Skip to main content
Advisory Note13 min read

FATF Grey List Update: Key Compliance Changes for UAE Businesses

FATF's latest grey list update impacts UAE businesses. Learn how the removal of Algeria and Namibia, and the addition of Iraq and Bosnia-Herzegovina, affects your risk and compliance obligations.

FATF grey listUAE AML CFTrisk assessment UAEdue diligenceBosnia and Herzegovina FATFIraq FATFAlgeria FATFNamibia FATFUAE regulatory compliance
Share
FATF Grey List Update: Key Compliance Changes for UAE Businesses

UAE businesses with dealings in newly grey-listed Bosnia and Herzegovina or Iraq must immediately enhance their due diligence and risk assessment procedures, while those in Algeria and Namibia may see reduced compliance burdens.

Introduction

The Financial Action Task Force (FATF) has issued its latest update to the list of jurisdictions under increased monitoring, commonly known as the 'grey list'. This update carries immediate and direct implications for UAE businesses engaged in international trade, finance, or investment. Businesses with existing or planned dealings in Bosnia and Herzegovina or Iraq must promptly reassess their risk exposure and enhance due diligence procedures, as both countries have now been added to this list. Conversely, the removal of Algeria and Namibia from the grey list may lead to a reduction in compliance burdens for operations connected to these nations.

This article provides a detailed analysis of these FATF changes, explaining their significance for UAE businesses. It outlines the specific compliance adjustments required, focusing on practical steps for risk mitigation and ensuring adherence to international anti-money laundering (AML) and counter-terrorist financing (CFT) standards. Understanding these shifts is crucial for maintaining regulatory compliance and safeguarding business interests in the dynamic global financial landscape.

Understanding the FATF Grey List and Its Significance for UAE Businesses

The Financial Action Task Force (FATF) is an intergovernmental body established to set international standards that aim to prevent money laundering and counter terrorist financing. Its primary role involves developing and promoting policies to combat these illicit financial activities. Countries placed on the FATF 'grey list' are officially deemed "jurisdictions under increased monitoring" due to strategic deficiencies identified in their AML/CFT regimes.

For UAE businesses, engaging with a grey-listed jurisdiction introduces heightened risks and necessitates more stringent compliance measures. This heightened scrutiny impacts various aspects of business operations, including banking relationships, transaction approvals, insurance provisions, and trade finance arrangements. Ultimately, this can lead to increased operational costs and extended timelines for cross-border activities.

Being on the grey list signals to the global financial community that a country's systems are vulnerable to illicit financial flows. This perception often results in:

  • Enhanced Due Diligence (EDD): Financial institutions and Designated Non-Financial Businesses and Professions (DNFBPs) are required to conduct more thorough checks on transactions and clients linked to these jurisdictions.
  • Increased Scrutiny: Transactions originating from or destined for grey-listed countries may face delays, require additional documentation, or even be rejected by financial service providers.
  • Reputational Risk: Partnering with entities in grey-listed countries can inadvertently expose UAE businesses to reputational damage, potentially affecting investor confidence and market perception.
  • Higher Compliance Costs: The necessity for additional checks, enhanced monitoring, and specialized training translates into greater expenditure for compliance departments.

Consequences of Grey Listing

Engagement with a FATF grey-listed jurisdiction significantly elevates a business's risk profile, leading to more stringent regulatory oversight, potential transaction delays, and increased operational costs due to enhanced compliance requirements.

The Latest FATF Plenary Outcomes: June 2026

During its most recent Plenary session, the FATF announced two key changes to its list of jurisdictions under increased monitoring, reflecting ongoing global efforts to combat financial crime. These updates are pivotal for UAE entities with international connections.

Jurisdictions Added to the Grey List

Bosnia and Herzegovina and Iraq have been added to the FATF grey list. This decision by the FATF indicates that both countries have strategic shortcomings in their ability to combat money laundering and terrorist financing. The FATF urges these jurisdictions to address these deficiencies promptly to mitigate global financial crime risks. For UAE businesses, this means all existing and prospective dealings with entities or individuals in Bosnia and Herzegovina and Iraq will now be subjected to elevated scrutiny by financial institutions and regulators worldwide, including those in the UAE.

Jurisdictions Removed from the Grey List

Conversely, Algeria and Namibia have been successfully removed from the FATF grey list. This positive development reflects the significant progress made by both countries in strengthening their AML/CFT frameworks and demonstrating a sustained commitment to addressing previously identified deficiencies. For UAE businesses, this signals a potential reduction in the regulatory burden and a more streamlined environment for transactions and investments in these nations. While standard due diligence remains paramount, the elevated risk associated with grey listing is now alleviated.

Direct Impact on UAE Operations: A Dual Perspective

The immediate operational impact of these FATF updates will vary for UAE businesses depending on their current or planned exposure to the affected countries. A clear understanding of these dual implications is essential for effective risk management and compliance.

For Dealings with Bosnia and Herzegovina and Iraq

UAE businesses with direct or indirect exposure to Bosnia and Herzegovina and Iraq must prepare for a significant uplift in compliance expectations:

  • Elevated Risk Assessment: Your internal risk assessment framework must be updated immediately to reflect the increased AML/CFT risk associated with these jurisdictions. This includes a thorough re-evaluation of existing customer relationships, supply chains, and investment portfolios.
  • Enhanced Due Diligence (EDD): Expect to implement or intensify EDD measures for all new and existing clients, partners, and transactions involving these countries. This will involve more extensive background checks, rigorous verification of sources of wealth and funds, and more stringent ongoing monitoring.
  • Potential Transaction Delays: Financial institutions in the UAE and globally are likely to exercise greater caution when processing payments, trade finance, or other financial services related to Bosnia and Herzegovina and Iraq. This may lead to processing delays and requests for additional documentation.
  • Increased Reporting Requirements: Be prepared for more detailed reporting obligations to your banks and potentially to UAE regulatory bodies, such as the Central Bank of the UAE and the Financial Intelligence Unit, regarding dealings with these newly grey-listed jurisdictions.

For Dealings with Algeria and Namibia

The removal of Algeria and Namibia from the grey list brings a welcome change, potentially simplifying business engagement:

  • Reduced Compliance Burden: The removal from the grey list indicates a lower inherent risk from an AML/CFT perspective. While standard due diligence remains essential for all business relationships, firms may find administrative processes simplified and transaction flows smoother.
  • Potential for New Opportunities: This positive development could foster increased confidence for investment and trade, potentially opening up new avenues for UAE businesses seeking to expand into these markets. Reduced compliance friction can make these jurisdictions more attractive for business expansion.

Common Oversight: Ignoring Indirect Exposure

A frequent mistake is focusing only on direct clients. UAE businesses must assess their entire supply chain, intermediary networks, and investment portfolios for any indirect exposure to newly grey-listed jurisdictions. Overlooking this can lead to undetected risks.

Enhanced Due Diligence (EDD) for High-Risk Jurisdictions

Enhanced Due Diligence (EDD) is a critical component of AML/CFT frameworks, specifically designed for situations where a higher risk of money laundering or terrorist financing is identified. The addition of Bosnia and Herzegovina and Iraq to the FATF grey list mandates the application of EDD for any related business activities. This means going beyond basic customer identification and verification.

Key Elements of EDD

When conducting EDD for high-risk jurisdictions or customers, UAE businesses should focus on several key areas:

  • Source of Wealth and Funds: Verifying the legitimate origin of a client's entire wealth and the specific funds involved in a transaction. This often requires extensive documentation and independent verification.
  • Beneficial Ownership: Identifying and verifying the ultimate natural persons who own or control a legal entity. This includes scrutinizing complex ownership structures that may obscure true beneficiaries.
  • Purpose and Nature of the Business Relationship: Gaining a deeper understanding of the reasons behind the business relationship and the expected activity. Any deviations from the stated purpose must be thoroughly investigated.
  • Ongoing Monitoring: Implementing more intensive and frequent scrutiny of transactions and the overall business relationship to detect any unusual patterns or red flags that might indicate illicit activity.

Triggers for EDD

EDD is typically triggered by various risk factors, including:

  • Dealings with High-Risk Jurisdictions, such as those on the FATF grey list.
  • Relationships with Politically Exposed Persons (PEPs) or their close associates.
  • Transactions involving complex or opaque ownership structures.
  • Transactions that are unusual in nature or size without clear economic rationale.
  • Businesses operating in high-risk sectors known for susceptibility to financial crime.

For more information on the specific implications of such updates, see our article: FATF Grey List Update: Key Compliance Changes for UAE Businesses Regarding Iraq & Bosnia and Herzegovina.

Operational and Reputational Risk Management

Beyond direct regulatory penalties, the FATF grey list updates carry significant operational and reputational risks that UAE businesses must proactively manage. The perceived risk associated with grey-listed jurisdictions can ripple through various aspects of a company's operations and its standing in the market.

Impact on Banking Relationships

Financial institutions, both within the UAE and internationally, operate under stringent AML/CFT obligations. Their internal risk assessments are directly influenced by FATF listings. Consequently, UAE businesses dealing with Bosnia and Herzegovina or Iraq may encounter:

  • Increased difficulty in opening new bank accounts for related operations.
  • Enhanced scrutiny of existing accounts, potentially leading to freezes or closures if risk concerns are not adequately addressed.
  • Reluctance from correspondent banks to process transactions, leading to payment delays or rejections.

Protecting Corporate Reputation and Investor Confidence

Associations with grey-listed jurisdictions, even through legitimate business, can tarnish a company's reputation. This can impact:

  • Investor Relations: Potential investors may view a business as higher risk, affecting funding opportunities and valuations.
  • Public Perception: Negative media attention or association with financial crime risks can erode trust among customers and the general public.
  • Partnerships: Prospective business partners may hesitate to engage, fearing indirect exposure to AML/CFT risks.

Internal Controls and Governance

To mitigate these risks, businesses must ensure robust internal controls and clear governance frameworks. This includes:

  • Regular review and update of AML/CFT policies and procedures.
  • Independent audits of compliance systems.
  • Clear lines of accountability for compliance management.
  • Adequate resources allocated to the compliance function.

Proactive Engagement with Financial Partners

Regularly communicate with your banks and financial service providers about your compliance measures and exposure to grey-listed jurisdictions. Understanding their updated policies and proactively providing necessary documentation can minimize disruptions and maintain strong banking relationships.

Actionable Steps for UAE Businesses

To ensure continuous compliance, protect your business interests, and manage new risks effectively, UAE businesses should implement the following actionable steps without delay:

  1. Immediate Risk Reassessment: Conduct an urgent and comprehensive review of your entire business portfolio for any direct or indirect exposure to Bosnia and Herzegovina and Iraq. Re-evaluate and update existing risk ratings for clients, partners, and transactions linked to these countries. This should involve all relevant departments, including legal, compliance, finance, and operations.
  2. Update Due Diligence Policies and Procedures: Revise your internal AML/CFT policies and procedures to specifically incorporate the enhanced due diligence requirements for the newly grey-listed jurisdictions. Ensure these updates align with guidance from the UAE Central Bank and other local regulators. Communicate these revised policies effectively across all relevant departments.
  3. Strengthen Transaction Monitoring: Implement stricter controls and monitoring protocols for all financial activities, including payments, transfers, and trade finance, linked to Bosnia and Herzegovina and Iraq. Pay close attention to red flags, unusual transaction patterns, and deviations from expected activity.
  4. Engage with Financial Partners: Proactively communicate with your banks, payment service providers, and other financial institutions regarding your exposure to these jurisdictions. Understand their updated compliance requirements and provide any requested documentation promptly to mitigate potential transaction delays.
  5. Internal Training and Awareness: Provide updated training to your compliance, legal, finance, and operational teams on the implications of these FATF changes and the revised due diligence requirements. Ensure all relevant staff understand their roles and responsibilities in upholding compliance standards.
  6. Continuous Monitoring and Regulatory Awareness: Establish a system for continuously monitoring official FATF announcements, as well as guidance and circulars from the UAE Central Bank and other local regulatory bodies. Staying informed is crucial for adapting to any further developments and maintaining an agile compliance framework.

Navigating complex compliance changes?

AURNE offers expert guidance on AML/CFT compliance, risk assessments, and due diligence frameworks, ensuring your business stays ahead of regulatory shifts and mitigates risk efficiently.

The UAE's Role in Global AML/CFT Efforts

The United Arab Emirates has demonstrated a strong and sustained commitment to strengthening its own anti-money laundering and counter-terrorist financing framework. The UAE's proactive measures, significant investments, and consistent engagement with the FATF led to its successful removal from the grey list in February 2024. This achievement underscores the nation's dedication to upholding the highest international standards in combating financial crime.

This ongoing commitment by the UAE provides a robust and reliable regulatory environment for businesses operating within its borders. While international FATF updates necessitate adjustments for UAE-based entities, the strong domestic AML/CFT infrastructure ensures that businesses have clear guidelines and support in navigating these complexities. The UAE's experience highlights the importance of sustained effort, regulatory vigilance, and a proactive approach to evolving global standards. Local businesses can leverage the UAE's strong regulatory framework as a foundation for their international compliance strategies.

UAE Regulatory Vigilance

The UAE's strong domestic AML/CFT framework and its own successful exit from the FATF grey list position it as a leader in combating financial crime, providing a secure and well-regulated environment for businesses to manage international compliance challenges.

Key Takeaway

The latest FATF grey list updates require immediate action from UAE businesses, particularly those engaged with Bosnia and Herzegovina or Iraq, to recalibrate their risk assessments and enhance due diligence, ensuring adherence to global AML/CFT standards and safeguarding their operations.

Conclusion

The recent FATF grey list update, with the addition of Bosnia and Herzegovina and Iraq and the removal of Algeria and Namibia, represents a critical shift that UAE businesses cannot afford to overlook. These changes directly impact risk exposure, compliance obligations, and the operational landscape for companies with international dealings. Proactive and meticulous adherence to enhanced due diligence and robust risk management practices is no longer just advisable but a mandatory step for safeguarding your business's integrity and financial stability.

By immediately reassessing their exposure, updating internal policies, and ensuring comprehensive training, UAE businesses can navigate these regulatory changes effectively. The focus must be on rigorous transaction monitoring, transparent engagement with financial partners, and a continuous commitment to staying informed about evolving global standards. Leveraging the UAE's robust domestic AML/CFT framework provides a strong foundation for managing these international complexities.

In an increasingly interconnected global economy, the consequences of non-compliance extend beyond fines, potentially leading to significant reputational damage and operational disruptions. Professional guidance can be invaluable in dissecting these complex requirements and tailoring a precise compliance strategy to your specific business model. Partnering with experts ensures that your firm not only meets but anticipates regulatory expectations, enabling you to conduct international business with confidence and security.


Source & References


This article is for general information only and does not constitute professional, legal, tax, or financial advice. Speak to AURNE for guidance specific to your situation.

Need help with your compliance strategy?

Our licensed advisors provide tailored guidance for your specific structure and jurisdiction.

A
AURNÉ Editorial TeamResearched, reviewed, and approved by AURNÉ advisors· Licensed CSP in Dubai

Every advisory note is researched against primary regulatory sources and reviewed and approved by multiple AURNÉ advisors before publication. We do not attribute notes to a single author because each one reflects the collective judgement of our team.

This note was checked against primary regulatory sources and approved by multiple reviewers under our editorial and review process. How we research and review.

Share

Frequently Asked Questions

Need Expert Advice on This Topic?

Our advisory team can help you navigate the complexities covered in this article. Get tailored guidance for your specific situation.

Speak With an Advisor

Practical, jurisdiction-specific guidance from licensed professionals