Valusage Business Advisors
AML and CFT6 min read

UAE AML framework: questions for a 2026 control refresh

AML risk assessmentcustomer due diligenceCabinet Resolution 134 of 2025

Reviewed 2026-08-26 · Editorial responsibility: Valusage Business Advisors Editorial Practice

Valusage AML and CFT decision visual showing AML control refresh
Original Valusage decision visual. It explains the review structure and does not depict a client result.

Direct answer

A 2026 UAE AML control refresh should begin with the business's supervisory perimeter and risk assessment, then test customer due diligence, beneficial-owner evidence, ongoing monitoring, escalation, record keeping, training and governance against Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025.

Who should assess the impact

Affected teams and businesses

  • Businesses and professions within a UAE AML supervisory perimeter.
  • Management, compliance and operational teams responsible for customer controls.
  • Accountants and company-service providers assessing whether DNFBP obligations apply.

Official source facts

What the announcement establishes

  • Federal Decree-Law No. 10 of 2025 was issued on 30 September 2025.
  • Cabinet Resolution No. 134 of 2025 was issued on 29 October 2025 and took effect on 14 December 2025.
  • The current framework addresses anti-money laundering, terrorism financing and proliferation financing.

Management response

What to review next

  1. 01Confirm the legal entity, activities, regulator and applicable supervisory obligations.
  2. 02Refresh the documented business risk assessment and customer-risk methodology.
  3. 03Sample customer files for identity, beneficial ownership, purpose, source evidence and ongoing review.
  4. 04Test escalation, reporting, training, governance and record-retention controls.

Valusage analysis

Practical implications for the finance and tax file

A control refresh should distinguish a policy from operating evidence. Management needs to know whether the documented procedure is assigned, performed, reviewed and retained in actual files.

Valusage does not provide legal opinions or compliance assurance. Specialist legal or regulated advice may be needed for entity-specific interpretation or reporting decisions.

Valusage email updates

Receive reviewed UAE regulatory updates

Original summaries with official sources and practical context. Confirm by email. Unsubscribe at any time.

Professional boundary

This original summary is general information. It is not a filing opinion, legal advice or a guarantee of authority acceptance, tax treatment, compliance or commercial outcome.

Review the related service →
What is the current UAE AML executive regulation?+

Cabinet Resolution No. 134 of 2025 provides the executive regulations for Federal Decree-Law No. 10 of 2025.

Should an AML refresh start with a generic checklist?+

No. First establish the entity's activities, regulator, supervisory perimeter and risk profile, then map the applicable controls.

Does a written AML policy prove that controls operate?+

No. Management should test assigned ownership, customer files, monitoring, escalation, training, governance and retained evidence.

Contextual impact review

Discuss how this update applies to your entity

Describe the entity, affected period, products or transactions, deadline and evidence available. The news topic and page context accompany the request.

Contextual enquiry

Request a defined impact review

Tell us the outcome, deadline and current position. The selected service context is retained with your request so the right scope can be reviewed.

What would you like to request?

Selected service

UAE Corporate Services

We will review the requirement and contact you to discuss fit, scope and next steps. Submitting this form does not create an engagement. Do not include passwords, tax records or personal documents.