# Why UAE Free Zones Are Requesting AML/CFT Documents For SME founders, CFOs, and compliance managers in UAE Free Zones, recent AML/CFT document requests from Free Zone authorities may seem unexpected. These requests are part of the UAE’s strengthened compliance framework and are intended to confirm that businesses maintain basic readiness and documentation. ## Key Takeaways - UAE Free Zones are requesting AML/CFT documents as part of strengthened compliance measures under Federal Decree-Law No. (20) of 2018. - Businesses may receive these requests regardless of size, including SMEs. - Commonly requested documents include UBO registers, shareholder or partner registers, financial statements, bank statements, and stakeholder identification. - Prompt response and proper documentation are important for maintaining compliance and uninterrupted business operations. ## What Are AML and CFT Compliance Requirements? Anti-Money Laundering (AML) refers to the laws, regulations, and procedures designed to prevent and detect the concealment of illegally obtained funds within the financial system. Combatting the Financing of Terrorism (CFT) refers to measures aimed at preventing financial systems from being used to fund terrorism-related activities or organizations. Together, AML and CFT are core parts of the UAE’s financial and regulatory infrastructure. In the UAE, AML/CFT efforts are governed primarily by: - Federal Decree-Law No. (20) of 2018 - Cabinet Decision No. (10) of 2019 ## Why AML Compliance Matters for New Businesses AML compliance is not only a regulatory obligation. It is also a business-critical practice that supports sustainable growth and protects a company’s reputation from the start. Risks of non-compliance include: - Financial penalties and regulatory sanctions - Reputational damage that may affect client relationships - Potential license suspension or revocation - Difficulties with banking relationships ## Why Are Free Zones Sending AML/CFT Emails? As part of the UAE government’s efforts to prevent money laundering, guidelines have been issued to strengthen AML/CFT compliance across business sectors. In line with this, several Free Zone authorities have begun contacting registered entities and requesting documents for review. Article 1 of Cabinet Decision No. 10 of 2019 defines a “Supervisory Authority” as: > “Federal and local authorities entrusted by legislation to supervise the Financial Institutions, the designated non-financial businesses professions, Virtual Asset Service Providers and non-profit organizations or the competent authority in charge of approving the exercise of an activity or a profession if the legislation does not specify the relevant regulatory authority.” This means Free Zone authorities that issue licenses and act as regulatory bodies may fall within the definition of a Supervisory Authority. Accordingly, they may request documents on a random basis, ranging from audited financial statements to passport and visa copies of shareholders or partners. ## Does This Apply to My Business? Even small and mid-sized companies may be subject to AML/CFT compliance depending on their nature of business. If your Free Zone authority contacts you, it is generally checking for basic compliance readiness. It does not necessarily mean a detailed audit is being conducted. ## Understanding Ultimate Beneficial Ownership Requirements Ultimate Beneficial Ownership (UBO) refers to the natural person or persons who ultimately own or control a legal entity or arrangement. UBO requirements are a key compliance area for UAE Free Zone companies. UBO information matters because it: - Provides transparency over true ownership structures - Helps prevent money laundering through complex corporate structures - Supports enhanced due diligence processes Information typically collected for UBO purposes includes: - Full name and nationality of beneficial owners - Percentage of ownership or control - Nature and extent of beneficial interest - Residential address and contact information ## Key AML/CFT Documents Requested by UAE Free Zones Free Zone authorities usually collect KYC information at the time of registration and license issuance. Afterward, they may request additional basic documents for AML/CFT review. Commonly requested documents include: | Document Type | DMCC | JAFZA | IFZA | |---|---|---|---| | Shareholder Register | Required | Required | Required | | UBO Register | Required | Required | Required | | Financial Statements | 3 months or audited | 3 months or audited | 3 months or audited | Other documents that may be requested include: - Shareholder or partner registers, sometimes in a prescribed format - Beneficial owner register, sometimes in a prescribed format - Company bank statements for three months or the latest audited financial statements - Proof of address for all stakeholders - Passport and visa copies of all stakeholders This is not an exhaustive list, but the documents requested are generally basic in nature. ## Common AML Compliance Mistakes Businesses can avoid delays and compliance issues by understanding common pitfalls. Frequent mistakes include: - **Incomplete documentation:** submitting partial, outdated, or inconsistent documents - **Lack of ongoing monitoring:** failing to update records when ownership or control changes - **Misunderstanding KYC requirements:** not collecting sufficient stakeholder or customer information - **Poor record keeping:** not having a clear system for storing and retrieving compliance documents Practical ways to avoid these issues include: - Maintain a compliance checklist and review it quarterly - Set reminders for document renewals and updates - Keep compliance documents in a centralized system - Train relevant staff on AML/CFT procedures ## How to Respond to an AML/CFT Request There is no need to panic if you receive an AML/CFT email from your Free Zone authority. Start by reviewing the email carefully, confirming the sender, and noting the documents and deadline. ### Step 1: Review the Request Check the email contents carefully and verify that it is from your respective Free Zone authority. Note: - Documents requested - Submission deadline - Required formats, if any - Contact details or portal instructions provided by the authority ### Step 2: Gather the Required Documents Prepare the documents listed in the request and respond within the stated timeline. If your company does not yet have an AML policy, begin preparing a basic one. ### Step 3: Assign a Compliance Contact Assign a person responsible for handling the request, even if this is done informally for now. For smaller companies, this may be the managing director or a senior employee. Where needed, professional support can help with guidance, documentation, and submission readiness. ## AML/CFT Compliance Checklist for UAE Free Zone Companies Use this checklist to assess basic compliance readiness: - Updated shareholder and partner registers - Complete UBO register with current information - Recent bank statements for three months or audited financial statements - Valid passport and visa copies for all stakeholders - Proof of address for all stakeholders - Basic AML policy document - Designated compliance contact person - Document management system in place ## How BCL Supports UAE Businesses BCL supports founders, CFOs, and business owners with one-stop compliance solutions across accounting, VAT, corporate tax, TRC, transfer pricing, payroll, and related advisory services. As a compliance-focused advisor, BCL helps businesses obtain required registrations and certificates, prepare documentation, file returns, and remain aligned with UAE regulatory requirements while focusing on growth. ## Frequently Asked Questions ### Who is responsible for AML/CFT compliance in a UAE Free Zone company? The company’s management and designated compliance officer are responsible for AML/CFT compliance. For smaller companies, this responsibility usually falls to the managing director or a designated senior employee. ### What happens if my business fails to comply with AML/CFT regulations in a UAE Free Zone? Non-compliance can result in financial penalties, license suspension or revocation, reputational damage, and challenges in maintaining banking relationships. The severity depends on the nature and extent of non-compliance. ### How often should AML/CFT policies be reviewed or updated? AML/CFT policies should be reviewed at least annually, or whenever there are significant changes in regulations, business operations, or ownership structure. Regular updates help ensure continued compliance with evolving requirements. For further information, contact BCL’s experts at punith@bclglobiz.com.