Introduction
The United Arab Emirates has enacted Federal Law No. 10 of 2025, a pivotal legislative update that significantly enhances the nation's framework for anti-money laundering (AML) and counter-terrorist financing (CTF). This new law mandates a comprehensive review and update of compliance frameworks for all regulated entities across the UAE, including those operating within free zones, to prevent severe fines and operational disruptions.
This article details the core changes introduced by Federal Law No. 10 of 2025. We will explore its expanded scope, stricter penalties, and specific implications for businesses. Understanding these provisions is critical for maintaining effective and legally sound compliance strategies in the UAE's evolving regulatory landscape.
What is Federal Law No. 10 of 2025?
Federal Law No. 10 of 2025 marks a crucial step in the UAE's ongoing commitment to combating financial crime. It replaces previous legislation, introducing a robust and comprehensive set of rules designed to align the nation's AML/CTF efforts with international best practices and recommendations, particularly those set by the Financial Action Task Force (FATF). The law's overarching goal is to fortify the UAE's position as a secure global financial hub by deterring illicit financial flows.
Key Provisions of Federal Law No. 10 of 2025
The new law introduces several critical changes that businesses must recognize to adapt their compliance programs effectively. These provisions reflect a heightened focus on enforcement and a broader understanding of financial crime risks.
1. Increased Penalties for Non-Compliance
Federal Law No. 10 of 2025 introduces substantially higher financial penalties for non-compliance. Legal entities now face fines of up to AED 100 million, a clear signal from the authorities regarding their serious commitment to enforcement. This significant increase underscores the critical need for robust, updated compliance measures and sends a strong message that AML/CTF breaches will carry severe consequences.
2. Broader Scope of Application
The reach of the AML/CTF framework has been expanded to cover new areas of financial activity and types of risks.
- Digital Assets: Transactions involving cryptocurrencies, NFTs, and other digital assets are now explicitly within the scope of AML/CTF regulations. Businesses dealing with these assets must implement rigorous controls, conduct thorough customer due diligence, and monitor transactions for suspicious activity. This aligns with global efforts to prevent the misuse of virtual assets for illicit purposes.
- Proliferation Financing (PF): The financing of weapons of mass destruction (WMD) is now explicitly included within the law's scope. This requires businesses to screen for and report suspicious transactions related to proliferation risks, which involves understanding UN Security Council resolutions and national sanctions lists. Businesses must integrate PF risk assessment into their overall compliance framework.
3. Lower Evidentiary Standards for Predicate Offenses
The new law makes it easier for authorities to prove predicate offenses. These are the underlying criminal activities, such as fraud, corruption, or drug trafficking, that generate illicit funds which are then laundered. By lowering the evidentiary threshold, prosecuting money laundering becomes more straightforward for enforcement bodies. This increases the risk of enforcement actions against businesses that fail to identify and report suspicious activities, even if the direct link to the predicate offense is not immediately obvious or fully proven.
Critical Update
Federal Law No. 10 of 2025 raises maximum penalties for non-compliance to AED 100 million and expands the AML/CTF scope to explicitly include digital assets and proliferation financing. Businesses must adjust their compliance frameworks accordingly.
When Does the Law Take Effect?
Federal Law No. 10 of 2025 was enacted in October 2025 and is now coming into full effect. This timeframe means that businesses should not delay in assessing their current compliance posture and initiating necessary updates. Immediate action is required to ensure frameworks are in place well before any potential regulatory scrutiny or audit.
Who Must Comply with This New Law?
The expanded scope of Federal Law No. 10 of 2025 means that all regulated entities in the UAE are subject to its provisions. Crucially, this explicitly includes businesses operating within free zones. Historically, some free zones maintained distinct regulatory approaches; however, under this new law, the federal AML/CTF framework applies uniformly across the board. This ensures a consistent and robust national approach to combating financial crime across all jurisdictions within the UAE.
Regulated entities typically include, but are not limited to:
- Financial Institutions (FIs): Banks, insurance companies, money exchange houses, investment firms, and financial intermediaries.
- Designated Non-Financial Businesses and Professions (DNFBPs):
- Real Estate: Real estate agents, brokers, and developers involved in buying and selling property.
- Precious Metals and Stones: Dealers in gold, silver, diamonds, and other precious goods.
- Company Service Providers (CSPs): Entities providing services like company formation, registered office, or director services.
- Legal Professionals: Lawyers, notaries, and other independent legal professionals when they prepare for or carry out transactions for clients concerning buying/selling real estate, managing client money/assets, or company formation.
- Accountants and Auditors: When they prepare for or carry out transactions for clients concerning financial management, company formation, or buying/selling businesses.
Free Zone Compliance Alert
Businesses operating within UAE free zones are now unequivocally subject to the full federal AML/CTF framework under Federal Law No. 10 of 2025. Any previous misconceptions about partial exemption are no longer valid. For more details, see our insights on UAE Free Zone Businesses: Navigating Intensified AML/CFT Compliance.
What Specific Actions Should Your Business Take Now?
Given the increased penalties, broader scope, and intensified enforcement, a proactive approach to compliance is not just a legal obligation but a strategic imperative. Waiting for enforcement actions could result in significant financial and reputational damage. Here are key steps your business should undertake:
1. Conduct a Comprehensive Gap Analysis
Review your existing AML/CTF policies, procedures, and controls against the updated requirements of Federal Law No. 10 of 2025. This involves identifying any areas where your current framework falls short, particularly concerning digital assets, proliferation financing, and enhanced customer due diligence (CDD) measures. A thorough analysis will pinpoint weaknesses and inform necessary adjustments.
2. Update Policies, Procedures, and Controls
Amend your internal policies and procedures to reflect the new legal obligations. Ensure these updates cover all aspects, from customer onboarding and transaction monitoring to suspicious transaction reporting (STR) protocols. Specific attention should be paid to integrating controls for digital asset transactions and proliferation financing risks. These updates must be practical and actionable for your operational teams.
3. Enhance Risk Assessment Frameworks
Re-evaluate your business's money laundering and terrorist financing risk assessments. Ensure they account for the expanded scope of the law and new typologies, particularly those related to virtual assets and potential proliferation financing activities. A dynamic risk assessment process allows for continuous adaptation to emerging threats and regulatory changes.
4. Strengthen Employee Training and Awareness
Provide comprehensive and regular training to all relevant employees on the updated law, your revised internal policies, and their specific roles in identifying and reporting suspicious activities. A well-informed workforce is your first line of defense against financial crime. Training should be tailored to different roles and responsibilities within the organization.
5. Review and Upgrade Technology and Systems
Assess whether your current compliance technology and systems are adequate to monitor and report transactions in line with the new requirements. This may include upgrading software, implementing new tools for tracking digital asset transactions, or enhancing AI/machine learning capabilities for more effective anomaly detection and automated reporting.
6. Maintain Meticulous Records
Ensure all records related to customer due diligence, transaction monitoring, and suspicious activity reports (SARs) are meticulously maintained, securely stored, and readily accessible for regulatory scrutiny. Accurate record-keeping is fundamental for demonstrating compliance during audits and investigations.
7. Seek Expert Guidance
Navigating complex regulatory changes requires specialized knowledge and experience. Engaging with legal and compliance experts can provide invaluable insights, ensuring your business adopts the most effective and compliant strategies. Experts can help interpret the nuances of the law and tailor solutions to your specific business model.
Proactive Compliance Strategy
Develop an internal implementation roadmap for the new law. Assign clear responsibilities, set realistic deadlines for policy updates and training, and allocate sufficient resources to ensure a smooth transition to the new compliance standards.
Consequences of Non-Compliance
Failing to adapt to the new regulations under Federal Law No. 10 of 2025 can expose your business to severe consequences that extend beyond financial penalties.
1. Substantial Financial Penalties
As highlighted, the law imposes fines of up to AED 100 million. These penalties can cripple a business, especially small and medium-sized enterprises (SMEs). Fines are typically levied based on the severity and frequency of the violation, along with the entity's history of non-compliance.
2. Severe Reputational Damage
Non-compliance often leads to public exposure, regulatory announcements, and negative media coverage. Such reputational damage can erode customer trust, deter potential investors, and harm business relationships, which can be far more costly to recover from than direct fines.
3. Operational Disruptions
Regulatory investigations can lead to operational freezes, heightened scrutiny, and even temporary suspension of business licenses. These disruptions can severely impact day-to-day operations, delay transactions, and strain internal resources.
4. Legal and Personal Liability
Beyond corporate penalties, individuals responsible for compliance oversight, such as board members and senior management, may face personal liabilities, including fines, travel bans, or imprisonment, especially in cases of gross negligence or deliberate breaches.
Broader Regulatory Landscape
Federal Law No. 10 of 2025 builds upon the UAE's existing commitment to strengthening its financial crime framework, including earlier initiatives and updates in response to international evaluations by bodies like the FATF. For more context, read about UAE's Enhanced AML/CTF Framework: Preparing Your Business for FATF 2026.
Navigating the Evolving AML Landscape
The enactment of Federal Law No. 10 of 2025 signals a persistent and strategic evolution in the UAE's approach to combating financial crime. For businesses, this means moving beyond basic compliance to integrating AML/CTF considerations into core business strategy and risk management.
For Financial Institutions
Financial institutions must rigorously update their transaction monitoring systems to detect new typologies, particularly those involving digital assets. Enhanced due diligence for high-risk customers and transactions, along with robust sanctions screening for proliferation financing, becomes paramount. Collaboration with regulatory bodies and sharing of best practices will be crucial for maintaining industry-wide integrity.
For Designated Non-Financial Businesses and Professions (DNFBPs)
DNFBPs, including real estate developers, precious metals dealers, and company service providers, face increased scrutiny. Their compliance programs must be as sophisticated as those in the financial sector, tailored to their specific risks. This includes comprehensive customer identification, beneficial ownership verification, and ongoing monitoring, especially for high-value transactions or complex corporate structures. Our article on UAE AML Compliance: Heightened Enforcement and Rising Fines for Free Zones and DNFBPs in 2026 offers further insights.
Key Takeaway
Federal Law No. 10 of 2025 represents a significant escalation in the UAE's fight against financial crime, requiring all regulated businesses to fundamentally rethink and reinforce their AML/CTF compliance strategies or face severe consequences.
Conclusion
Federal Law No. 10 of 2025 marks a transformative moment for AML/CTF compliance in the UAE. By introducing higher penalties, broadening its scope to include digital assets and proliferation financing, and lowering evidentiary standards, the UAE has unequivocally signaled its commitment to eradicating illicit financial activities. Businesses can no longer afford a reactive approach to compliance; proactive and comprehensive measures are essential.
The imperative for all regulated entities, including those within free zones, is to conduct thorough reviews, update internal controls, and invest in robust training and technology. This ensures not only adherence to the law but also the protection of their financial integrity and reputation. Embracing these changes now is critical for safeguarding your operations and contributing to the UAE's secure and reputable business environment.
Navigating these complex regulatory requirements can be challenging. Professional guidance can provide clarity, ensure compliance, and help integrate these mandates smoothly into your business operations. Partnering with experts ensures that your business is well-prepared for the enhanced enforcement landscape and positioned for sustainable success in the UAE.
This article is for general information only and does not constitute professional, legal, tax, or financial advice. Speak to AURNE for guidance specific to your situation.