Cross-Border Vendor KYC for UAE Operations: An Onboarding Checklist
Procurement teams used to European or US supplier onboarding routinely underestimate the UAE due-diligence ceiling. The Emirates have run an aggressive AML and counter-terrorist-financing programme since the 2022 FATF grey-list event; by late 2024 the UAE was removed from the grey list, but the operational tightening it produced remains. Onboarding a Dubai or Abu Dhabi supplier in 2026 requires more documentation than onboarding the same entity-type in Germany.
Mainland vs Free Zone — it matters
A UAE mainland company is licensed by the Department of Economy and Tourism of the relevant emirate (DET in Dubai, ADDED in Abu Dhabi). A free-zone company is licensed by one of 40+ free-zone authorities (DMCC, DIFC, ADGM, JAFZA, IFZA, etc.). Mainland companies can trade with the local market without restriction; free-zone companies traditionally cannot (the 'inside vs outside the wall' rule), although the 2021 reforms permitting 100% foreign ownership of mainland LLCs have blurred the line. For your KYC purposes: the licence type changes what documents exist.
The core document set
Sanctions screening — go beyond OFAC
Standard OFAC + UK HMT + EU consolidated list screening is necessary but not sufficient. The UAE maintains its own Local Terrorist List (administered by the Executive Office for Control & Non-Proliferation) which includes designations not always mirrored on Western lists, plus the UN Security Council Consolidated List which the UAE applies directly. Many compliance providers (Refinitiv, Dow Jones, ComplyAdvantage) include the UAE local list — verify yours does.
The UBO disclosure rules
Since 2020, every UAE entity must maintain a UBO register disclosing any individual owning >25% directly or indirectly, or otherwise exercising control. The register is filed with the licensing authority. As a counterparty, you can request the UBO declaration directly — refusal to provide it is a material warning sign in 2026.
Banking compatibility
Confirm the supplier holds an account with an Emirates-licensed bank (Emirates NBD, FAB, ADCB, Mashreq, ENBD, RAKBANK, etc.). UAE banks have reciprocal correspondent relationships that make SWIFT settlement clean. If a supplier asks to be paid into a third-country account (e.g. a Hong Kong or Cyprus account for a Dubai-licensed company), pause — that pattern is the single most common money-laundering typology flagged by UAE regulators.
Free-zone audit obligations
From 2024, most UAE free zones mandate annual audited financial statements filed within 6–9 months of FYE. As a buyer, request the most recent audited accounts during onboarding. A supplier unable to produce them is either late on filing (operational risk) or operating a 'paper' company (counterparty risk).
The 9% corporate tax regime — what counterparties should check
The UAE introduced a 9% federal corporate tax for accounting periods starting on or after 1 June 2023. Free-zone entities can still access a 0% rate on 'qualifying income' provided they meet substance requirements and stay below the de minimis threshold for non-qualifying revenue. Practical implication for your KYC pack: ask whether the supplier elects 'Qualifying Free Zone Person' status. If they do, request a copy of the latest CT registration confirmation. If they do not, expect VAT-inclusive pricing and standard 9% CT on profits.