Steps to Update AML Policy in 2025

Introduction

The year 2025 marks a new chapter in the UAE’s compliance environment. Following the country’s removal from the FATF grey list in 2024 and updated guidance from the Ministry of Economy (MoE), Central Bank of the UAE (CBUAE), and free-zone regulators (DFSA in DIFC and FSRA in ADGM), companies are expected to keep their Anti-Money Laundering (AML) policies current, risk-based, and inspection-ready.

Updating your AML Policy in 2025 is not just a regulatory obligation—it is essential for safeguarding your business reputation, securing banking relationships, and ensuring investor confidence.

________________________________________

1. Review the Regulatory Landscape

• Federal AML Laws: Ensure alignment with Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019.

• Sector Guidance: Apply the latest circulars from CBUAE, MoE DNFBP notices, and guidance from DFSA/FSRA.

• International Standards: Cross-check with FATF Recommendations, especially updates around beneficial ownership and virtual assets.

________________________________________

2. Conduct an Entity-Wide Risk Assessment (EWRA)

• Update your risk assessment for 2025 to reflect:

o New products/services (e.g., digital payments, crypto exposure).

o Geographies (sanctioned or high-risk jurisdictions).

o Customer Segments (PEPs, corporates with complex structures, offshore entities).

• Map these risks directly into your policy.

________________________________________

3. Update Customer Due Diligence (CDD/EDD) Requirements

• Ensure Emirates ID verification is embedded for onboarding (mandatory for CBUAE-supervised entities).

• Add Enhanced Due Diligence (EDD) rules for high-risk customers (source of funds, source of wealth).

• Reflect beneficial ownership (UBO) requirements with stricter verification and record-keeping.

________________________________________

4. Strengthen Transaction Monitoring & Screening

• Update monitoring thresholds to capture sector-specific typologies (gold trading, real estate, cross-border transfers).

• Include trade-based money laundering (TBML) scenarios if relevant.

• Confirm sanctions/PEP/adverse media screening tools are updated for Arabic and English variations.

________________________________________

5. Refresh STR/SAR Escalation Procedures

• Re-test internal escalation workflows: staff → MLRO → FIU (via goAML).

• Ensure procedures also cover parallel regulator notifications (DFSA, FSRA) where applicable.

• Update documentation with timelines for suspicious reporting (immediate, without delay).

________________________________________

6. Incorporate AML Testing & Assurance

• Include an annual AML gap analysis or independent review in the policy.

• Document testing of monitoring systems, sanctions screening, and escalation controls.

• Define board-level reporting requirements.

________________________________________

7. Enhance Staff Training Provisions

• Update training modules to include:

o New UAE regulatory developments (2024–2025).

o Sector-specific red flags.

o Penalties for non-compliance.

• Record attendance and assessments as part of the policy.

________________________________________

8. Strengthen Governance & Reporting Lines

• Ensure the MLRO’s authority and independence are clearly defined.

• Establish clear reporting lines: Staff → MLRO → Senior Management → Board → FIU.

• Define Board responsibilities in AML oversight, including reviewing compliance reports.

________________________________________

9. Document & Communicate Updates

• Finalize the updated AML policy with version control (clearly dated 2025).

• Share updates across all departments and ensure acknowledgments are collected.

• Provide refresher training sessions to explain the updates.

________________________________________

Final Thoughts

In 2025, updating your AML policy is about proactivity, risk management, and regulatory readiness. Businesses that align their frameworks with the latest UAE laws, FATF expectations, and industry-specific risks will not only stay compliant but also gain competitive trust in the market.

________________________________________

📌 About Us

Sheikh Anwar Accounting and Auditing LLC – Registered Auditor (Ministry of Economy Entry No. 5817, Company Entry LC4695-01)

📍 Dubai Creek Tower, M 35, Dubai, UAE

🌐 Website: www.sa-auditors.com

📧 Email: info@sa-auditors.com

📞 Phone: +971-585621786