One federal law, several supervisors
Federal Decree-Law No. 10 of 2025 and its Executive Regulations, Cabinet Resolution No. 134 of 2025, apply across the UAE, including the financial free zones. What changes between jurisdictions is the supervisory body and the detailed rules it issues on top of the federal framework.
Mainland and commercial free zones
- Financial institutions licensed onshore — banks, finance companies, exchange houses and payment providers — are supervised by the Central Bank of the UAE (CBUAE).
- Securities and commodities firms fall under the Securities and Commodities Authority.
- DNFBPs such as real estate agents, precious metals dealers, corporate service providers, accountants and lawyers are supervised by the Ministry of Economy and Tourism (MoET), including in commercial free zones such as JAFZA or DMCC.
- Virtual asset service providers in Dubai are licensed and supervised by VARA.
DIFC — Dubai Financial Services Authority
Firms in the Dubai International Financial Centre are supervised by the DFSA. Authorised firms and designated non-financial businesses registered in the DIFC follow the federal law plus the DFSA's own AML module and guidance.
ADGM — Financial Services Regulatory Authority
Firms in the Abu Dhabi Global Market are supervised by the FSRA, which applies the federal law alongside its own AML and sanctions rules and guidance for authorised persons and relevant DNFBPs.
Groups with entities in more than one zone
A group with a mainland company and a DIFC or ADGM entity can face two supervisors. Map each licensed entity to its supervisor and keep separate, inspectable records for each.
What stays the same everywhere
- A documented business-wide risk assessment.
- Customer due diligence, including beneficial owners.
- Sanctions screening against the UN Consolidated List and the UAE Local Terrorist List, plus PEP and adverse media checks.
- Ongoing monitoring and, where funds flow through you, transaction monitoring.
- Suspicious transaction reporting to the UAE FIU through goAML.
- A compliance officer or MLRO, staff training and record-keeping.
Because the core obligations are shared, one screening and case-management setup — such as ComplianceSuite — can support entities in different zones, while each entity keeps its own audit trail for its own supervisor.
General guidance
This guide summarises general UAE expectations. It is not legal advice; confirm the exact requirements that apply to your business with your supervisor.
Free download
UAE AML Inspection Readiness Checklist
20 practical checks across governance, risk assessment, CDD, screening, goAML reporting and records — before your supervisor asks.
Frequently asked questions
Does the federal AML law apply in the DIFC and ADGM?
Yes. The federal AML/CFT law applies across the UAE. The DFSA and FSRA supervise firms in their zones and add their own rules and guidance.
Who supervises a DNFBP in a commercial free zone like DMCC?
DNFBPs in commercial (non-financial) free zones are supervised by the Ministry of Economy and Tourism (MoET), the same as on the mainland.
Do DIFC and ADGM firms report through goAML?
Suspicious transaction reports in the UAE are filed with the UAE Financial Intelligence Unit through goAML, wherever the firm is licensed.
This guide is general information about compliance expectations in the UAE, written by our team. It is not legal advice and does not replace the guidance of your supervisory body. Where an obligation depends on your licence, activity or free zone, confirm it with your supervisor or a qualified adviser.