Topic Summary
What Is an AML Compliance Officer and Why Free Zone Companies Ask About It
An AML compliance officer, often called the MLRO, is the named person running a company's anti-money laundering program. They oversee KYC, monitor transactions, file reports through goAML and liaise with regulators. Not every free zone company needs one, but every in-scope entity does.
Regulatory Framework Behind the AML Compliance Officer Requirement
Regulatory Framework Behind the AML Compliance Officer Requirement
Which Free Zone Companies Must Appoint One
Not all free zone companies need an AML compliance officer. Financial institutions, DNFBPs and VASPs must appoint one. Pure trading or consulting firms outside these categories face lighter duties, but banks still expect KYC.
Steps to Appoint and Register an AML Compliance Officer
Confirm your status, choose an independent individual, document the appointment, register on goAML, then set policies and training.
Core Duties of an AML Compliance Officer and goAML Reporting
The officer runs due diligence, screens sanctions lists, monitors transactions, files reports through goAML, trains staff and reports to management, acting independently.
Penalties and Risks When a Company Skips the Requirement
Where all free zone companies need an AML compliance officer is a myth, but in-scope firms that skip one face fines of AED 50,000 to AED 5,000,000 under Cabinet Decision No. 10 of 2019, plus suspension.
Practical Setup for Dubai South Free Zone Companies
Confirm whether your activity is in scope and document your position either way. In-scope firms appoint and register an officer; others keep a lighter KYC policy and a named contact.
Not all free zone companies need an AML compliance officer, yet the question matters. The UAE filed over 100,000 suspicious transaction reports through goAML [1], and banks lifted corporate account scrutiny as applications rose 34% year-on-year [2]. This guide helps owners and compliance officers decide whether all free zone companies need an AML compliance officer in their case, and what to do next.
What Is an AML Compliance Officer and Why Free Zone Companies Ask About It
An AML compliance officer, often called the MLRO, is the named person running a company's anti-money laundering program. They oversee KYC, monitor transactions, file reports through goAML and liaise with regulators. Not every free zone company needs one, but every in-scope entity does.
Defining the Role Under UAE Law
The officer needs authority, independence and access to records. In small firms the compliance officer and MLRO are usually one person. Picture a Dubai South trading company that names its general manager, then finds the role demands independence and training evidence.
Why the Question Comes Up for Free Zone Businesses
A free zone license doesn't exempt you from federal AML law. Obligations follow activity, not location. One consultancy assumed it had no duties until its bank asked for an AML policy during onboarding.
Regulatory Framework Behind the AML Compliance Officer Requirement
The requirement stems from Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019. These laws apply to financial institutions, DNFBPs (designated non-financial businesses and professions) and VASPs (virtual asset service providers) in every free zone, requiring internal controls and a designated officer.
Key Legislation and Supervisory Bodies
CBUAE supervises licensed financial institutions.
The Ministry of Economy and Ministry of Finance supervise DNFBPs by sector.
The UAE FIU receives reports.
A real estate broker answers to the Ministry of Economy.
AML Compliance Officer Requirement by Entity Type
Feature | In-Scope Entity (FI, DNFBP, VASP) | Out-of-Scope Free Zone Company |
|---|---|---|
Compliance officer appointment | Mandatory, documented | Voluntary, bank-driven |
goAML registration | Required for reporting | Generally not required |
Written AML/KYC policy | Full policy plus risk assessment | Lighter KYC policy |
Staff training | Recorded, ongoing | Recommended |
Supervisor inspection exposure | Direct, fines up to AED 5,000,000 | Indirect, through banks |
How Free Zone Regulators Fit In
Your free zone authority checks licensing, not AML supervision. That makes two layers: the licensing authority plus the AML supervisor for your activity. Financial free zones have their own regulators.
Risk-Based Approach and FATF Expectations
You need a business-wide risk assessment, with controls proportionate to size. The UAE's FATF follow-up status drives enforcement. A low-volume service firm can document a simple assessment and appoint a part-time officer.
Which Free Zone Companies Must Appoint One
Not all free zone companies need an AML compliance officer. Financial institutions, DNFBPs and VASPs must appoint one. Pure trading or consulting firms outside these categories face lighter duties, but banks still expect KYC.
In-Scope Entities: Financial Institutions, DNFBPs and VASPs
Real estate brokers and agents.
Dealers in precious metals and stones above cash thresholds (see AML duties for UAE dealers in precious metals).
Company service providers, lawyers and accountants.
Virtual asset service providers.
A free zone gold trader must appoint an officer and register on goAML.
Out-of-Scope Companies and Bank-Driven KYC
General trading or IT firms may fall outside DNFBP rules. Still, banks demand source of funds and sometimes AML questionnaires. Read the banking requirements for Dubai free zone companies before applying.
How to Confirm Your Own Status
Activity, not license type, decides scope. A firm with a general trading license that also brokers property reviewed its activity list and found itself in scope. Seek written advice if your activities are mixed.
Steps to Appoint and Register an AML Compliance Officer
Confirm your status, choose an independent individual, document the appointment, register on goAML, then set policies and training.
Confirm status. Identify your supervisor and map activities.
Select an officer. Pick someone senior, UAE-resident and conflict-free. A CAMS-certified outsourced officer works for small firms.
Register and document. Create goAML profiles (goAML registration UAE) and sign a board resolution.
Set policies. Write the AML/KYC policy, train staff and keep records five years.
Core Duties of an AML Compliance Officer and goAML Reporting
The officer runs due diligence, screens sanctions lists, monitors transactions, files reports through goAML, trains staff and reports to management, acting independently.
KYC, Due Diligence and Sanctions Screening
Identify beneficial owners at the 25% threshold.
Apply enhanced checks to PEPs.
Screen against UN and local lists.
Filing STRs, SARs and Other Reports on goAML
Report suspicion without delay and never tip off the client. Suppose a client makes structured cash deposits just under thresholds: you file an STR and answer FIU requests.
Penalties and Risks When a Company Skips the Requirement
Where all free zone companies need an AML compliance officer is a myth, but in-scope firms that skip one face fines of AED 50,000 to AED 5,000,000 under Cabinet Decision No. 10 of 2019, plus suspension.
Administrative and Criminal Consequences
Warnings and activity restrictions.
License suspension.
Criminal liability for money laundering.
Banking and Reputation Fallout
Banks de-risk weak AML clients. One free zone company lost its account after a failed KYC review. See why some Dubai companies cannot open a bank account.
Practical Setup for Dubai South Free Zone Companies
Confirm whether your activity is in scope and document your position either way. In-scope firms appoint and register an officer; others keep a lighter KYC policy and a named contact.
Building AML Into Your First-Year Compliance Calendar
More than 40% of first-year companies receive penalty notices. Schedule quarterly KYC file reviews using the compliance calendar for year one in Dubai.
Outsourcing vs In-House Officer
Outsourcing suits a five-person firm.
In-house suits high-volume firms.
Accountability stays with management.
Final Takeaways
Not all free zone companies need an AML compliance officer, but every in-scope firm does. Check your licensed activities, appoint an officer where required and register on goAML. Then speak with Dubai South Business Hub about a compliant company setup.
References
Central Bank of the UAE, 2024
Central Bank of the UAE, 2026
UAE Cabinet, Cabinet Decision No. 10 of 2019
Ministry of Finance, 2025
Frequently Asked Questions
