Home / AML and counter-terrorist financing

Sanctions and watchlist
screening for UAE entities

We screen every party in your client file against the lists a UAE reporting entity must check, and issue a dated screening report for your compliance file.

24 hoursFreeze deadline on designation
5 daysFFR after freezing funds
25%UBO screening threshold
5 yearsAudit trail retention
Ask a consultant Read the detail
01
Scope of the obligation

Who must screen, and whom

A UAE reporting entity screens every natural and legal person in the structure. Missing a beneficial owner is the classic failure.

The applicant and the entity — The legal name, every trading name, the licence number, and any registration or IMO number. Names are screened with and without the legal-form suffix such as LLC, FZE, FZ-LLC or Ltd.
Shareholders and owners — Every shareholder from the MOA or AOA with its percentage. Corporate shareholders are traced up to the natural persons behind them.
Directors and signatories — Each director, manager and authorised signatory named in the trade licence or board resolution.
Beneficial owners — Every beneficial owner at 25 per cent or more, plus anyone who controls the entity by other means.
Parents, subsidiaries and counterparties — The group above and below the entity, and the significant counterparties behind recurring or large transfers on the bank statement.
Subscription to the alert system — The Executive Office Notification Alert System pushes designation updates automatically. Subscription is itself one of the four targeted financial sanctions obligations, so not subscribing is a breach even if no name is ever missed.
02
The list inventory

Lists that must be checked

Every list is fetched live at screening time and stamped with its retrieval date or version. A stored snapshot can return a clean result on a newly designated person.

ListStandingSource
UAE Local Terrorist ListMandatory under UAE lawuaeiec.gov.ae, Executive Office for Control and Non-Proliferation
UN Security Council Consolidated ListMandatory under UAE lawmain.un.org, with search at search.sanctions.un.org
OFAC SDN ListDecisive in practice; a hit ends a bank applicationsanctionslist.ofac.treas.gov
OFAC Non-SDN ConsolidatedDecisive in practice; bundles FSE, SSI, CAPTA, NS-PLC and NS-MBSsanctionslist.ofac.treas.gov
UK Sanctions ListDecisive in practice; the single UK source since the OFSI Consolidated List closed on 28 January 2026gov.uk
EU Consolidated ListDecisive in practicedata.europa.eu
NAMLCFTC high-risk country circularTriggers HRC and HRCA reporting and Article 23 enhanced due diligencenamlcftc.gov.ae, as numbered circulars
BIS, World Bank Debarred Firms, INTERPOL and othersBy risk and sector, including dual-use exposure and public tendersbis.doc.gov, worldbank.org/debarr and national sources
03
The legal clock

Acting on a match in time

Cabinet Decision 74/2020 requires a freeze within 24 hours of a designation. The table sets out what each finding requires and by when.

FindingActionDeadline
Confirmed match to the UAE Local Terrorist List or UN Consolidated ListFreeze all funds, do not notify the customer, and draft a Funds Freeze ReportFreeze within 24 hours, FFR within 5 business days of freezing
Potential match to either listDraft a Partial Name Match ReportWithout delay
Match to OFAC, UK or EU onlyNo UAE freeze duty, but flag to the compliance officer and expect the bank to declineNot applicable
Transaction involving a NAMLCFTC high-risk countryFile an HRC or HRCA report; the transaction may only be executed three working days after reporting if the FIU has not objectedBefore executing
Suspicion of money laundering or terrorist financing, with or without a hitFile an STR or SARWithout delay
04
Evidence and next steps

The file, and what it feeds

A supervisor asks for evidence that you screened, not for your conclusion. Records are retained five years, and the same screening work carries into two adjacent obligations.

What the report contains — Parties screened, lists screened with version or retrieval date, the result for each party, every flag and how it was resolved, jurisdiction risk, an overall risk rating and a recommended action. PEP indicators are taken from documents only, since no free maintained global PEP database exists and there is no adverse-media screening.
The Article 22 decision log — The reasoning for every cleared potential match is recorded: who decided, when, and on which discriminator. Dated screenshots or exports showing the query string are retained for five years. Re-screening follows on any change of ownership, signatory or UBO, at periodic review, on any alert naming a new designation, and before any significant transaction.
Clearing a match properly — Date of birth is the strongest discriminator, and a passport or national ID number is decisive when the listing carries one. Absence of data is not exclusion, so a name match with no DOB and no ID number stays a potential match for the compliance officer.
Tipping off is a crime — A client is never told that they matched or that a report is being made. The penalty is imprisonment plus a fine of not less than AED 50,000. A screening report is an internal record, never sent to the subject.
How this pairs with goAML registration — Screening produces the drafts; goAML is where they are filed. PNMR, FFR, HRC, HRCA and STR filings are the client firm's authorised compliance officer's act, under the reason for reporting TFS/PFS Domestic list or TFS/PFS UNSCRs.
How this pairs with bank onboarding — Banks screen the OFAC, UK and EU lists themselves, and a hit ends an account application whatever UAE law requires. A completed screening file lets you resolve a false positive before it reaches the bank, and the report stays internal rather than being attached to the application.
06
FAQ

Common Questions.

Any UAE reporting entity must screen the parties in its client files. That covers the applicant, every shareholder whether natural or corporate, each director, manager and authorised signatory, each beneficial owner, the entity and its trading names, parents and subsidiaries, and significant counterparties. Screening only the applicant leaves the obligation unmet.
Two lists are mandatory under UAE law: the UAE Local Terrorist List published by the Executive Office for Control and Non-Proliferation, and the UN Security Council Consolidated List. The OFAC SDN and Non-SDN lists, the UK Sanctions List and the EU Consolidated List are not UAE law but are decisive in practice, because a client's bank screens them. The National Committee high-risk country circular is checked separately as a country-risk axis.
Cabinet Decision 74/2020 requires a freeze within 24 hours of a designation. For a confirmed match to the UAE Local Terrorist List or the UN Consolidated List, all funds are frozen, the customer is not notified, and a Funds Freeze Report follows within 5 business days of the freeze. A potential match to either list means a Partial Name Match Report drafted without delay.
A false negative costs AED 50,000 upward and possibly the licence, which is why matching deliberately over-flags and resolution happens at the discrimination stage. Telling a client that they matched or that a report is being made is a separate crime, punishable by imprisonment plus a fine of not less than AED 50,000. Failing to subscribe to the Executive Office alert system is also a breach in its own right.
No. FATF explicitly does not call for enhanced due diligence on grey-list countries and warns against de-risking whole customer classes. In the UAE, HRC and HRCA reporting and Article 23 enhanced due diligence are triggered by the National Committee's list, not FATF's. The current numbered circular is retrieved from namlcftc.gov.ae before any advice is given.
Screening produces the reports; goAML is the channel through which the client firm's authorised compliance officer files them, including PNMR, FFR, HRC, HRCA and STR. For banking, the lists that decide an application are OFAC, UK and EU, so a resolved screening file removes false positives before they reach the bank. The screening report itself stays in the compliance file and is not attached to a bank application.

Screen the file before it moves
Not after a bank declines

Send us the KYC documents and we will return a dated screening report for your compliance file.

Ask a consultant 💬 WhatsApp Us
✅ 500+ Clients Served
🏢 UAE Licensed Since 2020
📞 Free 30-Min Consultation
🏦 12+ Bank Assistance
Talk to a consultant

Do you know who is in your client structure?

Tell us the parties and documents you hold, and we will confirm what screening is needed.

Tell us your situation and a consultant replies with what actually applies to you, what it costs and what we need from you to start.

We reply on WhatsApp, usually within the hour on working days. Your details go to our consultants only — never to a third party.