The UAE has tightened its anti-money laundering regime in a series of regulatory updates effective through 2025 and into 2026. Companies that fail to act face account freezes, administrative penalties, and restrictions on credit facilities – consequences that can halt operations within days. International businesses operating in mainland UAE, the Dubai International Financial Centre (DIFC), Abu Dhabi Global Market (ADGM), and across all Free Zone Authority jurisdictions are now subject to materially strengthened obligations.
The UAE's updated AML legislation imposes enhanced know-your-customer (KYC) requirements, mandatory beneficial owner registration, and stricter bank account opening procedures for all registered legal entities. Companies must file or update their beneficial ownership declarations with the relevant registrar – the Ministry of Economy, the Department of Economic Development (DED), or the applicable Free Zone Authority – within the prescribed deadlines. Non-compliant entities risk suspension of trade licences and referral to the Financial Intelligence Unit.
This alert outlines which business categories are affected, the threshold criteria that trigger enhanced obligations, and the five immediate steps your company should take now.
What changed and when it takes effect
The UAE authorities have progressively reinforced AML and counter-terrorist financing rules since the country's removal from the Financial Action Task Force (FATF) grey list. The most recent cycle of updates consolidates obligations across four distinct areas.
Beneficial owner registers. All UAE-licensed entities must maintain an up-to-date register of ultimate beneficial owners. The register must identify every natural person who directly or indirectly holds a qualifying ownership interest or exercises effective control. This obligation now extends explicitly to entities registered with Free Zone Authorities that previously operated under lighter-touch regimes.
Enhanced KYC for financial institutions. Banks, exchange houses, and payment service providers face heightened due diligence requirements when opening accounts for corporate clients. The bank account opening process now requires certified beneficial ownership documentation and, in higher-risk cases, source-of-funds declarations. Correspondent banking relationships are subject to additional scrutiny, with institutions required to reassess existing relationships against updated risk matrices.
Real estate and designated non-financial businesses. UAE's AML legislation now brings a broader category of designated non-financial businesses and professions. including real estate brokers. Precious metals dealers. Additionally, corporate service providers. under mandatory AML programme requirements. These businesses must adopt written AML policies, conduct staff training, and appoint a compliance officer.
Effective date and enforcement posture. The consolidated obligations are in force. Regulatory authorities, including the Central Bank of the UAE and the Securities and Commodities Authority, have signalled active enforcement. Inspections and administrative proceedings against non-compliant entities have increased in frequency.
Which companies are affected and threshold criteria
The updated obligations apply broadly, but the intensity of requirements varies by entity type and risk classification. The following categories face the most direct and immediate exposure.
All mainland and Free Zone companies. Every entity holding a UAE trade licence – whether issued by the DED, a Free Zone Authority, or an offshore registrar – must maintain a compliant beneficial ownership register. There is no minimum turnover or headcount threshold for this requirement. A single-member holding company is as subject to this rule as a large trading group.
Entities with credit facilities or active bank relationships. Any company that maintains a credit facility, overdraft line, or multi-currency account with a UAE bank will face re-documentation requests. Banks are conducting systematic reviews of their corporate client portfolios. Accounts whose KYC files do not meet current standards are being flagged for restriction or closure.
Financial institutions and DIFC/ADGM-regulated firms. Firms licensed by the Dubai Financial Services Authority (DFSA) or the Financial Services Regulatory Authority (FSRA) in ADGM are subject to the most detailed requirements. These include transaction monitoring, suspicious activity reporting, and periodic AML programme audits. The DIFC Courts have shown willingness to support regulatory enforcement actions in this space.
Designated non-financial businesses. Real estate developers and brokers handling transactions above prescribed value thresholds must apply customer due diligence at the point of transaction. Precious metals dealers and high-value goods traders face similar obligations. Law firms, accountants, and trust and company service providers acting in formation or management roles are also captured.
To receive an expert assessment of your company's AML exposure in the UAE, contact us at info@ferrazwhitmore.com.
Immediate actions for international companies
The following five steps address the highest-priority compliance gaps for internationally owned businesses operating in the UAE.
1. Audit and update your beneficial ownership register. Confirm that your register correctly identifies every natural person with a qualifying interest. Where ownership passes through intermediate holding structures – including entities in other jurisdictions – trace through to the ultimate individual. Submit any updates to the Ministry of Economy, the DED, or your Free Zone Authority within the applicable window. Outdated filings are a primary trigger for penalty proceedings.
2. Respond promptly to bank KYC requests. If your bank has issued a KYC refresh notice, treat it as time-critical. Delays beyond the bank's stated deadline can result in account restrictions that affect payroll, supplier payments, and credit facility drawdowns. Prepare certified copies of corporate documents, ownership charts, and source-of-funds evidence in advance.
3. Appoint or confirm a compliance officer. Entities in the designated non-financial business category, and all regulated firms, must have a named compliance officer on record. Verify that this appointment is documented and that the individual has received current AML training. Regulators specifically examine whether the compliance function is substantive rather than nominal.
4. Review correspondent banking and cross-border payment arrangements. If your operations involve correspondent banking channels or regular transfers to higher-risk jurisdictions, conduct an internal review of those flows against the updated risk matrices. Document the business rationale for each relationship. Banks may request this documentation before processing future transactions.
5. Align group-wide AML policies with UAE requirements. International groups sometimes apply a single global AML policy without adapting it to local rules. UAE AML legislation has specific requirements for risk assessment methodology, customer due diligence procedures, and record retention periods. A policy drafted to satisfy European or US standards may not satisfy a UAE regulatory inspection. Engage a banking and finance lawyer in the UAE to conduct a gap analysis before the next regulatory review cycle.
Companies with exposure in comparable high-growth markets may also wish to review our parallel alert on AML updates in Singapore, where several overlapping FATF-driven obligations are being enforced on a similar timeline. For businesses raising capital or managing investment vehicles in the UAE, our overview of capital markets regulation in the UAE addresses the intersection of AML obligations with securities and fund registration requirements.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our team combines Portuguese civil law expertise with English common law tradition to deliver cross-border legal solutions in banking, finance, and AML compliance. We advise international companies, financial institutions, and in-house legal teams on KYC programme design, beneficial owner registration, and regulatory responses in the UAE, DIFC, and ADGM. Our attorneys have worked with clients before UAE regulatory authorities and the DIFC Courts on enforcement-related matters. As a law firm with UAE experience operating across 15 practice areas, Ferraz & Whitmore provides the jurisdictional reach that internationally structured businesses require. To discuss your AML compliance position in the UAE, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.