table of contents
- chronology of fatf engagement
- grey list placement (march 2022)
- remediation measures
- removal (february 2024)
- impact on virtual asset regulation
- impact on vasp licensing and operations
- ongoing compliance monitoring
- authority-specific impacts
- international positioning effects
- lessons for the tokenization ecosystem
chronology of fatf engagement
The UAE’s engagement with the Financial Action Task Force spans multiple assessment cycles. The 2020 mutual evaluation — a joint FATF-MENAFATF assessment — found that the UAE had “recently strengthened its legal framework to fight money laundering and terrorist financing” but that, as a major global financial centre and trading hub, it needed to “take urgent action to effectively stop the criminal financial flows that it attracts.”
The 2020 evaluation assessed the UAE against the FATF’s 40 Recommendations and the 11 Immediate Outcomes that measure the effectiveness of AML/CFT implementation. The UAE achieved ratings ranging from “largely compliant” to “partially compliant” on the technical compliance assessment, with effectiveness ratings that identified significant room for improvement in areas including risk assessment, international cooperation, supervision of financial institutions, and prosecution of money laundering.
The FATF entity profile provides background on the FATF’s role and methodology. The UAE FIU and EOCN profiles cover the UAE institutions central to the remediation effort.
grey list placement (march 2022)
In March 2022, the FATF placed the UAE on its “grey list” — formally the list of “Jurisdictions under Increased Monitoring.” This designation indicated that the FATF had identified strategic deficiencies in the UAE’s AML/CFT regime that required enhanced monitoring and remediation.
The grey list placement coincided with a period of rapid development in UAE virtual asset regulation. VARA was established in the same month under Law No. 4 of 2022, ADGM FSRA was expanding its digital asset framework, and the DFSA had recently introduced its Crypto Token regime. The grey list placement added urgency to the development of comprehensive AML/CFT requirements for virtual asset activities across all UAE jurisdictions.
The grey list designation carried significant practical consequences including enhanced due diligence requirements for international financial institutions transacting with UAE entities, reputational impacts on the UAE’s positioning as a global financial centre, and increased compliance costs for UAE firms operating internationally.
remediation measures
The UAE undertook comprehensive remediation measures to address the FATF’s identified deficiencies. For the virtual asset sector specifically, remediation included implementing Cabinet Decision No. 111 of 2022 establishing the federal VASP regulatory framework, ensuring that all VASPs across all UAE jurisdictions are subject to comprehensive AML/CFT requirements including customer due diligence, ongoing monitoring, suspicious transaction reporting, and Travel Rule implementation. Enhanced supervisory capacity at the SCA, CBUAE, VARA, ADGM FSRA, and DFSA was developed for AML/CFT compliance monitoring of VASPs.
The FATF’s July 2023 progress report noted “the United Arab Emirates’ progress in strengthening measures to tackle money laundering and terrorist financing,” acknowledging substantive improvements in the AML/CFT framework.
removal (february 2024)
In February 2024, the FATF removed the UAE from the grey list, finding that the UAE had addressed the identified strategic deficiencies. The removal applied alongside Barbados and Gibraltar, while the Cayman Islands, Jordan, and Panama had been removed in an earlier round (October 2023).
The removal was a landmark event for the UAE financial sector and specifically for the virtual asset ecosystem. It validated the UAE’s multi-authority approach to virtual asset regulation and confirmed that the federal coordination framework was effective in ensuring comprehensive AML/CFT coverage across all jurisdictions.
impact on virtual asset regulation
The grey list experience has had lasting effects on UAE virtual asset regulation. First, AML/CFT requirements for VASPs across all UAE jurisdictions exceed the minimum international standards, reflecting the UAE’s determination to avoid future FATF designation. Second, the federal coordination framework established during the remediation period — particularly the SCA’s role in maintaining a national VASP register — has become a permanent feature of the regulatory architecture. Third, regulatory authorities have invested in enhanced supervisory technology and institutional capacity for AML/CFT compliance monitoring.
The AML/CFT federal requirements analysis provides the detailed framework examination.
impact on vasp licensing and operations
For VASPs operating in the UAE, the post-grey-list regulatory environment is characterized by rigorous AML/CFT compliance expectations across all jurisdictions, enhanced supervisory scrutiny including regular AML/CFT assessments, strict Travel Rule implementation requirements, and comprehensive beneficial ownership transparency obligations.
These requirements represent both a compliance burden and a competitive advantage. VASPs licensed in the UAE can demonstrate to international counterparties and clients that they operate under an AML/CFT framework that has been validated by the FATF — a credential that not all jurisdictions can claim.
ongoing compliance monitoring
The UAE’s removal from the grey list does not mean the end of FATF scrutiny. The FATF conducts regular follow-up assessments of member jurisdictions, and the UAE will be subject to a future mutual evaluation that will assess the continued effectiveness of its AML/CFT framework.
Ongoing compliance monitoring creates a continuous improvement imperative for UAE virtual asset regulation. Regulatory authorities must demonstrate not only that AML/CFT frameworks exist on paper but that they are implemented effectively — that VASPs are actually conducting adequate due diligence, that suspicious transactions are being reported and investigated, and that enforcement actions are being taken against non-compliant entities.
authority-specific impacts
Each UAE authority has been affected by the FATF experience differently. The SCA has enhanced its role as the federal coordination point for VASP AML/CFT oversight. The CBUAE has expanded its dedicated AML/CFT department (established August 2020) and increased supervisory engagement with banks providing services to VASPs. VARA has implemented some of the most detailed AML/CFT requirements in its activity-specific rulebooks. ADGM FSRA has strengthened its AML/CFT framework and launched the NAFIS compliance programme (March 2026) to build Emirati financial compliance skillsets. The DFSA has enhanced its AML/CFT supervision of crypto token activities within DIFC.
international positioning effects
The grey list removal has improved the UAE’s international positioning for the virtual asset sector. International institutional investors, global crypto firms, and traditional financial institutions view the UAE’s FATF-validated AML/CFT framework as a risk-reducing factor in their jurisdictional decisions.
The UAE vs EU MiCA comparison, UAE vs Hong Kong comparison, and UAE vs Bahrain comparison examine how the FATF validation affects the UAE’s competitive positioning.
lessons for the tokenization ecosystem
The FATF grey list experience provides several lessons for the UAE tokenization ecosystem. First, AML/CFT compliance is non-negotiable — it is the foundation upon which all other regulatory positioning depends. Second, the federal coordination framework is critical for ensuring consistent compliance across multiple jurisdictions. Third, regulatory investment in supervisory technology and institutional capacity pays dividends in international credibility.
For the latest FATF compliance developments, see the FATF compliance brief and the regulatory framework tracker dashboard.
For official FATF documentation, visit fatf-gafi.org. The UAE is a member of MENAFATF.