The State of UAE DNFBP AML Enforcement

Assay Enforcement Brief — Issue 1 · June 2026

The UAE Ministry of Economy and Tourism is fining non-financial firms for AML failures at a scale most owners still underestimate — more than a thousand violations in a single six-month window, across precious metals, real estate, corporate-services and audit. This is the inaugural Assay Enforcement Brief: a plain reading of what the Ministry has actually penalised, who is getting hit, what they are getting hit for, and what it means for your firm. Every figure is drawn from the Ministry's own published results. Drafted June 2026 against the data on the public record.

Why this brief exists

The Ministry of Economy and Tourism (MoET) publishes its AML enforcement results, but it publishes them the way regulators do — as dry press releases, issued irregularly, written for the record rather than the reader. The numbers in them are some of the most useful intelligence a Designated Non-Financial Business or Profession (DNFBP) can have, because they show, in hard figures, exactly what supervisors are looking for and what it costs to get wrong. Almost no one translates them for the firms that need them.

That is what this brief does, and will keep doing each quarter. Issue 1 sets the baseline: where DNFBP enforcement actually stands, how it got here, and the pattern underneath the fines. Later issues will track each new release against this baseline. The aim is simple — to be the place a UAE precious-metals, real-estate, corporate-services or audit firm goes to understand the enforcement environment it is operating in.

A note on scope and sourcing. "DNFBP" here means the four sectors MoET supervises: dealers in precious metals and stones (DPMS), real-estate brokers and agents, trust and company service providers (TCSPs / corporate-service providers), and auditors and accountants. Every enforcement figure below comes from MoET's own published results, linked at each point. Where a number is widely cited but not on the official record, we say so rather than repeat it.

1. Where enforcement stands today

The most recent official snapshot — the latest half-yearly aggregate the Ministry has published as of June 2026 — is the first half of 2025. In that six-month window, MoET reported 1,063 violations by DNFBP firms and fines of more than AED 42 million, according to the Ministry's H1 2025 inspection results, published 24 July 2025.

Two things make that figure worth sitting with. The first is the count: more than a thousand separate violations in half a year is not a handful of bad actors being made examples of — it is systematic, population-wide inspection finding faults across the sector. The second is the breadth. These violations and fines did not land on one sector; they were spread across all four DNFBP categories MoET oversees. Enforcement that was once concentrated on precious-metals dealers is now reaching real-estate brokerages, corporate-service providers and audit firms alike.

This is the number Issue 2 will measure the next release against. For now, it is the clearest statement available of how active UAE DNFBP supervision has become.

2. How it got here

The H1 2025 figures are not a spike; they are the current point on a line the Ministry has been drawing since late 2022. Three published waves mark the trajectory:

A word of honesty about this table, because it matters for reading the trend correctly: the line does not run straight upward in dirham terms. Q1 2023 alone — AED 65.9 million across 137 companies — was a larger fine total than the whole of H1 2025. Anyone telling you fines "keep rising every period" is selling you something. What has risen, unmistakably, is the reach and the regularity: from 6 firms in one late-2022 wave to over a thousand violations spread across four sectors in a recent half-year, underpinned by hundreds of inspections. The total dirham figure swings with the mix of cases in any given window; the inspection machine behind it has only grown more systematic. That is the real signal — not the size of any single quarter's headline, but the fact that broad, sector-wide inspection is now the steady state.

One continuity is worth noting beneath the fluctuation: precious-metals dealers have been the principal target throughout. In Q1 2023 they alone accounted for 57% of all fines — AED 37.5 million of the 65.9 million — and in H1 2025 they remained the single largest bucket. Whatever else moves between periods, the precious-metals sector stays at the centre of the enforcement picture.

3. Who is getting hit

Within the H1 2025 results, MoET broke the numbers down by sector — and the split is instructive for anyone trying to gauge their own exposure.

Precious metals and stones — the largest single bucket. DPMS firms accounted for 473 violations and roughly AED 20 million in fines: the biggest share of both the violation count and the money. For a gold or diamond dealer, this is the headline number. The sector that built the UAE's trading reputation is also the one supervisors scrutinise hardest, and the fines reflect it.

Real estate — the most violations of any sector. Real-estate brokerages drew 495 violations and around AED 18.5 million in fines — marginally more violations than even DPMS, for a slightly smaller fine total. Property is a recognised laundering vector, and the enforcement weight on it now rivals precious metals.

Corporate-service providers and auditors — smaller, but no longer exempt. Together, TCSPs and audit/accounting firms accounted for 95 penalties and over AED 4 million. MoET reported these two sectors combined rather than split, so resist any source that gives you a precise per-sector figure for them — it isn't on the official record. The point for these firms is directional: the numbers are smaller, but the inspections have reached them, and "we're a small corporate-services shop, no one's looking at us" is no longer a safe assumption.

The lesson across all four: enforcement is no longer a precious-metals story. If you sit in any DNFBP sector, you are inside the inspection population.

4. What firms are actually fined for

This is the part that turns numbers into something you can act on. Across the Ministry's releases, the violations cluster into a short list of recurring failures — and they are strikingly consistent from 2022 to 2025. In the H1 2025 results, MoET named the problem areas directly: due diligence protocols, risk-assessment methodologies, and suspicious-transaction reporting. Reading across the earlier waves fills in the rest of the picture.

The recurring triggers, in roughly the order they surface:

1. Customer due diligence (CDD) failures — not identifying or verifying customers and beneficial owners properly, or not evidencing source of funds. Named explicitly in the H1 2025 results.
2. A weak or missing enterprise risk assessment — no documented, firm-specific assessment of the firm's money-laundering exposure. MoET cited "risk-assessment methodologies" as an H1 2025 fault area; it is the document inspectors ask for first.
3. Suspicious-transaction reporting failures — not filing Suspicious Transaction Reports, or the sector-specific reports, through the FIU's goAML system when the firm should have. Named in H1 2025.
4. No internal AML/CFT policies and procedures — the firm simply has no written programme. A recurring finding across the 2022–2023 waves.
5. Failure to screen against the UAE terrorism and sanctions lists — not checking customers and transactions against the lists mandated under Cabinet Decision 74 of 2020. Cited in the Q1 2023 results.
6. PEP-handling failures and high-risk relationships — not identifying politically exposed persons or applying enhanced scrutiny. Cited in the December 2022 wave.

One trigger sits slightly apart and deserves a careful word: registration on the FIU's goAML portal. Industry and advisory sources point to goAML non-registration as a front-line failure that attracts an early fine, and it is unquestionably a hard legal obligation — but it is worth being precise that it was not itemised as a named statistic in the H1 2025 results. Treat it as what it is: a baseline registration duty every DNFBP must meet, not a figure from the latest release.

What ties the list together is that none of these are exotic. They are the foundations — a risk assessment, a policy, an MLRO, screening, reporting. Firms are not being fined for sophisticated evasion; they are being fined for not having the basics in place.

5. What is driving it

The enforcement intensity is not arbitrary, and understanding the driver helps you predict where it goes next. The UAE was placed on the Financial Action Task Force (FATF) "grey list" in 2022 and exited it in early 2024 after an intensive reform programme. Exiting the grey list does not end the scrutiny — it begins the period in which the country has to prove the reforms are real and sustained, under FATF follow-up review. Population-wide DNFBP enforcement is one of the most visible ways a jurisdiction demonstrates that its AML regime has teeth.

That is the engine behind the inspections, and it explains both the breadth (every DNFBP sector, not just the obvious ones) and the persistence (wave after wave, not a one-off campaign). MoET has described its approach as combining desk-based reviews with targeted field inspections, and has framed the penalties as corrective tools meant to push firms into compliance rather than simply to punish. For a DNFBP owner, the practical implication is straightforward: this is not a passing enforcement season that you can wait out. It is the new operating baseline, and the rational response is to be in order before an inspector arrives, not after.

6. What it means for your firm

Strip the brief down to actions, and the recurring triggers in Section 4 become a short readiness list. If your firm can answer "yes, documented" to each of these, you are outside the profile the fines keep landing on:

• You are registered on goAML and able to file through it.
• You have appointed an MLRO in writing — a named, senior, accountable person.
• You have a current, firm-specific risk assessment on paper, not in your head.
• You have written AML/CFT policies and procedures that match how the firm actually operates.
• You screen customers and transactions against the UAE terrorism and sanctions lists, and you can show the records.
• You identify PEPs and high-risk relationships and apply enhanced scrutiny.
• You file the reports you are required to file — STRs and your sector report — and you can evidence the ones you have submitted.

Every fine in this brief traces back to a gap in that list. None of it requires a compliance department; it requires the framework to exist, to be documented, and to be followed. That is precisely the gap a small firm is most likely to have — and exactly what an inspection is designed to find.

If you are not sure where your firm stands against that list, Assay's free self-assessment scores you in a few minutes, and the DMCC DPMS Starter Kit supplies the whole documented framework — the policies, the risk assessment, the MLRO pack, the screening and reporting procedures — built to the UAE rules and ready for inspection.

The next issue

The Assay Enforcement Brief is quarterly. Issue 2 will read MoET's next published results against the baseline set here, and track whether the breadth, the violation counts and the sector mix move. The most useful thing about an enforcement record is the trend, and the trend only shows up if someone is watching it consistently. That is the job this brief is taking on.

To get each issue when it publishes, subscribe below. No noise — one considered read per quarter on where UAE DNFBP enforcement is heading.

Assay Enforcement Brief, Issue 1, June 2026. Figures are drawn from the published inspection results of the UAE Ministry of Economy and Tourism (and its predecessor Ministry of Economy), linked throughout. This brief is general information on the enforcement environment, not legal advice. Where a figure is widely cited but not on the official record, we have said so.