AML Laws for UAE: A Complete Guide to Anti-Money Laundering Compliance

The United Arab Emirates has positioned itself as a global financial and trade hub, and with that status comes heightened responsibility to prevent money laundering and terrorist financing. Over the past few years, the UAE has significantly strengthened its Anti-Money Laundering (AML) framework, driven partly by its removal from the Financial Action Task Force (FATF) grey list and its commitment to maintaining international financial credibility. Understanding these laws is essential for businesses, financial institutions, and individuals operating within the country.

The Legal Framework

The cornerstone of the UAE's AML regime is Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism, later amended by Federal Decree-Law No. 26 of 2021. This legislation is supported by Cabinet Decision No. 10 of 2019, which lays out the executive regulations detailing how businesses must implement compliance measures. Together, these laws criminalize money laundering, terrorist financing, and the financing of illegal organizations, while establishing clear obligations for reporting entities.

Who Needs to Comply?

AML obligations in the UAE extend beyond banks. The law applies broadly to Designated Non-Financial Businesses and Professions (DNFBPs), which include real estate agents, dealers in precious metals and stones, auditors, company service providers, and lawyers or notaries handling financial transactions on behalf of clients. Free zone entities, including those in DIFC and ADGM, also fall under specific AML regimes tailored to their jurisdictions.

Key Compliance Requirements

Businesses operating in the UAE must implement several core measures:

Customer Due Diligence (CDD): Entities must verify the identity of their customers and beneficial owners before establishing a business relationship. Enhanced due diligence is required for higher-risk customers, including politically exposed persons (PEPs).

Suspicious Transaction Reporting (STR): Any transaction suspected of being linked to money laundering or terrorist financing must be reported to the UAE's Financial Intelligence Unit (FIU) through the goAML platform.

Record Keeping: Businesses are required to maintain transaction records and customer due diligence documentation for a minimum of five years.

AML Compliance Officer: Reporting entities must appoint a dedicated compliance officer responsible for monitoring adherence to AML obligations and liaising with regulators.

Risk Assessment: Companies must conduct and regularly update institutional risk assessments to identify vulnerabilities specific to their business model.

Regulatory Bodies

Several authorities oversee AML enforcement in the UAE. The UAE Central Bank regulates banks and financial institutions, while the Ministry of Economy oversees DNFBPs outside the financial free zones. The Financial Intelligence Unit collects and analyzes suspicious transaction reports, and the Executive Office of AML/CFT coordinates national strategy. Free zones like DIFC and ADGM have their own regulators—the DFSA and FSRA, respectively—that enforce AML rules within their jurisdictions.

Penalties for Non-Compliance

The UAE imposes stringent penalties for AML violations. Administrative fines can range from AED 50,000 to AED 5 million per violation, and repeated or severe breaches can result in license suspension or revocation. Criminal penalties for money laundering offenses include imprisonment and fines that can reach millions of dirhams, particularly in cases involving terrorist financing.

Recent Developments

Following its 2024 removal from the FATF grey list, the UAE has continued refining its AML infrastructure, including expanding beneficial ownership registries, tightening virtual asset service provider (VASP) regulations, and increasing coordination between federal and free zone regulators. Businesses should expect continued regulatory evolution as the UAE works to maintain its improved international standing.

Final Thoughts

For any business operating in the UAE, AML compliance is no longer optional—it's a fundamental operational requirement. Companies should invest in robust compliance frameworks, regular staff training, and reliable transaction monitoring systems to avoid regulatory penalties and reputational damage. As enforcement intensifies, staying proactive rather than reactive will be key to long-term success in the UAE market.

This article is for informational purposes only and does not constitute legal advice. Businesses should consult a licensed UAE legal or compliance professional for guidance specific to their situation.