In the UAE, anti-money laundering compliance is no longer treated as a narrow reporting exercise. It is part of a broader legal framework that allows authorities to intervene early where financial crime is suspected.

Under Federal Decree-Law No. (10) of 2025 Regarding Anti-Money Laundering and Combating the Financing of Terrorism and Proliferation Financing, the UAE significantly strengthened its enforcement framework. The law was issued on 30 September 2025 and came into force on 14 October 2025, replacing the earlier legislative regime and reinforcing the country’s risk-based approach to financial crime prevention.

At the heart of this framework is the power granted to the Financial Intelligence Unit (FIU) to take provisional measures where there are reasonable grounds to suspect that funds or transactions may be linked to money laundering, terrorist financing, or proliferation financing. Legal analysis of the new law notes that these powers include the ability to suspend transactions for up to 10 working days and freeze funds for up to 30 days, with extensions possible through the competent authority. These measures are designed to preserve the status quo while authorities assess the underlying risk and determine whether further legal action is required.

This is an important point for businesses, financial institutions, and private clients alike. The purpose of these powers is not merely punitive. They are preventative. The law enables authorities to act before funds are moved, dissipated, or otherwise placed beyond reach. In other words, the UAE framework is built to respond at the point of suspicion, not only after wrongdoing has been conclusively established.

Another practical feature of the regime is that action may be taken without prior notice to the customer. This reflects a common principle in AML enforcement: advance warning can compromise an investigation, enable asset flight, or amount to unlawful “tipping off.” UAE regulatory guidance for financial institutions continues to emphasize confidentiality around suspicious transaction reporting and communications with the FIU, reinforcing that once suspicion arises, firms must act carefully and avoid alerting the subject in a way that may frustrate regulatory action.

The reporting threshold is equally important. In the UAE, the obligation to report suspicion does not depend on the value of the transaction. Where suspicion exists, a report may be required regardless of size. That means a small transfer, an unusual payment pattern, inconsistent source-of-funds information, or behaviour that does not align with a customer’s known profile may all trigger internal review and, where appropriate, reporting to the FIU. The Central Bank’s AML/CFT rulebook continues to frame suspicious transaction reporting as a substance-driven exercise, focused on risk indicators rather than simple transaction size.

This has wider implications than many businesses initially assume. Freezing action is often associated in the public mind with criminal investigations alone, but from a compliance perspective, the issue usually begins much earlier. It may start with incomplete due diligence, inconsistent transactional behaviour, unclear commercial rationale, weak supporting documentation, opaque ownership structures, or an inability to answer basic source-of-funds questions promptly and coherently. In a risk-based environment, those weaknesses can quickly move a matter from routine onboarding or transaction monitoring into regulatory scrutiny.

The operational impact of a freeze can be severe. Even where a business ultimately resolves the issue, the immediate disruption may include delayed payments, restricted account activity, interrupted supplier obligations, strained banking relationships, and reputational concern. For regulated firms and licensed entities, the consequences may extend beyond the transaction itself. Regulatory authorities in the UAE retain powers to impose administrative sanctions for compliance failures, while the legal framework also contemplates stronger action in serious cases. Separate UAE resolutions already set out administrative penalty mechanisms for AML-related breaches in relevant sectors.

For that reason, the real compliance question is not simply whether a client or transaction is legitimate in principle. The more important question is whether that legitimacy can be demonstrated clearly, quickly, and consistently. In practice, that means maintaining:

• clear source-of-funds and source-of-wealth records,
• up-to-date KYC and beneficial ownership information,
• coherent explanations for unusual or high-risk transactions,
• proper contracts, invoices, corporate records, and payment support,
• internal escalation procedures for suspicious activity, and
• documented AML/CFT policies that reflect the business’s actual risk exposure.

This is particularly relevant for businesses operating in sectors exposed to higher AML scrutiny, including financial services, cross-border trade, precious metals and stones, corporate structuring, and other activities involving complex movement of value. The UAE framework increasingly expects firms not only to have formal policies in place, but also to show that those policies are implemented, reviewed, and capable of producing evidence when regulators ask for it.

Seen in that light, freezing powers are not an isolated legal tool. They are part of a much broader compliance architecture. The FIU’s ability to intervene, the reporting entity’s duty to identify and escalate suspicion, and the regulator’s ability to sanction poor controls all work together. The direction is clear: the UAE expects businesses to understand risk, monitor it actively, and respond to it in a structured and documented manner.

Final Thought

In the UAE, compliance is not only about what you do. It is about what you can evidence.

A transaction may be commercially genuine. A client relationship may be entirely lawful. But if the rationale is unclear, the documentation is incomplete, or the response to a regulatory query is inconsistent, disruption can follow very quickly.

That is why a proactive compliance posture matters. Clear records, disciplined transaction monitoring, and the ability to respond promptly to scrutiny are no longer just internal best practices. They are essential safeguards for operating confidently in the UAE’s increasingly robust and risk-based regulatory environment.