Risk-Based Approach in UAE AML Law

ntroduction

The Risk-Based Approach (RBA) is a cornerstone of modern Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) compliance. Instead of applying the same level of monitoring to all customers and transactions, businesses must allocate resources proportionally to the level of risk.

In the UAE, the RBA is embedded in Federal Decree-Law No. 20 of 2018, its amendments under Federal Decree-Law No. 26 of 2021, and related Cabinet Decisions such as No. 10 of 2019 and No. 109 of 2023. Both financial institutions (FIs) and Designated Non-Financial Businesses and Professions (DNFBPs) are legally required to adopt this approach.

________________________________________

What Is the Risk-Based Approach (RBA)?

The RBA requires businesses to:

• Identify and assess risks of money laundering and terrorism financing.

• Prioritize high-risk customers, transactions, and sectors with enhanced monitoring.

• Apply simplified measures for low-risk situations while not compromising compliance.

• Continuously review and update risk assessments to reflect new threats.

This flexible model ensures that compliance measures are both effective and proportionate.

________________________________________

Key Elements of RBA Under UAE AML Law

1. Customer Due Diligence (CDD) Based on Risk

• Low-risk customers may undergo Simplified Due Diligence (SDD).

• High-risk customers (e.g., politically exposed persons – PEPs) require Enhanced Due Diligence (EDD).

• Businesses must verify Ultimate Beneficial Owners (UBOs) and maintain updated records.

2. Transaction Monitoring

• Low-risk transactions: standard monitoring.

• High-risk transactions: stricter scrutiny, especially for cross-border dealings, complex structures, or unusual patterns.

3. Sector-Specific Risk Focus

The UAE law highlights certain high-risk sectors:

• Real estate (large, high-value property transactions).

• Dealers in precious metals and stones (DPMS) (gold & jewellery trade).

• Corporate service providers (company formation & nominee services).

• Lawyers and accountants (structuring financial transactions).

4. Geographic Risk

• Enhanced monitoring for transactions involving high-risk jurisdictions identified by FATF or the UAE.

• Special attention to countries with weak AML frameworks or under sanctions.

5. Continuous Risk Assessment

• Businesses must periodically review and update their risk assessment policies.

• Risks must be assessed at the customer level, transaction level, and enterprise level.

6. Internal Controls & MLRO Oversight

• Appointment of a Money Laundering Reporting Officer (MLRO) is mandatory.

• MLRO ensures that RBA is consistently applied across the business.

7. Documentation & Record-Keeping

• All risk assessments and decisions (why a client was classified as low, medium, or high risk) must be documented.

• Records must be retained for at least five years.

________________________________________

Benefits of the Risk-Based Approach

1. Efficiency – Resources are focused on higher-risk areas instead of applying blanket measures.

2. Flexibility – Businesses can adapt compliance to their size, sector, and clients.

3. Alignment with FATF – UAE stays compliant with global standards.

4. Better Detection – High-risk transactions are more effectively identified and reported.

5. Regulatory Confidence – Demonstrates proactive compliance during inspections by the Ministry of Economy, Central Bank, SCA, DFSA, and FSRA.

________________________________________

Penalties for Ignoring RBA

Failure to apply the RBA can result in:

• Fines between AED 50,000 and AED 5 million.

• License suspension or revocation.

• Reputational damage and blacklisting.

• Criminal liability for deliberate negligence.

________________________________________

Conclusion

The Risk-Based Approach is not just a legal requirement but a practical compliance strategy that helps UAE businesses balance efficiency with effectiveness. By identifying high-risk customers, sectors, and jurisdictions, companies can strengthen their defenses against money laundering and terrorism financing.

For firms in high-risk sectors like real estate, gold trading, and corporate services, adopting an RBA is essential to avoid penalties, build investor trust, and support the UAE’s global reputation as a transparent business hub.

________________________________________

About Sheikh Anwar Accounting and Auditing LLC

At Sheikh Anwar Accounting and Auditing LLC, we help businesses implement Risk-Based AML frameworks. Our services include:

• Risk assessments tailored to your sector.

• Drafting AML policies and risk matrices.

• STR/CTR filing support via goAML.

• Outsourced MLRO services.

• Training employees on applying the Risk-Based Approach.

• 📍 Head Office: Dubai, UAE

• 🌐 Website: www.sa-auditors.com

• 📧 Email: info@sa-auditors.com