All topicsRegulation explained
What is a DNFBP in the UAE, and why does the activity matter?
A business does not have to be a bank to become part of a financial-crime risk. Understand the DNFBP categories and why a job title alone is not enough.

A property broker helps a buyer acquire an asset. An accountant may help establish a company. A dealer may exchange cash for valuable stones. None needs to operate a bank for its work to become useful to someone trying to disguise the ownership or movement of money.
That is the reasoning behind the term designated non-financial businesses and professions, usually shortened to DNFBPs. It describes specified activities brought within anti-money-laundering controls because of the access, transactions or arrangements they facilitate. It is not a general label for every company outside financial services.
Which activities fall within the definition?
Article 3 of Cabinet Resolution 134 of 2025 sets out the categories and their conditions. The following is an orientation to those categories, not a substitute for checking the full activity definition.
Category | The distinction that matters |
|---|---|
Commercial gaming operators | Single or linked financial transactions at or above AED 11,000; the definition excludes transactions involving solely gaming chips or instruments |
Real-estate brokers and agents | Transactions involving the purchase or sale of real estate for clients |
Dealers in precious metals and stones | Cash transactions of AED 55,000 or more, whether one transaction or linked transactions |
Lawyers, notaries, other independent legal professionals and independent accountants | Specified client activities, including property, asset or account management and organising or managing companies and legal arrangements |
Trust and company-service providers | Specified formation, office, director, trustee and nominee services |
Other designated activities | Activities identified through the applicable designation mechanism |
The monetary thresholds in this table are category-specific. AED 55,000 is not a universal threshold below which every DNFBP can ignore AML responsibilities. Nor does a threshold remove the need to consider other applicable requirements, including suspicious activity.
Why a professional title can give the wrong answer
Consider a hypothetical accountant who prepares a client’s monthly management accounts. Later, the same practice starts organising company formation and managing client funds. Looking only at the word “accountant” misses the change in what the practice actually does.
The activity test matters in both directions. It prevents an organisation from overlooking an obligation because it calls itself a consultancy. It also prevents the opposite mistake: assuming that every service offered by every person with a familiar professional title has identical treatment.
A useful classification therefore describes the service, the customer relationship and the firm’s role in the transaction. The trade licence is an important starting point, but the operational facts also matter.
Who supervises the business?
The Ministry of Economy and Tourism’s AML information is a starting point for the DNFBP sectors within its remit. However, the list of DNFBP activities is broader than a statement that one Ministry supervises every entity in every location.
The activity, licensing arrangements and jurisdiction determine the applicable supervisor. Financial free zones, legal professions and other regulated activities can involve different supervisory arrangements. A company should identify its actual authority rather than copy the supervisor chosen by another business.
This has practical consequences. The correct supervisor affects registration, communications, reporting expectations and where the business obtains applicable guidance.
What changes after classification?
Classification turns a general concern about financial crime into assigned responsibilities. The business needs controls appropriate to its risks, customer and beneficial-owner checks, a route for handling concerns, relevant training and records that explain what happened.
These elements connect. A customer form without review may collect information nobody uses. Screening without a route for investigating a possible match may produce alerts nobody resolves. A reporting login without an authorised person able to assess a concern may be little help when a problem arises.
For a newly identified reporting entity, goAML registration is one part of becoming operationally ready. It does not settle the underlying classification or replace the wider programme.
Classification can change as the business changes
A new service, a different type of transaction or a move into managing client assets can alter the analysis. The classification reached at incorporation should not become an assumption that nobody revisits.
The central question remains straightforward: what does the firm do for its clients, and which regulated activity does that work amount to? Answering it accurately is more useful than collecting labels that sound reassuring.
Questions we are asked
Short answers on the points readers raise most about this topic.
- Does operating in a free zone remove DNFBP obligations?
- No blanket exemption follows from being in a free zone. The activity and the applicable legal and supervisory framework must be checked, including whether it is a commercial or financial free zone.
- Does an AML training certificate prove that a business is compliant?
- No. It can evidence relevant learning, but classification, customer checks, reporting, governance and other applicable controls must also be addressed. A training provider does not determine or certify the business’s regulatory status.
Related articles
Train your people, and keep records an inspector can read.
