In-House AML Training for Your Staff in the UAE

Who this is for

This page is for owners, general managers and compliance officers of UAE-regulated businesses who need in-house AML training for staff in the UAE that will actually stand up at inspection. Most of the firms we train are DNFBPs supervised by the Ministry of Economy and Tourism, and a smaller number are financial institutions under the CBUAE, SCA, DFSA or FSRA. Typical situations:

• A real estate brokerage or precious metals dealer that has written AML policies but has never run a training session, and now has an inspection notice or a self-assessment questionnaire to complete.
• An accounting, audit or company service firm whose only training record is one person's CAMS or ICA certificate, with nothing for the rest of the team.
• A firm that has been told at inspection, or by an independent reviewer, that its training was generic, undated or not linked to its own risk assessment.
• A board or senior management team that has never been briefed on its own AML responsibilities and wants a short, direct session before the next regulatory interaction.

Why in-house AML training for staff in the UAE is an obligation, not an option

The UAE's current AML law, Federal Decree-Law No. 10 of 2025, requires every regulated financial institution and DNFBP to put in place internal policies, controls and procedures proportionate to its risks, and to make sure its staff understand and apply them. The supervisory rules issued by the Ministry of Economy and Tourism, the Central Bank, the DFSA and the FSRA each spell this out as a requirement for ongoing employee training. Our MoET AML law guide sets out the mainland framework in more detail; for the text of your own supervisor's rules, check the current published version.

Three points matter in practice. First, the duty sits with the firm, not with individual employees. Second, the content has to cover the firm's own procedures: its customer due diligence steps, its risk rating method, the red flags relevant to its sector, how to escalate an internal suspicion and who files on goAML. Third, the firm must be able to prove that the training happened. Inadequate staff training is one of the compliance failures for which a Supervisory Authority can impose administrative penalties, which under the current law range from AED 10,000 to AED 5,000,000 per violation, alongside warnings and licence measures. See our note on AML fines and penalties in the UAE for the full framework.

Who needs what

A single all-staff presentation does not meet the requirement well, because the people in the room have different jobs. We separate training into four audiences:

• Front-line and client-facing staff: brokers, sales staff, relationship managers, reception and onboarding teams. They need to recognise red flags in their own daily work, collect the right documents, and know exactly who to tell and how, without tipping off the customer.
• Compliance and operations staff: the compliance officer, MLRO, deputy and anyone who does screening, risk rating, record keeping or goAML filing. They need depth on the firm's procedures, the sanctions and PEP screening process, and the reporting workflow.
• Senior management: the owner, partners and department heads. They need to understand their accountability, how the business risk assessment drives the controls, and what the inspection and penalty regime means for them personally.
• The board or equivalent governing body: a short, factual briefing on oversight duties, the MLRO reporting line, and what they should be asking to see each year.

What inspectors ask to see

In our experience of inspections and remediation, the questions on training are consistent. Inspectors ask for the training policy and annual plan, the attendance records with names, roles and dates, the materials actually used, the results of any assessment, the induction process for new joiners, and evidence of a refresher cycle. They also check that the content matches the firm's business risk assessment and its written procedures. Training that cannot be dated, or that covers money laundering in general but says nothing about the firm's own customers and products, tends to be recorded as a finding. Our inspection readiness checklist covers the surrounding documents.

What Adventant does

A training engagement is scoped in advance so you know what is included, how many sessions there are and what records you will hold at the end. The steps below describe a typical engagement for a single-entity DNFBP. Larger or multi-licence groups are scoped separately.

1. Review of your documents (typically week 1). We read your AML policies and procedures, your business risk assessment, your customer risk rating method and any previous inspection or review findings. If these documents are missing or weak, we say so, and we can address them through our policies and procedures and risk assessment services before training begins, because training staff on procedures that do not exist is not useful.
2. Audience mapping and training plan. We agree which staff fall into which audience group, the session length for each, the delivery format (on site in Dubai, online, or a mix for staff in other emirates) and the dates. This becomes your annual training plan.
3. Content built on your firm (typically weeks 1 to 2). We write the sessions around your own procedures and your sector: red flags for real estate brokerage, dealers in precious metals and stones, accountants and auditors, company service providers, law firms or exchange houses, using your actual forms, your risk rating categories and your escalation route by name.
4. Delivery of role-based sessions (typically weeks 2 to 4). Short, practical sessions for each audience group, led by a former senior bank compliance practitioner. Front-line sessions use case scenarios drawn from your business. The senior management and board briefings are kept short and direct.
5. Assessment. Each participant completes a short assessment at the end of the session. We mark it, record the results, and flag anyone who should repeat a module. This is the evidence of understanding that inspectors look for.
6. Training register and records pack. We hand over a completed register showing each person, role, module, date, trainer, assessment result and next refresher date, together with the slide decks, scenario sheets and attendance sheets, in a format you can keep updating yourself.
7. Induction module and refresher cycle. You receive a shorter induction module for new joiners and an agreed refresher schedule, so the register stays current between annual sessions. We can return to deliver the refresher or you can run it internally with the materials.

What you receive

Why businesses choose us for this

• Our trainers are former senior compliance leaders from UAE banks, including Standard Chartered, RAKBANK and FAB, who have trained front-line teams, compliance teams and boards inside regulated institutions.
• We have direct experience of regulatory inspections and post-inspection remediation, so we know which training records get asked for and which gaps get written up.
• Content is built on your own policies and risk assessment, not adapted from a template deck with your logo added.
• Sector-specific material for real estate, precious metals and stones, accountants and auditors, company service providers, law firms and exchange houses.
• Fixed scope agreed up front: number of sessions, audiences, format and deliverables, with no open-ended hourly billing.
• Dubai-based, with on-site delivery in Dubai and online delivery for staff in Abu Dhabi, Sharjah, Ras Al Khaimah and the other emirates.

Common mistakes we see

• Relying on one person's CAMS or ICA certificate as the firm's entire training record.
• Using a generic online course that never mentions the firm's own procedures, customers or red flags.
• Training everyone with the same slides, so the board hears about document checklists and the receptionist hears about governance.
• No dates, no attendance list and no assessment, so there is nothing to show an inspector.
• Training staff on a policy that was written years ago and no longer matches how the business operates, a problem we describe in AML manual up to date but compliant?.
• Forgetting new joiners, so the register is complete on the day of the annual session and incomplete a month later.
• Treating a year with no suspicious transaction reports as proof that staff know what to look for; see zero STRs does not mean zero risk.

Related reading

• AML inspection readiness checklist for UAE businesses
• How to write an AML business risk assessment in the UAE
• Sanctions and PEP screening process in the UAE
• AML policies and procedures service
• AML compliance for real estate brokers

Next step

Tell us your sector, your supervisor, how many staff you have and whether you already hold a current risk assessment and procedures manual. We will come back with a scoped proposal setting out the audiences, the number of sessions, the format and the records you will hold at the end.

General information, not legal advice. Check current requirements with your supervisory authority.