--- title: "United Arab Emirates (AE) — Financial-Integrity Intelligence · Sentinel" canonical: https://sentinel.gi/jurisdictions/united-arab-emirates/ source_html: /jurisdictions/united-arab-emirates/index.html description: "Financial integrity intelligence for United Arab Emirates (AE): sanctions, beneficial ownership, enabler jurisdictions, conflict finance, digital assets and compliance technology — with sourced findings." generated_at: 2026-11-08T04:46:02Z content_sha256: b99c956f3d2b5495a06cdbefbbe496a08578f66d6f50b56ce6850f706932ade5 generator: "fe-fleet/md-twin@1.0" --- # United Arab Emirates (AE) — Financial-Integrity Intelligence · Sentinel Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved. Financial Integrity Monitor # United Arab Emirates AE Domains covered 8 of 8 Sources 204 Role actions 8 Horizon <90d 0 Jurisdiction profile FATF status: Clean Tier: A Risk direction: Stable Enablement vs enforcement: Mixed UAE operates under Federal Decree-Law No. More 20 of 2018 (as amended) on AML/CFT, a federal FIU (goAML-based), and a layered crypto regime (CBUAE, SCA, VARA, DFSA, FSRA). Delisted from FATF grey list (Feb 2024) and EU high-risk AML list (Jun 2025) after action-plan remediation, but fragmented free-zone supervision (7 emirates, 2 financial free zones, ~39 commercial free zones/registries) and weak BO transparency persist structurally. Key deficiencies - Fragmented supervision across 7 emirates, 2 financial free zones and dozens of commercial free zones enabling regulatory arbitrage - Low beneficial-ownership transparency in free-zone company registries despite 2021 UBO penalty regime - Historically low ML prosecution/conviction volume relative to the jurisdiction's scale as a trade, gold and real-estate hub - Real-estate sector (particularly Dubai) remains a documented channel for opaque foreign wealth, including sanctioned and criminal actors Recent developments (18m) - EU Commission delisted UAE from its AML high-risk third-country list via Delegated Regulation (EU) 2025/1184 (10 June 2025), narrowly surviving a European Parliament objection vote - OFAC designated an Iranian shadow-banking/crypto sanctions-evasion network operating through UAE and Hong Kong front companies (16 September 2025) - EU 19th Russia sanctions package (23 October 2025) imposed a transaction ban on UAE-based oil trading companies and banks circumventing sanctions - VARA released Rulebook v2.0 (May 2025) with a 19 June 2025 compliance deadline, and continued civil enforcement (cease-and-desist orders) against unlicensed virtual asset operators - UAE regulators (CBUAE and insurance supervisors) imposed fines on multiple exchange houses and insurance brokers for AML/CTF compliance failures during 2025 - CBUAE's Payment Token Services Regulation (PTSR) entered full effect mid-2025, restricting domestic stablecoin payments to licensed AED-backed tokens Brief ## Lead signal #### Lead Signal The Central Bank of the UAE has imposed its largest single institutional anti-money-laundering fine of the year, levying AED 200,000,000 on a foreign bank branch for repeated failures across AML/CFT controls, governance and sanctions-screening frameworks. The order, dated 30 October 2026, extends beyond the institution itself: the branch's Chief Executive Officer was personally fined AED 500,000 and the Head of Compliance AED 300,000, alongside a mandatory remediation programme and a fit-and-proper reassessment of both individuals. The action followed within roughly two months of a 28 August 2026 US Treasury move severing correspondent-banking access for the same institution after it was found to have processed approximately 1.8 billion dollars for 103 companies under Operation Economic Outcast scrutiny of Iran-related sanctions evasion. Read together, the sequence shows a foreign US secondary-sanctions action against a UAE-domiciled entity followed by a domestic supervisory enforcement response addressing the underlying control weaknesses. This is an architecture point rather than an isolated incident: it signals that UAE domestic supervision is now following, and reinforcing, US-driven secondary-sanctions pressure on institutions operating in the jurisdiction, with personal accountability for senior compliance and executive officers built into the domestic response. Read full brief #### Lead Signal The Central Bank of the UAE has imposed its largest single institutional anti-money-laundering fine of the year, levying AED 200,000,000 on a foreign bank branch for repeated failures across AML/CFT controls, governance and sanctions-screening frameworks. The order, dated 30 October 2026, extends beyond the institution itself: the branch's Chief Executive Officer was personally fined AED 500,000 and the Head of Compliance AED 300,000, alongside a mandatory remediation programme and a fit-and-proper reassessment of both individuals. The action followed within roughly two months of a 28 August 2026 US Treasury move severing correspondent-banking access for the same institution after it was found to have processed approximately 1.8 billion dollars for 103 companies under Operation Economic Outcast scrutiny of Iran-related sanctions evasion. Read together, the sequence shows a foreign US secondary-sanctions action against a UAE-domiciled entity followed by a domestic supervisory enforcement response addressing the underlying control weaknesses. This is an architecture point rather than an isolated incident: it signals that UAE domestic supervision is now following, and reinforcing, US-driven secondary-sanctions pressure on institutions operating in the jurisdiction, with personal accountability for senior compliance and executive officers built into the domestic response. The personal-liability dimension of the fine is itself a structural marker. Naming both the CEO and the Head of Compliance individually, rather than confining the penalty to the institution, indicates a supervisory posture willing to attach consequences to individual officers for sanctions-control and governance failures, which raises the stakes for compliance leadership at foreign bank branches operating in the UAE more broadly. #### Other Developments Continued US secondary-sanctions designations against UAE-linked shipping. Between 13 and 21 October 2026, the US Treasury's Office of Foreign Assets Control added further UAE-connected entries to the Specially Designated Nationals list, including two UAE-flagged crew and supply vessels, Whales Diamond and Whales Pearl, linked to Whales Shipping Line LLC, designated under Executive Order 13902. This extends the pattern established by the August correspondent-access action and confirms that US authorities continue to treat UAE-flagged vessels and UAE-domiciled banking relationships as a recurring node in Iran-related sanctions-evasion typologies. No EU or UK listing action mirrored these October designations this cycle, underscoring a continuing divergence between US unilateral secondary-sanctions activity and the listing posture of other major sanctions regimes toward the same UAE-linked exposure. Virtual asset supervisor tightens public-disclosure expectations. The Virtual Assets Regulatory Authority issued a circular on 28 October 2026 setting out good practices for virtual asset service providers' public disclosures. This follows an earlier circular addressing reserve-audit scope issued on 6 October 2026, and together the two indicate a continuing supervisory direction toward tighter disclosure and reserve-audit expectations for licensed virtual asset operators in the jurisdiction, rather than a one-off measure. FATF Plenary outcome leaves the jurisdiction's standing unchanged. The Financial Action Task Force concluded its October 2026 Plenary in Paris on 30 October 2026, removing the Democratic Republic of Congo, Monaco, Bulgaria and Cote d'Ivoire from increased monitoring. The jurisdiction covered by this brief was not affected by the Plenary outcome and remains off increased monitoring, a status it has held since February 2024. The practical implication for regulated entities is that enterprise-wide risk assessments incorporating geographic-risk inputs are expected to be refreshed to reflect the revised list composition, even though the jurisdiction's own classification did not change. #### Cross-Monitor Connections The sequence linking a US correspondent-banking severance to a subsequent domestic enforcement fine illustrates how sanctions architecture and AML supervisory regimes interact in practice: a foreign secondary-sanctions action targeting a specific banking relationship can precede, and plausibly inform, a domestic supervisor's own enforcement timeline against the same institution. This pattern is of direct relevance to monitors tracking state-level capture of financial infrastructure and to conflict-finance tracking lines, since Iran-related sanctions-evasion typologies and trade-finance flows through UAE-domiciled banking relationships sit at the intersection of sanctions enforcement and the broader illicit-finance architecture those other monitors follow. The continuing tightening of virtual asset disclosure expectations also bears on any parallel tracking of crypto-infrastructure exposure, since reserve-audit and public-disclosure requirements shape the transparency available to counterparties assessing virtual asset service providers domiciled in the jurisdiction. #### Outlook The near-term picture is one of continued, not diminishing, enforcement intensity. US Treasury action under Operation Economic Outcast has shown a recurring cadence of designations through October 2026 touching UAE-flagged vessels and UAE-domiciled banking relationships, and the domestic fine imposed at the end of October suggests UAE supervisory authorities are prepared to follow such actions with their own control-failure findings and personal accountability measures. Regulated entities should expect enterprise-wide risk assessments to require updating in light of the FATF Plenary outcome even though the jurisdiction's own status is unaffected, and virtual asset service providers should expect disclosure and reserve-audit expectations to continue tightening incrementally rather than through a single comprehensive rulemaking. As scheduled, a fifth round of FATF mutual evaluations is anticipated in the coming years, though no primary FATF document reviewed this cycle confirms specific timing; the general expectation of renewed evaluation scrutiny is a multi-year horizon item rather than an immediate one. Earlier periodic briefs (8) 4 Nov 2026 · fim-2026-11-01 #### Lead Signal The Central Bank of the UAE has imposed its largest single institutional anti-money-laundering fine of the year, levying AED 200,000,000 on a foreign bank branch for repeated failures across AML/CFT controls, governance and sanctions-screening frameworks. The order, dated 30 October 2026, extends beyond the institution itself: the branch's Chief Executive Officer was personally fined AED 500,000 and the Head of Compliance AED 300,000, alongside a mandatory remediation programme and a fit-and-proper reassessment of both individuals. The action followed within roughly two months of a 28 August 2026 US Treasury move severing correspondent-banking access for the same institution after it was found to have processed approximately 1.8 billion dollars for 103 companies under Operation Economic Outcast scrutiny of Iran-related sanctions evasion. Read together, the sequence shows a foreign US secondary-sanctions action against a UAE-domiciled entity followed by a domestic supervisory enforcement response addressing the underlying control weaknesses. This is an architecture point rather than an isolated incident: it signals that UAE domestic supervision is now following, and reinforcing, US-driven secondary-sanctions pressure on institutions operating in the jurisdiction, with personal accountability for senior compliance and executive officers built into the domestic response. The personal-liability dimension of the fine is itself a structural marker. Naming both the CEO and the Head of Compliance individually, rather than confining the penalty to the institution, indicates a supervisory posture willing to attach consequences to individual officers for sanctions-control and governance failures, which raises the stakes for compliance leadership at foreign bank branches operating in the UAE more broadly. #### Other Developments Continued US secondary-sanctions designations against UAE-linked shipping. Between 13 and 21 October 2026, the US Treasury's Office of Foreign Assets Control added further UAE-connected entries to the Specially Designated Nationals list, including two UAE-flagged crew and supply vessels, Whales Diamond and Whales Pearl, linked to Whales Shipping Line LLC, designated under Executive Order 13902. This extends the pattern established by the August correspondent-access action and confirms that US authorities continue to treat UAE-flagged vessels and UAE-domiciled banking relationships as a recurring node in Iran-related sanctions-evasion typologies. No EU or UK listing action mirrored these October designations, underscoring a continuing divergence between US unilateral secondary-sanctions activity and the listing posture of other major sanctions regimes toward the same UAE-linked exposure. Virtual asset supervisor tightens public-disclosure expectations. The Virtual Assets Regulatory Authority issued a circular on 28 October 2026 setting out good practices for virtual asset service providers' public disclosures. This follows an earlier circular addressing reserve-audit scope issued on 6 October 2026, and together the two indicate a continuing supervisory direction toward tighter disclosure and reserve-audit expectations for licensed virtual asset operators in the jurisdiction, rather than a one-off measure. FATF Plenary outcome leaves the jurisdiction's standing unchanged. The Financial Action Task Force concluded its October 2026 Plenary in Paris on 30 October 2026, removing the Democratic Republic of Congo, Monaco, Bulgaria and Cote d'Ivoire from increased monitoring. The jurisdiction covered by this brief was not affected by the Plenary outcome and remains off increased monitoring, a status it has held since February 2024. The practical implication for regulated entities is that enterprise-wide risk assessments incorporating geographic-risk inputs are expected to be refreshed to reflect the revised list composition, even though the jurisdiction's own classification did not change. #### Cross-Monitor Connections The sequence linking a US correspondent-banking severance to a subsequent domestic enforcement fine illustrates how sanctions architecture and AML supervisory regimes interact in practice: a foreign secondary-sanctions action targeting a specific banking relationship can precede, and plausibly inform, a domestic supervisor's own enforcement timeline against the same institution. This pattern is of direct relevance to monitors tracking state-level capture of financial infrastructure and to conflict-finance tracking lines, since Iran-related sanctions-evasion typologies and trade-finance flows through UAE-domiciled banking relationships sit at the intersection of sanctions enforcement and the broader illicit-finance architecture those other monitors follow. The continuing tightening of virtual asset disclosure expectations also bears on any parallel tracking of crypto-infrastructure exposure, since reserve-audit and public-disclosure requirements shape the transparency available to counterparties assessing virtual asset service providers domiciled in the jurisdiction. #### Outlook The near-term picture is one of continued, not diminishing, enforcement intensity. US Treasury action under Operation Economic Outcast has shown a recurring cadence of designations through October 2026 touching UAE-flagged vessels and UAE-domiciled banking relationships, and the domestic fine imposed at the end of October suggests UAE supervisory authorities are prepared to follow such actions with their own control-failure findings and personal accountability measures. Regulated entities should expect enterprise-wide risk assessments to require updating in light of the FATF Plenary outcome even though the jurisdiction's own status is unaffected, and virtual asset service providers should expect disclosure and reserve-audit expectations to continue tightening incrementally rather than through a single comprehensive rulemaking. As scheduled, a fifth round of FATF mutual evaluations is anticipated in the coming years, though no primary FATF document reviewed confirms specific timing; the general expectation of renewed evaluation scrutiny is a multi-year horizon item rather than an immediate one. 3 Nov 2026 · fim-2026-11-02 #### Lead Signal The United Arab Emirates enforcement picture is dominated by the Central Bank of the UAE's AED 200,000,000 fine against a foreign bank branch licensed in the country, imposed for repeated breaches of anti-money-laundering and countering-the-financing-of-terrorism controls, governance failures, and sanctions-control gaps. Alongside the institutional penalty, the CBUAE separately penalised the chief executive officer 500,000 and the head of compliance, and ordered a mandatory remediation programme together with a fit-and-proper reassessment of both the chief executive and the chief compliance officer. The timing is analytically significant: this is the largest CBUAE institutional AML fine of the year, and it follows the US Treasury's earlier severance of correspondent-banking access connected to the same institution under Operation Economic Outcast. Read together, the sequence reads less as an independent supervisory discovery and more as a domestic enforcement response catalysed by external sanctions pressure -- a pattern that is itself a structural finding about how enforcement authority is distributed between the UAE's domestic regulator and the extraterritorial reach of US sanctions administration. That same external-pressure architecture is visible in the sanctions domain proper. The US Office of Foreign Assets Control added two UAE-flagged crew and supply vessels, Whales Diamond and Whales Pearl, tied to Whales Shipping Line LLC, to the Specially Designated Nationals list on 21 October 2026 under Executive Order 13902, continuing the Operation Economic Outcast designation track against UAE-connected shipping and financial nodes. The designation sits alongside an earlier Treasury estimate that a UAE-domiciled bank processed approximately 1.8 billion for 103 companies under scrutiny -- a figure that illustrates the scale of the correspondent and trade-finance exposure Washington is targeting through the UAE as a transit and settlement point, independent of any UAE domestic finding. #### Other Developments Digital-asset supervisory tightening continues. The Virtual Assets Regulatory Authority issued a circular on good practices for virtual-asset service providers' public disclosures, dated 28 October 2026. The binding status of the circular -- whether it operates as a hard rule or as supervisory guidance -- has not yet been confirmed, and the finding is accordingly carried as probable rather than confirmed. The circular nonetheless continues a visible pattern of VARA incrementally raising disclosure expectations for licensed virtual-asset service providers operating in or from the Emirates. FATF Plenary outcome leaves the UAE's position unchanged. The FATF concluded its October 2026 Plenary in Paris on 30 October 2026, removing the Democratic Republic of the Congo, Monaco, Bulgaria and Cote d'Ivoire from the increased-monitoring list. The UAE itself was unaffected by this round: it has not appeared on the FATF increased-monitoring list since February 2024. The Plenary outcome is nonetheless relevant as a routine driver of enterprise-wide risk-assessment refreshes across UAE-exposed institutions, and as a reminder that FATF increased-monitoring status is a distinct designation track from the UN, EU, UK and US sanctions regimes discussed above -- divergence between these tracks remains a standing feature of the UAE's risk profile. Supervisory gap closed through enforcement rather than prevention. The enabler-jurisdiction reading of the foreign-bank-branch fine is that it evidences a supervisory gap being addressed reactively, through a large institutional penalty and mandated remediation, rather than through ex ante controls that would have prevented the underlying conduct from accumulating to the point of a 200 million fine. This is a structural observation about supervisory sequencing, not a comment on the adequacy of the penalty itself. #### Cross-Monitor Connections The correspondent-banking severance that preceded the CBUAE fine is the clearest cross-monitor linkage: the same underlying facts -- a foreign bank branch's loss of US correspondent access followed by domestic enforcement -- are read through a payments-infrastructure lens elsewhere in this product set, where the emphasis falls on settlement-access risk for foreign bank branches operating in the UAE rather than on the AML/CFT control failures themselves. The vessel designations under Operation Economic Outcast also carry a conflict-finance and extractive-trade dimension insofar as UAE-flagged shipping assets are implicated in sanctions-evasion shipping networks, though the register reached does not extend to tracing the underlying cargo or trade flows. No state-capture or information-operations connections are supported by the evidence reaching. #### Outlook The near-term picture for the UAE is one of continuing divergence between an external, US-led sanctions and correspondent-access pressure track and a domestic supervisory track that is now visibly responding to that pressure through enforcement. A fifth round of FATF mutual evaluations is anticipated, with general industry expectation of intensifying scrutiny in the run-up, though no primary FATF document reached confirms timing, and this should be read as a directional expectation rather than a scheduled event -- it is tracked here as scheduled with the year of the development, 2027, left explicit rather than asserted with confidence. VARA's incremental tightening of disclosure expectations for virtual-asset service providers is likely to continue, with the binding status of the most recent circular an open question. The coverage gap on Yemen/Houthi-linked designation channels, and the absence of a dedicated sweep for other high-exposure jurisdictions, mean that the current picture of UAE sanctions exposure should be treated as partial rather than complete. 18 Oct 2026 · fim-2026-10-18 #### Lead Signal The United Arab Emirates sits this cycle at the intersection of two durable but differently-directed tracks. On one track, OFAC continued a high-tempo campaign of designations under Operation Economic Outcast, naming ArabianPro Materials FZCO, Hessonite, and Horizon Ship Management FZE between 1 and 8 October 2026 as facilitators of Iranian sanctions evasion, with a parallel batch of designations against Traco International FZE, Silver Line Metal Trading LLC, and Integrated Auto Parts LLC for automotive-sector involvement dated 1 October 2026. On the other track, the UAE's licensing authorities kept widening the regulatory perimeter around digital assets: the Virtual Assets Regulatory Authority granted Payward FZCO, the UAE entity of Kraken, Full Market Approval as a licensed virtual asset service provider, with a register entry dated 6 October 2026 and the approval itself announced 12 October 2026, while Standard Chartered's DIFC branch, regulated by the DFSA, began live institutional custody of Ripple's RLUSD stablecoin the same day. Read together, these are not contradictory signals so much as two faces of the same structural condition: a jurisdiction whose free-zone corporate architecture and liberal financial licensing regime make it simultaneously attractive to global institutional entrants and recurrently useful to sanctions-evasion networks routing through UAE-incorporated vehicles. The repetition of UAE-registered free-zone entities and ship-management structures across successive OFAC action batches is the more analytically significant half of this pairing. It is not a single enforcement incident but the latest instance of a pattern that persists despite the UAE's own removal from the FATF grey list in February 2024, underscoring that exit from increased monitoring does not resolve the underlying structural exposure created by free-zone opacity and flag-of-convenience shipping arrangements. #### Other Developments VARA licensing of a major global exchange proceeded alongside continued build-out of the UAE's crypto licensing perimeter, with Payward FZCO's Full Market Approval permitting AED-denominated spot and margin trading. The approval was reported via secondary press coverage of VARA's public register rather than confirmed directly against a primary VARA document this cycle, a sourcing gap recorded against the underlying claim. Institutional stablecoin custody entered the Dubai market through Standard Chartered's DFSA-regulated branch, which began custody of RLUSD on 12 October 2026, with a further collateral-mirroring arrangement with LMAX reported as planned but not yet live. The entry of a globally systemic bank into live stablecoin custody in the UAE is a structural development for the jurisdiction's digital-asset perimeter, distinct from and additive to VARA's exchange-licensing track. The FATF 5th round mutual evaluation of the UAE was reported in secondary commentary as carrying an on-site visit expected around mid-2026, though no primary FATF scheduling document was retrieved this cycle to confirm the timetable. This is recorded as an uncertain, lower-confidence horizon item pending primary-source confirmation. #### Cross-Monitor Connections The VARA and Standard Chartered developments carry a direct payments-infrastructure dimension: institutional custody of a USD-pegged stablecoin and a newly fully-approved exchange both expand the rails through which value can move into and out of the UAE's digital-asset perimeter, a matter for payments-system tracking of settlement and corridor dynamics in addition to financial-integrity typology concern. The sanctions-evasion designations, by contrast, implicate correspondent banking and trade-finance counterparty risk for any institution maintaining UAE-linked relationships, a natural cross-reference point for conflict-finance and trade-based money-laundering tracking elsewhere in the fleet. #### Outlook The near-term trajectory for the UAE combines continued US unilateral designation pressure against free-zone and shipping-sector entities with continued domestic licensing expansion for global crypto and banking entrants, a combination unlikely to resolve in either direction in the near term. Absent a primary-source confirmation of the FATF mutual evaluation timetable, the Recommendation-compliance picture for AE remains open through at least the period in which the on-site visit, if it proceeds as scheduled, would occur. 11 Oct 2026 · fim-2026-10-11 #### Lead Signal The United Arab Emirates' crypto and digital-asset perimeter absorbed a structural change this cycle as the Capital Market Authority's Decision No. 4/R.M/2026, issued 13 April 2026 and effective from February 2026, replaced the former Securities and Commodities Authority framework (SCA Decision No. 26 of 2023) in full. The new instrument establishes an eight-activity federal regime carrying its own dedicated AML/CFT module, and it now sits alongside the Virtual Assets Regulatory Authority's Dubai-specific regime and the Central Bank of the UAE's payment-token rules. The practical effect is a multi-regulator AML perimeter for virtual-asset activity in the UAE, in which an obliged entity dealing in digital assets may need to satisfy AML/CFT expectations set by more than one federal and emirate-level authority at once. This is an architecture-level development rather than a single enforcement episode, and it is probable rather than confirmed pending fuller primary-source verification of the Decision's text. Alongside this, the UAE continued to sit inside a steady cadence of US Treasury Office of Foreign Assets Control sanctions actions naming UAE-resident or UAE-registered entities on Iran-related grounds, most recently with designations dated 28 August, 8 September and 1 October 2026. These actions, directly sourced from OFAC's own published record, confirm continued US secondary-sanctions pressure on trading companies and an aviation-support firm operating out of Dubai and Sharjah, consistent with the UAE's recurring position as a transit point for Iranian-network financial activity. #### Other Developments CBUAE enforcement intensity remained elevated. On 24 June 2026 the Central Bank of the UAE fined a foreign bank branch AED 20,000,000 for repeated AML and sanctions-screening control failures, with a separate AED 300,000 personal fine imposed on the branch's money-laundering reporting officer. This discrete enforcement event, corroborated across multiple secondary outlets though not yet confirmed against a CBUAE primary release, sits against the backdrop of the UAE's Federal Decree-Law No. 10 of 2025, the core AML/CFT/counter-proliferation-financing statute that took effect on 14 October 2025, repealing the 2018 law and adding proliferation-financing, tax-evasion and virtual-asset provisions. One secondary source cites Cabinet Resolution No. 134 of 2025 as the Decree-Law's executive regulations, though this has not been verified against the UAE Official Gazette this cycle. FATF's fifth-round mutual evaluation of the UAE remains on the calendar. One source places the onsite assessment in June 2026, though no plenary outcome has been confirmed this cycle and the date has not been independently verified against a FATF primary publication. The continued elevated pace of CBUAE enforcement activity is consistent with assessment-posture management ahead of that evaluation. #### Cross-Monitor Connections The CMA's new virtual-asset AML module is directly relevant to the World Payments Monitor's tracking of the UAE's overlapping stablecoin and payment-token perimeter, where the same CMA Decision, alongside VARA and CBUAE payment-token rules, is understood to be reshaping market-access conditions for digital-asset firms. It is equally relevant to the Crypto Monitor's parallel finding that the UAE now has multiple concurrent crypto licensing regimes, since an AML module attached to a licensing framework changes the compliance burden for any entity seeking to operate across CMA, VARA, ADGM, DFSA and CBUAE perimeters simultaneously. The continued OFAC designation cadence against UAE-based entities is a standing input to any assessment of correspondent-banking de-risking pressure on UAE financial institutions, a theme that recurs across both the sanctions-architecture and payments-corridor readings of this jurisdiction. #### Outlook The near-term picture for the UAE is one of accumulating regulatory density rather than a single resolving event. The FATF fifth-round onsite, as scheduled for mid-2026, will test whether the post-2022 reform programme, including Federal Decree-Law No. 10 of 2025 and the CMA's new virtual-asset AML module, delivers measurable real-world effectiveness rather than formal compliance alone. Continued OFAC designation activity against UAE-resident entities should be read as a durable feature of the operating environment rather than an episodic spike, and the multi-regulator crypto AML perimeter created by the CMA Decision is likely to generate further implementation detail, and possibly further overlap or conflict between CMA, VARA and CBUAE requirements, as firms adjust to the post-transition regime. 4 Oct 2026 · fim-2026-10-04 #### Lead Signal The United Arab Emirates AML/CTF architecture remains anchored to Federal Decree-Law No. 10 of 2025, in force since 14 October 2025, which repealed Federal Decree-Law No. 20 of 2018 and now governs financial institutions, DNFBPs and VASPs under a single federal statute, paired with Cabinet Resolution No. 134 of 2025. The Financial Intelligence Unit holds a 10 working day power to order cessation of suspicious activity and a 30 day asset freeze pending referral. At the same time, external sanctions pressure on UAE-domiciled entities is intensifying independently of any domestic UAE regulatory step. On 24 August 2026 the US Office of Foreign Assets Control found Banque Misr's five UAE branches to be of primary money laundering concern under Section 311 of the USA PATRIOT Act, barring their access to US correspondent accounts, and on 4 September 2026 OFAC designated Turkiye-based Golden Global Bank for facilitating Iran access to international banking channels. The combination illustrates a now-familiar pattern in the UAE profile: a domestically reformed and FATF-exited AML regime sitting alongside sustained unilateral US secondary-sanctions activity targeting UAE-linked correspondent banking relationships. These two threads, the domestic statutory architecture and the external sanctions-enforcement track, are evaluated separately below because their trajectories are not driven by the same actor. The UAE Federal Decree-Law No. 10 of 2025 framework is a complete, in-force statute whose confidence currently rests on multiple independent T3 legal-commentary sources rather than a directly retrieved Official Gazette text, a gap that caps assessed confidence at Probable pending primary-source retrieval. The Section 311 action against Banque Misr is a unilateral US measure with no UAE regulatory counterpart action identified this cycle. #### Other Developments CBUAE enforcement against a foreign bank branch and its MLRO personally. The Central Bank of the UAE imposed an AED 20 million institutional fine and an AED 300,000 personal fine on the Head of Compliance and Money Laundering Reporting Officer of a foreign bank branch for repeated AML, CFT and sanctions-framework failures, dated 24 June 2026. The personal liability component is notable: it sits alongside the senior-management liability provisions reported in commentary on the 2025 AML law and signals continuity of a UAE enforcement posture that extends culpability beyond the institution itself to the individual holding the compliance function. CBUAE did not name the bank publicly in the reporting reviewed. FATF grey list movement with no direct UAE listing change. FATF's June 2026 plenary added Iraq and Bosnia and Herzegovina to, and removed Algeria and Namibia from, the grey list, taking the total to 22 jurisdictions. The UAE itself remains off the list, having exited in February 2024, and no direct UAE listing action occurred this cycle. The practical implication for UAE obliged entities is one of country-risk input refresh: enhanced due diligence and enterprise-wide risk-assessment inputs tied to counterparty jurisdictions on the grey list require updating to reflect the June 2026 composition change, and the UAE's own 5th Round mutual evaluation is anticipated later in 2026, which will test the effectiveness, not just the existence, of the post-2024 reform architecture. UAE terrorist-list designations under Cabinet Resolution No. 63 of 2026. The UAE Cabinet added 16 individuals and 5 entities to the UAE Terrorist List under Cabinet Resolution No. 63 of 2026, a domestic counter-terrorist-financing screening action sourced to the UAE's own Executive Office for Control and Non-Proliferation. This sits alongside, but is analytically distinct from, the US sanctions actions above: the UAE action is domestic designation activity under its own CTF screening obligations, while the Banque Misr and Golden Global Bank actions are unilateral US measures targeting UAE-linked or UAE-domiciled entities over Iran-sanctions exposure. #### Cross-Monitor Connections The Section 311 finding against Banque Misr's UAE branches and the related Iran-sanctions designations connect directly to correspondent-banking and payments infrastructure questions that sit with the payments-monitoring function: a bank losing US correspondent-account access has direct implications for cross-border settlement capacity and de-risking behaviour among UAE-domiciled counterparties, independent of any AML finding against the UAE itself. On the digital-asset side, VARA's Travel Rule circular of 24 February 2026, which requires full originator and beneficiary data collection above AED 3,500, 8-year record retention and 3-month risk-rating refresh cycles for Dubai-licensed virtual asset service providers, remains the operative standard with no change identified this cycle; this is the AML/CFT layer against which UAE crypto-market structural developments should be read, though the crypto-specific licensing and token-classification architecture itself is tracked elsewhere. The persistence of US secondary-sanctions pressure without any corresponding domestic UAE enforcement action against the same conduct is the kind of enablement-by-absence pattern that this monitor flags as analytically significant in its own right, distinct from active enforcement volume. #### Outlook The most consequential near-term marker for the UAE's AML/CFT profile is the FATF 5th Round mutual evaluation, anticipated for the second half of 2026, which will test whether the post-2024 reform architecture, including Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025, produces measurable effectiveness outcomes rather than statutory completeness alone. Sector commentary has flagged DNFBP customer due diligence and suspicious transaction report filing rates as a historically weak area likely to draw renewed scrutiny under the effectiveness-focused methodology. Separately, the trajectory of US secondary-sanctions activity under what has been described as Operation Economic Outcast shows no sign of deceleration, and further correspondent-banking restrictions against UAE-linked entities tied to Iran-sanctions evasion exposure remain a live possibility, a track that will continue to run independently of the UAE's own domestic regulatory calendar. 28 Sep 2026 · fim-2026-09-28 #### Lead Signal The UAE has replaced its 2018 AML/CFT/CPF legislative architecture wholesale with Federal Decree-Law No. 10 of 2025, in force since 14 October 2025. The new law repeals Federal Decree-Law No. 20 of 2018, adds a standalone proliferation-financing offence, brings tax evasion in as a predicate offence, and expressly captures virtual assets within its scope. This is a direct architectural response to the higher evidentiary bar the FATF's fifth-round mutual-evaluation methodology sets for operational effectiveness rather than mere policy-on-paper compliance, with the UAE's own evaluation anticipated around or after the June 2026 Plenary window. #### Other Developments Sanctions activity cuts both directions. US OFAC action touching UAE-nexus entities moved in opposite directions simultaneously this cycle. OFAC designated a UAE-based crypto brokerage to the SDN List over allegations of processing more than 100 million dollars in Iran-oil-linked digital-asset transfers. In parallel, OFAC removed Globe Trekkers LLC, a Dubai-registered entity previously listed under Executive Order 14024 secondary-sanctions risk, from the SDN List on 6 March 2026. Read together, these two actions illustrate that US unilateral sanctions exposure for UAE-nexus entities remains a live, actively-managed surface rather than a settled or static one. Federal virtual-asset architecture consolidates. The Capital Markets Authority, reconstituted from the former Securities and Commodities Authority, issued Decision No. 4/R.M/2026, expanding regulated virtual-asset activity categories from three to eight, introducing capital requirements and an approved-asset recognition regime, and prohibiting privacy tokens and algorithmic stablecoins outright. This sits alongside the Central Bank of the UAE's Payment Token Services Regulation reaching full operational enforcement. #### Cross-Monitor Connections The CMA's expanded virtual-asset licensing perimeter and the CBUAE's stablecoin architecture are directly relevant to world-payments' analysis of the UAE's federated payment-licensing structure, since the same instruments define both the AML/CFT-relevant designated-reporting-entity population and the payments-market-access perimeter. The crypto-brokerage OFAC designation over Iran-oil-linked digital-asset transfers is directly relevant to crypto's own digital-asset risk tracking, since it identifies a concrete sanctions-evasion typology operating through UAE-domiciled virtual-asset infrastructure. #### Outlook The clearest dated marker ahead is the UAE's fifth-round FATF mutual evaluation, anticipated around or after the June 2026 Plenary window, which will test operational effectiveness of the new Federal Decree-Law No. 10 of 2025 architecture rather than its mere existence on paper. The 16 September 2026 CBUAE transition deadline, by which newly-in-scope entities under the 2025 CBUAE Law's activity-based licensing trigger must obtain licensure or face criminal exposure, had already passed as at this cycle's compose date, and its practical enforcement outcomes are the next thing to watch. 21 Sep 2026 · fim-2026-08-17 #### Lead Signal The UAE central bank has issued its most consequential supervisory revision since Federal Decree-Law 10/2025 took force, publishing a six-document AML/CFT/CPF guidance package on 16 April 2026 that covers proliferation-financing risk assessment, trade-based money laundering as a standalone risk category, correspondent-banking enhanced due diligence, continuous customer due diligence, and role-based training. The timing is analytically load-bearing: the package lands ahead of the FATF Fifth-Round mutual evaluation onsite expected mid-2026, and the interpreter assesses this as reform substantially driven by external assessment pressure rather than purely organic supervisory evolution. This is the architecture-over-incident reading that matters this cycle: the UAE was removed from the FATF grey list in February 2024, and the reform cadence observed through 2026 reads as a jurisdiction actively managing its assessment posture rather than a jurisdiction responding to a discrete failure. That domestic reform trajectory sits uneasily alongside a persistent extraterritorial signal. Four rounds of OFAC Economic Fury designations between April and July 2026 have named UAE-domiciled or UAE-registered entities and vessels in Iran oil-smuggling, Hizballah gold-financing, and missile/UAV procurement networks, corroborated at the highest confidence tier by a direct Treasury press release alongside independent tracker confirmation. The coexistence of intensifying domestic supervisory architecture and sustained US secondary-sanctions pressure on UAE-domiciled structures is the structural story: reform at the CBUAE level has not closed the gap that US designation criteria continue to find in UAE free-zone corporate architecture. #### Other Developments Enforcement teeth accompany the guidance push. On 24 June 2026 the CBUAE imposed one of its largest-ever AML penalties, a AED 20 million fine on an unnamed foreign bank branch for repeated AML/CFT and sanctions-control failures, with a further AED 300,000 personal fine on the branch's Head of Compliance/MLRO. Corroborated by two independent secondary outlets, this pairs with the guidance package to evidence that the UAE's FATF-facing reform posture carries live supervisory consequence rather than paper compliance alone. Free-zone structures recur as facilitation infrastructure. Ali Ansari and the Dubai-registered Smart Global Limited were designated on 10 July 2026 for facilitating transactions on behalf of sanctioned Iranian banks, with a General License issued for wind-down. A further designation identified as low confidence this cycle — sourced from a single unindependently corroborated aggregator — names Zedx DMCC, a digital-asset-exchange support entity, and BZ Diamond DMCC, a gold and precious-gem trading entity, as elements of the Zanjani Iran sanctions-evasion network; this claim is flagged for the source-tier gap it carries and should be read with appropriate caution pending a Treasury SDN update. Taken together across the cycle, the recurrence of Dubai DMCC-registered vehicles across separate OFAC designation rounds supports a systemic rather than isolated facilitation reading of UAE free-zone corporate architecture. Beneficial ownership enforcement intensifies without statutory change. The UAE's ultimate-beneficial-ownership framework under Cabinet Resolution 109/2023 remains structurally stable, but 2026 has brought markedly increased regulatory spot-checks and Federal Tax Authority cross-referencing of UBO data against Qualifying Free Zone Person corporate-tax structures — an enforcement-intensity signal layered onto an otherwise unchanged statute. The digital-asset perimeter is being rebuilt from the ground up. Following its 1 January 2026 reconstitution from the Securities and Commodities Authority under Federal Law 32/2025, the Capital Markets Authority issued Decision No. 4/R.M/2026, expanding onshore federal regulated virtual-asset activities from three categories to eight, introducing capital requirements, an approved-asset recognition regime, and explicit prohibitions including privacy tokens. This is a material build-out of the federal crypto regulatory perimeter occurring in parallel with, rather than as a direct response to, the sanctions-evasion signal — though the presence of a digital-asset-exchange support entity among this cycle's designated facilitation vehicles underscores why that perimeter build-out carries integrity stakes. #### Cross-Monitor Connections The recurrence of DMCC free-zone entities across the Shamkhani, Zanjani, and Ansari designation threads is flagged at high severity for SCEM, where UAE free-zone corporate structures functioning as durable Iran-sanctions-evasion infrastructure bear directly on conflict-finance and state-capture analysis of the broader Iranian sanctions-evasion architecture. A medium-severity flag runs to ERM, where oil-transportation and gold-smuggling networks routed through UAE-based shipping and trading firms implicate commodity-flow evasion channels that ERM tracks independently. A further medium-severity flag runs to GMM: the sustained US extraterritorial designation pressure on UAE-domiciled commercial actors, occurring ahead of and independent of the UAE's own FATF mutual evaluation, is a macro-level sanctions-transmission signal worth tracking as a variable in US-UAE relations rather than a purely enforcement-level event. None of these cross-monitor signals currently rest on evidence suggesting UAE state direction of the facilitation activity; the pattern read this cycle is one of persistent enabler-jurisdiction gap rather than documented state capture, and F1 has not been triggered on the evidence available. #### Outlook The interpreter's lead signals for the coming cycle center on the FATF Fifth-Round mutual evaluation's onsite outcome and scheduling, the prospect of further OFAC Economic Fury designation rounds naming additional UAE entities, and forthcoming CMA and VARA implementing guidance under the new virtual-asset frameworks. The structural question this cycle leaves open is whether the CBUAE's guidance-and-enforcement push before the FATF onsite will register as effectiveness under the FATF's outcome-based Immediate Outcomes framework, given that assessors will be testing measurable results rather than instrument issuance alone. Given the coverage gaps this cycle — no primary CBUAE source URL was retrieved for the guidance package itself, and the Zedx/BZ Diamond designation rests on a single uncorroborated tier-four source — near-term confidence in the full shape of the D1 and D7 pictures should be treated as provisional pending independent corroboration. 11 Aug 2026 · fim-2026-08-05 #### Lead Signal The dominant development this cycle is architectural rather than episodic: the United Arab Emirates has replaced its core AML/CFT/CPF statute, with Federal Decree-Law No. 10 of 2025 repealing and replacing Federal Decree-Law No. 20 of 2018 with effect from 14 October 2025. The new law adds a standalone proliferation-financing offence, lowers the evidentiary threshold for prosecution, introduces personal manager liability, and brings virtual-asset service providers explicitly into AML/CFT/CPF scope, with fines ranging from AED5 million to AED100 million. The statute's extension of scope to payment-sector reporting entities and virtual-asset service providers is itself the more durable structural change, since it closes a supervisory gap that previously existed at the intersection of payments and crypto activity. This statutory replacement sits against a backdrop in which the UAE remains outside FATF's 22-jurisdiction grey list as confirmed at the 19 June 2026 Plenary, having been removed in February 2024, but faces its fifth-round mutual evaluation in 2026, a test that will assess effectiveness rather than mere statutory adoption. Read together, the new statute functions primarily as reform-credibility signalling ahead of that evaluation rather than as evidence that underlying enforcement gaps identified in the earlier evaluation cycle have been fully resolved. #### Other Developments Sustained high-value enforcement. The Central Bank of the UAE fined a foreign bank branch AED20,000,000, plus a rare personal fine of AED300,000 against the branch's Money Laundering Reporting Officer, on 24 June 2026, for repeated AML/CFT and sanctions-framework failures. This sits within a cumulative 2025 enforcement total exceeding AED370 million, indicating enforcement intensity that has become a standing feature rather than an isolated event. Gold-sector oversight. A Ministry Gold Souq inspection on 12 May 2026, combined with a new federal gold policy, a UAE Good Delivery Standard, and a national trader database, targets AML vulnerabilities in a gold trade valued at AED683 billion, approximately USD186 billion, in 2024 across 6,213 companies. This is assessed rather than confirmed, resting on a single source without independent corroboration of the specific inspection event, though the underlying DNFBP framework driving the initiative is separately grounded. Sanctions-evasion facilitation. The UAE, and Dubai specifically, persists as a re-export and reflagging hub for Russian shadow-fleet oil, with vessels repeatedly transferred to new non-sanctioned UAE entities after each round of Western designations, and UAE-based facilitators individually designated by OFAC. On 14 July 2026, OFAC expanded its Shamkhani-network designations, sanctioning more than 50 individuals, companies and vessels across the UAE, Singapore, Hong Kong and India, bringing cumulative network designations to more than 200 since July 2025. Parallel virtual-asset regimes. The reconstituted Capital Markets Authority, formerly the Securities and Commodities Authority and effective 1 January 2026, issued Decision No. 4/R.M/2026 in April 2026, creating a federal Virtual Assets Framework spanning eight licensed activity categories that operates alongside the existing VARA, ADGM and DFSA regimes. VARA's own Exchange Services Rulebook v2.1, effective 31 March 2026, separately permits virtual-asset derivatives for the first time under a permanent regime. #### Cross-Monitor Connections The gold-sector oversight initiative and the shadow-fleet re-export pattern both carry conflict-finance and extractive-industry relevance that intersects with SCEM's commodity-flow tracking, though neither surfaces as a discrete new conflict-finance-specific finding this cycle beyond that overlap. The sanctions-evasion facilitation pattern, particularly the persistent re-registration of vessels and entities following each round of Western designations, is a structural fact relevant to ERM's commodity-flow and WDM's state-capture lines of analysis, since the facilitation appears to depend on jurisdictional and corporate-structuring gaps rather than isolated bad actors. The dual-track virtual-asset licensing landscape, with VARA and the CMA now operating parallel regimes, is a compliance-technology and regulatory-arbitrage signal that FCW readers tracking information-operations-adjacent obfuscation of illicit flows through digital assets should note, even though no direct information-operations finding was identified this cycle. #### Outlook The UAE's fifth-round FATF mutual evaluation, expected in the fourth quarter of 2026, is the single most consequential near-term event: it will test whether the post-2024 reform programme, including the new AML/CFT/CPF statute and sustained CBUAE enforcement, holds up against FATF's effectiveness-focused methodology, or whether enhanced-monitoring risk is reintroduced. Separately, the coexistence of VARA's emirate-level virtual-asset regime and the CMA's new federal framework has not yet been resolved by coordination guidance, and this gap is a near-term regulatory-arbitrage risk worth monitoring for payment-token and digital-asset operators. Readers should also track whether the Ministry Gold Souq inspection reported this cycle is followed by publicly disclosed enforcement outcomes, which would convert an assessed, single-source signal into a corroborated enforcement development. Finally, the persistence of UAE-based re-registration of sanctioned vessels and entities after each round of Western designations suggests the sanctions-evasion facilitation pattern is structural rather than episodic, and is unlikely to resolve without a coordinated multilateral response beyond unilateral OFAC action. Domain intelligence (D1–D8) #### Sanctions Architecture and Evasion US secondary-sanctions pressure on UAE-domiciled and UAE-flagged assets continued through October 2026 under what is now a sustained pattern rather than an isolated action. Between 13 and 21 October 2026, the US Treasury's Office of Foreign Assets Control added UAE-connected entries to the Specially Designated Nationals list, including two UAE-flagged crew and supply vessels, Whales Diamond and Whales Pearl, both linked to Whales Shipping Line LLC and designated under Executive Order 13902. This October action sits in a direct line with the 28 August 2026 designation that severed correspondent-banking access for a UAE-based bank branch after Treasury estimated the institution had processed approximately 1.8 billion dollars for 103 companies in a manner implicating Iran-related sanctions evasion. The architecture being targeted is a recurring one: UAE-flagged vessels and UAE-domiciled or UAE-licensed banking relationships functioning as nodes in sanctions-evasion typologies tied to Iran, addressed through unilateral US secondary-sanctions tools rather than multilateral listing action. Continue reading The domestic consequence of this sustained external pressure became visible within the same cycle. The Central Bank of the UAE fined a foreign bank branch AED 200,000,000 on 30 October 2026 for AML/CFT, governance and sanctions-control failures, with personal fines against the branch's Chief Executive Officer and Head of Compliance and a mandatory remediation programme and fit-and-proper reassessment. The proximity between the US correspondent-access severance and the domestic fine against what is reported to be the same institution is the most analytically significant element of the cycle: it indicates that UAE supervisory follow-through on sanctions-control failures is now tracking US secondary-sanctions findings on a compressed timeline, rather than operating as a parallel but disconnected enforcement track. Notably, no EU or UK sanctions-listing action mirrored the October OFAC designations this cycle, a divergence that leaves US unilateral secondary-sanctions measures as the active enforcement instrument against this specific typology while other major regimes remain silent on the same exposure. #### Outlook The pattern observed this cycle, US designation followed by domestic enforcement response within a compressed window, is likely to remain the operative dynamic for UAE-exposed banking relationships touching Iran-related trade and shipping typologies. Institutions with correspondent or trade-finance exposure to UAE-flagged vessels or UAE-domiciled counterparties should expect continued OFAC designation activity under Operation Economic Outcast authorities, and should not assume that absence of EU or UK listing action signals reduced exposure, since the operative enforcement channel for this typology has to date been unilateral US action. Domestic CBUAE supervisory response to such designations, as demonstrated by the late-October fine, suggests that UAE authorities are treating US findings as a trigger for their own control-failure reviews, a dynamic likely to continue shaping enforcement timing going forward. Judgment: US unilateral secondary-sanctions activity (Operation Economic Outcast) continues to target UAE-domiciled banks, individuals and vessels under Iran-related authorities; CBUAE's own domestic enforcement followed within two months, illustrating continued US pressure shaping UAE supervision. Probable #### Beneficial Ownership and Corporate Transparency The United Arab Emirates sits outside the direct perimeter of the EU AML Package as a non-EEA third country; the AML Regulation, the sixth Anti-Money Laundering Directive and the AMLA Regulation are not directly binding on UAE-domiciled obliged entities. The directly relevant beneficial-ownership developments for the UAE this cycle are domestic and investigative findings rather than EU transposition milestones. Leaked property data ties over 1,000 Dubai properties to more than 200 flagged individuals, including alleged criminals, fugitives, political figures and sanctioned persons, exploiting free-zone shell and nominee structures in the absence of a unified public beneficial-ownership register (fim-2026-W28-010). This opacity is structurally enabled by the fragmentation of UAE corporate supervision across seven emirates, two financial free zones and roughly 39 distinct commercial registries, a condition the 2020 FATF Mutual Evaluation Report flagged as an unresolved regulatory-arbitrage risk (fim-2026-W28-011); beneficial-ownership obligations are enforced piecemeal across this registry landscape rather than through a single, publicly queryable register, which is precisely the structural condition that allowed the Dubai Unlocked leak to surface undisclosed ownership rather than any UAE regulator or public register doing so. Continue reading Against this backdrop of persistent leak-documented opacity, the European Commission delisted the UAE from the EU AML/CFT high-risk third-country list via Delegated Regulation (EU) 2025/1184, adopted 10 June 2025, a delisting that narrowly survived a European Parliament objection vote amid criticism from OCCRP and Transparency International (fim-2026-W28-002). The delisting is a formal EU regulatory-status change with direct consequences for EU obliged-entity enhanced-due-diligence defaults toward UAE counterparties, but it does not itself resolve the structural registry fragmentation or the absence of a unified public beneficial-ownership register documented by the Dubai Unlocked findings. The gap between the Tier-2 investigative finding of documented property opacity and the Tier-1 regulatory delisting decision is itself an analytically significant signal: the EU determination that the UAE no longer presents high-risk AML/CFT characteristics at the jurisdiction level has not been matched by primary UAE regulatory acknowledgement or remediation of the underlying free-zone and multi-registry structure that the leaked data exploits. Globally, the EU AML Package sets the structural direction against which this and future UAE-related beneficial-ownership findings will continue to be read. That package comprises three distinct instruments: the directly applicable AML Regulation (Reg (EU) 2024/1624, the AMLR), which imposes uniform beneficial-ownership and customer-due-diligence obligations across Member States without national transposition; the sixth Anti-Money Laundering Directive (6AMLD), transposed individually by each Member State; and the AMLA Regulation (Reg (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts supervision of the highest-risk obliged entities from purely national authorities toward a hybrid EU-level regime combining AMLA direct supervision of a defined set of cross-border groups with indirect oversight of the remaining national supervisory perimeter. For a non-EEA jurisdiction such as the UAE, this architecture is contextual rather than directly binding: its relevance runs through the AMLR successor third-country high-risk mechanism, formerly Article 9 of the fourth Anti-Money Laundering Directive, which becomes applicable from 10 July 2027 and will determine how EU obliged entities calibrate enhanced due diligence toward UAE counterparties going forward (fim-2026-W28-017). This pattern, in which formal list-status improvement runs ahead of the structural and enforcement evidence base, is consistent with the parallel findings documented under the sanctions-architecture and enabler-jurisdiction domains this cycle, and it reinforces a cross-domain reading in which the UAE regulatory-status trajectory and its underlying transparency architecture are moving on different timelines. #### Outlook The near-term horizon for UAE beneficial-ownership assessment is thin relative to the multi-year EU horizon. No UAE-specific unified registry initiative or reform announcement is recorded in this baseline, and the primary forward checkpoint remains the 10 July 2027 AMLR application date, at which point AMLA supervisory build-out will begin to calibrate how the successor third-country mechanism treats jurisdictions such as the UAE that have exited the high-risk list but continue to generate leak-based opacity findings. Continuing European Parliament and NGO scrutiny of the 2025 delisting decision suggests the topic is likely to resurface at future EU list-update cycles even absent a formal UAE-specific development, and any future UAE registry-consolidation announcement would be a material signal against which this assessment should be revisited. Judgment: No AE-specific beneficial-ownership register development located this cycle. Uncertain #### Enabler Jurisdictions The defining enabler-jurisdiction finding for the United Arab Emirates this cycle is the Central Bank of the UAE's AED 200,000,000 fine against a foreign bank branch licensed in the country, for repeated anti-money-laundering, countering-the-financing-of-terrorism, governance and sanctions-control failures. The chief executive officer was separately penalised 500,000 and the head of compliance was also sanctioned individually, with a mandatory remediation programme and a fit-and-proper reassessment of the chief executive and chief compliance officer ordered alongside the institutional fine. Read architecturally rather than as an isolated incident, this is the largest CBUAE institutional AML fine of the year and it followed the US Treasury's earlier severance of correspondent-banking access connected to the same institution under Operation Economic Outcast -- meaning the domestic enforcement response arrived only after an external sanctions authority had already acted. That sequencing is the material finding: it evidences a supervisory gap being closed reactively, through a large penalty and mandated remediation after the fact, rather than through ex ante controls or earlier-stage supervisory intervention that might have prevented the underlying conduct from accumulating. Continue reading This pattern is analytically significant for how enabler-jurisdiction status is assessed. A jurisdiction's AML/CFT framework can appear structurally sound on paper -- the UAE operates an active CBUAE enforcement function capable of imposing fines at this scale -- while still functioning, in practice, as a jurisdiction where external pressure rather than independent domestic discovery is the primary trigger for enforcement against foreign-bank-branch conduct. Absence of earlier independent enforcement action against the same branch, prior to the correspondent-access loss, is itself a data point: it suggests the control failures were either not detected or not acted upon by the domestic supervisor until an external sanctions authority had already imposed consequences. No beneficial-ownership, conflict-finance or compliance-technology findings reached the bar for inclusion this cycle, so this enabler-jurisdiction reading rests solely on the correspondent-banking and enforcement-sequencing facts set out above. #### Outlook The fit-and-proper reassessment of the chief executive and chief compliance officer, and the mandated remediation programme, are the elements most likely to generate a further visible development in coming cycles -- either confirmation that the remediation has been accepted as adequate or a further supervisory escalation if it is not. Whether the CBUAE's enforcement response in this instance signals a broader shift toward more proactive supervision of foreign bank branches, rather than a one-off reaction to external pressure, is not yet established from the evidence reaching this cycle and should be treated as an open question rather than a settled trend. Judgment: No new enabler-jurisdiction development located for AE this cycle. Uncertain #### Conflict Finance and Extractive-Industry Integrity The UAE role in Russian war-economy financing is documented this cycle through a single, well-corroborated commodity-flow channel: the UAE became Russia top destination for gold exports after 2022, absorbing 96.4 tons in that year alone, a position enabled by the dense DMCC and free-zone trading infrastructure that provides the physical and corporate layering needed to obscure origin and evade the Western ban on Russian gold and banknote exports (fim-2026-W28-007). This finding rests on strong Tier-2 corroboration (Bloomberg) of a structural rather than episodic pattern: the scale of the trade, sustained over multiple years since 2022, indicates an established commodity-flow architecture rather than a series of discrete transactions. Continue reading The conflict-finance significance of the gold channel is sharpened by the source-to-channel-to-deployment trace documented under the sanctions-architecture domain this cycle. Russian gold producers and traders route gold-sale proceeds through layered UAE- and Hong Kong-based trading front companies, converting proceeds into fiat and cryptocurrency before returning value to the Russian financial system (fim-2026-W28-006). Read through the F4 conflict-finance filter, the source is Russian gold production under wartime fiscal pressure, the channel is UAE- and Hong Kong-based free-zone trading infrastructure, and the deployment is reintegration of laundered proceeds into the Russian financial system, from which state and war-economy financing needs are met. The UAE role in this trace is classified as an enabler rather than a direct participant: the jurisdiction has not joined the Western sanctions regime restricting Russian gold and banknote exports, and its dense free-zone trading architecture provides the layering capacity that the scheme depends on. This conflict-finance channel operates independently of, and is not disrupted by, the UAE improving list-status trajectory documented elsewhere in this baseline. Neither the 2024 FATF grey-list removal nor the 2025 EU high-risk delisting is conditioned on, or appears to have altered, the physical gold-trade volumes or the front-company layering architecture that the Bloomberg reporting documents; the conflict-finance channel and the formal AML/CFT list-status assessment are, on the evidence available this cycle, decoupled tracks. #### Outlook No UAE-specific development in this baseline points toward near-term disruption of the gold-import channel; the EU sanctions packages targeting Russia have to date focused on transaction bans against specific UAE-based oil traders and banks and on virtual-asset service providers rather than on the physical gold trade itself. Absent a EU, US or UK measure specifically targeting UAE gold-import volumes or DMCC-based trading infrastructure, the most plausible trajectory is continuation of the current channel at broadly similar scale, with the primary source of future revision being either a new sanctions-package provision targeting gold flows directly or independent commodity-trade data showing a material change in Russian gold export destinations. Judgment: No conflict-finance development located for AE this cycle. Uncertain #### Crypto, Digital Assets, and Financial Innovation The Virtual Assets Regulatory Authority issued a circular on 28 October 2026 addressing good practices for virtual asset service providers' public disclosures. This measure does not stand alone: it follows an earlier circular, issued 6 October 2026, addressing the scope of reserve audits for licensed virtual asset operators. Taken together, the two circulars in the space of three weeks indicate a deliberate supervisory direction rather than a single discrete action, tightening both what virtual asset service providers must disclose publicly and how their reserve positions must be audited. This is a structural development in the jurisdiction's digital-asset regulatory architecture: it signals that the supervisor is moving to close a transparency gap around reserve backing and public disclosure practices for licensed virtual asset operators, an area that has drawn scrutiny following reserve-adequacy concerns at virtual asset firms more broadly. Continue reading The disclosure-tightening direction is of particular relevance given the jurisdiction's position as a significant licensing venue for virtual asset service providers. A supervisory posture that incrementally raises disclosure and audit-scope expectations, rather than issuing a single comprehensive overhaul, allows the regulator to calibrate requirements iteratively while maintaining continuity for already-licensed operators. For firms operating under the jurisdiction's virtual asset licensing framework, the practical implication is that public disclosure practices and reserve-audit documentation are both now subject to explicit supervisory expectations, where previously the standard may have been less precisely specified. #### Outlook The sequence of two circulars within three weeks of each other suggests the supervisor intends further guidance refining disclosure and audit expectations for virtual asset service providers is plausible in the near term, continuing an incremental tightening trajectory rather than a single rulemaking event. Licensed operators should expect public disclosure practices and reserve-audit scope to remain areas of active supervisory attention. No enforcement action against a specific virtual asset service provider for disclosure or reserve-audit shortcomings was identified this cycle; the absence of such action alongside the issuance of clarifying guidance is itself a data point, consistent with a supervisor setting expectations proactively before testing compliance with them through enforcement. Judgment: VARA issued a circular on good practices for VASPs' public disclosures (28 October 2026), continuing a supervisory posture of tightening VASP disclosure and reserve-audit expectations. Probable #### Compliance Technology and Active Defence No material RegTech, perpetual-KYC, AI-transaction-monitoring or agentic-compliance development specific to the United Arab Emirates was identified in the research bundle underlying this cycle baseline. The domain tracker for this jurisdiction records a watch status with a stable trajectory and explicitly carries forward as quiet. This is distinct from the crypto-licensing enforcement activity documented under the digital-assets domain, which concerns VASP registration and payment-token authorisation rather than the compliance-technology stack, perpetual-KYC systems, or active-defence tooling that this domain tracks; no evidence bundle item this cycle addressed UAE-specific adoption of transaction-monitoring AI, perpetual-KYC infrastructure, or comparable active-defence compliance technology. Honesty over coverage governs this entry: rather than inferring a compliance-technology posture from the enforcement and licensing activity documented elsewhere, this domain is recorded as thin-signal pending a future cycle in which UAE-specific evidence becomes available. Continue reading #### Outlook Given the absence of a UAE-specific compliance-technology development this cycle, no near-term forward checkpoint is identified for this domain from the current evidence base. Future coverage should watch for any CBUAE, VARA or DFSA guidance specifically addressing RegTech adoption, perpetual-KYC standards, or AI-based transaction-monitoring requirements, none of which appear in the baseline research to date. Judgment: No RegTech/compliance-technology development located for AE this cycle. Uncertain #### AML/CTF Regime The Central Bank of the UAE imposed its largest single institutional AML/CFT fine of the year on 30 October 2026, levying AED 200,000,000 against a foreign bank branch for repeated failures spanning AML/CFT controls, governance, compliance management and sanctions-control frameworks. The order extended personal accountability to senior individuals: the branch's Chief Executive Officer was fined AED 500,000 and the Head of Compliance AED 300,000, with a mandatory remediation programme and a fit-and-proper reassessment of both officers ordered as part of the same action. This is a structural enforcement marker for the jurisdiction's AML/CFT regime: the willingness to attach individual, personal financial penalties to a CEO and a compliance head, rather than confining consequences to the institution, raises the practical stakes for senior management and compliance leadership in branches of foreign banks operating under CBUAE supervision. Continue reading The timing of the fine, following within roughly two months of a US Treasury correspondent-access severance against the same institution over processing of approximately 1.8 billion dollars for 103 companies under Iran-related sanctions-evasion scrutiny, indicates that domestic AML/CFT enforcement is responsive to, and plausibly informed by, prior US secondary-sanctions findings against the same entity. This reinforces an architecture-level reading of the jurisdiction's AML/CFT posture: enforcement against control failures tends to follow external sanctions findings rather than arising independently of them, at least in this instance. Separately, the Financial Action Task Force concluded its October 2026 Plenary in Paris on 30 October 2026, removing the Democratic Republic of Congo, Monaco, Bulgaria and Cote d'Ivoire from increased monitoring, with the blacklist unchanged. The jurisdiction covered by this brief was not affected by the Plenary outcome and has remained off increased monitoring since February 2024. Although the jurisdiction's own status did not change, regulated entities operating under the jurisdiction's AML/CFT regime are expected to refresh the geographic-risk inputs feeding their enterprise-wide risk assessments to reflect the revised composition of the list, since correspondent and counterparty exposure to the de-listed and still-listed jurisdictions will shift accordingly. #### Outlook The combination of a record domestic AML/CFT fine with personal officer liability, following closely on a US secondary-sanctions correspondent-access action against the same institution, suggests UAE supervisory authorities are prepared to move quickly once an external sanctions finding surfaces underlying control weaknesses. Other foreign bank branches with comparable Iran-exposure risk profiles should expect similarly compressed enforcement timelines should analogous findings arise. Separately, the FATF Plenary outcome, while not changing the jurisdiction's own standing, is expected to prompt routine refreshes of geographic risk-assessment inputs across regulated entities. A multi-year horizon item, a fifth round of FATF mutual evaluations, is anticipated by industry expectation, though no primary FATF document reviewed this cycle confirmed specific timing, and this should be treated as an unconfirmed general expectation rather than a scheduled date. Judgment: CBUAE imposed its largest single institutional AML fine of the year on a foreign bank branch for repeated AML/CFT, governance, compliance-management and sanctions-framework failures, ordering a mandatory remediation programme and fit-and-proper reassessment of the CEO and Chief Compliance Officer. Probable #### Commercial Activity Two dated commercial events touching major global financial-services entities occurred in the UAE this cycle. The Virtual Assets Regulatory Authority granted Payward FZCO, the UAE entity of Kraken, Full Market Approval, with the register entry dated 6 October 2026 and the announcement dated 12 October 2026. Separately, Standard Chartered's DIFC branch, regulated by the Dubai Financial Services Authority, launched institutional custody of Ripple's RLUSD stablecoin on 12 October 2026, a product launch whose value was not publicly disclosed and which sits alongside a reported but not-yet-live plan for a collateral-mirroring link with LMAX. Continue reading Both events represent market entry or product expansion by firms headquartered outside the UAE into the UAE's licensed financial and digital-asset market, consistent with the jurisdiction's posture of active courtship of global financial institutions and exchanges. Neither event discloses a transaction value, and neither was confirmed this cycle against a primary regulator source rather than secondary press reporting, though the underlying commercial fact of licensing grant and product launch is corroborated by multiple independent outlets in each case. #### Outlook The pattern of major global entrants completing licensing or product-launch milestones in the UAE within the same reporting window suggests continued commercial momentum in the jurisdiction's digital-asset and institutional banking space. Whether either entrant's new UAE activity generates a subsequent AML/CTF supervisory finding, enforcement action, or further primary-source confirmation of licensing terms remains to be seen in future cycles. Judgment: No commercial transaction among integrity-infrastructure firms located for AE this cycle. Uncertain Regulatory horizon Proposed 2027 · ±multi_year ### FATF fifth round of mutual evaluations AML/CFT supervisory and reporting-entity expectations may tighten in the run-up to a future mutual evaluation. source not collected 1 dated · 3 pending date · baseline fim-2026-07-09 Role action cards MLRO ### A foreign bank branch was fined AED 200 million and its compliance head personally penalised for AML/CFT and sanctions-control failures. The action demonstrates that CBUAE enforcement now extends personal financial penalties and fit-and-proper reassessment to the Head of Compliance role directly, following closely on a US correspondent-banking severance tied to Iran-related sanctions-evasion typologies at the same institution. 2 evidence refs Compliance ### CBUAE imposed its largest institutional AML fine of the year alongside a mandatory remediation programme for a foreign bank branch. The fine signals heightened supervisory expectations around governance, sanctions-control frameworks and compliance management, with a fit-and-proper reassessment ordered for senior officers, raising the practical bar for control-framework adequacy at foreign bank branches. 1 evidence refs Legal ### Personal fines against a bank branch CEO and compliance head followed a US secondary-sanctions correspondent-access severance against the same institution. The sequence illustrates liability exposure extending from US unilateral secondary-sanctions findings into domestic enforcement with individual officer consequences, relevant to assessing enforcement-trajectory risk for entities with comparable sanctions-nexus exposure. 3 evidence refs Board ### The jurisdiction's central bank issued its largest AML fine of the year, with personal penalties for a branch CEO and compliance head. This represents material financial and reputational exposure for institutions operating foreign bank branches in the jurisdiction, reinforced by continuing US secondary-sanctions designation activity targeting UAE-linked shipping and banking relationships through October 2026. 2 evidence refs CTO ### The virtual asset supervisor issued a second circular in three weeks tightening public-disclosure and reserve-audit expectations for licensed operators. The pairing of disclosure and reserve-audit circulars points to a deliberate supervisory direction on transparency architecture for virtual asset platforms, relevant to technical and data-reporting implications for licensed digital-asset infrastructure in the jurisdiction. 1 evidence refs Risk ### Sustained US secondary-sanctions designation activity against UAE-linked vessels and banking relationships continued through October 2026. The recurrence of Operation Economic Outcast designations against UAE-flagged vessels, alongside a domestic AML fine following a related correspondent-access severance, indicates a concentrated exposure pattern around UAE-domiciled trade-finance and shipping relationships touching Iran-related typologies. 3 evidence refs Operations ### CBUAE ordered a mandatory remediation programme at a foreign bank branch following AML/CFT and sanctions-control failures. The order has direct workflow implications for screening and transaction-monitoring processes at affected institutions, and the FATF Plenary outcome removing four jurisdictions from increased monitoring means geographic-risk inputs in screening systems are expected to be refreshed even though the jurisdiction's own status is unchanged. 2 evidence refs Audit ### A fit-and-proper reassessment of a bank branch CEO and compliance head was ordered alongside a mandatory remediation programme. The order implies gaps in documented evidence of governance and control adequacy were identified by the supervisor, relevant to audit-trail and control-testing scope considerations for comparable institutions assessing their own documented evidence against similar standards. 1 evidence refs Scenario sketches ### Compressed enforcement follow-through after secondary-sanctions findings A plausible illustrative pattern, drawing on the compressed interval observed between a US correspondent-access severance and a subsequent domestic AML/CFT fine against the same institution, is that other foreign bank branches subject to similar US secondary-sanctions scrutiny for Iran-related exposure could see domestic supervisory review and enforcement follow within a similarly short window, particularly where personal officer accountability becomes a recurring feature of such domestic orders. Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact. Standing trackers (T1–T6) Tracker Status Note T1 · Russian Sanctions-Evasion Architecture no_change No material Russia-sanctions-evasion development surfaced for AE this cycle. T2 · EU AML Package / AMLA no_change Not directly applicable to AE (non-EEA); no delta affecting AE-exposed EEA counterparties surfaced. T3 · FATF Grey List watch FATF's October 2026 Plenary removed DRC, Monaco, Bulgaria and Côte d'Ivoire from the grey list; AE remains off the list. T4 · Beneficial-Ownership Register Status no_change No AE-specific BO-registry development located this cycle. T5 · Crypto / VASP Regulatory Framework watch VARA issued a circular on good practices for VASPs' public disclosures (28 October 2026), continuing tightening of disclosure and reserve-audit expectations. T6 · Sanctions Regime Divergence material_change US unilateral secondary-sanctions activity continues to target UAE-domiciled banks, individuals and vessels under Iran-related authorities, a posture not mirrored by EU or UK listings this cycle. Registers ### Enforcement actions - 16 Sep 2025 - 23 Oct 2025 - 1 Dec 2025 - 19 Jun 2025 - 24 Jun 2026 - 24 Jun 2026 - 6 Jul 2026 - 1 Oct 2025 - 24 Jun 2026 - 20 May 2025 - 29 May 2025 - 24 Jun 2026 - 6 Jul 2026 - 24 Jun 2026 - 6 Jul 2026 - 8 Oct 2026 - 1 Oct 2026 - 30 Oct 2026 - OFAC designated two Iranian financial facilitators and their front-company network in Hong Kong and the UAE for coordinating cryptocurrency transactions tied to Iranian oil sales benefiting the IRGC-Qods Force and Iran's Ministry of Defense. 16 Sep 2025 - The EU's 19th Russia sanctions package placed a transaction ban on eight banks and oil traders from Tajikistan, Kyrgyzstan, the UAE and Hong Kong found to be circumventing EU sanctions, alongside listings of UAE and Chinese operators supplying dual-use goods to Russia. 23 Oct 2025 - UAE regulators imposed fines on several exchange houses and insurance brokers during 2025 for failures in AML/CTF compliance as part of intensified federal supervisory focus following the FATF and EU delisting process. 1 Dec 2025 - VARA continued civil enforcement action against unlicensed operators, issuing cease-and-desist orders and penalties across numerous platforms, alongside the rollout of Rulebook v2.0 with a 19 June 2025 compliance deadline. 19 Jun 2025 ### Sanctions changes - 10 Jun 2025 - 23 Oct 2025 - 24 May 2026 - 14 Jul 2026 - 15 Jul 2026 - 15 Apr 2026 - 21 Apr 2026 - 10 Jul 2026 - 14 Jul 2026 - 26 Aug 2026 - 6 Mar 2026 - 24 Aug 2026 - 1 Jan 2026 - 1 Oct 2026 - 8 Sep 2026 - 28 Aug 2026 - 8 Oct 2026 - 1 Oct 2026 - 21 Oct 2026 - The European Commission adopted Delegated Regulation (EU) 2025/1184 removing the UAE (along with Barbados, Gibraltar, Jamaica, Panama, the Philippines, Senegal and Uganda) from the EU's AML/CFT high-risk third-country list, following the FATF's own February 2024 delisting. 10 Jun 2025 - EU 19th sanctions package (23 October 2025) added UAE-registered oil trading companies and banks to the scope of the EU's Russia-related transaction ban for circumventing sanctions, and listed UAE and Chinese operators supplying dual-use/military goods to Russia. 23 Oct 2025 - The EU's 20th Russia sanctions package (in force from 24 May 2026) explicitly targets third-country VASPs, including exchanges operating in or connected to the UAE, and expands dual-use export-control re-export corridor scrutiny to include the UAE alongside Kyrgyzstan, China and Turkey. 24 May 2026 ### Regulatory horizon (register) - FATF Fifth-Round Mutual Evaluation of the UAE - FATF Fifth-Round Mutual Evaluation of the UAE - FATF 5th-round mutual evaluation of the UAE - CBUAE RPSCS transition deadline for newly in-scope entities - FATF 5th Round Mutual Evaluation of the UAE - FATF 5th-round Mutual Evaluation of the UAE - FATF 5th Round Mutual Evaluation of the UAE - CMA VA Framework full commencement - CR 134/2025 application to financial free zones - CBUAE fraud-prevention notice full compliance deadline - FATF fifth round of mutual evaluations - MENAFATF next Enhanced Follow-Up Report on UAE technical compliance - ADGM FSRA Fiat-Referenced Token framework finalization - EU AMLR application date embeds successor high-risk third-country mechanism - FATF October 2026 plenary as next monitoring checkpoint ### Active schemes - [HIGH] Russian gold-for-cash and gold-for-crypto laundering via UAE front companies - [CRITICAL] Iranian shadow-banking crypto network via UAE and Hong Kong fronts - [HIGH] UAE-registered peer-to-peer exchanges servicing Russian sanctions evasion - [HIGH] DPRK OTC crypto laundering via UAE residency accounts - [HIGH] Free-zone shell layering for Dubai real-estate laundering Sources - [Iran-related Designations; International Criminal Court-related Designations; Russia-related Designations Removals; Foreign Sanctions Evaders Determination Removal; Issuance of Iran-related and International Criminal Court-related General Licenses | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20251218) - [https://www.whitecase.com/insight-alert/uae-enacts-new-cbuae-law-which-repeals-and-replaces-2018-law](https://www.whitecase.com/insight-alert/uae-enacts-new-cbuae-law-which-repeals-and-replaces-2018-law) - [https://www.thenationalnews.com/business/2026/06/24/uae-central-bank-fines-foreign-bank-dh20m-for-breaching-money-laundering-rules/](https://www.thenationalnews.com/business/2026/06/24/uae-central-bank-fines-foreign-bank-dh20m-for-breaching-money-laundering-rules/) - [https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html](https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html) - [https://rulebook.centralbank.ae/en/rulebook/payment-token-services-regulation](https://rulebook.centralbank.ae/en/rulebook/payment-token-services-regulation) - [https://www.vara.ae/en/regulations/regulatory-notices/](https://www.vara.ae/en/regulations/regulatory-notices/) - [https://www.hsfkramer.com/notes/middle-east/2026-posts/the-uae-introduces-landmark-new-aml-and-cft-law](https://www.hsfkramer.com/notes/middle-east/2026-posts/the-uae-introduces-landmark-new-aml-and-cft-law) - [https://uaelegislation.gov.ae/en/legislations/3314/download](https://uaelegislation.gov.ae/en/legislations/3314/download) - [https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [https://gulfnews.com/business/banking/uae-central-bank-imposes-dh20-million-fine-on-branch-of-foreign-bank-1.500585369](https://gulfnews.com/business/banking/uae-central-bank-imposes-dh20-million-fine-on-branch-of-foreign-bank-1.500585369) - [https://www.prudent.hk/post/uae-reinforces-anti-money-laundering-standards-in-gold-sector](https://www.prudent.hk/post/uae-reinforces-anti-money-laundering-standards-in-gold-sector) - [https://www.kharon.com/brief/oman-news-russia-oil-sanctions-uae-shadow-fleet](https://www.kharon.com/brief/oman-news-russia-oil-sanctions-uae-shadow-fleet) - [https://www.steptoe.com/en/news-publications/international-compliance-blog/weekly-sanction-update-july-20-2026.html](https://www.steptoe.com/en/news-publications/international-compliance-blog/weekly-sanction-update-july-20-2026.html) - [https://www.clydeco.com/en/insights/2026/05/uae-virtual-assets-update-q2-2026](https://www.clydeco.com/en/insights/2026/05/uae-virtual-assets-update-q2-2026) - [Crowe UAE](https://www.crowe.com/ae/news/cbuae-aml-and-cft-guidance-2026) - [amluae.ae](https://amluae.ae/aml-compliance-uae-cbuae-guidelines-2026/) - [Al Tamimi & Company](https://www.tamimi.com/our-knowledge/publications/eyes-on-2026/Articles/the-uaes-aml-framework-navigating-a-new-era-of-financial-crime-compliance-in-2026/) - [adilzone.com](https://adilzone.com/aml-compliance/cbuae-aml-cft-guidance-2026/) - [adilzone.com](https://adilzone.com/aml-compliance/fatf-mutual-evaluation-uae-2026/) - [First Compliance Solution](https://firstcompliancesolution.com/fatf-mutual-evaluation-uae-2026-compliance-guide/) - [amluae.com](https://amluae.com/a-guide-to-anti-money-laundering-aml-laws-in-uae/) - [DIAC](https://diac.ae/blog/uae-ubo-registration/) - [UAE Expert Hub](https://www.uaeexperthub.com/ubo-declaration-uae/) - [muhami.ae](https://muhami.ae/articles/new-virtual-asset-regulations-a-summary-of-cma-dec/) - [Clyde & Co](https://www.clydeco.com/en/insights/2026/05/uae-virtual-assets-update-q2-2026) - [The National](https://www.thenationalnews.com/business/2026/06/24/uae-central-bank-fines-foreign-bank-dh20m-for-breaching-money-laundering-rules/) - [Arabian Business](https://www.arabianbusiness.com/finance/banking/uae-central-bank-fines-foreign-bank-anti-money-laundering-failures) - [The National](https://www.thenationalnews.com/business/banking/2026/07/06/uae-central-bank-fines-foreign-bank-dh18m-for-regulatory-breach/) - [Herbert Smith Freehills Kramer](https://www.hsfkramer.com/notes/sanctions/2026-posts/treasury-advances-economic-fury-with-expanded-sanctions-on-iranian-oil-smuggling-and-hizballah-gold-financing-networks) - [Steptoe](https://www.steptoe.com/en/news-publications/international-compliance-blog/weekly-sanction-update-july-20-2026.html) - [Baker McKenzie](https://sanctionsnews.bakermckenzie.com/ofac-targets-iranian-commercial-networks-and-issues-iran-related-wind-down-general-licenses/) - [US Department of the Treasury (OFAC)](https://home.treasury.gov/news/press-releases/sb0564) - [Herbert Smith Freehills Kramer](https://www.hsfkramer.com/notes/sanctions/2026-posts/ofac-expands-economic-fury-sanctions-targeting-iranian-missile-and-uav-procurement-networks) - [SanctionsExpert](https://feed.sanctionsexpert.com/feed/item/105-ofac-targets-iranian-financier-zanjani-s-network) - [UAE Ministry of Justice / Legislation Portal](https://uaelegislation.gov.ae/en/legislations/3314) - [Herbert Smith Freehills Kramer](https://www.hsfkramer.com/notes/middle-east/2026-posts/the-uae-introduces-landmark-new-aml-and-cft-law) - [Financial Action Task Force](https://www.fatf-gafi.org/en/countries/detail/%C3%89mirats%20arabes%20unis.html) - [AMLUAE](https://amluae.com/fatf-grey-list-countries-update-19th-june-2026/) - [US Department of the Treasury / OFAC](https://ofac.treasury.gov/recent-actions/20260306) - [CryptoLaw.blog](https://cryptolaw.blog/breaking-ofac-expands-iran-sanctions-to-crypto-sector-designates-uae-broker-over-100m-in-oil-linked-transfers/) - [Muhami.ae](https://muhami.ae/articles/new-virtual-asset-regulations-a-summary-of-cma-dec/) - [Paci Finance](https://paci.ae/blogs/uae-ubo-register/) - [AMLUAE](https://amluae.com/history-of-aml-regulations-in-uae/) - [Greenberg Traurig](https://www.gtlaw.com/en/insights/2026/3/uaes-new-aml-law-enforcement-evidence-and-senior-management-liability) - [UAE Executive Office for Control & Non-Proliferation](https://www.uaeiec.gov.ae/en-us/un-page) - [Al Maazmi Lawyers](https://www.almaazmilawyers.com/insights/virtual-assets/2026-06-23-vara-strengthens-virtual-asset-regulation-with-new-guidance) - [Skadden](https://www.skadden.com/insights/publications/2026/09/us-government-announces-new-iran-sanctions-measures) - [https://www.gtlaw.com/-/media/files/news/media-coverages/2025/10/20251028-united-arab-emirates-enacts-new-aml-law-anticipates-fatf-visit-in-2026.pdf](https://www.gtlaw.com/-/media/files/news/media-coverages/2025/10/20251028-united-arab-emirates-enacts-new-aml-law-anticipates-fatf-visit-in-2026.pdf) - [https://ofac.treasury.gov/recent-actions/20260908](https://ofac.treasury.gov/recent-actions/20260908) - [https://ofac.treasury.gov/recent-actions/20260828](https://ofac.treasury.gov/recent-actions/20260828) - [https://geopoliticaleconomist.com/research/trackers/third-country-sanctions/uae](https://geopoliticaleconomist.com/research/trackers/third-country-sanctions/uae) - [https://www.zyphe.com/resources/news/cbuae-aml-fine-foreign-bank-mlro-june-2026](https://www.zyphe.com/resources/news/cbuae-aml-fine-foreign-bank-mlro-june-2026) - [https://amluae.com/the-new-uae-aml-cft-law-federal-decree-law-no-10-of-2025-explained/](https://amluae.com/the-new-uae-aml-cft-law-federal-decree-law-no-10-of-2025-explained/) - [https://www.creodata.com/blog/uae-federal-decree-law-10-2025-aml-explained/](https://www.creodata.com/blog/uae-federal-decree-law-10-2025-aml-explained/) - [https://www.federalregister.gov/documents/2026/10/07/2026-20525/notice-of-ofac-sanctions-action](https://www.federalregister.gov/documents/2026/10/07/2026-20525/notice-of-ofac-sanctions-action) - [https://mrsanctions.com/2026/10/09/october-8-2026-ofac-update-part-1-iran-designations/](https://mrsanctions.com/2026/10/09/october-8-2026-ofac-update-part-1-iran-designations/) - [https://cointelegraph.com/news/kraken-receives-vara-approval-uae-expansion](https://cointelegraph.com/news/kraken-receives-vara-approval-uae-expansion) - [https://www.coindesk.com/business/2026/10/12/standard-chartered-offers-rlusd-custody-in-dubai-and-plans-lmax-collateral-link](https://www.coindesk.com/business/2026/10/12/standard-chartered-offers-rlusd-custody-in-dubai-and-plans-lmax-collateral-link) - [https://amluae.com/what-are-fatf-blacklist-and-grey-list-countries/](https://amluae.com/what-are-fatf-blacklist-and-grey-list-countries/) - [https://amluae.ae/uae-fatf-mutual-evaluation-2026-aml-uae/](https://amluae.ae/uae-fatf-mutual-evaluation-2026-aml-uae/) - [https://www.creodata.com/blog/uae-virtual-asset-service-providers-aml/](https://www.creodata.com/blog/uae-virtual-asset-service-providers-aml/) - [https://www.almaazmilawyers.com/insights/beneficial-ownership-compliance-uae](https://www.almaazmilawyers.com/insights/beneficial-ownership-compliance-uae) - [Executive Office for Control and Non-Proliferation (EOCN)](https://www.uaeiec.gov.ae/API/Upload/DownloadFile?FileID=82395142-93a0-4d4e-b1b6-55be17db7688) - [Executive Office for Control and Non-Proliferation (EOCN)](https://www.uaeiec.gov.ae/en-us/un-page?p=1) - [Legal 500](https://www.legal500.com/intelligence/united-arab-emirates/government-public-sector/federal-decree-by-law-no-10-of-2025-regarding-anti-money-laundering-and-combating-the-financing-of-terrorism-and-proliferation-financing) - [UAE Financial Intelligence Unit](https://uaefiu.gov.ae/media/3ssbp5d5/cabinet-134-2025.pdf) - [Uppersetup](https://uppersetup.com/en/blog/the-uae-ubo-register-and-goaml-company-obligations-deadlines) - [Indigo Group](https://www.indigogroup.me/newsroom/uae-ultimate-beneficial-owner-rules) - [Dubai Department of Economy and Tourism (hosting official English text)](https://www.dubaidet.gov.ae/-/media/Files/invest-in-dubai/corporate-legislation-docs/anti-money-laundering-crimes-legislation/en/cabinet-resolution-no-134-of-2025-aml-cftpf-en.pdf) - [UAE Ministry of Justice / Official Legislation Portal](https://uaelegislation.gov.ae/en/legislations/3857/download) - [AML UAE](https://amluae.com/aml-regulations-for-dnfbps-in-uae/) - [UAE Ministry of Economy and Tourism](https://www.moet.gov.ae/en/aml) - [United Nations Office on Drugs and Crime](https://www.unodc.org/documents/data-and-analysis/Crimes%20on%20Environment/ECR25_P2b_Minerals_Crime.pdf) - [UAE Government Legislation Portal](https://uaelegislation.gov.ae/en/legislations/4001/download) - [Icon Partners](https://www.icon.partners/post/uae-cma-crypto-framework-what-the-1-january-2027-regularisation-date-means) - [Notabene](https://intercom-help.eu/helpnotabene/en/articles/345862-v2-uae-travel-rule-requirements) - [Onlayer](https://onlayer.com/en/blogs/cbuae-notice-3057-fraud-prevention-compliance-uae) - [UAE Government Legislation Portal](https://uaelegislation.gov.ae/en/legislations/3314/download) - [Central Bank of the UAE (Rulebook)](https://rulebook.centralbank.ae/en/rulebook/federal-decree-law-no-10-2025-regarding-anti-money-laundering-and-combating-financing) - [Central Bank of the UAE](https://rulebook.centralbank.ae/en/rulebook/cabinet-decision-no-10-2019-concerning-implementing-regulation-decree-law-no-20-2018-anti) - [VLO Law Firm](https://www.vlolawfirm.com/trackers/sanctions-uae) - [goAML Registration (private compliance portal)](https://goamlregistration.ae/financial-intelligence-unit/) - [Central Bank of the UAE (Rulebook)](https://rulebook.centralbank.ae/en/rulebook/44-suspicious-transaction-report-filing) - [GRC Advisors (law-firm/consultancy commentary)](https://grcadvisors.ae/anti-money-laundering-laws-in-uae-guide/) - [King & Spalding](https://www.kslaw.com/insights/articles/a-new-era-for-uae-federal-securities-regulation-the-2025-cma-decree-laws-february-2026) - [AML UAE](https://amluae.com/a-guide-to-anti-money-laundering-aml-laws-in-uae/) - [Zola Group](https://zolagroup.com/resources/uae-ubo-declaration-guide) - [GRC Advisors (law-firm/consultancy commentary)](https://grcadvisors.ae/local-terrorist-list/) - [Central Bank of the UAE (CBUAE)](https://rulebook.centralbank.ae/en/rulebook/united-arab-emirates%E2%80%99-virtual-assets-travel-rule) - [US Treasury](https://home.treasury.gov/news/press-releases/sb0617) - [Federal Register](https://www.federalregister.gov/documents/2026/10/26/2026-21733/notice-of-ofac-sanctions-action) - [The National](https://www.thenationalnews.com/news/uae/2026/10/30/uae-fines-foreign-bank-branch-dh200-million-for-breaching-money-laundering-laws/) - [Emirates 24|7 / WAM](https://www.emirates247.com/business/cbuae-imposes-financial-penalty-of-aed200000000-on-a-branch-of-a-foreign-bank-licensed-in-the-uae/7290) - [amluae.com](https://amluae.com/fatf-grey-list-update-october-2026/) - [VARA](https://www.vara.ae/en/) - [Mutual Evaluation of the United Arab Emirates (UAE) - Report and annexes](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationoftheunitedarabemiratesuae-reportandannexes.html) - [The United Arab Emirates' progress in strengthening measures to tackle money laundering and terrorist financing](https://www.fatf-gafi.org/en/publications/Mutualevaluations/FUR-UAE-2023.html) - [Mutual Evaluations](https://www.fatf-gafi.org/en/publications/Mutualevaluations.html) - [United Arab Emirates](https://www.fatf-gafi.org/en/countries/detail/%C3%89mirats%20arabes%20unis.html) - [Consolidated assessment ratings](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Assessment-ratings.html) - [Publications](https://www.fatf-gafi.org/en/publications.html) - [Middle East and North Africa Financial Action Task Force (MENAFATF)](https://www.fatf-gafi.org/en/countries/global-network/middle-east-and-north-africa-financial-action-task-force--menafa.html) - [Assessments](https://www.fatf-gafi.org/en/calendars/assessments.html) - [United Arab Emirates' measures to combat money laundering and terrorist financing](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mer-uae-2020.html) - [3rd Enhanced Follow-up Report for the United Arab Emirates](https://www.fatf-gafi.org/content/dam/fatf-gafi/fsrb-fur/UAE-Follow-Up-Report-2023.pdf.coredownload.pdf) - [FATF GUIDANCE Money Laundering National Risk Assessment Guidance November 2024](https://www.fatf-gafi.org/content/dam/fatf-gafi/reports/Money-Laundering-National-Risk-Assessment-Guidance-2024.pdf.coredownload.inline.pdf) - [Jurisdictions under Increased Monitoring - 23 February 2024](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/Increased-monitoring-february-2024.html) - [fatf Guidance National Money Laundering and Terrorist Financing Risk Assessment](https://www.fatf-gafi.org/content/dam/fatf-gafi/reports/National_ML_TF_Risk_Assessment.pdf) - [Money Laundering National Risk Assessment Guidance](https://www.fatf-gafi.org/en/publications/Methodsandtrends/Money-Laundering-National-Risk-Assessment-Guidance.html) - [Fatf-gafi](https://www.fatf-gafi.org/media/fatf/documents/reports/mer4/Executive-Summary-Mutual-Evaluation-Report-UAE-2020.pdf) - [April 2020 Anti-money laundering and counter-terrorist fi nancing measures](https://www.fatf-gafi.org/media/fatf/documents/reports/mer4/Mutual-Evaluation-Report-United-Arab-Emirates-2020.pdf) - [FATF launches National Risk Assessment toolkit to help countries identify greatest money laundering risks](https://www.fatf-gafi.org/en/publications/Fatfgeneral/FATF-launches-National-Risk-Assessment-toolkit-to-help-countries-identify-greatest-money-laundering-risks.html) - [Sanctions Programs and Country Information | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information) - [EU's 20th Russia Sanctions Package](https://www.chainalysis.com/blog/eu-russia-sactions-package-april-2026/) - [Russian Harmful Foreign Activities Sanctions | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information/russian-harmful-foreign-activities-sanctions) - [OFAC Sanctions 300 Individuals and Entities Involved In Russia's War Effort Including Sanctions Evasion Networks | TRM Labs](https://www.trmlabs.com/resources/blog/ofac-sanctions-300-individuals-and-entities-involved-in-russias-war-effort-including-sanctions-evasion-networks) - [Russian Attempts to Evade Sanctions Using New Overseas ...](https://ofac.treasury.gov/media/933146/download?inline=) - [D Updated Guidance for Foreign Financial Institutions on OFAC Sanctions](https://ofac.treasury.gov/media/932436/download?inline=) - [Issuance of Amended Russia-related Frequently Asked Questions | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20251218_33) - [Additional Sanctions Lists | Office of Foreign Assets Control](https://ofac.treasury.gov/other-ofac-sanctions-lists) - [Recent Actions | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions) - [2025 Crypto regulatory and policy outlook: 5 Trends to expect for the year ahead](https://www.elliptic.co/blog/2025-crypto-regulatory-and-policy-outlook-5-trends-to-expect-for-the-year-ahead) - [19th package of sanctions against Russia: EU targets Russian energy, third-country banks and crypto providers - Consilium](https://www.consilium.europa.eu/en/press/press-releases/2025/10/23/19th-package-of-sanctions-against-russia-eu-targets-russian-energy-third-country-banks-and-crypto-providers/) - [UAE Tightens Scrutiny on Russian Firms Amid Pressure From US - Bloomberg](https://www.bloomberg.com/news/articles/2023-11-23/uae-tightens-scrutiny-on-russian-firms-amid-pressure-from-us) - [Russian Banks May Have Swapped Gold for Dollars in UAE, Turkey: Sayari Report - Bloomberg](https://www.bloomberg.com/news/articles/2024-02-07/some-russian-banks-may-have-swapped-gold-for-dollars-report-says) - [EU adopts 19th package of sanctions against Russia - Finance](https://finance.ec.europa.eu/news/eu-adopts-19th-package-sanctions-against-russia-2025-10-23_en) - [EU Chief Set to Press UAE President on Russia Sanctions Evasion - Bloomberg](https://www.bloomberg.com/news/articles/2023-09-07/eu-chief-set-to-press-uae-president-on-russia-sanctions-evasion) - [Russia-linked cryptocurrency services and sanctions evasion](https://www.elliptic.co/blog/russia-linked-cryptocurrency-services-and-sanctions-evasion) - [Russia Becomes UAE’s Top Gold Source After Being Shut Out of West - Bloomberg](https://www.bloomberg.com/news/articles/2023-09-20/russia-becomes-uae-s-top-gold-source-after-being-shut-out-of-west) - [OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime - Chainalysis](https://www.chainalysis.com/blog/ofac-sanctions/) - [UAE Central Bank Fines 11 Banks for Compliance Failure - Bloomberg](https://www.bloomberg.com/news/articles/2021-01-31/uae-central-bank-fines-11-banks-for-compliance-failure) - [Civil Penalties and Enforcement Information | Office of Foreign Assets Control](https://ofac.treasury.gov/civil-penalties-and-enforcement-information) - [Enforcement Actions | FinCEN.gov](https://www.fincen.gov/news/enforcement-actions) - [Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs](https://www.trmlabs.com/reports-and-whitepapers/global-crypto-policy-review-outlook-2025-26) - [The FATF Recommendations](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Fatf-recommendations.html) - ["Black and grey" lists](https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html) - [Complex Proliferation Financing and Sanctions Evasion Schemes FATF Report](https://www.fatf-gafi.org/content/dam/fatf-gafi/reports/Complex-PF-Sanctions-Evasions-Schemes.pdf.coredownload.inline.pdf) - [Crypto regulatory affairs: UAE takes steps to bolster its crypto regulatory framework](https://www.elliptic.co/blog/uae-takes-steps-to-bolster-its-crypto-regulatory-framework) - [2025 Crypto Regulatory Round-Up](https://www.chainalysis.com/blog/2025-crypto-regulatory-round-up/) - [From trading bans to total embrace, a global guide to crypto regulation](https://www.icij.org/investigations/coin-laundry/cryptocurrency-regulations-global-explainer/) - [Crypto regulatory affairs: UAE Central Bank approves plan for stablecoin registration framework](https://www.elliptic.co/blog/uae-central-bank-approves-plan-for-stablecoin-registration-framework) - [Crypto Regulatory Affairs: Dubai rolls out digital asset regs, includes privacy coin ban](https://www.elliptic.co/blog/analysis/crypto-regulatory-affairs-dubai-s-vara-rolls-out-digital-asset-regs-includes-privacy-coin-ban) - [In conversation with Dubai's Virtual Assets Regulatory Authority](https://www.chainalysis.com/blog/in-conversation-with-the-worlds-first-and-only-standalone-virtual-assets-regulator-dubais-virtual-assets-regulatory-authority/) - [How crypto regulation changed in 2025: a global review](https://www.elliptic.co/blog/how-crypto-regulation-changed-in-2025) - [Crypto regulatory affairs: UAE continues innovation push with digital dirham transfer](https://www.elliptic.co/blog/crypto-regulatory-affairs-uae-continues-innovation-push-with-digital-dirham-transfer?hs_amp=true) - [UAE Country Guide | Elliptic](https://www.elliptic.co/country-guides/united-arab-emirates) - [Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/commission-updates-list-high-risk-countries-strengthen-international-fight-against-financial-crime-2025-06-10_en) - [EU Cuts UAE From Money Watchlist, Flags Monaco | OCCRP](https://www.occrp.org/en/news/eu-cuts-uae-from-money-watchlist-flags-monaco) - [Anti-money laundering and countering the financing of terrorism at international level - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level_en) - [Anti-money laundering: the Commission updates its list of high-risk third-country jurisdictions to strengthen the international fight against financial crime - Finance](https://finance.ec.europa.eu/news/anti-money-laundering-commission-updates-its-list-high-risk-third-country-jurisdictions-strengthen-2022-12-20_en) - [High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission](https://finance.ec.europa.eu/financial-crime/high-risk-third-countries-and-international-context-content-anti-money-laundering-and-countering_en) - [European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/european-commission-updates-list-high-risk-countries-strengthen-international-fight-against-2025-12-04_en) - [Protecting the EU’s financial system - Finance - European Commission](https://finance.ec.europa.eu/news/protecting-eus-financial-system-2025-07-16_en) - [UAE Off EU Watchlist, Critics Say Reforms Fall Short | OCCRP](https://www.occrp.org/en/news/uae-off-eu-watchlist-critics-say-reforms-fall-short) - [Anti-Money Laundering and Terrorist Financing Directive 4 - Finance](https://finance.ec.europa.eu/regulation-and-supervision/financial-services-legislation/implementing-and-delegated-acts/anti-money-laundering-and-terrorist-financing-directive-4_en) - [Pandora Papers - ICIJ](https://www.icij.org/investigations/pandora-papers/) - [About the Pandora Papers - ICIJ](https://www.icij.org/investigations/pandora-papers/about-pandora-papers-investigation/) - [Watch: Oligarchs’ secret deals exposed in Pandora Papers Russia - ICIJ](https://www.icij.org/investigations/pandora-papers/pandora-papers-russia-archive-video/) - [Russia-focused stories from ICIJ's Pandora Papers partners and more - ICIJ](https://www.icij.org/investigations/russia-archive/russia-focused-stories-from-icijs-pandora-papers-partners-and-more/) - [ICIJ publishes final batch of Pandora Papers data on more than 9,000 offshore companies, trusts and foundations - ICIJ](https://www.icij.org/investigations/pandora-papers/icij-publishes-final-batch-of-pandora-papers-data-on-more-than-9000-offshore-companies-trusts-and-foundations/) - [As Sri Lanka’s ruling Rajapaksas flee, Pandora Papers reveal ties to UAE properties - ICIJ](https://www.icij.org/investigations/pandora-papers/as-sri-lankas-ruling-rajapaksas-flee-pandora-papers-reveal-ties-to-uae-properties/) - [Frequently asked questions about the Pandora Papers and ICIJ - ICIJ](https://www.icij.org/investigations/pandora-papers/frequently-asked-questions-about-the-pandora-papers-and-icij/) - [ICIJ's guide to Russian wealth hidden offshore - ICIJ](https://www.icij.org/investigations/russia-archive/icijs-guide-to-russian-wealth-hidden-offshore/) - [Offshore havens and hidden riches of world leaders and billionaires exposed in unprecedented leak - ICIJ](https://www.icij.org/investigations/pandora-papers/global-investigation-tax-havens-offshore/) - [ICIJ reveals more than 800 Russians behind secret companies in landmark expansion of public offshore database - ICIJ](https://www.icij.org/investigations/pandora-papers/alpha-offshore-leaks-database-pandora-papers-russia/) - [Money Laundering Advisory Notice: High Risk Third Countries - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2) - [HM Treasury publish updated list of high risk third jurisdictions](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/hm-treasury-publish-updated-list-of-high-risk-third-jurisdictions) - [Money Laundering Advisory Notice: June 2026 - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/money-laundering-advisory-notice-high-risk-third-countries--2) - [HM Treasury Advisory Notice: High Risk Third Countries - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/hm-treasury-advisory-notice-high-risk-third-countries) - [High-risk third countries](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/high-risk-third-countries) - [ECSH31555 - Schedule 3ZA - High-Risk Third Countries - HMRC internal manual - GOV.UK](https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh31555) - [The Money Laundering and Terrorist Financing (High-Risk ...](https://www.legislation.gov.uk/uksi/2023/704/pdfs/uksiem_20230704_en_001.pdf) - [The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) Regulations 2023](https://www.legislation.gov.uk/uksi/2023/704/made) - [The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) (No. 3) Regulations 2022](https://www.legislation.gov.uk/uksi/2022/1183/made) - [US Treasury Sanctions DPRK Bankers and Front Companies Laundering Proceeds from Cybercrime and IT Worker Operations | TRM Blog](https://www.trmlabs.com/resources/blog/us-treasury-sanctions-dprk-bankers-and-front-companies-laundering-proceeds-from-cybercrime-and-it-worker-operations) - [North Korea IT Workers: Inside the DPRK’s Crypto Laundering Network](https://www.chainalysis.com/blog/dprk-it-workers-north-korea-crypto-laundering-networks/) - [OFAC Targets DPRK IT Workers Using Crypto](https://www.chainalysis.com/blog/ofac-targets-north-korean-it-workers-crypto-march-2026/) - [OFAC lists 53 crypto addresses of sanctioned North Korean Cheil Credit Bank](https://www.elliptic.co/blog/ofac-lists-53-crypto-addresses-of-sanctioned-north-korean-cheil-credit-bank) - [OFAC sanctions a fraud network for assisting the North Korean (DPRK) regime](https://www.elliptic.co/blog/ofac-sanctions-a-fraud-network-for-assisting-the-north-korean-dprk-regime) - [OFAC Sanctions Fraud Network Funding DPRK Weapons Programs](https://www.chainalysis.com/blog/ofac-sanctions-fraud-network-funding-dprk-weapons-program/) - [Takeaways from MSMT’s Report on DPRK Cyber Operations](https://www.chainalysis.com/blog/msmt-report-north-korea-dprk-cyber-threats/) - [The rise and fall of eXch – the dark service used by North Korea to launder $200 million stolen from Bybit](https://www.elliptic.co/blog/the-rise-and-fall-of-exch-the-dark-service-used-by-north-korea-to-launder-200-million-stolen-from-bybit) - [North Korea's crypto hackers have stolen over $2 billion in 2025](https://www.elliptic.co/blog/north-korea-linked-hackers-have-already-stolen-over-2-billion-in-2025) - [Crypto regulatory affairs: UAE continues innovation push with digital dirham transfer](https://www.elliptic.co/blog/crypto-regulatory-affairs-uae-continues-innovation-push-with-digital-dirham-transfer) - [Facing global pressure, the United Arab Emirates to begin fining violators of new corporate transparency rules - ICIJ](https://www.icij.org/investigations/fincen-files/facing-global-pressure-the-united-arab-emirates-to-begin-fining-violators-of-new-corporate-transparency-rules/) - [United States Department of the Treasury Financial Crimes Enforcement Network - Home | FinCEN.gov](https://www.fincen.gov/) - [Dubai firm with crypto nexus sanctioned for aiding Russian sanctions evasion](https://www.chainalysis.com/blog/ofac-sanctions-russia-john-hanafin-huriya/) - [New Russia-related OFAC crypto sanction: Huriya Private](https://hub.elliptic.co/analysis/new-russia-related-ofac-crypto-sanction-huriya-private/) - [Russia-related Designations, Designations Updates, and Designations Removals; Issuance of Russia-related General Licenses | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20230914) - [Sanctions List Search Tool | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-list-search-tool) - [Russia-related Designations and Designation Removals; Issuance of Russia-related General Licenses; Issuance of New and Updated Russia-related Frequently Asked Questions | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20241030) - [Iran-related Designations; International Criminal Court-related Designations; Russia-related Designations Removals; Foreign Sanctions Evaders Determination Removal; Issuance of Iran-related and International Criminal Court-related General Licenses | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20251218) - [UAE Financial Intelligence Unit](https://uaefiu.gov.ae/media/zc5ibmuj/nra-annual-report-2024.pdf) - [FATF](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/Increased-monitoring-february-2024.html) - [FATF-MENAFATF (with IMF FSAP input)](https://www.fatf-gafi.org/media/fatf/documents/reports/mer4/Mutual-Evaluation-Report-United-Arab-Emirates-2020.pdf) - [MENAFATF](https://www.fatf-gafi.org/content/dam/fatf-gafi/fsrb-fur/UAE-Follow-Up-Report-2023.pdf.coredownload.pdf) - [European Commission](https://finance.ec.europa.eu/news/commission-updates-list-high-risk-countries-strengthen-international-fight-against-financial-crime-2025-06-10_en) - [European Commission](https://finance.ec.europa.eu/news/eu-adopts-19th-package-sanctions-against-russia-2025-10-23_en) - [OCCRP](https://www.occrp.org/en/news/uae-off-eu-watchlist-critics-say-reforms-fall-short) - [ICIJ](https://www.icij.org/investigations/pandora-papers/as-sri-lankas-ruling-rajapaksas-flee-pandora-papers-reveal-ties-to-uae-properties/) - [TRM Labs](https://www.trmlabs.com/reports-and-whitepapers/global-crypto-policy-review-outlook-2025-26) - [HM Treasury](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2) - [Chainalysis](https://www.chainalysis.com/blog/ofac-sanctions/) - [Bloomberg](https://www.bloomberg.com/news/articles/2023-09-20/russia-becomes-uae-s-top-gold-source-after-being-shut-out-of-west) Coverage gaps fim-int-2026-07-07-G001: No T1 primary OFAC press release or… fim-int-2026-07-07-G001: No T1 primary OFAC press release or SDN listing citation is available in the research bundle for the September 2025 Iranian shadow-banking designation; only T3 vendor analysis was cited, per Challenge hard-flag findings f-001 and f-002. [resolved] fim-int-2026-07-07-G002: Entity-level names and penalty amou… fim-int-2026-07-07-G002: Entity-level names and penalty amounts for the 2025 CBUAE and insurance-sector AML/CTF fines against UAE exchange houses and brokers are not available in English-language public sources, limiting proportionality assessment under FATF R.35. [resolved] fim-int-2026-07-07-G003: No unified, publicly queryable UAE … fim-int-2026-07-07-G003: No unified, publicly queryable UAE beneficial-ownership register exists; the assessment relies on leak-based investigative disclosures rather than primary registry data. [resolved] fim-int-2026-07-07-G004: An updated MENAFATF Enhanced Follow… fim-int-2026-07-07-G004: An updated MENAFATF Enhanced Follow-Up Report with revised UAE ratings on R.1, R.19 and R.29 is not yet published this cycle; the current assessment rests on the 2023 third EFUR pending the next report expected in 2026. [resolved] fim-int-2026-07-07-G005: UAE domestic sanctions posture towa… fim-int-2026-07-07-G005: UAE domestic sanctions posture toward Russia and Iran is not independently verified beyond the observation that no parallel restrictive measures regime exists; confirmation would require a primary UAE government source. [resolved] fim-int-2026-07-13-G001: No Official Gazette full text of Fe… fim-int-2026-07-13-G001: No Official Gazette full text of Federal Decree-Law No. 6 of 2025 was retrieved this cycle; only Tier 4 law-firm summaries corroborate the New CBUAE Law's content and deadline. [resolved] fim-int-2026-07-13-G002: Tier D watch jurisdictions (KH/LA/M… fim-int-2026-07-13-G002: Tier D watch jurisdictions (KH/LA/MX/CO) were not actively searched this cycle; pooled research budget was concentrated on the AE-bound dispatch scope. [resolved] fim-int-2026-07-13-G003: No FATF 5th-round Mutual Evaluation… fim-int-2026-07-13-G003: No FATF 5th-round Mutual Evaluation formal report/rating for the UAE was published this cycle; only preparatory/expectation commentary was located. [resolved] fim-int-2026-08-05-G001: No qualifying Mexico-specific casin… fim-int-2026-08-05-G001: No qualifying Mexico-specific casino/remittance AML signal identified this cycle despite targeted search. [resolved] fim-int-2026-08-05-G002: No qualifying Colombia-specific cas… fim-int-2026-08-05-G002: No qualifying Colombia-specific casino/remittance AML signal identified this cycle despite targeted search. [resolved] fim-int-2026-08-05-G003: FATF fifth-round mutual evaluation … fim-int-2026-08-05-G003: FATF fifth-round mutual evaluation report publication date for the UAE is not yet established. [resolved] fim-int-2026-08-05-G004: CMA Decision No. 4/R.M/2026 primary… fim-int-2026-08-05-G004: CMA Decision No. 4/R.M/2026 primary text (Tier-1) not directly retrieved this cycle; virtual-asset framework characterisation rests on secondary sources only. [resolved] fim-int-2026-08-17-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-08-17-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No CBUAE primary-source URL was retrieved this cycle for the six-document AML/CFT/CPF guidance package; confidence capped at Assessed. [resolved] fim-int-2026-08-17-G002: Tier-D watch jurisdictions (KH/LA/M… fim-int-2026-08-17-G002: Tier-D watch jurisdictions (KH/LA/MX/CO) were not actively searched this cycle due to shared union web-search budget prioritisation on AE. [resolved] fim-int-2026-08-17-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-08-17-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): Single T4 aggregator source for the Zedx DMCC/BZ Diamond DMCC designation was not independently corroborated against a T1 OFAC SDN update this cycle. [resolved] fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No dated TBML-specific enforcement or typology finding for AE was located this cycle beyond standing structural trade/gold/real-estate corridor characterisation. [resolved] fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D4'}): No AE-specific conflict-finance finding was located this cycle. [resolved] fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D6'}): No AE-specific compliance-technology/RegTech supervisory development was located this cycle. [resolved] fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No T1 UAE Official Gazette text for Federal Decree-Law No. 10 of 2025 was directly retrieved this cycle; confidence capped at Probable pending primary-source retrieval. [resolved] fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D4'}): D4 (Conflict Finance) and D6 (Compliance Technology) coverage was thin this cycle for AE; no sourced material was located. [resolved] fim-int-2026-10-04-G003: Laos (LA) tier-D watch jurisdiction… fim-int-2026-10-04-G003: Laos (LA) tier-D watch jurisdiction had no material change located this cycle. [resolved] fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No T1 UAE Official Gazette source retrieved to verify Federal Decree-Law No. 10 of 2025's executive regulations (cited by one secondary source as Cabinet Resolution No. 134 of 2025). [resolved] fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No direct CBUAE press-release URL retrieved; centralbank.ae enforcement notices not directly fetched this cycle. [resolved] fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', 'value': 'D2'}): D2 (beneficial ownership), D3 (enabler jurisdictions), D4 (conflict finance) and D6 (compliance technology) carried no AE-specific finding this cycle; thin coverage, not confirmed no-change. [resolved] fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No AE-specific D3 enabler-jurisdiction finding was located this cycle. [resolved] fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D4'}): No AE-specific D4 conflict-finance finding was located this cycle. [resolved] fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): FATF 5th-round mutual evaluation on-site timetable was not confirmed from a primary FATF source this cycle. [resolved] fim-int-2026-10-18-G004: Tier D jurisdictions (KH, LA, MX, C… fim-int-2026-10-18-G004: Tier D jurisdictions (KH, LA, MX, CO) were not actively re-swept this cycle due to pooled search-budget allocation to AE-specific findings. [resolved] fim-int-2026-11-02-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-11-02-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): DIFC/ADGM free-zone AML regimes (DFSA/FSRA) run parallel to the federal regime and were not researched in depth this cycle. [open] fim-int-2026-11-02-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-11-02-G002 ({'scheme': 'financial_integrity', 'value': 'D1'}): Capital Markets Law 2025 gazette number and precise commencement date, and status of SCA Chairman Decision No. 32 of 2021 on market abuse, not confirmed. [open] fim-int-2026-11-02-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-11-02-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): CR 134/2025 application date to financial free zones (reported as 2 March 2026 by a T3 source) requires primary-source verification. [open] fim-int-2026-11-02-G004 ({'scheme': 'financial_integrity', '… fim-int-2026-11-02-G004 ({'scheme': 'financial_integrity', 'value': 'D2'}): 2024 Ministry of Economy DNFBP enforcement sweep statistic (29 inspected companies, beneficial-ownership verification as common violation) requires verification against the Ministry's own announcement. [open] fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): UN Panel of Experts (Yemen) / OFAC / OFSI Houthi-linked designation channels not independently re-run against primary pages this cycle. [open] fim-int-2026-11-01-G002: Tier D (KH/LA/MX/CO) sweep was not … fim-int-2026-11-01-G002: Tier D (KH/LA/MX/CO) sweep was not performed this cycle; this run was single-JID-bound to AE. [open] fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): min_t1_per_instrument publication-gate flag reported false; no T1 instrument-level grouping was independently verified beyond the Federal Register SDN notice this cycle. [open] FIM-GAP-001 (D2): Dubai real estate remains a documented veh… FIM-GAP-001 (D2): Dubai real estate remains a documented vehicle for opaque foreign wealth. Leaked property data cross-referenced by OCCRP identified over 1,000 Dubai properties tied to more than 200 flagged individuals, including alleged criminals, fugitives and sanctioned persons, exploiting the absence of a unified public beneficial-ownership register. FIM-GAP-002 (D3): UAE's fragmented supervisory architecture … FIM-GAP-002 (D3): UAE's fragmented supervisory architecture across 7 emirates, 2 financial free zones (DIFC, ADGM) and roughly 39 commercial company registries/free zones creates structural regulatory arbitrage opportunities that the 2020 MER and subsequent MENAFATF follow-up reports continue to flag as unresolved. FIM-GAP-003 (D1): Despite UAE's scale as a global trade, gol… FIM-GAP-003 (D1): Despite UAE's scale as a global trade, gold and financial hub, publicly documented money-laundering prosecutions and convictions remain limited relative to its risk profile, a concern the 2020 MER raised specifically for Dubai and that subsequent enhanced follow-up reports have not shown to be fully resolved with updated statistics. FIM-GAP-004 (D3): Granular, named-entity detail on 2025 CBUA… FIM-GAP-004 (D3): Granular, named-entity detail on 2025 CBUAE and insurance-sector AML/CTF fines against exchange houses and brokers is not comprehensively available in English-language public sources; only aggregate vendor commentary (TRM Labs) confirms fines occurred, without amounts or entity identities. ## Evidence #### Confidence-tiered claims Federal Decree-Law No. 10 of 2025, in force since 14 October 2025, is the UAE's primary AML/CFT/CPF statute covering financial institutions, DNFBPs and VASPs; FIU may order cessation of suspicious activity up to 10 working days and freeze assets up to 30 days pending referral. [[Source 1]](#sec-sources) Probable · 1 source AED 20 million institutional fine and AED 300,000 personal fine on Head of Compliance/MLRO for repeated AML/CFT/sanctions failures, dated 24 June 2026. [[Source 1]](#sec-sources) Probable · 1 source OFAC found Banque Misr's five UAE branches to be of primary money-laundering concern under Section 311, barring US correspondent-account access (24 August 2026); Golden Global Bank designated 4 September 2026 for facilitating Iran's access to international banking channels. [[Source 1]](#sec-sources) Probable · 1 source VARA's 24 February 2026 circular applies full originator/beneficiary data collection above AED 3,500, 8-year record retention, and 3-month risk-rating refresh cycles for Dubai-licensed VASPs. [[Source 1]](#sec-sources) Probable · 1 source FATF's June 2026 plenary added Iraq and Bosnia & Herzegovina and removed Algeria and Namibia, taking the grey list to 22 jurisdictions; AE remains off the list (exited Feb 2024). [[Source 1]](#sec-sources) Probable · 1 source UAE Cabinet Resolution No. 63 of 2026 added 16 individuals and 5 entities to the UAE Terrorist List. [[Source 1]](#sec-sources) Probable · 1 source 2025-10-14 [[Source 1]](#sec-sources) Probable · 1 source UAE 5th-round mutual evaluation onsite expected mid-2026 (June 2026 per one source) [[Source 1]](#sec-sources) Probable · 1 source AEROBRAVO Airplane Management and Operation LLC (Dubai); ECT Aviation Support LLC (Sharjah) [[Source 1]](#sec-sources) Probable · 1 source AED 20,000,000 on foreign bank branch; AED 300,000 personal fine on MLRO [[Source 1]](#sec-sources) Probable · 1 source CMA Decision No. 4/R.M/2026 (effective February 2026, issued 13 April 2026) replaces SCA Decision No. 26/RM of 2023 with an 8-activity federal framework carrying its own AML/CFT module. [[Source 1]](#sec-sources) Probable · 1 source ArabianPro Materials FZCO, Hessonite, Horizon Ship Management FZE designated under Operation Economic Outcast for Iran sanctions evasion, 1-8 October 2026 [[Source 1]](#sec-sources) Probable · 1 source Traco International FZE, Silver Line Metal Trading LLC, Integrated Auto Parts LLC added to SDN List under Iran automotive-sector determination, 1 October 2026 [[Source 1]](#sec-sources) Probable · 1 source Payward FZCO (Kraken's UAE entity) granted VASP Full Market Approval, announced 12 October 2026 (register entry dated 6 October 2026) [[Source 1]](#sec-sources) Probable · 1 source Standard Chartered's DIFC branch, regulated by DFSA, launched live institutional custody for RLUSD stablecoin on 12 October 2026 [[Source 1]](#sec-sources) Probable · 1 source 5th round mutual evaluation on-site visit reported as expected around mid-2026 [[Source 1]](#sec-sources) Uncertain · 1 source AE's AML/CFT regime supervised via the Executive Office to Combat Money Laundering and Terrorist Financing and the UAE FIU (goAML); VASP occasional-transaction CDD threshold and Travel Rule beneficiary-verification threshold reported at AED 3,500 [[Source 1]](#sec-sources) Probable · 1 source 25% ownership/control threshold, three control limbs, 15-day update obligation; no amendment identified this cycle [[Source 1]](#sec-sources) Probable · 1 source UAE Local Terrorist List and UN Security Council Consolidated List [[Source 1]](#sec-sources) Probable · 1 source imprisonment and/or fine not less than AED 20,000 [[Source 1]](#sec-sources) Probable · 1 source Counter-Proliferation Financing [[Source 1]](#sec-sources) Probable · 1 source 25% ownership or controlling interest [[Source 1]](#sec-sources) Probable · 1 source 60 working days to create; 15 working days to update [[Source 1]](#sec-sources) Probable · 1 source 15 working days [[Source 1]](#sec-sources) Probable · 1 source shell banks [[Source 1]](#sec-sources) Probable · 1 source ['commercial gaming operators', 'real estate brokers and agents', 'dealers in valuable metals and precious stones', 'lawyers/notaries/legal professionals and accountants', 'company and trust service providers', 'other categories by resolution'] [[Source 1]](#sec-sources) Probable · 1 source ['Ministry of Economy and Tourism', 'Ministry of Justice', 'GCGRA'] [[Source 1]](#sec-sources) Probable · 1 source conflict-minerals/extractive-payments-transparency regulation [[Source 1]](#sec-sources) Uncertain · 1 source Securities and Commodities Authority [[Source 1]](#sec-sources) Probable · 1 source regulated Financial Products perimeter [[Source 1]](#sec-sources) Probable · 1 source AED 3,500 [[Source 1]](#sec-sources) Probable · 1 source 2026-03-31 [[Source 1]](#sec-sources) Probable · 1 source Federal Decree-Law No. 20 of 2018 [[Source 1]](#sec-sources) Probable · 1 source 2025-10-14 [[Source 1]](#sec-sources) Probable · 1 source AED 55,000 [[Source 1]](#sec-sources) Probable · 1 source AED 3,500 [[Source 1]](#sec-sources) Probable · 1 source True [[Source 1]](#sec-sources) Probable · 1 source True [[Source 1]](#sec-sources) Probable · 1 source AED 20,000 minimum fine and/or imprisonment [[Source 1]](#sec-sources) Probable · 1 source AED 5,000,000 to AED 100,000,000 [[Source 1]](#sec-sources) Probable · 1 source 2026-03-31 [[Source 1]](#sec-sources) Probable · 1 source True [[Source 1]](#sec-sources) Probable · 1 source AED 55,000 [[Source 1]](#sec-sources) Probable · 1 source AED 200,000,000 fine on foreign bank branch for AML/CFT, governance and sanctions-control failures; CEO and Head of Compliance personally fined [[Source 1]](#sec-sources) Probable · 1 source Whales Diamond and Whales Pearl (UAE-flagged crew/supply vessels linked to Whales Shipping Line LLC) added to SDN List under EO 13902 [[Source 1]](#sec-sources) Probable · 1 source Circular on good practices for VASPs' public disclosures, issued 28 October 2026 [[Source 1]](#sec-sources) Probable · 1 source October 2026 Plenary removed DRC, Monaco, Bulgaria and Côte d'Ivoire from the grey list; AE unaffected, remains off the list since February 2024 [[Source 1]](#sec-sources) Probable · 1 source Banque Misr UAE processed approximately $1.8 billion for 103 companies, prompting Operation Economic Outcast correspondent-access severance [[Source 1]](#sec-sources) Probable · 1 source