Where sanctions due diligence for a deal touching the UAE stands now

A cross-border deal touching the United Arab Emirates sits at one of the more consequential junctions in international commerce today. The UAE has, over the past several years, moved from a jurisdiction widely treated as a soft-compliance zone to one where the banking infrastructure actively interrogates source of funds, beneficial ownership, and counterparty provenance before allowing a transaction to clear. That shift has direct consequences for any deal crossing through Hong Kong – whether Hong Kong is the acquirer's home, the holding structure's seat, or simply the currency-clearing point for a transaction whose assets lie in the Gulf.

Sanctions due diligence for a deal touching the UAE requires a concurrent read of two distinct regulatory regimes: the UAE's own anti-money laundering and sanctions framework (anchored in its national AML legislation and the Executive Office for Control and Non-Proliferation) and Hong Kong's regime under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (which implements United Nations sanctions and governs financial institutions and designated non-financial businesses operating in Hong Kong). Where a deal engages both systems, the more demanding requirement at each checkpoint governs.

This analysis maps where the risk sits now, how the two regimes interact, and what the compliance posture for a cross-border Hong Kong–UAE deal should look like in practice.

What is commercially at stake?

The UAE is a capital-transit jurisdiction. Money enters, is deployed, and exits across a corridor that touches Asia, Europe, the Levant, and Africa simultaneously. For a Hong Kong-seated group acquiring a UAE-situated asset – or partnering with a UAE counterparty for a Greater China investment – the commercial upside is visible: access to capital, market reach, and a structurally tax-efficient base.

The risk, however, is less often priced. It sits not in the transaction documents but in the payment channel. A deal may be legally clean on its face and still trip a correspondent bank's screening when the wire moves from a Hong Kong account through a US-dollar clearing centre and into a UAE recipient account. That screen does not distinguish between the principal's intentions and the counterparty's ownership profile. It looks at names, addresses, jurisdictions, and beneficial-ownership chains – and it blocks or delays without warning.

In our cross-border practice, we see this failure mode regularly. A mid-market group closes a deal in the third quarter; the acquisition consideration sits delayed in a correspondent bank's exception queue for weeks because the UAE-side entity was not adequately diligenced before the wire was instructed. The cost is not a fine. The cost is lost time, lost trust, and a counterparty who questions whether the deal is real.

That is the commercial stake. The legal exposure – regulatory sanction, debanking, or reputational harm – sits behind it and compounds it. The question for any deal touching the UAE is whether the diligence conducted before signing is strong enough to clear the channel as well as the contract.

How does the governing framework engage at the cross-border interface?

Two instruments set the perimeter for most cross-border Hong Kong–UAE deals. Neither operates in isolation.

In Hong Kong, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance imposes a mandatory due-diligence regime on financial institutions and, for certain transaction types, on designated non-financial businesses and professions. The obligation is not simply to screen against a list. The Ordinance requires institutions to understand the nature and purpose of the business relationship, the source of funds, and the beneficial ownership of the counterparty. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. That is a precise position, and it matters: a Hong Kong-based institution is not legally required to apply US or EU secondary-sanctions programmes. But the practical reality of correspondent banking means that a Hong Kong institution whose USD clearing bank applies those programmes will, in effect, be required to satisfy them anyway.

In the UAE, the framework has undergone substantial revision since the Financial Action Task Force placed the country on its enhanced monitoring list (commonly called the "grey list") in 2022 and removed it in 2024. The removal followed documented legislative, institutional, and supervisory reforms. The Central Bank of the UAE and the Financial Intelligence Unit now operate with materially greater supervisory intensity than was the case five years ago. Beneficial-ownership registers, ultimate beneficial owner (UBO) disclosure obligations, and real-property transaction reporting have all been tightened.

The cross-border interface bites at the payment channel and at the know-your-customer file simultaneously. A deal structured out of Hong Kong with a UAE-situated target must satisfy both sets of institutional gatekeepers: the Hong Kong correspondent bank running the initial screen, and the UAE bank receiving the consideration and potentially required to report any unusual transaction. Where those two screens ask different questions about the same beneficial-ownership chain, the chain has to be capable of answering both.

This is where we see foreign principals make their most consequential error. They retain counsel in one jurisdiction, satisfy that jurisdiction's requirements, and assume the other will follow. It rarely does. A beneficial-ownership disclosure adequate for a Hong Kong financial institution may not satisfy the UAE's UBO register requirements, or vice versa. The gap is not large in most clean deals – but in any deal with a multi-layered holding structure, a corporate trustee, or a principal in a third jurisdiction, the gap can be significant.

For a practical read on how our sanctions and AML practice handles cross-border diligence files of this kind, see our Sanctions & AML practice overview.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost.

For a preliminary read on your deal's sanctions and AML exposure across the Hong Kong–UAE corridor, email info@lockhartyip.com.

What does the comparative read across the two systems show?

Hong Kong and the UAE share a territorial approach to taxation and a commitment to the United Nations sanctions architecture. Both are significant financial centres with common-law influences in their commercial courts (the UAE's international financial centre courts in the DIFC – the Dubai International Financial Centre – and the ADGM – Abu Dhabi Global Market – operate on common-law principles). The convergence on the United Nations framework reduces the risk of direct regime conflict on sanctions screening. But the two systems diverge sharply on three points that matter for deal diligence.

First, the treatment of beneficial-ownership disclosure differs in depth and enforceability. Hong Kong requires financial institutions to maintain a know-your-customer file as a condition of business, backed by regulatory sanction. The UAE's UBO register regime – now materially enhanced post-grey-list – requires corporate entities to file UBO declarations, and the federal authorities can compel disclosure. The practical difference is that the UAE disclosure runs through a registry, whereas the Hong Kong disclosure runs through the financial institution's compliance function. A deal that moves capital in both directions must satisfy both channels, and neither will accept the other's documentation as a substitute.

Second, the treatment of politically exposed persons (PEPs – individuals who hold or have held prominent public positions, or are closely associated with those who do) diverges in practice. Both jurisdictions require enhanced due diligence for PEPs. But the definition of prominence, the source-of-wealth documentation expected, and the approval thresholds within a financial institution's own compliance structure differ between a Hong Kong correspondent bank and a UAE receiving institution. A principal who is a PEP in a third jurisdiction – a common scenario where a CIS, Middle Eastern, or African family office is investing into a UAE asset from a Hong Kong holding structure – will find that the two institutions ask different questions and expect different answers.

Third, the sanctions posture diverges in a way that creates a structurally important planning point. Hong Kong implements United Nations sanctions and not unilateral programmes of other states. The UAE's position is more complex: it is a party to United Nations instruments and, as a major trade and financial hub, its institutions have substantial correspondent-banking exposure to US and EU financial systems. That exposure means UAE banks, in practice, screen against US OFAC and EU sanctions lists regardless of any formal domestic obligation. The result is that a deal moving through a UAE-situated bank will, in practice, be screened against a sanctions universe wider than the UN list – even if the Hong Kong side of the structure has no such formal obligation.

For comparison with how a similar diligence question arises in the BVI corridor, see our analysis on sanctions due diligence for a deal touching the BVI.

Where does the risk sit now, after the UAE's removal from the grey list?

The FATF's removal of the UAE from enhanced monitoring in 2024 was widely read as a resolution of the problem. It is not. Removal confirms that the UAE has enacted adequate legislative and institutional measures. It does not mean that correspondent banks have recalibrated their risk appetite, or that the enhanced scrutiny applied to UAE-touching transactions during the grey-list period has been unwound.

In our desk's experience, the period following a jurisdiction's removal from the grey list consistently produces a compliance paradox. Clients relax their diligence expectations because the headline news is positive. Banks, however, maintain or increase scrutiny because their internal risk frameworks update more slowly than the FATF's list, and because the reputational cost of a post-grey-list exception is higher than the cost of the original enhanced monitoring. The window between regulatory improvement and institutional risk recalibration is precisely when compliance errors occur.

What has changed positively is the quality of public registry data available for UAE-incorporated entities. The UBO register reforms mean that, for a UAE entity incorporated under the federal or emirate-level regime, a diligence practitioner can now in principle access or compel disclosure of beneficial-ownership information in a way that was not available five years ago. That is a material improvement for a Hong Kong-seated acquirer trying to build a counterparty file that will satisfy a correspondent bank's screen.

What has not changed is the inherent complexity of structures that use the UAE as a transit or holding point for assets that have origins in higher-risk jurisdictions. The UAE's geographic position means that a legitimate Gulf-based family office investing from a UAE-incorporated holding entity may have a beneficial-ownership chain that passes through jurisdictions whose risk profiles remain elevated. A deal's diligence file has to account for that chain in full – not merely the UAE-incorporated entity at the top of it.

The practical risk for a deal crossing the Hong Kong–UAE corridor now sits in three specific places: the payment channel (as described above), the beneficial-ownership chain (particularly where a third jurisdiction is involved), and the post-transaction phase (where continued access to the banking system depends on the relationship-maintenance compliance file, not just the onboarding file).

How does the diligence sequence actually run?

A properly sequenced sanctions and AML diligence exercise for a Hong Kong–UAE deal runs in parallel tracks, not in sequence. That is the point most often missed by deal teams managing cost and timeline pressure.

The first track is the counterparty diligence file. This covers the UAE-side entity's corporate structure, UBO declaration, registered address and activity, source of funds for any consideration being paid into Hong Kong, and the sanctions-screening result against the UN consolidated list and, practically, the OFAC and EU lists that the correspondent bank will apply. This file is built before any term sheet or heads of agreement is signed, because the result of the screen may affect the deal's viability entirely.

The second track is the payment-channel diligence. This means identifying, in advance, the correspondent banking route for the consideration flow – in both directions – and confirming with the Hong Kong institution that the counterparty file is sufficient for the proposed transaction. Where the consideration moves in USD, the US correspondent bank's requirements apply. Where it moves in AED or another currency through a UAE-clearing institution, the UAE's requirements apply. Getting both confirmations before the deal closes is not a counsel formality. It is the mechanism that prevents a delayed or blocked wire from becoming a failed deal.

The third track is the structural diligence for the deal vehicle itself. Where a holding entity is being used – a Hong Kong-incorporated special-purpose vehicle, a BVI or Cayman entity, or a UAE free-zone entity – the entity's own beneficial-ownership and governance documentation must be prepared to satisfy both sides of the corridor simultaneously. A Significant Controllers Register (maintained by every Hong Kong-incorporated company since 1 March 2018 under the Companies Ordinance (Cap. 622)) provides the Hong Kong-side disclosure. The UAE-side requires the equivalent UBO filing.

A micro-scenario illustrates the sequencing risk. A European industrial group, operating through a Hong Kong intermediate holding company, sought to acquire a minority stake in a UAE free-zone logistics entity (autumn 2026). The counterparty had a clean OFAC screen result but a complex beneficial-ownership chain running through a third jurisdiction. The acquirer's Hong Kong bank flagged the chain before the wire was released and required enhanced due diligence on the third-jurisdiction element. Because the diligence file had been prepared in advance and the chain had been traced, the enhanced due diligence was completed within the correspondent bank's review window and the transaction cleared without a break in the closing timeline. The preparation was the outcome.

A second scenario, contrasting on the structure side: a Gulf-based family office sought to invest in a Greater China-focused private fund through a UAE-incorporated holding entity, with the fund's Hong Kong-based manager as the subscription counterparty (spring 2027). The family office's UBO chain passed through two intermediate trusts in a third jurisdiction. The fund manager's compliance function required a full source-of-funds narrative, a trustee confirmation of the UBO identity, and a certified extract from the UAE UBO register – documentation that took considerably longer to assemble than the investment committee had anticipated. The delay affected the fund's close. The lesson: the diligence file for a UAE-touching deal must be assembled before the fund close or deal signing, not after.

What do foreign advisers typically get wrong?

Three errors recur with regularity in cross-border Hong Kong–UAE deal diligence.

The first is treating sanctions diligence as a list check. A screen against the UN consolidated list is a necessary condition. It is not a sufficient one. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance requires understanding of the counterparty, not merely the absence of a name match. A counterparty may be off every list and still present a source-of-funds risk that a Hong Kong financial institution will decline to accept. Diligence that begins and ends with a list check will not clear a correspondent bank's review.

The second error is ignoring the payment channel until the deal is signed. By then, the Hong Kong bank has been presented with a fait accompli and the deal team is under time and price pressure. Banks do not move faster under that pressure. They move more cautiously. The payment channel should be confirmed – not just initiated, confirmed – before the deal is signed.

The third error is assuming that the UAE's removal from the FATF grey list means deal structures that would have been declined two years ago will now clear. They will not, for the reasons set out above. The institutional risk appetite lags the regulatory status. A deal that depends on a bank's recalibrated risk appetite for a UAE-touching structure is a deal that depends on an assumption. That assumption should be tested before the deal is structured, not after.

For a comparison of how the diligence file works for a Mainland China-touching transaction, see our briefing on compliance review before contracting with a Mainland China entity.

If an earlier filing, structure or enforcement attempt produced an adverse or stalled result, a second read can identify the strategic error and the routes still open.

To discuss how the cross-border compliance requirement applies to your Hong Kong–UAE position, contact info@lockhartyip.com.

What is our read on where this goes from here?

The UAE's trajectory on AML and sanctions compliance is positive. The post-grey-list reforms are genuine, the institutional infrastructure has improved, and the regulatory appetite for enforcement action against non-compliant entities is higher than it was. For a deal team approaching a Hong Kong–UAE transaction in 2027, that is a better environment than existed three years ago.

But the direction of travel on correspondent banking is not uniformly positive. The major US-dollar clearing banks continue to reduce their correspondent-banking relationships in regions they categorise as elevated-risk, and the UAE remains in that category for some institutions even after the grey-list removal. The practical consequence is that the Hong Kong-side institution for a UAE-touching deal must be selected with care. Not every institution that will open an account for a Hong Kong entity will also clear a wire to a UAE counterparty without enhanced review. That selection has become part of the deal structure, not a peripheral banking question.

We also see a developing trend in enforcement priority. Both the UAE's regulatory authorities and Hong Kong's own financial regulators have signalled that beneficial-ownership transparency and source-of-funds documentation are primary enforcement priorities. That means the risk of an enforcement action for a deficient compliance file is not theoretical. It is the direction that both regimes are moving in, and the deals that get caught are the ones where the compliance file was treated as a formality rather than a substantive diligence exercise.

What does that mean for a deal team reading this now? It means that the investment in a properly sequenced, dual-jurisdiction diligence file is not a cost. It is the mechanism that clears the payment channel, maintains the banking relationship, and preserves the optionality to exit the position when the time comes. A holding structure that cannot clear a correspondent bank on entry will face the same problem on exit, often with less time and more pressure.

The question for any principal considering a deal touching the UAE is not whether to do the diligence. It is whether to do it before the deal is structured, or to do it after the wire is blocked.

Decision matrix: situation, instrument, route, and risk

The following maps the principal situations a cross-border desk sees against the relevant instrument and the associated risk concentration.

Situation A: A Hong Kong-incorporated acquirer buys a UAE free-zone entity from a seller whose UBO chain is clean and fully documented. Governing instrument: the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Hong Kong) and the UAE's UBO disclosure regime. Route: standard correspondent-banking channel with a pre-confirmed counterparty file. Timing: allow two to four weeks for the banking confirmation step before signing. Risk: low, provided the payment channel is confirmed in advance. The principal risk is timeline slippage if the bank confirmation is sought after signing.

Situation B: A Gulf-based family office invests from a UAE-incorporated entity into a Hong Kong-based fund, where the UBO chain passes through a trust structure in a third jurisdiction. Governing instrument: the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the fund manager's own AML policies, which must meet the regulator's guidelines. Route: the fund manager requests a trustee-confirmed UBO disclosure, a UAE UBO register extract, and a source-of-funds narrative. Timing: this documentation assembly should begin before the subscription agreement is signed. Risk: moderate to high depending on the third jurisdiction's risk profile; the primary risk is delay at the fund close.

Situation C: A Hong Kong-seated group enters a joint venture with a UAE counterparty whose ownership includes a PEP in a third jurisdiction. Governing instrument: the Anti-Money Laundering and Counter-Terrorist Financing Ordinance's enhanced-due-diligence requirements for PEP relationships. Route: the Hong Kong institution requires PEP approval at a senior level, a source-of-wealth narrative, and ongoing enhanced monitoring. Timing: PEP approval timelines at financial institutions are institution-specific and should be established before the joint venture is announced. Risk: the approval may be declined; the deal structure should account for that possibility.

Situation D: A deal consideration is denominated in USD and clears through a US correspondent bank, with a UAE-situated recipient account. Governing instrument: the US correspondent bank applies OFAC screening in addition to the UN list. The Hong Kong institution has no formal obligation to apply OFAC, but the wire cannot clear without the US correspondent's acceptance. Route: the counterparty file must satisfy OFAC's expectations as a practical matter, even though the governing law of the transaction is not US law. Risk: the risk is structural and cannot be eliminated by choosing a different governing law. The USD payment channel carries OFAC exposure regardless of where the deal is booked.

The AUDIENCE_MYTH addressed: does the UAE's removal from the grey list resolve the compliance requirement?

The short answer is no. The FATF removal confirms that the UAE has enacted adequate measures. It does not mean that a deal touching the UAE can be treated as equivalent in compliance weight to a deal touching a jurisdiction with a longer, cleaner record. The correspondent banks know this, the regulatory guidelines know this, and the diligence standard has not changed. What has changed is the quality of the UAE-side documentation infrastructure, which makes a properly assembled diligence file more achievable than it was. The compliance requirement remains.

A Hong Kong principal who structures a UAE-touching deal on the assumption that the grey-list removal has reduced the diligence burden will encounter the same payment-channel friction that principals encountered before 2024. The friction is not about the FATF's list. It is about institutional risk appetite and the quality of the counterparty file. Both of those respond to the quality of the diligence, not to the regulatory status of the jurisdiction.

Related practices

• Sanctions & AML – cross-border compliance, counterparty diligence, and AML file preparation across the Hong Kong–UAE corridor and principal offshore centres
• Holding Structures – structuring Hong Kong and offshore holding vehicles for cross-border deals with attention to beneficial-ownership disclosure requirements

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Sanctions Due Diligence Deal Touching Bvi Bvi Analysis
• Compliance Review Before Contracting Mainland China Entity Mainland

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.