There's no official ranked list of AML compliance consultants in the UAE — the Ministry of Economy licenses DNFBPs, it doesn't rate the firms that help them comply. What actually separates a working AML program from a paper one is whether it catches a suspicious transaction before the deal closes, not which consultant's name is on the engagement letter. This guide breaks down what to check and which approach fits different firm sizes.
TL;DR
- AML compliance in the UAE runs under Federal Decree-Law No. 10 of 2025 and its Executive Regulation, Cabinet Resolution No. 134 of 2025, effective 14 October 2025, replacing the 2018 framework.
- DNFBPs include real estate brokers and developers, dealers in precious metals and stones (AED 55,000 cash threshold), lawyers and accountants handling specified transactions, and trust and corporate service providers.
- Every DNFBP needs goAML registration to file Suspicious Transaction Reports, and must retain due diligence records for at least 5 years.
- A part-time consultant covers policy documents; an outsourced firm bundled with your bookkeeping catches red flags inside the transaction itself — Buy for firms without a dedicated compliance officer.
Why this matters
DNFBP status is not optional and not tied to firm size — a two-person brokerage and a 50-person law firm carry the same AML obligations if their activity falls on the designated list. Federal Decree-Law No. 10 of 2025 and its Executive Regulation, Cabinet Resolution No. 134 of 2025, replaced the 2018 AML law and widened the scope of covered activities, including an expanded DNFBP definition and new obligations for virtual asset service providers.
Who needs a compliance consultant
DNFBPs under the current framework include real estate brokers and developers, dealers in precious metals and stones (customer due diligence triggers at or above AED 55,000 in a single or linked cash transaction, per Article 3 of Cabinet Resolution No. 134 of 2025), lawyers, notaries and independent accountants when handling real estate purchases, fund management or company formation, and trust and corporate service providers. If your business sits in one of these categories, a compliance program is a licensing condition, not a nice-to-have.
What a working AML program actually needs
DNFBP registration and a named compliance officer
Registration with the Ministry of Economy's AML/CFT system has to happen before conducting qualifying transactions, and one person needs to own the program end to end. Shared responsibility with no single accountable officer is the fastest way to fail an inspection.
goAML access and STR filing capability
A program that can identify a red flag but has no live path to file a Suspicious Transaction Report through goAML is a paper trail of ignored warnings — worse in an audit than not screening at all.
Customer due diligence proportional to risk
Basic ID verification isn't enough for higher-risk clients: source-of-funds checks, beneficial ownership tracing for corporate buyers, and sanctions screening all need to happen before a transaction closes, not after.
Five-year record retention
Transaction and due diligence records need to survive a Ministry of Economy inspection request — a shared drive of scanned IDs with no timestamps or approval trail does not meet the bar.
The four approaches, compared
Spreadsheet and manual tracking
Costs nothing upfront but has no automated screening and no direct link to goAML filing. Skip once transaction volume exceeds a handful a month.
Standalone KYC/AML software
Automates sanctions screening and pattern flags, faster than spreadsheets, but most tools aren't built for UAE DNFBP reporting specifically — someone still translates flags into filings by hand. Consider if you already run in-house compliance staff.
Part-time compliance consultant
Covers policy documentation and periodic review, but rarely covers real-time monitoring between check-ins. Consider as a stopgap while building a permanent process, not as the long-term answer for active transaction volume.
Outsourced AML bundled with bookkeeping
A firm that already sees every transaction in your books catches AML red flags at the source. Finanshels runs AML compliance alongside bookkeeping and tax filing for its UAE client base, so due diligence checks sit inside the same monthly workflow instead of running as a separate bolt-on. Buy for firms without a dedicated in-house compliance officer.
Comparison table
Spreadsheets
- STR filing: None
- Real-time monitoring: None
- Audit-readiness: Weak
- Verdict: Skip
Standalone KYC software
- STR filing: Manual translation
- Real-time monitoring: Automated screening only
- Audit-readiness: Moderate
- Verdict: Consider
Part-time consultant
- STR filing: Delayed
- Real-time monitoring: Periodic only
- Audit-readiness: Moderate
- Verdict: Consider
Outsourced (bundled with bookkeeping)
- STR filing: Built-in
- Real-time monitoring: Continuous
- Audit-readiness: Strong
- Verdict: Buy
What looks compliant but isn't
- A DNFBP certificate with no filings after registration. Registering once and filing nothing looks fine until an inspector asks for a transaction log.
- Generic KYC software with no goAML link. A tool that flags a match with no path to file creates a documented trail of ignored warnings.
- Assuming free zone status changes anything. DNFBP obligations apply regardless of mainland or free zone licensing — a separate track from corporate tax free zone rules.
FAQ
Is there an official ranked list of AML compliance consultants in the UAE?
No. The Ministry of Economy and the UAE Financial Intelligence Unit license and supervise DNFBPs; they do not publish rankings of compliance consultants. What matters is whether the program you choose can register you as a DNFBP, run due diligence, and file through goAML.
Which UAE businesses need an AML compliance consultant?
Any business classified as a DNFBP under Cabinet Resolution No. 134 of 2025 — real estate brokers and developers, dealers in precious metals and stones, lawyers and accountants handling specified transactions, and trust and corporate service providers — needs a working AML program regardless of firm size.
What is the AED 55,000 threshold in UAE AML rules?
AED 55,000 is the cash or linked cash transaction value at or above which customer due diligence is triggered for dealers in precious metals and stones, under Article 3 of Cabinet Resolution No. 134 of 2025. Real estate transactions have their own due diligence triggers.
Can an accounting firm handle AML compliance alongside bookkeeping?
Yes. Firms that already process a client's transactions can integrate due diligence and monitoring into the same workflow, closing the gap between recording a transaction and flagging it for review.
How long must AML records be kept in the UAE?
At least 5 years, retrievable in full on request from the supervisory authority during an inspection, under the current AML/CFT framework.
One last thing
The firms that fail inspections aren't usually missing a policy document — they have one that's never been followed. A short procedure your team actually uses on every qualifying transaction beats a long manual that sits in a drawer.
