Export Controls in the UAE: How to reduce risks

Mainstream

Management of export control risks in the UAE is not just about filling out declarations. It's the architecture of a safe deal.

The question is not whether the goods can be shipped today. The big question is whether this deal will result in asset lockdowns, criminal prosecutions of officials, or disconnection from the dollar system tomorrow.

Effective compliance in Dubai is built on three levels of protection, which we consider as the Three Lines of Defense.

1. Classification of goods: Is the product subject to export restrictions in the United States, the EU or the UAE?
2. Verification of the counterparty and end-use: Who is the buyer and how will the product be used?
3. Jurisdiction screening: Does the transaction create a “sanctions link” with sanctioned persons or countries?

If at least one of these levels is missed, the company’s location in Dubai will not save from extraterritorial enforcement, and the free zone status will not become an indulgence for violating the US export control regime or EU regulations.

When Businesses in the UAE Need In-depth Study of Export Control Measures

Analysis and reduction of export control risks are critical if:

• the company trades in dual-use goods (electronics, sensors, aviation parts);
• business is based in the UAE, but the supply chain involves sub-sanctioned jurisdictions (for example, transit through Iran, the final buyer in Russia or Belarus);
• activities related to military-technical cooperation or procurement by the UAE Ministry of Defence (controlled by the End-User Statement);
• Contractors are companies registered with DMCC, JAFZA or DAFZA, but with an unknown ultimate beneficiary;
• The transaction is structured as re-export from the EU to third countries via Dubai.
• Corresponding bank blocks payment without explanation (De-risking);
• The product contains American components, technology or software (the de minimis rule and the FDPR foreign direct product rule).
• The company receives red flags from the compliance department.

The Mistake Most Traders Make in the UAE

Many companies start with the statement:

We are in Dubai and have a neutral jurisdiction.

That's a dangerous misconception.

The right approach: The UAE is the largest international hub where the interests of the US, the EU, China and Russia overlap. Accordingly, each trader is automatically targeted by OFAC, BIS and European regulators, even if the goods do not physically touch the territory of the United States.

Sometimes the best way to reduce risk is to voluntarily abandon a trade. Sometimes, you can apply for an export license from the Bureau of Industry and Security (BIS). Sometimes, it is necessary to restructure the logistics route. Never close your eyes to the red flag.

Step 1. Check the classification of goods

The first thing to do before signing a contract is to determine what exactly from the point of view of law your product is.

Key issues for classification:

• Does the Export Control Classification Number (ECCN) have an Export Control Classification Number?
• Is it on the EU Dual-Use List (Annex I to Regulation 2021/821)?
• The product is subject to Federal Decree-Law No. 43 of 2021: UAE Dual-Use Goods Control?
• What percentage of U.S. content is in the final product (the 25%, 10%, or 0% rule for sanctioned destinations)?
• Is the product a luxury item under the EU sanctions package?
• Is it necessary to obtain a license from the Executive Office for Control and Non-Proliferation (EOCN) in the UAE?

If the classification is incorrect, even an innocent supply of microelectronics can be qualified as an export control violation with all the ensuing consequences.

Step 2. Proof of legality (Know Your Transaction)

For international trading in the UAE, one invoice is not enough. I need a compliance file.

What needs to be prepared:

• a contract with a detailed description of the end-use statement;
• BIS export license if the goods are of American origin;
• End-User Certificate (EUC) for military or dual-use goods
• a written assurance of the counterparty that there are no plans for re-export to prohibited jurisdictions;
• transaction history of interaction with the buyer;
• proof of verification of the consignee and the invoice issuer (including through systems similar to TWW);
• Conclusion of the country of origin of the goods (Certificate of Origin);
• copies of transport documents with route tracking.

Particularly valuable are the documents in which the buyer confirms under threat of liability that he is not associated with the armed forces of the sanctioned states and will not use the equipment for military purposes.

Step 3. Determine the applicable law (Extraterritoriality)

Legally, the transaction through the UAE is not only subject to local laws. That's a key risk.

You are subject to:

• The U.S. Export Control Regulations (EAR): If the product is manufactured in the United States, has American components, or is a direct product of American technology.
• OFAC Sanctions Programs: Individuals on the SDN list should not benefit from the transaction (the 50% rule).
• EU regulations: If the product or technology is of European origin, re-export restrictions are in place, especially in the context of the latest sanctions packages requiring the existence of a No Russia Clause.
• UAE legislation: Federal Decree-Law No. 20 of 2018, the Anti-Money Laundering Act and the Central Bank’s by-laws require targeted financial sanctions (TFS).

A mistake at this stage leads to the fact that a trader in Dubai unwittingly becomes a link in circumventing sanctions, which entails the risk of secondary sanctions and the loss of banking services.

Step 4. Check the jurisdiction and banking channels

Even the perfect deal collapses if the payment doesn’t go through.

In the UAE, it is necessary:

• Ensure that a correspondent bank (often US, German or Swiss banks) does not block payment;
• Check whether the beneficiary’s bank is under sanctions;
• Avoid using “layer” companies in risk jurisdictions without an explicit business purpose;
• provide the bank with a complete dossier on the transaction (KYC, KYT, Shipping docs) before sending the payment;
• Even cryptocurrency payments through Dubai-based providers (VARA-licensed) now require screening for sanctions.

Payment through UAE banks that are not connected to the dollar system (for example, settlements in yuan or dirhams) reduces, but does not exclude the risk of secondary sanctions.

Step 5. Select a risk management strategy: Licensing, Opt-out or Structuring

Export license (BIS/EOCN)

Direct application for a license is a tool for legalizing risk. This is appropriate if:

• The transaction is strategically important;
• there are reasons to believe that the end use is not contrary to public policy;
• Export control can be completed through an application to the EOCN office in Abu Dhabi or a BIS license (USA);
• The product is formally subject to restrictions, but is related to humanitarian, medical or civilian projects.

Voluntary withdrawal from the transaction (Red Flag Resolution)

Sometimes the only right decision is rejection. A trader in the UAE should be able to say no if:

• The contractor hides the final recipient;
• The delivery route is illogical (for example, household electronics are transported through transit zones of military conflicts).
• offer an atypical payment scheme through a chain of third parties;
• The buyer company was registered a month ago in a free zone without an office or staff.

Structuring the transaction

Legal structuring allows risk sharing. This may include:

• division of the export contract for the supply of goods and the supply of services (non-sanction nature);
• - the allocation of logistics into a separate company with special compliance regulations;
• use of tolling schemes with retention of title to prevent unauthorized re-export by the buyer.

Step 6. Implementing a Counterparty Risk Scoring System

Mass screening in the UAE is not possible without automation, but manual analysis is critical.

The counterparty should be evaluated by the risk matrix:

• Country Risk (Geographic Risk): Is there a connection with DPRK, Iran, Syria, Crimea, DPR/LHP, Russia, Belarus, Venezuela, Myanmar?
• Industry Risk (Sectoral Risk): Is the buyer connected to the military-industrial complex, intelligence, state security?
• Personal Risk (Ownership Risk): Are there any beneficiaries on the SDN, SSI or UK Sanctions List?
• Transactional risk: Is payment offered in cash or through non-bank transfer systems (hawala), which requires immediate reporting of a suspicious transaction to the UAE FIU?

Step 7. Consideration of the Transaction Protections (Sanctions Clause)

The contract should protect you from the actions of the counterparty.

An international supply contract governed by DIFC or ADGM law must include:

• The Sanctions Clause (Sanctions Clause): The right to immediately terminate the contract and suspend performance without any liability if the buyer is sanctioned or violates export controls.
• Representations and Warranties: The buyer assures that he is not under sanctions and does not plan to violate export restrictions.
• Guarantee of damages (Indemnity): The Buyer shall compensate all losses incurred by the Supplier, including OFAC/BIS fines, arising from incorrect data or breach of re-export restrictions.
• Right to end-use audit: The ability to request confirmation of the location of the goods in the post-shipment period.

Step 8. Compliance within the company (ICP)

In the eyes of regulators, the absence of an internal compliance program (ICP) at a company operating in Dubai with risky goods is an aggravating circumstance.

Minimum ICP Elements by EOCN and International Standards:

• Appointment of the Executive Officer for Export Control (ECO);
• written procedures for classifying goods;
• Map of order verification processes;
• regular training of staff;
• the procedure for storing documentation (at least 5 years);
• The mechanism of escalation in the detection of red flags.

Court or OFAC: What is worse for business in the UAE

The choice is simple: Contract risk can be assessed in money, and the sanction risk has fatal consequences for the corporate structure in the UAE.

How to strengthen the company’s position before the transaction

The best protection starts at the design stage of the business model in the UAE.

It is recommended:

• clearly define the company profile in the DMCC/JAFZA license;
• Avoid the vague wording of “general trading” that leads to increased attention of banks.
• to build a corporate structure separating sanction jurisdictions from pure business;
• use the databases of Dubai Customs for cargo verification;
• implement a voluntary self-disclosure (VDI) practice with the BIS or OFAC if a breach is detected.

The treaty in international trade is written not only for record profits, but also for survival in an era of geopolitical turbulence.

Typical mistakes of traders in the UAE during export control

1. The UAE company checks the direct counterparty, but does not see that 51% of its shares are owned by the person on the SDN list.
2. Even if the goods are made in China but contain American chips regulated by the EAR, their re-export to sanctioned countries requires a license.
3. Blind trust in the Paper end-user certificate does not protect against OFAC investigation if the actual use was military or sanctioned.
4. Using USDT (especially on TRON protocols) to bypass bank compliance when trading through the UAE is a high risk factor and can lead to a wallet lock.
5. Companies registered in the UAE free zones without a real presence (substance) are considered by foreign regulators as “dumbs” to circumvent sanctions.

Checklist of exporter to the UAE

Before shipping the goods, you must answer 15 questions:

1. Is there an ECCN or EU Dual-Use code for the product?
2. Is an EOCN license required in the UAE for this nomenclature?
3. What is the percentage of American content in a product?
4. Who is the end user and does it match the customer?
5. Is the delivery route logically inexplicable?
6. Is the counterparty checked on the SDN, SSI, EU Consolidated List?
7. Are there persons in the chain of ownership with passports of the sanctioned states?
8. Is the invoice price appropriate to the market (the problem of transfer pricing and hidden advances)?
9. Is there a section on sanctions assurances in the treaty?
10. Which bank will handle the payment?
11. Is the package of documents ready to justify the legality of the cargo to the bank?
12. Who's the consignee?
13. Does insurance cover allow for military and sanctions risks?
14. Will there be consequences in the form of secondary sanctions against management?
15. Where can the goods be re-exported by the buyer in the future?

What a strong strategy for protecting a deal looks like

The UAE’s strong risk reduction strategy is based on five pillars:

1. Regulatory Intelligence: Continuous monitoring of BIS updates, EU Regulations and UAE Cabinet Lists.
2. Contractual Shield Use of sanctions clauses and right of ad nutum termination when changing the status of the buyer.
3. Supply Chain Visibility: Complete transparency of transportation, excluding transshipment in prohibited ports.
4. Compliance Audit – Regular external audit of compliance procedures by law firms specializing in UAE and US sanctions law.
5. A clear plan of action (including communication with attorneys) in case of a U.S. Customs lockdown or a request from OFAC.

FAQ

Is it legal to trade dual-use goods through the UAE?

Yeah. This is legal provided that the correct classification, licensing in the EOCN and strict compliance with end-use regulations are in place. Without a compliance program, this carries high risks.

What is more dangerous for a trader in Dubai: Violation of UAE local law or OFAC sanctions?

From a practical point of view, OFAC secondary sanctions (SDN inclusion) have an immediate effect: Asset freezes and business paralysis around the world. Violation of UAE law entails domestic responsibility, but US sanctions are global isolation.

Is it possible to supply European goods to the UAE if the final market is Russia?

Direct re-export of sanctioned goods and technologies from the EU via Dubai to Russia is prohibited. Regulation (EC) No. 1233/2014 and No Russia Clause. Structuring transactions to circumvent this prohibition is an offence.

What if a bank in the UAE refuses to make a “clean” payment?

It is necessary to provide the bank with the conclusion of an independent legal counsel on sanctions law (Legal Opinion) and a complete dossier on the transaction (DD file), proving the legality of the origin of the funds and the final destination of the goods.

Which Free Zones in the UAE Have the Strict Compliance?

The DMCC, DIFC and ADGM are the most proactive and work closely with international regulators. This creates a higher standard of security for businesses, but requires perfect documentation.

Can the manager be held accountable personally?

Yes, within the framework of the American sanctions programs, both administrative and criminal liability of individuals who participated in the organization of violations is provided.

Related services

• Sanctions, Export Controls & International Compliance
• International Trade, Distribution & Cross-Border Transactions
• Corporate Investigations, Regulatory Investigations & Business Integrity
• International Regulatory Risk & Strategic Advisory
• Commercial Contracts (including Sanctions Clauses)

Related material

• How to structure UAE deal to avoid secondary sanctions
• Red Flags for export: What the regulator is paying attention to
• International Compliance for DMCC and JAFZA Residents
• Asset Tracing in the UAE: How to find assets of a debtor subject to sanctions
• EOCN Licensing in the UAE: practicalities
• How to include No Russia Clause in the export contract
• Banks in Dubai are blocking accounts: business strategy

Conclusion

Reducing the risks of international trade in the UAE is not a bureaucratic formality, but a commercial strategy for asset protection.

Dubai as a global hub has a dual nature: Unique logistical opportunities are opening up here, but invisible red lines of export control from different jurisdictions converge.

A strong position is based on a legally verified classification of goods, surgically accurate verification of the counterparty, a “booked” sanctions agreement and an impeccable compliance dossier in the bank.

In the era of global sanctions confrontation, the winner is not the one who was able to deliver cargo to Iran or Russia faster, bypassing roadblocks. The winner is the one who builds a transparent and legally sustainable business model that will continue to work at any level of regulatory pressure.