In June 2026 a team of assessors acting for the Financial Action Task Force will arrive in the UAE for the country's fifth-round mutual evaluation — the most consequential review of the federation's anti-money-laundering and counter-terrorist-financing system in a decade. The UAE was placed on the FATF "grey list" of jurisdictions under increased monitoring in March 2022, completed a demanding remediation programme, and was removed in February 2024. The 2026 evaluation is not a re-test of whether the country can leave a list. It is an assessment of something harder: whether the system the UAE built to get off the list actually works in practice.
For any business that sits inside the regulated perimeter — and that includes every trust and corporate service provider, real-estate brokerage, law firm and accountancy practice in the country — the evaluation is not a spectator event. The assessors test the system by testing its participants. Understanding what they will look for is the difference between a routine file review and an uncomfortable one.
What a mutual evaluation actually measures
A FATF mutual evaluation has two halves, and they are not weighted equally. The first is technical compliance: are the laws, regulations and institutional powers on the statute book, and do they match the FATF Recommendations? The UAE has largely settled this half — the legislative architecture is in place. The second half is effectiveness, assessed against eleven Immediate Outcomes, and it is where fifth-round evaluations are won or lost. Effectiveness asks whether the laws produce results: are suspicious transactions actually being reported, investigated and prosecuted? Are beneficial owners genuinely known? Are supervisors genuinely supervising? A country can score well on technical compliance and still fail on effectiveness, and it is effectiveness that determines whether a jurisdiction faces renewed monitoring.
The legislative backdrop
The centrepiece of the UAE's post-grey-list framework is Federal Decree-Law No. 10 of 2025, which consolidated and modernised the country's AML and counter-terrorist-financing legislation, sharpened supervisory powers and recalibrated the penalty regime. Around it sits a wider apparatus: the operation of the goAML reporting platform, the work of the Executive Office for Anti-Money Laundering and Counter-Terrorism Financing, and the supervisory mandates distributed across federal ministries and the financial free-zone authorities. The assessors will read the law — but they will spend far more of their time testing whether the institutions named in it behave as the law assumes.
DNFBPs — where the evaluation will press hardest
In the 2022 grey-listing, the weaknesses FATF identified were concentrated heavily in the non-financial sector. Designated Non-Financial Businesses and Professions — the category that captures corporate service providers, real-estate agents, dealers in precious metals and stones, auditors, accountants and lawyers — were assessed as the part of the system least consistently supervised and least reliably compliant. That is precisely why this sector should expect the closest scrutiny in June. The table below sets out the main DNFBP categories, the authority that supervises each, and the obligation the assessors are most likely to probe.
| DNFBP category | Primary AML supervisor | Obligation most likely to be tested |
|---|---|---|
| Trust & corporate service providers | Ministry of Economy (DIFC / ADGM registrars in the financial free zones) | Beneficial-ownership verification, source of funds and wealth, ongoing monitoring |
| Real-estate agents & brokers | Ministry of Economy | Customer due diligence on freehold transactions; reporting of cash and virtual-asset payments |
| Dealers in precious metals & stones | Ministry of Economy | Due diligence and reporting on cash transactions at or above the regulatory threshold |
| Auditors & accountants | Ministry of Economy | Client due diligence and the filing of suspicious-transaction reports |
| Lawyers & legal professionals | Ministry of Justice / relevant authority | Due diligence when handling client funds, conveyancing and company formation |
| Free-zone corporate registries | DIFC, ADGM and other free-zone authorities | Screening of registrants and verification of ultimate beneficial owners |
The pattern across that table is consistent: the assessors are less interested in whether a firm has a policy document than in whether the policy is applied to real clients, on real files, with evidence that someone reviewed the result. A DNFBP that can show a clean audit trail — due diligence performed, risk rated, monitoring documented, reports filed where warranted — is demonstrating effectiveness. A firm with an immaculate manual and empty files is demonstrating the opposite.
Related Insights
AML Enforcement in the UAE 2026: What Every Business Must Get RightDNFBP obligations are expanding — CDD, EDD, goAML registration, STR reporting and training are non-negotiable.Corporate Governance in UAE 2026: UBO Registers, ESR and the Transparency MandateUBO registers and economic-substance reporting are under closer scrutiny. What every company must maintain.7 FTA Audit Triggers: Red Flags That Invite a Tax Inspection in the UAEDigital cross-referencing now matches corporate tax returns against VAT filings and customs data.What a TCSP must be able to demonstrate
For a trust and corporate service provider, readiness for the mutual evaluation reduces to a single test: could the firm, on a day's notice, pull any client file and show a complete, contemporaneous compliance record? That record has a recognisable shape. The firm is registered on goAML and the registration is current. Every client has been through customer due diligence, with identity and beneficial ownership verified to source documents rather than to assertion. Higher-risk relationships — politically exposed persons, complex structures, higher-risk jurisdictions — have been escalated to enhanced due diligence, with source of funds and source of wealth established and recorded. Ongoing monitoring is happening and is evidenced, not merely promised. Where suspicion arose, a suspicious-transaction report was filed, and the decision not to file in other cases was itself documented. Staff have been trained, and the training is logged. And the firm has subjected its own AML programme to an independent review.
Practical readiness before June
The work that improves an evaluation outcome is done in the weeks before the assessors arrive, not during their visit. Three exercises are worth the effort. The first is a file-sampling review: pull a representative spread of client files — old and new, low-risk and high-risk — and read them as an assessor would, asking not "is there a form" but "is there evidence a person exercised judgement". The second is a gap log: every weakness the sampling reveals is recorded, assigned an owner and a date, and closed. The third is a mock interview — assessors interview compliance officers and senior management, and the ability to describe the firm's risk approach clearly and consistently is itself part of what is being measured. A firm that has rehearsed these three exercises will find the real evaluation markedly less stressful than one that has not.
Why the result matters beyond compliance
It would be a mistake to treat the mutual evaluation as a purely regulatory event with no commercial weight. A strong effectiveness rating underpins the correspondent-banking relationships that allow UAE banks to clear international payments efficiently; it influences the cost and availability of cross-border finance; and it shapes how counterparties, investors and counter-jurisdictions price the UAE as a place to do business. The country's removal from the grey list in 2024 delivered measurable benefits in exactly these areas. The 2026 evaluation is the test of whether those benefits are durable. For an individual firm, the contribution is small but real: every clean file is a data point in the national result, and the discipline that produces clean files is, in any case, the discipline that protects the firm itself.
- FATF assessors conduct the UAE's fifth-round mutual evaluation in June 2026 — a test of effectiveness, not just of laws on the books.
- Technical compliance is largely settled; the evaluation turns on the eleven Immediate Outcomes that measure whether the system produces results.
- DNFBPs — corporate service providers, real-estate brokers, lawyers, accountants, precious-metals dealers — should expect the closest scrutiny.
- Federal Decree-Law No. 10 of 2025 is the legislative backbone, but assessors will test institutions and files, not statutes.
- TCSPs should run file-sampling reviews, a gap log and mock interviews before June; the result affects banking access and cross-border finance, not just compliance ratings.
Polaris Perspective
As a licensed trust and corporate service provider, Polaris treats AML effectiveness as core operating discipline rather than a periodic project — and the mutual evaluation is a reminder of why that matters. Polaris advises clients on AML programme design, beneficial-ownership verification and corporate-governance compliance, and can carry out an independent readiness review of a firm's files and procedures ahead of June. If your business sits inside the DNFBP perimeter, the time to find the gaps is now.
Arrange a Consultation →