Key Overview of Bribery
- Bribery is a predicate offence as defined by FATF and under Federal Decree-Law No. 10 of 2025, such predicate offence is criminalised across the public sector, foreign officials, international organisation employees, and the private sector under Federal Decree-Law No. 31 of 2021, Articles 275-287.
- DNFBPs, VASPs, and financial institutions each carry distinct AML obligations in relation to bribery proceeds: sector-specific thresholds, CDD standards, and monitoring requirements differ meaningfully across the three groups.
- Foreign PEPs are subject to mandatory EDD, source of funds and wealth verification, senior management approval, and enhanced monitoring under Cabinet Resolution No. 134 of 2025.
- STR filing via goAML is required immediately upon forming suspicion; no minimum threshold applies and no prior proof of bribery is needed.
- Administrative penalties under Cabinet Resolution No. 16 of 2021 range from AED 50,000 to AED 1,000,000 per violation, with separate criminal exposure for MLROs and senior management.
Bribery-related money laundering is not an abstract risk for UAE compliance teams: it flows through the same sectors, transaction types, and customer relationships that regulated entities manage every day.
This article sets out the specific AML obligations that apply to DNFBPs, VASPs, and financial institutions in the UAE when bribery risk is present, using the sector-specific language and regulatory references that compliance professionals need to get the job done.
The Regulatory Baseline: Bribery as a Predicate Offence
Federal Decree-Law No. 10 of 2025, Article 1, defines a predicate offence as any crime whose proceeds may be subject to money laundering prosecution, whether committed inside or outside the UAE, provided the conduct is punishable in both jurisdictions. Bribery meets this definition. Any profit derived from bribery that is subsequently handled in a way that conceals or disguises its origin constitutes a separate money laundering offence.
The 2025 Law introduced a lowered evidentiary threshold under Article 2: knowledge can now be established from sufficient or circumstantial evidence, without requiring actual knowledge that funds derive from bribery. For compliance functions, this means that transaction patterns, customer behaviour, and structural indicators can ground a suspicion assessment even in the absence of direct evidence.
The Predicate Crime Framework in Context
FATF Recommendation 3 requires countries to criminalise money laundering across the widest possible range of predicate offences, with corruption and bribery explicitly listed as a designated category. The UAE has implemented this through Federal Decree-Law No. 10 of 2025 and its national AML/CFT/CPF strategy, aligned to the National Risk Assessment and the sector-specific risk assessments published by each supervisory authority.
Bribery is criminalised domestically through Federal Decree-Law No. 31 of 2021 across Articles 275 to 287, covering public sector bribery, bribery of foreign officials and international organisation employees, private sector bribery under Articles 278 and 279, and intermediary liability under Articles 282 and 283. Private sector bribery under Articles 278 and 279 carries imprisonment for up to five years. Public sector and foreign official bribery carries temporary imprisonment of between three and fifteen years.
Obligations for Designated Non-Financial Businesses and Professions (DNFBPs)
DNFBPs are supervised by the Ministry of Economy and Tourism for most sub-sectors, and by the Ministry of Justice for lawyers and notaries. Supervision covers the UAE mainland and commercial free zones. The AML/CFT/CPF obligations applied to DNFBPs are set out in Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025.
Real Estate Agents and Brokers
Real estate is one of the most exposed sectors for bribery-proceed integration in the UAE. High transaction values, the prevalence of complex ownership structures, and the frequency of cash components create conditions that are consistently exploited at the integration stage. MoET has issued sector-specific AML guidance for real estate professionals, and the sector appears prominently in the UAE National Risk Assessment.
The obligation to apply Customer Due Diligence at or before the point of executing a real estate transaction applies to all agents and brokers. For transactions involving high-value assets or foreign PEP clients, Enhanced Due Diligence is required, including source of funds and source of wealth verification. The REAR (Real Estate Agent Report) filing obligation runs concurrently with the STR obligation where suspicious activity is identified.
A sound approach for real estate entities is to apply transaction monitoring rules calibrated specifically for bribery typologies: inflated purchase prices, unexplained third-party payments, discrepancies between the declared UBO and the actual beneficial interest, and purchases inconsistent with the client’s income profile.
Dealers in Precious Metals and Stones (DPMS)
DPMS entities are required to apply CDD for cash transactions at or above the relevant threshold under Cabinet Resolution No. 134 of 2025. Bribery proceeds are frequently placed through DPMS channels via high-value cash purchases of gold, jewellery, and watches. The DPMSR filing obligation applies to qualifying cash transactions, and the STR obligation applies where suspicious activity is identified.
In bribery contexts, DPMS compliance functions should be alert to round-sum cash purchases, customers who cannot explain the source of funds, transactions where the declared purchaser does not appear to be the beneficial owner, and multiple purchases below the reporting threshold in close succession.
Independent Accountants, Auditors, and Corporate Service Providers
Accounting and corporate services professionals are frequently engaged at the layering stage of bribery-proceed laundering, whether knowingly or not. Shell company formation, nominee arrangements, trust structuring, and back-to-back corporate ownership chains are the primary vehicles used to obscure bribery proceeds between the placement and integration stages.
The obligation to apply CDD to clients extends to understanding the purpose and intended nature of the business relationship, and to identifying the UBO of any corporate client or structure. Where a corporate structure appears designed to obscure beneficial ownership without a legitimate commercial explanation, this is a high-priority red flag requiring MLRO escalation and, where suspicion is formed, STR filing.
Lawyers and Notaries (MoJ-Supervised)
Lawyers and notaries supervised by the Ministry of Justice carry a distinct risk profile because of their involvement in real estate conveyancing, trust and corporate arrangements, and asset transfers on behalf of clients. These activities sit at the intersection of bribery-proceed placement, layering, and integration.
AML obligations for legal professionals in the UAE do not extend to legal advice or representation covered by professional privilege, but they do apply to financial and transactional services where the lawyer or notary is handling client assets, executing transactions, or establishing legal structures. Compliance functions in law firms and notary practices should ensure that CDD procedures clearly define the scope of transactions subject to AML obligations.
Is Your AML Programme Still Up to Date?
Requirements have moved on since your policies were written. We map your existing framework against current obligations and give you a prioritised fix list.
Sector-Specific DNFBP Obligations Summary
| DNFBP Sub-Sector | Supervisor | Primary Bribery Exposure | Key Filing Obligation |
|---|---|---|---|
| Real estate agents and brokers | MoET | Integration via property transactions | STR and REAR |
| Dealers in precious metals and stones | MoET | Placement via cash-for-asset purchases | STR and DPMSR |
| Independent accountants and auditors | MoET | Layering via shell company and trust work | STR |
| Corporate service providers | MoET | Layering via company formation and nominee services | STR |
| Lawyers and notaries | MoJ | Layering and integration via transactional legal work | STR (for covered activities) |
Obligations for Virtual Asset Service Providers (VASPs)
VASPs regulated in the UAE are subject to the full AML/CFT/CPF framework under Federal Decree-Law No. 10 of 2025. Bribery proceeds laundered through virtual assets present a specific challenge because of the pseudonymous nature of on-chain transactions and the potential for rapid cross-jurisdictional movement.
Bribery Typologies in Virtual Asset Channels
Bribery proceeds entering virtual asset channels typically follow conversion and layering patterns: fiat currency converted to cryptocurrency at exchange points or through P2P arrangements; proceeds then moved across multiple wallets or chains to obscure origin; and eventual conversion back to fiat through exchanges or OTC desks. Each of these steps exposes a VASP to the underlying proceeds.
Conversion by or for foreign PEPs, transactions routed through high-risk jurisdictions or mixing services, and rapid movement of funds inconsistent with the stated purpose of the customer relationship are the primary bribery-related indicators in the virtual asset context.
VASP-Specific CDD and Monitoring Requirements
VASPs are required to apply CDD at onboarding and on a risk-sensitive ongoing basis. For high-risk customer relationships, including those involving foreign PEPs, Enhanced Due Diligence applies as a standing requirement under Cabinet Resolution No. 134 of 2025. This includes source of funds and source of wealth verification, senior management approval, and enhanced transaction monitoring calibrated for bribery-related patterns.
Travel Rule compliance is also relevant: VASPs are required to collect and transmit originator and beneficiary information for virtual asset transfers above the applicable threshold. Where this information is absent or inconsistent with the customer profile, it is a monitoring trigger requiring escalation.
Obligations for Licensed Financial Institutions (FIs)
Financial institutions supervised by the Central Bank of the UAE carry AML obligations that are more extensive and more granular than those applied to DNFBPs. The CBUAE requires licensed FIs to embed anti-bribery considerations within their Enterprise-Wide Risk Assessment and to apply EDD to PEPs and high-risk relationships as a matter of policy.
Correspondent Banking and Third-Party Relationships
Bribery proceeds frequently enter the UAE financial system through correspondent banking relationships, particularly where the correspondent is located in a jurisdiction with weaker AML controls. FIs are required to apply enhanced scrutiny to correspondent banks, including assessment of the respondent institution’s AML/CFT framework and its approach to bribery and corruption risk. Sending institutions that have been the subject of regulatory action in respect of bribery or corruption warrant particular attention.
PEP Identification and EDD in FI Contexts
Foreign PEPs must be subject to EDD, source of funds and source of wealth verification, senior management approval, and enhanced ongoing monitoring as standing requirements under Cabinet Resolution No. 134 of 2025. For FIs managing large volumes of retail and corporate customers, a sound approach is to integrate PEP screening within the CDD workflow and to apply enhanced monitoring rules automatically for customers who screen positive, rather than relying on manual review.
Domestic PEPs and persons entrusted with a prominent function in an international organisation require EDD where a high-risk business relationship exists.
Trade Finance and Procurement Fraud
Bribery proceeds are regularly integrated through trade finance instruments, particularly where inflated invoices, fictitious contracts, or multiple-invoicing schemes are used to create a paper trail that appears commercially legitimate. FI compliance functions are required to apply scrutiny to trade finance documentation that is inconsistent with the declared transaction, the counterparty’s profile, or the market for the goods or services described.
Red Flag Indicators Across All Three Sectors
| Indicator | Category | Priority | Relevant Sector |
|---|---|---|---|
| Payments to agents or consultants without commercial rationale or above-market commissions | Transaction | High | All |
| Cash-intensive transactions without verifiable source of funds | Transaction | High | DPMS Real Estate |
| Foreign PEP involvement without clear commercial justification | Customer | High | All |
| Complex structures obscuring UBO; nominee directors or offshore trusts | Structural | High | All |
| Inflated invoices, sham contracts, or unexplained commission payments | Transaction | High | All |
| Transactions routed through FATF-listed or high-risk jurisdictions | Jurisdictional | High | All |
| Virtual asset transfers with absent or inconsistent originator information | Transaction | High | VASP |
| Domestic PEP onboarding without compounding risk factors | Customer | Medium | All |
| Structured cash deposits below reporting threshold in close succession | Transaction | Medium | DPMS Real Estate |
| Customer reluctance to provide source of wealth or UBO information | Behavioural | Medium | All |
CDD, EDD, and Bribery-Specific Controls
Customer Due Diligence is the baseline obligation for all regulated entities. In bribery contexts, the specific elements of CDD that carry the most weight are UBO identification and verification, source of funds and source of wealth assessment for high-risk relationships, and the identification of PEP status for all customers, UBOs, and beneficial principals.
Applying EDD to Bribery-Related Relationships
Where a customer or relationship presents bribery risk indicators, EDD applies. The components of EDD required under Cabinet Resolution No. 134 of 2025 include verifying source of funds and source of wealth, obtaining senior management approval for the relationship, and applying enhanced ongoing transaction monitoring. For foreign PEPs, these measures apply as a standing requirement without the need to identify a specific risk event. For domestic PEPs and persons entrusted with a prominent function in an international organisation, EDD applies where the relationship is assessed as high-risk.
UBO Verification in Complex Structures
Corporate structures are routinely used to obscure bribery proceeds, and UBO identification is a critical control at this point. The obligation to identify and verify the UBO of a corporate client applies to all regulated entities. Where the structure is complex, involves multiple jurisdictions, or the declared UBO lacks a credible connection to the stated business purpose, this warrants enhanced scrutiny and potential EDD. A sound approach is to apply a defined ownership threshold (typically 25% of shares or voting rights) and to treat nominee arrangements as requiring additional verification steps regardless of the declared ownership percentage.
Compliance Support for UAE Regulated Entities
Managing bribery risk effectively requires sector-specific controls, calibrated monitoring, and a documentation standard that holds up under supervisory review. Whether you are a DNFBP, a VASP, or a financial institution, the practical challenge is translating regulatory requirements into operational procedures that your team can actually apply.
ZFC UAE works directly with DNFBPs, VASPs, and financial institutions on AML/CFT compliance across the full programme lifecycle. Our services cover EWRA development with bribery as a standalone risk category, CDD and EDD process design, transaction monitoring calibration for bribery typologies, MLRO advisory support, STR filing assistance, and AML/CFT health checks against Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. Contact us to discuss how we can support your compliance programme.
Ready for Your Next Supervisory Inspection?
Documentation gaps surface fastest under examination. We run a pre-inspection review so you find them before your supervisor does.
FAQs on Bribery
What makes bribery risk different from other predicate offences for UAE compliance teams?
Bribery risk is distinct because it disproportionately involves PEPs, high-value transactions, and complex structures. These features mean that the standard CDD framework is rarely sufficient: EDD, UBO verification, and source of wealth assessments are almost always in scope. Bribery also creates confidentiality obligations post-STR that require careful management of customer relationships.
Are VASPs treated differently from DNFBPs under the UAE AML framework for bribery?
Both are subject to Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. The substantive obligations are the same, but the risk typologies differ: VASPs face pseudonymous transaction risk, Travel Rule obligations, and on-chain monitoring challenges that DNFBPs do not. VASP-specific guidance from the relevant UAE regulator should be read alongside the federal framework.
What is the MLRO's liability if a bribery STR is not filed?
The MLRO bears primary responsibility for the filing decision. Where a bribery suspicion is formed and an STR is not filed, the MLRO may face administrative penalties under Cabinet Resolution No. 16 of 2021 and, where the failure is deliberate or grossly negligent, criminal liability under Federal Decree-Law No. 10 of 2025. Maintaining a documented decision log is the most practical protection available to an MLRO who makes a considered no-file decision.
Do the same bribery obligations apply in commercial free zones as on the mainland?
Yes. Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025 apply to regulated entities operating in the UAE, including commercial free zones. MoET is the supervisory authority for DNFBPs in both environments. Financial free zones (DIFC and ADGM) are subject to their own regulatory frameworks alongside the federal law.
How should DNFBPs document bribery risk in their EWRA?
Bribery and corruption should appear as standalone risk categories in the Enterprise-Wide Risk Assessment, not as a generic note under predicate offences. The EWRA should reference the UAE National Risk Assessment and any sector-specific risk assessments relevant to the entity’s activities. Good practice is to document the specific typologies and red flags relevant to the entity’s client and transaction profile, and to link these to the monitoring and CDD controls in place.
Hetal Kundalia
Hetal Kundalia brings deep expertise in anti-money laundering compliance, with a focused understanding of the UAE’s regulatory environment. She has worked across sectors, including financial institutions, DNFBPs, VASPs, and emerging fintechs. She has supported them in designing AML frameworks that are not just compliant on paper but operationally sound under review.
She holds the ICA / MOET certification in AML/CFT for DNFBPs and applies that training to real-world compliance delivery. Her work reflects the regulatory priorities of the FIU, DIFC, VARA, MoET, MoJ, and Central Bank, while aligning with FATF recommendations and UAE AML laws.
Hetal leads advisory across all our core services from enterprise-wide risk assessments and control design to CDD strategy, transaction monitoring, governance structuring, and remediation support. She works directly with MLROs and compliance teams to identify gaps, strengthen documentation, and prepare programs for regulatory scrutiny. Her work reflects a simple principle: doing the work in a way that stands up, holds together, and makes sense.
Expert Strategies, Industry Trends & Real Results
