AML / Anti-Money Laundering Services in Dubai, UAE
Stay compliant with UAE AML law. Helen & Sons handles DNFBP classification, goAML registration, risk assessments, MLRO support and staff training so your business is never caught off guard by an inspection.
Free AML Compliance Consultation
Talk to a UAE AML compliance expert — no obligations.
AML compliance in the UAE requires Designated Non-Financial Businesses and Professions (DNFBPs) real estate agents, precious metals dealers, auditors, corporate service providers, and specified legal professionals to register on the goAML portal, appoint a Compliance Officer, and maintain risk assessments, customer due diligence, and 5-year records. Non-compliance carries fines from AED 10,000 up to AED 10,000,000. Helen & Sons manages the full AML compliance lifecycle for UAE businesses.
What Is AML Compliance in the UAE?
Anti-Money Laundering (AML) compliance is the set of legal obligations that prevent businesses from being used, knowingly or not, to launder criminal proceeds or finance terrorism. In the UAE, this is governed by Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism (as amended, including by Federal Decree-Law No. 7 of 2024), implemented through Cabinet Decision No. 10 of 2019 and its executive regulations.
- The law doesn't only apply to banks. It extends to a specific category of businesses called Designated Non-Financial Businesses and Professions (DNFBPs) companies whose day-to-day work makes them a realistic channel for moving illicit money, even if that was never the owner's intention.
- If your business falls into a DNFBP category, AML compliance isn't optional, and it applies whether you're a mainland company or licensed in a free zone.
Who Needs AML / DNFBP Registration in the UAE?
You're classified as a DNFBP and therefore required to register for AML compliance — if your business falls into one of these categories:
- Real estate agents and brokers involved in buying, selling, or leasing property on behalf of clients
- Dealers in precious metals and stones including jewellers and gold/diamond traders, particularly for cash transactions above the regulatory threshold
- Auditors and accountants independent professionals and firms providing accounting, auditing, tax, or insolvency services
- Corporate service providers company formation agents, registered agents, and firms providing company secretary, director, or nominee shareholder services
- Lawyers and notaries when involved in specified transactions such as buying/selling real estate, managing client funds, or company formation
Are free zone companies exempt from AML compliance in the UAE?
No. AML obligations apply regardless of whether a business is licensed on the mainland or in a free zone. If your activity falls into a DNFBP category, free zone status does not exempt you from registration, reporting, or penalties.
Key AML Obligations for UAE Businesses
Once your business is classified as a DNFBP, several ongoing obligations apply not just a one-time registration:
- Customer Due Diligence (CDD) - verifying the identity of clients and, where relevant, the ultimate beneficial owner behind a transaction
- Enhanced Due Diligence (EDD) - additional scrutiny for higher-risk clients, such as politically exposed persons (PEPs) or clients from high-risk jurisdictions
- Suspicious Transaction Reporting (STR) - filing a report via the goAML portal whenever a transaction appears linked to money laundering or terrorism financing, regardless of the amount involved
- Record retention - keeping customer due diligence documents and transaction records for a minimum of 5 years
- Internal AML policies and procedures - a written compliance programme tailored to your business's actual risk exposure
- Enterprise-wide risk assessment (EWRA) - a documented assessment identifying how your specific business could be exploited for money laundering
- Staff training - ensuring employees who handle client relationships or transactions understand red flags and reporting duties
- Appointing a Compliance Officer (MLRO) - a designated, sufficiently senior individual responsible for AML oversight and STR filing, free from pressure or override by other management
goAML Registration - Documents Required
To register your business on the UAE's goAML platform (run by the Financial Intelligence Unit), you'll typically need:
- Valid trade licence copy
- Authorisation letter naming your compliance representative
- Compliance Officer (MLRO) details and supporting credentials
- Company contact information and registered address
- Proof of business activity confirming DNFBP classification
Exact document requirements can vary slightly depending on your supervisory authority (Ministry of Economy for most DNFBPs, or the relevant free zone regulator for some categories), and we confirm your specific list before submission. If your trade licence, Memorandum of Association, or authorisation letters need updating before you can register, our PRO services in Dubai team can get those documents in order first.
goAML Registration Process - Step by Step
Confirm your DNFBP classificationWe assess your business activity against the regulatory categories to confirm registration is required.
Complete the pre-registration applicationSubmitted through the goAML portal with your business and compliance officer details.
Temporary registration and FIU verificationThe Financial Intelligence Unit typically verifies applications within 2–5 working days.
Generate your Secret Key and set up two-factor authenticationRequired for secure, ongoing portal access.
Final entity registration and regulatory approvalOnce approved, your business is registered to file Suspicious Transaction Reports as required.
After registration, compliance is ongoing, not a one-time task. Our team supports the full cycle: risk assessments, policy documentation, training, and periodic reviews, so your AML programme stays audit-ready rather than becoming a box you ticked once and forgot about.
This runs alongside our VAT and tax compliance support, so your regulatory obligations are handled by one coordinated team rather than several disconnected providers.
AML Penalties for Non-Compliance in the UAE
| Violation | Penalty |
|---|---|
| General AML compliance failures (no MLRO, no risk assessment, no policies) | AED 10,000 – AED 10,000,000 |
| Tipping off a client about an STR filing | Imprisonment of 6+ months, plus AED 100,000 – AED 500,000 |
| Senior management facilitating or concealing a violation | Up to AED 10,000,000, plus imprisonment |
| Terrorism financing offences | Up to life imprisonment |
Beyond the direct fine, non-compliance also risks licence suspension, mandatory business closure, and reputational damage that can be harder to recover from than the penalty itself particularly for real estate brokerages and corporate service providers whose entire business rests on regulatory trust.
This work often runs alongside our accounting & bookkeeping services, since clean financial records are the foundation most AML due diligence checks are built on.
AML Compliance for Free Zone Companies
Does my free zone licence cover AML compliance automatically?
No. A free zone trade licence authorises your business activity, but AML registration and compliance are separate legal obligations under federal law. If your free zone company's activity falls into a DNFBP category a common situation for corporate service providers, real estate consultants, and accounting firms operating from zones like IFZA, Meydan, or DMCC you must still register on goAML and meet the same obligations as a mainland company.
If you're setting up a new company and want to understand which structure and jurisdiction fits your business including how compliance obligations differ see our guide on mainland vs free zone vs offshore in the UAE.
How Helen & Sons Helps with AML Compliance
- DNFBP classification review - we assess whether your business activity actually requires AML registration, rather than assuming either way
- goAML registration - full handling of your application, documentation, and FIU verification process
- Enterprise-wide risk assessment - a documented risk assessment matched to your actual client base and transaction types, not a generic template
- AML policy and procedure manuals - written compliance documentation that would hold up under a Ministry of Economy inspection
- MLRO support - guidance on appointing a qualified Compliance Officer, including outsourced MLRO support where appropriate
- Staff training workshops - practical training so your team recognises red flags rather than learning them during an audit
- Ongoing compliance returns and audit support - annual AML returns, plus preparation if your business is selected for a regulatory inspection
If your business is itself a corporate service provider one of the DNFBP categories most exposed to AML scrutiny this typically overlaps with our corporate PRO services in Dubai, since the same government-facing documentation discipline applies to both.
Why Choose Helen & Sons for AML Compliance
- We tell you clearly whether you actually need AML registration before we recommend any service not every business does, and we won't sell you a compliance programme you don't need
- Documentation built to withstand inspection, not just to exist on file
- A single point of contact who tracks your registration status, renewal dates, and any open regulatory correspondence
- Coordinated with your wider business setup and compliance needs in Dubai, so AML doesn't become a separate, disconnected relationship
Frequently Asked Questions
What is a DNFBP in the UAE?
A DNFBP (Designated Non-Financial Business or Profession) is a business category the UAE identifies as higher-risk for money laundering, including real estate agents, precious metals and stones dealers, auditors and accountants, corporate service providers, and specified legal professionals. DNFBPs must register for AML compliance regardless of company size or free zone status.
What is goAML and who needs to register?
goAML is the UAE Financial Intelligence Unit's platform for filing Suspicious Transaction Reports and managing AML compliance obligations. Any business classified as a DNFBP, along with financial institutions, must register on goAML and maintain ongoing compliance through the platform.
What are the penalties for AML non-compliance in the UAE?
General violations carry fines from AED 10,000 up to AED 10,000,000, with tipping-off offences carrying imprisonment plus fines between AED 100,000 and AED 500,000. Aggravated breaches involving senior management can reach the maximum penalty alongside imprisonment.
Do I need a Compliance Officer (MLRO) for my business?
Yes, if your business is classified as a DNFBP. The Money Laundering Reporting Officer must be a sufficiently senior individual with the authority and independence to file Suspicious Transaction Reports without interference from other management.
How long do I need to keep AML records in the UAE?
A minimum of 5 years, covering customer due diligence documentation, transaction records, and any Suspicious Transaction Reports filed.
Is AML compliance required for free zone companies?
Yes. AML obligations are set by federal law and apply regardless of whether your trade licence is issued by a mainland authority or a free zone, provided your business activity falls into a DNFBP category.
How long does goAML registration take?
Initial FIU verification typically takes 2–5 working days after a complete pre-registration application, though full registration and approval timelines can vary depending on your supervisory authority and the completeness of your documentation.
Can Helen & Sons handle my entire AML compliance process?
Yes. We handle DNFBP classification review, goAML registration, risk assessments, policy documentation, MLRO support, staff training, and ongoing compliance returns, so this doesn't sit as an unmanaged obligation on your business.