AML (Anti-Money Laundering) focuses on preventing the movement and concealment of illegally obtained funds.
CFT (Counter Terrorist Financing) focuses on preventing funds from being used to support terrorism or illegal organisations.
UAE regulations require compliance with both.
Yes. Free zone entities conducting regulated activities must comply with applicable UAE AML/CFT regulations regardless of their licensing jurisdiction.
AML obligations apply to various regulated sectors including real estate companies, jewellery and precious metals dealers, accounting and audit firms, law firms, company formation providers, banks, exchange houses, finance companies, payment providers, and virtual asset businesses.
Yes. Dealers in precious metals and stones, including jewellery retailers, gold traders, diamond dealers, and luxury watch businesses, fall under UAE AML regulations and may be required to implement AML controls and register for goAML.
Yes. Real estate brokers, agents, developers, leasing intermediaries, and property resellers are considered regulated sectors under UAE AML/CFT regulations and are required to conduct customer due diligence and report suspicious activities where applicable.
Yes. Company formation consultants, corporate service providers, nominee service providers, and trust service firms are classified as DNFBPs and are subject to AML/CFT obligations in the UAE.
In the UAE, AML/CFT compliance is built on a set of core regulatory obligations that apply to both Financial Institutions and Designated Non-Financial Businesses and Professions (DNFBPs), depending on their licensed activity.
The key foundational requirements include:
In addition to these core requirements, businesses are also expected to implement risk-based operational measures, which may vary depending on the sector. This can include customer due diligence (CDD/EDD), sanctions and PEP screening, transaction monitoring, and Ultimate Beneficial Owner (UBO) verification, particularly for higher-risk activities or regulated industries.
Yes. Company formation consultants, corporate service providers, nominee service providers, and trust service firms are classified as DNFBPs and are subject to AML/CFT obligations in the UAE.
Businesses operating in regulated sectors may be required to register on the UAE FIU goAML platform to enable suspicious transaction reporting and regulatory compliance.
Suspicious Activity Reports (SARs) or Suspicious Transaction Reports (STRs) are submitted electronically through the UAE FIU’s goAML portal after identifying unusual, high-risk, or potentially suspicious activities or transactions.
Yes. Virtual Asset Service Providers (VASPs), crypto exchanges, digital asset brokers, and related fintech businesses are subject to AML/CFT regulations and licensing requirements in the UAE.
Most AML/CFT records, including customer due diligence documents, transaction records, and compliance documentation, should generally be retained for a minimum period of five years.
Regulatory non-compliance may result in financial penalties, remediation actions, licence restrictions, reputational impact, or additional regulatory scrutiny depending on the severity of the breach.
Regulated businesses are expected to provide ongoing AML/CFT training to relevant employees to ensure awareness of compliance obligations, suspicious activity indicators, and reporting procedures.
If the business operates within a regulated activity or sector covered under UAE AML regulations, compliance obligations may apply regardless of business size.
CDD refers to the process of identifying and verifying customers, understanding the nature of the business relationship, and assessing potential risk before onboarding or conducting transactions.
A UBO is the individual who ultimately owns, controls, or benefits from a company or legal arrangement, even where ownership structures involve multiple entities or shareholders.