AML for Exchange Houses and Remittance Firms

1. Introduction

Exchange houses and remittance firms are critical financial intermediaries that facilitate cross-border payments and foreign currency transfers for individuals and businesses. Given their high volume of cash transactions and cross-border flows, these entities face elevated risks of money laundering and terrorist financing (ML/TF).

In the United Arab Emirates (UAE), the Central Bank (CBUAE) and the Financial Intelligence Unit (FIU) have introduced a strong Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) framework to ensure that exchange houses and money service businesses (MSBs) maintain robust internal controls, transparency, and compliance with international standards—especially those set by the Financial Action Task Force (FATF).

________________________________________

2. UAE Legal Framework Governing Exchange Houses

Key Laws and Regulations:

1. Federal Decree-Law No. (20) of 2018 – On Anti-Money Laundering and Combating the Financing of Terrorism and Illegal Organisations.

2. Cabinet Decision No. (10) of 2019 – Executive Regulation detailing AML obligations for all financial institutions including exchange houses.

3. CBUAE Regulation for Licensed Exchange Houses (2021) – Mandating specific operational, governance, and compliance requirements.

4. CBUAE AML and Sanctions Compliance Guidelines (2022) – A practical manual on how exchange houses must establish AML controls.

5. Cabinet Decision No. (24) of 2022 – Strengthening CDD obligations and the role of MLROs in high-risk institutions.

These regulations align the UAE’s AML regime with FATF recommendations and ensure that all remittance firms adopt a risk-based approach (RBA) to monitoring and reporting.

________________________________________

3. The Role of the Central Bank of the UAE (CBUAE)

The CBUAE supervises all licensed exchange houses and remittance companies. It conducts on-site inspections, off-site reviews, and transaction monitoring audits to ensure compliance with AML laws.

The Central Bank’s objectives include:

• Ensuring effective Customer Due Diligence (CDD) and Know Your Customer (KYC) practices.

• Monitoring suspicious or high-value cross-border remittances.

• Enforcing sanctions compliance in line with UAE Cabinet Decision No. 74 of 2020.

• Imposing penalties for AML breaches and publishing enforcement outcomes to promote transparency.

________________________________________

4. Customer Due Diligence (CDD) and KYC Obligations

Exchange houses must implement comprehensive CDD/KYC procedures for all clients—both walk-in customers and regular remittance users.

Key Requirements Include:

• Verification of identity using valid government documents (Emirates ID, passport, or residency permit).

• Recording transaction purpose, source of funds, and destination country.

• Identifying and verifying Ultimate Beneficial Owners (UBOs) in business remittance accounts.

• Applying Enhanced Due Diligence (EDD) for high-risk customers such as politically exposed persons (PEPs) or clients from high-risk jurisdictions.

• Conducting ongoing due diligence for repeat customers and large-volume transfers.

Even small transactions, if frequent or unusual, must be flagged for potential suspicious activity.

________________________________________

5. Transaction Monitoring and Risk Management

Exchange houses must establish automated monitoring systems capable of:

• Identifying structured transactions (multiple small transfers designed to evade thresholds).

• Detecting unusual remittance patterns inconsistent with customer profiles.

• Screening every transaction against international and UAE sanctions lists.

• Applying risk-based controls, differentiating between low, medium, and high-risk customers.

The compliance team must analyze alerts generated by the system and determine whether a Suspicious Transaction Report (STR) needs to be filed via the goAML portal.

________________________________________

6. Mandatory Reporting Obligations

Under the UAE AML regime, exchange houses must submit several types of reports to the UAE Financial Intelligence Unit (FIU):

Report Type Description Timeline Reporting Channel

Suspicious Transaction Report (STR) Report any transaction suspected to involve ML/TF Immediately goAML Portal

Suspicious Activity Report (SAR) Report irregular patterns or behaviors Immediately goAML Portal

Threshold Transaction Report (TTR) Cash transactions ≥ AED 55,000 Periodically goAML Portal

Sanctions Report Report attempted dealings with sanctioned entities As required FIU / CBUAE

Failure to report or delays in submission can lead to severe administrative and criminal penalties, including fines up to AED 1 million, business suspension, or license revocation.

________________________________________

7. Record Keeping and Data Retention

All exchange houses are required to maintain records of:

• Customer identification and verification documents.

• Transaction data (amount, currency, sender, receiver, and purpose).

• Internal compliance investigations and reports.

These records must be preserved for at least five (5) years after the transaction date or business relationship termination and must be readily accessible for regulatory inspection.

________________________________________

8. Appointment of MLRO and Internal Controls

Each exchange house must appoint a Money Laundering Reporting Officer (MLRO) responsible for:

• Reviewing internal alerts and ensuring timely STR/SAR submission.

• Acting as the main liaison with the FIU and Central Bank.

• Conducting risk assessments and staff training.

• Maintaining a robust internal AML Policy and Procedures Manual.

Additionally, management must ensure segregation of duties between operations and compliance to avoid conflicts of interest.

________________________________________

9. Staff Training and Awareness

Regular AML training is mandatory for all employees, especially those handling customer onboarding and remittance processing.

Training must cover:

• Latest FATF typologies and red-flag indicators.

• Sanctions screening and reporting procedures.

• Use of goAML portal and internal escalation steps.

• Awareness of terrorist financing and trade-based laundering schemes.

Continuous professional development ensures the staff can effectively identify and respond to suspicious behavior.

________________________________________

10. Enforcement Actions and Penalties

The CBUAE has actively imposed penalties on non-compliant exchange houses for breaches such as:

• Failure to conduct CDD properly.

• Inadequate internal AML systems.

• Delays in reporting to the FIU.

• Poor governance and lack of staff training.

Fines can range from AED 100,000 to over AED 5 million, depending on the severity of the violation. In extreme cases, the Central Bank may revoke the license or impose temporary suspension of operations.

________________________________________

11. Conclusion

The UAE’s stringent AML framework ensures that exchange houses and remittance firms operate transparently and ethically. These firms must continuously improve their internal systems, invest in compliance technology, and adopt a culture of integrity to remain compliant.

A proactive AML approach not only prevents regulatory penalties but also builds customer confidence and strengthens the UAE’s reputation as a global leader in financial compliance.

________________________________________

About Sheikh Anwar Accounting & Auditing LLC

Sheikh Anwar Accounting & Auditing LLC is a leading UAE-based audit and compliance firm providing AML advisory, regulatory audit, and outsourced MLRO services to exchange houses, remittance companies, and other DNFBPs.

Our AML specialists help businesses design, implement, and monitor compliance frameworks that meet CBUAE and FATF expectations.

________________________________________

📞 Contact Us

Sheikh Anwar Accounting & Auditing LLC

📍 Office No. M-35, Dubai Creek Tower, Deira, Dubai, UAE

📧 info@sa-auditors.com

🌐 www.sa-auditors.com

📞 +971 52 692 7072