Natro Compliance, the AML division of Natro Consulting

Ready for your next AML inspection

We build and run the anti-money laundering frameworks UAE businesses are now inspected against: policies, risk assessments, customer due diligence, screening, reporting and, where permitted, an outsourced MLRO.

20 questions, about 5 minutes. Your score and priority gaps appear on screen, and your answers are seen only by our team.

If your business falls into these categories, AML compliance is mandatory

Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025 require financial institutions, virtual asset service providers and designated non-financial businesses and professions (DNFBPs) to register, assess their risks, know their customers, report suspicious activity and appoint an AML compliance officer or MLRO. Whether a specific obligation applies depends on your activity and your supervisor, and confirming that is the first thing we do.

Real estate agencies and brokers

Client property purchases and sales. In DIFC, the definition also expressly covers developers acting for or on behalf of customers.

Law firms and legal consultancies

Lawyers, notaries and independent legal businesses handling covered client transactions, funds, assets or corporate structures. ADGM and DIFC apply their own scope rules.

Accounting and audit firms

Independent accounting practices conducting covered client transactions. Accounting, audit and insolvency firms are expressly covered in DIFC.

Company and trust service providers

Business setup, company formation, registered-office provision, nominee or director arrangements, and trust services for clients.

Gold and precious stones businesses

Gold traders, jewellers and diamond dealers. Federal scope includes single or linked cash transactions of AED 55,000 or more.

Financial institutions

Banks, exchange and remittance firms, finance and payment providers, investment and asset managers, and covered life or investment-related insurance businesses.

Virtual asset service providers

Crypto exchanges, brokers, custodians and other businesses providing regulated virtual asset services for customers.

Commercial gaming operators

Casino, online gaming, sports betting and lottery operators. Federal threshold: single or linked financial transactions of AED 11,000 or more; chip-only transactions excluded.

Sources: Cabinet Resolution No. 134 of 2025, Articles 2–4 and 22; DFSA AML Module 3.2.1; ADGM DNFBP rules; UAE joint guidance on compliance officers and MLROs.

A framework built for daily operations

We connect regulatory requirements to the policies, records and daily controls your team actually uses, so the framework holds up in operations and in front of an inspector.

Build your framework

Policies, risk assessments and the records that prove your framework works.

AML policies and procedures
Covering money laundering, terrorist financing, proliferation financing and applicable targeted financial sanctions, tailored to how your business operates.
Business and enterprise risk assessment
Risks from customers, ownership structures, jurisdictions, products and delivery channels, turned into a risk-rating methodology, risk register and prioritised remediation plan.
Registration and reporting readiness
goAML and other relevant registrations, portal access, and a clear line of who identifies, reviews and submits each report.

Typical deliverablesAML manual, enterprise risk assessment, risk-rating methodology, risk register, escalation procedures, record-retention arrangements, remediation plan.

Know your customers

Onboarding and monitoring your team can apply consistently, with an audit trail behind every decision.

Customer and enhanced due diligence
Identification, verification and beneficial ownership review, with source-of-funds and source-of-wealth enquiries for higher-risk relationships.
Sanctions and PEP screening
Screening of customers, beneficial owners and connected parties, with alert review, escalation and documented resolution of potential matches.
Ongoing monitoring
Periodic reviews, event-driven updates and scrutiny of activity against each customer’s known profile.

Typical deliverablesKYC questionnaires, onboarding checklists, beneficial-ownership and PEP declarations, EDD forms, screening logs, periodic review schedules.

Stay inspection-ready

Ongoing oversight so your framework stays current as your business and the rules change.

Outsourced compliance support
Policy updates, onboarding support, risk monitoring, periodic reviews and management reporting on an agreed service calendar.
Inspections and regulatory requests
Inspection preparation, information requests, document collation, draft responses and remediation tracking, for scheduled reviews and urgent notices.
Training and awareness
Tailored sessions for staff, senior management and compliance personnel on due diligence, screening, red flags and internal reporting.

Typical deliverablesService calendar, management reports, inspection file, response drafts, remediation tracker, training records.

A named MLRO, where outsourcing is permitted

Through our specialist collaboration with HM Corporate Services, we can arrange a named Money Laundering Reporting Officer for your business, subject to suitability, availability and any required appointment, notification or approval.

Natro Consulting leads the relationship and service delivery. Your engagement letter names the responsible professionals, deliverables and reporting arrangements.

in collaboration with

Specialist compliance partner

Senior practitioners on every file

AML compliance is judged by the regulator, not by the client. We hold every engagement to the standard an inspector will apply, and work only with professionals and partners who meet it.

Senior-led from the first call

A senior compliance professional scopes, leads and signs off your engagement. Judgement calls on risk, escalation and reporting are never delegated to junior staff.

Partners chosen on credentials

We collaborate only with specialists of proven standing in UAE AML compliance. Any MLRO we propose is assessed for experience, suitability and availability before an appointment is put forward.

Written for the inspector

Every policy, risk assessment and record is drafted to be read by a supervisor: traceable decisions, documented approvals, no generic templates.

Accountable in writing

Each engagement specifies the responsible professionals, deliverables, review frequency, volumes, fees and any external costs before work begins.

A focused project or an ongoing programme

Choose the support your business needs now, and extend it as your obligations grow.

Establish the framework

Foundation project

Initial gap review, AML policies, business risk assessment, onboarding forms, registration support and implementation guidance.

A recurring programme

Ongoing compliance

Customer due diligence and screening support, periodic reviews, policy updates, management reporting and staff guidance.

A defined mandate

Focused assignment

Enhanced due diligence, inspection preparation, regulatory responses, remediation, training or a review of your existing framework.

Each proposal specifies deliverables, review frequency, client or transaction volumes, responsibilities, fees and any external costs.

From first call to ongoing support

  1. Understand

    We map your activities, jurisdiction, customers and current arrangements.

  2. Agree scope

    We confirm priorities, responsible professionals, deliverables and fees.

  3. Implement

    We prepare the documentation, support operations and brief your team.

  4. Review and maintain

    We track actions, report findings and update the framework as your needs change.

Common questions

Not sure whether the rules reach your business? The health check gives you an indicative answer in five minutes.

Start the free health check

Does the 2025 AML law apply to my business?

It applies to financial institutions, virtual asset service providers and designated non-financial businesses and professions, including real estate brokers, dealers in precious metals and stones, accountants, corporate service providers, certain legal businesses and gaming operators. Whether a specific obligation applies depends on your activity and your supervisor. The health check gives you a first indication; a consultation confirms it.

Do we need to appoint a compliance officer or MLRO?

In-scope businesses must appoint an AML compliance officer or MLRO with genuine authority and access to management. Where outsourcing is permitted, we can arrange a named MLRO through our collaboration with HM Corporate Services, subject to suitability, availability and any required appointment, notification or approval.

What is goAML, and do we need to register?

goAML is the reporting platform of the UAE Financial Intelligence Unit, used to file suspicious transaction and other required reports. Most businesses in scope must register and keep access ready. We handle the registration and set up who identifies, reviews and submits each report.

We have received an inspection notice. Can you help?

Yes. We prepare for scheduled inspections and urgent requests alike: collating documents, reviewing your framework against what inspectors typically raise, drafting responses and tracking remediation.

Do you work with DIFC and ADGM firms?

Yes. We assess the requirements that apply to your activities and jurisdiction, including mainland, ADGM and DIFC frameworks, which set their own AML rules. Work involving regulated or specialist activities is scoped separately to confirm the permissions required.

What happens after the health check?

You see your score, a breakdown against your obligations and the gaps to fix first, straight away. If you want, you can request a free consultation, and we come back with a proposed scope.

Free compliance health check

Know where you stand, before an inspector does

Natro Compliance is a division of Natro Consulting, Dubai, United Arab Emirates. Services are subject to a written engagement and applicable professional and regulatory requirements. Specialist compliance support, including outsourced MLRO arrangements, is provided in collaboration with HM Corporate Services, subject to suitability, availability and any required appointment, notification or approval. The health check gives an indicative view based on your own answers and is not a formal audit. Regulatory outcomes and approvals cannot be guaranteed.