UAE AML Requirements for Real Estate Brokers: A Practical 2026 Guide

What AML framework applies to UAE real estate brokers in 2026?

The UAE AML framework was updated through Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. The Executive Regulations became effective on 14 December 2025 and replaced the previous 2019 implementing resolution. Brokerages should therefore make sure policies and procedures reflect the current framework rather than relying on older templates.

The Ministry of Economy and Tourism has also issued updated DNFBP guidance and specific 2026 guidance for real estate agents and brokers. These materials address customer risk, due diligence, monitoring, red flags, reporting, governance and other operational controls.

This matters because a compliance manual can become outdated even when the brokerage's day-to-day sales process has not changed.

How should a real estate brokerage assess AML risk?

A brokerage should start by identifying the money laundering, terrorist financing and proliferation financing risks created by its actual customers, locations, transaction types, payment methods and ownership structures. The objective is not to treat every unusual customer as unacceptable. It is to identify higher-risk circumstances and apply proportionate controls.

A business-wide risk assessment may consider:

• whether customers are UAE residents, non-residents, companies, trusts or other legal arrangements;
• countries connected to customers, beneficial owners and transaction funds;
• luxury, commercial, off-plan or other property segments handled by the firm;
• complex or layered ownership structures;
• third-party payments;
• cash or virtual-asset involvement;
• remote customer onboarding;
• politically exposed person risk; and
• the firm's own channels, offices and transaction volumes.

Customer risk assessments should then connect with the broader business risk assessment.

A resident individual purchasing a property using transparent bank financing may require a different level of review from a foreign corporate purchaser using several intermediaries and receiving part of the transaction funding from an unrelated third party.

An effective AML file should explain the risk, the checks performed and the reasoning behind the decision—not simply contain a collection of identity documents. — Consulting Journal editorial observation

What customer due diligence should brokers complete?

Customer due diligence should establish who the customer is, verify their identity through appropriate reliable information, identify who ultimately owns or controls a legal entity, understand the purpose of the relationship and assess whether the transaction is consistent with what the brokerage knows about the customer.

For individual customers, the file will typically include appropriate identification and verification evidence.

For corporate customers, the brokerage may need information such as:

• legal and trading names;
• incorporation or registration documents;
• trade licence details;
• registered and operating addresses;
• constitutional documents where relevant;
• authorised representatives;
• directors or managers;
• ownership and control structure; and
• ultimate beneficial owners.

CDD should not routinely be postponed until immediately before transfer. By that stage, commercial pressure to complete the transaction may already be high.

When is enhanced due diligence needed?

Higher-risk circumstances may require enhanced due diligence, depending on the facts and applicable requirements.

This can involve:

• collecting additional identification or corporate records;
• investigating complex ownership structures;
• obtaining further information about intermediaries;
• reviewing source of funds more closely;
• establishing source of wealth where appropriate;
• obtaining relevant senior-management approval; and
• applying closer monitoring.

Enhanced due diligence should respond to identified risk. Asking every customer for the same additional documents regardless of circumstances does not, by itself, demonstrate a functioning risk-based programme.

Why does beneficial ownership matter in property transactions?

The company named as purchaser or seller may not be the natural person who ultimately owns or controls it. UAE real estate brokers should therefore look beyond the commercial licence and understand the ownership chain where legal entities or arrangements are involved.

The Ministry's 2026 real estate guidance identifies concerns such as reluctance to reveal beneficial ownership, unexplained intermediaries, unnecessarily complicated structures and repeated changes in beneficial ownership as circumstances that can require further examination.

The file should be understandable to someone who was not involved in the transaction.

If ownership cannot be established to the required standard, the case should be escalated through the brokerage's compliance process rather than accepted solely because of its commercial value.

Example 1: A Dubai brokerage is instructed by a newly incorporated overseas company purchasing a high-value apartment. The company provides registration documents, but its ownership passes through two additional entities and the representative initially declines to identify the ultimate owners. The issue is not proof of wrongdoing. It is a reason to pause normal onboarding, establish the ownership chain and assess whether enhanced due diligence is required.

How should sanctions and PEP screening work?

Screening needs to be treated as an operational control, not a search carried out once and then forgotten. Brokerages should have procedures covering which parties are screened, when screening takes place, how possible matches are investigated, who can clear false positives and how evidence of the screening is retained.

Relevant screening can include customers, beneficial owners and other parties that fall within the firm's procedures and applicable requirements.

Politically exposed person status should also be handled carefully. A person being a PEP does not mean that they have committed wrongdoing. It indicates a category for which appropriate enhanced risk-management measures may be required.

Front-line agents should know where to send a sanctions or PEP alert rather than attempting to resolve a complex compliance question themselves.

What is the difference between source of funds and source of wealth?

Source of funds concerns where the money used for the particular property transaction comes from. Source of wealth concerns how the customer accumulated their wider wealth. A bank transfer can show the immediate payment route without necessarily explaining the economic origin of the funds.

Depending on risk, evidence may relate to:

• employment income;
• business ownership or dividends;
• investment proceeds;
• sale of another asset;
• inheritance;
• financing; or
• another legitimate source consistent with the customer's circumstances.

Financial records, accounting information and, where relevant, Tax documentation may help support an explanation, but the evidence requested should remain proportionate to risk.

A compliance review should consider whether the explanation reasonably fits the customer's known occupation, business activity, transaction size and payment structure.

What red flags should property professionals recognise?

A red flag is a reason for additional enquiry, not automatic evidence of criminal activity. The Ministry's 2026 real estate guidance expressly treats red flags as indicators that may require heightened professional judgment, further investigation or enhanced due diligence.

Situations worth closer review can include:

• refusal to identify a beneficial owner;
• unexpected third-party funding;
• repeated changes in ownership or transaction parties;
• unnecessarily complex corporate structures;
• reluctance to provide expected documents;
• unusual indifference to the property itself;
• transaction activity inconsistent with the customer's apparent financial profile;
• unexplained use of intermediaries;
• questionable high-value cash arrangements; or
• transaction links to higher-risk jurisdictions or circumstances.

Example 2: An Abu Dhabi property buyer initially plans to purchase personally. Shortly before completion, the buyer asks for an offshore company to replace them as purchaser and requests that part of the payment come from an unrelated third party. The changes may have a legitimate explanation, but the brokerage should document the circumstances, update its risk assessment and escalate the matter where required.

When must real estate brokers use goAML?

UAE DNFBPs are required to register on the goAML platform. The system is used to submit relevant reports to the UAE Financial Intelligence Unit, including Suspicious Transaction Reports and Suspicious Activity Reports. Staff should understand the internal escalation process even when responsibility for external filing sits with the compliance officer.

An internal process may involve:

1. An employee identifies unusual activity.
2. The facts are documented without making accusations to the customer.
3. The matter is escalated to the compliance function.
4. Additional information is reviewed where appropriate.
5. The compliance officer determines the reporting action required.
6. Any required report is submitted through the appropriate channel.
7. The analysis and supporting records are retained.

Employees do not need to establish that a criminal offence occurred before raising a concern internally.

When is a Real Estate Activity Report required?

A Real Estate Activity Report, commonly referred to as a REAR, is separate from suspicion-based reporting. The Ministry's current 2026 real estate guidance requires a REAR for specified purchases or sales of freehold real estate involving AED 55,000 or more in cash, virtual assets, or funds converted from or to virtual assets in the specified circumstances.

The relevant circumstances include:

• cash payments of AED 55,000 or more, whether through one payment or multiple payments;
• virtual assets used for part or all of the property value; or
• transaction funds converted from or to virtual assets for part or all of the property value.

The reporting obligation is distinct from whether the transaction itself appears suspicious. Firms should therefore avoid assuming that satisfactory KYC automatically removes other reporting obligations.

How long should AML records be retained?

Current Ministry DNFBP guidance states that customer files, risk assessments, internal reports and relevant AML records should generally be maintained for at least five years. Separate Ministry CDD guidance also requires relevant CDD records to be retained for at least five years after the end of the business relationship.

A real estate transaction file may include:

• identification and verification records;
• corporate documents;
• beneficial ownership evidence;
• customer and transaction risk assessments;
• sanctions and PEP screening evidence;
• source-of-funds information;
• enhanced due diligence records;
• property transaction documentation;
• relevant correspondence;
• internal escalations;
• compliance decisions;
• reporting records where applicable; and
• training or review evidence relevant to the process.

Records should also be organised so they can be retrieved and understood later.

What governance should a brokerage put in place?

AML compliance requires clear ownership, suitable authority and management support. The Ministry's March 2026 DNFBP guidance emphasises the role and independence of the compliance officer and expects appropriate oversight, access to information, training and record keeping.

In practice, a brokerage should clearly define:

• senior-management responsibilities;
• the compliance officer's authority;
• internal escalation routes;
• approval requirements for higher-risk cases;
• responsibility for regulatory updates;
• management reporting;
• employee training; and
• remediation when weaknesses are identified.

Commercial teams should not be able to bypass controls merely because a valuable transaction may be delayed.

What common AML mistakes do UAE real estate businesses make?

Many weaknesses arise from implementation rather than the absence of a written policy.

Common mistakes include:

• treating a passport copy as complete KYC;
• failing to establish beneficial ownership;
• collecting source-of-funds evidence without assessing whether it makes sense;
• screening only at onboarding;
• failing to document why a customer was rated high, medium or low risk;
• allowing sales pressure to override compliance escalation;
• confusing REAR reporting with suspicious-activity reporting;
• keeping documents without an understandable audit trail;
• using outdated AML policies; and
• providing generic training that does not reflect real property transaction scenarios.

A practical programme connects compliance controls to the normal sales workflow.

What documents should a brokerage prepare for an AML review?

A useful preparation checklist includes:

• current business-wide AML risk assessment;
• AML/CFT/CPF policies and procedures;
• customer risk-assessment methodology;
• sample CDD and enhanced due diligence files;
• beneficial ownership verification records;
• sanctions and PEP screening evidence;
• source-of-funds procedures;
• internal escalation procedures;
• goAML registration and reporting controls;
• REAR procedures;
• compliance officer appointment and responsibilities;
• management reporting records;
• employee AML training records;
• compliance testing or monitoring reports;
• remediation logs; and
• evidence that regulatory changes are periodically reviewed.

The objective is to demonstrate how controls operate in practice, not simply that documents exist.

How can KPM Global Services UAE assist?

KPM Global Services UAE can support real estate businesses in Dubai and across the UAE with the practical design and review of AML compliance processes, depending on the firm's activities, licensing position and regulatory responsibilities.

Support may include:

• reviewing AML policies and procedures;
• helping structure business and customer risk assessments;
• reviewing CDD and beneficial ownership workflows;
• assessing compliance documentation and record keeping;
• supporting internal AML control reviews;
• developing practical staff training materials; and
• helping management identify gaps requiring remediation.

Any external support should complement, rather than replace, the responsibilities that remain with the regulated business and its management.

What should UAE real estate brokerages do next?

Brokerages should treat AML compliance as an operating system running throughout the property transaction lifecycle. Customer onboarding, risk assessment, beneficial ownership, screening, source-of-funds review, transaction monitoring, escalation, reporting and record retention should work together and leave a clear evidence trail.

With the UAE framework updated and sector-specific guidance issued in 2026, businesses should review whether older policies, forms and training still reflect their current activities and regulatory requirements.

A well-organised compliance file should allow an independent reviewer to understand who the customer was, who ultimately controlled the customer, what risks were identified, what checks were completed, how concerns were addressed and what reporting obligations applied.

This article is for informational purposes and does not constitute legal, tax, accounting, or financial advice.