DFSA AML Guidelines for DIFC Firms

Introduction

The Dubai International Financial Centre (DIFC) is one of the most important financial hubs in the Middle East, attracting global banks, investment firms, fintech startups, and professional service providers. To protect its ecosystem from money laundering (ML) and terrorism financing (TF) risks, the Dubai Financial Services Authority (DFSA) enforces strict AML and Counter-Terrorism Financing (CTF) guidelines.

It align with the UAE’s federal AML laws and the Financial Action Task Force (FATF) standards while being tailored to the unique needs of DIFC firms.

________________________________________

The DFSA’s Role in AML Supervision

The DFSA is the independent regulator of financial services in DIFC. It ensures that firms operating within the free zone implement robust AML frameworks. Its role includes:

• Issuing AML/CTF regulations and guidance.

• Supervising firms through inspections and audits.

• Enforcing penalties for non-compliance.

• Promoting best practices in financial transparency.

________________________________________

Key AML Guidelines for DIFC Firms

1. Compliance with UAE Federal AML Laws

DIFC firms must comply with Federal Decree-Law No. 20 of 2018 and its implementing regulations, in addition to DFSA-specific rules.

2. Risk-Based Approach (RBA)

Firms must assess risks based on:

• Customer type.

• Geographical exposure.

• Products and services offered.

This ensures AML measures are proportionate to the level of risk.

3. Customer Due Diligence (CDD) & KYC

• Verify customer identities and Ultimate Beneficial Owners (UBOs).

• Apply Enhanced Due Diligence (EDD) for high-risk customers, such as politically exposed persons (PEPs).

• Ongoing monitoring of business relationships.

4. Suspicious Transaction Reporting (STRs)

• DIFC firms must file STRs to the UAE Financial Intelligence Unit (FIU) via the goAML portal.

• Internal procedures must allow staff to escalate suspicions to the Money Laundering Reporting Officer (MLRO).

5. Sanctions & Screening Obligations

• Mandatory screening against UN, UAE, and international sanctions lists.

• Immediate reporting and freezing of assets if linked to designated individuals or entities.

6. Governance & MLRO Appointment

• All firms must appoint a suitably qualified MLRO.

• The MLRO is responsible for AML compliance, STR filing, and regulatory liaison.

• Firms must also establish independent compliance and audit functions.

7. Record-Keeping

• Customer and transaction records must be retained for at least six years (longer than the federal requirement of five years).

8. Training & Awareness

• Firms must provide regular AML training to staff at all levels.

• Training should cover red flags, reporting duties, and updates in AML regulations.

9. Independent Audit & Testing

• AML frameworks must be subject to regular independent audits.

• The DFSA reviews whether firms test their systems and controls effectively.

________________________________________

Enforcement & Penalties

The DFSA can impose serious penalties on firms and individuals for AML breaches, including:

• Fines in the millions of dirhams.

• Suspension or withdrawal of licenses.

• Personal liability for senior management and MLROs.

• Reputational damage through public enforcement notices.

________________________________________

Impact on DIFC Firms

• Global Reputation: Strong AML compliance enhances DIFC’s standing as a trusted financial hub.

• Operational Responsibility: Firms must invest in compliance systems and skilled staff.

• Investor Confidence: AML compliance reassures global investors and partners.

________________________________________

Conclusion

The DFSA AML guidelines for DIFC firms ensure that financial and professional service providers in the free zone operate to the highest international standards. By focusing on risk-based compliance, CDD, STRs, sanctions, and governance, the DFSA strengthens DIFC’s role as a secure and transparent business hub.

For DIFC firms, AML compliance is not only a legal requirement but also a strategic advantage, protecting reputation, clients, and long-term growth.

________________________________________

About Sheikh Anwar Accounting and Auditing LLC

At Sheikh Anwar Accounting and Auditing LLC, we assist DIFC firms in meeting DFSA’s AML requirements through:

• AML policy drafting and risk assessments.

• goAML reporting and STR/CTR filing support.

• MLRO advisory and outsourced compliance services.

• Independent AML audits and testing.

• Tailored employee AML training.

• 📍 Head Office: Dubai, UAE

• 🌐 Website: www.sa-auditors.com

• 📧 Email: info@sa-auditors.com