{"id":11711,"date":"2026-08-14T15:35:02","date_gmt":"2026-08-14T11:35:02","guid":{"rendered":"https:\/\/corplex.ae\/?p=11711"},"modified":"2026-08-14T15:36:30","modified_gmt":"2026-08-14T11:36:30","slug":"aml-checks","status":"publish","type":"post","link":"https:\/\/corplex.ae\/ru\/aml-checks\/","title":{"rendered":"AML Checks Explained: How Businesses Verify Customers"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\r\n\t\t
\n\t\t\t\t\t\t\t\t\t\n

Quick Summary\u00a0<\/strong><\/h2>\n\n\n\n

AML screening is not the same as checking someone\u2019s passport. It\u2019s a four-layer process: sanctions, PEPs, adverse media, and ownership structure, which runs after identity is confirmed. Most businesses run one layer. Regulators expect all four.<\/p>\n\n\n\n

There\u2019s a version of AML checks<\/strong> that a lot of businesses think they\u2019re running.<\/p>\n\n\n\n

They collect a passport copy. They fill in a KYC form. They move on. Identity verified, job completed. That\u2019s identity verification. It is not AML screening. The two are related but not the same, and the gap between them is exactly where most AML checks<\/strong> and inspection findings fall.<\/p>\n\n\n\n

This blog covers what AML screening involves: the four layers, how risk scores get set, and why screening a client once at onboarding is not sufficient. For the broader compliance framework, see our guide on \u201cNavigating the Core Compliance Requirements for DNFBPs in the UAE<\/em><\/strong>\u201d.<\/p>\n\n\n\n

What is AML Screening?<\/strong><\/h2>\n\n\n\n

AML screening is the process of checking a customer or transaction against external risk databases to identify flags that identity documents alone cannot reveal. Running thorough AML checks<\/strong> means going beyond the document stage.<\/p>\n\n\n\n

A passport confirms someone is who they say they are. It says nothing about whether they\u2019re on a UN sanctions list, whether they hold a government position that creates conflict-of-interest risk, or whether their name has appeared in financial crime reporting.<\/p>\n\n\n\n

AML screening fills that gap. It runs in parallel with, not instead of, the identity verification step. Together, they form the complete customer due diligence (CDD) picture.<\/p>\n\n\n\n

Under Federal Decree-Law No. 10 of 2025, regulated entities, including all DNFBPs, are obligated to screen customers before onboarding and on an ongoing basis throughout the business relationship. The Ministry of Economy & Tourism\u2019s AML supervision unit audits both the fact of screening and the quality of the process.<\/p>\n\n\n\n

The Four Layers of an AML Check<\/strong><\/h2>\n\n\n\n

A complete AML check covers four distinct data sources. Most businesses, when inspected, are running one or two. All four are required.<\/p>\n\n\n\n

Here\u2019s how the layers break down \u2014 and what a missed hit means in practice:<\/p>\n\n\n\n

Layer<\/strong><\/td>What It Checks<\/strong><\/td>What a Miss Means<\/strong><\/td><\/tr>
Sanctions Screening<\/strong><\/td>UAE local list, UN, OFAC, EU restrictive measures<\/td>Transaction with a sanctioned party = criminal liability<\/td><\/tr>
PEP Screening<\/strong><\/td>Government officials, military figures, state-enterprise board members, family members, and close associates<\/td>EDD not applied = direct compliance failure<\/td><\/tr>
Adverse Media<\/strong><\/td>Financial crime reporting, court records, regulatory actions, investigative journalism<\/td>Undisclosed financial crime exposure onboarded<\/td><\/tr>
UBO \/ Ownership<\/strong><\/td>The natural person who ultimately owns or controls the entity<\/td>Sanctioned individual hidden behind a clean company name<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

1. <\/strong>Sanctions Screening<\/h3>\n\n\n\n

This checks the customer against the UAE local list, the UN Security Council Consolidated List, OFAC (US Treasury), and EU restrictive measures. A match means the customer faces asset freezing or transaction restrictions under applicable law.<\/p>\n\n\n\n

Sanctions lists are updated without notice. A client who was clean at onboarding may appear on a list six months later. Real-time or near-real-time monitoring is the only way to catch that.<\/p>\n\n\n\n

2. PEP Screening<\/h3>\n\n\n\n

A Politically Exposed Person (PEP) is any individual who holds or has held a prominent public position: head of state, senior government officials, military figures, judicial officers, board members of state-owned enterprises, and their immediate family members and known close associates.<\/p>\n\n\n\n

PEP status doesn\u2019t mean a client is a criminal. It means the risk of corruption is elevated, so the due diligence bar is higher. Accepting a PEP without applying Enhanced Due Diligence (EDD) is a direct compliance failure.<\/p>\n\n\n\n

3. Adverse Media Screening<\/h3>\n\n\n\n

This runs the client\u2019s name against financial crime reporting, court records, regulatory enforcement actions, and credible investigative journalism. The goal: surface associations that don\u2019t appear on formal sanctions lists such as fraud suspicions, money-laundering investigations, and asset forfeiture proceedings.<\/p>\n\n\n\n

This layer gets skipped most often. Neither \u201cno database subscription\u201d nor \u201cno time\u201d holds up in an inspection.<\/p>\n\n\n\n

4. UBO and Ownership Screening<\/h3>\n\n\n\n

For corporate clients, AML screening must trace the Ultimate Beneficial Owner \u2014 the natural person who ultimately owns or controls the entity, directly or through intermediaries. If that person is on a sanctions list, is a PEP, or appears in adverse media, the entity is high-risk regardless of how clean the company name looks.<\/p>\n\n\n\n

What Happens When a Client Screens as a PEP?<\/p>\n\n\n\n

The UAE law does not set a fixed deactivation period for PEP status. Once classified as a PEP, a client remains subject to enhanced scrutiny until your compliance officer formally reassesses and documents a change in their risk profile. \u201cThey used to be a minister\u201d is not a sufficient reason to downgrade them.<\/p>\n\n\n\n

When a client screens as a PEP, standard CDD is replaced by Enhanced Due Diligence (EDD). That means:<\/p>\n\n\n\n