AML
Anti-Money Laundering
Definition
Federal regime requiring designated UAE entities to perform risk assessment, set up an AML policy, file reports through goAML, and respond to regulator queries. Non-compliance carries large administrative fines.
Also known as
- Anti-Money Laundering & Counter-Terrorist Financing (AML/CFT)
- AML/CFT regime
- AML
- anti-money laundering
Attributes
| Governing authority | UAE Financial Intelligence Unit |
|---|---|
| Reporting platform | goAML |
| Key regulated entities | Financial institutions and DNFBPs |
| Core obligations | Risk assessment, AML policy, goAML reporting, regulator response |
| Related regime | AML/CFT |
What it is
The UAE Anti-Money Laundering regime is built on Federal Decree-Law No. 20 of 2018 and its 2019 Cabinet implementing regulations. It requires every UAE financial institution and every Designated Non-Financial Business or Profession (DNFBP) — auditors, lawyers, corporate-service providers, real-estate brokers, dealers in precious metals and stones — to identify, assess, and mitigate the money-laundering and terrorist-financing risks inherent in their business.
In practice, that means: register on the federal goAML platform, conduct an enterprise-wide risk assessment, write and approve an AML policy, train staff, run KYC and Beneficial Owner checks on every customer, monitor transactions, and file Suspicious Activity Reports (SARs) and Suspicious Transaction Reports (STRs) when triggers fire. The UAE Financial Intelligence Unit (FIU) sits at the centre of the reporting funnel.
Following the FATF grey-listing in 2022 and de-listing in 2024, enforcement has hardened markedly: administrative fines for missing risk assessments, missing UBO filings, and unregistered goAML accounts now routinely run AED 50,000–1,000,000 per breach.
Key characteristics
- Legal basis
- Federal Decree-Law No. 20 of 2018 + 2019 implementing regs
- Scope
- All financial institutions + 5 DNFBP categories
- Regulator
- Ministry of Economy (DNFBPs); Central Bank (FIs); FIU for SARs
- Platform
- goAML (UAE FIU)
- Penalties
- AED 50,000–1,000,000+ per breach
How it works
- Register the entity on the goAML platform.
- Conduct an enterprise risk assessment covering customer, geography, product, and channel risks.
- Approve an AML policy and a KYC procedure tailored to the assessed risks.
- Run KYC + UBO checks on every customer at onboarding and at trigger events.
- Monitor transactions; file SAR/STR reports through goAML when red flags trigger.
- Train staff annually and refresh the risk assessment when material changes occur.
Types of AML
| Type | Description | When it applies |
|---|---|---|
| Financial institution AML | AML obligations for banks, exchange houses, insurance companies, and other licensed financial entities. | Applies to all entities licensed by the Central Bank of the UAE or other financial regulators. |
| DNFBP AML | AML requirements for designated non-financial businesses and professions. | Applies to real-estate brokers, precious metals and stones dealers, auditors, lawyers, and corporate service providers. |
| Free zone AML | AML rules enforced by free zone authorities in addition to federal requirements. | Applies to entities in free zones such as DMCC, DIFC, and ADGM that have supplementary compliance frameworks. |
Examples
A real-estate brokerage in Business Bay must register on goAML, run KYC on every buyer and seller, and report cash deals over AED 55,000. An audit firm in DMCC must do the same plus screen against the UAE local terrorist list before accepting a client.
Why it matters
AML is the single most active enforcement area for UAE SMEs after VAT. The Ministry of Economy publishes monthly fine bulletins; missing the goAML registration alone is AED 50,000. Getting the framework in early is materially cheaper than retroactive remediation.
Common misconceptions
Misconception
AML only applies to banks.
Reality
DNFBPs — auditors, lawyers, corporate-service providers, brokers, precious-metal dealers — are squarely in scope and account for the bulk of recent fines.
Misconception
Once goAML is registered, you're compliant.
Reality
Registration is step 1. The risk assessment, policy, ongoing KYC, monitoring, training, and SAR filings are what regulators actually inspect.
FAQs
- Who has to register on goAML?
- All financial institutions and all DNFBPs operating in the UAE. The five DNFBP categories are real-estate brokers/agents, dealers in precious metals and stones, auditors, lawyers/notaries/legal professionals, and corporate-service providers.
- What's the fine for not having an AML policy?
- Per the Ministry of Economy fine schedule, missing or inadequate AML policies carry administrative penalties from AED 50,000 upward, with repeat or aggravated breaches reaching AED 1 million plus license suspension.
- Do I need a separate AML officer?
- Yes — DNFBPs must designate a Money Laundering Reporting Officer (MLRO) responsible for SAR filings, training, and regulator liaison. The MLRO can be an existing senior employee with relevant authority, but the role and responsibilities must be formally documented.
See also
- ESR(Economic Substance Regulations)
- UBO(Ultimate Beneficial Owner)
- goAML
- KYC(Know Your Customer)
- AML & ESR Compliance(Best Solution service)
For better understanding, see also
- How to Open a Dubai Bank Account: What Banks Want(post)
- Your Strategic Advantage: Why AML Compliance Service in UAE is Your Best Business Investment(post)
- Business License Rejection in Dubai: The Real Reasons and How to Fix It(post)
- Certificate of Incorporation in UAE: What It Is, What It Costs, and How to Get It(post)
- Tax Structuring in the UAE: Five Corporate Tax Decisions to Get Right at Incorporation(insight)
- Hidden Costs of Business Setup in Dubai: The Full 2026 Picture (Beyond the Licence Fee)(insight)
- How to Get a Trading License in Dubai: Costs, Types, and the Real Setup Process(post)
- How to Set Up a Subsidiary Company in the UAE(post)
- Tax Registration in Dubai: VAT, Corporate Tax & TRN Guide (2026)(post)
- LLC Company Formation in Dubai: Cost, Steps and Ownership Rules (2026)(post)
- How to Start a Jewellery Business in Dubai: Licences, Costs and Setup (2026)(post)
- 21 Company Formation Mistakes to Avoid in Dubai (2026 Guide)(insight)
- How to Start a Real Estate Company in Dubai: License, Cost, and the RERA Sequence (2026)(post)
- DMCC Business Setup Services: Your JLT Licence, Handled(post)
- DMCC Crypto Centre: VARA Licence Setup in Uptown Tower(post)
- DMCC Bank Account: Highest Acceptance Rate in 2026(post)
- DMCC Gold Trading Licence: Diamonds & Good Delivery(post)
- Fujairah Oil, Bunkering & Marine Company Setup 2026(post)
Sources
External references
Need help with AML?
AML & ESR Compliance
