We register you on goAML, write your AML policy, build your KYC and due-diligence process and train your team, so a supervisor's visit is routine rather than a risk.
The UAE's AML/CFT framework, Federal Decree-Law No. 20 of 2018 and its implementing regulations, places obligations on designated non-financial businesses and professions (DNFBPs) as well as financial institutions.
Real estate
Brokers and agents involved in buying or selling property for clients.
Precious metals & stones
Dealers in gold, diamonds, jewellery and precious stones.
Accountants & auditors
Firms carrying out specified financial activities for clients.
Lawyers, notaries & legal consultants
When preparing or carrying out specified transactions on behalf of clients.
Corporate service providers
Firms forming companies, acting as nominees or providing registered addresses.
Compliance check
Is your business in scope?
Choose your sector for a quick indication. It's guidance, not legal advice, and we'll confirm it against your licensed activities.
Registration on the goAML portal
An appointed compliance officer
A documented, risk-based AML programme
Records kept for at least five years
Select your sector
We'll show what the UAE AML framework generally expects from businesses like yours.
Onboarding that identifies who you're dealing with, including the real beneficial owner behind a company.
KYC forms for individuals & entities
Customer risk-rating methodology
Beneficial-ownership verification
Record-keeping structure
Step 04
Enhanced Diligence
Deeper checks for higher-risk customers, transactions and jurisdictions, before you take on the risk.
Politically exposed person (PEP) checks
Source of funds & source of wealth review
High-risk jurisdiction assessments
Ongoing monitoring & periodic reviews
Step 05
AML Training
Practical, sector-specific training so your people recognise red flags and know what to do next.
Front-line staff awareness sessions
Compliance-officer deep dives
Sector-specific red-flag case studies
Attendance records for inspection
Retainer
Ongoing Compliance
Your programme kept current as regulations, your client base and your risks change.
Periodic policy & risk reviews
Screening & reporting support
Inspection preparation
Refresher training
Inspection readyAll controls evidenced
AML Compliance StatusActive
Compliance file
goAML registrationRegistered
Compliance officerAppointed
Risk assessmentDocumented
AML/CFT policyApproved
Staff trainingCompleted
KYC on fileEvery active client
Inspection readiness
What supervisors look for.
Supervisory authorities can inspect regulated businesses at any time. Gaps can lead to administrative penalties, licence action and reputational damage. Being prepared costs far less.
Evidence of goAML registration and an appointed compliance officer
A current risk assessment and approved AML/CFT policy
Complete KYC files with risk ratings for every client
goAML is the reporting platform used by the UAE Financial Intelligence Unit. Regulated businesses register on it and use it to file suspicious transaction reports and other required reports.
Do I need a dedicated compliance officer?
Regulated entities are expected to appoint a compliance officer who is responsible for the AML programme and reporting. We help you define the role, register the officer on goAML and train them.
We're a small firm. Do the rules still apply?
Yes. Obligations depend on your activity, not your size. The programme should be proportionate to your risk, though, so a small brokerage doesn't need the same framework as a bank. We scale the documentation to fit.
How long do we need to keep KYC records?
UAE rules generally require customer and transaction records to be kept for at least five years, available to the authorities on request. We set up a structure that makes retrieval straightforward.
Can you review an AML programme we already have?
Yes. Our AML health check reviews your existing registration, policies, KYC files and training records, identifies the gaps and fixes them, ideally before a supervisor finds them.
Compliance handled. Brand built.
Tell us what the business needs cleared.
We'll bring the requirement list to the first meeting: the authorities involved, the documents needed and a clear timeline.