DNFBPs are non-financial businesses with AML obligations in the UAE. Who qualifies, what the law requires and penalties.
- DNFBPs are businesses outside the financial sector that must follow anti-money laundering rules because their services can be exploited for illicit finance.
- The UAE's DNFBP framework, now governed by Federal Decree-Law No. 10 of 2025, covers real estate agents, precious metals dealers, lawyers, accountants and company service providers.
- All DNFBPs must register on the goAML portal, conduct customer due diligence, keep records and report suspicious transactions to the Financial Intelligence Unit.
- Fines for non-compliance reach AED 5 million per violation, and nearly 8,900 DNFBP inspections were conducted in 2025 alone.
Why DNFBPs Matter Under the UAE's AML Framework
The Financial Action Task Force (FATF) introduced the DNFBP concept in its 40 Recommendations to ensure that anti-money laundering and counter-terrorism financing (AML/CFT) rules extend beyond banks. In the UAE, the Ministry of Economy and Tourism (MoET) leads supervision of most DNFBP sectors, backed by Federal Decree-Law No. 10 of 2025 and its executive regulations. Obligations centre on customer due diligence (CDD), goAML registration and suspicious transaction reporting.
For professionals in real estate, precious metals, law, accounting or corporate services, understanding DNFBP status is no longer optional. The UAE conducted nearly 8,900 DNFBP inspections in 2025 and imposed fines totalling AED 160.33 million, making compliance a practical business priority rather than a theoretical concern.
DNFBPs Explained in Plain English
Designated Non-Financial Businesses and Professions are categories of business that sit outside the formal financial sector yet handle client funds, manage assets or structure transactions in ways that criminals could exploit. FATF first codified the term in 2003 to close a gap. If AML rules applied only to banks, money launderers would simply shift activity to less regulated channels such as property, precious metals or legal services.
The standard FATF list covers six sectors: casinos, real estate agents, dealers in precious metals, dealers in precious stones, lawyers and notaries, and trust and company service providers (TCSPs). Each sector acts as a gatekeeper - verifying client identities, monitoring transactions and reporting suspicions to national authorities. The UAE mirrors this list and adds auditors and commercial gaming operators as explicit categories.
How DNFBPs Work in the UAE
The UAE's current DNFBP framework rests on Federal Decree-Law No. 10 of 2025 on Anti-Money Laundering, Combating the Financing of Terrorism and Proliferation Financing, which came into force on 14 October 2025. This law replaced the earlier Federal Decree-Law No. 20 of 2018 and broadened coverage with stricter requirements. Cabinet Resolution No. 10 of 2019, which provides the executive regulations, defines DNFBPs and details their day-to-day obligations under a risk-based AML/CFT approach.
Supervision is split across several authorities. MoET oversees real estate agents, dealers in precious metals and stones, accountants, auditors and corporate service providers. The Ministry of Justice supervises lawyers and notaries. The General Commercial Gaming Regulatory Authority covers commercial gaming. In the financial free zones, the DFSA regulates DNFBPs in the DIFC and the FSRA does so in ADGM.
Every DNFBP must register on the Financial Intelligence Unit's goAML portal and use it to file Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs). Beyond reporting, obligations include conducting CDD and enhanced due diligence for higher-risk clients, screening against sanctions lists and keeping records for at least five years.
Firms must also maintain internal compliance programmes with regular staff training. Administrative fines under the 2025 law range from AED 10,000 to AED 5 million per violation, with criminal penalties on top for serious breaches.
Practical Example
Consider a Dubai-based real estate brokerage completing a villa sale for AED 4 million. Before proceeding, the broker must verify the buyer's identity using independent documents and identify any ultimate beneficial owner behind a corporate purchaser. Both parties must be screened against UAE and international sanctions lists, and the overall transaction risk assessed. If the buyer is from a FATF high-risk jurisdiction, enhanced due diligence applies - including verifying the source of funds.
Throughout the transaction, the broker must watch for red flags. These include insistence on paying entirely in cash, artificial inflation of the property value, or a buyer who shows no interest in the property itself. If anything looks suspicious, the brokerage must file an STR through goAML without tipping off the client.
All CDD records, correspondence and transaction documents must be retained for the prescribed period. Failure to follow any of these steps exposes the firm to fines of up to AED 5 million per violation.
Common Misconceptions
The most persistent misconception is that AML obligations apply only to banks and licensed financial institutions. In reality, any business performing DNFBP activities - regardless of size - falls within the regulatory perimeter. A sole-practitioner law firm and a boutique gold dealer carry the same core obligations as a large brokerage. The risk-based approach allows proportionate controls, but it does not grant exemptions.
Another common error is treating AML compliance as a one-off onboarding exercise. UAE regulations require ongoing monitoring of client relationships, continuous risk assessment and prompt reporting of suspicious activity at any point during the business relationship - not just at the point of initial engagement.
People Also Asked
Which businesses are classified as DNFBPs in the UAE?
The UAE classifies six main sectors as DNFBPs: real estate agents and brokers, dealers in precious metals and stones, lawyers and notaries, independent accountants and auditors, trust and company service providers, and commercial gaming operators. The Ministry of Economy and Tourism can add further categories by resolution, and free-zone regulators such as the DFSA and FSRA apply equivalent requirements to DNFBPs operating within their jurisdictions.
Do small businesses in the UAE still need to comply with DNFBP rules?
Yes. UAE regulations define DNFBPs by the nature of their activities, not by size or turnover. A sole-practitioner law firm or a small gold dealer must register on goAML, conduct customer due diligence and report suspicious transactions, just as a large firm would. Proportionality allows simpler systems and processes, but it does not remove the obligation to comply.
What penalties do DNFBPs face for AML non-compliance in the UAE?
Under Federal Decree-Law No. 10 of 2025, administrative fines range from AED 10,000 to AED 5 million per violation. Supervisory authorities can also issue warnings, suspend or cancel licences, restrict the powers of responsible individuals and publish penalty details publicly. In 2025, nearly 8,900 DNFBP inspections resulted in total fines of AED 160.33 million across all sectors.
Related on UAE Advisor Guide
UAE Tightens AML Rules for Real Estate, Precious Metals and Crypto DNFBPsUAE AML Zero-Tolerance 2026: Personal Liability Risks for Accountants and Auditors
What Is UBO? Ultimate Beneficial Owner Explained for the UAE