UAE's Enhanced AML/CFT Framework: Broader Scope and Urgent Compliance

Introduction

The United Arab Emirates has significantly bolstered its Anti-Money Laundering and Countering the Financing of Terrorism (AML/CFT) framework, with Federal Decree Law No. 10 of 2025 serving as a cornerstone of these reforms. This critical update introduces new criminal offenses, institutes substantially harsher penalties, and expands compliance obligations far beyond traditional financial institutions. Businesses operating within sectors such as real estate, logistics, trade, and virtual assets must urgently review and reinforce their compliance programs to effectively mitigate increased regulatory scrutiny and enforcement risks.

This article details the core updates to the UAE's AML/CFT landscape, identifies the newly impacted business sectors, explains the rationale behind these changes, and outlines the immediate, practical steps UAE businesses should undertake to ensure full compliance. Understanding and acting upon these changes is no longer optional; it is a fundamental requirement for maintaining operational integrity and avoiding severe legal and financial repercussions.

What are the Core Updates to the UAE's AML/CFT Framework?

The recent amendments represent a robust commitment by UAE authorities to solidify the nation's position as a leading global financial hub with zero tolerance for illicit financial activities. Businesses in the UAE must grasp these fundamental shifts:

New Criminal Offenses and Expanded Definitions

The updated framework broadens the scope of activities classified as criminal offenses related to money laundering and terrorism financing. This expansion ensures comprehensive coverage of potential illegal schemes. The law now explicitly targets:

• Predicate Offenses: A wider range of underlying crimes that generate illicit funds, such as tax evasion, corruption, cybercrime, and human trafficking, are clearly defined as predicate offenses for money laundering.
• Concealment and Obscuring: Stronger provisions address the acts of concealing the origin, location, disposition, movement, or ownership of illicit funds, or altering their form to disguise their unlawful nature.
• Attempt and Complicity: The law also covers attempts to commit money laundering or terrorism financing offenses, as well as complicity in such acts, ensuring a wider net for prosecution.

Harsher Penalties and Sanctions

Companies and individuals found in violation of AML/CFT regulations now face significantly increased financial penalties and more severe custodial sentences. These measures are designed to create a stronger deterrent and underscore the seriousness with which the UAE regards compliance failures. Penalties can include:

• Substantial Fines: Fines can range into millions of dirhams for corporate entities, with individuals facing significant financial penalties. These fines are often proportionate to the gravity of the offense and the value of the laundered funds.
• Imprisonment Terms: Individuals convicted of money laundering or terrorism financing offenses face extended periods of imprisonment.
• Asset Confiscation: The proceeds of crime and assets linked to illicit activities are subject to confiscation.
• Reputational Damage: Beyond legal and financial repercussions, non-compliance can inflict irreparable damage on a business's reputation and its ability to operate.

Expanded Compliance Requirements

The framework significantly extends its reach beyond traditional financial institutions to a wide array of Designated Non-Financial Businesses and Professions (DNFBPs). This broadens the net to capture more transactions and entities that could be exploited for illicit purposes, requiring them to implement stringent AML/CFT reporting, due diligence, and record-keeping obligations.

Which Businesses are Now Within the Expanded AML/CFT Scope?

Previously, AML/CFT compliance was predominantly a concern for banks, insurance companies, and other financial service providers. The updated framework, however, significantly extends its reach to a broader spectrum of Designated Non-Financial Businesses and Professions (DNFBPs). If your business operates in any of the following sectors, these changes are particularly relevant to you:

Real Estate Sector

Developers, brokers, agents, and property management companies involved in buying, selling, or managing properties are now under intense scrutiny. Real estate transactions are frequently targeted for money laundering due to their high value, potential for complex ownership structures, and the ability to convert illicit cash into seemingly legitimate assets. This includes all forms of property, whether commercial, residential, or land.

Logistics Sector

Companies engaged in freight forwarding, shipping, warehousing, and supply chain management face new obligations. The cross-border movement of goods and the intricate nature of logistics operations can be exploited to disguise illegal funds or facilitate terrorism financing through various schemes, including the misdeclaration of goods or their values.

Trade Sector

Businesses involved in importing, exporting, and general trading, particularly those dealing in high-value goods like precious metals, automobiles, electronics, or luxury items, are now critical to the AML/CFT ecosystem. Trade-based money laundering (TBML) remains a common method to move illicit funds internationally, often involving over- or under-invoicing, phantom shipments, or multiple invoicing.

Virtual Asset Service Providers (VASPs)

The rapidly evolving nature of virtual assets, including cryptocurrencies, NFTs, and other digital assets, makes them a fertile ground for illicit activities if not properly regulated. Service providers dealing in these assets, such as exchanges, custodians, and transfer services, are subject to stringent AML/CFT reporting, due diligence, and record-keeping obligations. Regulators like the Securities and Commodities Authority (SCA) and VARA play crucial roles in overseeing this sector. For more detail, read our insight on Navigating Heightened AML/CFT Scrutiny: What UAE Fintech and Digital Asset Businesses Need to Know.

Why is the UAE Strengthening its AML/CFT Framework?

The UAE's intensified commitment to combating financial crime is part of a broader national strategy to enhance transparency, maintain its reputation on the international stage, and meet global standards set by bodies like the Financial Action Task Force (FATF). This proactive stance reflects several key drivers:

Global Compliance and Reputation

The UAE is committed to demonstrating robust compliance with international AML/CFT standards. By continually updating its laws and expanding enforcement, the nation aims to fortify its position as a secure and trusted business environment, attracting legitimate investment while deterring illicit financial flows. This also ensures continued access to global financial markets without undue restrictions.

Safeguarding Economic Integrity

A strong AML/CFT framework is vital for protecting the integrity of the UAE's economy. It prevents the infiltration of illicit funds into legitimate economic channels, safeguarding businesses and financial institutions from exploitation and reducing the risks associated with financial crime. This fosters a stable and predictable environment for both domestic and international investors.

National Security Objectives

Combating money laundering and terrorism financing is intrinsically linked to national security. By cutting off funding to criminal and terrorist organizations, the UAE actively contributes to regional and global security efforts, reinforcing its role as a responsible international actor.

Key Compliance Obligations for DNFBPs

The expanded AML/CFT framework imposes specific, critical obligations on DNFBPs. A robust compliance program must incorporate the following elements:

1. Risk Assessment

Businesses must conduct a thorough, documented assessment of their exposure to money laundering and terrorism financing risks. This involves identifying vulnerabilities specific to:

• Customer base: High-risk customers, politically exposed persons (PEPs).
• Geographic reach: Operations in high-risk jurisdictions.
• Products and services: New or complex products that might be vulnerable.
• Delivery channels: How services are provided (e.g., online, third-party agents).

2. Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)

Robust CDD and KYC (Know Your Customer) processes are fundamental. Businesses must:

• Verify identity: Accurately identify and verify the identity of all customers and their beneficial owners.
• Understand nature of business: Gain a clear understanding of the customer's business activities and source of funds.
• Ongoing monitoring: Continuously monitor customer transactions and activities for any suspicious patterns.
• Enhanced Due Diligence: Apply EDD measures for higher-risk customers, transactions, or geographies.

For further insights into navigating these requirements, refer to UAE's Enhanced AML Framework 2026: Navigating New Compliance Obligations.

3. Reporting Suspicious Transactions (STRs)

All DNFBPs are obligated to report suspicious transactions or activities to the Financial Intelligence Unit (FIU) through the goAML platform. This reporting must be done promptly, without prior notification to the customer, and based on objective indicators of suspicion.

4. Record-Keeping

Businesses must maintain all records related to customer identification, transactions, and risk assessments for a minimum period of five years. These records must be readily accessible for inspection by supervisory authorities.

5. Internal Policies, Procedures, and Controls

DNFBPs are required to develop and implement comprehensive internal policies, procedures, and controls. These must be:

• Written: Clearly documented and regularly updated.
• Risk-based: Tailored to the specific risks identified in the business's risk assessment.
• Communicated: Effectively communicated to all relevant employees.

6. Employee Training

Regular and comprehensive AML/CFT training is mandatory for all relevant employees, from front-line staff to senior management. Training should cover:

• Regulatory obligations.
• How to identify suspicious activities.
• Internal reporting procedures.
• The role and responsibilities of each employee in AML/CFT compliance.

7. Appointing a Compliance Officer

Designating a qualified individual to serve as the AML/CFT Compliance Officer is a key requirement. This person should possess the necessary expertise, authority, and resources to:

• Oversee the implementation and maintenance of the AML/CFT framework.
• Act as the primary liaison with supervisory authorities.
• Monitor compliance with internal policies and regulatory requirements.

Navigating the Transition: Practical Steps for Businesses

Given the expanded scope and heightened penalties, inaction is not an option. UAE businesses, particularly those newly included in the AML/CFT framework, must act decisively.

1. Conduct a Comprehensive Risk Assessment Update

Beyond a basic review, conduct a forensic assessment of your business's exposure to money laundering and terrorism financing risks. Identify vulnerabilities specific to your operations, customer base, geographic reach, and product/service offerings. This assessment should inform every other aspect of your compliance program.

2. Implement and Enhance Internal Controls

Strengthen existing or implement new internal policies, procedures, and systems to detect, prevent, and report suspicious activities. This includes:

• Robust Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) processes.
• Transaction monitoring systems capable of flagging unusual patterns.
• Sanctions screening against international and local watchlists.

3. Appoint and Empower a Qualified Compliance Officer

Designate a qualified individual with the necessary expertise and authority to oversee AML/CFT compliance. Ensure this person has adequate resources, a clear reporting line to senior management, and the autonomy to implement necessary controls effectively.

4. Develop a Rigorous Training Program

Ensure all relevant employees, from front-line staff to senior management, receive comprehensive, role-specific training on AML/CFT regulations. Training should be ongoing and cover how to identify and report suspicious transactions, understanding that human vigilance remains critical.

5. Use Technology for Compliance

Consider investing in RegTech solutions that can automate compliance processes. These tools can:

• Streamline CDD and KYC checks.
• Enhance transaction monitoring capabilities.
• Improve the accuracy and efficiency of Suspicious Transaction Reports (STRs) to the FIU.
• Reduce manual errors and free up compliance staff for more complex analysis.

6. Stay Informed and Adapt

The regulatory landscape is dynamic. Businesses must establish mechanisms to stay informed about new directives, circulars, and guidance from supervisory authorities, such as the Central Bank of the UAE (CBUAE) and the Ministry of Economy. Proactive adaptation of policies and procedures is essential for ongoing compliance.

Conclusion

The UAE's strengthened AML/CFT framework, enshrined in Federal Decree Law No. 10 of 2025, sends a clear signal: compliance is not merely a regulatory formality, but a fundamental pillar of responsible business operations. The expanded scope, heightened penalties, and intensified scrutiny demand immediate and proactive measures from businesses, particularly those operating in the DNFBP sectors. Failing to address these new obligations can lead to significant financial, legal, and reputational repercussions that can threaten a company's very existence.

By implementing robust risk assessments, enhancing internal controls, empowering compliance officers, and investing in continuous training and appropriate technology, businesses can safeguard their operations and contribute to the UAE's reputation as a secure and transparent global economic hub. This proactive approach not only ensures adherence to legal requirements but also builds trust with stakeholders and protects the integrity of the broader financial system.

For tailored advice on strengthening your AML/CFT compliance framework and ensuring your business is fully aligned with the UAE's updated regulations, professional guidance can prove invaluable. Aurne stands ready to assist your organization in navigating this complex landscape, translating regulatory requirements into practical, actionable strategies that secure your business for the future.

---

This article is for general information only and does not constitute professional, legal, tax, or financial advice. Speak to Aurne for guidance specific to your situation.