AML Registration in Dubai: A Practical Guide to goAML and DNFBP Compliance

Dubai’s position as a trading, logistics, and financial centre has led to increased focus by regulators on the movement of funds through its companies. AML Dubai regulations have become more demanding, with more and more non-financial companies having direct legal responsibilities; here’s what you need to know.

What Is AML Registration in Dubai?

AML registration in Dubai is the formal registration of a regulated business with the relevant UAE regulator and, in some cases, on the goAML reporting platform to show that it has the necessary controls to identify and file reports of suspicious activity in terms of money laundering.

It’s not a one-off administrative step; registration is a declaration that your business is committed to its requirements under the UAE AML/CFT regime. For most firms, it’s the beginning of an ongoing compliance journey with the regulator.

In general, registration is about sharing the fact you fall within a certain ‘category’ of risk, providing details about the company and shareholders, registering the compliance officer, and making the pledge to submit to a reporting obligation. ‘Registration’ can be achieved in a matter of minutes, but the hard work is in establishing your AML programme behind it.

What are the AML regulations in the UAE?

The UAE’s AML system rests on federal legislation, regulations, and guidance. Certain sectors like financial institutions have specific AML/countering the financing of terrorism (CFT) guidance, issued by the Executive Office for Control and Non-Rapid growth (EO) or the UAE’s Financial Intelligence Unit.

Companies are expected to identify the customer; undertake risk-based transactional due diligence; make and retain records and file suspicious activity reports electronically. As a rule of thumb, higher-risk transactions come under more stringent obligations than lower-risk transactions — a multi-million dirham real estate transaction, for example, will draw more attention than a day-to-day retail purchase. Guidance is updated from time to time, so your firm should check the latest deadlines and circulars.

Basically, there is no escaping in reality. AML registration in Dubai is just the tip of the compliance iceberg and that there is a wider, more operational requirement that will govern most aspects of your business, including governance, training, and record-keeping.

What Is goAML Dubai and Who Must Register?

goAML – an electronic system that collects suspicious transaction and activity reports from its registered entities and brings them to the Financial Intelligence Unit (FIU). Access to the system can only be obtained after a business has performed the necessary registration. GoAML is the engine of AML reporting – if you are a regulated business then you won’t be able to submit your AML reports without a goAML account.

To register you’ll need precise details of the entity, nominated contact and confirmation of your regulatory status once registered you’ll be able to submit reports, respond to regulator requests and maintain an auditable trail. The portal needs to be used appropriately; misuse and not reporting will have repercussions so training is vital for users.

Which UAE businesses must register for goAML?

• • Financial institutions and exchange houses – Banks, money changers and payment service providers are here for the long haul and report regularly.
• • DNFBPs – Real estate agents, brokers, and dealers in precious metals and stones; auditors, accountants, and company service providers – need to register if they cross the thresholds. This is how most non-financial businesses find out about their obligations.
• • Corporate service providers, like trust managers – corporate service providers that build in companies for their clients. Their reporting obligation is similar to financial institutions.

That’s why, the Dubai goAML requirement means more than just banking and your safest bet is to double check your category with a compliance professional.

What Is a DNFBP in the UAE?

A DNFBP (Designated Non-Financial Business or Profession) is a business that is not a bank but is potentially vulnerable to money laundering due to the nature of the transactions it involves.

In the UAE, the Ministry of Economy and some free zone authorities regulate specific non-financial professionals as DNFBPs. These include real estate agents and brokers, precious metals and stones dealers, auditors, and accountants, legal, and company service providers, etc.

DNFBP Dubai companies’ duties extend to more than simply the goAML registration. DNFBPs are also expected to have a designated compliance officer, carry out customer checks, archive transactions for the mandated period and file suspicious activity reports. This is designed to plug the loopholes used by criminal syndicates to do high-value or opaque transactions.

DNFBP registration and the Ministry of Economy

The DNFBPs are typically registered with the Ministry of Economy’s registration system and are required to maintain their records. Companies should confirm the latest registration periods and renewal requirements with the Ministry of Economy themselves, as these deadlines have moved around over the past few years.

AML/CFT Compliance Programme Requirements

Registration is not all you need for AML/CFT compliance regimes. DNFBPs (and other firms) need to develop a documented AML/CFT compliance programme that addresses risk assessment and management, internal policies, customer due diligence procedures, record keeping, staff training and independent review.

The appointed money laundering reporting officer should have ownership of escalation procedures and the AML programme should be subject to ongoing review as the firm’s risk profile changes. Leela International can help firms in Dubai develop these programmes in line with the latest UAE guidance.

Penalties for Failing to Register on goAML

Non-registration or non-reporting might cause administrative penalties, regulatory sanctions, licence conditions and, in the most serious of cases, criminal liability for a firm. The financial consequence – penalties are generally set in AED and increase with each subsequent offence – pales compared to the damage done to a company’s reputation with banks and counterparties.

De-risking by financial institutions is a tangible consequence of non-compliance for non-compliant companies. Remediation is often far more costly than early registration and having a robust compliance programme.