Annual AML/CFT Risk Assessment for DNFBPs for FY 2025: Requirements, Deadline, and Compliance Expectations
The Ministry of Economy requires all Designated Non-Financial Businesses and Professions (DNFBP) to file an annual, mandatory risk assessment report for the financial year 2025.
The following sectors are classified as DNFBPs
Real Estate Agents and Brokers
Dealers in Precious Metals and Stones
Lawyers, Notaries, and Independent Legal Professionals
Accountants and Auditors
Trust and Company Service Providers
For DNFBPs operating in the UAE, AML/CFT compliance is no longer something that sits quietly in internal files. Regulators now expect businesses to understand their exposure, document it clearly, and show how risks are being managed day to day. The annual AML/CFT risk assessment for FY 2025 sits right at the centre of that expectation.
The Ministry of Economy has formally initiated the Annual AML & CFT Risk Assessment (ARA) data collection exercise for FY 2025 (01 January 2025 – 31 December 2025).
What Is the Annual AML/CFT Risk Assessment and Why Does It Matter?
The annual AML/CFT risk assessment is a structured review of a business’s vulnerability to money laundering and terrorist financing. It examines who the business deals with, how transactions are carried out, where risks originate, and whether existing controls are actually effective.
Regulators use this assessment to judge whether a DNFBP understands its own risk profile. A strong annual AML/CFT risk assessment shows that risks have been identified honestly and mitigated through clear processes. A weak or generic assessment suggests that compliance exists only on paper.
DNFBPs Covered Under the FY 2025 Requirement
The annual AML/CFT risk assessment applies to a wide range of DNFBPs in the UAE. The assessment covers real estate brokers, dealers in precious metals and stones, lawyers and notaries, auditors and accountants, trust and company service providers, and other designated non-financial businesses.
Required assessment needs to be conducted by evaluating operational activities rather than using business size as a measure. All DNFBPs should prepare a document that describes the procedures they use to identify and mitigate risks.
Organisations providing diversified services must conduct separate risk evaluations for each operational function. Businesses should not rely on a single risk assessment for their entire operation, as authority will question this practice during audits.
All registered DNFBPs are required to complete and submit the Risk Assessment Survey upon receiving official notification from the Ministry via their registered email address.
Deadline for Annual AML/CFT Risk Assessment for FY 2025
The annual AML/CFT risk assessment for FY 2025 must be completed by the scheduled completion date set by the UAE authorities and maintained for inspection throughout the year.
The general submission deadline for the financial year 01 January 2025 to 31 December 2025 will be 30 January 2026. The Ministry has announced extended deadlines for specific sectors of the economy.
The deadline for Dealers in Precious Metals and Stones (DPMS) and Corporate Service Providers (CSPs) will be 27 February 2026.
The deadline for Real Estate Brokers (BREA) and Independent Accountants Auditors (IAA) will be 28 February 2026.
The assessment needs to be both present and precise while establishing credibility through defensible information.
Instead of waiting for an outside request, DNFBPs are also expected to update their assessment anytime there is a significant change in business activity through their official communication channel.
Key Areas Regulators Expect DNFBPs to Assess
A credible annual AML/CFT risk assessment comprises several core areas.
Customer risk looks at client profiles, ownership structures, and sources of funds. The business needs to establish stronger security protocols for its high-risk clients who require continuous monitoring of their activities.
Organisations need to conduct geographic risk assessments to evaluate high-risk areas that emerge from client and counterparty activities.
Certain products and services carry a higher risk because their potential for misuse increases with their high value and low transparency.
The delivery channel risk assessment evaluates all service delivery processes, which include remote customer registration and intermediary service provider usage.
Transaction risk assessment examines all aspects of a financial transaction, including transaction volume and frequency, as well as any irregularities that arise.
Regulators require organisations to evaluate these risks using actual data rather than hypothetical testing methods.
Common Gaps Identified During Audits of DNFBPs
Audit firms in Dubai frequently identify similar issues across DNFBPs. One common gap is unrealistic risk scoring, where businesses label themselves as low risk without adequate justification.
The second issue is that assessments need to be updated because they don’t take into account new client segments, market developments, or current service offers. Documentation gaps are also common. Organisations have established policies that they fail to implement according to the required standards.
The auditing firms operating in Dubai find that organisations lack internal controls that match their declared risks. High-risk clients can also undergo the same process as other clients, which undermines the system.
The gaps usually arise from a lack of internal expertise or the use of generic template approaches.
Role of Auditing Services in Strengthening AML/CFT Compliance
The improvement of an organisation’s ability to comply with AML/CFT regulations is heavily dependent on AML Audit. A proper evaluation of an organisation’s risk exposure can be provided by independent auditors.
Auditing and accounting firms in Dubai offer support to these DNFBPs through the risk assessment validation service. The process helps the business overcome weaknesses by developing solutions that work.
Auditing services in Dubai help businesses create documentation procedures that align with their actual operational processes. It offers documented procedures for ensuring compliance, which assist in sustaining compliance while, at the same time, avoiding any regulatory compliance risks.
How Premier Auditing and Accounting Supports DNFBPs
Premier Auditing and Accounting LLC is a provider of AML/CFT risk assessment for DNFBPs, and they ensure a risk assessment process that reflects the business activities of the customers. They offer a personalised approach for every customer by understanding the business structure and procedures of the customers regarding their interactions, transactions, and security.
The company provides full service that extends from risk assessment to audit readiness, being one of the respected auditing and accounting firms in Dubai.
Final Thoughts
The Annual AML/CFT risk assessment of the DNFBPs for the financial year 2025 is a crucial obligation that should be performed.
Following the 30 January 2026 deadline and subsequent sector-specific extensions in February 2026, DNFBPs must ensure the submission of their AML/CFT Risk Assessment within the deadline and is accurate, approved by management, and aligned with their actual operations.
Working with experienced audit firms in Dubai, such as Premier Auditing and Accounting LLC, helps ensure that the assessment is practical, compliant, and ready for review when required.
Previous
