Lessons from AML Enforcement on Accountants

Introduction

Accountants and auditors occupy a crucial position in the UAE’s financial ecosystem. Their expertise in preparing, reviewing, and advising on financial information gives them a frontline role in detecting potential money laundering (ML) and terrorist financing (TF) risks.

However, recent enforcement actions by the UAE Ministry of Economy (MOE) have shown that many accounting and auditing firms are still falling short of Anti-Money Laundering (AML) compliance expectations.

From non-registration on goAML to weak Customer Due Diligence (CDD) and failure to identify beneficial owners, several firms have faced substantial fines and regulatory warnings.

________________________________________

1. Why Accountants Fall Under AML Supervision

Under Federal Decree-Law No. (20) of 2018 and Cabinet Decision No. (10) of 2019, accountants, auditors, and corporate service providers are classified as Designated Non-Financial Businesses and Professions (DNFBPs).

This means they are obligated to:

• Register on the goAML platform of the UAE Financial Intelligence Unit (FIU).

• Conduct risk-based Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD).

• Maintain transaction and identification records for at least five years.

• File Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs).

• Appoint a Compliance Officer / MLRO responsible for AML oversight.

Failure to comply with these requirements exposes firms to penalties under Cabinet Decision No. (16) of 2021, which prescribes fines of AED 50,000 to AED 5 million per violation.

________________________________________

2. Recent AML Enforcement on Accounting Firms in the UAE

Case 1: Multiple Firms Fined for Non-Registration on goAML (2023)

The Ministry of Economy penalized a number of accounting and auditing firms for failing to register with the goAML platform, which is a mandatory reporting system for STRs and DPMSRs (Designated Precious Metals and Stones Reports).

Findings:

• Firms were unaware of the registration obligation.

• No compliance officer was appointed.

• No internal AML policies were in place.

Result:

Fines between AED 50,000 to AED 200,000 were issued. Firms were also warned that repeated violations could lead to license suspension.

Lesson:

Ignorance of AML obligations is not an excuse. Every DNFBP must register, activate, and maintain its goAML account and ensure that reporting access is assigned to the authorized MLRO.

________________________________________

Case 2: Accounting Firm Penalized for Missing CDD Documents

A mid-sized accounting firm in Dubai was fined AED 100,000 for not performing adequate Customer Due Diligence (CDD) when onboarding new clients.

Violations included:

• No verification of beneficial ownership.

• No documented source of funds for certain clients.

• Generic KYC forms without risk scoring or signatures.

Lesson:

CDD is more than collecting documents — it requires verification, risk classification, and continuous monitoring.

All accountants must maintain evidence of identification, source of funds, and ownership structure for every client.

________________________________________

Case 3: Audit Firm Cautioned for Weak Risk Assessment

During an MOE inspection in 2024, an auditing firm was found using a template-based risk assessment that did not reflect its actual exposure to ML/TF risks.

Findings:

• No risk differentiation between clients.

• No consideration of geographic or product risks.

• No annual review of the AML risk assessment report.

Lesson:

AML risk assessments must be tailored and updated annually. Regulators expect firms to demonstrate understanding of their client risk profiles and apply proportionate controls.

________________________________________

Case 4: Firms Warned for Lack of AML Training

Several accounting firms received official warnings for failing to conduct employee AML training programs.

Violations included:

• No annual training records.

• Staff unaware of AML reporting procedures.

• No evidence of attendance or test results.

Lesson:

Training is a core compliance pillar. Regulators expect all staff — including partners, associates, and administrative employees — to receive annual AML/CFT awareness sessions with documented evidence.

________________________________________

3. Common AML Weaknesses Identified in Accounting Firms

AML Weakness Description Regulatory Consequence

No AML Policy Lack of documented AML framework Fine up to AED 200,000

Missing goAML Registration Failure to report STRs Fine up to AED 200,000

Weak CDD/EDD No client verification or risk profiling Fine up to AED 500,000

No MLRO Appointment No accountable compliance person Fine up to AED 100,000

Incomplete Record-Keeping CDD files not retained for 5 years Fine up to AED 50,000

No Training Employees unaware of AML red flags Warning and possible suspension

________________________________________

4. Lessons Accountants Must Learn

✅ Lesson 1: Compliance Starts with Registration

Every accounting and audit firm must be registered and active on the goAML platform.

Non-registration or inactive accounts indicate non-compliance. Firms should test login credentials, assign reporting rights, and verify email alerts.

________________________________________

✅ Lesson 2: Develop a Risk-Based AML Policy

An AML policy must:

• Define CDD, EDD, and STR filing processes.

• Include procedures for risk scoring and periodic reviews.

• Be reviewed and approved by management annually.

Templates alone are not sufficient — the policy must reflect the firm’s actual operations and client base.

________________________________________

✅ Lesson 3: Conduct and Document Risk Assessments

Prepare an Enterprise-Wide AML Risk Assessment (EWRA) that identifies:

• Customer risk (corporate vs. individual clients).

• Geographic risk (offshore or high-risk jurisdictions).

• Service risk (tax, audit, or advisory).

Each client must have a risk profile and associated due diligence level.

________________________________________

✅ Lesson 4: Maintain Proper CDD and Record-Keeping

Keep detailed CDD files containing:

• Valid ID and trade license copies.

• Verified beneficial ownership details.

• Source of funds/wealth documentation.

• Signed risk classification forms.

Records must be kept for five years post-termination of the client relationship.

________________________________________

✅ Lesson 5: Appoint a Qualified MLRO

The Money Laundering Reporting Officer (MLRO) should:

• Have knowledge of UAE AML regulations.

• Report directly to partners or senior management.

• Oversee STR filing, policy implementation, and training.

Regulators may ask for MLRO qualification records during inspections.

________________________________________

✅ Lesson 6: Conduct Annual AML Training

Train employees to recognize suspicious activities such as:

• Clients refusing to disclose ownership.

• Complex corporate structures with no clear purpose.

• Unusual cash payments or third-party fund transfers.

Training should be documented with date, topic, attendance, and assessment.

________________________________________

5. Role of Accountants in AML Detection

Accountants are often the first to identify financial irregularities that could indicate ML/TF risks. Their work offers unique visibility into:

• Unexplained cash flows or offshore transactions.

• Unjustified accounting adjustments.

• Shell entities with minimal commercial activity.

Hence, their proactive reporting through goAML is critical to supporting the UAE’s national AML framework and FATF compliance commitments.

________________________________________

6. Regulatory Outlook – UAE’s Increasing Scrutiny

The MOE and FIU are intensifying inspections, with particular focus on professional service firms such as accountants, auditors, and consultants.

Between 2022 and 2024:

• Over 3,000 DNFBPs were inspected.

• More than AED 130 million in fines were issued.

• Firms were required to submit Corrective Action Plans (CAPs) within 30 days.

In 2025, regulators are expected to emphasize risk-based audits, digital CDD verification, and evidence-backed compliance programs.

________________________________________

7. The Path Forward for Accountants

To align with UAE and FATF standards, accounting firms should:

1. Maintain a documented AML framework aligned with regulatory updates.

2. Conduct annual AML risk assessments and internal audits.

3. Ensure independent reviews of compliance controls.

4. Use technology for sanctions screening and transaction monitoring.

5. Establish a compliance culture embedded in daily operations.

________________________________________

Conclusion

AML enforcement in the UAE has made one point abundantly clear — accountants cannot afford to neglect compliance. Weak AML controls are not just regulatory risks but professional liabilities that can erode trust and credibility.

By learning from past enforcement cases and implementing robust risk-based AML frameworks, accounting firms can safeguard both their reputation and clients, contributing to the UAE’s commitment to global financial transparency and integrity.

________________________________________

About Sheikh Anwar Accounting & Auditing LLC

Sheikh Anwar Accounting & Auditing LLC (MOE Entry No. 5817) is a Ministry of Economy–licensed audit and compliance firm specializing in AML/CFT advisory, risk assessments, independent AML audits, and AML training programs for accounting and auditing firms in the UAE.

We help DNFBPs and professional service providers strengthen AML governance, prepare for inspections, and achieve full goAML and MOE compliance.

📍 Office: Dubai Creek Tower, M-35, Dubai, UAE

📞 Phone: +971 4 000 0000

📧 Email: info@sa-auditors.com

🌐 Website: www.sa-auditors.com