Introduction

If you’re running a Free Zone company in the UAE, 2026 is not just another filing year - it is the first real stress test of your corporate tax compliance strategy.

With Ministerial Decision No. 84 of 2025 (MD 84) now in force, the UAE has introduced a strict, no-loopholes audit framework for Qualifying Free Zone Persons (QFZPs). The message is simple:

No audit = no 0 percent corporate tax benefit.

In this guide, we walk through everything you need to know - from deadlines and audit rules to real-world compliance strategies - so you can stay fully aligned and confidently file in 2026.

Key Takeaways

• All QFZPs must prepare audited financial statements (zero-threshold rule applies)
• Even companies with AED 0 revenue must comply
• MD 84 replaces MD 82 of 2023 and tightens audit enforcement
• Audit is mandatory to retain 0 percent corporate tax status
• Failure may trigger 9 percent tax for 5 years (current + 4 years)
• Filing deadline for 2025 tax period is 30 September 2026
• Financials must follow IFRS standards
• Audit must be conducted by a UAE-licensed auditor

What Is MD 84 and Why It Matters

Ministerial Decision No. 84 of 2025 defines who must maintain audited financial statements under UAE Corporate Tax law.

It replaces earlier guidance under MD 82 and introduces a stricter compliance framework, particularly for Free Zone entities.

For QFZPs, this decision is critical because:

• it formalizes the mandatory audit requirement
• it directly links audits to tax eligibility
• it removes any ambiguity around exemptions

In short, MD 84 turns audits from a “good practice” into a legal necessity.

The Zero-Threshold Audit Rule (No Exceptions)

Here’s the rule that catches many businesses off guard:

Every QFZP must have audited financial statements - regardless of revenue.

That means:

• no minimum revenue threshold
• no exemption for dormant companies
• no relief for startups or small entities

Even if your company:

• generated zero income, or
• had minimal activity,

you are still required to prepare audited financial statements to claim the 0 percent tax rate.

Consequence of Non-Compliance (Critical)

Let’s be very clear - this is where the real risk sits:

If you fail to provide audited financial statements:

• you lose QFZP status
• you are subject to 9 percent corporate tax
• this applies for:
  • the current tax period, and
  • the next four tax periods

That’s a five-year impact, not just a one-year penalty.

For most businesses, that completely changes the financial model of operating in a Free Zone.

2026 Filing Timeline You Cannot Miss

For businesses using a calendar year (January to December), here’s your actual compliance roadmap:

The UAE Corporate Tax return must be filed within 9 months of the end of the tax period.

That means your audit must be completed well before September - not rushed at the last minute.

What the Audit Actually Verifies (MD 84 Scope)

This is not just a routine financial check. The audit is the Federal Tax Authority’s verification tool for QFZP eligibility.

Here’s what auditors will examine closely:

De Minimis Compliance

• non-qualifying income must not exceed:
  • 5 percent of total revenue, or
  • AED 5 million (whichever is lower)

Adequate Substance (CIGA Requirements)

Auditors will confirm that your business has:

• real operations within the Free Zone
• sufficient staff
• appropriate assets
• actual operating expenses

This proves that your company is not just a paper structure.

Qualifying vs Non-Qualifying Income

Your financial statements must clearly separate:

• qualifying income (0 percent tax)
• non-qualifying income (9 percent tax)

Poor classification here is one of the biggest audit risks.

Transfer Pricing Compliance

All related party transactions must follow the arm’s length principle.

If thresholds are met:

• AED 40 million (Local File trigger)
• AED 200 million (Master File trigger)

you must maintain proper transfer pricing documentation.

Audit Requirements at a Glance

Operational Checklist for May–June 2026

Let’s bring this into the real world - if you’re reading this now, you should already be in execution mode.

Here’s what needs to happen immediately:

• appoint a UAE-licensed auditor with Free Zone experience
• finalize books under IFRS standards
• prepare revenue segmentation (qualifying vs non-qualifying)
• review related party transactions
• confirm your trade license aligns with qualifying activities

Think of this phase as your “pre-audit cleanup.” 

The smoother it is, the less painful your audit will be.

Common Mistakes That Trigger Audit Issues

We see the same patterns again and again:

• assuming small companies are exempt
• mixing qualifying and non-qualifying income
• weak documentation for related party transactions
• incomplete IFRS alignment
• delaying audit preparation

These mistakes don’t just slow things down - they can cost you your tax status.

A Practical Insight from Fintrack Tax Consultants

Here’s something we consistently observe at Fintrack Tax Consultants:

Most audit failures don’t come from major violations - they come from poor structuring of financial data.

In practice, businesses often:

• record revenue without mapping it to qualifying activity categories
• lack documentation to justify Free Zone substance
• rely on basic bookkeeping that does not meet audit standards

Our approach focuses on:

• building audit-ready accounting systems from day one
• aligning financial reporting with corporate tax logic, not just accounting
• conducting pre-audit reviews to identify risks early

This reduces audit friction and significantly improves the chances of retaining QFZP status.

Penalties You Should Not Ignore

Under the current UAE tax framework:

• late filing penalties can start from AED 500 per month
• unpaid tax may incur 14 percent annual interest

Combined with the risk of losing the 0 percent rate, the cost of non-compliance adds up quickly.

Why MD 84 Matters for the Future

MD 84 is part of a broader shift in the UAE:

• stronger regulatory oversight
• alignment with global tax standards
• increased transparency for Free Zone incentives

For businesses, this means one thing:

compliance is no longer optional - it is a competitive advantage

Companies that get this right early will operate with far less risk going forward.

Conclusion

The 2026 filing cycle is a defining moment for Free Zone businesses.

With MD 84 in effect, audited financial statements are no longer just part of good governance - they are the foundation of your tax position.

If you want to:

• keep your 0 percent tax rate
• avoid penalties
• stay audit-ready

then the strategy is simple:

prepare early, structure properly, and treat compliance as a core business function.

Frequently Asked Questions (FAQ)

Do all QFZPs need audited financial statements?

Yes. Every Qualifying Free Zone Person must prepare audited financial statements regardless of revenue.

Is there any exemption threshold?

No. Even companies with zero revenue must comply.

What is MD 84?

It is a ministerial decision that mandates audited financial statements for certain entities, including all QFZPs.

Does MD 84 replace previous rules?

Yes. It replaces MD 82 of 2023.

What happens if I fail to submit audited statements?

You lose QFZP status and may be subject to 9 percent corporate tax for five years.

What is the 2026 filing deadline?

30 September 2026 for the 2025 tax period.

What accounting standards must be used?

International Financial Reporting Standards (IFRS).

Who can conduct the audit?

A UAE-licensed auditor approved by the Ministry of Economy.

What is the de minimis threshold?

Non-qualifying income must not exceed 5 percent of total revenue or AED 5 million, whichever is lower.

Are transfer pricing rules applicable?

Yes. Related party transactions must comply with the arm’s length principle.

What penalties apply for non-compliance?

Penalties may include monthly fines starting at AED 500 and interest on unpaid tax.

When should I start audit preparation?

Ideally at the beginning of the financial year or at least several months before the filing deadline.

In today’s tightly regulated real estate market, property agents are no longer just deal-makers—they are frontline gatekeepers against financial crime. A Suspicious Transaction Report (STR) is one of the most critical compliance tools available, especially in high-risk sectors like real estate.

If you’re a broker, developer, or agency operating in the United Arab Emirates, understanding STR red flags is not optional—it is essential for protecting your business, your clients, and your license.

Key Takeaways

• Real estate is classified as a high-risk sector for money laundering in the UAE, requiring strict monitoring.
• Property agents fall under Designated Non-Financial Businesses and Professions (DNFBPs) and must comply with AML laws.
• An STR must be filed when there are reasonable grounds for suspicion - not proof.
• Red flags include cash-heavy transactions, unclear source of funds, shell companies, and unusual buyer behavior.
• STR obligations apply even to attempted transactions, not just completed deals.
• Failure to report suspicious activity can result in significant fines and regulatory penalties.

What Is a Suspicious Transaction Report (STR)?

A Suspicious Transaction Report is a formal submission to the UAE Financial Intelligence Unit when a transaction appears linked to money laundering, terrorism financing, or other financial crimes.

Here is the key point many agents miss:

You do not need proof. You only need reasonable suspicion based on observed red flags.

This means your judgment, documentation, and internal processes matter just as much as the transaction itself.

Why Real Estate Is High-Risk for Financial Crime

Real estate is attractive to criminals because it allows large sums of money to be absorbed and disguised in legitimate assets.

In the UAE, authorities highlight several reasons why property transactions are particularly vulnerable:

• high-value deals that can mask illicit funds
• ability to manipulate pricing (overvaluation or undervaluation)
• use of complex ownership structures
• rapid buying and selling to “clean” money

These factors make vigilance from property agents absolutely critical.

STR Obligations for Property Agents in the UAE

Property agents, brokers, and developers are classified as DNFBPs. This means you are legally required to:

• conduct customer due diligence
• verify beneficial ownership
• monitor transactions
• report suspicious activity via goAML

These obligations are governed by Federal Decree-Law No. 10 of 2025 and related regulations.

Ignoring or misunderstanding these duties can lead to serious consequences—not just financial penalties, but reputational damage.

Common STR Red Flags for Property Agents

Let’s break this down into practical categories you’ll actually encounter in day-to-day transactions.

Customer-Related Red Flags

These are early warning signs during onboarding or client interaction:

• reluctance to provide identification documents
• inconsistent or vague personal or financial information
• use of third parties without clear justification
• politically exposed persons (PEPs) with unusual transaction patterns
• no clear link to the property location

These behaviors often indicate attempts to hide identity or source of funds.

Transaction-Related Red Flags

This is where things get more obvious - and risky:

• large cash payments, especially unusual for the client profile
• transactions structured just below reporting thresholds
• rapid resale of property at significantly different values
• multiple purchases within a short period
• payments from multiple unrelated sources

These patterns are classic indicators of money laundering techniques such as layering and structuring.

Ownership and Structural Red Flags

This category often requires deeper investigation:

• use of shell companies with unclear beneficial ownership
• complex multi-layered ownership structures
• offshore entities in high-risk jurisdictions
• nominee arrangements with no clear business purpose

These setups are frequently used to conceal the true owner of funds.

Behavioral Red Flags During Transactions

Sometimes the strongest signals come from behavior:

• urgency to close deals unusually fast
• resistance to compliance checks
• sudden changes in transaction details or parties involved
• requests to redirect funds to unrelated accounts

When behavior does not match the transaction context, it is worth escalating internally.

STR Red Flags Summary Table

How to Respond When You Identify Red Flags

Spotting a red flag is only step one. What you do next is what regulators care about.

Do Not Tip Off the Client

Informing a client that you suspect them is illegal and can lead to penalties.

Conduct Internal Review

Document everything. Assess whether the activity aligns with the client’s profile.

Escalate to MLRO

Your Money Laundering Reporting Officer evaluates whether an STR is required.

File the STR Promptly

Delays are one of the most common compliance failures.

Fintrack Tax Consultants Insight 

From a practical compliance standpoint, one issue we often see at Fintrack Tax Consultants is not the lack of awareness - but inconsistent execution.

Many agencies:

• rely on static AML policies without real-time monitoring
• fail to connect customer due diligence with transaction behavior
• escalate too late, especially in fast-moving property deals

Our approach focuses on integrating AML into daily operations, not treating it as a checkbox exercise.

This includes:

• building transaction monitoring workflows tailored to real estate
• aligning STR narratives with regulatory expectations
• training teams to recognize patterns, not just isolated red flags

In short, compliance should feel like part of your sales process—not something separate from it.

How Fintrack Tax Consultants Can Help

While many firms struggle with AML compliance, the right support can simplify the process significantly.

Fintrack Tax Consultants can assist with:

• STR preparation and submission guidance
• AML policy development tailored to real estate
• goAML registration and compliance setup
• staff training on identifying red flags
• ongoing advisory to stay aligned with UAE regulations

The goal is simple: help you stay compliant without slowing down your business.

Best Practices to Stay STR-Compliant

Here’s what high-performing agencies consistently do:

• maintain updated AML policies
• conduct regular staff training
• implement risk-based customer assessments
• document all decisions and investigations
• review transactions continuously, not just at onboarding

Consistency is what separates compliant firms from those at risk.

The Cost of Ignoring STR Red Flags

Let’s be real - this is not just a regulatory issue.

Failure to report suspicious activity can result in:

• fines reaching millions of dirhams
• license suspension or revocation
• reputational damage that affects future deals

And in a relationship-driven industry like real estate, trust is everything.

Conclusion

Suspicious Transaction Report red flags are not just theoretical concepts - they show up in everyday property deals more often than many agents realize.

The difference between a compliant agency and a risky one comes down to awareness, systems, and action.

If you take one thing from this:

You don’t need certainty to act - you need awareness and timely judgment.

That mindset alone can protect your business in a highly regulated market.

Frequently Asked Questions (FAQs)

What triggers an STR for property agents?

Any transaction with reasonable suspicion of financial crime, even without proof, should trigger an STR.

Do I need proof before filing an STR?

No. Suspicion is enough under UAE law.

Are real estate agents required to file STRs?

Yes. They are classified as DNFBPs and must comply with AML regulations.

What is goAML?

It is the UAE platform used to submit STRs to the Financial Intelligence Unit.

Can attempted transactions require STR reporting?

Yes. Even incomplete or canceled transactions may require reporting.

What are the most common red flags?

Cash-heavy deals, unclear ownership, shell companies, and unusual transaction patterns.

What happens if I fail to report?

You may face fines, legal penalties, and reputational damage.

Can I inform the client about the STR?

No. This is considered “tipping off” and is illegal.

How quickly should an STR be filed?

Immediately after suspicion arises - delays can lead to compliance issues.

Are cash transactions always suspicious?

Not always, but large or unusual cash payments are strong red flags.

What role does beneficial ownership play?

It helps identify the true owner behind transactions - key in detecting hidden risks.

How can agencies improve STR compliance?

Through training, better monitoring systems, and expert advisory support like Fintrack Tax Consultants.

Introduction

In the UAE, Anti-Money Laundering (AML) compliance is no longer just a regulatory requirement - it is a core operational obligation for businesses. With stricter enforcement, updated laws, and increasing inspections in 2026, companies are now expected to implement fully functional AML frameworks, not just basic documentation.

This is where an AML compliance UAE consultant becomes critical. Whether you are a real estate broker, accounting firm, or corporate service provider, working with a specialist ensures your business meets regulatory expectations and avoids costly penalties.

Key Takeaways

• AML compliance is mandatory for UAE businesses classified as DNFBPs
• The framework is based on Federal Decree-Law No. 10 of 2025
• Businesses must implement risk assessments, due diligence, monitoring, and reporting systems
• goAML registration and reporting is required for suspicious transactions
• UAE regulators are enforcing strict inspections and penalties in 2026
• AML consultants help businesses achieve audit-ready compliance, not just documentation

What Is AML Compliance in the UAE?

AML compliance refers to the set of legal obligations, internal controls, and monitoring systems that businesses must implement to prevent financial crimes such as money laundering and terrorism financing.

It applies to:

• financial institutions
• real estate brokers
• accountants and auditors
• corporate service providers
• lawyers and legal consultants

These are classified as Designated Non-Financial Businesses and Professions (DNFBPs).

Why AML Compliance Is Critical in 2026

The UAE has significantly strengthened its AML framework with:

• updated laws and executive regulations
• increased inspections across industries
• higher penalties for non-compliance

Authorities have imposed millions in fines on DNFBPs, especially in high-risk sectors like real estate.

The focus is now on effective implementation, not just having policies on paper.

Who Needs an AML Compliance Consultant in UAE?

AML consultants are essential for businesses such as:

• real estate brokers and developers
• accounting and audit firms
• company formation consultants
• precious metals and luxury goods traders
• legal and advisory firms

These sectors deal with high-value transactions and cross-border clients, making them more vulnerable to financial crime risks.

Core AML Compliance Requirements in UAE

All of these must be documented and actively implemented—not just created.

Role of an AML Compliance Consultant

An AML consultant helps businesses:

• design AML policies aligned with UAE law
• conduct Institutional Risk Assessments (IRA)
• implement customer due diligence processes
• register and manage goAML reporting
• prepare for AML audits and inspections
• train employees on compliance procedures

In simple terms, they turn legal requirements into practical systems.

goAML and Reporting Obligations

All regulated businesses must:

• register on the goAML platform
• report suspicious transactions (STRs/SARs)
• maintain accurate reporting records

Failure to report or incorrect reporting can lead to regulatory penalties and investigations.

Common AML Compliance Challenges

Businesses often struggle with:

• incomplete risk assessments
• weak documentation
• lack of internal controls
• poor transaction monitoring
• untrained staff
• delayed or incorrect reporting

These gaps are the most common reasons for penalties.

A Practical Insight from Fintrack Tax Consultants

A key approach emphasized by Fintrack Tax Consultants is “implementation-based compliance.”

Many businesses create AML policies but fail during inspections because they cannot demonstrate actual execution.

Instead, the focus should be on:

• aligning AML procedures with daily operations
• maintaining real-time monitoring logs
• documenting every compliance action
• preparing audit-ready evidence at all times

This ensures businesses are not just compliant - but inspection-ready.

How to Choose the Right AML Consultant in UAE

When selecting a consultant, consider:

• experience with DNFBP sectors
• understanding of UAE AML laws and updates
• ability to implement—not just advise
• support for goAML and reporting
• audit and inspection preparation expertise

Choosing the right consultant can significantly reduce compliance risks.

AML Compliance Process Overview

Frequently Asked Questions

What is AML compliance in the UAE?

It is a set of legal requirements to prevent money laundering and financial crime.

Who needs AML compliance in the UAE?

DNFBPs such as real estate brokers, accountants, and consultants.

Is AML compliance mandatory?

Yes, it is a legal requirement under UAE law.

What is goAML?

A reporting platform for suspicious transactions in the UAE.

What does an AML consultant do?

They help businesses implement and manage AML compliance systems.

What is Customer Due Diligence (CDD)?

It involves verifying client identity and assessing risk.

What is Enhanced Due Diligence (EDD)?

Additional checks for high-risk clients.

What are the penalties for non-compliance?

Fines, license suspension, and regulatory action.

How often should AML systems be updated?

Regularly, especially when regulations change.

Do small businesses need AML compliance?

Yes, if they fall under DNFBP classification.

Can AML compliance be outsourced?

Yes, many businesses use consultants for this - like Fintrack Tax Consultants.

What is the biggest AML risk for businesses?

Failure to detect and report suspicious transactions.

Conclusion

AML compliance in the UAE is now a critical business requirement, especially in 2026 where enforcement is stronger than ever. Companies must go beyond basic compliance and build systems that are actively monitored, documented, and audit-ready.

Working with an experienced AML compliance UAE consultant like Fintrack Tax Consultants ensures that your business not only meets regulatory requirements but operates with confidence in an increasingly regulated environment.