AML in the Banking Sector – UAE Requirements

1. Introduction

The banking sector is the frontline defense in the fight against money laundering and terrorist financing (ML/TF). Banks process billions of dirhams daily across domestic and international channels, making them prime targets for illicit financial activities.

In the United Arab Emirates (UAE)—a global financial hub—the government has built a comprehensive Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) framework in alignment with the Financial Action Task Force (FATF) standards. This ensures that all UAE banks operate transparently, securely, and responsibly within the financial ecosystem.

________________________________________

2. UAE’s Legal and Regulatory Framework

The AML framework for banks in the UAE is anchored by a series of Federal Laws and Cabinet Decisions that clearly define preventive measures, reporting standards, and penalties for violations.

Key Legislations Include:

• Federal Decree-Law No. (20) of 2018 – On Anti-Money Laundering and Combating the Financing of Terrorism and Illegal Organisations.

• Cabinet Decision No. (10) of 2019 – Executive Regulation detailing compliance, reporting, and record-keeping requirements.

• Cabinet Decision No. (24) of 2022 – Enhancing the scope of supervision and risk-based compliance for financial institutions.

• Central Bank of the UAE (CBUAE) Guidelines – On AML and Sanctions Compliance for all Licensed Financial Institutions (LFIs).

• Cabinet Decision No. (109) of 2023 – Further updates to AML rules applicable to both financial institutions and DNFBPs.

________________________________________

3. The Role of the Central Bank of the UAE (CBUAE)

The CBUAE is the key supervisory authority for banks regarding AML compliance. Its functions include:

• Issuing regulatory circulars and guidance notes on AML/CTF practices.

• Conducting onsite inspections and audits of banks’ compliance systems.

• Monitoring suspicious transaction reports (STRs) filed via the goAML platform.

• Enforcing penalties and sanctions for non-compliance.

• Promoting a risk-based approach and requiring banks to implement internal controls proportionate to their risk exposure.

________________________________________

4. Customer Due Diligence (CDD) & Know Your Customer (KYC)

Effective AML compliance begins with Customer Due Diligence (CDD) and KYC verification. Every bank must:

1. Identify and verify customers using valid documents (passport, Emirates ID, trade license, etc.).

2. Determine the ultimate beneficial owner (UBO) in corporate accounts.

3. Understand the nature and purpose of the relationship or transaction.

4. Apply Enhanced Due Diligence (EDD) for high-risk clients such as politically exposed persons (PEPs).

5. Conduct ongoing monitoring to detect inconsistencies or unusual transaction behavior.

For correspondent banking relationships, banks must assess the reputation, controls, and ownership of their foreign counterparts to avoid exposure to high-risk jurisdictions.

________________________________________

5. Sanctions Screening and Transaction Monitoring

Every UAE bank is mandated to deploy automated screening systems to detect:

• Transactions linked to UN-sanctioned or UAE-restricted entities.

• Transfers involving high-risk countries or blacklisted individuals.

• Activities inconsistent with the customer’s financial profile or business nature.

Advanced monitoring tools use AI and machine learning to flag suspicious behavior in real-time, helping compliance officers file STRs (Suspicious Transaction Reports) through the goAML platform promptly.

________________________________________

6. Mandatory Reporting Requirements

UAE banks must adhere to strict reporting obligations as summarized below:

Report Type Purpose Deadline Authority

Suspicious Transaction Report (STR) Report suspected ML/TF activity Immediately upon suspicion FIU (via goAML)

Suspicious Activity Report (SAR) Report unusual activity not matching normal patterns Promptly upon detection FIU

Threshold Transaction Report (TTR) Report cash transactions ≥ AED 55,000 Regular submission FIU

Sanctions Report Report dealings with sanctioned entities As required FIU / CBUAE

Failure to report or delayed submission can attract hefty penalties, up to AED 1 million per violation, and may lead to license suspension or criminal prosecution.

________________________________________

7. Record-Keeping and Documentation

Banks are required to retain all records related to customer identification, transactions, and risk assessments for at least five (5) years from the date of transaction or account closure.

These records must be readily accessible to support investigations by the Central Bank, Financial Intelligence Unit (FIU), or law enforcement authorities.

________________________________________

8. Governance, Controls, and Staff Training

A robust AML culture depends on strong internal governance and continuous education. Banks must establish:

• An independent AML Compliance Department reporting to senior management.

• Appointment of a qualified Money Laundering Reporting Officer (MLRO).

• Periodic internal audits to test AML effectiveness.

• Annual staff training covering typologies, sanctions, and regulatory updates.

By promoting awareness, banks ensure that every employee—from front-office staff to senior management—can detect and report suspicious activities effectively.

________________________________________

9. Enforcement and Penalties

The Central Bank of the UAE has become increasingly proactive in imposing public penalties against non-compliant banks. These measures include:

• Financial penalties and restrictions on operations.

• Enhanced monitoring of AML frameworks.

• Public disclosure of enforcement actions to promote transparency.

• Referral to Public Prosecution for serious or deliberate violations.

This strict approach reflects the UAE’s commitment to maintaining a strong AML culture and its standing as a trusted global financial center.

________________________________________

10. Conclusion

The UAE banking sector’s AML framework is one of the most progressive in the region. As technology advances and criminal methods evolve, banks must continually upgrade their systems, train staff, and enhance due diligence practices.

By following CBUAE guidance and FATF standards, UAE banks can effectively safeguard the nation’s financial system and contribute to global AML efforts.

________________________________________

About Sheikh Anwar Accounting & Auditing LLC

Sheikh Anwar Accounting & Auditing LLC is a Dubai-based auditing and compliance firm specializing in AML advisory, compliance audits, corporate tax, and financial consulting for businesses across the UAE.

We assist banks, financial institutions, and DNFBPs in designing and implementing AML frameworks that align with CBUAE and MOE regulations, ensuring end-to-end compliance readiness.

________________________________________

📞 Contact Us

Sheikh Anwar Accounting & Auditing LLC

📍 Office No. M-35, Dubai Creek Tower, Deira, Dubai, UAE

📧 info@sa-auditors.com

🌐 www.sa-auditors.com

📞 +971 52 692 7072