Customer Due Diligence for Corporate Trustees in the UAE

Corporate trustees in the United Arab Emirates (UAE) may be involved in managing trusts, administering legal arrangements, and supporting complex ownership structures. These activities can create money laundering risks if the identities of the relevant parties, the purpose of the arrangement, or the origin of assets are unclear.

Customer Due Diligence (CDD) is an important part of an effective Anti-Money Laundering (AML) framework. It helps trustees understand who is involved in a trust, who ultimately controls it, why the arrangement exists, and whether its activities are consistent with the information provided.

The UAE Ministry of Economy and Tourism's 2026 supplemental guidance for Trust and Company Service Providers (TCSPs) highlights the importance of risk-based controls, beneficial ownership transparency, and understanding the source of funds and wealth associated with relevant services.

What Is Customer Due Diligence for Corporate Trustees?

Customer Due Diligence is the process of identifying and verifying customers and relevant connected parties, assessing risks, understanding the purpose of a business relationship, and reviewing activity over time.

For corporate trustees, CDD may require more than collecting the identity documents of the person who establishes a trust. Depending on the arrangement and applicable requirements, a trustee may need to identify and verify the settlor, trustees, protector, beneficiaries or class of beneficiaries, and any other natural person exercising ultimate effective control.

These checks help establish a clearer picture of the trust's ownership, control, assets, and intended purpose.

Not every business that describes itself as a corporate trustee automatically has identical regulatory obligations. The UAE AML framework applies to trust and company service providers when they perform specified activities within the relevant regulatory scope. Firms should confirm their classification and applicable requirements.

Why Is AML Compliance Important for Corporate Trustees in the UAE?

Trusts and legal arrangements can involve multiple parties, companies in different jurisdictions, nominee relationships, and assets held for beneficiaries. These features may make it difficult to identify who ultimately benefits from or controls the arrangement.

Effective AML controls can help corporate trustees:

Identify the individuals behind complex ownership structures.
Understand the purpose and intended operation of a trust.
Assess the source of funds and wealth associated with the arrangement.
Detect inconsistencies and potentially suspicious activity.
Maintain appropriate records and support regulatory compliance.
Reduce the risk of their services being misused for financial crime.

CDD should be proportionate to the risks identified. It is not simply a one-time document collection exercise.

Key Customer Due Diligence Responsibilities for Corporate Trustees

1. Identify and Verify the Settlor

The settlor is the person who establishes a trust or contributes assets to it. Understanding the settlor's identity and role helps the trustee assess the origin and purpose of the arrangement.

Depending on the circumstances, relevant checks may include:

Full legal name and identity documents.
Nationality and residential or business address.
Relevant company or professional details.
Information explaining the purpose of the trust.
Information and supporting evidence concerning the source of assets or funds.

If the settlor is a legal entity rather than an individual, the trustee may need to understand its ownership and control structure and identify the relevant natural persons.

2. Verify the Identity of Trustees and Authorised Representatives

Corporate trustees should identify the individuals who administer the arrangement and confirm that anyone acting on behalf of a customer has appropriate authority.

Relevant checks may include reviewing appointment documents, trust instruments, corporate authorisations, and identity documents.

The firm should also understand who can make decisions, authorise transactions, manage assets, or change important features of the arrangement.

This helps reduce the risk of unauthorised individuals using the trust to carry out transactions or conceal control.

3. Identify Beneficiaries and Protectors

Beneficiaries are the individuals or entities intended to receive benefits from a trust. A protector, where appointed, may have specific powers over the trustee or the arrangement.

Where required, corporate trustees should identify and verify the relevant beneficiaries, class of beneficiaries, protectors, and other persons exercising effective control.

If beneficiaries are defined by a class or by certain characteristics rather than named individually, the trustee should maintain sufficient information to establish their identities when required, including when a beneficiary becomes entitled to a payment or exercises relevant rights.

The exact checks depend on the trust structure and applicable requirements.

4. Establish Beneficial Ownership and Effective Control

A trust may have several layers of ownership or control, including companies, nominees, and other legal arrangements.

Corporate trustees should look beyond the immediate customer where necessary to understand the natural persons who ultimately own or control the relevant parties.

The review should consider:

Direct and indirect ownership interests.
Persons exercising control through voting rights or other arrangements.
Nominee shareholders or representatives.
Parent companies and intermediate entities.
Persons with effective decision-making authority.

For trusts, the relevant parties may include the settlor, trustees, protector, beneficiaries, and any other natural person exercising ultimate effective control. The approach should reflect the legal structure and current UAE requirements rather than relying solely on a single ownership percentage.

5. Understand the Purpose and Nature of the Trust

A trustee should understand why the arrangement has been established and how it is expected to operate.

Relevant questions may include:

What is the purpose of the trust?
What assets will it hold?
Who is expected to benefit?
Where are the relevant parties and assets located?
What types of transactions are expected?
Who is authorised to make decisions?
Are there cross-border relationships or complex ownership arrangements?

The answers should be consistent with the trust documents, the parties' stated circumstances, and the expected activities of the arrangement.

A complex structure is not automatically suspicious. However, unexplained complexity or information that does not fit the stated purpose may require further investigation.

6. Assess Source of Funds and Source of Wealth

Source of funds refers to where the money involved in a particular transaction or relationship originated. Source of wealth concerns how an individual or entity accumulated its overall wealth.

Corporate trustees should assess these matters where required by the applicable risk-based CDD framework.

Depending on the risk, relevant supporting evidence may include bank statements, financial statements, business sale agreements, inheritance documentation, investment records, or other reliable records.

Additional scrutiny may be appropriate when assets originate from multiple jurisdictions, ownership arrangements are unusually complex, or the financial profile does not appear consistent with the trust's stated purpose.

7. Apply Enhanced Due Diligence to Higher-Risk Arrangements

Enhanced Due Diligence (EDD) involves more intensive checks when a customer, trust, transaction, or relationship presents higher risks.

Potential risk indicators include:

Complex structures without a clear commercial or personal purpose.
Unexplained nominee arrangements.
Connections to high-risk jurisdictions.
Inconsistent information about beneficial ownership.
Unclear sources of funds or wealth.
Adverse information concerning relevant parties.
Unusual transactions that differ from the expected activity.

Depending on the applicable rules and risk assessment, enhanced measures may include obtaining further documents, checking reliable independent sources, conducting more frequent reviews, and seeking appropriate senior-management approval.

The decision to apply EDD should be documented, and concerns should be escalated in accordance with the firm's procedures.

8. Conduct Ongoing Monitoring

CDD does not end once the trust has been established. Information about the parties, the trust's assets, and its activities may change over time.

Corporate trustees should review the relationship periodically and when relevant events occur, such as changes in beneficiaries, trustees, protectors, ownership, control, jurisdictions, or the nature of the assets.

Where applicable, actual transactions should be compared with the expected activity established during onboarding.

If information becomes inconsistent or the risk profile changes, the trustee should reassess the relationship and update the CDD information as required.

9. Maintain Records and Escalate Suspicious Activity

Corporate trustees should maintain adequate records of the identification checks, trust documentation, risk assessments, decisions, and reviews required under the applicable rules.

Where the firm is subject to suspicious activity reporting obligations, concerns should be escalated through its established procedures. Required reports must be submitted through the appropriate reporting channel, which may include goAML for entities required to use that system.

Staff should also understand confidentiality and anti-tipping-off requirements. A client should not be improperly informed about a suspicious report or a related investigation.

Common CDD Challenges for Corporate Trustees

Corporate trustees may face several practical challenges when assessing complex arrangements.

Incomplete ownership information: Documents may identify an immediate company but fail to explain the natural persons who ultimately control it.

Unclear beneficiary information: A trust may define beneficiaries by class, requiring procedures to establish their identities when appropriate.

Cross-border documentation: Records from different jurisdictions may vary in format, availability, and reliability.

Unexplained changes: New trustees, beneficiaries, or assets may change the risk profile of an existing relationship.

Insufficient source-of-funds evidence: The available documents may not adequately explain how particular assets were acquired.

These issues should be handled through risk-based checks, reliable independent information, documented decisions, and appropriate escalation.

Practical CDD Checklist for Corporate Trustees

Before or during onboarding, as permitted by the applicable requirements, a corporate trustee can use this checklist to organise its review:

Confirm the customer's identity and legal status.
Obtain and review the trust instrument and relevant appointment documents.
Identify and verify the relevant settlor, trustees, protector, beneficiaries or class of beneficiaries, and other controlling persons, as required.
Understand the ownership and control structure.
Establish the purpose and intended nature of the trust.
Assess the source of funds and wealth where required.
Determine the customer's risk rating and whether EDD is necessary.
Record the expected activity and relevant risk indicators.
Schedule ongoing reviews and update information when circumstances change.
Escalate suspicious concerns and fulfil applicable reporting obligations.

This checklist is a practical starting point, not a substitute for the current UAE legal requirements or sector-specific supervisory guidance.

Frequently Asked Questions

What is CDD for corporate trustees in the UAE?

CDD is the process of identifying and verifying relevant parties, understanding the purpose of a trust, assessing risks, and maintaining appropriate oversight of the relationship.

Who should be identified when conducting CDD on a trust?

Depending on the legal arrangement and applicable requirements, relevant parties may include the settlor, trustees, protector, beneficiaries or class of beneficiaries, and any other natural person exercising ultimate effective control.

Do corporate trustees in the UAE need to apply Enhanced Due Diligence?

EDD should be applied when required by the applicable framework, including where a relationship or transaction presents higher risks. The measures should be proportionate to the risks identified.

Is CDD a one-time process?

No. Where AML obligations apply, relevant information should be reviewed and updated as required. Changes in ownership, control, beneficiaries, assets, or transaction patterns may require reassessment.

Must corporate trustees register with goAML?

Registration depends on the firm's regulated activities and applicable supervisory requirements. Corporate trustees should confirm whether they fall within the relevant DNFBP or other regulated category and follow the instructions of the competent authority.

Conclusion

Customer Due Diligence is a central part of effective AML compliance for corporate trustees operating within the UAE's regulated scope. Identifying the relevant parties, understanding ownership and control, assessing the purpose of the trust, reviewing source-of-funds information, and monitoring changes can help reduce the risk of legal arrangements being misused.

Corporate trustees should align their CDD procedures with the current UAE AML framework and the specific guidance applicable to their services.