Get audit-ready for UAE AML
UAE Anti-Money Laundering and Counter-Terrorist Financing Obligations · Federal Decree by Law 10 of 2025 and its Executive Regulations
Obligations the UAE's 2025 anti-money laundering, counter-terrorist financing and counter-proliferation financing law places on financial institutions, designated non-financial businesses and professions, virtual asset service providers, companies and non-profit organisations: risk assessment, a compliance officer, customer due diligence and beneficial ownership, suspicious transaction reports, targeted financial sanctions, record keeping, wire transfers and virtual asset transfers. Items are set aside by the entity's sector.
UAE AMLWhat is UAE AML?
Obligations the UAE's 2025 anti-money laundering, counter-terrorist financing and counter-proliferation financing law places on financial institutions, designated non-financial businesses and professions, virtual asset service providers, companies and non-profit organisations: risk assessment, a compliance officer, customer due diligence and beneficial ownership, suspicious transaction reports, targeted financial sanctions, record keeping, wire transfers and virtual asset transfers. Items are set aside by the entity's sector.
Who it applies to
Financial institutions and the other regulated businesses and professions the law places duties on in the UAE: risk assessment, a compliance function, customer due diligence, politically exposed persons, record keeping and reporting suspicious activity.
How the standard is organised
The decree-law and its executive regulations, summarised as 71 obligation topics, each tied to its article: scope and licensing, risk assessment and mitigation, governance and the compliance function, customer due diligence, politically exposed persons, and reporting.
Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.
UAE AML on the Bitkosh platform
The 71 UAE AML controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.
How the platform worksSample controls
Six controls from the platform's control library, chosen because they are the most specific to this framework.
- ER 2Decide which regulated category applies
Work out whether the business carries on a financial activity, a designated non-financial business or profession (with its value thresholds) or a virtual asset activity, and record the conclusion and…
Scope and licensing - ER 16(2)Politically exposed persons in insurance payouts
Before life insurance proceeds are paid, the beneficiary and beneficial owner are checked for political exposure, with senior management informed and the whole relationship scrutinised where risk is…
Politically exposed persons and high-risk countries - FDL 10Cross-border cash and valuables disclosure
People entering or leaving the State with currency, bearer negotiable instruments, precious metals or valuable stones make the declaration the customs disclosure system requires.
Scope and licensing - ER 14Stop when due diligence cannot be completed
No relationship is opened or continued and no transaction done where due diligence cannot be applied; a suspicious transaction report is considered, and filed if tipping off is a risk.
Customer due diligence - ER 15No shell banks or anonymous accounts
The business does not deal with shell banks and does not open or keep anonymous, fictitious, alias or numbered accounts.
Customer due diligence - ER 33Foreign branches and subsidiaries
Majority-owned foreign branches and subsidiaries apply measures at least as strict as the State's; where the host country does not allow it, extra measures are taken and the supervisor is told.
Financial institution obligations
More financial & operational resilience frameworks
Frequently Asked Questions
Who publishes UAE AML, and who does it apply to?
How is UAE AML conformance demonstrated?
How is UAE AML structured?
Ready to get audit-ready for UAE AML?
See how the Bitkosh Readiness Platform gets you audit-ready for UAE AML — and the other 47 ready frameworks — from a single control library.