Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) compliance has become one of the most critical regulatory obligations for businesses operating in the UAE. With global watchdogs including the FATF (Financial Action Task Force) monitoring the UAE’s compliance standards, the regulatory environment has intensified significantly in recent years.
Who Must Comply with UAE AML Regulations?
UAE AML/CFT obligations apply to Designated Non-Financial Businesses and Professions (DNFBPs) and financial institutions. DNFBPs include:
- Real estate agents and brokers
- Dealers in precious metals and stones
- Lawyers, notaries, and other legal professionals
- Accountants and auditors
- Corporate service providers (company formation agents)
- Virtual asset service providers
Key UAE AML Compliance Requirements
1. goAML Registration
All DNFBPs and financial institutions must register on the UAE Financial Intelligence Unit’s goAML platform. This platform is used to submit Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs). Failure to register is a serious regulatory offence.
2. Beneficial Ownership Register
UAE companies are required to maintain an Ultimate Beneficial Owner (UBO) register and submit this information to the relevant licensing authority. The UBO is any natural person who ultimately owns or controls 25% or more of a company.
3. Customer Due Diligence (CDD)
Regulated entities must conduct Customer Due Diligence before establishing a business relationship, including verifying the identity of clients and beneficial owners. Enhanced Due Diligence (EDD) is required for higher-risk clients, including Politically Exposed Persons (PEPs).
4. AML/CFT Policies and Procedures
Regulated businesses must have written AML/CFT policies, controls, and procedures in place. These must be risk-based, documented, and regularly reviewed.
5. Employee Training
Staff who handle transactions or client onboarding must receive regular AML/CFT training. Training records must be maintained.
6. Suspicious Transaction Reporting
Any transaction suspected to involve money laundering or terrorism financing must be reported to the UAE Financial Intelligence Unit (FIU) via goAML. Tipping off the subject of a report is a criminal offence.
Penalties for AML Non-Compliance in the UAE
AML violations in the UAE are treated seriously. Penalties include:
- Administrative fines ranging from AED 50,000 to AED 5 million per violation
- Licence suspension or revocation
- Criminal prosecution with potential imprisonment
- Reputational damage and blacklisting
The UAE’s FATF Journey and What It Means for Business
The UAE was placed on the FATF Grey List in 2022 and made significant legislative and enforcement reforms to exit in 2024. Businesses operating in the UAE should be aware that regulatory scrutiny remains elevated, and authorities are actively enforcing AML/CFT requirements across all regulated sectors.
How Elysian Supports UAE AML Compliance
Elysian Consulting Group provides comprehensive AML compliance services for UAE DNFBPs and businesses. Our services include:
- goAML registration and ongoing support
- UBO register preparation and submission
- AML/CFT policy and procedure development
- Customer Due Diligence (CDD/EDD) framework implementation
- AML risk assessments
- Staff AML training programmes
- Suspicious Transaction Report (STR) guidance
Get AML compliant today — contact Elysian at elysianuae.com/contact/
Frequently Asked Questions
Q: Does my company need to register on goAML?
If your business falls within the DNFBP categories or is a financial institution in the UAE, goAML registration is mandatory. Elysian can confirm your obligations based on your business activity.
Q: What is the UBO threshold in the UAE?
Any natural person who owns or controls 25% or more of a UAE company must be registered as an Ultimate Beneficial Owner in the company’s UBO register.
Q: How often should AML policies be reviewed?
AML/CFT policies should be reviewed at least annually and whenever there is a material change in business activities, ownership, or regulatory requirements.
