How Weak CDD Led to AML Fines in UAE

Introduction

In recent years, the United Arab Emirates (UAE) has made major strides in strengthening its Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) framework. However, despite progress, a significant number of Designated Non-Financial Businesses and Professions (DNFBPs) — including jewellers, real estate brokers, accountants, and auditors — continue to face penalties due to weak Customer Due Diligence (CDD) practices.

Regulators such as the Ministry of Economy (MOE) and the Financial Intelligence Unit (FIU) have imposed millions of dirhams in fines for CDD-related non-compliance. The underlying issue is simple yet critical — failure to know your customer (KYC) properly remains one of the most common reasons for AML breaches in the UAE.

________________________________________

1. What is Customer Due Diligence (CDD)?

Customer Due Diligence is the process of identifying and verifying the identity of customers before entering into a business relationship or conducting a transaction.

As per Article (4) of Cabinet Decision No. (10) of 2019, CDD requires businesses to:

• Identify and verify the customer’s identity using reliable documentation (e.g., Emirates ID, passport, trade license).

• Identify the beneficial owner of corporate clients.

• Understand the nature and purpose of the business relationship.

• Conduct ongoing monitoring of customer transactions.

When dealing with high-risk clients, businesses must perform Enhanced Due Diligence (EDD), which includes verifying source of funds and wealth, especially for Politically Exposed Persons (PEPs) or clients from high-risk jurisdictions.

________________________________________

2. How Weak CDD Led to AML Fines in the UAE

Case 1: Jewellery Shops Penalized for Inadequate CDD

In 2023, the MOE fined several gold and jewellery businesses in Dubai and Sharjah over AED 22 million for CDD-related breaches.

Violations included:

• Accepting cash transactions exceeding AED 55,000 without obtaining identification or verifying the source of funds.

• Failure to perform CDD on foreign buyers and repeat customers.

• Absence of documentation for beneficial ownership in corporate clients.

Key Lesson:

Jewellery and precious metal traders must verify customer identity for every high-value transaction, regardless of whether the customer is known or a repeat buyer.

________________________________________

Case 2: Real Estate Firms Fined for Missing Source of Funds Checks

Several real estate brokers in Abu Dhabi and Dubai were fined between AED 200,000–AED 1 million for failing to verify source of funds for high-value property purchases, especially those involving foreign investors and offshore entities.

Violations included:

• Accepting funds through third-party accounts.

• Not conducting EDD on politically exposed clients.

• Relying only on passport copies without verifying ownership or transaction purpose.

Key Lesson:

Real estate professionals must obtain documentary proof of source of funds, especially when transactions involve large sums or cross-border parties.

________________________________________

Case 3: Accounting Firms and Corporate Service Providers Warned

The MOE issued warning notices to accounting and audit firms for incomplete KYC files during AML inspections.

Typical deficiencies found:

• No beneficial ownership verification for company clients.

• Missing trade licenses or UBO register.

• Generic CDD forms without risk scoring or signature verification.

Key Lesson:

For professional service firms, CDD is not limited to collecting documents — it must include verification, risk assessment, and record retention.

________________________________________

3. Common Weaknesses in CDD Practices Identified by UAE Regulators

Weakness Regulatory Risk Example Consequence

Relying only on passport copies Incomplete identification Fine up to AED 100,000

Failure to verify beneficial ownership Breach of Article (6) of Cabinet Decision 10/2019 Fine up to AED 200,000

No documentation for source of funds High-risk exposure Fine up to AED 500,000

Missing CDD for walk-in clients Violation of MOE AML guidelines Inspection warning or suspension

No EDD for PEPs FATF compliance failure Repeat penalties or prosecution

________________________________________

4. Why Weak CDD is a Serious Compliance Failure

CDD is the foundation of AML compliance. When businesses fail to identify their customers properly, they create blind spots that criminals can exploit.

a. Risk of Regulatory Penalties

Under Cabinet Decision No. (16) of 2021, fines range from AED 50,000 to AED 5 million, depending on the nature and frequency of the violation.

b. Exposure to Financial Crime

Weak CDD allows criminals to launder funds through:

• Over- or under-invoicing (Trade-Based Money Laundering).

• High-value purchases in gold or property.

• False invoicing or use of proxies.

c. Reputational Damage

Non-compliance not only triggers fines but also results in public disclosure of violations, severely affecting trust and brand reputation.

________________________________________

5. Key Red Flags in Customer Due Diligence

Businesses must train staff to identify suspicious indicators such as:

• Reluctance to provide identification or source of funds.

• Multiple purchases below reporting thresholds (structuring).

• Transactions involving high-risk countries or sanctioned entities.

• Use of cash in unusually large transactions.

• Complex ownership structures without clear purpose.

If any of these are observed, the business must file a Suspicious Transaction Report (STR) on goAML without delay.

________________________________________

6. How to Strengthen CDD Frameworks in Your Organization

✅ Step 1: Develop a Risk-Based CDD Policy

• Define CDD and EDD processes in line with Cabinet Decision No. (10) of 2019.

• Classify customers into Low, Medium, and High Risk categories.

• Set thresholds for additional verification based on transaction value and risk.

________________________________________

✅ Step 2: Verify Beneficial Ownership

For all corporate clients:

• Obtain UBO information in accordance with Cabinet Resolution No. (58) of 2020.

• Verify ownership using trade license, memorandum of association, and registry data.

________________________________________

✅ Step 3: Record and Retain All CDD Data

Maintain:

• Copies of identification and UBO records.

• Source of funds evidence.

• Risk assessment and approval logs.

Records must be kept for at least five years after the business relationship ends.

________________________________________

✅ Step 4: Conduct Regular Training

Provide annual AML and CDD training to all relevant employees.

Training should include:

• Identification of PEPs and high-risk customers.

• Red flags and reporting procedures.

• Use of goAML for STR submissions.

________________________________________

✅ Step 5: Review and Audit

Perform independent AML audits at least annually to evaluate the effectiveness of your CDD processes and compliance culture.

________________________________________

7. The UAE’s Enforcement Outlook

The Ministry of Economy has made it clear that CDD failures will remain a top enforcement focus.

Between 2022 and 2024:

• Thousands of AML inspections have been conducted.

• Fines totaling over AED 130 million have been issued across DNFBP sectors.

• Repeated offenders have faced license suspensions and criminal referrals.

As the UAE continues aligning with FATF standards, businesses must adopt a zero-tolerance approach to weak CDD.

________________________________________

Conclusion

Weak Customer Due Diligence remains one of the most common and preventable causes of AML non-compliance in the UAE.

Whether you are a jeweller, real estate broker, or accounting firm, CDD is your first line of defense against financial crime and regulatory penalties.

By implementing a risk-based, technology-enabled CDD framework and maintaining proper documentation, businesses can ensure compliance, build trust, and contribute to the UAE’s vision of becoming a globally recognized, transparent business hub.

________________________________________

About Sheikh Anwar Accounting & Auditing LLC

Sheikh Anwar Accounting & Auditing LLC (MOE Entry No. 5817) is a UAE-licensed audit and compliance firm specializing in AML/CFT advisory, CDD framework development, risk assessments, and AML audits.

We assist DNFBPs and professional service firms in implementing robust CDD policies, preparing for MOE AML inspections, and achieving goAML compliance.

📍 Office: Dubai Creek Tower, M-35, Dubai, UAE

📞 Phone: +971 4 000 0000

📧 Email: info@sa-auditors.com