Anti-Money Laundering (AML) compliance has become an increasingly important part of doing business in the United Arab Emirates. Businesses operating in sectors exposed to money laundering, terrorist financing and proliferation financing risks need effective policies, controls and procedures to identify, assess and manage those risks.
For businesses that fall within the UAE’s regulated framework, AML compliance is not simply about having an AML policy sitting in a company folder. An effective programme should be risk-based, documented, implemented and regularly reviewed.
The UAE’s current AML framework includes Federal Decree-Law No. 10 of 2025 regarding Anti-Money Laundering, Combating the Financing of Terrorism and Proliferation Financing, together with Cabinet Resolution No. 134 of 2025, which provides the executive regulations. The Ministry of Economy & Tourism currently lists these among the UAE’s AML legislation.
This comprehensive UAE AML compliance checklist explains the major areas businesses should review, including:
AML compliance refers to the policies, procedures, systems and controls businesses use to prevent their services, products or operations from being misused for money laundering, terrorist financing or related financial crimes.
The UAE has developed a comprehensive AML/CFT/CPF framework covering financial institutions and relevant Designated Non-Financial Businesses and Professions (DNFBPs).
The Ministry of Economy & Tourism identifies several categories of businesses that may fall within the DNFBP framework, including real estate businesses, auditing and accounting firms, dealers in precious metals and stones, and trust and company service providers.
For these businesses, AML compliance should be treated as an ongoing business process rather than a one-time registration exercise.
A business may need to understand:
AML requirements can apply differently depending on the nature of a business.
Businesses operating within DNFBP sectors should carefully assess their AML obligations.
The Ministry of Economy & Tourism’s official goAML guidance identifies, among others:
Other regulated businesses may fall under the supervision of different UAE authorities depending on their activities.
Therefore, a business should not assume that having a trade licence automatically determines all of its AML obligations. The actual business activities, customers, transactions and regulatory framework should be considered.
The first step is understanding whether your business falls within the UAE AML framework and which supervisory authority applies.
Businesses should identify:
For example, the Ministry of Economy & Tourism specifically includes accounting and auditing firms among the businesses that may fall within the DNFBP framework.
For businesses that fall within the applicable DNFBP framework, goAML registration is an important compliance requirement.
The UAE Ministry of Economy & Tourism describes goAML as the platform used by the FIU to receive, analyse and distribute suspicious transaction reports and suspicious activity reports.
The Ministry’s guidance also identifies accounting and auditing firms among the businesses that may be DNFBPs.
Businesses should ensure that:
An effective AML programme needs clear accountability.
Depending on the business and applicable requirements, an organisation may need an appropriately appointed compliance officer or MLRO function.
The responsible person should have sufficient authority, knowledge, resources and access to management to perform their responsibilities effectively.
Responsibilities may include:
An AML compliance review can help identify weaknesses before they become larger compliance problems.
A professional review may examine:
An AML compliance checklist is a structured list of controls and procedures a business can use to review its anti-money laundering framework. It can cover risk assessment, CDD, beneficial ownership, EDD, screening, monitoring, reporting, training and record keeping.
AML obligations apply to businesses covered by the UAE’s AML framework. The specific requirements depend on the business activity, sector, regulator and risk profile.
Yes. The UAE Ministry of Economy & Tourism’s goAML guidance specifically identifies auditing and accounting firms among the businesses that may fall within the DNFBP framework.
goAML is the reporting platform used by the UAE Financial Intelligence Unit to receive and analyse suspicious transaction and activity reports. The Ministry of Economy & Tourism states that registration is mandatory for DNFBPs subject to the applicable requirements.
Customer Due Diligence involves identifying and verifying customers and understanding the nature and purpose of the business relationship, together with other measures required by the applicable risk-based framework.
Enhanced Due Diligence involves additional measures for higher-risk customers or situations. These measures can include additional verification, ownership analysis, source-of-funds information and enhanced monitoring.
A beneficial owner is the natural person who ultimately owns or controls a legal entity or arrangement, according to the applicable UAE framework.
There is no universal one-size-fits-all review frequency for every business. The assessment should be reviewed according to the company’s risk profile and when material changes occur, including changes to customers, services, jurisdictions or business activities.
A generic template may provide a starting point, but an AML framework should reflect the company’s actual business model, customers and risks. A policy that does not match how a business operates may not provide effective controls.
The consequences depend on the nature of the breach and applicable regulatory framework. Businesses should identify and remediate weaknesses promptly and seek professional advice when significant compliance concerns arise.
AML compliance should be viewed as an ongoing business process rather than a document or registration requirement.
A strong framework starts with understanding the risks your business actually faces and then implementing proportionate controls around customer onboarding, beneficial ownership, due diligence, screening, monitoring, reporting, training and record keeping.
For businesses operating in higher-risk sectors or within the DNFBP framework, it is particularly important to ensure that policies are not only documented but also implemented consistently.
AM Audit provides professional AML compliance support for businesses in the UAE, helping organisations review and strengthen areas such as AML policies and procedures, risk assessments, customer due diligence, beneficial ownership, compliance controls, training and AML reviews.
If your business is unsure whether its current AML framework is adequately aligned with its activities and risk profile, a structured AML compliance review can help identify areas requiring attention.
Speak with AM Audit to discuss your business’s AML compliance requirements.
AM Audit ® professionals are CPAs, Emirati Owned Auditing & Accounting firm
© 2025. AM Audit. All Rights Reserved.
