The UAE has undergone a structural overhaul of its financial crime framework since its 2022 removal from the FATF grey list, producing a dense matrix of federal statutes, Cabinet resolutions, and free-zone regulations that impose heavy criminal and administrative liability on individuals and corporate entities alike.
Key takeaway
Federal Decree-Law No. 20 of 2019 on Anti-Money Laundering and its successive amendments, together with the corporate tax and VAT regimes, create overlapping criminal exposure for businesses operating in the UAE. Investigation powers are dispersed across the Financial Intelligence Unit, the Federal Tax Authority, the Public Prosecution, and sector-specific regulators. Entities must maintain robust compliance programmes and understand their procedural rights before, during, and after an investigation. Sanctions include imprisonment, fines, asset freezing, and—for legal persons—dissolution.
Legislative Architecture: The Core Statutes
The primary anti-money laundering statute is Federal Decree-Law No. 20 of 2019 on Anti-Money Laundering and Combating the Financing of Terrorism and Illegal Organisations, as amended. It defines money laundering broadly to include the conversion, transfer, concealment, acquisition, or use of proceeds derived from any predicate offence, regardless of where that predicate offence was committed. Predicate offences expressly listed in the law include fraud, bribery, corruption, drug trafficking, and, critically, tax crimes.
Cabinet Decision No. 10 of 2019 and its subsequent amendments designate the categories of Designated Non-Financial Businesses and Professions (DNFBPs), expanding compliance obligations far beyond banks to include real estate brokers, lawyers, accountants, and dealers in high-value goods. The UAE's tax evasion offence arises primarily under Federal Decree-Law No. 28 of 2022 on Tax Procedures and under the VAT legislation (Federal Decree-Law No. 8 of 2017), both of which characterise deliberate non-payment or fraudulent return filing as criminal acts carrying fines of up to five times the evaded tax and potential imprisonment.
Federal Decree-Law No. 47 of 2022 on Corporate Tax introduced a 9% corporate tax rate applicable from financial years beginning on or after 1 June 2023. Deliberate misrepresentation of taxable income or abuse of exemptions under that law can constitute tax evasion and simultaneously serve as a predicate offence triggering AML exposure. This layering—tax crime feeding money laundering—means that a single course of corporate misconduct can produce liability under multiple statutes enforced by different authorities.
Defining Money Laundering: Elements and Predicate Offences
Under Federal Decree-Law No. 20 of 2019, a money laundering conviction requires proof that the accused knew or ought to have known that the assets were derived from a predicate offence. The 'ought to have known' standard introduces constructive knowledge, lowering the prosecution's evidentiary burden compared with a strict actual-knowledge test. Courts have treated wilful blindness—deliberately ignoring obvious red flags—as sufficient to satisfy this element.
The law applies to proceeds generated abroad where the underlying conduct would constitute a crime in the UAE, even if it is lawful in the originating jurisdiction. This extraterritorial reach is significant for multinational groups that may receive funds from jurisdictions with different regulatory standards. Legal practitioners advising on inbound investment must therefore conduct source-of-funds analysis with reference to UAE law, not merely the law of the remitting country.
Corporate entities face autonomous liability under the statute; a conviction does not require identification of a specific natural person culprit within the organisation. Sanctions against legal persons include fines ranging from AED 50,000 to AED 50,000,000, confiscation of proceeds, suspension of licences, and dissolution. Officers and directors who authorise, approve, or turn a blind eye to laundering activity face personal imprisonment of up to ten years.
Tax Evasion as a Predicate Offence
The UAE's inclusion of tax crimes as predicate offences aligns its regime with FATF Recommendation 3. The Federal Tax Authority (FTA) is empowered under Federal Decree-Law No. 28 of 2022 to refer suspected evasion cases to the Public Prosecution without prior administrative exhaustion by the taxpayer. This referral mechanism means a business under tax audit can find itself simultaneously subject to criminal investigation before any assessment has been finalised in civil proceedings.
Evasion is distinguished from avoidance by the element of deception: submitting a false return, failing to register where registration is obligatory, or deliberately understating supplies subject to VAT. Aggressive but disclosed tax planning that the FTA later contests falls within civil penalty territory rather than criminal evasion territory, provided the taxpayer made accurate disclosures. The General Anti-Avoidance Rule introduced under the corporate tax law applies civil adjustments but does not of itself constitute an evasion offence.
A taxpayer who voluntarily discloses a tax irregularity before the FTA initiates an audit or investigation benefits from reduced penalties under the administrative regime. That voluntary disclosure will not, however, automatically preclude criminal referral if the FTA concludes that the original non-compliance involved deliberate falsification. Defence counsel must advise clients carefully on the timing and scope of voluntary disclosures to avoid inadvertent admissions that could be used in subsequent criminal proceedings.
Investigation Authorities and Their Powers
The UAE Financial Intelligence Unit (goAML platform) receives suspicious transaction reports from obligated entities and disseminates financial intelligence to law enforcement and the Public Prosecution. The Anti-Money Laundering and Suspicious Cases Unit (AMLSCU), operating within the Central Bank, supervises licensed financial institutions and may issue directives, impose administrative sanctions, and seek injunctive relief in the civil courts independently of criminal proceedings. The Public Prosecution holds exclusive authority to charge and prosecute AML offences at the federal level.
The FTA's audit and investigation powers under Federal Decree-Law No. 28 of 2022 include production orders directed at taxable persons and third parties, on-site inspections, electronic systems access, and the seizure of records. Officers are granted immunity from civil liability for actions taken in good faith during investigations. Refusal to cooperate, obstruction, or destruction of records constitutes a separate administrative offence and may be treated as evidence of wilful evasion in subsequent criminal proceedings.
In DIFC, the Dubai Financial Services Authority (DFSA) operates its own investigation regime under the DIFC Laws, with powers to conduct interviews under compulsion, issue market conduct orders, and refer matters to the DIFC Courts or Dubai Public Prosecution. In ADGM, the Financial Services Regulatory Authority (FSRA) holds equivalent powers under Abu Dhabi Global Market legislation. Cases straddling onshore and free-zone entities are managed through memoranda of understanding between the respective regulators and federal authorities, though jurisdictional overlaps can create procedural complexity.
Freezing Orders and Asset Confiscation
Federal Decree-Law No. 20 of 2019 authorises the Public Prosecution to request ex parte freezing orders over assets suspected to represent proceeds of money laundering. These orders are granted by the competent court and can extend to bank accounts, real property, shares, and other investments. A freeze can be imposed before any charge is filed, and it remains effective until the court orders otherwise, creating immediate operational disruption for the affected entity.
Confiscation upon conviction is mandatory for the proceeds of the predicate offence and any property into which those proceeds were converted or commingled. Courts apply an 'equivalent value' confiscation rule where the original proceeds can no longer be traced, allowing confiscation of legitimate assets of equivalent value. This is a significant departure from the tracing requirement that applies in some common law jurisdictions and increases the financial stakes of any AML conviction considerably.
Civil forfeiture—confiscation without a criminal conviction—is available under UAE law where criminal proceedings cannot be concluded because the suspect is deceased, absconded, or cannot be identified. Respondents to civil forfeiture proceedings carry a practical burden of demonstrating the lawful origin of assets, even though the state bears the formal legal burden of proof. Legal practitioners should advise clients of this risk when structuring asset-holding vehicles, particularly those involving beneficial owners in high-risk jurisdictions.
Compliance Obligations for Obligated Entities
Financial institutions and DNFBPs must implement AML/CFT programmes that include customer due diligence (CDD), enhanced due diligence for high-risk relationships, ongoing transaction monitoring, and suspicious transaction reporting to the goAML platform within the timeframes prescribed by the Central Bank's guidance and the relevant supervisory authority's rulebooks. Failure to file a suspicious transaction report where one was required is itself a criminal offence under Federal Decree-Law No. 20 of 2019, with fines imposed on both the entity and the responsible compliance officer.
Beneficial ownership registers are now mandatory for UAE-mainland companies under Cabinet Decision No. 58 of 2020 and its amendments, requiring disclosure of any natural person holding directly or indirectly 25% or more of the share capital or voting rights. Free zone authorities maintain equivalent registers under their own regulations. Registrars are empowered to strike off companies that fail to maintain or update their beneficial ownership data, and provision of false information attracts criminal liability.
The UAE's targeted financial sanctions regime, administered through the Executive Office for Control and Non-Proliferation, requires all persons within the UAE—not merely financial institutions—to freeze assets of designated persons without prior notice or court order, and to report any match to the Executive Office immediately. A failure to act upon a designation match, even by a non-financial business, constitutes a criminal offence. Practitioners should ensure their clients have automated screening tools capable of identifying matches in real time.
Procedural Rights During Investigation
A natural person subject to investigation by the Public Prosecution retains the right to legal representation at all stages, including during questioning. Under the UAE Code of Criminal Procedure, a suspect must be informed of the offence being investigated before questioning begins, and any statement obtained in breach of this requirement may be challenged for admissibility. Corporate representatives summoned for interview should be accompanied by counsel who can object to questions that would require disclosure of privileged communications.
Legal professional privilege is recognised in UAE law, though its contours differ from English law principles. Communications between a lawyer and client for the dominant purpose of obtaining legal advice are protected, but privilege does not extend to documents that are themselves instruments of crime. The DFSA and FSRA in the respective free zones apply similar privilege concepts derived from English common law traditions, giving slightly broader protection to in-house legal communications than the civil code mainland regime.
Entities subjected to FTA investigations retain the right to appeal any assessment or penalty through the Tax Disputes Resolution Committee and subsequently to the courts. Filing an appeal does not automatically suspend enforcement of a tax penalty, but a court may grant a stay upon application. Parallel criminal proceedings are not suspended by the pendency of civil tax appeals, and admissions made in the course of administrative proceedings can be relied upon by the Public Prosecution.
International Cooperation and Mutual Legal Assistance
The UAE is party to numerous bilateral mutual legal assistance treaties (MLATs) and is a member of the Egmont Group of Financial Intelligence Units, enabling the exchange of financial intelligence with peer FIUs worldwide. Requests from foreign authorities for evidence gathering, witness statements, and asset freezing are processed through the UAE Ministry of Justice. The UAE has demonstrated increasing willingness to execute foreign freezing orders, including those related to tax fraud investigations, reflecting its post-grey-list reform commitments.
UAE courts will enforce foreign confiscation orders where the underlying conduct constitutes an offence in both the requesting state and the UAE, applying a dual-criminality standard. Given that tax evasion is now a criminal offence under UAE law, foreign confiscation orders relating to tax fraud in jurisdictions where such conduct is criminalised should satisfy dual criminality without difficulty. Practitioners representing respondents should nevertheless scrutinise the procedural standards applied in the originating proceedings.
The UAE's Common Reporting Standard (CRS) framework, implemented under Cabinet Decision No. 739 of 2017, requires UAE financial institutions to collect and report financial account information of non-UAE tax residents to the FTA for onward exchange with their home jurisdictions. This information flow has materially increased the risk of detection for offshore tax evasion by UAE residents and has given foreign tax authorities grounds to request UAE cooperation in investigations targeting their own taxpayers.
Enforcement Trends and Practical Considerations
Since 2022, the UAE has significantly increased prosecution of AML offences across sectors including real estate, virtual assets, and professional services, consistent with the commitments made during its FATF mutual evaluation. The Virtual Asset Regulatory Authority (VARA) in Dubai and the FSRA in ADGM have each issued enforcement actions against virtual asset service providers for deficient AML controls, and criminal referrals from those regulators to the Public Prosecution have followed in a number of cases.
Corporate settlement mechanisms—analogous to deferred prosecution agreements used in common law jurisdictions—are not formally codified in UAE federal criminal procedure as of 2026. The Public Prosecution retains discretion to discontinue proceedings upon full restitution and cooperation, and courts may take remedial steps into account in sentencing, but practitioners cannot offer clients the certainty of a structured settlement framework. Early and genuine cooperation, including voluntary disclosure of internal investigation findings, remains the most effective practical mitigation strategy.
Businesses entering or operating in the UAE should conduct periodic AML risk assessments calibrated to their specific sector, customer base, and transaction patterns. Boards of directors bear ultimate responsibility for maintaining an effective compliance culture and should receive regular reporting from compliance functions on suspicious activity metrics, regulatory developments, and audit findings. Documenting board-level engagement with AML risk is itself a mitigating factor in any subsequent regulatory or criminal proceeding.
Practical checklist
- Register on the goAML platform and appoint a qualified Compliance Officer with direct board access before commencing regulated activity.
- Maintain and update beneficial ownership registers in compliance with Cabinet Decision No. 58 of 2020 or the applicable free zone equivalent.
- Implement automated sanctions screening against UAE Executive Office, UN, OFAC, and EU lists updated in real time.
- Establish a documented voluntary disclosure policy for tax irregularities, reviewed by criminal counsel before submission to the FTA.
- Train senior management and customer-facing staff annually on AML red flags specific to the entity's sector and client risk profile.
- Retain legal counsel with UAE criminal law experience at the earliest sign of a regulatory inquiry or suspicious activity referral.
- Conduct periodic independent AML audits and preserve audit records for at least five years in accordance with regulatory requirements.
This article is for general information only and does not constitute legal advice. For advice on a specific matter, please contact us. Last updated: 22 August 2026.