What are the core AML obligations of regulated entities in the UAE?
Financial institutions, DNFBPs and virtual asset service providers share a common set of core obligations under Federal Decree-Law No. 10 of 2025. They must identify, assess, document and continuously update their money laundering and terrorist financing risks using a risk-based approach, and retain the risk assessment for supervisors on request.
They must apply customer due diligence and ongoing monitoring, refuse anonymous or fictitious accounts, and maintain internal policies and controls approved by senior management that extend to branches and majority-owned subsidiaries. They must implement targeted financial sanctions instructions without delay, retain all transaction records for immediate availability to authorities, and report suspicious transactions to the Financial Intelligence Unit. These duties form the backbone of any UAE AML/CFT programme and are enforced by the relevant supervisory authority through inspection and penalties.
Legal Reference (UAE):
· Federal Decree-Law No. 10 of 2025, Article 19(1) — lists the preventive obligations of regulated entities
For more details, consult the full text of Federal Decree-Law No. 10 of 2025 or seek guidance from your AML compliance officer.