The FATF assessment team carried out its on-site visit to the UAE in June 2026 under the 5th Round Methodology, which measures whether AML and CFT controls produce results rather than whether laws exist on paper. The mutual evaluation report is expected to be adopted at a later FATF plenary and then published on the FATF website.
For regulated firms, the visit is not the end of the process. Supervisors use the findings to set inspection priorities, and the UAE’s follow-up reports will depend on evidence that institutions apply their controls every day. This guide explains what assessors tested and the evidence each type of firm should be able to produce on request.
Focus Areas Assessors Examine
The 2020 Mutual Evaluation exposed significant weaknesses in the UAE’s AML/CFT system, ultimately leading to grey listing. Since then, the UAE has enacted sweeping reforms. Federal Decree-Law No. 10/2025, which came into effect on 14 October 2025, repealed and replaced the 2018 AML law, introducing standalone offences for proliferation financing, expanding predicate offences to include tax evasion, and explicitly covering digital systems and virtual assets.
The UAE has also launched a national strategy for AML, CTF and proliferation financing for 2024 to 2027, developed on the basis of its third National Risk Assessment, published in April 2025.
Despite this progress, regulators will expect to see that reforms are not just enacted on paper but embedded in day-to-day institutional practice. That distinction, between formal compliance and operational effectiveness, is precisely where the 2026 evaluation will probe hardest.
Why This Evaluation Matters More Than the Last
| Focus Area | What Assessors Will Look For |
|---|---|
| Beneficial Ownership | Accurate, up-to-date records; effective verification at onboarding |
| Transaction Monitoring | Real-time detection of suspicious patterns; STR filing quality and volume |
| Sanctions Screening | Coverage of all relevant lists; speed and accuracy of screening |
| Virtual Assets | Compliance with Travel Rule; VASP licensing and oversight |
| Customer Due Diligence | Risk-based approach; enhanced DD for high-risk customers |
| Regulatory Reporting | Timeliness, completeness and accuracy of STRs and CTRs |
| Proliferation Financing | Controls aligned with new Federal Decree-Law No. 10/2025 |
| Cross-Border Cooperation | Mutual Legal Assistance requests; information sharing evidence |
The 11 Immediate Outcomes: Where Gaps Are Most Likely
The FATF’s 5th Round assesses effectiveness against 11 Immediate Outcomes (IOs). Based on the UAE’s 2020 MER and subsequent reforms, the following IOs are likely to attract the greatest scrutiny in 2026:
- IO.4 – Financial institutions apply adequate AML/CFT preventive measures
- IO.3 – Supervisors appropriately supervise, monitor and regulate financial institutions and DNFBPs
- IO.6 – Financial intelligence is effectively used by competent authorities
- IO.7 – ML offences and activities are investigated and offenders prosecuted
- IO.11 – Proliferation financing is prevented and suppressed
For each IO, assessors will seek evidence of actual outcomes, not policies alone. Documentation, case examples, audit trails, and data will all be requested.
Sectors Under the Sharpest Scrutiny
Certain sectors will face heightened examination based on the UAE’s risk profile as a major global financial and trading hub:
- Banks and financial institutions – transaction monitoring effectiveness, STR quality
- DNFBPs (real estate agents, lawyers, accountants, gold and precious metals dealers) – risk-based CDD, STR filing rates
- Virtual Asset Service Providers (VASPs) – Travel Rule compliance, licensing status
- Free Zone entities – beneficial ownership transparency, oversight adequacy
- Hawala and money service businesses – registration, monitoring, and reporting
The UAE Central Bank has already ramped up enforcement, issuing nearly AED 350 million in fines for AML and CTF breaches in recent months. Regulators are signalling clearly that the supervisory environment has changed.
Building an Evidence Pack for Each Immediate Outcome
An evidence pack is a set of records that shows a control worked in practice. Regulated firms do not answer to FATF directly, but supervisors gather this evidence from them to demonstrate national effectiveness, so each firm should be able to produce it quickly.
| Immediate Outcome | What supervisors ask firms for | System record that answers it |
| Supervision (IO.3) | Inspection findings, remediation plans and proof that actions were closed | Remediation tracker with owners, dates and closure evidence |
| Preventive measures (IO.4) | CDD files, EDD decisions, alert reviews and STR filing rates | Customer risk profiles, case histories and alert closure reasons |
| Beneficial ownership (IO.5) | Verified UBO records and the date each was last reviewed | UBO register extract with verification source and review date |
| Financial intelligence (IO.6) | STR quality, timeliness and responses to FIU requests | goAML submission log with acknowledgements and response times |
| Terrorist financing sanctions (IO.10) | Proof that screening ran without delay after each list update | Screening log showing list version, run time and matches handled |
| Proliferation financing (IO.11) | A PF risk assessment and PF-specific screening and monitoring rules | PF risk assessment document and rule library with change history |
Check the IO numbering against the published 5th Round Methodology before publishing, because FATF revised the outcomes for the new round.
Key Stats to Know
| Metric | Figure |
|---|---|
| UAE grey list inclusion | March 2022 |
| UAE grey list removal | February 2024 |
| Federal Decree-Law No. 10/2025 effective date | 14 October 2025 |
| FATF 5th Round on-site visit (UAE) | June 2026 |
| Central Bank AML fines (recent months) | ~AED 350 million |
| UAE National AML/CFT Strategy period | 2024–2027 |
How to Stay Compliant: A Practical Readiness Checklist
Institutions should close remaining gaps now, because supervisors will follow up on the evaluation findings. The following steps are non-negotiable:
- Conduct an internal gap analysis against FATF’s 40 Recommendations and the 11 IOs
- Update your Business Risk Assessment (BRA) to reflect the 2025 National Risk Assessment findings
- Review and stress-test your transaction monitoring rules for false negative rates and STR conversion quality
- Ensure beneficial ownership records are accurate, verified, and accessible in real time
- Document your risk-based approach to CDD with clear escalation procedures for high-risk customers
- Align policies with Federal Decree-Law No. 10/2025, particularly on proliferation financing and virtual assets
- Train staff across all levels, including front-line teams, on updated typologies and red flags
- Prepare an evidence pack for each IO your organisation is relevant to
Effective compliance monitoring software in Dubai is no longer a nice-to-have at this stage. It is the infrastructure that makes all of the above achievable, auditable, and demonstrable to assessors.
The Role of Technology in FATF Readiness
Manual compliance processes will not meet the bar that 2026 assessors will set. Regulators want to see systems that generate reliable data, detect anomalies in real time, and produce audit-ready records at a moment’s notice.
This is where purpose-built compliance monitoring software in Dubai delivers a decisive advantage. From automated sanctions screening and risk-scored onboarding to real-time transaction monitoring and regulatory reporting, technology reduces human error, closes coverage gaps, and builds the evidentiary trail that assessors will look for.
How First Compliance Can Help
At First Compliance, we have built an all-in-one platform specifically designed for institutions operating in the UAE’s regulatory environment. Our modules cover every dimension of FATF readiness:
- Sanctions Screening – integrated with hundreds of global lists, updated in real time
- eKYC and Onboarding Due Diligence – risk-scored, automated, and fully documented
- Transaction Monitoring – AI-powered detection with customisable rule sets
- Regulatory Reporting – structured, accurate STR and CTR filing workflows
- Case Management – end-to-end audit trails for every compliance decision
- Risk Management – dynamic risk scoring aligned with a risk-based approach
As a leading provider of compliance monitoring software in Dubai, First Compliance gives your institution the tools, the data, and the documentation to face the 2026 Mutual Evaluation with confidence.
The Bottom Line
The UAE’s 2026 FATF Mutual Evaluation is not a formality. It is a high-stakes assessment of whether reforms have translated into real-world effectiveness. Institutions that start preparing now, with the right policies, the right training, and the right technology in place, will be far better positioned than those that wait.
Frequently Asked Questions
When did the FATF evaluate the UAE?
The FATF on-site visit for the UAE’s 5th Round mutual evaluation took place in June 2026. The previous evaluation report was published in 2020 and led to the UAE’s grey listing in March 2022.
What is the FATF 5th Round Methodology?
It is the framework FATF uses to assess countries from 2024 onwards. It applies a shorter assessment cycle and places more weight on effectiveness, measured through Immediate Outcomes, than on technical compliance with the 40 Recommendations.
What happens if the UAE receives a weak rating?
Weak effectiveness ratings can lead to enhanced follow-up and, in serious cases, to grey listing. For firms, a weak national rating usually means more frequent inspections and higher supervisory expectations.
Need evidence that your controls work in practice?
Schedule a free demo with First Compliance today and see how our platform can close your gaps, automate your reporting, and give you the confidence to face regulatory scrutiny head-on.