AML Laws in the GCC
The Gulf Cooperation Council states have rebuilt their anti-money-laundering frameworks substantially over the past decade, driven in large part by FATF-style mutual evaluation through MENAFATF and, for some members, direct FATF membership. The result is a set of regimes that look modern on paper and whose test is now effectiveness rather than technical compliance.
Supervisory architecture
Each state operates a financial intelligence unit receiving suspicious transaction reports, alongside central-bank supervision of licensed institutions. Several jurisdictions add separate supervisors for their international financial centres, which run their own common-law-based regimes and their own registries. Firms frequently sit under more than one supervisor at once, and the obligations are not identical.
The sectors under most pressure
- Real estate, where high-value cash purchases and corporate ownership structures have drawn sustained international attention
- Precious metals and stones dealers, a recurring channel in trade-based laundering typologies
- Hawala and other money or value transfer services operating alongside the formal banking system
- Free-zone company formation and corporate service providers
- Virtual asset service providers, now licensed in several Gulf jurisdictions
Grey-listing and its consequences
Placement on the FATF list of jurisdictions under increased monitoring has practical costs: correspondent banks apply enhanced due diligence, transaction costs rise, and de-risking can follow. That pressure has been a significant driver of reform in the region, and exit from monitoring typically requires demonstrated enforcement outcomes rather than legislative change alone.
What this means in practice
Firms with Gulf exposure should expect close attention to beneficial ownership of corporate customers, to the source of funds behind property and luxury-asset purchases, and to cross-border flows through trade finance. Where a group operates both onshore and inside a financial centre, the two compliance regimes need to be mapped separately.