AML Obligations in DIFC Companies
Introduction
The Dubai International Financial Centre (DIFC) is one of the world’s leading international financial hubs, operating under an independent legal and regulatory framework. To maintain its global reputation and protect the integrity of the financial system, all DIFC-registered companies—financial and non-financial—must comply with strict AML/CFT obligations.
Whether you are a regulated financial institution, DNFBP, holding company, or professional services entity, understanding DIFC’s AML requirements is essential for risk-free operations.
It provides a complete, practical, and updated guide to AML obligations under DIFC Regulatory Law 2004, DFSA AML Rulebook, and UAE Federal AML laws.
________________________________________
1. Regulatory Framework Governing AML in DIFC
DIFC companies must comply with both UAE Federal and DIFC-specific AML laws:
Federal AML Laws
• Federal Decree-Law No. 20 of 2018 (AML/CFT)
• Cabinet Decision No. 10 of 2019 (Implementing Regulations)
• FIU goAML Reporting Requirements
DIFC/DFSA Laws
• DIFC Regulatory Law 2004
• DFSA Rulebook – AML Module
• DFSA GEN, COB, PIB modules (where relevant)
________________________________________
2. Which DIFC Companies Must Comply?
AML obligations apply to almost all DIFC entities, including:
Financial Institutions
• Banks
• Fund/Wealth Managers
• Investment Firms
• Insurance Companies
DNFBPs (Designated Non-Financial Businesses & Professions)
• Law Firms
• Accounting/Audit Firms
• Trust & Corporate Service Providers
• Real Estate Brokers
• Dealers in Precious Metals & Stones
Other DIFC Companies
Even SPVs, holding companies, and foundation structures must meet basic AML controls (sanctions compliance, reporting, and governance).
________________________________________
3. Core AML Obligations for DIFC Companies
3.1 Appointment of MLRO (Money Laundering Reporting Officer)
Every DIFC company must designate:
• MLRO
• (Optional but recommended) Deputy MLRO
Responsibilities include:
• Reviewing high-risk clients
• Approving EDD
• Filing STR/SAR via goAML
• Maintaining internal AML policies
• Ensuring staff training
________________________________________
3.2 Customer Due Diligence (CDD)
Standard CDD
• Verify customer identity
• Identify beneficial ownership
• Understand nature & purpose of business
• Conduct sanctions screening
Enhanced Due Diligence (EDD)
Required for:
• PEPs
• High-risk jurisdictions
• Complex structures
• High-value cash or crypto transactions
• High-risk industries (precious metals, gaming, etc.)
EDD measures include:
• Senior management approval
• Additional verification
• Detailed source of funds/wealth
• More frequent monitoring
________________________________________
3.3 Ongoing Monitoring
DIFC companies must continuously monitor:
• Client activity
• Unusual or inconsistent transactions
• Sanctions updates
• Adverse media
• Risk re-scoring of clients
Monitoring tools may include automated AML screening or transaction monitoring systems.
________________________________________
3.4 Record Keeping Requirements
Minimum retention period:
8 years, as per DFSA AML Rulebook.
Must maintain:
• KYC documentation
• CDD/EDD reports
• Sanctions & PEP screening logs
• STR/SAR filings
• Internal risk assessments
• Policies & procedures
• AML training records
________________________________________
3.5 Suspicious Transaction Reporting (STR/SAR)
If there is suspicion of ML/TF:
1. Staff report internally to MLRO
2. MLRO investigates
3. File STR/SAR via goAML
4. Maintain confidentiality (tipping-off prohibition)
________________________________________
3.6 Independent AML Audit / Annual Review
All DIFC companies must perform:
• Annual AML/CFT Review
• Independent AML Audit (recommended every 12–18 months)
Audit covers:
• Governance & MLRO responsibilities
• Effectiveness of CDD/EDD
• Transaction monitoring
• STR/SAR compliance
• Sanctions controls
• Staff training adequacy
Your firm can provide this as a service offering.
________________________________________
4. DIFC-Specific AML Risk Areas
Companies must identify risks relevant to DIFC operations, including:
• Cross-border fund movements
• Family office structures
• Complex SPVs & holding companies
• Wealth management portfolios
• Crypto-related investments
• High-value commodities (gold, diamonds)
Each risk category requires documented mitigation controls.
________________________________________
5. Mandatory AML Policies and Procedures
A DIFC entity must maintain updated:
• AML/CFT Manual
• KYC & CDD framework
• EDD procedures
• PEP management policy
• Transaction monitoring program
• Sanctions screening policy
• Reporting & escalation process
• Annual AML training plan
• Enterprise-wide AML Risk Assessment
Policies must be updated annually.
________________________________________
6. AML Training Requirements
All relevant employees must receive:
• Annual AML training
• PEP/EDD training for high-risk roles
• MLRO specialised training
Training logs must be documented and retained.
Your Sheikh Anwar Academy can provide certified AML training programs.
________________________________________
7. Sanctions Compliance in DIFC
DIFC companies must comply with:
• UAE Local Terrorist List
• UN Security Council Resolutions
• Cabinet Decision No. 74 of 2020
Key actions:
• Real-time sanctions screening for clients & transactions
• Immediate internal escalation
• Reporting frozen assets within 24 hours
________________________________________
8. Penalties for AML Non-Compliance in DIFC
DFSA Administrative Penalties
• Up to USD 100,000 per violation
• Restrictions on business
• License suspension
• Mandatory remediation
Federal AML Penalties
• Fines up to AED 5 million
• Imprisonment
• Freezing of funds
• Facility closure in severe cases
________________________________________
Need Professional AML Support? We Can Help.
Sheikh Anwar Accounting & Auditing LLC provides full AML compliance solutions for DIFC companies:
✔ AML Policy & Procedure Manual
✔ DIFC AML Risk Assessment
✔ MLRO Outsourcing
✔ Annual AML Audit
✔ goAML Registration & STR/SAR Filing Support
✔ Sanctions & PEP Screening Setup
✔ DNFBP Compliance Management
✔ AML Training & Certification (via Sheikh Anwar Academy)
We ensure your DIFC entity meets all DFSA and UAE Federal AML obligations with zero compliance gaps.
________________________________________
Contact Us
Sheikh Anwar Accounting & Auditing LLC
Approved Auditors for DMCC & SAIF Zone | DIFC & ADGM Compliance Specialists
📍 Address:
Dubai Creek Tower, M 35, Dubai, UAE
📞 Phone:
+971 52 555 6740
+971 4 123 4567 (office) – (replace with your preferred number if needed)
📧 Email:
info@sa-auditors.com
sheikhanwarca@gmail.com
🌐 Website:
www.sa-auditors.com
