How to Find a UAE Beneficial Owner When the Data Isn’t There

On paper, the UAE has one beneficial-ownership regime. Cabinet Decision 109 of 2023 sets the federal definition: a natural person who owns or controls 25% or more of a legal entity, updated within 15 days of any change in ownership. Every UAE entity, in every emirate, on every license type, falls under it.

In practice, the UAE has nine.

Each of the seven emirates runs its own licensing authority — ADDED in Abu Dhabi, DET in Dubai, SEDD in Sharjah, AjmanDED, UAQ DED, RAK DED, and Fujairah Municipality — and each has built its own filing portal, fee schedule, document standards, and operational tempo around the same federal text. The two financial free zones, DIFC and ADGM, sit outside the federal regime entirely under constitutional carve-outs, governed by their own beneficial-ownership rules (DIFC UBO Regulations 2018, ADGM BOCR 2022 as amended in 2024) and their own enforcement bodies. The maximum penalty for non-compliance ranges from roughly USD 25,000 in DIFC to USD 54 million at ADGM Level 9 — a 2,000× spread in a country the size of South Carolina.

For compliance teams onboarding UAE entities, this fragmentation is the entire problem. A "Dubai company" can be licensed under DET, DMCC, JAFZA, DAFZA, IFZA, Meydan, DDA, or DIFC — and the UBO data is filed differently, exposed differently, and verifiable to different standards in each. A bank running CDD on a single UAE counterparty may need to check three or four separate registries to reconstruct a complete ownership chain, and even then, none of the UAE registers expose UBO data publicly. The data exists, but it lives behind closed registry doors.

This guide breaks down what each of the nine regimes actually does — who regulates it, where the data is filed, how reliable that data is, and what to expect when you try to verify a beneficial owner. It covers federal law, the seven emirates, both financial free zones, the enforcement landscape after the FATF grey-list removal in February 2024, and the practical workarounds for the structures where the natural person at the top isn't directly accessible from a UAE filing. Where applicable, it links upstream to the jurisdictions — UK, Luxembourg, BVI, Cayman — that frequently sit above UAE entities and complete the chain.

The nine UAE UBO regimes at a glance

Below is a side-by-side view of all nine regimes. Every tier applies the same federal 25% ownership threshold and 15-day update window — what differs is the operational layer: how filings are submitted and how hard it is to actually verify a beneficial owner under that regime in practice.

The Public access column shows whether UBO data filed under that regime is accessible externally:

• Public: UBO data is searchable by anyone via an open register (no UAE regime currently offers this).
• Restricted: data is disclosed to defined parties — competent authorities, regulators under MoU, or the company's own counterparties through a formal request — but not to the general public.
• Closed: the register exists but UBO records are not exposed externally. Verification requires the entity to voluntarily disclose, or upstream chain analysis through accessible jurisdictions.

This is the single most important operational fact in the table. Across the nine UAE regimes there is currently no public UBO register. The data exists; you cannot pull it directly.

1. The UAE compliance map: nine tiers, one federal framework

Before going emirate by emirate, the structural picture matters. The UAE is a federation of seven emirates. Federal law — including Cabinet Decision 109 of 2023 on the Regulation of Real Beneficiary Procedures — applies across all seven. But corporate licensing is a local matter, devolved to each emirate's Department of Economic Development or its equivalent. Each licensing authority acts as its own Registrar. For background on how the underlying UBO concept works across jurisdictions, see our UBO methodology guide.

On top of that, two financial free zones — Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM) — are constitutional carve-outs. They operate independent common-law-style regulatory regimes and are explicitly exempt from Cabinet Decision 109. Their UBO rules are entirely separate.

The three-tier UBO test — and what happens when no one qualifies

Cabinet Decision 109 of 2023 doesn't just define a UBO threshold; it defines a sequence compliance teams must work through, and each step matters for verification.

1. Test 1 — Ownership / voting rights. Any natural person who directly or indirectly owns or controls 25% or more of the entity's shares or voting rights. If anyone meets this test, they are the UBO. Stop.
2. Test 2 — Effective control through other means. If no one meets the 25% threshold, identify the natural person who exercises ultimate control — typically through the right to appoint or remove the majority of directors, contractual arrangements, or significant influence over policy.
3. Test 3 — Senior Managing Official (SMO). If neither test produces a UBO, the natural person holding the senior management position is treated as the UBO by default. This is the regulatory fallback to ensure that every entity has a declared UBO, even if no one substantively meets the ownership or control tests.

Two practical consequences for compliance teams. First, "no UBO meets the 25% threshold" is not a valid disclosure outcome — the SMO fallback applies, and an entity that declares "no UBO" is in breach. Second, when a register shows the SMO rather than a substantive owner, that signals a flat or fragmented ownership structure. It's not necessarily a red flag, but it is a flag worth following.

Nominee directors and nominee shareholders fall under separate disclosure rules under CD 109/2023. A nominee director must notify the legal entity of their status within 15 days of appointment, and the entity must maintain a separate Register of Nominee Directors and update it within 15 days of any change. Federal Decree-Law 10 of 2025, in force since October 2025, criminalised false UBO reporting — including knowingly identifying a nominee as the substantive UBO. The risk profile of nominee arrangements has materially increased.

2. Sector-specific obligations: who gets caught by what

UBO obligations apply to almost every UAE-licensed entity, but the downstream compliance load — what you have to do after identifying the UBO — varies sharply by sector. Three categories matter for cross-border counterparties.

Designated Non-Financial Businesses and Professions (DNFBPs)

Under Federal Decree-Law 10 of 2025 (in force 14 October 2025) and Cabinet Resolution 134 of 2025, DNFBPs include: real estate brokers, dealers in precious metals and stones (triggered at AED 55,000 cash transaction threshold), auditors and accountants, law firms, notaries, and corporate service providers (CSPs / TCSPs). Every DNFBP must register on the FIU's goAML platform, maintain a documented Business Risk Assessment, perform CDD on its own clients (which means re-running UBO checks downstream), file Suspicious Transaction Reports, and run an annual AML/CFT training programme.

The enforcement has been sharp. The Ministry of Economy reports over AED 130 million in administrative fines on DNFBPs since late 2022, with AED 42 million in H1 2025 alone. Administrative fines under FDL 10/2025 stack: AED 50,000–1,000,000 per violation, with the ceiling raised to AED 100 million for serious legal-person infractions.

Financial institutions (banks, insurers, investment firms)

Licensed Financial Institutions (LFIs) operate under direct supervision of the Central Bank of the UAE (CBUAE), the DFSA in DIFC, and the FSRA in ADGM. LFIs face the same DNFBP obligations plus enhanced requirements: enhanced due diligence (EDD) on high-risk counterparties, ongoing transaction monitoring, source-of-funds verification, and PEP screening at onboarding and on a continuous basis. For an LFI, "identifying the UBO" is the start of the workflow, not the end — the UBO record must then be screened against sanctions and PEP lists and monitored in perpetuity.

Virtual Asset Service Providers (VASPs)

VASPs — crypto exchanges, custodians, and brokers — fall under the Virtual Assets Regulatory Authority (VARA) in Dubai, the FSRA in ADGM, and the SCA/CBUAE federally. The UBO standard is the same 25% threshold but the supervisory intensity is significantly higher. VARA requires real-time transaction monitoring, mandatory STR filing, and source-of-wealth verification on all UBOs above defined value thresholds. The FATF Travel Rule applies: counterparty UBO data must accompany virtual asset transfers above USD 1,000 / AED 3,500.

3. Abu Dhabi: ADDED, ADRA and the ADGM carve-out

Licensing structure

Abu Dhabi mainland companies are licensed by the Abu Dhabi Department of Economic Development (ADDED), the country's second largest mainland licensing authority by entity count. In 2024, Abu Dhabi consolidated its registration infrastructure under the Abu Dhabi Registration and Licensing Authority (ADRA), which now acts as a centralised platform for economic licensing and registration — including standard, dual, freelancer, and virtual licences.

Abu Dhabi also operates a Unified Economic Licence initiative in partnership with the Abu Dhabi Free Zones Council, covering Khalifa Economic Zones Abu Dhabi (KEZAD), Abu Dhabi Airports Free Zone, Masdar City Free Zone, and Creative Media Authority. The aim is to unify procedures for registering economic licences across the emirate and its free zones — a deliberate move to reduce the cross-zone friction that exists elsewhere in the UAE.

UBO regime

Cabinet Decision 109/2023 applies. UBO declarations are submitted at incorporation and at annual renewal through the TAMM government services platform or via ADRA channels. Changes must be notified within 15 days. Foreign ownership has been fully liberalised for most mainland activities since June 2021 — most LLCs no longer require a 51% Emirati sponsor — but legacy structures may still carry historic local-sponsor arrangements that distort the declared shareholder picture.

The ADGM carve-out

Companies licensed in Abu Dhabi Global Market (ADGM), on Al Maryah Island, do not fall under Cabinet Decision 109 or ADDED's jurisdiction. ADGM operates its own common-law-style framework (covered in section 10). For compliance teams, this means an "Abu Dhabi company" needs an upfront classification: mainland (ADDED/ADRA), ADGM-licensed, or in one of the ADDED-aligned free zones.

4. Dubai: DET, DDA and the DIFC carve-out

Licensing structure

Dubai mainland companies are licensed by the Department of Economy and Tourism (DET), formerly the Dubai DED. DET maintains the Invest in Dubai portal as the primary entry point for licensing and renewal. Dubai also operates one of the world's most concentrated free zone ecosystems — DMCC, JAFZA, DAFZA, DIFC, Meydan Free Zone, IFZA, plus the Dubai Development Authority (DDA), which umbrellas Dubai Internet City, Dubai Media City, Dubai Production City, d3, and Dubai Knowledge Park.

UBO regime

Cabinet Decision 109/2023 applies to mainland DET entities and to all non-financial free zones licensed within Dubai. UBO submission happens through the licensing authority's own portal. DET has historically been the most active enforcer in the country — Dubai DED was the first authority to set a UBO compliance deadline (15 June 2021 under the predecessor regulation) and to block licenses of entities that failed to submit.

The DIFC carve-out

DIFC is a financial free zone with its own legal system, common-law courts, and the DIFC Ultimate Beneficial Ownership Regulations 2018. DIFC entities do not file UBO data with DET, do not appear in Dubai's National Economic Register, and operate under a non-disclosure regime detailed in section 9.

5. Sharjah: SEDD and the online UBO portal

Licensing structure

Sharjah mainland companies are licensed by the Sharjah Economic Development Department (SEDD), established in the early 1980s and operating as the emirate's primary commercial registrar. SEDD coordinates with Sharjah's free zone authorities — Hamriyah Free Zone (HFZA), Sharjah Airport International Free Zone (SAIF), Sharjah Media City (SHAMS), and Sharjah Research, Technology and Innovation Park (SRTIP).

UBO regime

Cabinet Decision 109/2023 applies. SEDD runs an online UBO submission portal at eservices.sedd.ae where licensees select existing owners flagged as UBOs and add additional natural persons as needed. The process is operationally straightforward — among the cleaner mainland workflows in the country.

In August 2025, SEDD held a dedicated workshop for its commercial officers on beneficial ownership procedures, focused on inspection authority over corporate structures and transparency requirements. This reflects post-FATF emphasis on supervisory consistency at the emirate level.

Operational reality

Sharjah's strength is workflow simplicity. The weakness is the same as everywhere else in the UAE: data submitted through SEDD is not publicly accessible. Verification depends on the customer's declaration plus, where commercially obtainable, structured data from third-party providers covering Sharjah mainland and Sharjah free zone filings.

6. Ajman: AjmanDED and the e-service layer

Licensing structure

Ajman mainland companies are licensed by AjmanDED, which became an independent authority in 2011. AjmanDED operates two service centres in addition to its main facility — relevant for compliance teams because some procedures require in-person attendance even though core licensing is online.

UBO regime

Cabinet Decision 109/2023 applies. Ajman has built a functional UBO submission system at eservices.ajmanded.ae under the service "License Beneficial Owners Registration." The portal includes a structured declaration form that explicitly references the federal AML framework.

7. Umm Al Quwain: the smallest licensing footprint

Licensing structure

UAQ has the smallest mainland licensing footprint of the seven emirates. Mainland companies are licensed through the UAQ Department of Economic Development, with the UAQ Free Trade Zone (UAQ FTZ) providing the dominant free zone option in the emirate.

UBO regime

Cabinet Decision 109/2023 applies on paper. In practice, the UAQ licensing infrastructure is the least digitally mature among the seven emirates. The federal UBO framework requires the same data points and the same 15-day notification window, but operational implementation varies.

Operational reality

UAQ accounts for a tiny share of UAE entity volume. Most institutional compliance teams will encounter UAQ entities rarely — usually as nominee or holding vehicles rather than operating companies. Where they do appear, treat them with the same scepticism applied to any low-volume, low-transparency licensing jurisdiction: the federal rules apply, but registrar-level verification rigour is materially thinner than ADDED or DET.

8. Ras Al Khaimah: the two-system problem (DED + RAK ICC)

RAK is the most operationally complex emirate for UBO compliance because it runs two parallel systems: a mainland licensing regime and one of the UAE's most active offshore registries.

RAK DED (mainland)

RAK mainland companies are licensed by the Ras Al Khaimah Department of Economic Development. Cabinet Decision 109/2023 applies. The operational quirk is significant: RAK DED does not offer fully online UBO submission. UBO details are submitted by visiting outsourced service centres in person, filling out physical forms, and submitting them by hand. This is the only emirate where mainland UBO filing remains paper-based.

The practical implication: data freshness, error rates, and update timeliness at RAK DED are structurally worse than at the digital authorities. The 15-day update window under federal law is harder to enforce in a paper system.

RAK ICC (offshore)

The Ras Al Khaimah International Corporate Centre (RAK ICC) is a separate offshore registry operating under the authority of RAK. It is one of the UAE's two main offshore vehicles (alongside the JAFZA offshore regime in Dubai). RAK ICC International Business Companies must:

• Disclose UBO information to the RAK ICC Authority
• Maintain a Real Beneficiary Register and a Partner/Shareholder Register
• Update the authority within 15 days of any ownership change
• Operate through a licensed Registered Agent — direct interaction with the registry is not permitted

The RAK ICC registry does not publicly disclose details of directors, shareholders, or UBOs. Companies cannot trade locally, employ UAE staff, or invoice UAE-based clients under offshore status — they are pure international business vehicles.

9. Fujairah: municipality-led licensing

Licensing structure

Fujairah is the only emirate where mainland licensing is administered by the municipality rather than a Department of Economic Development. Fujairah Municipality issues trade licenses, and the separate Dibba Municipality handles licensing for the Dibba Al-Fujairah enclave. The emirate's main free zone is Fujairah Free Zone (FFZ), with Creative City Fujairah covering media and creative activities.

UBO regime

Cabinet Decision 109/2023 applies. Fujairah's municipality-administered model has historically been the least digitally mature licensing system among the seven emirates, though digital integration via the National Economic Register has improved baseline visibility of license status.

Operational reality

Fujairah hosts a meaningful concentration of shipping, oil services, and bunkering businesses tied to its position on the Indian Ocean coast outside the Strait of Hormuz. For compliance teams in maritime, energy trading, and oil services sectors, Fujairah exposure is more likely than the emirate's small overall share of UAE entities would suggest. UBO filings exist; structured access to them does not.

10. DIFC: the common-law financial free zone

Status and law

The Dubai International Financial Centre (DIFC) is a constitutional carve-out — Federal Law No. 8 of 2004 grants it autonomy over civil and commercial matters within its 110-acre geographic boundary on Al Sa'ada Street. DIFC operates a common-law jurisdiction with its own courts, regulator (DFSA), and Registrar of Companies. Cabinet Decision 109/2023 explicitly does not apply.

UBO regime

DIFC enacted its Ultimate Beneficial Ownership Regulations on 12 November 2018, with a compliance deadline of 14 March 2019 for existing entities. Under these regulations, every DIFC entity must:

• Maintain a private UBO Register internally
• Maintain a Register of Nominee Directors where applicable
• Notify the DIFC Registrar of Companies of UBO particulars through the DIFC client portal
• Notify any subsequent changes to the Registrar

The DIFC threshold is 25% of shares, ownership interests, or voting rights (direct or indirect). If no natural person can be identified through ownership or control, the cascade moves to anyone exercising significant control, and finally to members of the governing body of the entity.

Access and disclosure

The DIFC UBO regime is non-disclosure by default. The Registrar may only disclose UBO information at the request of a regulator, law enforcement agency, or government authority prescribed by law — and only to the requesting party. Disclosure to any other person requires the entity's explicit consent. Maximum fine for non-compliance is USD 25,000.

11. ADGM: Abu Dhabi's common-law financial free zone

Status and law

Abu Dhabi Global Market (ADGM) is the Abu Dhabi equivalent of DIFC — a separate common-law jurisdiction on Al Maryah Island, established under Federal Law No. 8 of 2004 and ADGM Founding Law No. 4 of 2013. ADGM has its own courts (English common law applies directly, with limited exceptions), its own regulator (FSRA), and the ADGM Registration Authority as Registrar of Companies. Cabinet Decision 109/2023 does not apply.

UBO regime

ADGM enacted its Beneficial Ownership and Control Regulations 2018, replaced by the BOCR 2022, with significant amendments in 2023 and 2024. The 2018 regulations were formally repealed on 26 April 2024 with a six-month transition period. Under the current BOCR 2022 framework, every ADGM Person must:

• Maintain a record of beneficial owners
• Identify and record nominee directors and the persons for whom they act
• Notify the Registrar of changes within 15 days
• Apply the "cascade approach" to UBO identification, clarified by the February 2024 amendment to align with FATF and OECD recommendations

The ADGM threshold is 25% of shares, voting rights, or equivalent control. ADGM applies a two-fold test: (a) direct or indirect ownership, and (b) significant control by means other than ownership — including dominant influence over voting rights.

Access and disclosure

The Registrar maintains the Register of Beneficial Owners of Legal Persons and Nominee Directors under Part 3 of BOCR 2022. Disclosure to third parties is permitted only under section 967 of the ADGM Companies Regulations or with the entity's consent. Maximum penalty is a Level 9 fine — approximately USD 54 million — for serious or repeated non-compliance.

12. What UBO data each registrar actually collects

Cabinet Decision 109/2023 specifies the minimum data set every Registrar must collect. In practice, what each emirate captures — and what it makes available even to authorised users — varies. The matrix below maps the federal mainland regime against the two financial free zones, with colour coding for what's collected, what's accessible, and what's missing entirely.

The penalty gradient matters operationally. Cabinet Decision 132/2023 administrative fines are modest by international standards. But Federal Decree-Law 10 of 2025 raised organisational AML fines to AED 50 million (≈$13.6M), and ADGM's Level 9 fine ceiling reaches approximately $54 million — among the highest in any UBO regime worldwide. For institutional compliance teams underwriting ADGM exposure, the Level 9 number is the operationally significant figure to plan against.

13. Recent and upcoming changes: 2024–2027

The UAE went through three rapid reform cycles between 2023 and 2025. The next major test arrives in 2026. The timeline below tracks what has already happened (green), where we are now (amber), and what's coming (outlined).

14. How to verify a UBO across UAE emirates: practical workflow

The absence of a single public UBO search means verification is a multi-step process that adapts to the licensing tier. The workflow below is the operational sequence compliance teams use today. For the broader operational framework applicable across jurisdictions, see our general UBO verification workflow.

Step 8: Screen the resolved UBO against sanctions and PEP lists

Identifying the UBO is step one — but a verified UBO is only useful after it has been screened against the sanctions and politically-exposed-person (PEP) lists that apply to your business. At minimum: OFAC SDN (US), UK HM Treasury Consolidated List, EU Consolidated Financial Sanctions, UN Security Council sanctions, and your local FIU lists. PEP screening should run on initial onboarding and on a continuous basis (typically daily refresh) so that a UBO who later becomes a PEP — through political appointment, family relationships, or association — triggers an automatic alert.

Two cross-border traps are worth flagging. First, the UAE federal threshold is 25% — but EU AMLD6, UK PSC rules for high-risk sectors, and US CTA-style proposals may apply lower thresholds (10–15%) for specific categories. A UBO who sits at 20% under UAE law may still need disclosure under your home regime. Second, UAE law treats family control structures somewhat differently from common-law jurisdictions — what reads as "no UBO meets 25%" in a UAE filing can map to multiple disclosed UBOs under EU rules. Reconciling these mappings is part of cross-border CDD; the UAE filing alone is not sufficient.

15. UAE in regional context: how the GCC compares

It is tempting to read this guide and conclude the UAE is uniquely fragmented. The honest comparison is that every GCC state has implemented UBO disclosure rules, every register is closed to the public, and every regime applies the same 25% threshold — but the UAE's fragmentation across nine regulatory tiers genuinely is more operationally complex than its neighbours. The wider regional landscape:

Three takeaways for compliance teams operating across the GCC. First, no GCC state publishes a public UBO register — the data exists in regulator hands, not on a searchable portal, anywhere in the region. Second, the 25% threshold is universal across all six GCC states, which means a UBO map built for one GCC jurisdiction is structurally compatible with the others. Third, the UAE's per-emirate fragmentation has no analogue in the rest of the GCC — Saudi files through the Saudi Business Center (SBC), Qatar through the Unified Economic Register, Bahrain through MOICT. A counterparty in Riyadh involves one registry; a counterparty in Dubai may involve four.

16. Practical takeaways for compliance teams

The core issue is that the UAE built a compliance-oriented UBO framework rather than a transparency-oriented one. The data is collected, validated, and audit-ready for FATF — but it is not designed for external access. The fragmentation across nine regimes amplifies this: there is no consolidated "UAE company register" that compliance teams can query. Building workflows that account for these gaps, and supplementing registry data with structured ownership intelligence, is not optional. It is the practical reality of UAE KYB today.

Existing legislation governing UBO in the UAE

• 1
  2018 → 2025
  Federal Decree-Law 20 of 2018 → Federal Decree-Law 10 of 2025
  The original federal AML law has been repealed and replaced. The new law came into force 14 October 2025, expanded to virtual assets and proliferation financing, lowered the evidential burden for proving money laundering offences, and raised maximum organisational fines to AED 50 million.
• 2
  November 2023
  Cabinet Decision 109 of 2023 — Real Beneficiary Procedures
  The operative UBO law for mainland and Commercial Free Zone entities. Came into effect 16 November 2023, replacing Cabinet Resolution 58 of 2020. Tightened identification standards for complex structures, gave the Registrar risk-based discretion.
• 3
  December 2023
  Cabinet Decision 132 of 2023 — Administrative Penalties
  Progressive penalty structure: written warning → AED 50,000 → AED 100,000 → license suspension. Replaced Cabinet Decision 53/2021. In force from 15 December 2023.
• 4
  2024
  Cabinet Resolution 71 of 2024 — Enhanced supervision
  Enhanced supervisory, procedural, and coordination mechanisms for Registrars and Licensing Authorities.
• 5
  November 2018 / February 2024
  DIFC UBO Regulations 2018 + ADGM BOCR 2022 (amended 2024)
  Independent regimes governing the financial free zones. Both are non-disclosure by default with consent-gated access for third parties.

17. Glossary of UAE UBO acronyms

A short reference for the regulatory bodies, laws, and operational concepts referenced throughout this guide.

18. Frequently asked questions