Calder & Vance International Sanctions & Compliance Counsel

Cross-Border Transactions & Diligence · UAE

Trade-transaction screening under UAE: step by step

A trading company based in the Gulf closes a procurement contract with a European supplier. The goods move through a UAE-registered intermediary. Three weeks later, the company's bank flags the payment: one entity in the transaction chain appears on a list maintained by the UAE Executive Office for Control and Non-Proliferation, and the goods touch a dual-use category. The deal does not just pause – it freezes. Could earlier screening have caught this? Almost certainly yes.

Trade-transaction screening under the UAE regime requires a business to check counterparties, goods, and routing against the UAE's own sanctions lists and, critically, the parallel lists maintained by OFAC, the EU Council, and the UN Security Council – because the UAE applies its autonomous sanctions alongside its UN obligations, and international payment rails mean that a US-dollar clearing bank or an EU correspondent can block a transaction even when local clearance appears clean. As of January 2026, the UAE Executive Office administers the local list; the Central Bank of the UAE issues binding guidance to financial institutions on screening obligations and reporting windows.

This guide walks through the screening process step by step – from pre-trade counterparty checks through payment-chain analysis to record-keeping and escalation – and flags where the UAE regime diverges from OFAC, OFSI, and the UN baseline.

Step 1: Understand who administers the UAE regime and what it covers

The UAE's sanctions and counter-proliferation architecture is administered by the Executive Office for Control and Non-Proliferation, operating under the Supreme Council for National Security. The Executive Office maintains the local list of designated persons and entities. Separate from that list, the UAE implements UN Security Council Consolidated List designations as a matter of binding obligation under its domestic instruments. Both lists are in scope for any trade-transaction screen; treating them as alternatives rather than cumulative obligations is one of the most common structural errors we encounter.

The legal basis draws on the UAE's counter-terrorism, anti-money-laundering, and counter-proliferation legislation. Financial institutions, designated non-financial businesses and professions (DNFBPs – a category covering lawyers, accountants, real-estate agents, and dealers in precious metals and stones under the applicable regime), and trading entities are all within scope. The specific obligations – and the penalty exposure for non-compliance – differ by sector, but the screening obligation itself is universal: no transaction proceeds until the counterparty and the goods have been checked.

The cross-border dimension matters immediately. The UAE is a major re-export and transit hub. Goods moving through UAE free zones can carry dual-use classifications that trigger separate obligations under the UAE's own export-control rules and, for goods with US-origin content, under the US Export Administration Regulations (EAR) administered by the Bureau of Industry and Security (BIS – the US agency responsible for export controls). A single shipment can therefore engage three regimes simultaneously: the UAE's autonomous sanctions, the UN Consolidated List, and US extraterritorial controls.

Step 2: Build the counterparty dossier before the transaction is agreed

Effective screening begins before a contract is signed, not after. A counterparty dossier should establish identity, ownership, and ultimate beneficial ownership to the point where the 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked) and its UAE-equivalent ownership-and-control tests can both be applied. Screening only the named contractual party and ignoring its shareholders is a structural gap that enforcement agencies across every regime now penalise.

Collect, at minimum: the full legal name and all trade names, jurisdiction of incorporation, registration number, principal place of business, the identity of all shareholders above a meaningful threshold (many UAE compliance programmes use 10 or 25 percent as the UBO reporting threshold, consistent with the UAE's AML rules), and the names of directors and authorised signatories. Where a counterparty is itself a financial institution, request its screening policy and any relevant licensing position. Do not accept a summary from the counterparty's own counsel without independent verification.

In our experience, the hardest cases involve holding structures in offshore jurisdictions feeding into UAE-registered operating entities. The offshore layer may not appear in a simple search of the UAE commercial register. A compliance team that stops at the UAE entity and does not map the ownership chain above it will miss a blocked parent. Have you traced the full ownership chain, or only the first corporate layer?

Step 3: Run the multi-list screen across all relevant databases

A trade-transaction screen under the UAE regime is not complete until the counterparty has been checked against all four relevant lists: the UAE Executive Office local list, the UN Security Council Consolidated List, the OFAC SDN List (the list of Specially Designated Nationals and blocked persons maintained by the US Treasury's Office of Foreign Assets Control), and – where EU-origin goods, EU-based counterparties, or EU payment channels are involved – the EU Council's Consolidated Financial Sanctions List. Each list can independently block a transaction; a clean result on one does not clear the others.

Run the screen on: the contracting counterparty, its parent and subsidiary entities, its UBOs above the applicable threshold, its directors and authorised signatories, any nominated intermediary or agent, the freight forwarder, the shipper, and the end-user identified in any end-use certificate. For trade-finance transactions, the issuing bank, the confirming bank, and the beneficiary all require individual checks. The goods themselves require a separate commodity screen – we address that in Step 4.

Fuzzy matching matters. Names transliterated from Arabic, Persian, or other scripts generate variant spellings that a name-exact search will miss. A reliable screening tool uses phonetic and transliteration-aware matching algorithms and is configured to return a result set for human review rather than an automatic pass or block. Screening logic that generates a binary output without analyst review is not adequate for UAE-regime transactions. That is a position we have seen confirmed by supervisory guidance across multiple jurisdictions.

Document the search parameters used, the lists queried, the date and time of each query, and the disposition of every alert – cleared, escalated, or blocked. This record is the foundation of the compliance defence if a transaction is later questioned.

Step 4: Classify the goods and apply the dual-use and export-control overlay

Goods screening is distinct from counterparty screening, and skipping it is a significant risk in UAE trade transactions. The UAE operates within a multilateral export-control architecture that includes the Wassenaar Arrangement and the Nuclear Suppliers Group frameworks. Separately, any goods with US-origin content or produced using US technology are subject to the EAR regardless of where in the world the transaction occurs. That extraterritorial reach has real practical effect for UAE-based traders.

Classify each item against the UAE's national control list and against the Commerce Control List (CCL) maintained by BIS. Where an item carries an Export Control Classification Number (ECCN – the code used under the EAR to identify controlled items and the conditions under which they require a licence), check the corresponding licence requirements and available licence exceptions for the destination and end-user. Items classified as EAR99 (no CCL classification, lowest-controlled tier) still require a check against the denied-parties lists maintained by BIS: the Entity List, the Denied Persons List, and the Unverified List.

For transactions routing through UAE free zones, pay particular attention to the stated end-use and the end-user. Free-zone re-exports that divert controlled goods to parties or destinations subject to US, EU, or UN controls are a documented enforcement priority. An incomplete or inconsistent end-use certificate is a red flag that should stop the transaction pending clarification, not a paperwork issue to resolve after shipment.

We regularly advise exporters who discover mid-transaction that goods they considered commercial-grade carry ECCN classifications that require a BIS licence for the intended destination. Early classification review avoids the much harder problem of a shipment already in transit.

Step 5: Assess the payment chain for sanctions chokepoints

A transaction can clear every counterparty and goods screen and still be blocked at the payment stage. US-dollar clearing runs through US correspondent banks, which are subject to OFAC jurisdiction. A UAE-origin payment in USD that touches a sanctioned party's name – even as a passing reference in the payment instruction narrative – can be rejected or frozen by the clearing bank, regardless of whether the underlying transaction appeared clean in the UAE screening. This is not a theoretical risk. It is a regular operational problem for cross-border traders using dollar settlement.

Euro payments raise a parallel issue under EU sanctions. Sterling payments engage OFSI. Even where a payment is denominated in a currency that does not route through a major Western correspondent, the UAE's own Central Bank guidance requires financial institutions to screen the full payment chain – originator, intermediary, and beneficiary – against the applicable lists before processing. The obligation applies to both the paying and receiving institution.

Map the intended payment route before instructing the bank. Identify every correspondent in the chain. Check each institution and each named party in the payment instructions. Where a transaction involves a letter of credit, the issuing bank, advising bank, confirming bank, and nominated bank all require individual screening passes. A transaction where one leg of the payment chain cannot be confirmed as clean should not proceed until clarification is obtained.

The position above covers the standard payment-chain case. Your specific facts – the currency, the correspondent network, the intermediary jurisdictions, the goods category – may produce a different analysis. For an assessment of your exposure under the UAE regime and its interaction with US and EU payment-chain controls, contact Calder & Vance at info@caldervance.com.

Step 6: Handle alerts – escalation, hold, and reporting obligations

When a screen generates a positive alert – a potential match to a designated person or a prohibited goods category – the transaction must be held pending resolution. Proceeding while an unresolved alert sits in the queue is itself a compliance failure, separate from the underlying sanctions question. The alert-management procedure should be documented, role-assigned, and tested before it is needed.

A positive alert requires: first, a name-resolution analysis to confirm or dismiss the match (the match may be a false positive due to a common name or a transliteration variant); second, where the match is confirmed, an assessment of whether any licensing authorisation or exemption applies; third, if no authorisation applies, a decision to block or reject the transaction; and fourth, where blocked assets or a reportable match are involved, compliance with the applicable reporting obligation to the UAE Central Bank and, where relevant, to the UAE Executive Office.

Reporting windows under the UAE regime are short. The Central Bank's anti-money-laundering and sanctions guidance specifies prompt reporting of attempted sanctions violations and of blocked transactions. Verify the current reporting deadlines applicable to your institution type before relying on any timetable, as the guidance is updated periodically. What is fixed is the principle: delay in reporting a confirmed match compounds the compliance exposure.

If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. For a confidential review of a potential breach or a blocked transaction, contact Calder & Vance at info@caldervance.com.

Step 7: Maintain records and design the ongoing programme

Record-keeping is not an afterthought. It is the mechanism by which a business demonstrates, after the fact, that its screening was adequate. UAE supervisory guidance, consistent with the FATF standards to which the UAE has committed, requires financial institutions and DNFBPs to maintain transaction records and customer due-diligence files for a minimum of five years. Export-control records under the EAR carry their own retention requirement; verify the current period applicable to your transaction type.

A programme that produces no documentation trail is effectively no programme at all from a supervisory perspective. Record at minimum: the screening dates and lists queried, the alert disposition and the reasoning for any clearance decision, the identity documents collected, the end-use certificate obtained, and the name of the analyst who reviewed each decision. Where a transaction was escalated to senior compliance or legal, record that escalation and its outcome.

Periodic programme testing matters equally. Screening logic degrades if the underlying lists are not updated, if the fuzzy-matching thresholds are misconfigured, or if the counterparty data fed into the tool is stale. We have acted for businesses where a single outdated list subscription meant that new designations were not captured for weeks after they were issued. Run sample tests against known matches regularly. Update list subscriptions on a schedule that reflects the pace at which designations are issued – and in periods of elevated designation activity, that schedule may need to be daily.

How does UAE trade-transaction screening compare with the OFAC and OFSI approaches?

The UAE regime shares its foundations with the UN Security Council baseline that all three regimes implement, but its autonomous list and its enforcement posture differ in important respects from OFAC and OFSI. Understanding the differences matters for any cross-border business that screens under more than one regime – which, in practice, describes almost every significant UAE trade transaction.

Under OFAC, the ownership test is mechanical: 50 percent or more aggregate ownership by blocked persons triggers a block on the owned entity, even if it is not itself listed. The test does not require a showing of control. Under OFSI and the EU, the ownership-and-control test is broader: a non-listed entity can be caught if a designated person effectively controls it, even without majority ownership. The UAE's domestic test broadly follows the ownership approach for its autonomous list, but EU-origin transactions routed through UAE entities still engage the EU control test.

Licensing and authorisation routes also differ. OFAC issues both general licences (standing authorisations for defined transaction categories) and specific licences (case-by-case permissions for individual transactions). OFSI operates a comparable specific-licence system with a public-interest test for certain categories. The UAE Executive Office issues authorisations for transactions that would otherwise be prohibited under the local list, but the procedural requirements and timelines differ from the OFAC and OFSI routes. A business that has obtained an OFAC licence for a transaction cannot assume that the UAE authorisation will follow automatically, and vice versa.

Secondary-sanctions risk is the third dimension. The US maintains secondary-sanctions programmes that can restrict the access of non-US firms to the US financial system if those firms transact with designated parties under certain US programmes. A UAE-based trader that engages in significant transactions with parties subject to relevant US secondary-sanctions designations may face US correspondent-banking consequences, regardless of whether the UAE regime itself prohibits the transaction. This is a risk that screening under the UAE local list alone will not surface.

Common risk flags and when to involve counsel

Certain patterns in a trade transaction consistently indicate elevated sanctions risk. Recognising them early – before the contract is signed or the goods are shipped – allows a business to structure around the problem or decline the transaction with minimal cost. Recognising them late, after payment has been made or goods have moved, creates an entirely different set of problems.

Flags that warrant immediate escalation include: a counterparty that declines to provide UBO information or provides inconsistent corporate documentation; an end-user who is a different entity from the purchasing counterparty with no clear commercial explanation; goods that are dual-use but are described in the contract in purely civilian terms without supporting end-use documentation; payment routing through a jurisdiction with elevated sanctions risk without a clear commercial rationale; and a transaction price that departs significantly from market rates for the goods in question (a classic indicator of sanctions-evasion structuring that a legitimate business should identify and distance itself from).

A common myth among trading companies is that operating in a UAE free zone provides a buffer from international sanctions obligations. It does not. Free-zone registration changes the applicable UAE domestic regulatory framework for some commercial purposes, but it does not affect the application of US extraterritorial controls to goods with US-origin content, does not alter the UN Security Council obligations implemented under UAE law, and does not prevent a US or EU bank from blocking a payment that touches a prohibited party. In our practice, this misunderstanding has caused significant transaction disruption for businesses that assumed free-zone status meant reduced exposure.

Involve counsel at the point where: a counterparty triggers a potential match on any list; goods carry ECCN classifications that require licence analysis for the destination; the payment chain cannot be fully mapped; a transaction involves a party in a jurisdiction subject to a comprehensive US, EU, or UN programme; or your institution has received a supervisory query about transaction screening. Early involvement allows options that are not available once a transaction has been frozen or a notice of investigation has been issued.

Related practices

Frequently asked questions

What are the steps to screen a trade transaction under UAE?
A UAE trade-transaction screen involves seven sequential steps: establish who administers the applicable lists and confirm which are in scope; build a full counterparty dossier including UBO chain; run a multi-list screen against the UAE Executive Office list, the UN Consolidated List, the OFAC SDN List, and – where relevant – the EU Council list; classify the goods and apply the dual-use overlay; map and screen the payment chain including all correspondents; manage any alerts through a documented escalation procedure; and maintain complete records for the required retention period. Each step must be completed before the transaction proceeds.
What is the most common mistake in trade-transaction screening?
The most common structural error is screening only the named contractual counterparty and stopping at the first corporate layer. Blocked or sanctioned persons frequently hold interests through intermediate holding companies or offshore vehicles. A screen that does not map the full ownership chain – applying both the OFAC 50 percent aggregate ownership test and the UAE and EU control tests – will miss these indirect connections. The second most common error is treating a clean result on the UAE local list as sufficient when the transaction also engages US or EU controls.
How does UAE differ from other regimes here?
The UAE implements UN Security Council obligations through its domestic legislation and maintains an autonomous list administered by the Executive Office – a dual-track structure that both OFAC and OFSI parallel in their own ways. The key practical differences are: the UAE's ownership test broadly follows the OFAC mechanical model rather than the broader EU and OFSI control test; the authorisation and licensing route differs procedurally from OFAC and OFSI processes; and UAE free-zone status provides no exemption from US extraterritorial controls or UN obligations. A business screening only under the UAE local list will not capture all relevant restrictions on a transaction with cross-border payment exposure.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.