The FinCrime Wire · UAE regulatory update
Sources reviewed: 2 November 2026 · LearnAML Editorial Board
The UAE’s current AML/CFT framework calls for precise decisions about customers, payment routes, reporting and records. The Ministry’s 2026 real-estate guidance brings those decisions into focus: a transaction can require an activity report even when customer checks are complete and no suspicion has arisen.
The briefing in three points
- Property reporting follows the payment route. Cash, virtual assets and converted funds require separate attention under the Ministry’s March 2026 guidance.
- CDD triggers and transfer information are distinct. Record the rule that applies to the activity, rather than using one threshold for every control.
- Evidence connects the framework to practice. Map the supervisor, reporting decision and retention rule to the business and its records.
UAE country reference
For the full framework, supervisor matrix, reporting workflows, ten practical worksheets and scenario exercises, open the LearnAML UAE AML/CFT Country Pack.
Real estate: the 2026 guidance makes payment history central
March 2026 guidance, reviewed for this update. The Ministry of Economy and Tourism’s supplemental guidance for real estate agents and brokers sets out three REAR categories for freehold property transactions: cash payments totalling AED 55,000 or more; payment using virtual assets for any portion of the value; and funds converted from or to virtual assets for any portion. A REAR is required within its scope even where CDD is satisfactory and suspicion is absent. Suspicious reporting must also be considered separately. Source: MoET real-estate guidance, section 7.1.
Practical implication: establish how the purchase is funded before completing the reporting assessment. A bank transfer is the final payment method; the underlying funds may have been converted from virtual assets. Capture the payer, economic source, conversion route and supporting evidence in the transaction file.
The legal baseline: use the rules already in force
Federal Decree-Law No. 10 of 2025 has applied since 14 October 2025. Its executive regulations, Cabinet Resolution No. 134 of 2025, have applied since 14 December 2025. These dates are the existing legal baseline for this briefing, rather than new commencement announcements. Source: Decree-Law 10/2025; source: Resolution 134/2025.
The regulations distinguish an FI’s occasional-transaction CDD trigger of AED 55,000, an FI’s occasional-wire trigger of AED 3,500 and a VASP’s occasional-transaction trigger of AED 3,500. Business relationships, suspicion and doubts about identification have their own triggers. Article 36 separately addresses information accompanying virtual-asset transfers. Source: Resolution 134/2025, Articles 7 and 36.
Practical implication: specify the activity and control in each procedure. Ask separately whether CDD is required, which transfer information must accompany the payment, whether a sector report is due and whether the facts create suspicion.
Records: build the schedule around the applicable regime
The federal baseline is at least five years, with different wording for transaction records and CDD-related files. DFSA and ADGM provisions require at least six years, while VARA’s books-and-records rule requires at least eight years and indefinite retention for records that may relate to UAE national security. The starting event, record category and any legal hold also matter. Federal Article 25; DFSA AML 14.4.1; ADGM AML 4.5.1; VARA I.F.2.
Practical implication: identify the entity, supervisor, record type, applicable start event and hold status before scheduling disposal. The country pack includes a worksheet for making those decisions auditable.
FATF status: date the evidence used in country-risk decisions
The UAE does not appear on FATF’s increased-monitoring statement dated 30 October 2026. Its removal from increased monitoring was announced in February 2024. Firms should use the dated status alongside customer, transaction, geographic and applicable domestic regulatory evidence. Source: FATF’s October 2026 statement.
Five checks for your next compliance briefing
- Confirm the perimeter: identify the actual service, operating location, permission and AML supervisor.
- Follow the funding: connect the payer and payment method to beneficial ownership and the underlying source of value.
- Separate the decisions: document CDD, sector reporting, suspicion and sanctions assessments with their respective rules.
- Test the evidence: retrieve a sample file and see whether another reviewer can reconstruct the reasoning and action times.
- Apply the right retention rule: check record categories, start events and any longer hold.
Continue with the UAE country pack
The updated United Arab Emirates AML/CFT Guide connects these developments to the wider financial-crime ecosystem and day-to-day decisions. Use the practitioner toolkit, review the obligation tables and work through the sector scenarios.
Editorial scope: a dated regulatory briefing with LearnAML’s practical analysis. The source instruments establish the requirements; the suggested desk checks help teams apply and document them. Use current supervisory and FIU instructions for submission fields and timing.