CBUAE Updates AML, CFT and CPF Guidance for Licensed Financial Institutions
UAE Central Bank Issues Major Anti-Money Laundering Update
On 16 April 2026, the CBUAE dropped a big update on AML, CFT, and CPF.
These new rules apply to all financial institutions in the UAE. If your business deals with money, you’ll need to make sure your systems can catch anything suspicious. It’s all about being ahead of the game.
With banks, Registered Hawala Providers (RHPs) also need to step up. Every financial service in the UAE has to follow these new rules.
The goal of this update is to tackle money laundering and terrorist financing head-on. The CBUAE wants institutions to stay alert and act fast. It’s all about keeping the UAE’s financial sector safe and trusted.
What Is Included in the New CBUAE Guidance?
The CBUAE’s new guidance is changing things up in the UAE’s financial world.
Anti-Money Laundering (AML) Controls
The latest rules are pushing financial institutions to level up their AML systems. It’s no longer about just checking off boxes. They need real systems to spot suspicious activity fast. Financial institutions need to keep a close eye on everything and catch any red flags early. Internal monitoring is going to be a key part of this.
Combating Financing of Terrorism (CFT)
Terrorist financing is a big risk, and the new guidelines make it clear: risk-based controls are a must. Financial institutions have to be alert for suspicious transactions that could be connected to terrorism to catch these issues before they escalate.
Counter Proliferation Financing (CPF)
This part’s all about proliferation financing (PF). Financial institutions will now have to run sanctions checks and evaluate the risks related to PF. The aim is to stay ahead of new threats and avoid getting caught up in activities that could pose a security risk.
Key Risk Areas Covered by CBUAE
The CBUAE has pointed out some key areas that need extra focus. These are the spots where people often try to hide money or move it in shady ways. Understanding these risks is the first step to making sure everything stays above board. Here’s what you need to know:
Trade-Based Money Laundering (TBML)
Trade-Based Money Laundering is when criminals try to move money through fake or manipulated trade deals. Fake invoices are a common tactic, they help hide the real money trail. Over and under invoicing are also used to change the numbers on paper. It’s important to watch out for trade manipulation, where the value of goods is changed to make illegal money moves look legitimate. And transshipment misuse happens when goods go through a country without really entering it, often hiding where they came from or are going to.
Correspondent Banking Risks
Correspondent banking connects banks in different countries, but it’s not without risks. One big concern is cross-border exposure, banks need to be careful of who they’re dealing with across borders. That’s why third-party due diligence is so important. Banks must really know who their partners are. The CBUAE also stresses the need for ongoing monitoring, banks need to keep an eye on transactions to catch any issues early on.
Stronger KYC, CDD and Record Keeping Rules
The CBUAE has updated the rules for Know Your Customer (KYC), Customer Due Diligence (CDD), and Record Keeping. These changes make sure institutions are doing their part to keep the system secure.
Customer Due Diligence (CDD)
With CDD, the focus is on knowing your customer from the start. First, it’s all about identity verification, making sure who they say they are checks out. You’ll also need to build a customer risk profile to understand their potential risk level. And don’t forget the source of funds review. It’s important to track where their money comes from, to avoid illegal or questionable sources.
Know Your Customer (KYC)
KYC starts with doing thorough checks when a customer first joins. These onboarding checks help ensure they’re legitimate. But KYC doesn’t stop after the first day. Institutions must carry out ongoing reviews of their customers, keeping an eye on any changes that could affect their risk.
Record Keeping
Record keeping is crucial. Institutions must keep the right documents on file for each customer. It’s also about being ready for audits. You need to ensure there’s always an audit trail available. This way, if there’s ever a need to dig into past transactions, everything is in order.
Best Practices Released by CBUAE
The CBUAE has also rolled out some best practices to help institutions stay on top of things. These practices guide how to manage risks and train staff effectively. Let’s dive into what’s included:
Risk-Based Institutional Assessments
Institutions need to carry out AML risk scoring to evaluate the risks they face. With proportionate controls, institutions can make sure they’re applying the right level of security based on the risks they’ve identified. It’s all about being smart and strategic, not overburdening systems that don’t need it.
Role-Based AML Training
AML training is now being tailored to roles. It’s about building up staff capabilities, so everyone knows how to spot and handle risks. But it’s not just for the front line. Senior management accountability is key too. Leaders must understand their responsibilities and lead by example to drive the right practices across the institution.
Why This Matters for UAE Financial Institutions
The new CBUAE guidelines are a game changer for everyone in the financial world. Here’s why it matters for institutions across the UAE:
Banks need stronger AML systems
Banks now have to step up their AML systems. The rules are clearer, and the pressure is on. They need to catch suspicious activity faster and be proactive, not reactive.
Exchange houses face tighter controls
Exchange houses are also feeling the heat. They’ll face tighter controls to make sure no money is flowing through unchecked. These changes mean more responsibility to verify and monitor transactions closely.
Hawala providers under sharper scrutiny
Hawala providers are under the microscope. The new rules put them under sharper scrutiny. They must now meet the same strict standards as banks when it comes to monitoring transactions and preventing illegal activities.
Higher regulatory expectations in UAE
With these changes, regulatory expectations are higher across the board. The UAE is raising the bar. Institutions need to be more diligent and keep up with evolving standards to stay compliant and secure.
What Institutions Should Do Immediately
The CBUAE guidelines are out, so it’s time to take action. Here’s what needs to be done right now:
- Review AML policies: Check your AML policies. Make sure they match the new rules.
- Update KYC files: Go through your KYC files. Make sure all customer info is correct. This is the basics of staying compliant.
- Reassess ML/TF/PF risks: Take a second to reassess risks. Look at the current situation and see if anything has changed. You don’t want to miss anything.
- Improve monitoring systems: Now, it’s time to boost your monitoring systems. You need to catch anything suspicious faster. Make sure your systems are working well.
- Conduct staff training: Get the team trained on the new rules. Staff training is key here. Everyone needs to be on the same page.
- Test suspicious transaction reporting: Test your reporting system for suspicious transactions. Make sure it’s running smoothly and that you’re ready to report if needed.
ADEPTS Advisory Support
At ADEPTS, we’re here to make the CBUAE guidelines easier for you. Here’s how we can help:
- AML Gap Assessment: We’ll check your AML systems to see if anything’s missing. If something’s off, we’ll help you fix it.
- Internal Controls Review: We’ll take a look at your internal controls to make sure everything is running smoothly. If there are issues, we’ll help you sort them out.
- TBML Risk Review: We’ll look into your TBML risks. Any fake invoices or trade problems you have, we will sort those out.
- KYC Remediation: If your KYC records aren’t up-to-date, we’ll help you clean them up and get them right.
- Compliance Training: We’ll provide compliance training for your team. They’ll know what to do and how to stay on top of things.
- Regulatory Readiness Support: We’ll help you get regulatory ready. Whether it’s audits or keeping up with new rules, we’ve got you covered.
Final Analysis
The CBUAE’s new update shows the UAE’s serious push to stay a top financial player globally. The purpose of this update is to reduce the proliferation risks and cracking down on money laundering and terrorist financing. The rules are straight and strict, forcing banks and other financial players to comply. Another great advantage of the rule is to keep the system clean and trustworthy. This move also places UAE ahead in the global finance game.
References
- https://www.centralbank.ae/en/news-and-publications/news-and-insights/press-release/cbuae-updates-aml-cft-cpf-guidance-for-licensed-financial-institutions
- https://www.centralbank.ae/en/our-operations/anti-money-laundering-aml
- Dayanand, Nivetha. “UAE Tightens AML Rules, Banks Face Closer Scrutiny on Transactions and Clients.” Gulf News: Latest UAE News, Dubai News, Business, Travel News, Dubai Gold Rate, Prayer Time, Cinema, 16 Apr. 2026,
https://gulfnews.com/business/banking/uae-tightens-aml-rules-banks-face-stricter-checks-1.500508802. - Sharjah 24. “CBUAE Issues Updated AML/CFT/CPF Guidance.” CBUAE Issues Updated AML/CFT/CPF Guidance,
https://sharjah24.ae/en/Articles/2026/04/16/gh-18.
