How long must AML records be retained in the UAE?
Regulated entities in the UAE must keep AML records for at least five years. Financial institutions, DNFBPs and virtual asset service providers must retain all records, documents and data relating to domestic and international financial and cash transactions for at least five years from the date the transaction is completed or the business relationship ends.
The five-year rule also covers customer due diligence records, ongoing monitoring results, account files, business correspondence, copies of identification documents, suspicious transaction reports and even relevant CCTV footage. Where an inspection, investigation or court judgment is involved, the retention period is counted from the most recent of those events. Records must be organised so that individual transactions can be reconstructed and traced, and made available to the authorities promptly on request.
Legal Reference (UAE):
ยท Cabinet Resolution No. 134 of 2025, Article 25 - sets the minimum five-year retention period and the standard for organising records.
For more details, consult the full text of the Executive Regulations or seek guidance from your AML compliance officer.