Supply Chain Compliance in the UAE

Mainstream

Supply chain compliance in the UAE is not a customs declaration. This is a strategy to protect businesses from secondary sanctions and criminal liability.

The main question is not how to clear the goods faster. The main question is whether the goods will reach the final buyer without violating export restrictions of the EU and the United States, and whether the bank will block payment on the chain.

Therefore, effective supply chain compliance in Dubai is based on three checks:

• What is the true geography of the movement of goods from the manufacturer to the end user?
• Are there hidden sanctioned persons or structures in the chain?
• Whether the documentation corresponds to the real nature of the transaction.

If these issues are not resolved at the start, businesses risk not just freezing assets, but completely losing access to dollar settlements and Western markets.

When a supply chain audit is needed

In-depth compliance of the UAE supply chain is necessary if:

• The goods are listed on the EU or US dual-use goods lists (especially electronics and equipment).
• The supply route includes transit through free trade zones (JAFZA, DMCC, DAFZA).
• the final recipient is located in the jurisdictions from the FATF list (grey or black list);
• re-export via Dubai to third countries (especially Iran, Afghanistan, Syria);
• settlements are in dirhams or yuan, but the corresponding bank is American;
• Regular changes occur in the founders of the contractor company;
• The supplier or buyer insists on excessive confidentiality;
• The transaction includes companies registered less than six months ago;
• The structure of the transaction involves payment through a chain of unrelated legal entities.

The mistake most companies in the UAE make

Many companies start with the question:

Does my product meet the local Dubai Customs requirements?

That's the wrong first question. UAE Customs may skip the goods, which will then be seized or blocked due to a violation of US re-export rules.

The right question is:

“Is there any tokens in my supply chain that would make the correspondent bank or OFAC consider the transaction a sanctions circumvention operation?”

Sometimes it is easier to legalize the delivery through changing the specification of the product. Sometimes, by completely abandoning a deal with a specific buyer. Sometimes through in-depth compliance. International restrictions do not require technical design, but strategic risk management.

Step 1. Classification of goods

The first thing to do is not to check the buyer, but to classify the goods.

The UAE does not have its own strict lists of dual-use goods, which are completely similar to the US or the EU. This creates the illusion of security.

It is necessary to determine:

• HS Code and its compliance in the USA, EU and UAE;
• - entering the lists of US BIS (CCL, EAR99), USML, or Dual-Use Regulation of the EU;
• the need to obtain an export license from the country of origin of the product (for example, a BIS license for re-exporting from the UAE of American equipment with a share of American components more than 10-25%);
• Applicability of the de minimis rule to U.S. components
• the presence of specific technical characteristics of the product, transferring it from the category of civil to the category of "sensitive".

If the product is misclassified, the entire subsequent chain of compliance will be built on a false basis.

Step 2. Conducting Due Diligence of Contractors

It is easy to register a company in the UAE. This is used to create multi-layered structures.

It is not enough to check the direct buyer. It is necessary:

• Identify the beneficial owners (UBOs) of all parties to the transaction;
• analyze the ownership structure to end individuals;
• request and verify licenses from DMCC, DED or other free zone;
• Check the address (virtual office or real presence);
• study the business profile to identify signs of a “dummy company” (lack of personnel, specialized equipment, historical experience in trading this type of product);
• Links to high-risk jurisdictions.

Special attention should be paid to the affiliation with Iranian or Russian structures that have been subject to blocking sanctions of SDN-lists.

Step 3. Verify the end user and end use

This is the most difficult and most important stage in a hub like Dubai. The recipient may be an intermediate.

It is necessary to obtain and verify:

• End-Use Certificate (End-Use Certificate/Statement)
• the actual address of the equipment operation (not a wasteland or a residential building);
• the scope of the end user’s activities (excluding the military-industrial complex, nuclear program and intelligence structures);
• Procurement history (whether a company of this size can afford a given volume or type of product)
• Licenses and import permits in the country of final destination;
• Transportation route (unexplained arrivals to third countries – red flag)

In the UAE, the practice is widespread when goods “settle” in a free zone on paper, and physically without proper control goes further. You need to make sure that the cargo left the UAE in the stated direction.

Step 4. Checking the sanctions clauses in contracts

International compliance is often crumbling due to template contracts.

Contracts subject to UAE law or DIFC must contain:

• Strong representations and warranties of non-membership of the sanctions lists and of the final use;
• the right to unilateral rescission or suspension of performance in the event of new sanctions;
• the contractor’s unconditional obligation to compensate all losses, including reputational losses and penalties imposed by Western regulators;
• a clause on the exporter’s right to refuse delivery without penalty if the performance of the contract would violate EU or US export controls, despite applicable UAE law;
• mechanism of automatic termination of the contract if any of the parties falls under blocking sanctions.

It is important that these clauses are enforceable in local courts (including the DIFC courts as the most pro-English).

Step 5. Developing white transport and customs documentation

The UAE is the largest re-export center. Zones like Jebel Ali (JAFZA) are designed for fast transshipment. High speed operations often harm compliance.

Correct documentation should avoid ambiguity:

• invoices and packing sheets must contain a detailed technical description, serial numbers and exact cost;
• Bills of lading and air waybills must indicate the real sender and the final recipient, avoid specifying financial intermediaries by order of without a clear understanding of the role of each party in the transaction;
• The UAE customs declaration must be fully consistent with Mirsal 2 (e-Customs) data.
• It is necessary to exclude double sets of documents (one for the bank, the other for customs). This is a direct path to fraud charges.

Step 6. Controlling financial flows

UAE banks that deal with US dollars are extremely sensitive to compliance risks. They use automated transaction screening systems.

To protect payments, it is necessary to:

• ensure full matching of the payment purpose with the contract and invoices (avoid vague wording);
• avoid splitting payments (structuring / smurfing) and using funds from third parties without a legal and economic link to the contract;
• be ready to provide the bank with a full package of documents on request, including certificates of origin, transport documents and passports of transactions, confirming that the cargo physically crossed the border;
• When using cryptocurrencies or alternative payment systems (hawala), understand that this automatically increases the risks of the scheme being recognized as illegal by Western regulators.
• screen all parties involved in the financial chain (including the buyer’s bank and the intermediary bank) for being on the sanctions lists.

Step 7. Mitigating the risks of parallel imports

Under the guise of “parallel imports” in the UAE, they often try to legalize prohibited supplies. The UAE law is quite liberal to the principle of international exhaustion of rights, however:

• Parallel imports into the UAE must not violate the UN sanctions regimes (which the UAE implements into domestic law).
• import of goods without the consent of the right holder, but in violation of export control of a third country, may entail the seizure of goods, forced destruction and administrative fines;
• It is necessary to ensure that the purchased product from friendly countries does not contain components, re-export of which is prohibited without notifying the US regulator.

Diversification strategies against criminal risk: pick

The choice of strategy depends not on convenience, but on the sensitivity category of the product and the general risk profile of the business beneficiaries.

How to strengthen your position before working with the UAE

The best compliance starts before the first shipment.

In the structure of the holding with a center in the UAE, it is desirable to lay:

• division of functions: trader, asset owner, logistics operator;
• Compliance policy, written under the sanctions realities of the United States and the EU, not just the UAE;
• electronic counterparty screening system (e.g. World-Check, Lexis Nexis, Sayari);
• implementation of the principle of “Know Your Cargo” with photo and video recording in warehouses;
• approved rules for escalation of problematic transactions to the level of CEO or external lawyer before making a decision on the transaction;
• Regular external supply chain audits by independent consultants
• a condition in employment contracts with management on personal liability for circumvention of compliance procedures.

The system should not be built for reporting, but for the survival of the business in the face of uncertainty.

Common mistakes in building Supply Chain Compliance in the UAE

1. Dubai Customs may release goods under local law, but this will not protect you in a U.S. court for violating export control regimes.

2. Registration of a company to a “nominal” partner (a citizen of the UAE) does not relieve the real beneficiary from liability under the laws of his country.

3. An item purchased in China but containing an American chip is an American product from OFAC’s point of view if it falls under the de minimis rule.

4. Believing small volumes are not tracked Artificial intelligence systems track patterns. A series of small transactions is easier to identify than one large one.

5. Loss or distortion of transport documents makes it impossible to prove good faith in the event of an investigation.

6. The carrier may also be under sanctions.

7. Ignore the risk of CDD/EDD at the M&A stage By buying a ready-made business in the UAE, you acquire its history of violations. In-depth compliance due diligence is required.

8. Working without a local sanction lawyer, agents and registration consultants are not responsible for secondary sanctions.

Executive Checklist (CEO/COO)

Before restructuring your sales channels through Dubai, answer 15 questions:

1. Who is the end user of the product (not the customer, but the user)?
2. Is the product subject to the Export Administration Regulations (ERR) or ITAR?
3. Does the share of American components exceed 10-25%?
4. Does the claimed value match the market value?
5. Does the buyer have a real office and warehouse in the UAE?
6. Does the buyer’s business profile match the product being purchased?
7. Do payments go through a third party chain or directly?
8. What licenses do transport companies and couriers have?
9. Is there a really valid sanctions clause in the treaty?
10. Does the route of the cargo comply with standard commercial logistics?
11. Is the final consignee connected to military or government entities?
12. Are you ready to disclose the chain of ownership to a Western regulator on the first request?
13. Are the shipping vessels checked by OFAC and UN lists?
14. Are all screenshots and keys of the Internet banking system saved to prove good faith?
15. What scenario is the immediate blocking or successful export, implemented when analyzing the transaction neural network correspondent bank in the United States?

What an Effective Compliance System Looks Like in the UAE

A strong strategy consists of four levels of protection:

1. The right choice of jurisdiction (DIFC or mainland), the construction of isolated chains of ownership (cell companies), the implementation of sanctions covenants in corporate and commercial contracts.

2. Automatic screening of counterparties, attribution of risk to each level (Low, Medium, High, Prohibited), integration of KYC / KYCC (Know Your Customer’s Customer) system and the principle of “four eyes” in the release of shipments.

3. Formation of a complete transaction dossier, including End-Use Statements, notarized affidavits, certificates of destruction of goods (in case of refusal of the transaction), audit reports on each questionable transaction.

4. Crisis Response: Availability of regulations in case of receiving a request from OFAC, the US Treasury or UAE law enforcement agencies (arrest, seizure). Immediate blocking of all counterparty transactions, notification of the bank and appointment of an external investigator (forensic audit).

Without the fourth level, even the most beautiful architecture turns into a pumpkin at the first procedural actions.

FAQ

Is it legal to supply dual-use electronics via Dubai to Russia?

Nope. If the product falls under the EU or US export control categories (especially EAR), its re-export to Russia through the UAE is a direct violation, creating a risk of secondary sanctions for the company and its beneficiaries, even if importation into and exportation from the UAE is formally legal under local law.

Which is safer: Pay directly or through a payment agent in the UAE?

Neither option is “safe” either. Direct payment can be blocked by the correspondent bank. Payment through an agent creates the risk of being accused of intentional circumvention of sanctions (sanction structuring). The key is not the method of payment, but the transparency of the entire transaction and the buyer.

Can sanctions goods be transported through UAE free zones without risk?

Free Zones (JAFZA, DMCC, etc.) are not extraterritorial to the international obligations of the UAE (UN) and do not protect against the extraterritorial application of U.S. laws (OFAC). This is a risk area, not a safe haven.

What documents should you request from a buyer in Dubai to reduce the risk?

Certificate of incorporation, license to operate, UBO list, passport of transaction, warehouse facilities, End-Use Certificate, confirmation of origin of funds. The minimum set is an extract from the commercial register and a license not older than three months.

What if the OBE has already sent a request or subpoena?

Do not delete information, hide assets or panic. It is necessary to immediately engage a U.S. and local sanction lawyer, introduce a lithigation holding on documents, inform banks as part of the disclosure obligation and assess the prospects for voluntary disclosure of information (VSD / Voluntary Self-Disclosure).

Related services

• Sanctions, export controls and international compliance
• Corporate and Regulatory Investigations, Business Integrity
• International trade, distribution and cross-border transactions
• International regulatory risks and strategic advice
• Commercial contracts
• International Arbitration, Commercial Disputes and Cross-Border Litigation

Related material

• How to check the counterparty in the UAE before a major transaction
• Why UAE banks block payments: Compliance with DIFC or Mainland business: Choosing a safe jurisdiction for an international holding company
• How to legally work with cryptocurrency in the UAE without violating
• AML and sanctions Structuring export transactions through the UAE: step-by-step
• What to do if your cargo is detained at customs in Dubai
• Sanctions clauses in treaties: Why a template is dangerous for business

Conclusion

Supply Chain Compliance in Dubai does not require hiring a “resala”, but building a system of total verification.

A strong position is based on product classification, end-to-end knowledge, legally verified contracts and constant audit of financial flows.

In an age of global constraints, it is not the one who finds the grey loophole first who wins. The winner is the one who has built a transparent and legally based supply chain in advance, which is not shameful or scary to show even to the US regulator.