Money Laundering Laws in UAE — AML Compliance Guide (2026)

The UAE exited the FATF grey list in 2024. That achievement required a complete overhaul of the country's anti-money laundering framework — new legislation, aggressive enforcement, and billions in fines. For businesses and individuals operating in the Emirates, the compliance bar is now higher than ever. Ignorance of AML obligations can result in imprisonment up to 10 years and fines exceeding AED 50 million.

This guide explains who is covered, what the obligations are, how enforcement works, and what to do if you are under investigation. For urgent matters, consult a criminal lawyer.

What Is Money Laundering Under UAE Law?

Under Federal Decree-Law No. 20 of 2018 (as amended), money laundering is the act of transferring, converting, depositing, or managing proceeds derived from a felony or misdemeanour with the intent to conceal or disguise the illicit origin of those funds. The law covers funds derived from crimes committed inside or outside the UAE. Predicate offences include fraud, tax evasion, bribery, drug trafficking, embezzlement, and any other crime generating financial proceeds.

The definition is deliberately broad. You do not need to be the person who committed the underlying crime. Handling proceeds while knowing — or having reason to know — their illicit origin is sufficient.

Elements of the Offence

What Counts as "Proceeds"

The law uses the broadest possible definition of proceeds:

• Cash (any currency).
• Bank deposits and transfers.
• Real estate.
• Vehicles, boats, aircraft.
• Precious metals and stones.
• Securities and financial instruments.
• Cryptocurrency and digital assets (added by 2022 amendments).
• Any other property or economic advantage.

What Are the Penalties for Money Laundering in UAE?

Imprisonment ranges from 1 to 10 years. Fines range from AED 100,000 to AED 5,000,000 for individuals. Corporate entities face fines from AED 500,000 to AED 50,000,000. Courts must order confiscation of all laundered proceeds and instrumentalities. Aggravating factors — use of a financial institution, organised crime involvement, exploitation of a public position, or commission through a non-profit — increase sentences. Repeat offenders face doubled penalties.

Sentencing depends on the severity of the underlying crime, the amounts involved, and the offender's role.

Penalty Structure

Aggravating Factors

• Using or involving a licensed financial institution.
• Committing the offence as part of an organised criminal group.
• Exploiting a position of authority or public office.
• Using a non-profit organisation or charity.
• Involving minors.
• Committing the offence across multiple jurisdictions.

Who Must Comply With UAE AML Regulations?

AML obligations apply to "financial institutions" and "designated non-financial businesses and professions" (DNFBPs). Financial institutions include banks, insurance companies, exchange houses, finance companies, and any entity licensed by the Central Bank, SCA, or VARA. DNFBPs include real estate agents, precious metal dealers, auditors, lawyers, notaries, company service providers, and virtual asset service providers. Since 2023, free zone entities face the same obligations as mainland businesses.

The scope is far wider than most people expect. If you are a real estate broker, a jeweller, an accountant, or a lawyer, you have AML compliance obligations.

Covered Entities

What Are the Core AML Compliance Obligations?

Every covered entity must implement five pillars: (1) customer due diligence (CDD) including enhanced due diligence for high-risk clients, (2) transaction monitoring and suspicious activity detection, (3) record-keeping for at least five years, (4) filing Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs) with the UAE Financial Intelligence Unit (FIU), and (5) appointing a compliance officer and conducting regular staff training. Failure to implement any pillar — even without actual money laundering — triggers administrative penalties.

Compliance is not optional, and the penalties for non-compliance are separate from the criminal penalties for money laundering itself.

The Five Compliance Pillars

Customer Due Diligence Tiers

Politically Exposed Persons (PEPs) — both foreign and domestic — automatically trigger Enhanced Due Diligence. The UAE expanded the PEP definition in 2022 to include domestic PEPs and their close associates.

How Does Suspicious Transaction Reporting Work?

When a covered entity identifies a transaction or activity that raises suspicion of money laundering or terrorist financing, it must file a Suspicious Transaction Report (STR) or Suspicious Activity Report (SAR) with the UAE Financial Intelligence Unit through the goAML platform within 24 hours. The entity must not inform the client that a report has been filed (tipping-off is a criminal offence). The FIU analyses the report and may disseminate it to law enforcement. In 2024, the UAE FIU received over 30,000 STRs — a tenfold increase from 2019.

The filing obligation is triggered by suspicion, not certainty. You do not need to prove money laundering before filing.

goAML Filing Process

1. Register on the goAML platform (mandatory for all covered entities since 2021).
2. Designate a compliance officer as the primary goAML user.
3. When suspicion arises, complete the STR form with all available information.
4. Submit within 24 hours of the suspicion crystallising.
5. Preserve all related records — do not alter or destroy them.
6. Continue the business relationship normally unless instructed otherwise by the FIU.
7. Do not disclose to the client that a report has been filed.

Indicators of Suspicious Activity

Tipping-Off

Informing a client that an STR has been filed is a criminal offence. Penalties: imprisonment up to 1 year and/or a fine of AED 100,000. This prohibition applies to all employees, not just the compliance officer.

How Does AML Apply to Real Estate Transactions?

Real estate has been a primary focus of UAE AML enforcement since the FATF evaluation. All real estate agents, brokers, developers, and conveyancers must conduct CDD on buyers and sellers, verify source of funds for cash transactions, report suspicious activities, and maintain transaction records for five years. Since 2023, the Dubai Land Department requires beneficial ownership disclosure for all property transactions involving legal entities. Cash transactions above AED 55,000 in any sector trigger enhanced reporting requirements.

The real estate sector was identified as a significant money laundering vulnerability in the UAE's National Risk Assessment.

Real Estate AML Requirements

What Enforcement Actions Has the UAE Taken?

Between 2020 and 2025, the UAE imposed over AED 6 billion in AML-related fines, prosecuted hundreds of individuals, and froze assets exceeding AED 3 billion. Major enforcement actions include the AED 1.1 billion fine against a major exchange house in 2023, criminal prosecutions of hawala operators, real estate seizures linked to transnational organised crime, and administrative penalties against banks for CDD failures. The Executive Office for Control and Non-Proliferation coordinates enforcement across all regulators.

The enforcement trend is clear: penalties are escalating and the net is widening.

Notable Enforcement Actions (2020-2025)

Regulatory Penalties (Administrative — Without Criminal Prosecution)

What Should You Do If You Are Under AML Investigation?

If you receive notice of an AML investigation — whether from the FIU, police, public prosecution, or a regulatory authority — exercise your right to legal counsel immediately. Do not volunteer statements without a lawyer present. Do not destroy, alter, or move any documents or assets (this constitutes obstruction and is a separate offence). Cooperate with lawful requests but insist on proper procedure. Engage a criminal lawyer experienced in financial crime — the investigation may be civil (regulatory) or criminal, and the strategy differs significantly.

AML investigations in the UAE can originate from multiple sources: an STR filed by your bank, a referral from a foreign FIU, a regulatory audit, or a criminal complaint.

Investigation Process

1. Detection — STR filed, regulatory audit finding, foreign intelligence, or criminal complaint.
2. FIU Analysis — The FIU assesses the information and may request additional data from reporting entities.
3. Referral — FIU refers to Public Prosecution if criminal prosecution is warranted, or to the relevant regulator for administrative action.
4. Investigation — Police (often the Anti-Money Laundering Department) investigate. Assets may be frozen.
5. Prosecution — Public Prosecution files charges. Trial in Criminal Court.
6. Sentencing — If convicted: imprisonment, fines, confiscation, deportation (for expats).

Your Rights During Investigation

Find a Criminal Lawyer in Dubai →

Frequently Asked Questions

Can I be charged with money laundering if I did not know the funds were illicit? The law includes a "should have known" standard (constructive knowledge). If a reasonable person in your position would have suspected the funds were illicit — based on the circumstances, the source, the transaction patterns, or red flags you ignored — you can be charged. Wilful blindness is not a defence.

Do freelancers and small businesses need AML compliance programmes? If your business falls within the DNFBP categories (real estate, precious metals, legal services, accounting, company formation), then yes — regardless of size. A sole-practitioner lawyer has the same STR filing obligations as a large firm. The scope of the compliance programme can be proportionate to the business's size and risk profile, but the core obligations are non-negotiable.

What is the difference between money laundering and terrorist financing under UAE law? Both are covered by Federal Decree-Law No. 20 of 2018 and share similar compliance frameworks. The key difference: money laundering involves proceeds from crime (dirty money made to look clean), while terrorist financing involves funds — which may be legitimate — directed toward terrorist activities. Terrorist financing penalties are generally more severe, with imprisonment up to life.

Are cryptocurrency transactions covered by UAE AML laws? Yes. The 2022 amendments explicitly brought virtual assets and virtual asset service providers (VASPs) within the AML framework. VASPs must register with the relevant authority (VARA in Dubai, FSRA in ADGM, SCA federally), implement full CDD, file STRs, and apply the travel rule for transfers above AED 3,500. Operating as an unlicensed VASP is a criminal offence.

Keep Reading

• Financial Fraud Reporting in UAE
• Forgery and Document Fraud in UAE
• Cybercrime Laws in UAE
• Criminal Lawyer Guide