by the Central Bank of the UAE, the Securities and Commodities Authority and insurance regulators.
- Designated Non-Financial Businesses and Professions (DNFBPs) — non-financial businesses supervised by the Ministry of Economy (MoE) and other authorities.
Under the Ministry of Economy’s supervision, four DNFBP categories are specifically in scope:
| DNFBP category | Abbrev. | Examples |
|---|---|---|
| Real Estate Agents & Brokers | REAB | Developers, brokers and agents in property transactions (cash/virtual-asset transactions from AED 55,000 are reportable) |
| Dealers in Precious Metals & Stones | DPMS | Gold traders, diamond dealers and jewellers in cash transactions from AED 55,000 |
| Independent Accountants & Auditors | IAA | Licensed audit firms, independent accountants and bookkeeping professionals |
| Trust & Corporate Service Providers | TCSP | Company-formation agents, registered-agent and corporate-secretarial firms |
Is Fastlane a DNFBP?
Yes. As a Ministry of Economy-registered audit firm and FTA-registered tax agent, Fastlane is itself a DNFBP subject to AML obligations — and is fully equipped to help other DNFBPs achieve and maintain compliance. See our AML compliance services and audit services.
Why does AML compliance matter in the UAE?
The UAE’s position as a global commercial hub — open economy, advanced financial infrastructure, major free zones — makes it an attractive target for financial criminals. The UAE’s own National Risk Assessment (NRA) identifies sectors such as real estate, precious-metals trading and corporate service provision as particularly vulnerable to money laundering and terrorism financing.
The FATF grey-list milestone — and why compliance still matters
In February 2024, the UAE was removed from the FATF “grey list” of jurisdictions under increased monitoring — the result of major AML reforms. That is a significant achievement, but it raises the bar rather than lowering it: continued, robust AML compliance across DNFBPs is exactly what keeps the UAE off any future list, and supervisory enforcement has continued in full.
Beyond the legal imperative, strong AML compliance protects your business reputation, maintains your trade-licence standing, and supports the UAE’s alignment with FATF international standards — which directly affects the country’s global financial position.
What are the core AML obligations under UAE law?
The AML/CFT Law and Cabinet Decision set out minimum statutory obligations for every regulated DNFBP:
| Obligation | What it requires |
|---|---|
| Assess your risks | Know the ML/TF risks specific to your business, customers and geography |
| Appoint a Compliance Officer (MLRO) | A qualified officer, approved by the Ministry of Economy |
| Customer Due Diligence (CDD) | Verify clients, understand the relationship, apply enhanced checks for high-risk clients |
| Business-Wide Risk Assessment (BRA) | A formal, documented assessment, updated at least annually |
| Policies & controls | Written, senior-management-approved AML policies |
| Report suspicious transactions (STRs) | File STRs via the UAE FIU’s goAML platform when grounds arise |
| Keep records 5+ years | Retain customer, transaction and due-diligence records |
| Train staff | Role-specific AML training for relevant employees |
| Sanctions screening | Check customers and transactions against UN, UAE and other sanctions lists |
Not sure if your business needs AML registration?
Get a free check from our compliance team — we’ll tell you if you’re in scope and what you need.
What are the three stages of money laundering?
Understanding how laundering works helps you spot suspicious behaviour in your own business. It typically moves through three stages:
01 · Placement
Illicit funds enter the financial system — e.g. depositing cash through jewellery sales, property purchases or foreign exchange.
02 · Layering
Funds are moved through multiple transactions, jurisdictions or structures to break the audit trail — complex corporate layers, offshore accounts, crypto transfers.
03 · Integration
Laundered funds re-enter the legitimate economy — property, luxury goods, company investments, or via professionals such as lawyers and accountants.
DNFBPs are most exposed at the placement and integration stages, which is why the Ministry of Economy places heavy supervisory emphasis on cash-intensive sectors and professional service providers.
What are the penalties for AML non-compliance?
Non-compliance is a serious criminal and regulatory matter. Under the AML/CFT Law, sanctions include:
| Violation | Penalty |
|---|---|
| Failure to report suspicious transactions | Imprisonment + fine AED 100,000 – 1,000,000 |
| “Tipping off” a client about an STR/investigation | Imprisonment (min. 6 months) + fine AED 100,000 – 500,000 |
| Violating UN sanctions resolutions | Imprisonment or fine AED 50,000 – 5,000,000 |
| Committing money laundering | Imprisonment up to 10 years + fine AED 100,000 – 5,000,000 |
| Aggravated money laundering | Temporary imprisonment + fine AED 300,000 – 10,000,000 |
| Financing terrorism from proceeds | Life or min. 10 years + fine AED 300,000 – 10,000,000 |
| Any other AML/CFT Law breach | Imprisonment or fine AED 10,000 – 100,000 |
The risk is personal, not just corporate
These sanctions can apply to the business entity, its senior management and individual employees. There is no “good faith” defence for systemic non-compliance — only for the good-faith reporting of suspicious activity. Separately, supervisory authorities can impose administrative fines for AML breaches. Treat compliance as a personal as well as a corporate obligation.
What does an AML compliance programme include?
A compliant AML programme for a UAE DNFBP brings together all of the following:
| Element | What it covers |
|---|---|
| 1. Governance | An MoE-approved MLRO, clear reporting lines, senior oversight and independent audit |
| 2. Business-Wide Risk Assessment | Documented, annually updated assessment across customers, products, geographies and channels |
| 3. Policies & procedures | Customer acceptance, CDD, EDD, monitoring, sanctions screening, record-keeping, escalation |
| 4. Customer Due Diligence | Identity verification, relationship purpose, ongoing monitoring, enhanced checks for PEPs/high-risk |
| 5. goAML & STR filing | Registration on the UAE FIU’s goAML platform and timely STR/SAR submission |
| 6. Staff training | Regular, role-specific training on typologies, red flags and escalation |
| 7. Record-keeping | Customer files, transactions, risk assessments and STRs kept for 5+ years |
What is monthly (ongoing) AML compliance?
Many DNFBPs complete their initial AML registration and then neglect the ongoing obligations — which is exactly where enforcement action most often lands. Ongoing AML compliance keeps your programme active, updated and audit-ready throughout the year.
✓ Active, maintained programme
Risk screening kept current, BRA updated, STRs handled, staff trained, goAML monitored — audit-ready whenever the Ministry of Economy asks.
✗ “Register and forget”
An out-of-date BRA, lapsed screening, no training log and an unmonitored goAML account — the classic profile that draws enforcement.
Fastlane’s ongoing AML service covers customer risk screening and sanctions checks, review and escalation of suspicious transactions, BRA maintenance, goAML monitoring and STR support, regulatory updates and Ministry of Economy correspondence, annual staff-training coordination, and MLRO outsourcing.
How does Fastlane help with AML compliance?
Fastlane delivers AML as a complete, managed programme — set-up and ongoing — so you meet every obligation without building an in-house function.
- MLRO appointment — a qualified, Ministry of Economy-approved Compliance Officer, or fully outsourced MLRO.
- goAML registration — onto the UAE FIU platform, correctly and promptly.
- Business-Wide Risk Assessment — documented and kept current at least annually.
- Policies & CDD — written AML policies and customer due diligence tailored to your business.
- Training & screening — staff training and sanctions screening built into your routine.
- Ongoing compliance — monthly monitoring, STR support and MoE correspondence — alongside audit, accounting and Corporate Tax under one roof.
Key AML terms
• DNFBP — Designated Non-Financial Business or Profession; the non-financial businesses in AML scope.
• MLRO — Money Laundering Reporting Officer; your MoE-approved compliance lead.
• CDD / EDD — Customer (and Enhanced) Due Diligence; verifying and monitoring clients.
• BRA — Business-Wide Risk Assessment; your documented, annual ML/TF risk analysis.
• STR / goAML — Suspicious Transaction Report, filed via the UAE FIU’s goAML platform.
• PEP — Politically Exposed Person; a higher-risk client requiring enhanced checks.
Fastlane Compliance Team
Fastlane is a Ministry of Economy-registered audit firm and FTA-registered tax agent — itself a DNFBP — delivering full AML compliance programmes for UAE businesses: MLRO, goAML, risk assessments, policies, training and ongoing monthly compliance.
Ask the team a question