Yes. UAE law gives clear legal protection to those who report suspicious transactions in good faith, so that fear of liability does not deter reporting. This safe harbour is a cornerstone of an effective reporting regime and applies broadly across the institutions and people involved.
Under Federal Decree-Law No. 10 of 2025, no criminal, civil or administrative liability attaches to supervisory authorities, the Financial Intelligence Unit, law enforcement authorities, financial institutions, DNFBPs, virtual asset service providers, or the members of their boards, their employees and authorised representatives, for furnishing required information or for breaching any statutory, contractual or administrative confidentiality restriction, even where they were not fully aware of the nature or actual occurrence of the crime. The protection is lost only where it is proven that the report was made in bad faith with intent to harm others. Staff should still report through the proper internal channel to the compliance officer, who decides whether to notify the Unit, and must keep the matter confidential to avoid tipping off.
Yes, and the protection is drafted broadly. No criminal, civil or administrative liability is incurred by supervisory authorities, the Financial Intelligence Unit, law enforcement authorities, financial institutions, designated non-financial businesses and professions, virtual asset service providers, or by their board members, employees and legally authorised representatives, as a result of furnishing required information or breaching a statutory, contractual or administrative confidentiality restriction.
Two features matter in practice. The protection applies even where the person was not fully aware of the nature or actual occurrence of the crime, so a report that turns out to be unfounded does not expose the reporter. The single exception is where it is proven that the reporting was made in bad faith with the intent to harm others. This is what allows a staff member to escalate an honest concern without weighing personal risk, and it is worth stating plainly in internal AML training and in the whistleblowing policy.
Legal Reference (UAE):
· Federal Decree-Law No. 10 of 2025, Article 37(1), which removes criminal, civil and administrative liability for furnishing required information or breaching confidentiality restrictions, unless the reporting was made in bad faith with intent to harm others.