Security Quotient
Blog/Your Business Could Be Used to Launder Money โ€” and You Might Not Even Know It
AML & Financial Crime

Your Business Could Be Used to Launder Money โ€” and You Might Not Even Know It

Trade-based money laundering is one of the biggest financial crime risks in the UAE right now. Here's what it actually means, how it works in real life, and why it matters to your business โ€” even if you've never heard of it before.

Featured Image
Indu Krishnaยทยท5 min read

Let's be honest. When most people hear the words "money laundering," they picture something from a movie โ€” a mobster, a briefcase of cash, a guy in a suit shredding documents. It doesn't feel like something that touches a regular business owner in Dubai or Abu Dhabi or Sharjah.

But there's a type of money laundering that doesn't involve any of that. No briefcases. No shady back rooms. It happens in plain sight, inside ordinary-looking trade deals, shipping containers, and invoices. And the UAE โ€” because of where it sits in the world and what it does economically โ€” is one of the most targeted places on the planet for it.

It's called Trade-Based Money Laundering. TBML for short. And if your business touches trade in any way โ€” importing, exporting, gold, electronics, construction materials, freight, finance, insurance, exchange houses โ€” this is something you genuinely need to understand in 2026 and beyond.

What Is Trade-Based Money Laundering (TBML)?

Think of money laundering as a problem criminals have: they've made a lot of money doing illegal things, but it looks suspicious sitting in a bank account. They need it to look clean โ€” like it came from a real business.

The oldest way to do that was cash. You run a restaurant, you mix dirty money in with the daily till, it comes out looking like food sales. But regulators got wise to that.

The second way was to move money through banks โ€” fake companies, offshore accounts, complicated transfers. Banks got much better at catching that too.

So criminals moved on to the third method: hiding dirty money inside real trade transactions. You ship a container of goods, you write fake numbers on the invoice, you overpay or underpay, and somewhere in that transaction, value gets moved from a criminal to a "clean" recipient โ€” disguised as a legitimate business deal.

That's TBML. The UAE Central Bank (CBUAE) published a formal guidance document on this in November 2025, and the country's Financial Intelligence Unit (UAEFIU) has called it one of the highest-risk money laundering methods in the UAE. This isn't theoretical. It's happening, and it's being tracked.

Why the UAE Specifically?

This is important to understand. The UAE isn't being targeted because of any weakness in its system โ€” it's being targeted because of its strengths.

Think about what makes the UAE a great place to do business:

It's a massive global trading hub. Jebel Ali is one of the biggest ports in the world. Goods flow in from Asia, Africa, and Europe, get re-exported, re-packaged, and sent everywhere else. That volume and movement is exactly what criminals need to hide in.

It has over 40 free zones. JAFZA, DMCC, DAFZA, and dozens more. These zones exist to make business easier โ€” lower taxes, faster customs, 100% foreign ownership. But the lighter documentation requirements in some zones also create gaps that can be exploited.

It's the world's second-largest physical gold trading hub. In 2024, the UAE's precious metals trade hit nearly AED 625 billion (about USD 170 billion) โ€” up 27% from the year before. Between 13% and 15% of all gold traded globally passes through Dubai every year. Gold is perfect for money laundering: high value, small volume, hard to verify where it came from.

Its banking and payment systems connect to the whole world. Every time an international trade payment passes through a UAE bank, there's an opportunity for someone to embed a hidden transaction within it.

None of this is the UAE's fault. It's the cost of being a world-class trade hub. But it does mean that businesses operating here โ€” and the banks, exchange houses, and financial institutions that serve them โ€” are in the crosshairs of global financial crime networks.

What Does This Actually Look Like?

Let's get concrete. Because TBML sounds abstract until you see it in action.

Scenario 1: The Gold Dealer

A gold refinery in Dubai buys gold from a supplier in West Africa. The gold is worth USD 2 million. But the invoice says USD 5 million. The refinery pays USD 5 million. The extra USD 3 million has just been "laundered" โ€” it left a bank account somewhere as dirty money, traveled through a fake trade transaction, and arrived at the gold dealer looking like payment for goods.

This is literally what happened to 32 gold refineries in the UAE. In July 2024, the Ministry of Economy suspended their licences for three months after inspectors found 256 AML violations across those businesses โ€” including failure to check where their gold was coming from, failure to report suspicious transactions, and failure to screen customers against terrorism watchlists. Those 32 refineries represented 5% of the country's gold sector. (Source)

Scenario 2: The Electronics Trader

A free zone company in Dubai imports 1,000 laptops from a manufacturer in China. The real price: USD 500 each. The invoice price: USD 200 each. The importer pays the lower amount, and the difference โ€” USD 300 per unit, USD 300,000 total โ€” is settled informally, moving value from the exporter to the importer's criminal contacts in another country. The bank only saw a payment for electronics. Nothing looked unusual.

Scenario 3: The Construction Materials Supplier

A company exports steel to a buyer in another country. The buyer and seller are actually connected โ€” they're running money through a fake trade relationship. Inflated invoices go back and forth over months, and each transaction moves a bit of illicit value across borders. The UAEFIU's own data showed that construction materials appeared in 10% of suspicious transaction reports (STRs) it analysed in 2022 and 2023. It's one of the most commonly misused sectors in the UAE.

Scenario 4: The Phantom Shipment

This one is almost too simple. A company sends a proper-looking set of trade documents โ€” invoice, bill of lading, certificate of origin โ€” to a bank, which processes the payment against those documents. But nothing was actually shipped. The goods don't exist. The entire transaction is fabricated. The UAE FIU found that phantom shipments were relevant in 61% of suspicious trade reports filed in 2022 and 2023. More than half. And the most common tool used? Fake documents โ€” forged, altered, or completely made up.

What Does the Government Want Businesses to Do?

In November 2025, the CBUAE released a formal guidance document specifically on TBML. It's the first time the Central Bank has published standalone guidance on this topic, and it applies to every licensed financial institution (LFI) in the country โ€” banks, exchange houses, finance companies, payment providers, hawala operators, insurance companies.

The guidance doesn't create new laws. But it does spell out clearly what the CBUAE expects to see, and what will be checked during regulatory inspections. LFIs were expected to comply within one month of its release.

Here's what it essentially says, in plain language:

Know your customer's trade, not just their identity. It's not enough to check a customer's passport and trade licence. If they're doing international trade, you need to understand what they're trading, who they're trading with, where it's going, and whether the prices make sense. A company that claims to sell used clothing but is receiving payments ten times above market rate for that type of goods should raise a flag.

Look at the documents, not just the money. Banks and financial institutions are expected to actually review trade documents โ€” invoices, shipping records, letters of credit โ€” and check whether the prices declared are in line with real market prices. They're not expected to inspect every shipment, but they are expected to apply "risk-based sampling." If a document looks off, it needs to be questioned.

Watch open account transactions closely. A lot of international trade today happens on open account โ€” meaning the goods ship directly, the documents go directly between buyer and seller, and the bank just processes the payment without seeing the underlying paperwork. The CBUAE guidance specifically flagged this as high risk, because the bank has almost no visibility into whether the trade is legitimate.

Report suspicious activity. If something looks wrong โ€” prices that don't make sense, third-party payments that don't match the contract, documents that seem altered, counterparties in high-risk jurisdictions โ€” that needs to be reported to the UAEFIU through the goAML system as a Suspicious Transaction Report (STR) or Suspicious Activity Report (SAR).

What Sectors Are Most at Risk?

The CBUAE guidance specifically calls out seven sectors where TBML is most commonly seen in the UAE context. If your business is in any of these, you're operating in a zone that regulators and financial institutions are watching especially closely:

Gold, precious metals, and gemstones. Already covered above โ€” the highest-risk sector in the UAE by far. If you operate in this space and aren't doing proper AML checks, what happened to those 32 refineries in 2024 could happen to you. (Reference)

Portable electronics. High value, small size, easy to ship, hard to price exactly. A favourite for invoice manipulation.

Car parts and vehicles. The UAE's re-export trade in vehicles is significant, and the sector has featured repeatedly in regional money laundering typologies.

Agricultural products and food. Commodity prices fluctuate naturally, which makes it easy to justify unusual invoice prices. That flexibility is exactly what criminals look for.

Second-hand and used clothing. High volume, difficult to price individually, easy to mis-describe.

Art and antiques. Valuations are subjective. A piece of "art" worth AED 5,000 can be invoiced at AED 500,000 with no one able to definitively say it's wrong.

Construction materials. Steel, cement, tiles, pipes โ€” bulk goods in large quantities. Hard to verify exact quantities. Widely misused, as the UAEFIU data shows.

How Does This Affect You?

Yes. This is the part that surprises most people.

You don't have to be a criminal to be involved in TBML. You can be a completely honest business and still be used as a vehicle for it โ€” without knowing.

A supplier you've been dealing with for years might be running inflated invoices past you. A buyer who always pays on time might be using your transaction to move dirty money out of a third country. A free zone company you've never met might be using your business name in their documentation chain.

This is why the UAE's approach isn't just about catching criminals. It's about making sure that every participant in the trade chain takes responsibility for understanding what they're involved in. Because if your business โ€” your name, your trade licence, your bank account โ€” ends up in a money laundering investigation, the fact that you didn't know is not automatically a defence.

Regulators will ask: did you do the checks you were supposed to do? Did you know your customer? Did you check the prices? Did you file a report when something seemed wrong?

If you didn't, that's a problem.

What's Actually Happening in the UAE Right Now

The enforcement picture has changed dramatically. This isn't a "guidelines on paper" situation anymore.

In the first half of 2025 alone, the CBUAE issued over AED 380 million in AML-related fines against financial institutions. Two exchange houses were fined AED 100 million in May 2025. Six more exchange houses were fined AED 12.3 million in June 2025. A UAE bank was hit with a AED 3 million sanction in July 2025 for AML and sanctions breaches.

In December 2024, Dubai Police disrupted a money laundering operation worth AED 461 million, arresting 25 individuals on charges including possession of illicit funds and document forgery.

The UAE confiscated AED 4.23 billion in its AML crackdown in 2025. Risk-based inspections increased by 54% year-on-year. Suspicious transaction reports are up 21%.

And the FATF โ€” the global body that put the UAE on its watchlist in 2022 and removed it in February 2024 โ€” is coming back for its next full evaluationย in June 2026. The UAE government, the CBUAE, the UAEFIU, and every regulatory body in the country knows this, and is in preparation mode. That means the scrutiny on businesses and financial institutions right now is at an all-time high.

What Should You Actually Do?

You don't need to become an AML expert overnight. But here are practical steps that apply to almost any UAE business involved in trade:

Understand your counterparties. Do basic checks on who you're buying from and selling to. Look them up. Understand their business. Ask where goods are coming from. If something feels vague or evasive, that's information.

Check that your prices make sense. If you're receiving goods at prices that seem too good to be true, or being asked to pay significantly above market, ask why. Keeping records of how you determined fair pricing is a good habit.

Read your trade documents before signing off. Don't just process invoices automatically. Especially in high-risk sectors like gold, electronics, or construction materials โ€” actually look at what's on the paper.

Know your compliance obligations. If you're a licensed financial institution under the CBUAE, the November 2025 TBML guidance is now your rulebook. If you're a Designated Non-Financial Business or Profession (DNFBP) โ€” accountants, lawyers, gold dealers, real estate agents โ€” you also have AML reporting obligations under UAE law.

Build a relationship with your compliance team or consultant. For smaller businesses, this might mean finding a qualified AML adviser. For larger ones, it means making sure your internal compliance function is genuinely resourced and empowered, not just a box-ticking exercise.

When in doubt, report. Filing an STR is not an accusation. It's a flag. The UAEFIU investigates. You're protected by law when you file in good faith. The risk of not filing when you should have is far higher than the risk of filing and being wrong.

The Bigger Picture

There's a reason the UAE has invested so heavily in cleaning up its financial system over the past few years. Being on the FATF grey list was a real problem โ€” not just reputationally, but practically. Banks got more cautious about the UAE. International transactions faced more friction. The image of Dubai as a business-friendly, trustworthy global hub was at stake.

The grey list exit in 2024 was a major achievement. But the work isn't done. The 2026 FATF evaluation is a test of whether the reforms are real and embedded โ€” not just whether the laws exist on paper.

Every business that takes its trade compliance seriously contributes to that. Every bank that actually looks at its customers' trade transactions. Every gold dealer that asks where the metal came from. Every freight forwarder that raises a flag when the paperwork doesn't add up.

TBML thrives in the gaps between institutions โ€” between the shipper and the bank, between the exporter and the importer, between one free zone and the next. The UAE is trying to close those gaps. The question for every business operating here is simple:

Are you part of closing them, or are you leaving them open?

Frequently Asked Questions

What is money laundering?โ–ผ

Money laundering is the process of making illegally obtained money โ€” from crime, corruption, or fraud โ€” look like it came from a legitimate source. The term comes from the idea of 'cleaning' dirty money so it can be spent or invested without raising suspicion.

What are the three stages of money laundering?โ–ผ

Placement: introducing dirty money into the financial system (e.g. depositing cash). Layering: obscuring the trail through complex transactions, transfers, or conversions. Integration: the now 'clean' money re-enters the legitimate economy โ€” used to buy property, businesses, or luxury goods.

What is AML compliance and who has to do it?โ–ผ

AML (Anti-Money Laundering) compliance means putting in place systems and controls to detect, prevent, and report money laundering. It's legally required for banks, financial institutions, law firms, estate agents, accountants, casinos, and increasingly fintech and crypto businesses โ€” depending on jurisdiction.

What are common red flags for money laundering that we should watch out for?โ–ผ

Key red flags include: large cash transactions with no clear business reason, customers reluctant to provide identification, complex transaction structures with no obvious purpose, transactions inconsistent with a customer's known business, sudden large transfers to or from high-risk countries, and rapid movement of funds in and out of accounts.

What is KYC and why is it so important for AML?โ–ผ

KYC (Know Your Customer) is the process of verifying who your customers are before doing business with them. It's the foundation of AML โ€” you can't detect suspicious activity if you don't know who you're dealing with. KYC includes checking identity, understanding the nature of the business relationship, and assessing risk.

Request a demo

Reduce human cyber and compliance risks with targeted training.
Get a guided walkthrough โ€” at a time that suits your timezone.

Request a demo โ†’