AML Obligations Across Major GCC Free Zones: DIFC, ADGM, JAFZA, DMCC and More

The GCC Free Zone Landscape

GCC free zones serve different economic functions. The UAE alone hosts more than 45 free zones, each with its own authority and regulatory framework. The major free zones include:

Financial free zones such as the Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM), which are designed specifically for financial services firms and subject to comprehensive financial services regulation including AML obligations.

Trade and logistics free zones such as Jebel Ali Free Zone (JAFZA), Dubai Multi Commodities Centre (DMCC), Khalifa Industrial Zone Abu Dhabi (KIZAD) and Dubai Airport Free Zone (DAFZA), which primarily serve trading, logistics and commodity businesses.

Offshore jurisdictions such as the Ras Al Khaimah International Corporate Centre (RAKICC), which offers offshore company registration for specific business purposes.

Saudi Arabia operates the King Abdullah Economic City (KSA) free zones and others under the Saudi Free Zones Law. Bahrain operates the Bahrain International Investment Park and other zones. Qatar’s Qatar Financial Centre (QFC) operates similarly to DIFC and ADGM as a regulated financial zone.

DIFC and ADGM Regulated Financial Free Zones

DIFC and ADGM occupy a distinct position in the GCC free zone landscape as dedicated financial centres with comprehensive regulatory frameworks.

The Dubai International Financial Centre operates under the DIFC AML Regulations 2020, supervised by the Dubai Financial Services Authority (DFSA). All firms authorised by the DFSA are subject to these regulations, which apply a full range of AML/CFT obligations including customer due diligence, record keeping, suspicious transaction reporting and enhanced due diligence for high-risk customers including PEPs.

The Abu Dhabi Global Market operates under the ADGM AML Regulations 2018 (as amended), supervised by the Financial Services Regulatory Authority (FSRA). The regulatory framework is similarly comprehensive, applying to all firms registered in ADGM.

Both DIFC and ADGM classify entities operating within them as financial institutions for AML purposes, with the relevant free zone authority as the primary supervisor. These are the most stringent AML environments in the GCC free zone landscape, reflecting their role as centres for financial services activity.

JAFZA and DMCC Trade and Commodity Free Zones

Jebel Ali Free Zone (JAFZA) and the Dubai Multi Commodities Centre (DMCC) serve different economic functions and have different AML obligations compared to the financial free zones.

JAFZA is one of the largest trade and logistics free zones in the world, primarily serving import-export businesses, trading companies and logistics providers. The free zone authority oversees licensing and operational matters. AML obligations for JAFZA-registered companies arise from mainland UAE Federal Decree-Law No. 20/2018 where the company falls within the DNFBP definition, particularly if it engages in real estate transactions or precious metals and stones dealing.

DMCC is a commodity free zone focused on trading, particularly in precious metals, stones and commodities. The Dubai Gold and Commodities Exchange operates within DMCC. Companies registered in DMCC face AML obligations under mainland UAE law where they engage in DNFBP activities.

A key distinction is that JAFZA and DMCC are not financial free zones. The companies registered there are generally not classified as financial institutions for AML purposes unless they engage in specific regulated activities. Their AML obligations arise primarily through DNFBP provisions when they conduct activities such as real estate transactions, precious metals and stones dealings, or company service provision.

The Dubai Gold Trade Free Zones

Dubai’s gold trade sector, centred partly on free zone operations, has received specific FATF attention. The UAE’s 2020 FATF Mutual Evaluation Report noted that gold and precious metals trade represents a specific money laundering risk given the high value, portability and convertibility of gold.

The FATF Recommendations (specifically Recommendation 22) address DNFBP obligations for precious metals and stones dealers, and the UAE has implemented these obligations through its federal AML framework. Free zone authorities increasingly require gold traders to demonstrate AML programme compliance as part of licensing and renewal processes.

RAKICC and Offshore Considerations

The Ras Al Khaimah International Corporate Centre (RAKICC) offers offshore company registration primarily for companies that will not conduct business within the UAE. RAKICC-registered entities are subject to specific AML obligations under the applicable UAE federal framework, but their obligations differ from those of onshore or free zone companies.

Offshore companies are generally not treated as financial institutions and do not fall under the direct supervision of the Central Bank or SCA for AML purposes. However, they remain subject to UAE AML laws where they engage in activities that trigger DNFBP obligations, such as real estate transactions.

For compliance professionals, offshore structures require careful assessment. The beneficial ownership obligations that apply to UAE companies generally also apply to RAKICC entities, and the use of offshore structures to obscure beneficial ownership is an area of regulatory scrutiny.

DNFBP Versus Financial Institution Classification

The distinction between DNFBP and financial institution classification is fundamental to understanding AML obligations across free zones.

In DIFC and ADGM , all authorised firms are classified as financial institutions for AML purposes and are subject to the full range of financial institution AML obligations.

In JAFZA, DMCC, KIZAD and DAFZA , companies are generally classified as DNFBPs or general commercial entities, with AML obligations arising through the DNFBP provisions of UAE federal AML law when they engage in relevant activities.

In RAKICC and similar offshore centres , entities may have limited AML obligations depending on their activities, but beneficial ownership and sanctions screening obligations remain relevant.

This classification affects which specific obligations apply, what CDD thresholds apply, and which supervisory authority has oversight.

UAEFIP and Free Zone Oversight

The UAE Financial Intelligence Unit (UAEFIP) operates as the central repository for STRs across the UAE, including from free zone entities. Free zone companies that fall within DNFBP scope must file STRs with the UAEFIP when they suspect money laundering or terrorist financing.

The SCA has issued specific AML guidance applicable to SCA-regulated entities operating in free zones, particularly in the securities and commodities space. Companies engaging in regulated activities within free zones (such as providing investment advisory services) may require SCA licensing regardless of their free zone status.

Cross-border transactions between free zone entities and mainland entities trigger considerations about which jurisdiction’s AML obligations apply and how reporting obligations are managed.

FATF Attention on Free Zones

The FATF has noted that free zones present specific money laundering risks and has encouraged jurisdictions to ensure that free zones are subject to adequate AML/CFT oversight. The 2020 FATF Mutual Evaluation of the UAE specifically examined the free zone landscape and made recommendations about supervisory coverage.

The UAE’s response has included strengthening the regulatory frameworks for free zones, improving information sharing between free zone authorities and mainland regulators, and enhancing beneficial ownership requirements for free zone entities.

For enterprise organisations, the implication is that free zone registration does not reduce AML obligations. The regulatory authorities increasingly expect free zone companies to maintain AML programmes comparable to mainland entities where the activities carried on present money laundering risk.

Practical Compliance Challenges

Organisations operating across multiple GCC free zones face several practical challenges.

Determining applicable AML regime requires careful analysis of what activities each entity conducts and which regulatory classification applies. A group that assumes all free zone entities have the same AML obligations will almost certainly have gaps.

Beneficial ownership verification is required across all UAE free zones under the applicable federal framework, but the specific mechanisms and documentation requirements may differ.

Sanctions screening applies universally regardless of free zone, given the federal nature of sanctions obligations in the UAE. All free zone entities must ensure they screen customers and counterparties against applicable sanctions lists.

STR filing obligations arise with the UAEFIP for mainland UAE DNFBP activities, and with DFSA or FSRA for DIFC and ADGM activities respectively. A group compliance function must ensure that reporting obligations are met in each applicable jurisdiction.

Technology infrastructure must support the different data requirements across free zones while maintaining consolidated risk visibility for the group.

What Organisations Should Consider

Senior compliance decision-makers operating across GCC free zones should take several steps.

Map activities to AML classifications. Review the activities conducted by each free zone entity and determine whether it is classified as a financial institution or DNFBP under the applicable framework.

Apply the most stringent standard where uncertainties exist. When activities span multiple regulatory classifications, applying the more stringent standard reduces regulatory risk.

Maintain comprehensive beneficial ownership records. The UAE’s beneficial ownership requirements apply broadly, and free zone entities are not exempt.

Build group-level AML governance that provides consistent risk oversight across all free zone entities while allowing for jurisdiction-specific calibration.

Engage with free zone authorities to understand their specific expectations for AML programme standards. The authorities increasingly expect documented AML programmes with clear policies, procedures and training.

Conclusion

The GCC free zone landscape presents a complex web of AML obligations that vary depending on the specific free zone, the activities conducted and the regulatory classification of the entity. DIFC and ADGM represent the most regulated AML environments, while trade and commodity free zones like JAFZA and DMCC apply DNFBP obligations that are significant but distinct in scope.

For senior compliance decision-makers, the key is to avoid assumptions. Free zone registration does not reduce AML obligations, and the regulatory authorities increasingly expect free zone companies to maintain robust financial crime programmes commensurate with their risk profiles.

Building a compliance programme that addresses the specific requirements of each free zone in which the organisation operates is a significant undertaking, but it is essential for sustainable operations in the GCC market.

This article was accurate at the time of publication in August 2026 and is intended for general informational purposes only. It does not constitute legal, regulatory or compliance advice. Organisations should seek qualified professional guidance in relation to their specific obligations.