The UAE has spent the last five years building one of the region's most robust anti-money laundering (AML) frameworks. Following its removal from the FATF grey list in 2024, regulators continue to raise the bar: firms operating across DIFC, ADGM, the mainland and free zones are under growing pressure to appoint qualified compliance officers and, in many cases, a dedicated Money Laundering Reporting Officer (MLRO).
Whether you are setting up a regulated business, reviewing your current AML structure, or considering whether to hire in-house or outsource the function, this guide covers everything you need to know.
1. What Is an MLRO (Money Laundering Reporting Officer)?
An MLRO – Money Laundering Reporting Officer – is the individual within a regulated entity who holds formal, personal responsibility for the firm's AML and counter-financing of terrorism (CFT) obligations. The role is a regulatory appointment, not simply a job title: the MLRO is a named, approved person accountable to the relevant supervisory authority.
In the UAE, the MLRO is typically required to be registered or approved by the firm's regulator, whether that is the Central Bank of the UAE (CBUAE), the Dubai Financial Services Authority (DFSA), the Financial Services Regulatory Authority (FSRA) in ADGM, or a sectoral supervisor such as the Real Estate Regulatory Agency (RERA) or the Virtual Assets Regulatory Authority (VARA).
Key distinction: a Compliance Officer manages the firm's overall regulatory obligations. The MLRO is specifically responsible for suspicious activity reporting (SAR/STR) and AML programme oversight. In smaller firms, both roles are often held by the same person. |
2. AML Compliance Officer: Day-to-Day Responsibilities
The day-to-day work of an AML Compliance Officer and MLRO spans four broad areas:
Programme Ownership
Developing, implementing and maintaining the firm's AML/CFT policies and procedures
Conducting and documenting the firm's Business Risk Assessment (BRA) and customer risk assessments
Ensuring the programme reflects current UAE Federal AML Law (Federal Decree-Law No. 20 of 2018) and its executive regulations
Customer Due Diligence Oversight
Reviewing and approving enhanced due diligence (EDD) cases for high-risk customers, PEPs and correspondent relationships
Overseeing ongoing monitoring of customer transactions and relationships
Managing escalations from relationship managers and front-line staff
Suspicious Activity Reporting
Receiving and reviewing internal suspicious transaction reports (STRs) from staff
Making external disclosures to the UAE Financial Intelligence Unit (UAEFIU) via the goAML platform where required
Maintaining an STR register and ensuring tipping-off obligations are observed
Training, Governance & Regulatory Liaison
Delivering or commissioning AML training for all relevant staff
Reporting to the board or senior management on AML risk exposure and programme effectiveness
Acting as the primary point of contact for regulators during inspections and information requests
Keeping up to date with regulatory guidance, FATF developments and sanctions updates
3. UAE Regulatory Requirements: Must You Have an MLRO?
Whether your firm is required to appoint a formal MLRO depends on its regulatory status and sector.
Firms that are typically required to appoint a named, approved MLRO include:
Banks, exchange houses and other CBUAE-licensed financial institutions
DFSA-regulated firms in the DIFC
FSRA-regulated firms in the ADGM
VARA-licensed virtual asset service providers (VASPs)
Insurance companies and insurance intermediaries licensed by the Insurance Authority
Designated Non-Financial Businesses and Professions (DNFBPs), including real estate brokers, company service providers, gold and precious metals dealers, and certain legal and accounting firms are required to have AML compliance functions under the supervision of the Ministry of Economy, but the formal MLRO title and approval process varies by sector.
Regardless of whether a formal MLRO appointment is mandated, all firms subject to UAE AML law must have a named compliance officer responsible for AML/CFT, staff training, and STR filing. Operating without one is a regulatory offence. |
4. MLRO Qualifications & Skills
UAE regulators do not prescribe a single mandatory qualification for MLROs, but they do require the appointee to demonstrate fitness and propriety, relevant experience and adequate knowledge of AML/CFT obligations. In practice, hiring firms and regulators look for:
Professional Qualifications
ICA Certificate or Diploma in AML (International Compliance Association)
ACAMS Certified Anti-Money Laundering Specialist (CAMS)
ACAMS Certified Global Sanctions Specialist (CGSS)
ICA Certificate in Compliance
Legal, accounting or financial services qualifications (LLB, ACCA, CFA) are valued as a foundation but are not substitutes for AML-specific credentials
Experience & Competencies
Minimum three to five years of AML, compliance or financial crime experience, more for senior MLRO roles at regulated financial institutions
Familiarity with the UAE AML legal framework, CBUAE guidance, FATF recommendations and relevant sector regulations
Hands-on experience with goAML and UAE AMLSCU/UAEFIU reporting
Strong analytical and investigative skills for transaction monitoring and STR review
Ability to communicate risk clearly to senior management and boards
Arabic language skills are advantageous but rarely mandatory
5. MLRO Salary Benchmarks in UAE (2026)
Compensation varies significantly by sector, firm size, regulatory complexity and whether the role is standalone or combined with a broader compliance function. The table below reflects 2026 market ranges across Dubai and Abu Dhabi:
Role / Seniority | Monthly (AED) | Annual (AED) |
Junior AML Analyst | 12,000 – 18,000 | 144,000 – 216,000 |
AML Compliance Officer | 18,000 – 30,000 | 216,000 – 360,000 |
Senior Compliance Manager | 30,000 – 50,000 | 360,000 – 600,000 |
MLRO (in-house, regulated firm) | 40,000 – 75,000 | 480,000 – 900,000 |
Outsourced MLRO (retainer) | 8,000 – 20,000 | 96,000 – 240,000 |
Financial services firms — particularly banks, payment institutions and VASPs — sit at the higher end of the range. Real estate companies and smaller DNFBPs typically offer lower packages, which is one reason outsourced MLRO services have grown in popularity in those sectors.
6. In-House MLRO vs Outsourced MLRO: Pros & Cons
Firms with limited resources or lower risk profiles often consider outsourcing the MLRO function rather than hiring a full-time employee. Both models are permissible under UAE regulations, subject to the outsourcing firm maintaining appropriate oversight and the outsourced MLRO meeting the regulator's fit-and-proper requirements.
In-House MLRO | Outsourced MLRO |
• Deep institutional knowledge of the firm's business • Immediately available for internal escalations • Stronger integration with senior management • Preferred by some regulators for higher-risk firms • Can build long-term compliance culture | • Significantly lower cost, no full-time salary, benefits or training budget • Access to a team of specialists rather than one individual • Faster to deploy, no lengthy recruitment process • Regulatory knowledge kept current by the provider • Scalable as the business grows |
The outsourced model works well for start-ups, DNFBPs, smaller regulated firms and businesses in early growth stages. It is less suited to large financial institutions or firms with high transaction volumes where a dedicated, embedded presence is essential.
7. How B-AML Provides Outsourced MLRO Services
B-AML offers outsourced MLRO and AML Compliance Officer services to regulated entities and DNFBPs across the UAE. Our approach is built around three principles: regulatory credibility, practical expertise, and genuine availability.
What Our Service Includes
Appointment of a qualified, experienced MLRO to serve as your named compliance officer with the relevant regulator
Full ownership of your AML/CFT programme – policies, risk assessments, controls and procedures
STR review, goAML filing and UAEFIU reporting management
Ongoing transaction monitoring support and EDD case review
Staff AML training delivered in-person or remotely
Board and senior management reporting
Regulatory inspection support and exam preparation
Continuous monitoring of UAE regulatory developments and updates to your programme
Who We Work With
We work with real estate brokers, property developers, virtual asset service providers, payment and remittance firms, corporate service providers, family offices and other regulated businesses across Dubai, Abu Dhabi and UAE free zones.
B-AML's outsourced MLRO service gives your firm a credible, regulator-ready compliance function at a fraction of the cost of a full-time hire with the depth of a specialist team behind every decision. |
