CBUAE Imposes AED 20 Million AML Penalty on Foreign Bank Branch and Fines Compliance Head

CBUAE Imposes AED 20 Million AML Penalty on Foreign Bank Branch and Fines Compliance Head
{getToc}$title={Table of Contents}

CBUAE fines foreign bank branch AED 20M and its compliance officer AED 300,000 as AML enforcement penalties escalate sharply.

  • The Central Bank of the UAE has imposed a financial penalty of AED 20 million on a branch of a foreign bank for significant and repeated failures in its anti-money laundering, counter-terrorism financing and sanctions controls.
  • The bank's Head of Compliance and Money Laundering Reporting Officer was personally fined AED 300,000 for failing to fulfil his regulatory responsibilities.
  • The CBUAE did not disclose the identity of the foreign bank branch, consistent with its established practice of anonymising enforcement targets in the banking sector.
  • The AED 20 million penalty ranks among the highest AML-related fines imposed on a bank in the UAE and follows a pattern of escalating enforcement since mid-2025.
  • The action was taken under the Federal Decree-Law Regarding the Central Bank and Organization of Financial Institutions and Activities, with the findings based on CBUAE supervisory examinations.
  • The enforcement comes as the CBUAE prepares for the FATF's fifth round of mutual evaluations, expected to include the UAE in 2026.

Escalating Enforcement Under the UAE's Strengthened Financial Crime Framework

The Central Bank of the UAE (CBUAE) has imposed a financial penalty of AED 20 million on a branch of a foreign bank following supervisory examinations that found significant and repeated failures in the institution's anti-money laundering (AML), combating the financing of terrorism (CFT) and sanctions controls. The regulator also levied a personal fine of AED 300,000 on the bank's Head of Compliance and Money Laundering Reporting Officer (MLRO) for failing to fulfil his position functions.

The dual penalty reflects the CBUAE's increasingly assertive enforcement posture since the UAE's removal from the Financial Action Task Force (FATF) grey list in February 2024. With Federal Decree-Law No. 10 of 2025 strengthening penalties and introducing personal criminal liability for managers, and the FATF's fifth-round mutual evaluation of the UAE expected in 2026, the case marks a further escalation in the regulatory consequences for foreign bank branches that do not meet the country's compliance standards.

What the CBUAE Found

According to the CBUAE's announcement on 24 June, the penalty followed examinations that revealed the foreign bank branch had significant and repeated failures across three areas: its AML framework, its controls for combating the financing of terrorism and illegal organisations, and its sanctions framework. The regulator described the deficiencies as systemic rather than isolated, indicating persistent shortcomings that had not been remedied between examination cycles.

The enforcement action was taken under the provisions of the Federal Decree-Law Regarding the Central Bank and Organization of Financial Institutions and Activities, commonly known as the Central Bank law. This statute, updated by Federal Decree-Law No. 6 of 2025, grants the CBUAE broad administrative powers to supervise and sanction licensed financial institutions, including the ability to impose fines of up to AED 1 billion.

In addition to the institutional fine, the CBUAE imposed a personal penalty of AED 300,000 (approximately $81,700) on the bank's Head of Compliance and MLRO. The regulator stated that the individual had failed to fulfil his responsibilities and position functions under the applicable regulatory framework. The CBUAE did not disclose the identity of the foreign bank branch or the individual penalised.

A Pattern of Escalating AML Penalties

The AED 20 million fine is among the largest AML-related penalties the CBUAE has imposed on a bank. It continues a clear escalation in enforcement that began in mid-2025, when the regulator significantly increased both the frequency and scale of its actions against foreign bank branches and exchange houses.

In May 2025, the CBUAE fined an exchange house AED 200 million for serious AML and CFT failings, alongside a personal fine and industry ban on the branch manager. That same month, two foreign bank branches received penalties totalling AED 18.1 million - one fined AED 10.6 million and the other AED 7.5 million. In July 2025, a further foreign bank branch was fined AED 5.9 million for AML non-compliance.

Date Entity Type Fine (AED)
May 2025 Exchange house 200,000,000
May 2025 Foreign bank branch 10,600,000
May 2025 Foreign bank branch 7,500,000
July 2025 Foreign bank branch 5,900,000
June 2026 Foreign bank branch 20,000,000

The CBUAE has consistently declined to name the foreign bank branches it has penalised. Khaleej Times noted that this anonymisation practice extends across all recent AML enforcement actions against foreign banks, though the regulator publishes the fact and amount of each penalty. In each case, the CBUAE described the violations in similar terms: repeated failures in AML, CFT and sanctions controls identified through supervisory examinations.

The Legal Framework Behind the Fine

The penalty sits within a legal architecture that has been substantially strengthened over the past two years. The Central Bank law, updated by Federal Decree-Law No. 6 of 2025, raised the maximum administrative fine from AED 200 million to AED 1 billion and expanded the CBUAE's supervisory powers across banks, payment providers and insurers.

Separately, Federal Decree-Law No. 10 of 2025 on Combating Money Laundering, Terrorism Financing and the Financing of Proliferation replaced the earlier 2018 AML statute. The new law increased penalties for principal money laundering offences to between AED 5 million and AED 100 million for legal entities. It also introduced personal criminal liability for managers who knowingly allow such offences or whose breach of duties contributes to their commission.

For foreign bank branches, these reforms raise the stakes considerably. Branches are classified as licensed financial institutions under UAE law and must comply with the same AML, CFT and sanctions requirements as domestic banks. They must conduct risk-based customer due diligence, maintain transaction monitoring systems, file suspicious transaction reports with the UAE Financial Intelligence Unit and screen against applicable sanctions lists. The CBUAE expects local compliance programmes to meet UAE-specific requirements, regardless of the parent bank's global policies.

The enforcement action also comes as the UAE implements its 2024-2027 National Strategy for AML, CFT and Countering Proliferation Financing. Approved by the Cabinet in September 2024, the strategy prioritises risk-based supervision, effective enforcement and improved transparency of beneficial ownership information. In April 2026, the CBUAE issued a major update to its AML, CFT and proliferation financing guidance, providing clearer instructions to banks on detecting suspicious transactions, assessing emerging risks and strengthening internal monitoring systems.

Practical Steps for Compliance Officers and Risk Teams

The personal fine on the Head of Compliance and MLRO sends a direct signal to compliance professionals across the UAE banking sector. Under both the Central Bank law and the 2025 AML statute, individuals in compliance leadership roles face financial penalties when they fail to discharge their regulatory responsibilities. In more severe cases, the new AML law introduces personal criminal liability for managers linked to principal offences.

For foreign bank branches in particular, the case highlights the risk of relying on group-level AML policies that do not fully reflect UAE-specific requirements. The CBUAE's examinations assess local compliance programmes against domestic law and guidance, not against the parent bank's global framework. Branches that have not localised their risk assessments, transaction monitoring rules and sanctions screening to address UAE-specific risks - including trade-based money laundering, beneficial ownership transparency and regional sanctions exposure - face a heightened likelihood of adverse findings.


What Clients are Asking their Advisors

Can the CBUAE fine individual compliance officers personally for AML failures?

Yes. The CBUAE has the power to impose personal financial penalties on authorised individuals, including compliance officers and Money Laundering Reporting Officers, when they fail to fulfil their regulatory responsibilities. Federal Decree-Law No. 10 of 2025 further extends personal liability to managers who knowingly allow principal money laundering offences or whose breach of duties contributes to such offences.

Why does the CBUAE not name the foreign banks it fines for AML breaches?

The CBUAE has consistently anonymised foreign bank branches in its AML enforcement announcements. While the regulator has not publicly explained the policy, it likely balances transparency with financial stability concerns. Naming individual institutions could trigger disproportionate market reactions or damage correspondent banking relationships beyond what the violation warrants.

How much can the CBUAE fine a bank for AML violations under current UAE law?

Administrative fines imposed by the CBUAE under Federal Decree-Law No. 6 of 2025 (the Central Bank law) can reach up to AED 1 billion. Separately, under the AML law (Federal Decree-Law No. 10 of 2025), legal entities involved in principal money laundering offences face fines between AED 5 million and AED 100 million, or an amount equal to the value of criminal property, whichever is greater.

What AML obligations do foreign bank branches have in the UAE compared to domestic banks?

Foreign bank branches are classified as licensed financial institutions and face the same AML, CFT and sanctions obligations as domestic banks. They must conduct risk-based customer due diligence, maintain transaction monitoring systems, file suspicious transaction reports with the UAE Financial Intelligence Unit and screen against applicable sanctions lists. The CBUAE expects local compliance programmes to meet UAE-specific requirements regardless of the parent bank's global policies.


Further Reading
CBUAE Official Press Release - AED 20 Million Penalty on Foreign Bank Branch  
Khaleej Times - UAE Imposes Dh20 Million Fine on Foreign Bank for Repeated Violations  
The National - UAE Central Bank Fines Foreign Bank Dh20m for Breaching Money Laundering Rules  
CBUAE Issues Responsible AI Guidance for Licensed Financial Institutions  

Previous Next

Weekly News Update

Get our plain-English commentary on UAE finance & investing.

No spam. Unsubscribe any time.

نموذج الاتصال