UAE AML/CFT Expansion: New Compliance Rules & Business Impact

Introduction

UAE businesses, particularly those categorized as Designated Non-Financial Businesses and Professions (DNFBPs), are now operating under significantly heightened Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) compliance requirements. The latest regulatory enhancements, notably Federal Decree by Law No. (10) of 2025, have expanded the Ministry of Economy's supervisory role, introduced new criminal offenses, and imposed substantially harsher penalties for non-compliance.

This article outlines the core changes under the updated framework, identifies the businesses directly affected, details the critical compliance obligations, and provides actionable steps for ensuring adherence. For any UAE business, understanding and proactively addressing these shifts is crucial for mitigating severe fines, preventing reputational damage, and avoiding potential criminal liability.

What Does Federal Decree by Law No. (10) of 2025 Mandate?

The UAE has consistently reinforced its commitment to combating financial crime, aligning with international standards set by bodies like the Financial Action Task Force (FATF). Federal Decree by Law No. (10) of 2025 represents a pivotal step in this ongoing effort, extending the reach and enforcement capabilities of the national AML/CFT regime. Key provisions include:

• Expanded Supervisory Authority for the Ministry of Economy: The Ministry of Economy now possesses a broader and more comprehensive supervisory mandate over DNFBPs. This translates into increased scrutiny, direct oversight, and more frequent inspections for sectors historically distinct from traditional financial services.
• Introduction of New Criminal Offenses: The updated framework broadens the scope of activities classified as criminal offenses under AML/CFT laws. This expands the legal grounds for prosecution against individuals and entities suspected of involvement in money laundering or terrorist financing.
• Harsher Penalties for Non-Compliance: Violations of the AML/CFT framework now incur significantly more severe consequences. Businesses and individuals found non-compliant face increased fines, potential asset forfeiture, and imprisonment, underscoring the UAE's firm stance against financial crime.
• Broadened Compliance Requirements: The expectations for due diligence, meticulous record-keeping, comprehensive risk assessments, and timely suspicious transaction reporting have become more extensive. These requirements impact a wider array of business operations, demanding a thorough review of existing internal controls.

Who Must Comply with the Updated AML/CFT Framework?

The expanded reach of the AML/CFT regime primarily targets Designated Non-Financial Businesses and Professions (DNFBPs). If your business operates within one of the following categories, these regulatory updates are directly relevant to your operations in the UAE:

• Real Estate Agents and Brokers: This category encompasses developers, agents, and brokers engaged in the buying, selling, and leasing of real estate properties.
• Dealers in Precious Metals and Precious Stones (DPMS): Businesses involved in the trade of gold, diamonds, jewelry, and other high-value commodities fall under this classification.
• Auditors and Independent Accountants: Professionals providing accounting, auditing, or tax advisory services are subject to these regulations.
• Legal Professionals: Lawyers, notaries, and other independent legal practitioners are required to comply when they advise on, or engage in, specific financial transactions. This includes activities such as company formation, managing client money, or real estate transactions.
• Company and Trust Service Providers: Businesses specializing in the formation of companies, acting as directors, company secretaries, or providing registered office and trust services are also explicitly covered.

For Aurne's clients, particularly those involved in company formation, offshore structuring, and related financial and advisory services, a clear understanding and adherence to these enhanced requirements are paramount. For further detail on how these changes affect various business structures, see our insight on UAE Free Zone Businesses: Navigating Intensified AML/CFT Compliance.

When Did These Changes Take Effect?

The UAE's commitment to a robust AML/CFT ecosystem is ongoing and adaptive. While Federal Decree by Law No. (10) of 2025 established the core legal framework, the Ministry of Economy has continuously updated its operational guidance to ensure effective implementation. Most recently, the Ministry of Economy issued updated guidance on AML/CFT supervision for DNFBPs on October 23, 2026.

This specific update, alongside reports of significant fraud crackdowns across the UAE, signals an intensification of enforcement efforts and a broader regulatory reach. The urgency for businesses stems from the immediate applicability of this updated framework. There is no grace period for compliance; businesses are expected to be fully compliant now. Ignorance of the law is not considered a valid defense against penalties.

Why is Robust AML/CFT Compliance Essential for Your Business?

Beyond the ethical imperative to combat illicit financial activities, strong AML/CFT compliance offers several critical benefits and safeguards your business from significant operational and financial risks:

• Avoidance of Severe Penalties: Non-compliance can lead to substantial financial penalties, confiscation of assets, and severe criminal charges, including imprisonment, which can critically impact a business's financial stability and operational continuity.
• Protection of Business Reputation: Involvement or perceived involvement in money laundering or terrorist financing activities can irreparably damage a business's standing. This impacts relationships with clients, partners, financial institutions, and regulators, making future operations exceedingly difficult.
• Maintenance of Regulatory Good Standing: Adhering to AML/CFT laws demonstrates a commitment to transparency and ethical business practices. This fosters trust and ensures a business's ability to maintain essential bank accounts, operational licenses, and permits, which are fundamental to operating legally in the UAE.
• Facilitation of Business Operations and Partnerships: Many financial institutions, international partners, and even local clients increasingly require proof of robust AML/CFT compliance. A well-established compliance framework can streamline transactions, foster trust, and open doors to new partnerships and growth opportunities.

Key Compliance Obligations for DNFBPs

The expanded regulatory framework under Federal Decree by Law No. (10) of 2025 necessitates a comprehensive approach to compliance. DNFBPs must implement and maintain robust systems across several key areas:

1. Risk Assessment

Every DNFBP must conduct a thorough, documented, and regularly updated risk assessment. This assessment should identify and evaluate specific AML/CFT risks related to the business's:

• Customer base (e.g., politically exposed persons, high-net-worth individuals)
• Geographic reach (e.g., high-risk jurisdictions)
• Services or products offered (e.g., cash-intensive, easily transferable assets)
• Delivery channels (e.g., online transactions, third-party intermediaries)

2. Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)

Robust CDD is fundamental. Businesses must:

• Verify customer identities: Obtain and verify identity documents for all individual and corporate clients.
• Understand the nature of business: Ascertain the purpose and intended nature of the business relationship.
• Identify beneficial owners: Determine the ultimate natural persons who own or control the customer.
• Monitor ongoing transactions: Continuously scrutinize transactions to ensure they align with the customer's known profile and risk assessment.

For higher-risk scenarios (e.g., politically exposed persons (PEPs), complex ownership structures, transactions with high-risk jurisdictions), Enhanced Due Diligence (EDD) procedures are mandatory. This requires additional scrutiny, senior management approval, and ongoing monitoring.

3. Record-Keeping

DNFBPs are required to maintain all relevant records for a minimum of five years from the date of completion of a transaction or termination of a business relationship. These records include:

• Customer identification and verification documents
• Transaction records (amounts, currencies, dates, parties)
• Risk assessment reports
• STR/SAR filings
• Internal policies and procedures

4. Suspicious Transaction Reporting (STRs/SARs)

Businesses must establish clear, efficient, and secure procedures for identifying and reporting suspicious transactions or activities to the UAE Financial Intelligence Unit (FIU) via the goAML platform. This includes training staff on indicators of suspicious behavior and protecting reporting employees from retaliation.

5. Staff Training

Regular and comprehensive AML/CFT training is mandatory for all relevant employees, from front-line staff to senior management. Training should cover:

• The latest AML/CFT laws and regulations
• The business's internal policies and procedures
• How to identify red flags and suspicious activities
• The process for internal and external reporting

For a broader perspective on the necessary updates to your compliance program, refer to our article on UAE's Enhanced AML/CTF Framework: Key Compliance Updates for Businesses by April 2026.

6. Appointing an AML Compliance Officer

For many DNFBPs, appointing a qualified and experienced AML Compliance Officer is not just recommended, but often essential. This officer is responsible for:

• Developing and implementing the AML/CFT framework
• Overseeing staff training
• Conducting internal audits
• Managing communication with regulatory authorities
• Ensuring timely and accurate reporting

Practical Steps for Immediate Compliance Action

Given the immediate applicability and the high stakes involved, UAE businesses, particularly DNFBPs, must undertake a series of proactive measures to ensure full compliance. These steps are crucial for safeguarding your operations and maintaining regulatory good standing.

1. Conduct a Thorough Risk Assessment Review: Re-evaluate your existing AML/CFT risk assessment against the expanded scope of Federal Decree by Law No. (10) of 2025. Identify any new risks stemming from changes in your customer base, service offerings, or geographical presence.
2. Update Internal Policies and Procedures: Revise your current AML/CFT policies to align fully with the new regulatory requirements. This includes refining customer due diligence (CDD) and enhanced due diligence (EDD) protocols, record-keeping standards, and suspicious transaction reporting mechanisms.
3. Enhance Staff Training Programs: Ensure all employees, from front-line personnel to senior management, receive updated, regular, and thorough training. This training should cover the latest AML/CFT laws, internal compliance procedures, and practical guidance on identifying and reporting suspicious activities.
4. Formally Appoint an AML Compliance Officer: If not already in place, appoint a qualified and experienced individual to serve as the AML Compliance Officer. This role is critical for overseeing the implementation and continuous effectiveness of your compliance framework.
5. Strengthen Customer Due Diligence (CDD) Protocols: Implement more robust processes for verifying customer identities, understanding the ultimate beneficial ownership, and scrutinizing the nature of business relationships. Ensure transaction monitoring systems are capable of detecting unusual patterns effectively.
6. Optimize Suspicious Transaction Reporting (STR) Mechanisms: Verify that your business has clear, efficient, and secure procedures for filing Suspicious Transaction Reports (STRs) or Suspicious Activity Reports (SARs) with the UAE Financial Intelligence Unit (FIU) via the goAML platform.
7. Seek Expert Regulatory Guidance: Navigating the intricacies of evolving AML/CFT regulations can be complex. Engaging with specialized advisory firms can provide invaluable support in interpreting the laws, implementing effective controls, and ensuring continuous compliance. Our insight UAE's New AML Law: What Federal Law No. 10 of 2025 Means for Your Business offers additional context.

The Broader Landscape: A Continuous Evolution

The UAE's intensified focus on AML/CFT compliance is not an isolated event. It is part of a broader, sustained national strategy to combat financial crime and uphold international standards. This commitment aligns with global efforts, particularly those championed by the Financial Action Task Force (FATF), to enhance transparency and integrity within the global financial system. The regulatory landscape is continuously evolving, requiring businesses to adopt a proactive and adaptive approach to compliance.

This ongoing vigilance ensures that the UAE remains a trusted and secure hub for international business and investment. For DNFBPs, this translates into a permanent requirement for robust, dynamic, and well-resourced compliance functions. Staying informed and agile in adapting to new directives is no longer optional; it is fundamental to business continuity and strategic growth.

Conclusion

The recent updates to the UAE's AML/CFT framework, particularly Federal Decree by Law No. (10) of 2025, signal a clear and unequivocal message: compliance with anti-financial crime measures is a top priority. For Designated Non-Financial Businesses and Professions (DNFBPs), this translates into a heightened responsibility to review, update, and rigorously enforce their internal compliance protocols. The expanded supervisory authority of the Ministry of Economy, coupled with increased penalties, underscores the necessity of immediate and thorough action.

Proactive engagement with these new regulations is not merely about avoiding penalties; it is about protecting your business's reputation, maintaining operational licenses, and securing its long-term viability in a regulated market. Businesses that demonstrate a robust commitment to AML/CFT compliance will benefit from enhanced trust from financial institutions, partners, and clients, reinforcing their position in the competitive UAE economy.

Navigating these complex and evolving regulatory requirements can be challenging. Professional guidance can provide the clarity and strategic support needed to implement effective compliance solutions. Aurne stands ready to assist your business in understanding these changes, implementing best practices, and building a resilient compliance framework that protects your interests and supports the UAE's vision for a secure financial environment.

---

---

This article is for general information only and does not constitute professional, legal, tax, or financial advice. Speak to Aurne for guidance specific to your situation.