CENTRAL BANK · COMPLIANCE · UAE

How to Comply with Central Bank Requirements in the UAE

A practical roadmap covering regulators, core compliance areas, AML/CFT, reporting, and the finance foundations behind them

Complying with Central Bank requirements in the UAE is not a one-time task. For licensed financial institutions, it is an ongoing programme of governance, controls, reporting, and evidence that must work every day, not only at licence renewal or inspection time.

Requirements depend on your licence type and activities, and some firms in financial free zones answer to other regulators. The first step is always to confirm who regulates you and which rules apply.

This guide gives a practical roadmap: the main compliance areas, a step-by-step plan, the AML/CFT focus, reporting and record-keeping, and how strong accounting supports all of it. Our advisory and consultancy services help firms assess gaps and build workable compliance processes.

1. Who Does the Central Bank Regulate?

The Central Bank of the UAE (CBUAE) is the main regulator for banks, exchange houses, finance companies, insurance companies, and other licensed financial institutions in the country. Requirements differ by licence type, and some financial free zones and sectors are supervised by other authorities.

Type of business	Typical regulator
Banks, exchange houses, finance companies, payment service providers, insurers	Central Bank of the UAE (CBUAE)
Firms in DIFC	Dubai Financial Services Authority (DFSA)
Firms in ADGM	Financial Services Regulatory Authority (FSRA)
Securities and commodities activities	Securities and Commodities Authority (SCA)
Other businesses, such as designated non-financial businesses	Other competent authorities, depending on activity

2. Core Compliance Areas

Area	What it generally covers
Licensing and approvals	Maintaining your licence conditions and seeking approval for material changes
Governance	Board oversight, policies, fit and proper persons, clear responsibilities
AML/CFT and sanctions	Customer due diligence, monitoring, suspicious activity reporting, sanctions screening
Capital and liquidity	Meeting prudential requirements where applicable
Regulatory reporting	Periodic returns and data submissions; see Central Bank reporting obligations
Consumer protection	Fair treatment, disclosures, complaint handling
Risk and internal control	Risk framework, internal audit, compliance function
Outsourcing and data	Controls over third parties, data security, and record retention
Financial reporting and audit	IFRS financial statements and external audit

3. A Step-by-Step Compliance Roadmap

4. AML/CFT: The Biggest Focus

• Know your customer: identify customers and beneficial owners and verify documents
• Risk-based approach: rate customers, products, and countries by risk
• Ongoing monitoring of transactions against customer profiles
• Sanctions and watch-list screening
• Reporting suspicious activity through the channels required by UAE authorities
• Staff training and independent testing of the AML programme
• Keeping customer and transaction records for the required period

5. Reporting and Record-Keeping

• Know each return you must file, its frequency, and its deadline
• Reconcile reported figures to your general ledger and trial balance
• Keep an audit trail: source data, calculations, reviewer sign-off, and submission proof
• Retain records for the legally required period in a retrievable form
• Document changes in methodology and explain unusual movements

See our dedicated guide on Central Bank reporting obligations for more detail.

6. Accounting, Audit, and Financial Controls

Regulatory returns draw on your accounting records, so weak books lead to wrong submissions. Strong finance foundations make compliance easier:

• Accurate monthly closing and reconciliations, supported by accounting and bookkeeping services
• Financial statements prepared under IFRS and audited by a licensed auditor, supported by audit and assurance services
• Correct VAT and Corporate Tax treatment, with independent checks such as VAT compliance audits and Corporate Tax compliance audits
• Clear separation of duties, approvals, and documented procedures

If your team is small, see professional accounting affordability for small businesses and the difference between accounting and bookkeeping. Keep your accounting documents organised for regulators and auditors.

7. Building a Compliance Calendar

Frequency	Typical tasks
Ongoing	Customer due diligence, transaction monitoring, sanctions screening, incident logging
Monthly	Closing, reconciliations, management reporting, compliance MI
Quarterly	Regulatory returns where required, board compliance report, control testing
Annually	Audited financial statements, policy review, staff training, risk assessment refresh, licence renewal
As needed	Notifying regulators of material changes, responding to inspections

8. Common Compliance Mistakes

• Assuming that a licence once granted needs no further attention
• Policies written but not followed or evidenced
• Weak customer due diligence files and outdated customer information
• Late or inaccurate returns caused by poor underlying accounting data
• No clear owner for compliance tasks
• Untested controls and untrained staff
• Ignoring new regulator notices and updates

9. How One Desk Solution Can Help

• Accounting, bookkeeping, and financial statements that support accurate regulatory returns: accounting services
• Independent reviews and audit readiness: audit and assurance
• VAT and Corporate Tax compliance: tax services
• Compliance gap assessments, process design, and regulatory readiness: advisory and consultancy
• New entity planning, licensing support, and structure: business setup

Planning to start a regulated business or a financial services entity? Explore our full list of services.

Frequently Asked Questions