Most traders think of proliferation financing (PF) as a problem for banks. Weapons of mass destruction feel a long way from a general trading licence in a free zone.
The UAE's own risk assessment disagrees. The UAE's latest Proliferation Financing National Risk Assessment rates the UAE's overall PF risk as medium-high, and the reasons it gives read like a description of the trading and logistics sector: a global trade and transshipment hub, proximity to Iran, commercial free zones, front companies with complex ownership and trade in dual-use goods.
What proliferation financing looks like in trade
Sanctioned programmes rarely buy weapons outright. They buy components, machinery, chemicals, electronics and services, and they need someone to finance, ship, insure and store them. That is where UAE businesses come in, usually without knowing it.
The typologies highlighted in the National Risk Assessment include:
- forged bills of lading and trade documents
- goods described with specifications set just below dual-use control thresholds
- payments through personal or third-party accounts
- front companies moving sanctioned oil
- smuggling of cash and gold
- converting crypto to dirhams through over-the-counter brokers
- intermediaries used to hide the real end user
The assessment also notes that customs brokers and freight forwarders often carry out limited due diligence. In the chain of a sanctions-evasion deal, the weakest link is often the one that asks the fewest questions.
The legal framework, in brief
Proliferation financing is now a standalone crime
Under Federal Decree-Law No. 10 of 2025, financing the manufacture, supply, export, trans-shipment, brokering, transport or storage of weapons of mass destruction, including dual-use goods, is a crime in its own right. Knowledge can be inferred from the circumstances. Individuals face imprisonment and fines of AED 1 million to AED 10 million. Companies face fines of AED 5 million to AED 100 million and mandatory dissolution.
Targeted financial sanctions apply to everyone
Cabinet Decision No. 74 of 2020 requires any person in the UAE, not just regulated firms, to freeze funds and assets of listed persons without delay, meaning within 24 hours of the listing decision, and without prior notice. For PF, the relevant UN regimes are those on North Korea (UNSCR 1718) and Iran. UN sanctions measures on Iran were reinstated in September 2025 through the snapback mechanism, although some Security Council members dispute their validity. Screen against the lists as the EOCN publishes them.
Regulated firms, including DNFBPs, must also register with the EOCN notification system, screen customers and counterparties, notify freezing measures within five business days, and report confirmed and partial name matches through goAML as the EOCN guidance requires.
Export controls
Federal Decree-Law No. 43 of 2021 on the Goods Subject to Non-Proliferation regulates the export, re-export, transit, transshipment and brokering of controlled goods, including in free zones, and lets the authorities seize goods not on the control list where there is sufficient evidence to suspect a WMD-related use or a sanctioned end user.
PF risk is broader than name screening
This is the point most traders miss. Screening a customer's name against a sanctions list is a rules-based check. It will not catch a front company that has never been listed.
As the FATF defines it, proliferation financing risk means the risk that you breach, fail to implement or help evade those sanctions. Cabinet Resolution No. 134 of 2025 requires regulated firms to assess PF risk and take measures to manage and mitigate it where it is high. Where there is no name match but something does not add up, the right route is a suspicious transaction report, not a shrug.
Red flags for traders and logistics firms
- The customer is vague about the end user or end use, or reluctant to provide it
- Goods do not match the buyer's line of business
- Shipping routes are circuitous, or pass through jurisdictions with no commercial logic
- Transshipment through countries bordering sanctioned states
- Dual-use items described in generic terms, or with specifications just below control thresholds
- Payment from third parties, personal accounts or unrelated jurisdictions
- Newly formed buyers with nominee shareholders or shared addresses
- Requests to change consignee, vessel or port after the deal is agreed
- Vessels with gaps in their tracking history or recent changes of flag or name
- Willingness to pay well above market price or in cash
What to do now
- Add a PF section to your risk assessment, using the 2026 National Risk Assessment as your reference point.
- Register with the EOCN notification system and screen customers, beneficial owners, consignees, carriers and vessels.
- Classify what you trade. Check whether any product is on the UAE control list or could be dual-use.
- Collect end-user information and statements for sensitive goods, and verify them.
- Train sales, operations and logistics staff on the red flags above.
- Document how you resolve alerts, and escalate unresolved concerns to your Compliance Officer.
The cost of getting it wrong
For DNFBPs, Cabinet Resolution No. 71 of 2024 sets a fine of AED 500,000 to AED 1,000,000 for failing to freeze funds. Failing to register with the EOCN, failing to screen and failing to report a match can each cost up to AED 1 million. Where the facts amount to a PF offence, criminal penalties under the 2025 law can also apply.
Sanctions evasion depends on businesses that do not ask questions. CPF is about being the one that does.