The UAE’s removal from the FATF grey list in February 2024 was a landmark achievement, but ongoing compliance monitoring continues. The follow-up assessment process requires the UAE to demonstrate sustained implementation and effectiveness of its AML/CFT framework including the virtual asset regulatory architecture across all five jurisdictions. This brief examines the ongoing compliance landscape and implications for VASPs.
the follow-up assessment framework
FATF conducts follow-up assessments of member jurisdictions on regular cycles. Following the 2020 mutual evaluation and grey list period, the UAE is subject to enhanced monitoring. This means the FATF periodically reviews UAE progress in maintaining AML/CFT framework effectiveness. For virtual assets, effectiveness assessment examines whether VASPs are conducting adequate customer due diligence, whether suspicious transactions are being reported and investigated, and whether enforcement actions target non-compliant entities.
The FATF website provides the chronology of assessments including the 2020 mutual evaluation, January 2022 and July 2023 progress reports, and February 2024 removal. The FATF grey list removal impact analysis examines the remediation measures in detail.
virtual asset compliance indicators
The FATF assessment focuses on specific virtual asset indicators. Licensing coverage evaluates whether all VASPs operating in the UAE are licensed by an appropriate authority. The SCA’s national VASP register under Cabinet Decision No. 111 demonstrates comprehensive coverage. Supervisory effectiveness examines whether SCA, CBUAE, VARA, ADGM FSRA, and DFSA conduct effective supervision of VASPs’ AML/CFT compliance, including frequency of assessments and quality of findings.
Enforcement assessment evaluates whether authorities take action against non-compliant VASPs. The VARA enforcement brief and SCA violations database provide enforcement evidence. International cooperation evaluates cross-border information sharing effectiveness.
authority-level compliance
Each UAE authority faces specific monitoring requirements. The SCA must demonstrate effective coordination under Cabinet Decision No. 111, including national VASP register maintenance. The SCA reported record growth in January 2026. The CBUAE must demonstrate effective AML/CFT supervision of banks serving VASPs and payment token operators through its dedicated AML/CFT department (established August 2020).
VARA must demonstrate licensed VASPs implement effective AML/CFT programs with measurable compliance improvements through supervision and enforcement. ADGM FSRA launched the NAFIS compliance programme in March 2026 to build compliance capacity. The DFSA must demonstrate effective supervision of crypto token activities within DIFC.
risk areas requiring continued attention
Travel Rule implementation across all jurisdictions must be operationally effective. Beneficial ownership transparency must be maintained under the federal framework. Cross-border supervisory cooperation must continue improving. The EOCN sanctions compliance framework must be effectively implemented by all VASPs.
implications for vasps
Ongoing FATF monitoring creates a sustained compliance imperative. AML/CFT programs must be continuously improved. Supervisory assessments examine operational effectiveness beyond policy documentation. Enforcement risk remains elevated for non-compliant firms. The positive aspect is that FATF compliance validates the regulatory framework and enhances international credibility of UAE-licensed VASPs.
cross-border cooperation assessment
FATF monitoring examines the UAE’s effectiveness in cross-border cooperation on virtual asset-related financial intelligence. This assessment evaluates the speed and quality of responses to international information requests from counterpart FIUs and regulatory authorities, proactive intelligence sharing through the Egmont Group network, bilateral cooperation agreements with key partner jurisdictions, and cooperation with international law enforcement on virtual asset-related investigations.
The UAE FIU’s Egmont Group membership provides the institutional framework for secure international information exchange with over 170 jurisdictions. The effectiveness of this exchange — measured by response times, information quality, and operational outcomes — is a key assessment indicator.
legal and institutional framework assessment
Beyond operational effectiveness, FATF monitoring examines the continued adequacy of the legal and institutional framework. This includes assessing whether the legal framework addresses emerging virtual asset risks including DeFi, NFTs, and cross-chain operations, whether institutional capacity has kept pace with market growth — as the number of licensed VASPs increases, supervisory resources must scale accordingly, whether the coordination mechanisms between the five regulatory authorities remain effective as the market matures, and whether the national VASP register maintained by the SCA provides comprehensive coverage of all licensed entities.
The SCA’s development of implementing regulations under Cabinet Decision No. 111 addresses several of these institutional framework requirements. The SCA implementing regulations brief tracks this development.
technology-enabled supervision
FATF assessment increasingly examines whether supervisory authorities use technology-enabled supervision tools to enhance oversight effectiveness. For the virtual asset sector, this includes blockchain analytics capabilities that enable supervisory authorities to monitor on-chain activity by supervised entities, automated regulatory reporting systems that reduce manual reporting burden while improving data quality and timeliness, risk scoring models that prioritize supervisory resources toward higher-risk entities, and supervisory technology platforms that enable efficient management of growing supervised populations.
The SCA’s December 2025 announcement about developing an innovative risk-assessment methodology signals investment in technology-enabled supervision that will support future FATF assessments.
industry compliance maturity indicators
FATF assessment considers industry-level compliance maturity indicators that demonstrate the effectiveness of the regulatory framework beyond individual entity compliance. These indicators include the quality and timeliness of STR filings from VASPs — demonstrating that transaction monitoring systems are detecting and escalating suspicious activity effectively, the coverage and accuracy of Travel Rule implementation across the licensed VASP population, the responsiveness of VASPs to supervisory findings and the speed of remediation when deficiencies are identified, and the degree to which compliance culture is embedded in VASPs’ operational practices rather than existing only in policy documentation.
forward outlook
The next FATF mutual evaluation will assess the framework against potentially updated standards including revised virtual asset guidance. The UAE must continue investing in regulatory capacity, supervisory technology, and enforcement capability. The convergence of regulatory frameworks globally means that the assessment bar will likely rise — the standards that achieved grey list removal in 2024 may represent the minimum rather than the target for future assessments.
The UAE’s strategic response to ongoing monitoring includes continued framework development through SCA implementing regulations, sustained enforcement activity demonstrating supervisory effectiveness, institutional capacity building through programmes like ADGM’s NAFIS initiative, and international engagement through IOSCO, MENAFATF, and bilateral cooperation channels.
For the latest developments, monitor the regulatory framework tracker dashboard, the AML/CFT federal requirements analysis, and the multi-authority compliance map.
vasp-specific supervisory effectiveness indicators
FATF monitoring examines specific indicators of supervisory effectiveness in the virtual asset sector. Supervisory coverage assesses whether all licensed VASPs receive regular supervisory attention, with frequency proportionate to their risk profile. Examination quality evaluates whether supervisory assessments go beyond documentation review to test operational controls through transaction sampling, system demonstrations, and staff interviews. Remediation tracking assesses whether supervisory findings are followed up and whether deficiencies identified in previous examinations are remediated within specified timeframes.
The VARA enforcement actions brief demonstrates how supervisory assessments translate into enforcement outcomes. The ADGM DLT foundations brief tracks supervisory capacity development. The DFSA recognized token expansion brief examines the DFSA’s supervisory approach within its narrower scope.
beneficial ownership transparency
FATF Recommendations 24 and 25 require transparent beneficial ownership of legal entities and legal arrangements. For the virtual asset sector, beneficial ownership transparency is particularly important because the corporate structures of VASPs may involve complex multi-jurisdictional arrangements that obscure ultimate ownership. The UAE’s implementing regulations under Cabinet Decision No. 111 and each authority’s licensing requirements include beneficial ownership disclosure standards that must demonstrate operational effectiveness during FATF monitoring.
The SCA’s national VASP register contributes to beneficial ownership transparency by maintaining centralized records of licensed entities across all jurisdictions. The SCA maintains registered company databases that contribute to the federal beneficial ownership information framework.
For official FATF documentation, visit fatf-gafi.org. For UAE financial intelligence, see the UAE FIU profile.