UAE and Dubai Money Laundering Laws and AML Compliance Duties

The UAE AML/CFT/CPF Legal Framework

As Dubai grew into a global trade, finance and logistics hub, the duty to protect the integrity of its financial system grew with it. Anti-money laundering (AML), countering the financing of terrorism (CFT) and countering proliferation financing (CPF) are now treated as a single regulatory package. The Emirates legislate that package federally, which means the same core rules apply whether a company sits on the mainland, in a commercial free zone or in a financial free zone.

The framework has three layers. At the top, a federal decree-law sets out offences and penalties. Beneath it, a cabinet resolution spells out operating procedures. At the base, each supervisor publishes sector guidance and rulebooks. A compliance programme has to be built by reading all three layers together, not just the headline statute.

The Regulatory Pyramid: Statute, Regulation and Sector Guidance

What Changed Under Federal Decree-Law 10 of 2025?

The decree-law was published in the Official Gazette on 30 September 2025 and entered into force two weeks later, on 14 October 2025. It repealed Federal Decree-Law No. 20 of 2018 in full. The implementing regulation, Cabinet Resolution No. 134 of 2025, was issued on 29 October 2025, published on 14 November 2025 and took effect on 14 December 2025, replacing Cabinet Decision No. 10 of 2019.

Federal Law 20/2018 Compared With Decree-Law 10/2025

Headline Changes Businesses Should Note

• Proliferation financing as a standalone offence: financing the spread of weapons of mass destruction is criminalised separately for the first time.
• Wider predicate offence list: predicate offences were redefined, with tax evasion among them.
• Manager liability: directors and managers who knew of the offence face personal criminal exposure.
• Stronger FIU powers: the Financial Intelligence Unit can suspend a transaction for 10 working days and freeze funds for up to 30 days without prior notice.
• Beneficial ownership transparency: false UBO declarations are punished as a distinct offence.
• Cross-border movement: declaration duties for cash, precious metals and bearer negotiable instruments were tightened.
• No limitation period: criminal proceedings for laundering, terrorist financing and proliferation financing do not lapse by prescription.

How the Money Laundering Offence Is Defined

A person commits money laundering when, knowing that property is the proceeds of crime, they intentionally transfer or move that property to conceal its illicit origin; conceal or disguise its true source, location, disposition or ownership; acquire, possess or use property known to be criminal proceeds; or assist the perpetrator of the predicate offence in escaping punishment.

Money laundering stands as an independent offence. Punishing someone for the predicate crime does not bar a separate prosecution for laundering. One of the most consequential shifts in the 2025 law concerns proof: knowledge may now be inferred from the objective circumstances of the case. In practice, a plea of ignorance carries far less weight than it once did.

The Laundering Cycle and the Control at Each Stage

What Is the Penalty for Money Laundering in Dubai?

For individuals, money laundering carries imprisonment of one to ten years and a fine of AED 100,000 to AED 5,000,000. Legal persons face fines starting at AED 5,000,000 and reaching AED 100,000,000, and may also be suspended or dissolved by court order.

Figures are taken from the text of Federal Decree-Law No. 10 of 2025 and were verified in August 2026. Always confirm current amounts against the UAE Legislation Portal and the relevant supervisory authority.

Corporate and Director Liability

The most striking feature of the new regime is that liability does not stop at the corporate entity. Board members, managers and compliance officers who were aware of the offence can be pursued in their own right. The Central Bank has already published decisions imposing a fine directly on a compliance officer. Appointing a compliance officer is therefore a genuine risk position, not a formality.

Ancillary Sanctions and the Absence of a Limitation Period

Alongside imprisonment and fines, the courts may order confiscation, licence revocation, suspension of activity, travel bans and, for foreign nationals, deportation. Penalties are aggravated where the offender abused a professional position, where the offence was committed through an organised group or a non-profit vehicle, or where it was repeated. The statute also removes prescription for laundering offences, so historic transactions remain exposed.

Who Must Comply: Financial Institutions, DNFBPs and VASPs

The duty extends well beyond banks. Corporate service providers, real estate brokers, dealers in precious metals and stones, independent accountants and auditors, lawyers and notaries fall within the designated non-financial businesses and professions (DNFBP) category. An entrepreneur setting up in Dubai meets these rules twice over: as obligations on the new company, and as due diligence questions from the advisers serving it.

Mainland, Free Zone and DIFC/ADGM Compared

A question that comes up constantly is whether free zone companies are exempt. They are not. Mainland and commercial free zone entities sit under the federal regime, while DIFC and ADGM firms are held to the same federal standards through their own regulators. Tax treatment and AML duties are separate matters: investors pursuing the zero corporate tax route still have to satisfy the conditions for Qualifying Free Zone Person (QFZP) status in parallel.

AML Compliance Checklist for Companies

An inspection-ready programme rests on ten components. Each one has to be evidenced with documentation when a supervisor visits.

1. goAML registration: reporting entities must register on the Financial Intelligence Unit’s goAML platform.
2. Enterprise-wide risk assessment: customer, country, product and channel risks assessed in writing and refreshed regularly.
3. Written policies and procedures: an AML/CFT policy formally approved by senior management.
4. Customer due diligence: identity verification, understanding the purpose of the relationship, and enhanced due diligence for higher-risk clients.
5. Beneficial ownership: obtaining, verifying and updating UBO information whenever it changes.
6. Suspicious transaction reporting: filing through goAML immediately and without delay once suspicion arises.
7. No tipping off: telling the customer that a report has been filed is a separate offence.
8. Sanctions screening: screening without delay against UN and local designated lists.
9. Compliance officer and training: a competent officer appointed and staff trained on a documented schedule.
10. Record keeping: transaction and customer records retained for at least five years.

goAML Registration and Suspicious Transaction Reporting

There is no numeric filing deadline in the law. The regulation requires reporting “immediately and without delay”, and reports go only through goAML, the Financial Intelligence Unit’s electronic system. Filing in good faith protects the reporting entity from liability for breach of confidentiality. The step-by-step mechanics of an inspection are covered separately in the AML compliance audit process.

Reporting Thresholds and Retention Periods

Is the UAE Still on the FATF Grey List?

No. The United Arab Emirates was placed under increased monitoring by the Financial Action Task Force in March 2022 and was removed from that list on 23 February 2024 after a broad programme of legal and supervisory reform. The current monitoring list published at the FATF plenary of June 2026 does not include the UAE. The country is also absent from the European Commission’s high-risk third country list as updated on 9 January 2026.

Scrutiny has not eased, however. The FATF conducted its fifth-round mutual evaluation onsite visit to the UAE in June 2026. Passing Decree-Law 10 of 2025 ahead of that assessment was no coincidence: regulatory expectations have risen sharply.

How Supervision and Enforcement Work in Practice

Sanctions are not theoretical. In the first half of 2025 the Ministry of Economy and Tourism recorded 1,063 violations by DNFBPs and imposed administrative fines exceeding AED 42 million, most of them on precious metals dealers and real estate brokers. In June 2026 the Central Bank fined the branch of a foreign bank AED 20 million.

In April 2026 the Central Bank issued an updated AML/CFT/CPF guidance package for licensed financial institutions and registered hawala providers, covering proliferation financing, trade-based laundering, correspondent banking, customer due diligence and role-based training. Adherence to that guidance is now assessed as a distinct item during supervisory visits.

Practical Impact for Business Owners in Dubai

UBO Filing at Company Formation

Beneficial ownership details are filed with the registrar when the licence is issued. Later changes to the ownership structure must be updated within 15 working days, and bearer shares are prohibited. An inaccurate or incomplete declaration attracts its own fine.

Source-of-Funds Files for Bank Account Opening

Incomplete source-of-funds documentation is the leading reason corporate account applications are declined. Shareholder wealth origin, the commercial model, expected transaction volumes and counterparty jurisdictions should be documented in advance. A well-prepared file shortens the process by weeks. The quality of that file is decisive when opening an offshore bank account in Dubai.

A Ninety-Day Compliance Calendar

A workable sequence for the first three months after licensing: appoint the compliance officer and complete goAML registration within 30 days; draft the enterprise risk assessment and secure approval of the policy set between days 31 and 60; bring customer files up to KYC standard, deploy a sanctions screening tool and document the first staff training between days 61 and 90. Sound bookkeeping underpins the whole calendar, which is why accounting and finance services in Dubai belong in the plan from day one.

Building a Compliance Strategy With Expert Support

Anti-money laundering in Dubai is no longer a paper policy but a supervised and enforced system. Decree-Law 10 of 2025 raised penalties, extended liability to individual managers and removed the protection of prescription. A properly designed compliance programme reduces both legal exposure and the friction companies meet in banking relationships. Setting up that architecture at the same time as establishing a company in Dubai costs far less than retrofitting it later.

References

1. UAE Legislation Portal, “Federal Decree by Law No. (10) of 2025” — uaelegislation.gov.ae
2. UAE Legislation Portal, “Cabinet Resolution No. (134) of 2025 – Executive Regulations” — uaelegislation.gov.ae
3. Central Bank of the UAE, “Updated AML/CFT/CPF Guidance for Licensed Financial Institutions”, April 2026 — centralbank.ae
4. Ministry of Economy and Tourism, “Combatting Money Laundering & Terrorism Financing” — moet.gov.ae
5. UAE Financial Intelligence Unit, “STR Process (goAML)” — uaefiu.gov.ae
6. FATF, United Arab Emirates country page and the June 2026 increased monitoring statement — fatf-gafi.org
7. European Commission, high-risk third country list update of 9 January 2026 — finance.ec.europa.eu