AML Inspection Checklist in the UAE

Anti-money laundering enforcement in the UAE is no longer a background compliance exercise — it is a board-level operational risk. Following the introduction of Federal Decree-Law No. 10 of 2025 and its supporting Cabinet Resolution No. 134 of 2025, supervisory authorities have sharply increased inspection frequency, widened the scope of what they review, and raised penalties for gaps in AML frameworks.

For real estate brokers, dealers in precious metals and stones, accountants and auditors, corporate service providers, and other regulated businesses, this means one thing: an inspection notice can arrive at any time, and how you respond in that window determines the outcome. This article walks through what a typical AML inspection looks like in the UAE, and where a compliance advisory firm can genuinely change the outcome.

Who conducts AML inspections

Depending on your sector and license type, oversight sits with different bodies:

1.Ministry of Economy and Tourism (MoET) — the primary supervisor for most Designated Non-Financial Businesses and Professions (DNFBPs) on the mainland and in commercial free zones
2. Central Bank of the UAE (CBUAE) — for banks and licensed financial institutions
3. Ministry of Justice (MoJ) — for lawyers, notaries, and independent legal professionals
4. DFSA and FSRA — for entities licensed in DIFC and ADGM respectively
5. Certain commercial free zone authorities — which may run their own supervisory processes alongside federal oversight.

Regardless of which authority applies to your license, the inspection mechanics tend to follow a similar pattern.

What actually happens during an inspection

1. The notification

In most cases, the regulator issues a formal notice roughly one week before the inspection, accompanied by a detailed list of the information and documentation required. Importantly, the request is rarely limited to the current state of your compliance program — authorities typically ask for records covering the preceding two years, meaning gaps from months or years ago can resurface even if your current practices have improved.

2. The documentation request

The requirement letter is usually extensive. Common items include:

Refer the table shared below

Category	Typical Requirement
Governance	Appointed Compliance Officer/MLRO details, appointment letters, reporting lines
Policies	Board-approved AML/CFT policy and procedures manual, tailored to your actual business activity
Registration	Proof of registration on the goAML platform and evidence of active use
Internal audit	AML internal audit reports and evidence that findings were remediated
Financial Audit	Audited financial statements for the relevant period
Risk assessment	Business-wide (institutional) risk assessment, updated and reflecting current activity
Screening	Sanctions and PEP screening logs, evidence of ongoing monitoring
Due diligence	Sample CDD/EDD files, UBO records, source-of-funds documentation
Training	Staff AML training records, attendance logs, and training content
Reporting	STR/SAR filing history and internal escalation records

A generic, off-the-shelf policy document is a common red flag during review — inspectors expect your paperwork to reflect what your business actually does, not a template downloaded and lightly edited.

3. The walkthrough and interview

Beyond the paper trail, the inspecting officer will typically sit with your Compliance Officer (and often senior management) to walk through your actual process end-to-end: how a new client is onboarded, how risk ratings are assigned, how screening alerts are investigated and closed, how an STR would be raised internally, and how the business demonstrates ongoing monitoring rather than a one-time check at onboarding.

This is where many businesses struggle — not because their policy document is wrong, but because the people executing it can't consistently explain or evidence how it operates day to day.

Why one week is rarely enough

A one-week window is workable if your AML framework has been maintained continuously. It is not workable if:

Your risk assessment hasn't been updated since it was first drafted
Training records are incomplete or undocumented
Your internal audit was never actually performed, or findings were never closed out
CDD files are inconsistent across clients or missing source-of-funds evidence
Your policy document doesn't match how the business currently operates

Reconstructing two years of records, closing audit gaps, and preparing your team to speak confidently to a regulator — all within a week — is where most of the real risk sits. By the time the notice arrives, the window for meaningful remediation has already closed.

How we can help

As an advisory firm, our role is to make sure the notice, when it comes, is a formality rather than a scramble. We support clients across:

Document preparation — building or refreshing your AML policy, risk assessment, and procedures so they reflect your actual operations
Inspection readiness reviews — a structured pre-inspection audit that surfaces gaps while there's still time to fix them
CDD/EDD file remediation — reviewing and correcting client files against current regulatory expectations
Training — preparing your Compliance Officer and staff to walk an inspector through your process with confidence
Ongoing compliance support — so readiness isn't a one-off scramble before each inspection, but a standing state of the business

The bottom line

AML inspections in the UAE are becoming more frequent, more detailed, and less forgiving. The businesses that pass smoothly are consistently the ones that treated compliance as a continuous discipline rather than a reaction to a notice letter.

Don't wait for the notice to arrive. Initiate your readiness review now, so you're not scrambling to become compliant in a week that was never designed to be enough.

Connect with us today to schedule your AML inspection-readiness review.

Services

Abu Dhabi

Dubai

Sharjah