At a Glance
What Is a "Letter of Concern – Immediate Enhancements Required"?
A Letter of Concern – Immediate Enhancements Required is an official regulatory notice issued by the UAE Ministry of Economy & Tourism to Designated Non-Financial Businesses and Professions (DNFBPs) when Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) compliance deficiencies are identified during an off-site review.
The letter compels the regulated entity to take urgent corrective actions within a strict 30-day timeframe, failing which administrative sanctions and financial penalties apply under Federal Decree-Law No. 10 of 2025 and related Cabinet Resolutions.
If your business has received this notice, the remediation clock has already started. At Hussain Al Shemsi Chartered Accountants, our AML/CFT compliance specialists are experienced in guiding UAE businesses — from real estate and precious metals dealers to accounting and legal professionals — through the full remediation process, from the initial declaration letter to final submission of evidence.
Who Issues This Letter?
The Ministry of Economy & Tourism issues this notice following an off-site AML/CFT review. It enforces the requirements of Federal Decree-Law No. 10 of 2025 on Anti-Money Laundering, Combating the Financing of Terrorism and Proliferation Financing, together with relevant Cabinet Resolutions including Cabinet Resolution No. 134 of 2025.
Why DNFBPs Receive This Letter
The Ministry issues the Letter of Concern when an off-site review reveals significant gaps in a business's AML/CFT and sanctions controls. Common triggers include:
Outdated AML Policies
AML/CFT and CPF policies not updated to reflect current regulatory requirements, including proliferation financing risks.
Weak Sanctions Screening
Failure to subscribe to EOCN notifications or screen all clients against UAE Local Terrorist Lists and UN Security Council Sanctions Lists.
Incomplete CDD / EDD
Customer Due Diligence and Enhanced Due Diligence procedures not aligned with Cabinet Resolution No. 134 of 2025 requirements.
SAR/STR Reporting Failures
Inadequate documentation of red flags, deficient suspicious activity or transaction reports, and gaps in internal escalation records.
goAML Registration Issues
No goAML registration, or registration completed with an invalid or personal email address rather than an active official company email.
Inadequate Staff Training
No periodic AML/CFT training, missing refresher sessions for existing staff, and absence of documented attendance logs and training materials.
What the Ministry Requires Within 30 Days
Upon receipt of the Letter of Concern, the following corrective actions are mandatory:
Submit the Declaration Letter (Within 48 Hours)
Draft and submit an officially signed Declaration Letter to the Ministry, committing to implement all corrective actions within 30 days. Senior Management approval is required.
Update AML/CFT Policies & Procedures
Revise internal policies to align with Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025, incorporating proliferation financing controls and updated CDD/EDD workflows.
Register on goAML & Activate Reporting
Ensure goAML registration is complete using a valid, active official company email. Establish clear red flag identification and reporting procedures for SAR, STR, HRC, HRCA, CNMR, and PNMR.
Implement Sanctions Screening Controls
Subscribe to EOCN notifications, screen all existing, prospective, and historical customers (up to 5 years post-relationship), and document all screening outcomes with analyst notes.
Conduct Customer Risk Assessments
Update CDD, EDD, and Business-Wide Risk Assessment procedures. Classify all customers by ML/TF/PF risk level and apply the appropriate level of due diligence accordingly.
Deliver Staff Training & Document Evidence
Conduct role-specific AML/CFT and CPF training, including induction for new staff and refreshers for existing employees. Retain attendance logs and training materials as evidence.
Submit Compliance Evidence to the Ministry
Consolidate and submit a complete evidence package to the Ministry within 30 days, confirming that all corrective actions have been effectively implemented.
Immediate Response Timeline
Effective remediation requires a structured, phased approach from the moment the Letter of Concern is received:
Risks of Non-Compliance
Failing to address the Letter of Concern within the 30-day deadline exposes the regulated entity to serious consequences:
Administrative Fines
Formal financial penalties under Federal Decree-Law No. 10 of 2025, which can be significant for continued or repeated non-compliance.
Business Disruption
Regulatory action causes operational disruptions, reputational damage, and revenue loss affecting the continuity of business activities.
Escalated Enforcement
Ignoring the notice triggers immediate escalation to formal legal and administrative enforcement actions under UAE AML/CFT legislation.
How Hussain Al Shemsi Chartered Accountants Can Help
With over 15 years of experience serving UAE businesses across diverse sectors, Hussain Al Shemsi Chartered Accountants provides specialist AML/CFT regulatory compliance support tailored for DNFBPs. Our team includes qualified Chartered Accountants and compliance advisors with deep knowledge of UAE AML/CFT law, Ministry of Economy expectations, and practical remediation experience.
Our AML/CFT compliance support services for DNFBPs include:
- AML/CFT Compliance Assessment — Identifying critical gaps across all seven regulatory compliance areas against current UAE law
- Policy Drafting & Update — Revising or creating AML/CFT, CPF, CDD/EDD, sanctions, and reporting policies to meet Federal Decree-Law No. 10 of 2025 requirements
- goAML Registration & Reporting Support — Assisting with correct registration and establishing SAR/STR/HRC/CNMR/PNMR reporting procedures
- Sanctions Screening Setup — EOCN subscription, screening workflows, and TFS documentation frameworks
- Customer Risk Assessment — Business-wide risk assessments and customer risk classification aligned with Cabinet Resolution No. 134 of 2025
- Staff Training Delivery — Role-specific AML/CFT and CPF training with documented attendance records
- Declaration Letter Preparation — Ministry-aligned declaration letters ready for senior management sign-off
- Evidence Package Submission — Compiling and organising all remediation evidence for Ministry submission within 30 days
