UAE compliance guide
CBUAE AML and KYC requirements for licensed financial institutions
An overview of what the Central Bank of the UAE expects from banks, exchange houses, finance companies and payment firms on customer due diligence and AML controls.
Short answer
The Central Bank of the UAE (CBUAE) requires the institutions it licenses to apply a risk-based AML/CFT program: identify and verify customers, screen them, rate their risk, apply enhanced due diligence where needed, monitor activity and report suspicion to the UAE FIU through goAML.
Last reviewed by the ITSEC compliance team. General information, not legal advice.
Who does the CBUAE supervise for AML?
Banks, exchange houses, finance companies, insurance firms and payment service providers licensed by the CBUAE.
What is a risk-based approach?
Controls are scaled to risk: lower-risk customers may receive simplified checks where permitted, and higher-risk customers receive enhanced due diligence and senior approval.
Frequently asked questions
- Where does the CBUAE publish its AML guidance?
- On the CBUAE website and its rulebook. Always use the current published version as the source of truth.
- How are suspicious transactions reported?
- Through goAML, the UAE Financial Intelligence Unit's reporting platform.
Official sources
Related on VerifiX
See VerifiX on your own onboarding flow
A 30-minute walkthrough with a compliance engineer, or a request for sandbox access.