When a Tax Problem Becomes a Money-Laundering Crime in the UAE

What this guide covers

The Legal Framework: How FDL 10/2025 Changes Everything
From Tax Irregularity to Criminal Proceeds: The Predicate Offence Mechanism
The Corporate Tax Penalty Regime and the Tipping Point into AML
Asset Freezing, Confiscation and Cross-Border Enforcement
Obligations on Financial Institutions, Auditors and Legal Advisers
Strategic Response: Voluntary Disclosure, Internal Investigation and Crisis Management
Criminal Consequences: Sentencing, Confiscation and Reputational Impact
Practical checklist
What we'd typically advise
Frequently asked questions

Since Federal Decree-Law 10/2025 came into force on 14 October 2025, tax evasion in the UAE is a designated predicate offence for money laundering — meaning proceeds of underpaid tax can become criminal property, exposing executives, boards and financial institutions to prosecution, asset freezing and unlimited fines.

The Legal Framework: How FDL 10/2025 Changes Everything

Federal Decree-Law 10/2025 on Anti-Money Laundering, Countering the Financing of Terrorism and Countering the Financing of Proliferation (the AML Law), which entered into force on 14 October 2025 and repealed Federal Decree-Law 20/2018, is the single most consequential shift in UAE financial crime law in a generation. Its most operationally significant innovation for corporate and HNW clients is the explicit designation of tax evasion as a predicate offence for money laundering. Under the AML Law, any funds that represent the proceeds of a predicate offence become criminal proceeds for money laundering purposes — irrespective of whether the predicate was committed in the UAE or abroad, provided the conduct would be criminal in both jurisdictions.

The Cabinet Resolution 134/2025 (Executive Regulations, effective 14 December 2025) operationalises this by specifying the categories of tax-related conduct that qualify, the obligations on Designated Non-Financial Businesses and Professions (DNFBPs) including lawyers, accountants and corporate service providers, and the enhanced due-diligence triggers applicable when a client's tax affairs present red flags. Critically, the AML Law removes any statute of limitations for money-laundering offences — a provision that has no parallel in the repealed FDL 20/2018 and which fundamentally alters the risk calculus for historic irregularities.

The corporate tax layer sits in Federal Decree-Law 47/2022 (Corporate Tax Law) and Cabinet Decision 129/2025 on administrative penalties. Under that regime, late registration, failure to file, and deliberate underreporting each carry their own graduated administrative sanctions. The intersection arises because any deliberate underreporting — generating funds that are retained rather than remitted as tax — can now be characterised under FDL 10/2025 as the generation of criminal proceeds. This is not theoretical: the Financial Intelligence Unit (FIU) and the Public Prosecution have statutory information-sharing channels that allow a UAE Federal Tax Authority (FTA) audit finding to feed directly into an AML investigation.

For financial institutions regulated by the Central Bank under CBUAE Law No. 6/2025, the stakes are compounded: maximum administrative fines reach AED 1 billion, and institutions face potential licence revocation if AML controls are found inadequate to catch tax-evasion-linked transactions. The personal manager liability provisions in FDL 10/2025 mean that a compliance officer or CFO who fails to escalate a suspicious transaction report (STR) linked to a client's tax irregularities can face personal criminal prosecution alongside the institution.

From Tax Irregularity to Criminal Proceeds: The Predicate Offence Mechanism

Understanding precisely how a tax problem becomes a money-laundering crime requires tracing the predicate-offence chain. Under FDL 10/2025, money laundering is committed by any person who acquires, possesses, uses, converts, transfers, or conceals funds knowing or having reasonable grounds to know that those funds constitute proceeds of a predicate offence. Tax evasion now sits on the predicate list alongside drug trafficking, fraud and corruption. The practical consequence is this: if a company deliberately underreports revenue to the FTA under Federal Decree-Law 47/2022, the tax saved — the delta between tax owed and tax paid — is not clean money. It is, in the eyes of FDL 10/2025, a criminal proceed.

The 'reasonable grounds to know' standard is deliberate and significant. It means that wilful blindness — a CFO who does not ask why the tax provision looks implausibly low, a board member who approves financial statements without querying an aggressive transfer-pricing position — can suffice. The prosecution does not need to prove actual knowledge of the tax evasion; it needs to establish that a reasonable person in the defendant's position would have recognised the irregularity. This dramatically widens the circle of potential defendants beyond the person who structured the tax position.

Three conduct patterns most commonly trigger escalation. First, deliberate underreporting: systematic exclusion of revenue streams from UAE corporate tax filings under FDL 47/2022, particularly where parallel sets of accounts are maintained. Second, artificial offshore structuring: routing UAE-source income through jurisdictions without substance, then reinvesting those funds back into UAE assets, which constitutes both a transfer-pricing violation and potentially the 'transfer or conversion' limb of money laundering. Third, beneficial ownership concealment: using nominee structures to obscure the identity of the ultimate beneficial owner in breach of Cabinet Decision 109/2023 (which applies a 25% ownership threshold), thereby also concealing which person controls the tax-evaded funds. Each of these patterns generates STR obligations for banks, auditors and lawyers under FDL 10/2025 and Cabinet Resolution 134/2025.

One nuance practitioners must flag: the AML Law applies to predicate offences committed abroad provided dual criminality is satisfied. A client who has evaded tax in a foreign jurisdiction and then brought those funds into the UAE — investing in real estate, depositing in a UAE bank, or injecting capital into a UAE free zone entity — faces money-laundering exposure under UAE law even if the foreign predicate is never prosecuted abroad. With no statute of limitations on the UAE money-laundering charge itself, the window of exposure is indefinite.

The Corporate Tax Penalty Regime and the Tipping Point into AML

Federal Decree-Law 47/2022 and Cabinet Decision 129/2025 create a tiered penalty structure for corporate tax non-compliance. Administrative penalties for late registration or failure to file are fixed-rate and can be settled with the FTA. Voluntary disclosure attracts a reduced penalty ranging from 1% to 4% of the unpaid tax, depending on timing, compared to 15% if an irregularity is discovered on FTA audit. This administrative pathway is critically important: it is the last exit before a tax matter transitions from a civil/regulatory matter to a potential criminal one.

The tipping point is intent. The FTA's audit process is designed to identify patterns consistent with deliberate evasion rather than innocent error — for example, systematic cash-sales suppression, invoicing to related parties at non-arm's-length prices, or claiming deductions for expenses that are not substantiated. Where the FTA determines that conduct is deliberate, it has statutory channels to refer the matter to the Public Prosecution. Once a Public Prosecution investigation opens, the AML Law's predicate offence framework becomes operative. At that stage, the company and its officers are no longer dealing with an administrative fine; they are dealing with a criminal investigation in which the FIU may be involved, bank accounts may be frozen, and assets may be subject to provisional seizure under Federal Decree-Law 38/2022 (Criminal Procedure Law, in force 1 March 2023).

The interaction between these two regimes creates a practical urgency around voluntary disclosure. A voluntary disclosure filed with the FTA before an audit commences — paying the 1–4% penalty — is strong evidence of absence of criminal intent and significantly reduces the prospect of an AML referral. By contrast, a company that waits until it receives an FTA audit notice and then attempts to disclose faces the 15% administrative penalty and also loses the 'no-intent' shield. If audit findings then reveal a pattern that looks deliberate, the disclosure itself may arrive too late to prevent a criminal referral. Senior counsel's advice in this space is almost always to get ahead of the audit cycle.

Directors and CFOs should also be acutely aware of the personal manager liability provision in FDL 10/2025. Where a legal person (company) commits a money-laundering offence, the individuals who authorised, directed or were in a position to prevent the relevant conduct but failed to act can be held personally criminally liable. This is not merely vicarious liability — it is direct personal criminal exposure, with custodial sentences and personal asset confiscation available as remedies. The AML Law's fines for individuals can reach AED 100 million, and for legal persons the same ceiling applies with the added possibility of licence suspension or dissolution.

Asset Freezing, Confiscation and Cross-Border Enforcement

Once an AML investigation opens — whether triggered by an FTA referral, an STR from a financial institution, or a foreign mutual legal assistance request — the Public Prosecution has broad powers under Federal Decree-Law 38/2022 (Criminal Procedure Law) to apply for provisional freezing orders over assets believed to represent criminal proceeds. These orders can be obtained ex parte, meaning without notice to the target, and can extend to bank accounts, real property, shareholdings, vehicles and any other asset traceable to the alleged predicate conduct. The threshold for a provisional freeze is probable cause, not proof beyond reasonable doubt — a materially lower bar.

Confiscation on conviction under FDL 10/2025 is mandatory for assets proven to be criminal proceeds. The court has no discretion to decline confiscation once the nexus to the predicate offence is established. Value-based confiscation is also available, meaning that if the original proceeds have been dissipated, mixed with legitimate funds, or transferred to third parties, the court can order confiscation of equivalent value from any assets of the defendant. This is particularly significant for real estate investors who have purchased UAE property using funds that, in part, derived from tax-evaded income: the entire property may be subject to a value-based confiscation order even if the majority of the purchase price was legitimate.

The cross-border dimension has become far more acute following two developments. First, the DIFC Court Law 2/2025 and the ADGM decision in A17 v B17 [2025] have confirmed that DIFC and ADGM courts can grant worldwide freezing orders in support of foreign proceedings without any requirement that the defendant holds assets within the DIFC or ADGM. This means a foreign jurisdiction pursuing a tax-evasion/money-laundering case can obtain a worldwide freeze through UAE courts even where the UAE-held assets are held onshore. Second, Federal Law 39/2006 as amended by Federal Decree-Law 38/2023 governs extradition and mutual legal assistance. The UAE has expanded its MLA network, and following FATF's removal of the UAE from its grey list in February 2024, the speed and reliability of international cooperation has materially increased. Clients should assume that a request from a major financial centre for information about UAE-held assets will be acted upon promptly.

For crypto assets, Cabinet Resolution 134/2025 imposes a Travel Rule threshold of AED 3,500, requiring Virtual Asset Service Providers (VASPs) licensed under VARA's Rulebooks 2.0 (May 2025) to transmit originator and beneficiary information on transfers at or above that amount. Attempts to layer tax-evaded funds through crypto — moving funds between wallets in amounts below the threshold — will be treated as structuring, itself an aggravating factor under FDL 10/2025. The DIFC Digital Assets Law 2/2024 confirms that crypto constitutes property for confiscation purposes, removing any argument that digital assets fall outside the reach of freezing and confiscation orders.

Obligations on Financial Institutions, Auditors and Legal Advisers

FDL 10/2025 and Cabinet Resolution 134/2025 impose a comprehensive suspicious transaction reporting regime on both financial institutions and DNFBPs, which include auditors, lawyers providing transactional or company-administration services, corporate service providers, real estate agents, and dealers in high-value goods. The obligation to file an STR arises when a reporting entity knows, suspects, or has reasonable grounds to suspect that a transaction or attempted transaction involves criminal proceeds — which, post-FDL 10/2025, expressly includes proceeds of tax evasion. Filing an STR does not breach client confidentiality obligations under UAE law; FDL 10/2025 provides statutory immunity for good-faith reporters.

For financial institutions regulated under CBUAE Law No. 6/2025, the practical implications are significant. Enhanced due diligence (EDD) is triggered not only for politically exposed persons but for any customer whose source of funds involves complex offshore structures, unexplained wealth relative to declared income, or inconsistencies between declared tax status and transaction volumes. Where a bank identifies a client whose corporate tax filings (obtainable via FTA public records or disclosed by the client) are inconsistent with their banking activity, the institution faces a choice between EDD escalation, STR filing, or — in the most serious cases — account termination. Failure to act appropriately exposes the institution to fines up to AED 1 billion under CBUAE Law No. 6/2025 and personal prosecution of responsible officers under FDL 10/2025's manager liability provision.

Legal advisers face a nuanced position. Legal professional privilege under UAE law is narrower than in common-law jurisdictions: it protects communications made for the purpose of obtaining legal advice in contemplation of litigation but does not protect advice sought to facilitate the commission of a crime. Where a lawyer is asked to assist in structuring a transaction the purpose of which is to conceal tax-evaded funds — for example, establishing a nominee shareholder arrangement in breach of Cabinet Decision 109/2023 — the lawyer is both a potential DNFBP reporter and a potential co-accused. The risk of inadvertent facilitation means that UAE counsel and in-house legal teams must implement robust CDD procedures and maintain documented source-of-funds analysis, particularly on inbound investment transactions and corporate restructurings.

Strategic Response: Voluntary Disclosure, Internal Investigation and Crisis Management

When a client discovers a potential tax irregularity — whether through an internal audit, an FTA query, or a transaction that has attracted scrutiny from their bank — the strategic priority is to assess the AML exposure before taking any remedial step. This is not because voluntary disclosure should be avoided, but because the sequence and method of disclosure matters. A voluntary disclosure to the FTA under Federal Decree-Law 47/2022 that is crafted without regard to its potential use in a parallel criminal investigation can inadvertently provide an evidential roadmap to prosecutors. Conversely, a well-structured disclosure, made with the benefit of legal privilege, can simultaneously resolve the tax liability, reduce administrative penalties to the 1–4% range, and generate a contemporaneous record demonstrating absence of criminal intent.

Before any disclosure, an internal investigation should be conducted under legal professional privilege to establish the full factual picture. This investigation should address three questions: (i) is the irregularity the product of a deliberate decision or a systemic error in tax accounting? (ii) what is the universe of transactions potentially affected, and does any of that money now reside in UAE-regulated accounts or assets? (iii) have any third parties — banks, auditors, other group companies — already been put on notice of facts that might generate an STR? The answers shape both the disclosure strategy and the order in which regulatory and criminal counsel must be instructed.

Where there is any indication that an STR has already been filed, or that the FTA has referred a matter to the Public Prosecution, the client is in a reactive rather than proactive posture. In that scenario, priority shifts to: securing the client's position under Federal Decree-Law 38/2022 (Criminal Procedure Law) before any assets are frozen; preparing for potential interview by the Public Prosecution; and engaging proactively with the FIU through counsel to present a narrative that distinguishes the client's conduct from wilful evasion. The AML Law's no-limitations provision means that delay in engaging counsel once an investigation signal emerges is rarely in the client's interest.

For GCs and boards, the governance dimension demands equal attention. Where an investigation reveals that a company's tax positions were signed off by the board without adequate internal controls, the entire board may face personal exposure under FDL 10/2025's manager liability provisions. Boards should immediately commission an independent review of tax governance, segregate their own legal advice from the company's FTA disclosure process, and ensure that board minutes accurately reflect the information available to directors at the time decisions were made. In capital-markets-listed entities, the new Federal Decree-Law 32/2025 (CMA Law) and FDL 33/2025 (market abuse) add an additional layer: a failure to disclose a material tax liability to the market may constitute a market-abuse offence with penalties up to AED 200 million.

Criminal Consequences: Sentencing, Confiscation and Reputational Impact

The sentencing framework for money laundering in the UAE is severe and has been tightened under FDL 10/2025. For natural persons convicted of money laundering, custodial sentences and fines up to AED 100 million are available. For legal persons, the AML Law provides for fines up to AED 100 million, plus the mandatory confiscation of criminal proceeds, suspension of the business licence, and — in the most serious cases — dissolution of the legal entity. There is no minimum threshold below which the money-laundering provisions do not apply: a company that evades AED 50,000 in corporate tax and retains those funds in its accounts has, on the face of the legislation, generated criminal proceeds of AED 50,000, even though in practice prosecutorial discretion tends to focus on cases of greater magnitude or sophistication.

The Penal Code, Federal Decree-Law 31/2021 (in force 2 January 2022, amended by FDL 36/2022), provides the underlying sentencing framework for financial crimes generally. Where tax evasion is charged as the predicate and money laundering is charged as the primary offence, prosecutors typically proceed under FDL 10/2025 for the AML counts, while the predicate (tax evasion) is charged separately under the applicable tax legislation. This concurrent charging approach means defendants face cumulative, not alternative, penalties on conviction.

Reputational consequences extend well beyond the criminal proceedings themselves. A conviction — or even a Public Prosecution investigation that becomes publicly known — triggers automatic reporting obligations for regulated entities across the UAE financial system. Banks will exit relationships; VARA-licensed entities may have their approvals suspended; and DIFC and ADGM-registered entities face fitness-and-propriety reviews. For HNW individuals, UAE residence visa and Emirates ID implications arise where a criminal conviction is recorded. In the cross-border context, a UAE AML conviction is reportable to FATF member states under mutual evaluation reporting standards, meaning the reputational impact extends to the individual's dealings in every major financial centre. Given that the UAE completed its FATF mutual evaluation exit in February 2024 and faces its next evaluation in 2026, enforcement authorities are acutely aware of the need to demonstrate rigorous predicate-offence prosecution — adding institutional momentum to what might otherwise be treated as a tax administration matter.

Practical checklist

File voluntary disclosure with FTA before any audit notice to secure 1–4% penalty rate and preserve intent defence.
Instruct criminal and tax counsel jointly before making any disclosure to the FTA or FIU.
Audit all inbound investment transactions for source-of-funds trail going back at least seven years.
Verify beneficial ownership filings are accurate and current under Cabinet Decision 109/2023's 25% threshold.
Review board minutes to confirm directors had adequate information when approving tax positions.
Check whether any group-entity banks or auditors have already filed STRs — this changes the strategic posture entirely.
Assess cross-border exposure: funds brought into UAE from foreign tax-evaded income carry AML risk under FDL 10/2025 regardless of where the evasion occurred.
Implement enhanced AML controls for crypto transactions; ensure Travel Rule compliance at AED 3,500 threshold under Cabinet Resolution 134/2025.

What we'd typically advise

Our standard approach when a client brings us a potential tax irregularity is to treat it as a criminal risk from day one, not an administrative inconvenience. The most important early decision is sequencing: internal investigation under privilege first, then a structured voluntary disclosure to the FTA calibrated to avoid inadvertent self-incrimination in any parallel AML inquiry. If there is any sign that the FTA, the FIU, or a financial institution has already identified the issue, we move immediately to a defensive posture under Federal Decree-Law 38/2022 — securing assets before a freeze application is made and preparing a factual narrative for the Public Prosecution.

For boards and executives, we advise treating personal liability under FDL 10/2025 as a board-level agenda item, not a compliance footnote. The manager liability provisions are real, enforceable, and carry unlimited personal financial exposure alongside custodial risk.

Frequently asked questions

Our company underpaid corporate tax due to an accounting error, not deliberate evasion. Can we still face AML prosecution under FDL 10/2025?

A genuine accounting error, properly documented and remediated through voluntary disclosure before any FTA audit, is unlikely to meet the intent threshold required for criminal prosecution under Federal Decree-Law 10/2025. However, the AML Law uses a 'reasonable grounds to know' standard, not actual knowledge — so systemic or repeated errors that a competent finance team should have caught can still attract scrutiny. Early voluntary disclosure under Federal Decree-Law 47/2022, paying the 1–4% reduced penalty, is the most effective way to establish absence of criminal intent and prevent an FTA referral to the Public Prosecution.

I brought funds into the UAE that I earned abroad, and I did not pay full tax on them in the foreign country. Am I at risk in the UAE?

Yes, potentially. Federal Decree-Law 10/2025 applies to proceeds of predicate offences committed abroad, provided the conduct constitutes a criminal offence in both the foreign jurisdiction and the UAE (dual criminality). If tax evasion is a criminal offence in the country where the income arose — which is the case in most major economies — and you have brought those funds into the UAE, those funds may constitute criminal proceeds for UAE money-laundering purposes. There is no statute of limitations on the UAE money-laundering charge. Specialist legal advice on the dual-criminality analysis and source-of-funds remediation is essential before making any further investments or disclosures.

Our bank has asked for source-of-funds documentation and is hinting at account closure. Has an STR already been filed?

Under Federal Decree-Law 10/2025, financial institutions are prohibited from disclosing to a customer that an STR has been filed or that they are under AML scrutiny — the 'tipping off' prohibition. A bank's enhanced due-diligence request or account-closure threat may or may not indicate an STR has been filed; you will not be told directly. You should instruct counsel immediately to assess whether a parallel FIU or Public Prosecution inquiry is open, prepare a comprehensive source-of-funds file, and if appropriate engage proactively with the relevant authority through counsel before any formal investigation step is taken against you.

As a CFO who signed off the tax returns, what is my personal exposure under the new AML law?

Federal Decree-Law 10/2025 contains explicit personal manager liability provisions: where a legal person commits a money-laundering offence, individuals who authorised, directed, or were in a position to prevent the conduct but failed to do so can be personally prosecuted. As CFO, your signature on a tax return that is later found to reflect deliberate underreporting could place you within that provision. Personal fines can reach AED 100 million and custodial sentences are available. The key defence is demonstrating that you acted on reasonable advice, implemented adequate controls, and had no actual or constructive knowledge of the irregularity. Documenting that defence now — before any investigation opens — is critical.

Can UAE authorities freeze my assets before I am charged or convicted?

Yes. Under Federal Decree-Law 38/2022 (Criminal Procedure Law), the Public Prosecution can apply for provisional freezing orders over assets believed to constitute criminal proceeds on a probable-cause basis — well below the criminal standard of proof. These orders can be obtained without notice to the target (ex parte). Once frozen, assets remain frozen pending resolution of the criminal proceedings, which in complex financial crime cases can take years. The DIFC Court Law 2/2025 and the ADGM precedent in A17 v B17 [2025] also allow worldwide freezing orders through UAE courts in support of foreign proceedings, meaning assets held outside the UAE can be captured in the same proceeding.

Does the voluntary disclosure regime under the Corporate Tax Law provide any protection against AML prosecution?

Voluntary disclosure under Federal Decree-Law 47/2022 reduces administrative tax penalties to 1–4% and is strong evidence of lack of criminal intent. However, it does not provide a statutory immunity from AML prosecution under Federal Decree-Law 10/2025: these are separate legal regimes administered by different authorities (the FTA and the Public Prosecution/FIU respectively). A well-structured voluntary disclosure, made before any audit notice and accompanied by a comprehensive remediation plan, substantially reduces the risk of criminal referral — but it must be prepared with the AML exposure in mind from the outset, not as a purely administrative exercise.

We are a DIFC-registered entity. Does FDL 10/2025 apply to us, or are we governed only by DIFC AML rules?

Federal Decree-Law 10/2025 is a federal law of the UAE and applies across the UAE including the DIFC. The DIFC has its own AML regulatory framework administered by the DFSA, but DIFC-registered entities and their officers remain subject to UAE federal criminal law, including prosecution under FDL 10/2025 for money-laundering offences. The DIFC Court Law 2/2025 further confirms the DIFC's integration with the wider UAE judicial framework for enforcement purposes. DIFC entities should ensure their AML programmes satisfy both DFSA requirements and the obligations imposed by Cabinet Resolution 134/2025 (the FDL 10/2025 Executive Regulations).

What happens if the FTA shares our audit findings with the FIU without telling us?

This is expressly contemplated by the legal framework. The FTA and the FIU have statutory information-sharing channels, and there is no requirement to notify the taxpayer that a referral has been made. The first indication a client may receive that an AML investigation has been opened is a bank account freeze, a request to present to the Public Prosecution, or a travel ban. This is why counsel consistently advises clients to treat any FTA audit — not just a formal notice of investigation — as a trigger for AML risk assessment, and to instruct criminal counsel alongside tax advisers from the moment an audit query is received.

Related guides

Published 15 July 2026. General information only — not legal advice. Contact us for matter-specific advice.