Ongoing monitoring means that a DNFBP does not treat due diligence as a one-off task at onboarding but keeps the business relationship under continuous review. The entity must scrutinise transactions carried out during the relationship to ensure they are consistent with what it knows about the customer, the customer’s business and risk profile, and, where relevant, the source of funds.
DNFBPs must also keep customer due diligence information current, reviewing and updating records rather than relying on data gathered years earlier, with particular emphasis on higher-risk customers. Monitoring should detect unusual patterns such as sudden changes in transaction size or frequency, dealings that do not fit the customer’s stated activity, or repeated transactions just below reporting thresholds. Where monitoring surfaces genuine suspicion, the DNFBP must file a suspicious transaction report on goAML. Effective monitoring is what turns a static file into a living control and is a core expectation in supervisory inspections.
Legal Reference (UAE):
- Cabinet Resolution No. 134 of 2025 (Executive Regulations), Article 8 — requires CDD measures and ongoing monitoring of the business relationship.
- Federal Decree-Law No. 10 of 2025, Article 19 — requires continuous monitoring and updating of customer information.
For more details, consult the full text of Cabinet Resolution 134 of 2025 or seek guidance from your AML compliance officer.