1. Overview of the UAE AML Legal Framework

The UAE’s AML framework is primarily governed by:

• Federal Decree-Law No. 20 of 2018: Addresses anti-money laundering and countering the financing of terrorism and illegal organisations.
• Cabinet Decision No. 74 of 2020: Establishes the list of high-risk jurisdictions and outlines the obligations of businesses in relation to these jurisdictions.
• Central Bank of the UAE (CBUAE) Rulebook: Provides detailed regulations for financial institutions and DNFBPs, including compliance standards for AML and combating the financing of terrorism.
• Ministry of Economy Guidelines: Offers guidance for DNFBPs, including real estate brokers, dealers in precious metals and stones, accountants, auditors, and company service providers.

2. Applicability of AML Obligations to Non-DNFBPs

While non-DNFBPs are not explicitly listed under the federal AML laws, they may still be subject to AML obligations under certain circumstances:

• Risk-Based Approach: Businesses engaged in activities that present a higher risk of money laundering or terrorism financing are encouraged to implement AML measures.
• Regulatory Expectations: Regulatory bodies may expect businesses to adhere to AML best practices, even if not legally mandated.
• International Standards: Compliance with international standards, such as those set by the Financial Action Task Force (FATF), may necessitate the adoption of AML measures.

3. Recommended AML Measures for Non-DNFBPs

To align with best practices and mitigate risks, non-DNFBPs should consider implementing the following AML measures:

a. Customer Due Diligence (CDD)

• Know Your Customer (KYC): Verify the identity of clients to ensure they are not involved in money laundering or terrorism financing.
• Enhanced Due Diligence (EDD): Apply additional scrutiny to high-risk clients or transactions.

b. Monitoring and Reporting

• Transaction Monitoring: Regularly monitor transactions for suspicious activities.
• Suspicious Activity Reporting (SAR): Report any suspicious activities to the Financial Intelligence Unit (FIU) through the goAML platform.

c. Training and Awareness

• Staff Training: Regularly train staff on AML policies, red flags, and reporting procedures.
• Management Oversight: Ensure that senior management is involved in the AML compliance programme and provides adequate resources.

d. Record Keeping

• Documentation: Maintain records of customer identification, transactions, and reports for a minimum period as stipulated by law.

e. Internal Controls

• AML Policies and Procedures: Develop and implement comprehensive AML policies and procedures tailored to the business’s operations.
• Independent Audits: Conduct regular audits to assess the effectiveness of the AML programme.

4. Enforcement and Penalties

Non-compliance with AML obligations can lead to severe penalties, including:

• Fines: Substantial financial penalties for failing to adhere to AML regulations.
• Reputational Damage: Loss of business opportunities and damage to the company’s reputation.
• Legal Consequences: Potential legal actions against the business and its management.

For instance, in June 2025, the Central Bank of the UAE fined a bank AED 3.5 million and imposed a six-month ban on accepting new customers due to breaches in Sharia governance and AML regulations.

5. Conclusion

While non-DNFBPs in the UAE may not be explicitly listed under the federal AML laws, adopting AML measures is a prudent practice to mitigate risks and align with international standards. Implementing a robust AML programme not only helps in compliance but also enhances the business’s credibility and trustworthiness in the market.

For more detailed guidance, businesses are encouraged to consult with legal and compliance professionals familiar with UAE AML requirements.

For enquiries please contact Jenna Jenkins: [email protected]