Get a free trial for 5 days for WorldCompliance Online.

Get Free Trial

Sector guide

AML for exchange houses and money service businesses in the UAE

Exchange houses carry the highest volumes and the shortest decision windows in the UAE's AML perimeter. A control that slows every transaction is not workable — so the screening has to be fast, precise and documented.

Updated 17 October 20267 minute readGeneral guidance, not legal advice

Supports your UAE AML/CFT obligations

Screening records and audit trails help firms supervised by these UAE authorities evidence their checks. Your compliance team remains responsible for meeting your regulator's requirements.

  • CBUAE

    Central Bank of the UAE

  • goAML

    UAE FIU suspicious activity reporting

  • MoE

    Ministry of Economy — DNFBP supervision

  • DFSA

    Dubai Financial Services Authority

  • ADGM

    Abu Dhabi Global Market

  • VARA

    Virtual Assets Regulatory Authority

The risk profile of a remittance business

  • High volume and short decision time, so screening must return a result inside the transaction.
  • Corridors where sanctions exposure, corruption or weak supervision raises the baseline risk.
  • Beneficiaries who are never your customers, and are harder to identify.
  • Cash in and cash out, with the customer often not present in person.
  • Sub-agents and networks that introduce customers you never meet.
  • Structuring — amounts kept just below documentation or reporting thresholds, split across days or branches.

Where the controls have to sit

  • Real-time screening of sender and beneficiary against the lists that apply to you, before the money moves.
  • Identification records that travel with the transaction, so a beneficiary can be resolved later.
  • Threshold and aggregation rules that catch repeated small amounts across a customer, a day and a branch.
  • Corridor risk weighting, so higher-risk routes get more attention without slowing everything.
  • Ongoing screening of your customer base as lists change.
  • Transaction monitoring for patterns a name check cannot see.
  • A clear escalation route to a compliance officer who can hold a payment.

Screening that keeps up with the counter

At a counter, a manual name lookup on every remittance is not realistic. Automated screening — batch and real-time, connected to your systems — lets a transaction proceed when nothing is found, and stops it when something is, with the alert written to a queue for a reviewer.

Matching quality matters more than speed here. Beneficiary names arrive transliterated, abbreviated and sometimes incomplete. Phonetic and cultural matching, with thresholds you can tune, is what keeps false positives from drowning the queue.

Red flags

  • A customer sending to many unrelated beneficiaries in a short period.
  • Repeated amounts just below a documentation threshold.
  • A sender who cannot describe the relationship to the beneficiary.
  • A sudden change in corridor or volume for an established customer.
  • Multiple customers sharing a phone number, address or device details.

Records and reporting

Keep the transfer record, the screening result and any alert decision together, so a single transaction can be reconstructed later. Where you suspect proceeds of crime, file a suspicious transaction or activity report to the UAE Financial Intelligence Unit through goAML, and do not inform the customer.

Frequently asked questions

Do we have to screen beneficiaries as well as senders?

Yes. A beneficiary can be a sanctioned party, and they are usually not your customer — which makes the record you keep of them more important, not less.

How do we keep screening from slowing the counter?

Automate it. Real-time screening connected to your transaction system returns a clear result within the flow of the transaction and routes only genuine alerts to a reviewer.

What counts as structuring?

A pattern rather than a single event: amounts kept just under a threshold, split across days, branches or customers. Aggregation rules across customer, time and branch are what surface it.

Which lists should an exchange house check?

The UN Security Council Consolidated List and the UAE National Terrorist List as a baseline, plus US and EU listings where your currencies and correspondent relationships make them relevant, plus Central Bank and other supervisory records for the sector.

This guide is general information about compliance expectations in the UAE, written by our team. It is not legal advice and does not replace the guidance of your supervisory body. Where an obligation depends on your licence, activity or free zone, confirm it with your supervisor or a qualified adviser.

See it working on your own customer data

A short demo with our UAE team — no obligation.