Short answer
- Yes. Almost all companies registered in the UAE — mainland, commercial free zone, and offshore — are legally required to identify, register, and report their ultimate beneficial owners to the relevant licensing authority.
- The primary legal instrument is Cabinet Resolution No. 58 of 2020, as amended by Cabinet Resolution No. 109 of 2023. Penalties are governed by Cabinet Resolution No. 132 of 2023.
- A UBO is any natural person who owns or controls 25 percent or more of a company's shares or voting rights, or who can appoint or dismiss the majority of its managers. If no individual meets that threshold, the senior managing official is designated as UBO by default.
- Companies must maintain three internal registers and update them within 15 days of any ownership or control change.
- DIFC and ADGM entities are exempt from the federal framework and operate under their own parallel UBO obligations.
- Non-compliance carries escalating fines, licence suspension, and increasingly, the practical consequence of being locked out of UAE banking relationships.
Who this applies to
The federal UBO framework applies to mainland companies registered with any Department of Economic Development, commercial free zone entities including DMCC, JAFZA, IFZA, and similar authorities, offshore companies registered in UAE jurisdictions, and branches of foreign companies licensed to operate in the UAE.
It does not apply to entities wholly owned by the federal or local government, public joint-stock companies listed on UAE exchanges, or entities incorporated in DIFC or ADGM. The latter two are carved out because they operate under their own equivalent disclosure regimes, not because they are exempt from beneficial ownership transparency obligations as a matter of policy.
This article covers both the federal regime and the DIFC and ADGM frameworks, the interaction between UBO obligations and the 2025 AML law, practical compliance steps for complex ownership structures, and the enforcement environment heading into 2026.
Why this framework exists and why it has teeth in 2026
The UBO regime forms part of the UAE's response to long-standing pressure from the Financial Action Task Force (FATF) to improve corporate transparency and close structural gaps that allowed beneficial ownership to be concealed behind layers of nominee arrangements and offshore holding structures. The UAE was placed on the FATF grey list in 2022 and removed in February 2024 after demonstrating sustained legislative and enforcement progress.
The grey list removal did not end scrutiny — it intensified it. The UAE's next FATF mutual evaluation is expected in June 2026, and regulators across the federal and free zone system have been operating in full enforcement mode throughout 2025. The Ministry of Economy has integrated UBO registry data into national risk assessments, linked registries to the GoAML platform operated by the UAE Financial Intelligence Unit, and pushed enforcement of the penalty framework introduced under Cabinet Resolution No. 132 of 2023.
The practical consequence for businesses is that UBO compliance in 2026 is not merely a filing obligation with abstract legal consequences. An accurate UBO register is increasingly a precondition for banking, for commercial onboarding with regulated counterparties, and for renewing trade licences without friction. Companies that have left their registers stale since the original 2020 filing are operating with real, immediate risk.
For companies in the financial services sector, UBO obligations run in two directions at once: filing your own beneficial ownership information and verifying the UBOs of your corporate clients as part of customer due diligence. The 2025 AML law has tightened both obligations.
What the law requires: the three registers
Under Cabinet Resolution No. 58 of 2020, as amended by Cabinet Resolution No. 109 of 2023, every company within scope must maintain three registers at its registered office and submit the relevant information to its licensing authority.
Register of Ultimate Beneficial Owners
This register must contain, for each UBO: full name, nationality, date and place of birth, residential address, passport or Emirates ID number, date of appointment as UBO, the percentage of shareholding or the basis of control, and the date on which the person ceased to be a UBO where applicable. The register must be updated within 15 days of any change.
Register of Partners or Shareholders
A complete, current record of all shareholders and partners, including the same identifying information as required for the UBO register, plus the nature and extent of each person's interest.
Register of Nominee Directors or Managers
Required where any director or manager acts on behalf of another person, this register must identify both the nominee and the person on whose behalf they are acting. The existence of nominee arrangements must be disclosed — it cannot be obscured simply by leaving the beneficial principal off the official records.
All three registers must be kept at the company's registered address and made available for inspection by the relevant authority on request. They are not public documents under the federal regime, but they are accessible to regulators, and under Cabinet Resolution No. 109 of 2023, the Ministry of Economy has authority to share UBO data with foreign counterpart authorities as part of international AML cooperation. A register filed with a UAE licensing authority is therefore a document with extraterritorial reach.
How the cascading UBO definition works in practice
The 25 percent ownership threshold is the starting point, not always the answer. The definition operates as a cascade and must be applied systematically.
Step 1 — Direct or indirect ownership. Identify any natural person who directly or indirectly owns 25 percent or more of the company's shares, or controls 25 percent or more of its voting rights. Indirect ownership requires tracing through any chain of intermediate entities — holding companies, special purpose vehicles, trusts, or foundations — until a natural person is reached at the end of the chain.
Step 2 — Control by other means. If no individual meets the ownership threshold, identify any natural person who exercises control through other means. The most common examples are the right to appoint or dismiss the majority of directors or managers, and the exercise of significant influence over decisions through shareholder agreements, side letters, or contractual arrangements not reflected on the face of the corporate documents.
Step 3 — Senior managing official. If neither of the above steps identifies a natural person, the senior managing official — typically the general manager, CEO, or managing director — is designated as UBO by default. This fallback is a last resort and should not be used to avoid the analysis required by steps one and two.
Joint ownership. Where two or more individuals jointly meet the threshold, each is recorded as a UBO for their respective interest.
The practical difficulty arises in multi-jurisdictional group structures. Where a UAE company is owned by an intermediate holding company incorporated in a foreign jurisdiction, the ownership chain must be traced through that intermediate entity to the natural person at its apex. This may require obtaining and translating corporate documents from overseas registries, reviewing nominee shareholder and nominee director agreements, and understanding how control rights under a shareholders' agreement in another jurisdiction map onto the UAE UBO definition.
It is not sufficient to record the intermediate holding company as the UBO. The UAE framework requires identification of the natural person, regardless of how many corporate layers sit between that person and the UAE entity.
Trusts, foundations, and complex structures
Standard ownership analysis applies straightforwardly to a company with individual natural person shareholders. The harder cases involve structures that are common among high-net-worth individuals and family offices investing into UAE commercial entities.
Trusts. A trust is not a legal person under UAE law and cannot itself be registered as a shareholder in a mainland entity. Where a UAE company is beneficially owned through a trust structure — typically with a trustee holding shares as a nominee — the UBO analysis must identify the natural person or persons who are the beneficial owners of the trust assets. This will typically be the settlor, the beneficiaries, or the protector, depending on the terms of the trust deed and the degree of control each party exercises.
DIFC and ADGM foundations. The financial free zones permit foundation structures, which are frequently used as wealth holding vehicles. Where a UAE mainland or commercial free zone entity is owned by a DIFC or ADGM foundation, the UBO analysis must trace through the foundation to identify the natural persons who ultimately control or benefit from the foundation's assets.
Family office structures. Multi-generational family businesses frequently hold UAE operating entities through a network of holding companies, trusts, and foundations across multiple jurisdictions. Each UAE-registered entity within that network has its own UBO obligation, and the ownership chain must be traced independently for each. It is not sufficient to conduct the analysis once at the holding level and apply it across all subsidiaries.
In all of these cases, the documents required to establish beneficial ownership — trust deeds, foundation constitutions, shareholders' agreements, nominee letters — may be confidential instruments that the parties are reluctant to expose. The UAE UBO regime does not override confidentiality as a matter of contract law, but it does require that the information be held in the register and made available to the licensing authority. Companies with complex structures should obtain legal advice on how to structure both the disclosure and the documentation in a way that meets the regulatory obligation without unnecessary commercial exposure.
How DIFC and ADGM differ from the federal framework
DIFC and ADGM entities operate under their own parallel UBO frameworks with some material procedural differences.
The 30-day update window in DIFC versus the 15-day window under the federal framework is a meaningful operational difference for group structures with entities in both jurisdictions. Companies should maintain a calendar or compliance tracker that reflects the applicable window for each entity rather than applying a single uniform timeline across the group.
The other critical point is that DIFC or ADGM registration satisfies UBO obligations for those specific entities only. It does not discharge the obligations of any related mainland or commercial free zone entity. Within a corporate group, each legal entity must comply with the framework applicable to its own place of registration.
The interaction with the 2025 AML law
Federal Decree-Law No. 10 of 2025 on Combating Money Laundering, Terrorism Financing, and Proliferation Financing, which came into force on 14 October 2025, significantly strengthened the AML framework that underpins UBO obligations. The interaction has practical consequences for two categories of business.
Regulated entities with corporate clients. Banks, financial institutions, DNFBPs, and VASPs are now required to identify and verify the UBOs of all corporate customers as part of their customer due diligence process. This means that when a financial institution or regulated service provider is onboarding your company, it will ask for UBO information and verify it against its own analysis. An inaccurate or stale UBO register creates a discrepancy that can trigger enhanced due diligence, delay account opening, or result in the counterparty declining the relationship entirely.
All companies seeking banking relationships. UAE banks have integrated UBO verification into their KYC processes and are increasingly requiring a UBO certificate — a confirmation document issued by the relevant licensing authority confirming that the company's UBO information has been filed and is current — as a standard condition of account opening. Companies that have not updated their UBO registers since 2020 or 2021 will not obtain this certificate without first remedying the non-compliance.
The broader consequence is that UBO compliance has become embedded in commercial relationships in a way that was not true two or three years ago. A company that is non-compliant with UBO requirements does not only face regulatory exposure — it faces practical difficulty transacting.
For a fuller picture of how the 2025 AML reforms affect financial institutions and companies with regulated counterparties, see our article on UAE AML rule changes for financial companies.
What penalties apply for non-compliance
The penalty framework under Cabinet Resolution No. 132 of 2023 escalates in stages.
The financial penalties, while significant, are not the primary enforcement concern for most businesses. The suspension of a trade licence — even for a limited period — is operationally disruptive in a way that monetary fines are not. It affects the ability to invoice, employ staff, renew visas, and maintain banking relationships simultaneously.
Beyond the statutory framework, there is growing use of UBO data in bank-led due diligence and in the Ministry of Economy's national risk assessments. A company flagged as non-compliant with UBO obligations will attract scrutiny across multiple regulatory touchpoints, not only from its direct licensing authority.
Common compliance failures and how to avoid them
The following situations represent the most frequent sources of non-compliance identified in practice.
Stale registers. Companies that filed UBO information when the Resolution came into force in August 2020 and have not updated since. If ownership or management has changed — new investors, restructured holdings, management changes — the registers are likely outdated and the 15-day reporting window has already been missed.
Intermediate holding companies recorded as UBOs. The UBO must be a natural person. Recording a BVI holding company, a Cayman fund vehicle, or any other corporate entity as the UBO does not satisfy the obligation. The analysis must trace to the individual.
Nominee arrangements not disclosed. Where directors or shareholders are nominees acting on instruction, the Nominee Director Register must reflect both the nominee and the principal. Leaving the principal off the records does not make the arrangement compliant.
Free zone entities that assumed no obligation applied. Commercial free zone entities — including DMCC, JAFZA, IFZA, RAK ICC, and others — are subject to the federal framework or their zone's equivalent. The exemption applies only to DIFC and ADGM. Many businesses incorporated in commercial free zones have incorrectly assumed they were exempt.
Group structures not analysed entity by entity. Each UAE-registered entity has its own obligation. A UBO analysis conducted at the parent level does not automatically satisfy the filing requirement for each subsidiary.
Practical steps for companies reviewing compliance now
Any company that has not conducted a UBO review since the 2023 amendments to Cabinet Resolution 58 should work through the following:
- Map the current ownership structure of each UAE-registered entity in the group, including any changes since the last UBO filing
- Apply the cascading definition to each entity independently — direct ownership first, then control by other means, then the senior official fallback
- Identify any nominee arrangements across shareholders, directors, or managers and confirm they are reflected in the Nominee Director Register
- Where ownership passes through foreign intermediate entities, obtain and review the relevant corporate documents to trace to the natural-person UBO
- Update all three registers to reflect the current position and file updated information with the relevant licensing authority within the applicable window
- Obtain a UBO certificate from the licensing authority once the filing is current, and retain it for use in banking and commercial due diligence requests
For companies with trust, foundation, or complex family office structures, the analysis of who qualifies as UBO is not always straightforward and benefits from specific legal advice before any filing is made.
Legal advice is required to assess how these obligations apply to a specific ownership structure, particularly where beneficial ownership is held through multi-layered or cross-border arrangements. Kayrouz and Associates advises on corporate transparency, UBO compliance, and related corporate and commercial matters across UAE mainland and free zone jurisdictions. If you have concerns about your company's UBO filing position, contact our team for a confidential assessment.
Your success starts with the right guidance.
Whether it’s business or personal, our team provides the insight and guidance you need to succeed.



