eocn — executive office for control and non-proliferation

The Executive Office for Control and Non-Proliferation (EOCN) is the UAE federal entity responsible for coordinating the implementation of targeted financial sanctions related to counter-proliferation and counter-terrorism. Established to centralize the UAE’s sanctions compliance architecture, the EOCN plays a foundational role in the country’s financial crime prevention framework. Its mandate directly affects virtual asset service providers through sanctions screening requirements, compliance obligations, and reporting duties that apply regardless of which regulatory authority has licensed the VASP.

institutional mandate and legal basis

The EOCN operates under the authority of the UAE’s federal government with a mandate that spans the entire national financial system. The office coordinates implementation of United Nations Security Council sanctions resolutions, particularly those relating to counter-terrorism (Resolutions 1267, 1373, and successor resolutions) and counter-proliferation financing (Resolutions 1718 and 1737 series). The EOCN also administers domestically designated sanctions lists issued by the UAE Cabinet.

The legal foundation for the EOCN’s authority includes Federal Law No. 7 of 2014 on Combating Terrorism Offences, Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism and Financing of Illegal Organisations, and Cabinet Decision No. 74 of 2020 Regarding Terrorism Lists Regulation and Implementation of UN Security Council Resolutions on the Suppression and Combating of Terrorism. These instruments collectively establish the sanctions compliance obligations that all financial institutions and VASPs must meet.

organizational structure and operations

The EOCN serves as the UAE’s central coordinating body for targeted financial sanctions implementation. Its operational functions include maintaining and disseminating the UAE’s domestic sanctions lists, coordinating the implementation of UN Security Council sanctions resolutions across all federal and free zone jurisdictions, issuing guidance to reporting entities on sanctions screening requirements and procedures, receiving and processing applications for delisting and exemptions, and coordinating with international counterparts on sanctions-related intelligence sharing.

The EOCN works within the broader institutional architecture that includes the National Committee for Combating Money Laundering and the Financing of Terrorism and Illegal Organisations (NAMLCFTC), which provides the strategic policy framework. The EOCN’s operational role focuses on the practical implementation of sanctions measures across all sectors, including the virtual asset sector.

relevance to tokenization and virtual assets

All VASPs operating in the UAE, regardless of their regulatory jurisdiction, must implement sanctions screening programs that comply with the EOCN’s requirements. This obligation applies equally to entities licensed by VARA in Dubai, ADGM FSRA in Abu Dhabi, the DFSA in DIFC, and the SCA under the federal framework. The universal nature of sanctions obligations means that the EOCN’s requirements form a compliance baseline that no jurisdictional choice can avoid.

The specific sanctions compliance requirements for VASPs include screening all customers and counterparties against the UAE domestic sanctions lists maintained by the EOCN, screening against the UN Security Council consolidated sanctions list, screening against other applicable international sanctions as required by the licensing authority, implementing real-time or near-real-time transaction screening for all virtual asset transfers, maintaining records of all screening activity and results, and filing immediate reports when potential sanctions matches are identified.

The pseudonymous nature of blockchain transactions creates specific challenges for sanctions compliance that VASPs must address. Unlike traditional financial transactions where counterparty identity is typically established at the point of transaction, virtual asset transfers can involve wallet addresses with no immediately apparent connection to sanctioned individuals or entities. VASPs must therefore deploy blockchain analytics tools and enhanced screening protocols that go beyond traditional name-matching approaches. These tools analyze transaction patterns, wallet address clustering, and on-chain behavior to identify potential sanctions exposure that would not be apparent from name-based screening alone.

sanctions screening technology requirements

The EOCN’s requirements impose practical technology obligations on VASPs operating in the UAE. Effective sanctions compliance for virtual asset operations requires integration of commercial blockchain analytics platforms capable of identifying sanctioned wallet addresses and transaction patterns, automated screening of all customer onboarding data against applicable sanctions lists with fuzzy matching capabilities, transaction monitoring systems that can flag transfers involving wallet addresses associated with sanctioned entities or jurisdictions, and alert management workflows that ensure potential matches are investigated promptly and escalated appropriately.

The technology burden is proportionate to the VASP’s operational scale and risk profile. A custody-only operation may face different screening requirements than an exchange processing high volumes of peer-to-peer transfers. However, all VASPs must demonstrate that their screening capabilities are commensurate with their sanctions risk exposure.

coordination with other federal entities

The EOCN coordinates with the UAE FIU, the CBUAE, and other authorities to ensure that sanctions violations involving virtual assets are identified, investigated, and addressed. This coordination operates through several channels.

When a VASP identifies a potential sanctions match through its screening processes, it must file a report with the UAE FIU through the goAML system and simultaneously freeze any associated assets pending investigation. The EOCN receives intelligence from the FIU and other sources to assess whether the match represents a true sanctions violation. If confirmed, the EOCN coordinates with law enforcement authorities on enforcement action.

The EOCN also coordinates with supervisory authorities to assess the adequacy of VASPs’ sanctions compliance programs during regulatory examinations. Each licensing authority incorporates EOCN sanctions compliance standards into its supervisory framework. Deficiencies identified during supervisory assessments may result in enforcement action by the licensing authority, informed by the EOCN’s compliance standards.

role in fatf grey list remediation

The effectiveness of the sanctions compliance framework for VASPs was assessed as part of the FATF evaluation that led to the UAE’s placement on the grey list in March 2022 and subsequent removal in February 2024. The FATF’s Immediate Outcome 11 assessment specifically examines the effectiveness of targeted financial sanctions implementation for counter-terrorism and counter-proliferation financing.

During the grey list remediation period, the UAE significantly strengthened its sanctions implementation framework. The EOCN’s role in coordinating this remediation was central, including enhanced guidance to reporting entities, improved sanctions list dissemination mechanisms, and strengthened coordination with supervisory authorities on sanctions compliance assessment.

The successful remediation — resulting in the UAE’s removal from the grey list — validated the effectiveness of the EOCN-coordinated sanctions framework. However, ongoing FATF monitoring requires that this effectiveness be maintained and demonstrated on a continuing basis.

compliance obligations for multi-jurisdiction vasps

For VASPs operating across multiple UAE jurisdictions — for example, holding both a VARA license and an ADGM FSRA authorization — the EOCN’s sanctions requirements provide a consistent compliance baseline. While each licensing authority may impose additional sanctions-related requirements specific to its jurisdiction, the EOCN’s federal requirements apply universally and cannot be reduced through jurisdictional selection.

This consistency simplifies one aspect of multi-jurisdiction compliance. A VASP that builds its sanctions screening infrastructure to meet EOCN federal standards can be confident that the foundational requirements are met across all jurisdictions, though authority-specific overlay requirements must also be addressed.

The multi-authority compliance map dashboard shows how sanctions compliance obligations apply across all jurisdictions. The AML/CFT compliance implementation guide provides practical guidance on building sanctions compliance programs that meet federal standards.

enforcement and penalties

Non-compliance with EOCN sanctions requirements carries severe consequences for VASPs operating in the UAE. Penalties for sanctions violations can include substantial monetary fines imposed by the licensing authority, license suspension or revocation, criminal prosecution for willful sanctions evasion, and reputational damage that can affect banking relationships and business partnerships.

The severity of sanctions enforcement reflects the federal government’s commitment to maintaining the UAE’s international standing as a jurisdiction that effectively implements targeted financial sanctions. This commitment was reinforced during the FATF grey list period, when enhanced sanctions enforcement was a key remediation measure. VASPs must treat sanctions compliance as a fundamental business requirement rather than a peripheral compliance function.

The VARA enforcement actions brief documents how individual licensing authorities incorporate sanctions compliance assessment into their supervisory frameworks. The SCA violations database provides transparency on enforcement actions across onshore UAE.

practical compliance guidance

VASPs seeking to comply with EOCN requirements should implement the following operational framework. First, establish a sanctions compliance policy that references the specific legal instruments and EOCN guidance applicable to virtual asset operations. Second, deploy technology solutions capable of screening customers, counterparties, and transactions against all applicable sanctions lists with appropriate matching sensitivity. Third, establish clear escalation procedures for potential sanctions matches, including immediate asset freezing protocols. Fourth, train all relevant staff on sanctions compliance obligations and the specific challenges presented by virtual asset transactions. Fifth, conduct regular testing of screening systems to ensure continued effectiveness as sanctions lists are updated.

For deep analysis, see the AML/CFT federal requirements, the SCA entity profile, the FATF entity profile, the federal AML/CFT amendments brief, and the FATF grey list removal analysis.

international cooperation on sanctions enforcement

The EOCN participates in international sanctions implementation networks, coordinating with counterpart agencies in other jurisdictions on cross-border sanctions enforcement. This international cooperation is particularly important for virtual asset sanctions compliance because blockchain transactions are inherently cross-border — a sanctioned individual’s wallet address may interact with VASPs in multiple jurisdictions simultaneously. The EOCN’s international engagement ensures that UAE-identified sanctions intelligence is shared with partner jurisdictions and that internationally identified sanctions risks are incorporated into the UAE’s screening framework. This cooperation supports the UAE’s compliance with FATF standards on international cooperation and contributes to the global effectiveness of targeted financial sanctions against terrorism and proliferation financing.

Location: Abu Dhabi, United Arab Emirates