Most UAE business owners assume anti-money laundering compliance is something banks and financial institutions worry about. Their business sells products, provides services, receives payments so AML has nothing to do with them.
This assumption is wrong and in 2026, it is more dangerous than it has ever been.
In October 2025, the UAE enacted Federal Decree-Law No. 10 of 2025 — the most significant overhaul of the country’s anti money laundering UAE framework in years. Among its most important changes: managers and directors of non-compliant businesses now face personal criminal liability — including fines and imprisonment — regardless of whether they personally knew about the violation. The knowledge threshold has been lowered from “proven intent” to “sufficient circumstantial evidence.”
The era of “I didn’t know” is legally over in the UAE. And with the FATF mutual evaluation of the UAE already underway in 2026, enforcement is not slowing down it is accelerating.
This guide explains exactly what AML compliance UAE 2026 requires from your business, who must comply, what the goAML system is, and what the new personal liability law means for you as a business owner or manager.
What Is Anti-Money Laundering and Why Does It Apply to Your Business?
Anti money laundering refers to the laws, regulations, policies, and procedures designed to prevent criminals from disguising illegally obtained funds as legitimate income. Money laundering typically occurs in three stages: placement (introducing illegal money into the financial system), layering (concealing the trail through complex transactions), and integration (making the funds appear legitimate and usable).
In the UAE, AML obligations do not apply only to banks. The law specifically covers a category called Designated Non-Financial Businesses and Professions (DNFBPs) and this is where most non-banking UAE businesses discover they have compliance obligations they were unaware of.
DNFBPs in the UAE include:
| Business Type | AML Obligation |
|---|---|
| Accountants and accounting firms | ✅ Full AML compliance required |
| Auditors | ✅ Full AML compliance required |
| Real estate agents and brokers | ✅ Full AML compliance required |
| Legal professionals (lawyers, notaries) | ✅ Full AML compliance required |
| Dealers in precious metals and stones | ✅ Full AML compliance required |
| Corporate service providers | ✅ Full AML compliance required |
| Trust and company service providers | ✅ Full AML compliance required |
| Virtual asset service providers (VASPs) | ✅ Added to scope under new 2025 law |
If your business falls into any of these categories — or if you are an accounting, auditing, or financial consultancy firm operating in the UAE — you are a DNFBP and full AML compliance obligations apply to you under UAE law.
All DNFBP categories and their AML obligations in the UAE are officially defined and supervised by the UAE Ministry of Economy Anti-Money Laundering Department — the primary regulatory authority responsible for DNFBP compliance monitoring, inspections, and enforcement across the UAE private sector.
What Changed Under Federal Decree-Law No. 10 of 2025
The new AML law enacted in October 2025 represents the most significant update to the UAE’s anti-money laundering framework in over a decade. Here are the critical changes every UAE business must understand:
1. Personal Liability for Managers and Directors
Under the previous framework, criminal liability for AML violations was primarily attributed to the company as an entity. The new law changes this fundamentally — individual managers, directors, and authorised signatories are now personally liable if they knew about, or should reasonably have known about, AML violations occurring in their business.
The standard of proof has been lowered from requiring proven knowledge to “sufficient evidence or circumstantial evidence” — meaning prosecutors no longer need to prove you actively knew. They only need to show that the circumstances were such that you reasonably should have known.
For business owners and managers, this means your personal assets, freedom, and professional reputation are directly at stake if your business fails AML compliance checks.
2. Lowered Knowledge Threshold
Previously, establishing a money laundering offence required proving the defendant had direct knowledge that funds were derived from criminal activity. The 2025 law now allows courts to infer knowledge from “factual and objective circumstances” — making it significantly easier to prosecute individuals and businesses for facilitation of money laundering, even without direct proof of intent.
3. Tax Evasion Now a Predicate Offence
Under the new law, tax evasion is now explicitly listed as a predicate offence for money laundering in the UAE. This means that funds derived from tax evasion — including underpaid VAT, Corporate Tax, or Customs duties — can now be treated as proceeds of money laundering. Given that the FTA is actively cross-matching VAT and Corporate Tax returns, this change creates a direct link between tax compliance and AML exposure. Businesses with unresolved tax compliance issues now face a compounded risk they previously did not have.
4. Virtual Asset Service Providers (VASPs) Now Covered
The new law expands the scope of AML regulation to explicitly include VASPs — cryptocurrency exchanges, digital asset custodians, and similar businesses. For the UAE’s growing crypto sector, this means mandatory AML registration, customer due diligence, and suspicious activity reporting obligations now apply with the full force of the 2025 law.
5. FIU Powers to Freeze Assets
The Financial Intelligence Unit — the UAE’s primary financial crime regulator — has been granted new powers to freeze funds and suspend transactions for up to 30 days when financial crime is suspected. This applies to financial institutions, DNFBPs, and VASPs. Asset freezes can now be initiated before any formal criminal proceedings — meaning a suspected AML violation can disrupt business operations immediately.
What Is goAML UAE and Do You Need to Register?
goAML is the official reporting platform of the UAE Financial Intelligence Unit (FIU). It is the mandatory system through which DNFBPs and financial institutions must submit:
- Suspicious Transaction Reports (STRs) — when a transaction is suspected to involve proceeds of crime
- Suspicious Activity Reports (SARs) — for broader suspicious behaviour patterns not limited to specific transactions
- High Value Dealer Reports — for cash transactions above AED 55,000
goAML registration UAE is mandatory for all DNFBPs operating in the UAE — including accounting firms, auditors, real estate agents, lawyers, and corporate service providers.
Registration is completed through the goAML portal managed by the UAE FIU. You will need your trade licence, contact details of your compliance officer, and details of your AML risk assessment framework to complete the process.
Failure to register with goAML carries an administrative fine of up to AED 1,000,000 under the updated penalty schedule — making this one of the highest-consequence compliance gaps available to DNFBPs.
Anti Money Laundering Compliance UAE — The 5 Core Requirements
Whether you are a large accounting firm or a small corporate services provider, your AML compliance framework in UAE must cover these five core requirements under the law:
1. Business-Wide Risk Assessment
You must conduct and document a formal risk assessment of your business identifying which of your clients, services, geographies, and transaction types are most exposed to money laundering risk. This is not a one-time exercise: it must be reviewed whenever your business changes materially and updated regularly as the regulatory environment evolves.
At JASM Accounting, our advisory team assists UAE businesses with structured AML risk assessment frameworks that meet the Ministry of Economy’s DNFBP supervisory requirements.
2. Customer Due Diligence (CDD) Know Your Customer (KYC)
Anti money laundering and KYC go hand in hand. Before entering into a business relationship or conducting a significant transaction, you must:
- Verify the identity of your client using official documents (passport, Emirates ID, trade licence)
- Understand the nature and purpose of the intended business relationship
- Conduct Enhanced Due Diligence (EDD) for high-risk clients including Politically Exposed Persons (PEPs), clients from high-risk jurisdictions, and unusual or complex transaction structures
- Verify beneficial ownership — confirming who ultimately owns or controls the client entity
The beneficial ownership requirement part of the UAE’s UBO (Ultimate Beneficial Owner) register — requires identifying any individual who owns or controls more than 25% of a company. Failing to conduct and document this verification is one of the most common compliance gaps found during Ministry of Economy inspections.
3. Ongoing Transaction Monitoring
AML compliance is not a one-time check at onboarding. You must monitor your client relationships and transactions on an ongoing basis — looking for:
- Transactions that are inconsistent with the client’s stated business purpose
- Unusually large cash payments or requests to structure payments in unusual ways
- Clients from high-risk jurisdictions conducting transactions that lack a clear economic rationale
- Sudden changes in transaction volume or patterns
When suspicious activity is detected, you must file a Suspicious Transaction Report (STR) through the goAML portal — without alerting the client that a report has been made (this is the “tipping off” prohibition).
4. AML Policy and Procedures Written and Updated
Every DNFBP in the UAE must maintain a written AML policy UAE that sets out:
- The firm’s risk appetite and approach to AML compliance
- Customer acceptance criteria and CDD procedures
- Staff training requirements and frequency
- Procedures for detecting and reporting suspicious transactions
- Record retention requirements (minimum 5 years from end of business relationship)
This policy must be reviewed and updated whenever the law changes which, given October 2025’s significant reform, means every UAE DNFBP should have reviewed and updated their AML policy within the last 12 months.
5. Appointment of a Money Laundering Reporting Officer (MLRO)
Every DNFBP must appoint a Money Laundering Reporting Officer (MLRO) a senior individual responsible for receiving internal suspicious activity reports from staff, deciding whether to file an STR with the FIU via goAML, and serving as the primary point of contact for regulatory queries and inspections.
The MLRO does not need to be a full-time dedicated position in small businesses, but the role must be formally documented and the individual must have adequate authority, resources, and access to information to perform the function effectively.
Anti Money Laundering Checklist UAE 2026
Use this to assess your current AML compliance position:
| Compliance Requirement | Status |
|---|---|
| Business registered on goAML UAE FIU portal | ✅ / ❌ |
| Written AML policy updated post October 2025 law | ✅ / ❌ |
| Business-wide risk assessment completed and documented | ✅ / ❌ |
| CDD procedures in place for all new clients | ✅ / ❌ |
| Beneficial ownership verification conducted for all clients | ✅ / ❌ |
| Enhanced Due Diligence process for high-risk clients | ✅ / ❌ |
| MLRO formally appointed and documented | ✅ / ❌ |
| Staff AML training completed in last 12 months | ✅ / ❌ |
| Suspicious transaction monitoring process active | ✅ / ❌ |
| AML records maintained for minimum 5 years | ✅ / ❌ |
If you have three or more ❌ on this checklist — your business has an active AML compliance gap. Given the new personal liability framework under the 2025 law, addressing these gaps is no longer optional.
Anti Money Laundering UAE Penalties What Non-Compliance Costs
The updated AML penalty framework under the 2025 law and associated Cabinet Resolutions is severe:
| Violation | Penalty |
|---|---|
| Failure to register on goAML | Up to AED 1,000,000 |
| Failure to conduct CDD | AED 100,000 – AED 500,000 |
| Failure to file STR when required | AED 100,000 – AED 500,000 |
| Failure to maintain AML records | AED 50,000 – AED 100,000 |
| Failure to appoint MLRO | AED 50,000 – AED 250,000 |
| Tipping off (alerting a client an STR was filed) | Criminal prosecution |
| Money laundering conviction (individual) | Imprisonment up to 10 years + AED 5,000,000 fine |
| Personal liability (manager/director) | Fines and imprisonment no minimum proof of intent required |
The personal liability exposure for managers and directors under the 2025 law is the change that makes this genuinely different from prior AML frameworks. These are not abstract corporate fines they are consequences that follow individual people.
FATF UAE 2026 Why the Enforcement Environment Has Changed Permanently
The UAE was removed from the FATF grey list in February 2024 a significant achievement that confirmed the country’s progress in AML and counter-terrorism financing compliance. The UAE was then removed from the EU’s list of high-risk third countries in August 2025.
But maintaining this status requires continuous improvement — and the FATF mutual evaluation of the UAE is actively underway in 2026. This evaluation reviews whether UAE businesses and regulators are actually implementing AML requirements in practice — not just on paper.
This is why enforcement activity from the Ministry of Economy, the Central Bank, and free zone regulators has increased dramatically in 2026. Inspections, penalties, and prosecutions are all up. The FATF evaluation creates a direct incentive for UAE authorities to demonstrate active, visible enforcement and DNFBPs that have been operating with weak or absent AML frameworks are increasingly at risk of being the examples that get made.
How JASM Accounting Helps UAE Businesses with AML Compliance
As a DNFBP ourselves and as advisors to many UAE businesses that are also DNFBPs JASM Accounting understands AML compliance from the inside out. We help UAE businesses with:
- AML risk assessment — documenting your business-wide risk profile
- CDD and KYC procedures — building client verification processes that meet DNFBP requirements
- goAML registration — guiding you through the FIU portal registration process
- AML policy drafting and review — ensuring your written policy meets the 2025 law requirements
- MLRO support — advising on the role, responsibilities, and documentation requirements
This work sits naturally alongside our accounting outsourcing, financial reporting, VAT compliance, and corporate tax advisory services because in 2026, AML compliance and financial compliance are no longer separate conversations.
5 FAQs Anti Money Laundering UAE
Does anti money laundering compliance apply to all UAE businesses?
Not all — but more than most business owners realise. AML obligations apply to all financial institutions (banks, money exchanges, insurance companies) and to Designated Non-Financial Businesses and Professions (DNFBPs) which include accountants, auditors, lawyers, real estate agents, corporate service providers, and dealers in precious metals and stones. Under the 2025 law, virtual asset service providers are now also included. If your business falls into any of these categories, full AML compliance is legally mandatory.
What is goAML and do I need to register?
goAML is the official platform of the UAE Financial Intelligence Unit (FIU) through which DNFBPs and financial institutions must submit Suspicious Transaction Reports (STRs), Suspicious Activity Reports (SARs), and high-value cash transaction reports. Registration is mandatory for all DNFBPs. Failure to register carries penalties of up to AED 1,000,000 under the updated penalty framework. Registration is completed online through the UAE FIU’s goAML portal.
What changed in UAE AML law under the 2025 reform?
Federal Decree-Law No. 10 of 2025, enacted in October 2025, introduced four major changes: personal criminal liability for managers and directors (including fines and imprisonment) without requiring proof of direct intent; a lowered knowledge threshold for offences (circumstantial evidence now sufficient); tax evasion added as a predicate offence for money laundering; and virtual asset service providers brought within the full scope of AML obligations. The Financial Intelligence Unit also received new powers to freeze assets and suspend transactions for up to 30 days.
What is a Suspicious Transaction Report (STR) in UAE?
An STR is a mandatory report filed through the goAML portal when your business encounters a transaction or client behaviour that suggests funds may be connected to criminal activity. Filing an STR does not mean you are accusing a client of a crime it means you are discharging your legal duty to report. You must never alert the client that an STR has been filed (tipping off) this is a criminal offence under UAE law. STRs must be filed promptly upon detection of suspicious activity, not after a waiting period.
How long must AML records be kept in UAE?
All AML records including CDD documents, transaction records, STRs filed, risk assessments, and staff training records must be retained for a minimum of 5 years from the end of the business relationship or the date of the transaction. For real estate transactions and some other specific categories, longer retention periods may apply. Records must be organised and readily accessible in case of a Ministry of Economy inspection or FIU request.
AML Compliance Is No Longer Optional It Is Personal
The October 2025 law changed the stakes of AML non-compliance in the UAE permanently. Before, a company might face a fine. Now, the manager who signed off on a non-compliant onboarding, the director who approved a suspicious transaction without filing an STR, and the owner who never bothered with goAML registration each of them faces personal criminal exposure.
The UAE’s commitment to FATF compliance, its zero-tolerance enforcement stance in 2026, and the expanded scope of the new law mean that AML compliance is now as fundamental to operating a UAE business as trade licence renewal and VAT registration.
At JASM Accounting, we help UAE businesses across Dubai, Abu Dhabi, Sharjah, and all free zones build and maintain AML compliance frameworks that meet the 2025 law requirements protecting both your business and you personally.
📞 Book your free AML compliance consultation today: jasmaccounting.ae/contact
