UAE Intensifies AML Enforcement: New Decree-Law for Businesses

Introduction

UAE businesses must immediately review and update their Anti-Money Laundering (AML) policies and Ultimate Beneficial Ownership (UBO) registers. The nation has significantly intensified its enforcement of AML, Counter-Terrorism Financing (CTF), and Counter-Proliferation Financing (CPF) regulations, driven by the new Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025, making robust compliance critical to avoid severe penalties.

This advisory note outlines the key aspects of the UAE's strengthened financial crime enforcement regime, detailing the new legislative instruments, their impact on business operations, and the urgent practical steps companies must take. Understanding these changes is essential for all entities operating within the UAE to maintain compliance, mitigate risks, and safeguard their business continuity and reputation.

Why the UAE Intensified Its Financial Crime Fight

The UAE's commitment to combating financial crime has demonstrably strengthened, aligning with global standards and its strategic vision for a secure financial environment. This intensified focus is a clear signal to both local and international entities operating within or engaging with the UAE. The nation aims to solidify its position as a leading global financial hub that prioritizes transparency and stability, actively combating illicit financial flows in line with international expectations, particularly those set by the Financial Action Task Force (FATF).

Recent actions underscore this commitment:

• Significant Asset Seizures: Authorities have recently seized over $639 million in assets linked to financial crimes, sending a strong message about the active pursuit and recovery of illicit funds. This figure, reported by official sources, highlights the proactive stance of UAE enforcement bodies.
• Cross-Border Oversight: New measures, including enhanced cross-border transfer oversight from Saudi Arabia, highlight a broader regional effort to tighten financial controls and prevent illegal money flows. This regional collaboration further reinforces the UAE's commitment to a robust, integrated approach to financial security.

These developments signify that the UAE is not merely updating its laws on paper, but actively implementing and enforcing them with tangible results. Businesses cannot afford to view these changes as mere bureaucratic updates; they represent a fundamental shift in regulatory expectations and enforcement, signaling an era of heightened scrutiny.

What Do the New Regulations Entail?

The core of the strengthened regime lies in Federal Decree-Law No. 10 of 2025 on Anti-Money Laundering and Combating the Financing of Terrorism and Illegal Organizations and its accompanying executive regulations, primarily Cabinet Resolution No. 134 of 2025. These legislative instruments provide the overarching legal framework for the enhanced AML, CTF, and CPF standards that businesses must now adhere to. These laws replace and update previous regulations, introducing more stringent requirements and expanding the scope of obligations.

While the full details are comprehensive, the immediate impact for businesses centers on several key areas:

• Broader Scope of Obligations: The new laws expand the range of entities and activities subject to stringent AML/CTF/CPF requirements, ensuring wider coverage across various sectors. This includes a clear emphasis on Designated Non-Financial Businesses and Professions (DNFBPs) and various Free Zone entities.
• Stricter Due Diligence: Expect more rigorous requirements for customer due diligence (CDD), enhanced due diligence (EDD) for high-risk clients, ongoing transaction monitoring, and sophisticated risk assessment procedures. The expectation is for a truly risk-based approach.
• Enhanced Reporting: The emphasis on timely and accurate reporting of suspicious transactions and activities (STRs) to the Financial Intelligence Unit (FIU) is greater than ever before. This includes more detailed requirements for what constitutes a suspicious activity and how it should be reported.

These updated laws underscore the UAE's dedication to creating a transparent and secure financial ecosystem, crucial for attracting legitimate investment and maintaining its reputation as a leading global business hub. They reflect an explicit strategy to proactively identify and disrupt financial crimes.

Who Must Comply? Identifying Affected Entities

The reach of the new AML/CTF/CPF framework is extensive, encompassing a wide array of businesses and activities across the UAE's mainland and Free Zones. Understanding whether your entity falls under these regulations is the first critical step towards compliance.

Financial Institutions

This category includes:

• Banks and other lending institutions: All commercial banks, investment banks, and credit unions.
• Exchange houses: Businesses involved in currency exchange and money transfers.
• Insurance companies: Life insurance, general insurance, and insurance brokers.
• Securities and commodities brokers: Entities facilitating trading in financial markets.
• Payment service providers: Companies offering digital payment solutions and money remittance services.

Designated Non-Financial Businesses and Professions (DNFBPs)

The definition of DNFBPs has been broadened and strengthened. This includes, but is not limited to:

• Real estate agents and brokers: When involved in buying and selling real estate.
• Dealers in precious metals and precious stones (DPMS): Engaging in transactions related to these high-value goods.
• Lawyers, notaries, and other independent legal professionals: When preparing for or carrying out transactions for clients concerning buying/selling real estate, managing client money/assets, managing bank accounts, or creating/managing legal persons/arrangements.
• Accountants and auditors: When preparing for or carrying out transactions for clients similar to legal professionals.
• Company and trust service providers (CTSPs): Entities that facilitate the formation, operation, or management of companies and trusts.

Free Zone Entities

Businesses operating within any of the UAE's Free Zones are explicitly subject to these regulations. This is a critical point, as some businesses mistakenly assume Free Zones operate outside the scope of mainland regulations. The intensified enforcement applies uniformly across all jurisdictions. UAE Free Zone Businesses: Navigating Intensified AML/CFT Compliance offers specific guidance for these entities.

Key Considerations for Scope

• Jurisdictional Reach: The new Decree-Law applies across the entire UAE, including all financial and non-financial Free Zones.
• Risk-Based Application: While the scope is broad, the intensity of required measures will be commensurate with the assessed money laundering and terrorist financing risks specific to the business and its clients.

Impact on Business Operations: What Changes?

For any business operating in the UAE, or those engaging in transactions with UAE-based entities, these changes mean an urgent need for an internal review. Your current compliance frameworks must align with the enhanced standards to mitigate potential financial and legal risks. The shift is not merely about having policies, but about demonstrating their effective implementation.

The increased scrutiny means regulators are actively looking for robust controls and verifiable adherence. Relying on outdated policies or insufficient data is no longer viable. The expectation is for proactive, demonstrable compliance, backed by comprehensive documentation and continuous monitoring. This requires:

• Strategic Alignment: Integrating AML/CTF/CPF compliance into core business strategy, not just as a departmental task.
• Resource Allocation: Dedicating appropriate human, technological, and financial resources to manage compliance obligations effectively.
• Cultural Shift: Fostering a culture of compliance where every employee understands their role in preventing financial crime.

Businesses must recognise that a paper-based compliance program is insufficient. Active measures, such as ongoing employee training, regular internal audits, and technology-assisted monitoring, are now minimum expectations.

Navigating Enhanced Due Diligence (EDD) and Risk Assessment

The new regulations place a significant emphasis on sophisticated risk assessment and a rigorous application of customer due diligence, extending to enhanced due diligence in high-risk scenarios. These are fundamental pillars of an effective AML/CTF framework.

1. Robust Risk Assessment Methodologies

Businesses are required to conduct comprehensive money laundering and terrorist financing risk assessments specific to their operations. This involves:

• Identifying Risks: Understanding the inherent risks associated with your products, services, customers, geographic locations, and delivery channels.
• Assessing Vulnerabilities: Evaluating the effectiveness of your existing controls in mitigating identified risks.
• Documentation: Maintaining clear, auditable records of the risk assessment process and its findings.
• Regular Updates: Re-evaluating risk assessments regularly, or whenever there are significant changes in business operations, regulatory requirements, or the risk landscape.

2. Strengthening Customer Due Diligence (CDD)

CDD is the cornerstone of preventing illicit financial activities. The new framework demands:

• Verification of Identity: Accurately identifying and verifying the identity of all customers (individuals and legal entities).
• Ultimate Beneficial Ownership (UBO): Identifying and verifying the identity of the natural persons who ultimately own or control a customer. This goes beyond legal ownership to true economic control.
• Purpose and Nature of Business: Understanding the purpose and intended nature of the business relationship.
• Ongoing Monitoring: Continuously monitoring business relationships and transactions to ensure they are consistent with the entity's knowledge of the customer and their risk profile.

3. Implementing Enhanced Due Diligence (EDD)

For higher-risk customers, transactions, or business relationships, EDD measures are mandatory. Triggers for EDD include:

• Customers located in high-risk geographic areas.
• Politically Exposed Persons (PEPs).
• Complex or unusually large transactions.
• New products or technologies that might favor anonymity.
• Business relationships with unusual characteristics.

EDD involves gathering additional information, seeking senior management approval for high-risk relationships, and more intensive ongoing monitoring.

Consequences of Non-Compliance: Risks and Penalties

The consequences of non-compliance with the UAE's intensified AML/CTF/CPF regulations are significant and can impact a business on multiple fronts, extending beyond mere fines to severe operational and reputational damage. The proactive enforcement highlighted by significant asset seizures (e.g., the $639 million mentioned earlier) serves as a stark warning.

Severe Financial Penalties

The new Decree-Law specifies a range of escalating administrative and financial penalties. Fines for AML/CTF/CPF breaches can be substantial, directly impacting a company's profitability and financial health. These penalties can range from tens of thousands to millions of AED, depending on the nature, severity, and recurrence of the violation. For example, failing to establish proper internal controls, inadequate CDD, or delayed/incorrect STR filing can all incur significant fines. UAE AML Compliance: Heightened Enforcement and Rising Fines for Free Zones and DNFBPs in 2026 provides further context on increasing fines.

Legal and Criminal Ramifications

Beyond administrative fines, businesses and their senior management could face serious legal action, including potential criminal charges in cases of severe or willful non-compliance, aiding and abetting money laundering, or negligence that facilitates financial crime. Individuals found responsible can face imprisonment and substantial personal fines.

Reputational Damage

A public breach of AML regulations, an investigation, or the imposition of penalties can severely harm a company's reputation. This erosion of client trust can lead to:

• Loss of existing clients and difficulty attracting new ones.
• Damage to brand image and market standing.
• Negative media attention.
• Increased scrutiny from business partners and financial institutions.

Operational Disruptions

Investigations and enforcement actions can divert significant resources, disrupt daily operations, and create unforeseen complexities. This includes:

• Freezing of Assets: Authorities may freeze company assets or bank accounts during investigations.
• Audits and Inspections: Prolonged regulatory audits and inspections can consume internal resources and operational time.
• Business Relationship Termination: Correspondent banks or other financial partners may terminate relationships with non-compliant entities, impacting access to essential services.

Ensuring full compliance is no longer just good practice; it is a fundamental requirement for business continuity, legal protection, and maintaining credibility in the global financial ecosystem.

Immediate Actions for UAE Businesses: A Compliance Checklist

To navigate this strengthened regulatory environment effectively, businesses should consider the following immediate and systematic actions. Proactive measures are essential to safeguard your business from the significant financial and legal risks associated with non-compliance.

1. Conduct a Comprehensive Policy and Controls Review

Thoroughly assess your existing AML, CTF, and CPF policies, procedures, and internal controls against the requirements of Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. This review should identify any gaps, weaknesses, or outdated provisions.

2. Update Ultimate Beneficial Ownership (UBO) Registers

Ensure your UBO information is accurate, complete, and up-to-date. This includes verifying the identity of all beneficial owners, understanding their control structure, and maintaining proper documentation in a readily accessible format. Regular verification is key.

3. Enhance Risk Assessment Frameworks

Re-evaluate your money laundering and terrorist financing risk assessments. Pay particular attention to new or evolving risks introduced by changes in your operations, client base, geographic reach, or the broader market. The risk assessment should be dynamic and reflect current realities.

4. Strengthen Due Diligence Processes

Review and update your customer due diligence (CDD) and enhanced due diligence (EDD) procedures to meet stricter requirements. This is especially crucial for high-risk clients, transactions, and jurisdictions. Ensure ongoing monitoring protocols are robust and effectively implemented.

5. Provide Comprehensive Employee Training

Deliver updated training to all relevant employees, from frontline staff to senior management, on the new regulations, their specific responsibilities, and how to identify and report suspicious activities. A well-trained workforce is your first line of defense.

6. Use Technology for Compliance

Consider investing in and using technology solutions to automate compliance processes. This can enhance data accuracy, improve monitoring capabilities, streamline reporting to the FIU, and provide audit trails. Solutions for transaction monitoring, watchlist screening, and customer onboarding can significantly improve efficiency and effectiveness.

Looking Ahead: Building a Proactive Compliance Culture

The UAE's intensified AML enforcement is not a temporary measure but a fundamental shift towards a more secure and transparent financial ecosystem. This ongoing commitment is crucial for the nation's integrity and its standing in the global financial community. Businesses must move beyond reactive compliance and cultivate a proactive compliance culture that anticipates regulatory changes and embeds robust controls into daily operations.

For Free Zone Entities

While Free Zones offer significant business advantages, they are not exempt from the UAE's stringent AML/CTF/CPF regulations. Entities operating in these zones must be especially vigilant, ensuring their compliance frameworks are fully aligned with both Free Zone specific directives and broader federal laws. This often requires careful coordination with respective Free Zone authorities. UAE Intensifies AML Enforcement: What Businesses Must Do for the 2026 FATF Evaluation further stresses this point in the context of global assessments.

For Designated Non-Financial Businesses and Professions (DNFBPs)

DNFBPs, including real estate, legal, and accounting sectors, face particular scrutiny due to their inherent vulnerability to money laundering risks. These entities must ensure their risk assessments are tailored to their specific services and client base, and that their CDD and STR mechanisms are robust. The emphasis here is on understanding and mitigating sector-specific risks.

The Continuous Evolution of Compliance

The regulatory landscape is constantly evolving. Businesses should anticipate further updates and clarifications, especially as global standards evolve (e.g., FATF recommendations concerning virtual assets, as covered in FATF's Virtual Asset Update: Urgent Compliance Action for UAE Businesses). Continuous monitoring of regulatory announcements and engaging with industry best practices are vital for sustained compliance. This proactive stance not only avoids penalties but also strengthens a business's reputation and operational resilience.

Conclusion

The UAE's intensified enforcement of AML, CTF, and CPF regulations, spearheaded by Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025, represents a pivotal moment for all businesses operating within the country. This strategic move aligns the UAE with the highest international standards, reinforcing its commitment to a secure and transparent financial environment. Compliance is no longer a passive administrative task but an active, integral component of responsible business operations.

Businesses must recognise that delaying action is not an option. The regulatory landscape demands immediate attention to existing AML policies, UBO registers, risk assessment frameworks, and due diligence procedures. Proactive measures, comprehensive employee training, and the strategic adoption of compliance technology are essential investments to safeguard against the severe financial, legal, and reputational consequences of non-compliance.

Navigating these complex and evolving regulatory requirements can be challenging. Professional guidance offers invaluable support in assessing current compliance gaps, developing robust frameworks, and ensuring that your business not only meets but exceeds the mandated standards. Engaging with experts ensures that your business remains resilient, compliant, and contributes to the UAE's vision of a secure global financial hub.

---

This article is for general information only and does not constitute professional, legal, tax, or financial advice. Speak to AURNE for guidance specific to your situation.