The Central Bank of UAE has taken strict action against financial irregularities by financial institutions.
A money exchange house operating in the UAE has been fined for failing to strictly adhere to anti-money laundering and anti-terrorist financing regulations. A fine of 5.2 million dirhams was imposed.
The financial penalty was imposed in accordance with the relevant provisions of Federal Decree-Law No. (20) of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism and Financing of Illegal Organisations, as applied under the CBUAE's regulatory authority.
An investigation by the Central Bank of UAE found that the money exchange house did not follow due diligence policies and procedures.
Law No. (14) of 2018 relating to the organization of the activities and activities of the Central Bank and Financial Institutions.
The CBUAE, through its supervisory and regulatory mandate, works to ensure that all exchange houses and their owners and employees comply with UAE laws, regulations, and standards.
What Is the CBUAE and What Are Its AML Supervisory Powers?
The Central Bank of the UAE (CBUAE) is the primary regulatory authority responsible for supervising banks, exchange houses, insurance companies, and other financial institutions operating in the UAE. Under Federal Decree-Law No. 14 of 2018 concerning the Central Bank and Organisation of Financial Institutions and Activities, the CBUAE has broad supervisory and enforcement powers — including the authority to investigate compliance failures and impose financial penalties on institutions that breach UAE regulations.
In the context of anti-money laundering and counter-financing of terrorism, the CBUAE enforces compliance with Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism and Financing of Illegal Organisations, along with Cabinet Decision No. 10 of 2019 on its implementing regulations. These laws set out the obligations of financial institutions — including banks, exchange houses, and money service businesses to implement robust AML/CFT controls, conduct customer due diligence, monitor transactions, and report suspicious activity to the UAE Financial Intelligence Unit (FIU).
Key AML Obligations for UAE Financial Institutions
All financial institutions operating in the UAE — including banks, exchange houses, money service businesses, insurance companies, and securities firms must comply with a comprehensive set of AML/CFT obligations under UAE law. The key requirements include:
Customer Due Diligence (CDD)
Financial institutions must verify the identity of every customer before establishing a business relationship or conducting transactions above specified thresholds. This includes collecting and verifying identity documents, understanding the nature and purpose of the customer relationship, and assessing the customer's risk level based on factors such as their nationality, business activities, and transaction patterns.
Enhanced Due Diligence (EDD)
For high-risk customers — including Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, and customers involved in high-risk business activities financial institutions must apply enhanced due diligence measures. This includes gathering additional information about the source of funds and wealth, conducting more frequent transaction monitoring, and obtaining senior management approval before establishing or continuing the relationship.
Ongoing Transaction Monitoring
Financial institutions must continuously monitor customer transactions to identify unusual patterns or activities that may indicate money laundering or terrorist financing. This includes setting transaction monitoring thresholds, reviewing alerts generated by monitoring systems, and investigating suspicious patterns promptly.
Suspicious Transaction Reporting
When a financial institution suspects that a transaction is linked to money laundering or terrorist financing, it must file a Suspicious Transaction Report (STR) with the UAE Financial Intelligence Unit (FIU) through the goAML portal within the required timeframe. Failure to file STRs on time or at all is a serious compliance breach.
Record Keeping
Financial institutions must maintain complete records of customer due diligence documents, transaction records, and internal AML/CFT reports for a minimum of five years and must be able to produce these records promptly if requested by the CBUAE or other regulatory authorities during an inspection or investigation.
AML/CFT Training
All employees must receive regular AML/CFT training appropriate to their roles ensuring they can recognise red flags, understand their reporting obligations, and know how to escalate concerns through the institution's internal compliance channels.
What Are the Penalties for AML Non-Compliance in UAE?
The CBUAE case resulting in an AED 5.2 million fine illustrates that AML non-compliance carries severe financial consequences for UAE financial institutions. The penalty framework under UAE AML law allows the CBUAE and other supervisory authorities to impose a range of sanctions depending on the nature and severity of the violation:
Financial penalties can reach into the millions of dirhams for serious compliance failures. In addition to financial fines, institutions may face regulatory restrictions on their operations, enhanced supervision requirements, and in severe cases, suspension or cancellation of their operating licence. Individual officers and senior managers responsible for compliance failures may also face personal liability, including disqualification from holding financial sector positions.
For businesses beyond the financial sector — including DNFBPs such as real estate agents, accountants, lawyers, and precious metals dealers the Ministry of Economy similarly enforces AML compliance and can impose penalties for failures in KYC, CDD, STR filing, and record-keeping obligations.
How Reyson Badger Supports UAE Businesses with AML Compliance
Reyson Badger provides comprehensive AML compliance services for financial institutions, DNFBPs, and other regulated entities across Dubai and the UAE. Our team helps businesses design, implement, and maintain AML/CFT compliance programmes that meet CBUAE and Ministry of Economy requirements — reducing the risk of regulatory enforcement actions, financial penalties, and reputational damage.
Our AML compliance services cover AML policy development and documentation, customer due diligence and KYC support, transaction monitoring framework design, AML risk assessment and health checks, suspicious transaction report filing support, AML training for staff and management, and AML inspection preparation and support.
If your business is concerned about its current AML compliance position or wants to strengthen its controls before a CBUAE inspection, contact Reyson Badger today for a confidential compliance review.
Conclusion
The CBUAE's AED 5.2 million fine against a UAE money exchange house for AML non-compliance is a powerful reminder that the UAE's regulatory authorities are actively enforcing anti-money laundering rules with significant financial consequences. For financial institutions and other regulated businesses, maintaining robust AML controls, conducting proper customer due diligence, and filing suspicious transaction reports on time are not optional they are legal obligations with serious penalties for failure.
Reyson Badger helps UAE businesses stay fully compliant with AML regulations protecting them from enforcement actions, financial penalties, and reputational damage. Contact our AML compliance team today to review your current controls and ensure your business is prepared for regulatory scrutiny.
FAQs
1. What is the CBUAE's role in AML enforcement in UAE?
The Central Bank of UAE (CBUAE) is the primary supervisory authority for banks, exchange houses, and other financial institutions in the UAE. Under Federal Decree-Law No. 14 of 2018, the CBUAE has the authority to investigate AML compliance failures and impose financial penalties, operational restrictions, and licence suspensions on institutions that breach UAE AML/CFT regulations.
2. What are the penalties for AML non-compliance in UAE?
Penalties for AML non-compliance in the UAE include substantial financial fines as seen in this case with AED 5.2 million regulatory restrictions, enhanced supervision, suspension or cancellation of operating licences, and personal liability for senior officers responsible for compliance failures.
