Compliance & Risk Management
UAE regulatory compliance requirements have expanded significantly: corporate tax, e-invoicing, AML/CFT reforms, UBO registration and Economic Substance Regulations. We design and operate compliance frameworks that protect businesses from regulatory, reputational and operational risk.
Services
Anti-Money Laundering and Counter Financing of Terrorism programme design for UAE Designated Non-Financial Businesses and Professions (DNFBPs): including real estate agents, lawyers, accountants, dealers in precious metals and consultants required to comply under Cabinet Decision No. 10 of 2019.
AML/CFT policies, customer due diligence (CDD/EDD) procedures, transaction monitoring frameworks, suspicious transaction reporting (STR) protocols and goAML registration and reporting support.
Business-wide and customer-level money laundering and terrorism financing risk assessments: identifying high-risk clients, products, jurisdictions and delivery channels with documented mitigating controls.
Ultimate Beneficial Owner (UBO) identification, documentation and MoE register filing, mandatory for all UAE mainland and free zone companies. Ongoing UBO maintenance and annual confirmation.
ESR applicability assessment for businesses with income from relevant activities: notification filing, substance analysis, annual ESR report submission and remediation advisory where substance gaps are identified.
Risk register development, risk appetite framework, risk heat maps, key risk indicator (KRI) design and quarterly board-level risk reporting, tailored to your business size and governance maturity.
AML Compliance
The UAE has undergone significant AML regulatory reform following FATF mutual evaluation. The country exited the FATF grey list in 2024, a result of intensified enforcement action across all sectors. UAE businesses in scope for AML regulations face real enforcement risk if compliance frameworks are not in place.
Who is in scope? DNFBPs, Designated Non-Financial Businesses and Professions, under UAE Federal Decree-Law No. 20 of 2018 include real estate agents and brokers; dealers in precious metals, stones and jewellery; auditors and accountants; corporate service providers; lawyers and legal professionals; and trust and company service providers. Financial institutions are regulated separately by the CBUAE.
Non-compliance with AML requirements can result in administrative sanctions of AED 50,000 to AED 5,000,000 per violation, licence suspension and criminal prosecution in serious cases.
UAE DNFBPs and financial institutions must register on the goAML platform (administered by the Financial Intelligence Unit, UAE) and file Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs) where triggered. GULF CONSULT assists businesses with goAML registration, STR/SAR preparation and submission.
UAE businesses must screen customers and transactions against the UAE Local Terrorist Designation list and UN consolidated sanctions list. GULF CONSULT assists in implementing automated TFS screening tools integrated with your onboarding and transaction monitoring processes.
UAE AML regulations require businesses to provide regular, documented AML training to all relevant employees. GULF CONSULT delivers annual AML training programmes: covering obligations, red flags, STR procedures and sanctions screening, with attendance records and test results for regulatory evidence files.
FAQs
AML, UBO and ESR obligations explained
If your business falls within the DNFBP categories under UAE Federal Decree-Law No. 20 of 2018 (real estate, precious metals and stones, auditors, accountants, legal professionals, corporate service providers), you are legally required to have an AML/CFT compliance programme. This must include a documented risk assessment; AML/CFT policies and procedures; customer due diligence (CDD) processes; goAML registration and STR filing capability; and regular staff training. The UAE Ministry of Economy, UAE Central Bank and other supervisory bodies have been conducting AML compliance inspections with increasing frequency. GULF CONSULT assesses your current compliance state and builds or remediates your AML programme.
Under UAE Cabinet Decision No. 58 of 2020, all UAE onshore and free zone companies are required to maintain a register of Ultimate Beneficial Owners (UBOs): individuals who directly or indirectly own 25% or more of the company, or who otherwise exercise significant control. The UBO register must be filed with the relevant authority (MoE for mainland, free zone authority for free zones) and updated within 15 working days of any change. Penalties for non-compliance include fines from AED 10,000 to AED 100,000 per violation. GULF CONSULT conducts UBO analysis, prepares the register and manages ongoing maintenance.
UAE Economic Substance Regulations (ESR), introduced under Cabinet Decision No. 57 of 2020, require UAE businesses with income from relevant activities to demonstrate adequate economic substance in the UAE. Relevant activities include banking; insurance; investment fund management; lease-finance; headquarters; shipping; holding companies; intellectual property; and distribution and service centres. If your business has income from any of these activities, you must file an ESR Notification and, where applicable, an Annual ESR Report: demonstrating adequate employees, premises, management and control, and core income-generating activities in the UAE. Non-compliance results in penalties of AED 50,000 for first-year failure to meet substance and AED 400,000 for subsequent years.
UAE supervisory bodies are inspecting DNFBPs with increasing frequency. We assess your current state and remediate the gaps.
Work that usually sits alongside this one for UAE businesses.