Typical mistakes when dealing with sanctions in the UAE

Mainstream

The work of an international company with sanctions regulation in the UAE is not just the implementation of local laws. This is the management of extraterritorial risks.

The main question is not whether the UAE law prohibits a particular operation. The main question is how banks, correspondents, contractors and regulators of countries whose sanctions regimes operate extraterritorially will look at this operation.

Effective sanctions compliance in the UAE begins with three checks:

• Whether the transaction or the counterparty is subject to direct international sanctions recognized by the UAE.
• Does the structure of the transaction create a risk of secondary sanctions for participants, including banks?
• How will a Dubai bank handle a payment, even if the transaction is formally authorized?

If these three issues are not worked out in advance, the company risks a cash freeze, a bank failure and a supply chain disruption.

The main mistake of international companies when dealing with sanctions in the UAE

Many companies think this way:

The UAE has not imposed sanctions against Russia, so it is safe here.

It's a dangerous oversimplification.

The right question is:

What extraterritorial sanctions risks are being implemented in the UAE, even if the country itself is not the initiator of the restrictions?

In practice, Dubai banks, free zone counterparties and international partners are guided by the sanctions regimes of the United States (OFAC), the EU, the United Kingdom and the United Nations. The bank can block a transaction even if it is permissible under UAE law. The commercial reality is this: The local compliance officer would rather refuse the operation than explain to foreign correspondents.

Working in the UAE requires not a sense of freedom from sanctions, but a deep understanding of how global sanctions regimes are refracted through the local banking and regulatory system.

10 Common Mistakes of International Business in the UAE

Mistake 1. The absence of its own sanctions regime against third countries does not mean that operations will be carried out without obstacles. UAE banks operating in US dollars and euros conduct transactions through correspondent accounts in the US and Europe. This automatically applies to them the requirements of OFAC and European regulators. A transaction that appears local is actually international at the time of clearing.

Mistake 2. To carry out sanctions due diligence only on the UNOAE lists implement the sanctions lists of the UN Security Council at the local level. However, banks and large companies, especially in the DIFC and ADGM zones, apply broader lists, including the OFAC SDN list and the EU and UK sanctions lists. Checking only on the UN database creates a false sense of security. The discrepancy of the lists is one of the most common reasons for unexpected blocking of a counterparty or payment.

Mistake 3. Even if there are no sanctioned persons in the chain, but the nature of the transaction falls under sectoral sanctions (for example, certain categories of goods, technologies or services for certain jurisdictions), there is a risk of secondary sanctions against the company itself from the UAE. This could lead to loss of access to dollar settlements and Western markets. Dubai banks scan transactions for such risks and block transactions without giving any reason.

Mistake 4. The general reference to “sanctions” in the treaty without taking into account the specifics of the UAE often does not work. It is necessary to clearly define the applicable sanctions regimes, distribute risks in the event of a change in the regulatory environment, prescribe a mechanism for suspending execution and withdrawing from the transaction, and indicate that the parties recognize the extraterritorial effect of certain sanctions. Otherwise, if a problem arises, the parties will find themselves in legal uncertainty.

Mistake 5. Rely on the counterparty’s oral assurances about the “purity” of the transaction, the Bank in Dubai does not request assurances, but documents: contracts, invoices, information about the ultimate beneficiary, confirmation of the country of origin of the goods, end-user certificates. If the company did not collect this package in advance, the bank’s compliance will suspend the operation, and in the worst case, initiate an in-depth review of the entire client dossier. Verbal guarantees are irrelevant.

Mistake 6. Neglect monitoring changes after the launch of a long-term contract The sanctions landscape is constantly changing. Package updates, new sectoral restrictions and interpretations are made monthly. A company operating through Dubai is required to have a system of periodic re-screening of counterparties, goods and routes. One-time due diligence when signing a contract is not enough.

Mistake 7. Often in a complex contract (for example, equipment supply and maintenance) one part falls under export restrictions, the other does not. Without a clear separation of flows, specifications and amounts, the entire transaction can be classified as high-risk by the bank and stopped entirely.

Mistake 8. It is not correct to classify goods by export control codes Even if the goods are not subject to direct sanctions, they may require a license for dual-use reasons. The UAE has its own export control system (including dual and military goods). An error in the code of the HS or ECCN during customs clearance in Dubai or during international transportation leads to a stoppage of cargo, fines and checks by compliance authorities.

Mistake 9. Blocking an account or payment transaction in the UAE is not uncommon. At this point, it is important to quickly provide the bank with a legal justification, request clarifications, and use the mechanism of communication with the compliance officer. Companies without a pre-planned plan lose weeks of panic and document collection, which exacerbates the bank's suspicions.

Mistake 10. The UAE legislation in the field of combating money laundering and terrorist financing provides for serious sanctions for officials, including criminal liability. Sanctions violations are often associated with AML/CFT risks, and UAE regulators (Central Bank, AML/CFT Executive Office) are increasingly using personal punishments. Risk management should not be limited to the corporate level.

How to build sanctions compliance before problems arise

The best protection is the system that was created before the transaction.

For an international company in the UAE, it is important to:

• Develop and implement a sanctions policy tailored to multiple jurisdictional requirements.
• Include a sanctions clause in the treaties, taking into account UAE law and extraterritorial risks.
• Conduct due diligence of counterparties, beneficiaries, goods and logistics chains prior to the first transaction.
• Receive and store documents confirming the legality of the transaction for the bank (end-user certificates, conclusions on the classification of goods).
• Set up automatic screening for major sanctions lists and regular manual audits of complex transactions.
• Appoint a sanction compliance officer with direct access to the management.
• Maintain a constant dialogue with banks on compliance issues, not just in a crisis situation.
• Prescribe an internal action plan in advance when blocking the transaction, including the contacts of the legal adviser.

Sanctions security is not a one-time action, but a continuous process built into business operations.

Checklist of sanctions compliance for an international company in the UAE

Before launching a transaction or starting regular operations in the UAE, 12 questions must be answered:

1. Are the counterparty, beneficiary and related persons verified on OFAC, OUN, EU, UK and UAE local lists?
2. Have the goods been screened for export control and dual-use?
3. Is the end user and end-use country defined?
4. Is there any mixed goods and services with different sanctions status?
5. Is there a sanctions clause in the treaty that takes into account UAE law and the risk of secondary sanctions?
6. Have you received all the necessary assurances and documents for the bank from the counterparty?
7. Is the payment route agreed to take into account the jurisdiction of correspondent banks?
8. Has the history of the counterparty’s business relationships with high-risk jurisdictions been verified?
9. Does the company have an appropriate sanctions policy and is the person responsible appointed?
10. Is there periodic re-screening after the start of a long-term contract?
11. Is the package ready for prompt submission to the bank in case of request?
12. Is there an internal escalation plan when blocking a transaction?

FAQ

Is the UAE a completely safe jurisdiction in terms of sanctions? Local legislation may not contain outright bans, but banks and business partners are guided by extraterritorial sanctions regimes. This creates real risks of blocking operations and denial of service.

In practice, OFAC lists (especially SDN), UN sanctions lists, as well as EU and UK lists are key. Banks in Dubai often use them in combination.

Can a bank in the UAE block a payment without giving a reason? Citing internal compliance policies and correspondent requirements, banks may suspend or refuse to conduct a transaction without detailed justification.

These are sanctions applied against persons not under the jurisdiction of the initiating country for certain transactions. For a Dubai-based company, this could mean losing access to the international financial system and locking up assets.

Do you need to check dual-use goods if the transaction is entirely within the UAE? The UAE has its own export control system and failure to comply with classification rules may result in liability regardless of the supply route.

Can a standard sanctions clause from international practice be used? The reservation must take into account the specifics of UAE law, the multiple applicable regimes and the practices of local banks. Adaptation is mandatory.

Immediately contact the bank, provide the requested documents, engage a legal consultant to communicate with the compliance officer and develop a line of justification for the legality of the transaction. You need to act quickly and according to a pre-prepared plan.

Related services

• Sanctions, Export Controls & International Compliance
• Corporate Investigations, Regulatory Investigations & Business Integrity
• International Regulatory Risk & Strategic Advisory
• Commercial Contracts
• Banking & Finance Compliance
• Asset Protection & Risk Management

Related material

• How to conduct a sanction due diligence of a counterparty in the UAE: step-by-step
• Sanctions clause in an international contract: What to Consider for the UAE
• Secondary Sanctions and Their Real Impact on Business in Dubai
• Export control in the UAE: What the supplier needs to know
• Interaction with Dubai banks in compliance checks: practical recommendations
• Personal responsibility of management for sanctions violations in the UAE

Conclusion

Successful operation of an international company in the UAE under sanctions regulation requires not formal compliance, but a built-in system of managing extraterritorial risks.

The main protection is based on deep due diligence, adapted contractual framework, understanding of local banks’ logic and constant monitoring of the changing regulatory environment.

The winner in sanctions compliance is not the one who hopes that there are no restrictions in the jurisdiction, but the one who understands in advance where the barriers will arise, how to circumvent them and how to prove the legality of his operation to each bank compliance officer at any stage.