PEP and Sanctions Screening in Dubai 2026: How to Pick the Right Tool for a UAE DNFBP SME

PEP and sanctions screening in Dubai means checking every client and every beneficial owner above the 25% threshold against sanctions lists and politically-exposed-person databases, at onboarding and continuously after it. A sanctions hit prohibits the relationship outright; a PEP hit triggers Enhanced Due Diligence and senior-management approval instead. Mainland Dubai DNFBPs are supervised by the Ministry of Economy and Tourism.

Picking a PEP screening tool as a UAE DNFBP SME comes down to five realistic candidates — Refinitiv World-Check, Dow Jones Risk and Compliance, LexisNexis Bridger, ComplyAdvantage and Moody’s Grid — weighed on coverage, false-positive volume, workflow fit and price. All five are sold as sanctions screening tools with a PEP database attached, and the marketing rarely separates the two, so the useful comparison is what happens after a PEP hit lands on your MLRO’s desk rather than how many records the vendor claims to hold.

It’s one of the controls a Designated Non-Financial Business and Profession most needs to get right, and one where the tools vary wildly in cost, coverage and how well they actually fit a small firm’s workflow. Every UAE law firm, corporate service provider, audit firm, real estate brokerage, gold trader and tax consultant operating under Federal Decree-Law No. 10 of 2025 and its executive regulation Cabinet Resolution No. 134 of 2025 has to screen new and existing clients against sanctions lists and politically-exposed-person databases as part of CDD and EDD.

The choice of screening tool drives the MLRO’s day-to-day workload, the false-positive volume the firm has to clear, and the audit trail an inspector reviews during a Ministry of Economy and Tourism on-site visit. This guide compares the major screening tools UAE DNFBP SMEs actually use in 2026 (Refinitiv World-Check, Dow Jones Risk and Compliance, LexisNexis Bridger, ComplyAdvantage and Moody’s Grid) on coverage, fit, workflow and pricing, and lays out how to pick one.

What counts as a PEP in the UAE

A PEP in the UAE is a natural person who holds, or has held, a prominent public function — and the definition reaches wider than most SMEs expect. Under the UAE AML/CFT framework the category covers foreign PEPs, domestic UAE PEPs, and people entrusted with a prominent role by an international organisation. Heads of state and government, ministers, senior members of the judiciary, senior military officers, senior executives of state-owned enterprises and senior political-party figures all sit inside it. So do their immediate family — spouse, children, parents — and their known close associates, such as a business partner or someone holding property jointly with them.

Being a PEP is not a crime, and it is not, by itself, a reason to refuse a client. What it does is raise the risk band, because the role gives the person influence over public funds. That is why a PEP match triggers Enhanced Due Diligence rather than a simple refusal: senior-management approval to onboard, documented source-of-wealth and source-of-funds evidence, and closer ongoing monitoring for as long as the relationship runs. The status can also linger after someone leaves office, so a risk-based view still applies to a recently former official rather than an automatic all-clear on the day they step down.

The lists in scope

The UAE AML/CFT framework requires DNFBPs to screen every customer and every Ultimate Beneficial Owner above the 25 percent control threshold against the following lists before the relationship begins and on an ongoing basis through its lifetime:

• Sanctions lists. The UAE Local Terrorist List and Cabinet implementing decisions, the UN Security Council Consolidated Sanctions List, OFAC Specially Designated Nationals, the UK HM Treasury Consolidated List and the EU Consolidated Financial Sanctions List
• Politically exposed person databases covering domestic UAE PEPs, foreign PEPs, international-organisation PEPs and their family members and close associates
• Adverse media monitoring negative news linking the customer or UBO to investigations, indictments, regulatory enforcement or reputational concerns

All three run off the same mechanic — name screening, where the customer’s name, date of birth, nationality and identifiers are matched against the vendor’s records. That is why PEPs and sanctions screening are almost always bought as one subscription rather than two: the same match engine feeds both, and splitting them across vendors doubles the false positives your MLRO has to clear.

The UAE Financial Intelligence Unit and the Ministry of Economy and Tourism treat sanctions screening as strict liability, and that word does a lot of work. A sanctioned counterparty in your active book is a violation whether you knew about it or not — intent is no defence. PEP screening is the EDD trigger, so missing a PEP is a CDD failure even when the relationship is otherwise spotless. Adverse-media monitoring sits a layer above both, catching the reputational and pre-enforcement signals that haven’t reached a formal list yet.

Velmont Crest is a DED-licensed accounting firm supporting AML compliance for DNFBP SMEs across mainland and free zone setups.

The list of DNFBP categories for 2026

The list of DNFBP categories for 2026 now sits under Cabinet Resolution 134/2025, the executive regulation of the 2025 AML law, and every business inside it carries the same PEP and sanctions screening duty. Designated Non-Financial Businesses and Professions in the UAE are:

• Real estate agents and brokers — when they carry out transactions for a client involving the buying or selling of property
• Dealers in precious metals and precious stones (DPMS) — gold, diamond and jewellery traders dealing in cash at or above the reporting threshold
• Auditors and accountants — independent professionals providing accounting or audit services
• Corporate service providers — company-formation agents and those acting as, or arranging for another to act as, a nominee director or registered agent
• Lawyers, notaries and independent legal professionals — when they prepare or carry out certain transactions, such as managing client money or forming companies
• Commercial gaming operators — holders of a GCGRA gaming licence, brought into the DNFBP framework by Cabinet Resolution 134/2025

On DNFBP meaning, the phrase is doing something specific: these are businesses that are not financial institutions but still handle transactions where laundered money can enter the system, which is why the same customer due diligence duties land on them. If your firm sits in any of these categories, goAML registration through the goAML portal and a working AML programme are not optional. The obligation attaches to the activity, not the licence type, so a mainland firm, a free zone entity and a professional sole practitioner are all caught the same way. A firm unsure whether it qualifies is safer treating itself as in scope until a documented assessment says otherwise.

PEP and sanctions screening in Dubai

PEP and sanctions screening in Dubai follows the federal UAE AML/CFT framework, but a Dubai DNFBP has a few practical wrinkles worth knowing. Most mainland firms here are licensed by Dubai Economy and Tourism (DET, formerly DED), and they answer to the Ministry of Economy and Tourism as their AML supervisor for the DNFBP sector. Firms inside the financial free zone — DIFC — instead sit under the DFSA, and those in commercial free zones follow their own zone authority alongside the federal rules. The screening obligation itself does not change: sanctions and PEP checks on every client and every beneficial owner above the 25 percent threshold, at onboarding and on an ongoing basis.

What a Dubai firm should get right is the evidence trail an inspector will ask for. Screening in Dubai means checking against the UAE Local Terrorist List, the UN Consolidated List, OFAC, UK HM Treasury and the EU list, then keeping the vendor reference, the screening date, the hit-clearance memo and the MLRO sign-off attached to the client file. Running the check is the easy part; proving you ran it, cleared it properly and kept watching is where firms lose marks. Pair the sanctions side with a documented OFAC and sanctions screening checklist so nothing slips between the two lists.

What that looks like on one file is worth spelling out. Take a Dubai corporate service provider onboarding a mainland LLC with two shareholders, one of whom holds 60 percent and sits on the board of a state-owned enterprise in his home country. Screening runs on three natural persons — both shareholders and the authorised signatory — plus the entity itself, against sanctions and PEP databases on the same day the engagement letter is signed. The 60 percent shareholder returns a PEP match.

Nothing is prohibited by that, but the file cannot proceed on standard CDD: the CSP records the vendor reference and screening date, writes a hit-clearance memo confirming the match is the same person rather than a name collision, obtains senior-management approval to onboard, documents source of wealth against the shareholder’s declared income and asset history, sets the client to high risk with monthly re-screening, and files all of it in the client folder rather than leaving it in the vendor portal.

The second shareholder returns two adverse-media hits that turn out to be a different person with a similar transliterated name — that conclusion is written down too, because an inspector reads a cleared hit with no reasoning behind it as no clearance at all.

The five tools UAE SMEs actually use

Refinitiv World-Check

The enterprise default in financial-services AML. Owned by London Stock Exchange Group after the Refinitiv acquisition. World-Check One does sanctions, PEP and adverse-media screening across global coverage with a strong UAE and GCC dataset. Strengths: broad coverage, regulator familiarity, dedicated UAE relationship management. Trade-offs: enterprise pricing usually out of reach for very small DNFBPs, learning curve on hit-clearance workflow, false-positive volume on common Arabic names can be high without algorithm tuning.

Pricing: LSEG publishes no price for World-Check on its own product page, which routes to a sales contact form instead (lseg.com, checked 5 August 2026). Treat any figure you are given as specific to your volume band, modules and contract length, and get it in writing. Used widely by UAE mid-tier and large audit firms, established law firms, real estate developers and banks.

Dow Jones Risk and Compliance

Direct competitor to Refinitiv World-Check. Owned by News Corp and integrated with the Factiva news platform, which gives it strong adverse-media depth. Strengths: deep PEP coverage including senior-management roles in state-owned enterprises, strong English-language adverse media, well-established sanctions list refresh cadence. Trade-offs: pricing similar to Refinitiv, Arabic-language coverage less deep than World-Check.

Pricing: quoted on enquiry — we found no published list price. Common among UAE professional services firms, larger CSPs and free zone advisory practices.

LexisNexis Bridger

The matching-algorithm leader. LexisNexis Risk Solutions sells Bridger Insight XG on its name-matching engine, which materially cuts false positives compared to literal-string match. Strengths: best-in-class matching algorithm, strong integration with case-management tools, well-suited to high-volume retail and DPMS workflows. Trade-offs: dataset is generally regarded as marginally narrower than Refinitiv and Dow Jones on niche regional PEPs.

Pricing: quoted on enquiry — we found no published list price. Often picked where false-positive volume is the operational constraint: high-volume jewellery retailers, real estate brokerages, CSPs.

ComplyAdvantage

The newer entrant favoured by smaller DNFBPs and fintech-adjacent firms. ComplyAdvantage builds its own dataset using machine-learning extraction from open and licensed sources and updates more often than the legacy vendors claim. Strengths: usable interface, API-first architecture for SMEs that want to integrate with onboarding software, transparent pricing tiers. Trade-offs: less established than Refinitiv and Dow Jones with conservative regulator audiences, dataset depth on long-historical PEPs less mature.

Pricing: the only published list price we found across the five. The Starter tier is advertised from USD 99 per month, sold against bands of monitored entities, with the Enterprise tier routed to sales (complyadvantage.com/pricing, checked 5 August 2026). Common among sole-practitioner accountants, small CSPs, lawyer SMEs and emerging fintech.

Moody’s Grid

Grid (Global Regulatory Information Database) was built by Regulatory DataCorp (RDC) and is now part of Moody’s following its 2020 acquisition. Strengths: strong UBO and ownership-network data because it inherits the Moody’s corporate database, useful for CSPs and audit firms tracing ownership chains. Trade-offs: dataset is still being integrated under the Moody’s umbrella, UAE compliance-market brand recognition is growing rather than established.

Pricing: quoted on enquiry — we found no published list price. Common among CSPs and audit firms with cross-border ownership work.

Choosing well, five questions that decide it

The choice rarely comes down to “which dataset is biggest.” All five major tools cover the core sanctions lists. The differentiators that matter for SMEs are workflow fit, false-positive volume, ongoing-monitoring capability and total cost of ownership including MLRO time.

How many CDDs do you actually run?

If the firm runs fewer than ten new CDDs per month and screens its existing book monthly, ComplyAdvantage or Moody’s Grid offer better unit economics. Above fifty CDDs per month, or with continuous ongoing monitoring across an active book of hundreds, the enterprise tools (Refinitiv, Dow Jones, LexisNexis) typically deliver better matching quality and lower MLRO time per cleared hit.

Which sector are you in?

• Law firms and audit firms handling cross-border corporate work typically benefit from Refinitiv or Dow Jones depth on foreign PEPs and adverse media
• CSPs and beneficial-ownership work typically benefit from Moody’s Grid for ownership-network data
• DPMS and high-volume retail typically benefit from LexisNexis Bridger for matching-algorithm quality at high false-positive volume
• Real estate brokerages typically use Refinitiv or Dow Jones for PEP depth on property buyers
• Sole-practitioner accountants and small CSPs typically use ComplyAdvantage on cost grounds

How often do you re-screen?

Daily ongoing monitoring across the active book is materially more defensible than periodic batch re-screening. All five tools offer it; pricing tiers vary by record volume. An SME with two hundred active clients monitors two hundred records continuously, not just at relationship renewal.

What will the MoET inspector ask to see?

Ministry of Economy and Tourism inspectors look for documented screening evidence: vendor name, screening date, screening reference, hit-clearance memo, MLRO sign-off. All five tools can produce this; integration with the firm’s case-management or document-management system varies. The most defensible setup is the one where every CDD file has the screening evidence attached, not stored separately in a vendor portal the inspector cannot reach.

How much false-positive noise can you tolerate?

Common Arabic names produce high false-positive rates against PEP and sanctions databases compiled mostly on Latin-character transliteration. Algorithm tuning (matching strictness, score thresholds, name variant handling) materially changes the operational cost. The strongest tuning capability sits with LexisNexis (matching-algorithm leader) and Refinitiv (long MENA tuning history). Tuning is typically a configuration project the vendor or an external AML adviser supports.

“

The true cost of a screening tool is not the licence — it is the licence plus the MLRO hours per month spent clearing false positives. A cheaper subscription that produces thirty noisy hits a week can cost more in MLRO hours than a dearer one that produces clean hits. Run a one-month sample with two tools side-by-side before signing a multi-year contract.

The five tools side by side, without a price column

A comparison table with a price column would be more satisfying to read and less honest. Four of these five vendors publish nothing, so any AED range printed against them is somebody’s guess. What can be compared is what each is built for and where it strains. The last column is deliberately blank where the vendor keeps it blank.

Vendor pages checked 5 August 2026. “None found” means we could not locate a published list price on the vendor’s own site — not that the product is unpriced.

What a screening failure actually costs, by instrument

The screening controls a UAE DNFBP is asked to run map onto specific numbered violations, and the numbers come from two different places. Administrative fines under the DNFBP list are imposed by the Ministry; the larger figures in the 2025 law sit with a supervisory authority or a court. Here is the mapping for the controls this guide is about.

Read against the published texts of Cabinet Resolution No. 71 of 2024 and Federal Decree-Law No. 10 of 2025 on 5 August 2026.

One gap is worth naming rather than filling. Article 39 of FDL 10/2025 requires the Cabinet to issue a resolution setting the violations and administrative penalties under the new law. At the date we checked, it had not been published, and Article 41(3) keeps the 2024 list operative in the meantime. So the bands above are the current ones — but a firm budgeting for penalty exposure should watch for that resolution rather than assume the 2024 numbers are permanent.

Where the vendor stops and the MLRO starts

Vendor screening tools are inputs to the AML programme. They do not replace the MLRO’s decision authority. Every match (sanctions, PEP or adverse-media) generates a hit-clearance workflow the MLRO has to complete and document:

1. Match assessment — is this the same person as the screened counterparty, or a name collision
2. Risk evaluation — if the match is real, what does the resulting risk band mean for CDD or EDD
3. Documented decision — clear, refuse, escalate to STR, or refer to senior management
4. Audit trail — vendor reference, screening date, MLRO memo, supporting evidence
5. Ongoing monitoring update — flag the client for elevated monitoring if cleared at higher risk

A vendor tool that returns “Cleared, no match” automatically without an MLRO sign-off is not a defensible programme. The Ministry of Economy and Tourism expects human decision-making on every relevant hit, not algorithm-only clearance.

Where we see SMEs slip up

The tuning trips people up at both ends. Set the thresholds too strict and genuine PEPs slip through, which is the expensive mistake — one missed PEP costs more than working through fifty false positives. Set them too loose and the MLRO drowns in noise, stops reviewing diligently, and the programme breaks just as surely. There’s a live band between the two that takes a few cycles to find.

Screening only at onboarding is the next common failure. Sanctions and PEP lists update continuously, so a firm that screens once and never again is one list update away from holding an active relationship with a newly-sanctioned entity it has no idea about. Related to that is the stale ongoing-monitoring list — the tool only watches the records currently loaded into it, so a client that closes, restructures or changes UBO without an update to the monitoring list is effectively invisible.

Two more we see repeatedly. Firms sign multi-year contracts with heavy pre-payment and then get trapped when their volume or workflow shifts, with no exit plan. And plenty screen the entity but never the natural-person beneficial owners behind it — screening the company but skipping UBOs above the 25 percent threshold is a straight CDD failure. Both have to be screened.

If you’re still screening by hand, you’re already behind

If your UAE DNFBP currently runs PEP and sanctions screening through manual searches, free public sanctions databases or an outdated subscription, you are below the Ministry of Economy and Tourism expectation for CDD and EDD evidence. The bands in the list annexed to Cabinet Resolution No. 71 of 2024 are charged per violation, so they escalate quickly across an active book. Failing to put systems in place to work out whether a customer or beneficial owner is a PEP is item 18, at AED 50,000 to AED 200,000.

Failing to apply enhanced due diligence once high risk is identified is item 15, at AED 100,000 to AED 500,000. Failing to check your database continuously against the Security Council, Sanctions Committee and local lists is item 34, at AED 50,000 to AED 1,000,000.

If you have a tool but your MLRO is drowning in false positives or your audit trail is scattered across a vendor portal and your own document store, the gap is usually in three places: the algorithm has never been tuned for the firm’s customer profile, the ongoing-monitoring cadence does not match the customer risk profile, and hit-clearance memos are not consistently attached to the underlying CDD file.

Our AML compliance services in the UAE provide advisory support across PEP screening implementation: vendor scoping, matching-algorithm tuning, MLRO workflow design, audit-trail format and inspection-readiness reviews. We pair this with bookkeeping and business setup advisory work so the AML evidence trail aligns with the underlying financial records, and we cross-reference the sanctions side of the programme in our OFAC and sanctions screening checklist for UAE DNFBPs. We are a DED-licensed UAE accounting firm and authorised channel partner with Meydan Free Zone and RAKEZ.

For a clean review of where your PEP and sanctions screening stands today, book a free consultation.

Disclaimer: Velmont Crest is a DED-licensed accounting firm. We provide advisory, preparation and compliance support services. We are not a licensed MLRO of record, regulated AML vendor or FTA tax agent. Where a vendor price appears above it is the vendor’s own published figure with the source and the date we checked it; where no price appears, the vendor publishes none and we have not estimated one. Request direct written quotations for current pricing. AML/CFT rules change frequently — verify all requirements with the UAE Financial Intelligence Unit, the Ministry of Economy and Tourism and your sector regulator before acting.

References

• UAE Financial Intelligence Unit — goAML portal
• Federal Decree-Law No. 10 of 2025 on AML/CFT and Proliferation Financing
• Cabinet Resolution No. 134 of 2025 — Executive Regulations
• Cabinet Resolution No. 71 of 2024 — AML violations and administrative fines for DNFBPs, published by the Ministry of Economy and Tourism
• UAE Ministry of Economy and Tourism — AML/CFT guidance for DNFBPs
• UN Security Council Consolidated Sanctions List