Quick AnswerAML fines UAE 2026: penalties from AED 50,000 to AED 5,000,000, who enforces them, real cases and how to stay clear. Founder’s compliance guide.
AML fines in the UAE are among the heaviest administrative penalties a business can face, and in 2026 they are enforced with real intent. If your company is in scope of the anti-money-laundering regime, whether a bank, an exchange house, a real estate broker, a gold dealer or a corporate service provider, a single compliance failure can cost between AED 50,000 and AED 5,000,000 per violation. The UAE has publicly announced tens of millions of dirhams in AML fines on private-sector firms, and enforcement continues to sharpen.
This guide explains, for founders and business owners, exactly what AML fines are, the law behind them, how much each type of breach can cost, who enforces them, and, most importantly, how to stay clear. The good news is that the failures that attract fines are well known and entirely avoidable with a proper programme in place. Understanding them is the first step to never receiving a penalty notice.
What Are the AML Fines in the UAE?
AML fines in the UAE are administrative penalties under Cabinet Decision No. 16 of 2021, ranging from AED 50,000 to AED 5,000,000 per violation. They apply to failures such as not registering on goAML, weak customer due diligence, or missed reports. Separately, the criminal offence of money laundering under Article 26 carries 1 to 10 years' imprisonment plus fines of AED 100,000 to AED 5,000,000.
There are, in effect, two layers of consequence. The first is administrative: a supervisor identifies a compliance breach, such as an unregistered business or a missing report, and imposes a fine from the unified list. These are civil in nature and do not require a criminal conviction. The second is criminal: where money laundering, terrorist financing or related offences actually occur, the courts can impose imprisonment and larger fines on individuals and, in some cases, on companies.
| AML fines overview | Detail |
|---|---|
| Administrative fine range | AED 50,000 β AED 5,000,000 |
| Criminal ML fine range | AED 100,000 β AED 5,000,000 |
| Criminal ML imprisonment | 1 β 10 years |
| Governing law | Federal Decree-Law No. 20 of 2018 |
| Fines list | Cabinet Decision No. 16 of 2021 |
| DNFBP supervisor | Ministry of Economy |
| Financial-institution supervisor | Central Bank of the UAE |
For most businesses the realistic exposure is administrative, and that is exactly the layer a good compliance programme is designed to eliminate. The Ministry of Economy publishes guidance for the businesses it supervises, while the Federal Tax Authority handles the separate tax regime that banks increasingly review alongside AML posture. Treating both seriously builds the clean profile that keeps a business off the enforcement radar.
The Legal Basis for AML Fines
AML fines do not come from a single rule but from a layered framework, and knowing the structure helps you see why breaches are treated so seriously. At the top sits Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism and Financing of Illegal Organisations. This is the primary law that creates the obligations: registration, due diligence, reporting, record-keeping and the rest.
Beneath it, Cabinet Decision No. 10 of 2019 provides the implementing regulation, filling in the detailed mechanics of how businesses must comply. Then Cabinet Decision No. 16 of 2021 sets out the unified list of violations and the administrative fines attached to each, which is why supervisors across sectors apply consistent penalty ranges. The criminal dimension sits in the primary law itself, with Article 26 defining the money-laundering offence and its penalties of imprisonment and fines.
The UAE built this architecture in large part to meet the standards of the Financial Action Task Force, the global body that assesses countries' AML systems. The Ministry of Finance leads the national committee that coordinates this work. The practical consequence for a business is that the rules are not going to soften: they reflect international commitments, and supervisors are measured on how effectively they enforce them. That is why a violation that might once have drawn a warning now draws a fine, and why the safest assumption for any in-scope business is that non-compliance will eventually be found and penalised.
AML Fines by Violation Type
The unified list attaches penalties to specific failures, and mapping the common ones helps you see where the risk actually lies. The figures below are indicative of the framework rather than a guaranteed amount for any single case, because supervisors weigh the severity, duration and repetition of a breach when setting the fine.
| Violation | Indicative administrative fine (AED) |
|---|---|
| Failure to register on goAML or the sanctions system | From 50,000 |
| Failure to appoint an AML compliance officer | From 50,000 |
| Failure to perform customer due diligence | From 50,000 |
| Failure to identify beneficial owners | From 50,000 |
| Failure to screen against sanctions lists | Significant, up to 1,000,000+ |
| Failure to file a suspicious transaction report | Up to 1,000,000 or more |
| Tipping off a customer about a report | Serious, criminal exposure |
| Repeated or systemic failures | Up to 5,000,000 |
Two patterns stand out. First, the entry-level breaches, not registering, no officer, no due diligence, all start at AED 50,000, which means even a small firm that simply ignored its obligations faces a five-figure penalty per breach, and breaches often come in clusters. Second, the failures that touch actual criminal risk, ignoring sanctions matches or failing to report a genuinely suspicious transaction, escalate sharply toward the AED 5,000,000 ceiling and can spill into criminal liability. The lesson is that there is no cheap corner to cut: the least serious omission still costs AED 50,000, and the most serious can end a business.
Administrative vs Criminal AML Penalties
Understanding the difference between the two penalty layers matters because they involve different processes, defences and consequences. Administrative penalties are imposed by supervisors, the Ministry of Economy for most DNFBPs and the Central Bank for financial institutions, when a compliance obligation is breached. They do not require proof that any money was actually laundered; the failure to have the required controls is itself the violation. A business can be fined AED 50,000 for never registering on goAML even if no illicit transaction ever passed through it.
Criminal penalties are different. They arise under Article 26 of the AML law when the offence of money laundering, or a related offence such as terrorist financing, is actually committed. Here the consequences are far heavier: imprisonment of one to ten years and fines of AED 100,000 to AED 5,000,000 for individuals, with aggravated penalties in serious cases. Legal persons, meaning companies, can also face substantial fines and other measures where their conduct or failures enable an offence.
For most legitimate businesses the realistic exposure is administrative, and it is entirely preventable. The danger arises when administrative failures, no due diligence, no monitoring, no reporting, allow a genuine laundering scheme to pass through the business unnoticed. At that point the same gaps that would have drawn an administrative fine can help expose the business and its officers to criminal investigation. This is precisely why a nominal, box-ticking approach to AML is so risky: it offers none of the protection that a real programme provides against the far graver criminal layer.
Who Enforces AML Fines in the UAE
Enforcement is shared across supervisors according to the type of business, and knowing who watches you clarifies what to expect. The Central Bank of the UAE (CBUAE) supervises and fines financial institutions: banks, exchange houses, finance companies, insurers and payment-service providers. Its penalties on this sector have at times reached the tens of millions of dirhams, reflecting the scale and risk of the institutions involved.
The Ministry of Economy is the national supervisor for most Designated Non-Financial Businesses and Professions, including real estate brokers, dealers in precious metals and stones, corporate service providers and auditors. It runs registration campaigns, risk-based inspections, themed reviews and annual questionnaires, and it imposes administrative fines from the unified list on firms that fall short. Independent legal professionals are supervised through the relevant justice authorities, and firms in the financial free zones answer to their own regulators, such as the ADGM's authority, which apply equivalent AML standards.
Above the supervisors, the Ministry of Finance coordinates national AML policy and the UAE's engagement with the Financial Action Task Force, while the Financial Intelligence Unit receives and analyses the reports that businesses file through goAML. For a founder, the practical point is that there is always a supervisor with the mandate and the tools to inspect and penalise your business. Whether you are a mainland firm under a DED or DET licence, a free zone company in DMCC or IFZA, or a financial institution, an authority is empowered to check your AML compliance and to fine you if it is missing.
Real AML Enforcement Cases and Fine Amounts
Enforcement in the UAE is not theoretical, and looking at the pattern of real action makes the risk concrete. The Ministry of Economy has run enforcement drives against DNFBPs, particularly in the real estate and precious-metals sectors, imposing administrative fines on firms that failed to register, appoint officers or maintain proper controls, and publicly reporting aggregate penalties running into the tens of millions of dirhams. These campaigns are deliberately visible, intended to move whole sectors toward compliance.
The Central Bank has taken even larger action against financial institutions, imposing fines measured in the tens of millions of dirhams on individual banks and exchange houses for AML control failures. While the headline numbers involve large institutions, the underlying failures, weak due diligence, poor monitoring, inadequate reporting, are the same failures a small business can commit, just at a different scale.
The important takeaway is that enforcement spans the whole spectrum, from a AED 50,000 fine on a small unregistered broker to multi-million-dirham penalties on major institutions. Supervisors have shown willingness to name penalised firms, and a published AML fine can be more damaging than the fine itself: banks review their exposure to named firms, counterparties reconsider relationships, and the reputational hit lingers. No business is too small to be fined, and none is too large to be named. The only reliable protection is genuine, evidenced compliance that leaves a supervisor nothing to penalise.
How to Stay Clear of AML Fines
Staying clear of AML fines is not complicated, but it is deliberate. The failures that draw penalties are a known list, so the defence is simply to close each one. Register on the goAML platform of the Financial Intelligence Unit and on the Automatic Reporting System for Sanctions Lists, and do it before you start trading in scope, not after a bank or supervisor asks. Appoint a competent, genuinely active compliance officer, whether internal or outsourced, and give them the authority and time to do the job.
Complete an enterprise-wide risk assessment that reflects your real customers and activities, and let it drive your controls. Perform customer due diligence on every customer, verify identities, identify beneficial owners, and escalate to enhanced due diligence for higher-risk relationships. Screen customers and counterparties against the UN and UAE sanctions lists and act at once on any match. Monitor transactions, and file suspicious transaction reports promptly and confidentially through goAML whenever suspicion arises.
Keep complete records for at least five years, train your staff so they recognise red flags, and respond to every supervisory questionnaire and inspection on time. Finally, review the whole programme annually and whenever your business changes. Each of these steps maps directly to a violation you would otherwise be exposed to, so a business that performs them all leaves no obvious gap for a fine. The cost of doing this, typically low tens of thousands of dirhams a year, is a fraction of a single AED 50,000 penalty, let alone the AED 5,000,000 ceiling.
AML Fines for Free Zone Businesses
Free zone founders sometimes believe their status shields them from AML fines. It does not. The AML law applies by activity across the entire UAE, so a real estate broker, gold trader, corporate service provider or auditor in a free zone owes the same duties and faces the same penalty ranges as a mainland firm. A DMCC-licensed precious-metals trader taking AED 55,000 or more in cash must register, verify and report exactly as a mainland dealer must.
What can differ is the supervisor. Most free zone DNFBPs fall under the Ministry of Economy's national supervision, while firms in the financial free zones such as ADGM answer to that zone's own regulator, which enforces equivalent standards. Some commercial free zones also play a supervisory or facilitating role for their licensees. The route to compliance may vary, but the substance, registration, due diligence, screening, reporting, records, does not.
The practical risk for free zone businesses is complacency born of the ease of setup. A quick, low-friction licence can create the impression that ongoing obligations are equally light, which is a costly misreading. Banks are acutely aware of this and scrutinise free zone applicants' AML posture closely, which is one reason free zone companies sometimes struggle to open accounts. Building proper AML compliance from day one is therefore not only about avoiding fines; it is about being bankable and credible as a UAE business, wherever you are licensed.
How AML Fines Connect to Tax and Banking
AML compliance does not sit in isolation, and understanding how it links to your tax and banking obligations helps you avoid fines by seeing the whole board. Banks in the UAE operate their own AML controls under Central Bank supervision, and they extend those controls to their customers. When a bank onboards or reviews a business, it effectively runs a mini AML inspection: it wants to see your trade licence, your ownership structure, your source of funds, and increasingly your own AML registration and posture. A business with weak AML compliance is harder to bank, and a business that has been fined is at risk of losing its account.
Tax is the other connected pillar. Since the introduction of corporate tax, the Federal Tax Authority has expected businesses to maintain proper books, substance and beneficial-ownership clarity, the very same information that underpins AML compliance. A business that keeps clean, verifiable records for AML purposes is usually also well positioned for its corporate tax filing, and vice versa. Conversely, opacity that draws AML scrutiny often signals tax and substance problems too.
The practical implication is that these obligations are best built together, not in silos. The customer due diligence you perform for AML, the beneficial-ownership records you maintain, the transaction records you keep for five years, and the books you keep for tax all draw on the same underlying discipline of knowing your business and documenting it. A founder who builds that discipline once satisfies supervisors, banks and the tax authority simultaneously. A founder who neglects it invites problems on all three fronts at once, which is how a single weakness can cascade into an AML fine, a banking freeze and a tax query in the same quarter.
The True Cost of an AML Fine Beyond the Penalty
Founders who weigh AML compliance against the headline fine underestimate the real cost, because the penalty is only the first consequence. The most immediate secondary effect is banking. UAE banks monitor enforcement actions and treat a fined counterparty as elevated risk. A published AML penalty can trigger an account review, a request for fresh documentation, restrictions on transactions, or in serious cases the closure of the account. For a business that depends on a corporate account to pay staff and suppliers, that is far more disruptive than the fine itself.
The second effect is licensing. Supervisors can pair a fine with a suspension of activity or, for repeated or severe failures, a recommendation to withdraw the licence entirely. A business that cannot trade legally while it remedies its compliance is losing revenue every day, on top of the penalty and the cost of the fix. The third effect is reputational. Where a supervisor names a penalised firm, that name travels: counterparties reconsider deals, partners ask questions, and prospective clients in sensitive sectors such as real estate quietly move to competitors with clean records.
The fourth effect is personal. AML duties attach to named individuals, particularly the compliance officer and senior management, and serious failures can expose them personally, including to criminal investigation where a genuine offence passed through the business. Finally there is the remediation cost: fixing a failed programme under supervisory deadline pressure is invariably more expensive and stressful than building it properly at the outset. Add these together and a single AED 50,000 administrative fine can represent a fraction of the total damage. This is why treating AML as a genuine operational system, rather than a cost to minimise, is the rational commercial choice.
Building an Inspection-Ready Compliance File
The single best protection against an AML fine is a compliance file that answers a supervisor's questions before they are asked. Inspections follow a predictable pattern: the supervisor confirms your registration, checks that your compliance officer is real and active, reviews your risk assessment, samples your customer due diligence, tests your sanctions screening, and looks for evidence of training and reporting. A business that can produce clean, dated evidence for each of these turns an inspection into a formality.
Practically, an inspection-ready file contains your goAML and sanctions-system registration confirmations, your officer's appointment letter and credentials, and your current enterprise risk assessment with its review dates. It contains your written AML policies and procedures, and, for a sample of customers, the identification documents, verification records, beneficial-ownership analysis and risk ratings that show due diligence was actually performed. It contains your sanctions-screening records, including how you handled any potential matches, and your training logs showing who was trained and when. Where you have filed reports, it records that they were filed, without disclosing their content inappropriately.
The discipline that makes this work is contemporaneous record-keeping: capturing the evidence at the moment you do the work, not reconstructing it under pressure when an inspection is announced. A reconstructed file is easy for an experienced inspector to spot and undermines confidence in everything else. Keeping the file current also protects the business during the other moment it matters most, opening or maintaining a bank account, because banks increasingly ask for the same evidence. A business that maintains one clean compliance file satisfies both its supervisor and its bank, and in doing so removes the single most common path to an AML fine.
Common Mistakes That Lead to AML Fines
- Ignoring AML duties because the business is small or new, when the AED 50,000 minimum fine applies regardless of size.
- Registering on goAML but skipping the sanctions-list system, leaving a visible gap supervisors treat as a separate violation.
- Appointing a compliance officer in name only, with no risk assessment, screening or filed reports to prove the role functions.
- Relying on a generic, downloaded AML policy that does not reflect your actual customers, products and geographies.
- Failing to establish source of funds on large cash deals in real estate or precious metals, a classic trigger for enforcement.
- Missing sanctions-screening matches or handling them slowly, which pushes penalties toward the AED 5,000,000 ceiling and criminal risk.
- Discarding records before the five-year period ends, making it impossible to evidence compliance during an inspection.
- Ignoring the Ministry of Economy's questionnaires and inspection requests, each of which is itself a finable breach.
Stay Clear of AML Fines with Noble Core
The pattern behind almost every AML fine is the same: a known obligation left unmet until a supervisor or bank found the gap. Noble Core closes those gaps before they cost you. We assess whether your business is in scope, register you on goAML and the sanctions system, appoint or support your compliance officer, and build the risk assessment, policies, screening and training that supervisors expect, then keep the file inspection-ready.
Because AML sits inside your broader compliance picture, we handle it as part of your business setup in Dubai rather than as a bolt-on. We align it with the detailed AML compliance costs, deadlines and penalties every small business must plan for, your corporate tax obligations with the Federal Tax Authority, and your corporate bank account opening, where a clean AML posture is now decisive. You can confirm tax duties directly with the Federal Tax Authority and check DNFBP supervision through the Ministry of Economy.
A fine is not bad luck; it is an unmanaged, known risk. Book a free 20-minute consultation and we will pressure-test your current position and show you exactly what it takes to stay permanently clear of AML penalties.
Talk to Our Experts
Noble Core builds the AML programme, registration, screening and records that keep your business clear of fines, and fixes gaps before a supervisor finds them. Free 20-minute consultation.
Frequently Asked Questions
How much are AML fines in the UAE?
Administrative AML fines range from AED 50,000 to AED 5,000,000 per violation under Cabinet Decision No. 16 of 2021. Criminal money-laundering fines reach AED 100,000 to AED 5,000,000.
What law sets AML fines in the UAE?
Federal Decree-Law No. 20 of 2018 sets the AML framework, Cabinet Decision No. 10 of 2019 the regulations, and Cabinet Decision No. 16 of 2021 the unified list of fines.
Who imposes AML fines in the UAE?
The Central Bank imposes fines on financial institutions, while the Ministry of Economy fines most DNFBPs. Financial free zones such as ADGM fine firms licensed there.
What triggers an AML fine?
Failing to register on goAML, not appointing a compliance officer, weak customer due diligence, missing sanctions screening, or failing to file suspicious transaction reports are common triggers.
Can a small business be fined for AML breaches?
Yes. AML duties apply by activity, not size. A small real estate broker or gold dealer faces the same AED 50,000 minimum administrative fine as a larger firm.
Is money laundering a criminal offence in the UAE?
Yes. Under Article 26 of the AML law it carries one to ten years’ imprisonment and fines of AED 100,000 to AED 5,000,000, alongside administrative penalties.
Are AML fines published in the UAE?
Supervisors may publicly name penalised firms and have announced tens of millions of dirhams in aggregate AML fines, which can trigger bank reviews and reputational damage.
How can I avoid AML fines?
Register on goAML, appoint a real compliance officer, run customer due diligence, screen sanctions lists, report suspicions, keep five-year records and pass supervisory inspections.
Do AML fines apply in free zones?
Yes. Free zone businesses in scope owe the same AML duties. Supervisors, whether the Ministry of Economy or a free zone regulator, can impose the same penalty ranges.
