AML compliance requirements in the UAE apply to every regulated business, including banks, DNFBPs, VASPs, and financial institutions. These entities must conduct customer due diligence, maintain updated UBO records, and screen customers against sanctions lists.
They must also report suspicious transactions through goAML and appoint a qualified AML Compliance Officer.
These obligations sit under Federal Decree-Law No. 10 of 2025, which replaced the older 2018 law, and were reinforced by fresh Central Bank guidance issued in April 2026 ahead of the UAE's FATF mutual evaluation this year.
If you run a business in Dubai, Abu Dhabi, or anywhere else in the Emirates, this guide breaks down what's changed, what you're required to do, and how to stay on the right side of the law.
What is AML Compliance in the UAE?
Anti Money Laundering UAE compliance is the set of rules businesses follow to stop criminals from disguising illegally earned money as legitimate income.
It also covers combating the financing of terrorism (CFT) and, since 2026, proliferation financing (CPF), the funding of weapons of mass destruction.
In practice, UAE AML compliance means knowing who your customers are, understanding where their money comes from, watching transactions for red flags, and telling the authorities when something looks wrong.
Why Did AML Regulations in the UAE Change for 2026?
The UAE exited the FATF grey list in February 2024 after tightening supervision, UBO transparency, and Financial Intelligence Unit capacity. That progress didn't stop the work; it raised the bar.
The UAE's National AML/CFT Strategy 2024–2027 set the direction, and the country now faces its next FATF mutual evaluation in 2026.
To prepare, the Central Bank of the UAE released an updated AML or CFT or CPF guidance package on 16 April 2026. The package includes four supervisory guidelines and two best-practice manuals.
These cover proliferation financing risk, trade-based money laundering, correspondent banking due diligence, and customer due diligence standards.
These apply to CBUAE-licensed financial institutions and registered hawala providers directly, though the Ministry of Economy has signalled that DNFBP supervisors will follow the same risk logic.
What Are the Current AML Laws and Regulations in the UAE?
The UAE’s current AML framework is built around the latest federal AML/CFT/CPF law, its executive regulations, and sector-specific regulatory guidance.
Key UAE AML/CFT/CPF Laws, Regulations and Guidelines
| Legal instrument |
What it covers |
| Federal Decree-Law No. 10 of 2025 |
Primary AML/CFT/CPF law, replacing Decree-Law No. 20 of 2018 |
| Cabinet Decision No. 10 of 2019 (as amended) |
Executive regulations for implementation |
| Cabinet Resolution No. 58 of 2020 |
Ultimate Beneficial Owner (UBO) rules |
| CBUAE Guidance, 16 April 2026 |
Proliferation financing, TBML, correspondent banking, CDD |
| DFSA / FSRA frameworks |
Apply to DIFC and ADGM, respectively, under equivalent standards |
Who Needs to Follow AML Compliance Requirements in the UAE?
The following two broad categories have to follow AML compliance requirements in the UAE:
- Financial institutions: Banks, exchange houses, insurance firms, finance companies, and virtual asset service providers (VASPs).
- DNFBPs (Designated Non-Financial Businesses and Professions): Real estate agents and brokers, dealers in precious metals and stones, auditors and accountants, company service providers, and independent legal professionals handling certain transactions.
DNFBP AML requirements in the UAE are often underestimated. A real estate brokerage or an accounting firm carries the same reporting duty as a bank branch once it crosses the regulated-activity threshold.
What Does an AML Compliance Framework in the UAE Actually Look Like?
A working AML compliance framework that UAE businesses can defend during an inspection generally has five layers:
Key Layers of AML Compliance in the UAE
| Layer |
What it involves |
| Risk assessment |
Enterprise-wide risk assessment (EWRA) covering ML, TF, and PF exposure |
| Policies and procedures |
Written AML compliance guidelines UAE aligned to the business's actual risk profile |
| Customer due diligence |
KYC at onboarding, Enhanced Due Diligence for high-risk clients |
| Ongoing monitoring |
Continuous transaction monitoring, not a one-time check |
| Reporting and governance |
STR/SAR filing, compliance officer sign-off, staff training records |
What Are the AML KYC Requirements in the UAE?
Customer Due Diligence in the UAE starts before you ever accept a client's money. At minimum, businesses must:
- Verify identity using original, valid documents (Emirates ID, passport, trade licence).
- Understand the purpose and nature of the business relationship.
- Identify the Ultimate Beneficial Owner (UBO), anyone owning or controlling 25% or more.
- Screen against UN and local sanctions lists.
- Reassess risk periodically, not just at onboarding
Enhanced Due Diligence UAE kicks in for politically exposed persons (PEPs), customers from high-risk jurisdictions, complex ownership structures, or unusually large transactions.
It means collecting more documentation, verifying the source of funds, and getting senior management approval before proceeding.
How Does Suspicious Transaction Reporting Work in the UAE?
If something doesn't add up in a transaction pattern, a client's behaviour, or an unexplained fund source, businesses have a legal duty to file an STR.
This is done through goAML UAE, the online platform run by the UAE Financial Intelligence Unit (FIU), which sits within the Central Bank.
A few points worth remembering for AML reporting requirements in the UAE:
- STR filing must happen without tipping off the customer.
- There's no minimum transaction value suspicion; the size triggers the duty.
- Delayed or missed STR reporting in the UAE is treated as a compliance failure in its own right, separate from the underlying activity.
What Happens If a Business Fails to Comply?
AML penalties in the UAE are designed to sting. Fines typically range from AED 50,000 to AED 5 million depending on the violation's severity and how often it recurs.
Beyond fines, the Central Bank UAE AML requirements allow for licence suspension, business closure, and referral for criminal prosecution of individuals found responsible, including compliance officers who sign off on weak controls.
UAE AML Violations and Potential Penalties
| Violation type |
Possible consequence |
| Failure to register on goAML |
Administrative fine |
| No UBO register maintained |
Fine + corrective directive |
| Missed STR reporting UAE |
Fine, potential licence action |
| Repeated or wilful breaches |
Fine up to AED 5 million, licence revocation |
Do You Need an AML Compliance Officer?
Yes, any regulated entity, financial institution, or DNFB needs a designated AML compliance officer in the UAE (often called an MLRO, Money Laundering Reporting Officer) responsible for policy oversight, STR filing, and liaising with the FIU and Ministry of Economy AML UAE teams during inspections.
Under the April 2026 CBUAE guidance, this role now explicitly covers proliferation financing and VASP oversight too, so job scopes are widening
What Should an AML Compliance Checklist UAE Include for 2026?
The 2026 AML compliance checklist for the UAE includes the following:
- Registered on goAML with current business details
- Enterprise-wide risk assessment updated for PF exposure
- UBO register accurate and filed
- Written AML policies and procedures reviewed within the last 12 months
- CDD and Enhanced Due Diligence procedures documented
- Sanctions screening tool in place and tested
- Designated compliance officer with clear authority
- Staff AML compliance training UAE completed and logged
- STR process tested and response times recorded
Is AML Compliance Training in the UAE Mandatory?
Yes. Role-specific AML compliance training in the UAE is now an explicit expectation under the April 2026 CBUAE guidance: a frontline teller, a trade finance officer, and a senior manager each need training tailored to what they actually handle, not a single generic session repeated every year.
Because the April 2026 guidance ties training directly to role and risk exposure, generic annual sessions are losing relevance. This is reshaping what an anti money laundering course in Dubai typically covers — most providers have moved toward modular formats that separate front-line CDD training from trade-based laundering and proliferation-financing content for compliance officers. Professionals holding recognised certification such as CAMS, paired with this kind of localised training, tend to move into senior compliance roles faster than those relying on certification alone.
Is AML a Good Career Path in the UAE Right Now?
Genuinely, yes. An AML career in the UAE is growing alongside increasing regulatory pressure. AML compliance jobs span banks, fintechs, crypto platforms, and DNFBPs.
Demand for skilled professionals is also rising, especially for those comfortable with AI-assisted monitoring tools.
Average AML Compliance Salaries in the UAE by Role
| Role |
Average monthly salary (AED) |
| AML Compliance Officer (entry–mid) |
6,600 – 12,300 |
| Financial Crime Analyst |
10,000 – 18,000 |
| Senior AML Manager / Head of AML |
25,000 – 60,000 |
| MLRO / Chief Compliance Officer |
48,000 – 130,000+ |
Certifications noticeably move the needle. Building genuine AML skills through structured AML courses in Dubai, alongside recognised AML certification, remains one of the fastest ways to qualify for these salary bands.
The salary bands above track fairly closely with how current a person's technical knowledge is. An AML Course that covers the 2025 Decree-Law and the 2026 CBUAE guidance directly — rather than older 2018-law material still circulating in some training catalogues — tends to carry more weight with employers screening for role-readiness, particularly for VASP and DNFBP-facing positions where the rules have moved fastest.
The Legal Framework: Federal Decree-Law No. 10 of 2025
The UAE overhauled its entire AML/CFT/CPF legal framework in late 2025. The core instruments are:
- Federal Decree-Law No. 10 of 2025 — the primary federal law governing AML, CFT, and CPF across all sectors, in force from 14 October 2025. It repealed the previous 2018 AML law.
- Cabinet Resolution No. 134 of 2025 — the Executive Regulations implementing the decree-law, in force from 14 December 2025. It sets out detailed obligations across dozens of articles, including the definition of who qualifies as a Designated Non-Financial Business or Profession (DNFBP).
- CBUAE AML/CFT/CPF Guidance Package (April 2026) — sector-specific supervisory guidance issued by the Central Bank of the UAE for licensed financial institutions, covering proliferation financing risk, trade-based money laundering, correspondent banking, and customer due diligence.
Staying Compliant in 2026 and Beyond
AML compliance requirements in the UAE aren't static. 2026 has already brought a new federal law number, fresh Central Bank guidance, and a looming FATF evaluation that's pushing every regulator to tighten enforcement.
Whether you're running a DNFBP, a bank, or a fintech, the safest position is the same: know your customers, document everything, report what looks wrong, and keep your team trained.
Treat AML compliance for businesses in the UAE as an ongoing discipline, not a once-a-year filing exercise, and the rest tends to fall into place.
For businesses building this function internally rather than outsourcing it, the sequencing usually matters: an Antimoney Laundering Course covering core CDD, UBO identification, and STR mechanics should come before role-specific modules on proliferation financing or correspondent banking — otherwise staff are trained on edge cases before they've grasped the baseline obligations that apply to every regulated entity.
FAQs
What are the AML compliance requirements in the UAE in 2026?
Businesses must conduct customer due diligence (CDD), identify and verify beneficial owners, assess money laundering and terrorism financing risks, maintain records, screen against sanctions lists, monitor transactions, and report suspicious transactions through goAML where required.
Who needs to comply with AML regulations in the UAE?
AML requirements apply to regulated financial institutions and Designated Non-Financial Businesses and Professions (DNFBPs). Virtual Asset Service Providers (VASPs) are also subject to applicable AML/CFT obligations under the UAE regulatory framework.
What are the CDD and KYC requirements under UAE AML law?
Businesses must identify and verify customers, understand the purpose and intended nature of the business relationship, identify the Ultimate Beneficial Owner (UBO), and apply ongoing monitoring based on the customer’s risk level.
Is goAML registration mandatory for businesses in the UAE?
Businesses that fall within the UAE reporting framework must register with the goAML system and use it to submit Suspicious Transaction Reports (STRs) and other required reports to the relevant authorities.
Who is responsible for AML compliance in a UAE business?
A regulated business should appoint a suitably qualified AML Compliance Officer or Money Laundering Reporting Officer, depending on the applicable regulatory framework. This person oversees AML policies, risk assessments, transaction monitoring, reporting, training, and regulatory compliance
What are the penalties for AML compliance violations in the UAE?
AML violations can result in administrative and financial sanctions, including fines and other regulatory measures. The severity of the penalty depends on the nature and seriousness of the violation and the applicable UAE regulatory requirements
What is the main AML law in the UAE right now?
Federal Decree-Law No. 10 of 2025 is the UAE’s current federal framework for anti-money laundering, counter-terrorist financing and counter-proliferation financing. It is supported by implementing regulations and regulatory guidance. Professionals taking an AML course in the UAE should understand how these requirements apply to financial institutions, DNFBPs and other regulated entities.
Who needs to register on the goAML platform?
Every financial institution, DNFBP, VASP, and eligible non-profit organisation operating in the UAE must register on goAML, the reporting platform run by the UAE's Financial Intelligence Unit. Registration is a separate obligation from any business or activity licence.
Is there a minimum transaction amount before a suspicious transaction must be reported?
No. Suspicion alone is sufficient to trigger a mandatory STR/SAR filing through goAML, regardless of the transaction value.
What happens if a business fails to comply with UAE AML requirements?
Depending on the severity, penalties can include administrative fines (from AED 10,000 up to AED 5,000,000 per violation), criminal fines reaching AED 100,000,000 for legal persons, imprisonment for individuals, licence suspension or revocation, and personal liability for senior management and MLROs.
Are real estate agents and jewellers really covered by AML law in the UAE?
Yes. Both fall under the DNFBP category defined in Cabinet Resolution No. 134 of 2025 and must meet the same core obligations as financial institutions registration, CDD, reporting, record-keeping, and training because of the financial-crime risk associated with high-value cash and asset transactions.
How often should an AML risk assessment be updated?
UAE guidance expects the risk assessment to be a living document, reviewed whenever there is a material change in the business (new products, markets, or customer types) and periodically even without such changes, rather than produced once at registration and left unchanged.
How do I become an AML compliance professional in the UAE?
Start by learning the fundamentals of AML/CFT, KYC, CDD, EDD, sanctions, transaction monitoring and suspicious transaction reporting. Practical AML training can build job-ready knowledge, while professional certifications such as CAMS can provide an additional specialised pathway for eligible candidates. Edoxi’s AML course combines UAE-focused compliance topics with practical training and CAMS exam preparation.
How often should AML risk assessments be updated?
An AML risk assessment should be treated as an ongoing compliance process rather than a one-time document. It should be reviewed when material changes occur, such as new products, services, markets, customers or delivery channels, and periodically according to the organisation’s risk profile and applicable regulatory expectations.
What happens if a business fails to comply with UAE AML requirements?
AML non-compliance can result in regulatory and administrative penalties and, depending on the circumstances, other enforcement measures. The consequences depend on the specific violation, entity, applicable legislation and severity of the breach. Businesses should therefore maintain effective AML/CFT controls, employee training, risk assessments, reporting procedures and records.
Is there a minimum transaction amount for reporting a suspicious transaction?
Suspicion of money laundering or related financial crime can trigger reporting obligations; there is not a general rule that permits a suspicious transaction to go unreported simply because its value is below a particular threshold. Businesses should follow the applicable UAE reporting requirements and regulatory guidance.
Do real estate agents and jewellers need to follow UAE AML requirements?
Yes. Certain businesses operating in sectors designated as DNFBPs are subject to UAE AML/CFT obligations. Real estate professionals and dealers in precious metals and stones are examples of sectors that can have AML responsibilities, including applicable customer due diligence, record-keeping, risk assessment and suspicious transaction reporting requirements.
Who should take an AML and CFT course?
An AML and CFT course is suitable for professionals working in compliance, banking, finance, risk management, auditing, internal controls and financial-crime prevention. It can also benefit employees and managers in DNFBPs who need to understand their AML/CFT responsibilities.
What practical skills can I learn from AML training?
Practical AML training can help learners develop skills in customer risk assessment, KYC and CDD, suspicious transaction identification, transaction monitoring, sanctions screening, PEP due diligence, AML risk assessment and compliance-program development. Edoxi incorporates case studies, simulations and practical exercises into its AML training.
Is AML certification mandatory in the UAE?
AML training and employee awareness are important components of compliance programs for regulated businesses, but completing a particular commercial AML certificate is not universally equivalent to a legal requirement. Whether specific training or certification is required depends on the entity, employee role and applicable regulator.
What is the difference between an AML course and CAMS certification?
An AML course provides training in areas such as AML/CFT regulations, KYC, CDD, sanctions, transaction monitoring and financial-crime risk management. CAMS is a separate professional certification administered by ACAMS. An AML training course can help build knowledge relevant to CAMS preparation, but completing the course does not itself award the CAMS credential.
Edoxi offers AML training with CAMS exam preparation.
Who needs AML training in the UAE?
AML training is relevant to compliance officers, MLROs, AML analysts, risk professionals, auditors, banking and finance professionals, and employees of businesses subject to UAE AML/CFT requirements. DNFBP professionals, including those working in areas such as real estate, accounting, legal services and high-value goods, may also require role-specific
AML training.
Where can I find AML training in Dubai?
Edoxi Training Institute offers AML training in Dubai from its training centre near BurJuman Metro Station, as well as online and corporate training options.
Aug 19, 2026
