AML compliance UAE obligations go beyond basic customer checks — many DNFBPs are unsure when standard due diligence is enough and when the law requires Enhanced Due Diligence (EDD) instead. This is especially true when a customer turns out to be a Politically Exposed Person (PEP), a category that automatically triggers extra scrutiny. Getting this wrong is one of the most common findings in supervisory inspections, so understanding the practical mechanics matters.

What is the difference between standard due diligence and EDD?

Standard Customer Due Diligence (CDD) is the baseline: identifying the customer, verifying identity documents, understanding the nature of the business relationship, and screening against sanctions lists. Enhanced Due Diligence (EDD) involves additional checks and controls proportionate to identified risks. Businesses must apply EDD where required by UAE AML legislation, including applicable high-risk relationships and transactions. The measures may include obtaining additional information about the customer and beneficial owner, establishing source of funds and source of wealth, obtaining the required senior management approval, and conducting enhanced ongoing monitoring.

EDD typically requires:

  • Establishing the source of funds and source of wealth
  • Obtaining senior management approval before onboarding or continuing the relationship
  • More frequent ongoing monitoring of transactions
  • Additional verification of beneficial ownership and control structures
  • Closer scrutiny of the business rationale behind unusual or complex transactions

Businesses that have not yet mapped out which customer types trigger EDD should revisit their AML compliance programme to make sure the triggers are documented, not just applied informally.

Who counts as a Politically Exposed Person?

A PEP is an individual who holds, or has held, a prominent public function — such as a senior government official, judge, military officer, or executive of a state-owned enterprise — along with their close family members and known associates. UAE AML rules require businesses to identify customers and beneficial owners who are politically exposed persons (PEPs) and apply the additional measures required by law. Foreign PEPs are subject to specific enhanced due diligence requirements. For domestic PEPs and persons entrusted with prominent functions in international organisations, the applicable additional measures depend on the relevant legal requirements and the assessed risk of the business relationship. PEP status should be considered alongside other risk factors, rather than treating every PEP relationship as identical.

Why PEP status matters

  • PEPs may have access to public funds or influence over decisions that create corruption or bribery risk
  • Their transactions often involve complex ownership structures or intermediaries
  • Reputational damage to your business can be severe if a PEP relationship is later linked to illicit funds

Identifying a PEP is not a one-off check. Screening should happen at onboarding and be repeated periodically, since a customer's political exposure can change during the relationship.

How should a DNFBP screen for PEPs in practice?

A workable screening process includes:

  • Using a reliable PEP and sanctions screening database, updated regularly
  • Screening all parties to a transaction, not just the named customer — including beneficial owners identified through your UBO verification process
  • Recording the screening result, whether positive or negative, with a timestamp

  • Escalate potential PEP or sanctions matches to the designated AML Compliance Officer or Money Laundering Reporting Officer (MLRO), as applicable, for review and documented resolution under the business's internal procedures. Do not treat an unverified name match as a confirmed match, and do not proceed where applicable legal requirements or unresolved sanctions concerns prohibit the transaction.

  • Re-screening existing customers on a risk-based schedule, not only at onboarding

False positives are common with name-matching software, so your process should include a clear method for confirming or dismissing a potential match, with reasoning kept on file.

What documentation do regulators expect for EDD and PEP cases?

Keep evidence of:

  • The risk assessment that led to the EDD classification
  • Source of funds and source of wealth evidence actually reviewed, not just requested
  • Senior management sign-off, with a name, date, and decision rationale
  • Ongoing monitoring notes showing the relationship was reviewed periodically, not left static
  • Any Suspicious Transaction Reports filed through the goAML platform relating to the customer

Inspectors from the Ministry of Economy or relevant supervisory authority will typically ask for a sample of customer files and expect this evidence to be retrievable quickly. Weak or missing EDD documentation is a frequent cause of penalties, even where no actual money laundering occurred.

What happens if EDD or PEP screening is skipped?

Failing to apply EDD where required, or missing a PEP match entirely, can result in significant administrative fines, restrictions on business activity, and in serious cases referral for further investigation. Beyond the financial penalty, it signals a weak overall compliance culture, which supervisors tend to scrutinise more closely on future visits. A well-documented independent review of your AML controls can catch these gaps before a regulator does.

Frequently Asked Questions

Does EDD apply only to PEPs?

No. EDD applies to any customer, transaction, or relationship assessed as higher risk — this can include high-value cash transactions, complex ownership structures, high-risk jurisdictions, or unusual transaction patterns, in addition to PEPs.

How often should PEP screening be repeated?

There is no fixed universal interval, but screening should be risk-based — higher-risk customers should be re-screened more frequently, and all customers should be re-screened when there is a trigger event, such as a large or unusual transaction.

Can a business refuse to onboard a PEP?

Yes. Being a PEP does not automatically bar a business relationship, but it requires senior management approval and enhanced monitoring. A business may decline the relationship if it cannot adequately manage the associated risk.

How Elite Edge can help

Elite Edge Accounting & Bookkeeping, based at Office No. 1810, Tamani Arts Building, Business Bay, Dubai, helps DNFBPs build practical EDD and PEP screening procedures that satisfy UAE regulators without slowing down genuine customer onboarding. From risk assessments to MLRO support and goAML filing, our team can review your current process and close the gaps. Contact us to arrange a consultation.

This article is for general information only and does not constitute professional or legal advice. AML rules and regulatory expectations in the UAE can change, so businesses should seek tailored advice before making compliance decisions.