Get a free trial for 5 days for WorldCompliance Online.

Get Free Trial

Monitoring & reporting

AML Transaction Monitoring in the UAE: Practical Rules, Thresholds & goAML Preparation

Screening tells you who your customer is. Transaction monitoring tells you whether what they do matches what you expected. UAE supervisors increasingly ask to see both — and to see how an unusual payment became a reviewed alert, a decision and, where needed, a goAML report.

Updated 28 October 2026Legal references last reviewed 28 October 20268 minute readGeneral guidance, not legal advice

Supports your UAE AML/CFT obligations

Screening records and audit trails help firms supervised by these UAE authorities evidence their checks. Your compliance team remains responsible for meeting your regulator's requirements.

  • CBUAE

    Central Bank of the UAE

  • goAML

    UAE FIU suspicious activity reporting

  • MoET

    Ministry of Economy and Tourism — DNFBP supervision

  • DFSA

    Dubai Financial Services Authority

  • ADGM

    Abu Dhabi Global Market

  • VARA

    Virtual Assets Regulatory Authority

Why monitoring is a separate obligation from screening

UAE AML/CFT law expects reporting entities to carry out ongoing due diligence: checking that transactions are consistent with what they know about the customer, their business and risk profile. Name checks against sanctions and PEP lists — covered by sanctions screening and ongoing monitoring — do not answer that question. A clean customer can still move money in a way that should be questioned.

Scenarios UAE firms commonly monitor for

  • Cash at or near regulatory thresholds — for example, dealers in precious metals and stones and real estate businesses have cash-transaction reporting expectations around AED 55,000. Confirm the current rules for your sector with your supervisor.
  • Structuring — several smaller payments that together pass a threshold, split across days, people or branches.
  • Activity that does not fit the customer profile — turnover well above declared income or business size.
  • Pass-through or rapid in-and-out movement, where funds arrive and leave quickly with little business reason.
  • Payments to or from higher-risk jurisdictions, or third parties with no clear link to the customer.
  • Dormant relationships that suddenly become active with large values.

Start from your risk assessment

Rules should follow your business-wide risk assessment, not a generic list. A gold trader, an exchange house and a corporate service provider will each weight these scenarios differently.

From alert to decision

  1. 1An alert is raised by a rule or a reviewer.
  2. 2The analyst gathers context: customer file, KYC data, previous alerts and related transactions.
  3. 3The analyst records whether the activity is explained, and why.
  4. 4Unexplained or suspicious activity is escalated to the MLRO.
  5. 5The MLRO decides whether to file a report, and the decision and reasons are kept on file.

The same discipline applies to name-screening hits — see our screening alert review checklist.

Preparing goAML-ready cases

Suspicious transaction and activity reports are filed with the UAE Financial Intelligence Unit through goAML. Filing itself happens on the FIU portal, but a good monitoring setup makes it faster: the case already holds the customer details, transaction list, timeline, analyst notes and MLRO reasoning. Reports must be made without delay once suspicion is formed, and the customer must not be tipped off.

Reducing alert fatigue

  • Tune thresholds to your real customer base and review them periodically.
  • Group related alerts into one case instead of reviewing each payment alone.
  • Record why rules change, so an inspector can follow your reasoning.
  • Track how many alerts become escalations — a rule that never produces one may need review.

ComplianceSuite transaction monitoring brings rules, alerts, case notes and audit trails into one place, alongside LexisNexis screening. Firms in precious metals, real estate and exchange houses are typical users.

General guidance

This guide summarises general UAE expectations. It is not legal advice; confirm the thresholds and reporting rules that apply to your business with your supervisor.

Free download

UAE AML Inspection Readiness Checklist

20 practical checks across governance, risk assessment, CDD, screening, goAML reporting and records — before your supervisor asks.

We'll use your details to follow up about AML screening. See our privacy notice.

Frequently asked questions

Is transaction monitoring the same as sanctions screening?

No. Screening checks names against lists. Transaction monitoring checks whether activity is consistent with the customer's profile and flags unusual patterns.

Do small DNFBPs need transaction monitoring software?

Not always. The obligation is to monitor; small firms may do it manually if it is documented and proportionate. Software helps as volumes grow and when inspectors ask for an audit trail.

Where are suspicious transaction reports filed?

With the UAE Financial Intelligence Unit through the goAML portal.

This guide is general information about compliance expectations in the UAE, written by our team. It is not legal advice and does not replace the guidance of your supervisory body. Where an obligation depends on your licence, activity or free zone, confirm it with your supervisor or a qualified adviser.

See it working on your own customer data

A short demo with our UAE team — no obligation.