Table of Contents
Frequently Asked Questions
Can a company director act as the compliance officer?
Yes, a director can hold the role in a small, low-risk company with few customers. The risk is a conflict of interest when the director also approves the transactions being reviewed, and banks may question independence. An outside annual review helps address this.
Does a free zone company in the UAE need to register on goAML?
Registration depends on the licensed activity, not the free zone location. A company in a financial institution or DNFBP sector must register with the UAE Financial Intelligence Unit through goAML. A Meydan Free Zone company in one of those sectors follows the same federal rules as any other UAE company.
Who supervises AML compliance for businesses outside the banking sector?
Supervision depends on the sector. The Ministry of Economy and Tourism supervises most DNFBP categories, such as real estate brokers and dealers in precious metals and stones. The Capital Market Authority covers securities-sector firms, while the Central Bank of the UAE supervises banks and exchange houses.
Can a company outsource its compliance officer to a third party?
Yes, many small companies with limited transaction volume appoint an outsourced specialist. The fee is a recurring cost, and quotes vary by provider. Outsourcing does not transfer legal responsibility, so the company remains accountable for its controls and any failure to report.
What should a compliance officer appointment resolution include?
The resolution should name the officer and state their responsibilities and reporting line. It should confirm the officer's access to senior management and be signed by the board or sole shareholder. Notarisation is needed only where a bank or counterparty asks for it.
Do banks ask for a named compliance officer when opening a business account?
Banks often ask who owns compliance, even where the company has no formal sector duty. They usually review the compliance contact alongside ultimate beneficial owner details. Meydan Free Zone's mCore provides business bank account support, but approval is not guaranteed.
What happens if a company fails to report a suspicious transaction?
The company can face supervisory action and administrative penalties under the federal AML framework. Its bank may also review or restrict its accounts. A named, trained officer registered on goAML reduces the risk of missed reports.
Topic Summary
What an AML Compliance Officer in the UAE Does
An AML compliance officer in the UAE is the senior person a company appoints to oversee its anti-money laundering controls. The officer reviews transactions and escalates suspicious activity to the UAE Financial Intelligence Unit through goAML. The officer also maintains internal policies, trains staff and acts as the main contact for supervisors.
Which UAE Companies Need an AML Compliance Officer
Financial institutions and designated non-financial businesses and professions (DNFBPs) must appoint a compliance officer. That covers real estate brokerage, dealing in precious metals and stones, corporate service providers, auditors and legal professionals. Your licensed activity decides which supervisor applies.
How to Appoint an AML Compliance Officer in the UAE
Appointing a compliance officer takes five steps. Assess your AML risk. Choose a suitable senior person. Document the appointment by resolution. Register the officer on goAML. Record the role in your written AML policy. Review it whenever activities or ownership change.
Choosing Between an Internal Hire and an Outsourced Officer
Companies can appoint an employee, a director or an outsourced specialist. An employee offers daily oversight, while outsourcing suits small teams with limited volume. Either way, the company stays accountable for controls and for any failure to report.
How a Meydan Free Zone Company Handles the Appointment
A Meydan Free Zone company follows federal AML rules based on its licensed activity, not its free zone status. Meydan Free Zone issues the Business License, Certificate of Formation, Share Register and Memorandum and Articles of Association digitally. mCore provides business bank account support. Banks often ask who owns compliance during that process.
Risks of Appointing the Wrong Compliance Officer
A weak or unregistered compliance officer exposes a company to supervisory action and administrative penalties. Bank reviews and reputational damage follows. Problems usually come from missing goAML registration, undocumented appointments or an officer with no authority.
Appointing a Compliance Officer in a UAE Company
Most founders treat the compliance officer role as a title to assign once the bank asks for it. Banks, supervisors and the UAE Financial Intelligence Unit see it differently. They expect a named person who answers for how your company handles suspicious activity from the first transaction. Many owners assume only banks need one, or that the owner holds the role by default. Neither assumption holds for every business.
Our guide explains what an AML compliance officer in the UAE does, which companies need one, how to appoint the right person and how to budget for the role. It also shows how a Meydan Free Zone company should structure the appointment before applying for a business license with Meydan Free Zone.
What an AML Compliance Officer in the UAE Does
An AML compliance officer in the UAE is the senior person a company appoints to oversee its anti-money laundering controls. The officer reviews transactions and escalates suspicious activity to the UAE Financial Intelligence Unit through goAML. The officer also maintains internal policies, trains staff and acts as the main contact for supervisors.
Core Duties Under UAE AML Rules
The framework rests on Federal Decree-Law No. 10 of 2025 and its executive regulations, Cabinet Resolution No. 134 of 2025. Your officer reviews customer due diligence files, checks monitoring alerts and keeps risk assessments and records current.
Say a trading company sees a buyer split one large payment across several third-party accounts. The officer reviews the pattern, then decides whether to file a report.
Compliance Officer Versus MLRO
Many UAE businesses use "compliance officer" and "money laundering reporting officer" (MLRO) interchangeably. One person can cover both in a small firm. Split the roles as volumes grow. The title matters less than the registered responsibility.
A small advisory firm, for example, names its managing partner as both, with an outsourced reviewer for independence.
Which UAE Companies Need an AML Compliance Officer
Financial institutions and designated non-financial businesses and professions (DNFBPs) must appoint a compliance officer. That covers real estate brokerage, precious metals and stones dealing, corporate service providers, auditors and legal professionals. Supervisors differ by sector, so your licensed activity decides the authority.
Financial Institutions and DNFBPs
- The Central Bank of the UAE supervises banks and exchange houses.
- The Capital Market Authority covers securities-sector firms.
- The Ministry of Economy supervises most DNFBP categories.
A gold trading company in a free zone still carries DNFBP duties. Its activity counts, not its location.
Low-Risk Companies With No Formal Duty
Companies outside regulated sectors have no sector-specific appointment duty. Banks still ask for a named compliance contact during onboarding. A software consultancy, for instance, names a director after the bank requests one.
Why Your Licensed Activity Decides the Duty
Match your activity code to its supervisor. Adding activities later can add obligations. A trading company that adds brokerage must register with the relevant supervisor. When your business changes, so do your compliance obligations.
How to Appoint an AML Compliance Officer in the UAE
Appointing a compliance officer takes five steps. Assess your AML risk. Choose a suitable senior person. Document the appointment by resolution. Register the officer on goAML. Record the role in your written AML policy. Review it whenever activities or ownership change.
Step 1: Assess Your Business Risk
- Review customers, products, geographies and payment channels.
- Record the assessment in writing.
- Rate cross-border payments higher if you sell to buyers in several jurisdictions.
Step 2: Choose a Suitable Person
- Pick someone senior, with access to management.
- Look for relevant AML training or certification.
- Confirm they have time for the role.
Choose an experienced finance manager over a junior administrator.
Internal Hire vs Outsourced Compliance Officer
| Feature | Internal Appointment | Outsourced Officer |
|---|---|---|
| Day-to-day oversight | Daily access to staff, files and alerts | Scheduled reviews and on-call escalation |
| Independence | Weaker if the owner approves reviewed transactions | Stronger, with no commercial stake in deals |
| Cost structure | Salary and training, a fixed recurring cost | Service fee, set by quote |
| Suitability by company size | Growing firms with steady transaction volume | Small teams with limited transactions |
| Legal accountability | Company remains accountable | Company remains accountable; nothing transfers |
Step 3: Document the Appointment
- Sign a resolution naming the officer and their responsibilities.
- Use notarisation only where a bank or counterparty asks for it.
- Update the AML policy manual.
Step 4: Register on goAML
- Register the entity and the officer with the UAE Financial Intelligence Unit.
- Keep login and approval details secure.
- Plan backup coverage.
A real estate broker registers before closing its first transaction.
Choosing Between an Internal Hire and an Outsourced Officer
Companies can appoint an employee, a director or an outsourced specialist. An employee offers daily oversight, while outsourcing suits small teams with limited volume. Either way, the company stays accountable for controls and for any failure to report.
When the Owner Can Hold the Role
A one-person consultancy with few clients can keep the role with the owner. Add an outside annual review. Banks may question independence when the owner approves the transactions being reviewed.
Cost and Accountability of Outsourcing
- Treat the fee as a recurring cost.
- Compare quotes before deciding.
- Do not treat indicative fees as official figures.
- Outsourcing does not transfer legal responsibility.
A growing trading firm should compare an outsourced officer against a part-time hire.
How a Meydan Free Zone Company Handles the Appointment
A Meydan Free Zone company follows federal AML rules based on its licensed activity, not its free zone status. Meydan Free Zone issues the Business License, Certificate of Formation, Share Register and Memorandum and Articles of Association digitally. mCore provides business bank account support. Banks often ask who owns compliance during that process.
Federal Rules Apply in the Free Zone
Location does not remove AML duties. Your supervisor depends on your activity. A trading company in a DNFBP sector registers with its supervising authority.
Bank Onboarding and Ownership Records
Banks review ultimate beneficial owner details alongside the compliance contact. Keep the Share Register consistent with those records. mCore supports the account process, but no approval is guaranteed. Prepare the resolution and ownership details before the bank interview.
Essential Services for Entrepreneurs and Startups
Explore mCoreRisks of Appointing the Wrong Compliance Officer
A weak or unregistered compliance officer exposes a company to supervisory action and administrative penalties. Bank reviews and reputational damage follows. Problems usually come from missing goAML registration, undocumented appointments or an officer with no authority.
Penalties and Supervisory Action
The federal framework allows administrative sanctions. An inspection that finds no named officer and no written policy is an easy finding for a supervisor.
Banking and Business Consequences
- Banks may review or restrict accounts when controls look weak.
- Counterparties ask for compliance evidence.
- A bank may request updated KYC and policy documents after unusual payments.
Conclusion
Appointing an AML compliance officer in the UAE is an execution task. Confirm whether your activity triggers the duty, name a capable person, document the decision and register on goAML. Check your activity against its supervisor, draft the resolution, then prepare bank documents before applying for your business license with Meydan Free Zone.
Ready to Launch Your Business in Dubai?
Let's Connect
