AML/CFT isn’t a “bank problem.” The UAE explicitly regulates DNFBPs (Designated Non-Financial Businesses and Professions) and sets expectations on risk assessments, customer/vendor due diligence, sanctions screening, monitoring and recordkeeping. If your business accepts cash, issues refunds, or uses layered subcontractors, your exposure is real, and regulators increasingly expect proportionate controls with evidence. Sector risk snapshots (practical, not theoretical) Health