What Happens If You Cannot Verify a Customer’s Beneficial Owner (UBO) in the UAE?
Verifying who ultimately owns or controls a customer is a fundamental part of UAE anti-money laundering compliance. If a business cannot complete UBO verification UAE AML checks, it should not simply proceed with the customer relationship and treat the missing information as an administrative issue.
Under the UAE's current AML framework, financial institutions, Designated Non-Financial Businesses and Professions (DNFBPs), and Virtual Asset Service Providers must identify the beneficial owner and take reasonable measures to verify that person's identity using reliable and independent information.
Quick Answer
If a UAE-regulated business cannot adequately identify and verify a customer's beneficial owner, it generally must not establish or continue the business relationship or execute the transaction. It must also consider whether the circumstances require a Suspicious Transaction Report (STR).
Cabinet Resolution No. 134 of 2025 specifically prohibits covered entities from establishing or continuing a business relationship or carrying out a transaction when required Customer Due Diligence measures cannot be completed.
This makes UBO verification an important compliance control rather than a simple documentation formality.
What Is a Beneficial Owner or UBO?
A beneficial owner, commonly called a UBO or Ultimate Beneficial Owner, is the natural person who ultimately owns or exercises effective control over a customer.
The UAE's current AML Executive Regulations also include a natural person on whose behalf a transaction is conducted and anyone who ultimately exercises effective control over a legal person or legal arrangement, whether directly, indirectly, or through a chain of ownership or control.
Therefore, simply identifying the company shown on a trade licence is not always enough.
Businesses may need to look through:
- Shareholding structures
- Parent companies
- Holding companies
- Nominee arrangements
- Trusts or similar structures
- Indirect ownership
- Voting rights
- Other forms of actual control
The objective is to understand which natural person ultimately owns or controls the customer.
What Does UBO Verification UAE AML Require?
Under Cabinet Resolution No. 134 of 2025, relevant businesses must identify the beneficial owner and use reasonable measures to verify that person's identity using documents, data, or information from reliable and independent sources.
For a legal-person customer, the rules first look at the natural person who ultimately owns, individually or jointly, a controlling ownership interest of 25% or more.
If that does not clearly identify the actual beneficial owner, businesses must examine who exercises legal or actual control through other direct or indirect means.
This means AML compliance teams should not rely only on a customer saying:
“This person owns the company.”
The ownership claim should be supported by appropriate evidence.
What Documents Can Be Used to Verify a UBO?
The exact documents required depend on the customer's legal structure and risk profile.
Common information used during beneficial-owner verification may include:
- Trade licence
- Certificate of incorporation
- Memorandum or articles of association
- Shareholder register
- Corporate structure chart
- Passport or Emirates ID of the beneficial owner
- Official corporate registry records
- Partnership agreements
- Documents showing voting or control rights
- Trust or legal-arrangement documents where applicable
The compliance team should also assess whether the documents are current, consistent and credible.
A complex ownership structure should not automatically be considered suspicious, but unexplained complexity may justify additional investigation.
What Should You Do If You Cannot Identify the UBO?
The first step should be to determine why beneficial-owner information cannot be established.
For example, is the customer simply missing a document?
Or is the ownership structure intentionally difficult to understand?
The distinction matters.
1. Request additional information
Ask the customer for missing corporate and ownership documents.
The request should clearly explain what information is needed rather than repeatedly asking for generic "KYC documents."
2. Trace the ownership structure
Where multiple companies are involved, trace ownership through each layer until the relevant natural person or persons can be identified.
Do not stop at another corporate shareholder.
3. Verify information independently
Where appropriate, compare customer-supplied information with reliable corporate registers, official documents, public databases and other credible independent sources.
4. Investigate inconsistencies
Suppose a shareholder register identifies one owner but another document shows a different ownership percentage.
That discrepancy should be resolved before completing UBO verification.
5. Apply a risk-based approach
Complex ownership, high-risk jurisdictions, unexplained nominees or inconsistent information may require Enhanced Due Diligence (EDD).
Current UAE AML regulations specifically contemplate obtaining and verifying additional beneficial-owner information, understanding source of funds and wealth, increasing ongoing monitoring and obtaining senior-management approval for higher-risk relationships.
Can You Onboard a Customer Before UBO Verification Is Complete?
In most cases, identity verification should take place before or during the establishment of the business relationship.
The 2025 Executive Regulations permit delayed verification in certain low-risk circumstances, provided specific conditions are met and appropriate controls are applied. Verification must then be completed as soon as reasonably possible.
Businesses should therefore avoid treating delayed verification as a standard onboarding method.
If the UBO cannot ultimately be verified and Customer Due Diligence cannot be completed, Article 14 of Cabinet Resolution No. 134 of 2025 states that the covered entity must not establish or continue the business relationship or execute the transaction.
Does Failure to Verify the UBO Mean You Must File an STR?
Not automatically.
Missing documents alone do not necessarily mean that money laundering or another financial crime is occurring.
However, failure to identify a beneficial owner can become a serious red flag when combined with suspicious circumstances.
Examples might include a customer who:
- Repeatedly refuses to identify the actual owner
- Provides contradictory ownership documents
- Uses unexplained nominee shareholders
- Changes ownership details during onboarding
- Uses an unusually complex corporate structure without a clear business reason
- Cannot explain who ultimately controls the company
- Provides documents that appear altered or unreliable
Where there is suspicion or reasonable grounds for suspicion, UAE AML law requires relevant regulated entities to report suspicious transactions or activities to the Financial Intelligence Unit through the approved reporting mechanism.
Article 14 of the current Executive Regulations also states that where CDD cannot be completed, the business should consider submitting an STR whenever necessary.
Do Not Tell the Customer About an STR
Businesses must also remember the UAE's tipping-off prohibition.
If an STR has been filed or is being considered because of suspicious circumstances, employees must not disclose to the customer that the report has been submitted or that an investigation is underway.
The current UAE Executive Regulations prohibit financial institutions, DNFBPs and Virtual Asset Service Providers, as well as their employees and officers, from disclosing such information to the customer or another person.
Staff should therefore follow internal escalation procedures and involve the MLRO or Compliance Officer.
UBO Register vs AML UBO Verification: Are They the Same?
No.
A company may have obligations to maintain beneficial-owner information under UAE corporate transparency rules, while a DNFBP or other regulated business has separate obligations to identify and verify the beneficial owner of its customer as part of AML Customer Due Diligence.
Cabinet Decision No. 109 of 2023 requires legal persons covered by the decision to maintain adequate, accurate and updated beneficial-owner information and update relevant changes.
However, seeing a name in a UBO register does not necessarily remove the AML-regulated business's duty to conduct its own risk-based verification.
The two requirements are related but should not be treated as identical compliance exercises.
Why Is UBO Verification Important for UAE DNFBPs?
Beneficial-owner checks help prevent criminals from hiding behind companies, nominees or complicated ownership chains.
They are particularly important for businesses such as:
- Real estate brokers and agents
- Dealers in precious metals and stones
- Auditors and accountants
- Corporate service providers
- Certain legal professionals
For these businesses, knowing the legal entity's name is only one part of Customer Due Diligence.
Understanding who ultimately controls the customer helps the business assess risk, detect suspicious activity and maintain defensible AML records.
FAQs About UBO Verification UAE AML
What happens if a customer refuses to provide UBO information?
If required Customer Due Diligence cannot be completed, the business should not establish or continue the relationship or execute the transaction. It should also assess whether an STR is appropriate.
Is 25% ownership automatically considered beneficial ownership?
The UAE AML Executive Regulations use ownership of 25% or more as an important starting point for identifying the natural person with controlling ownership. However, control can also exist through other direct or indirect means.
Can a company be the UBO?
Ultimately, AML beneficial-owner identification seeks to determine the relevant natural person, not merely another corporate entity.
Should complex ownership structures receive Enhanced Due Diligence?
Complex ownership may increase risk depending on the circumstances. Where higher risk is identified, additional verification, source-of-funds or source-of-wealth checks and enhanced monitoring may be appropriate.
Must every failed UBO verification be reported through goAML?
No. An inability to verify ownership does not automatically mean an STR must be filed. The circumstances should be assessed for suspicion, and an STR should be considered when necessary.
Final Thoughts
UBO verification UAE AML is a critical part of effective Customer Due Diligence.
UAE businesses should identify the natural person who ultimately owns or controls a customer, verify that information using reliable and independent sources and investigate unexplained inconsistencies.
If verification cannot be completed, the correct response is not to simply ignore the missing information.
The business may need to stop onboarding, decline or terminate the relationship, avoid executing the transaction, document its decision and assess whether the circumstances warrant suspicious-activity reporting.
A clear UBO verification procedure helps UAE businesses strengthen AML compliance while reducing the risk of being used to hide the true ownership of funds, companies or transactions.
This article provides general compliance information and should not be treated as legal advice. Businesses should refer to the current UAE legislation, their supervisory authority's guidance and professional advice for specific cases.