EGRC provides sanctions compliance advisory and Targeted Financial Sanctions (TFS) support for UAE businesses and regulated firms.
Sanctions exposure does not sit in one place. It reaches across the customer file, the ownership structure, the counterparties a business pays and the messages that carry those payments — which is why coverage, not software, is usually the first thing to fix.
A screening programme is judged on what it touches. These four areas account for most of the gaps EGRC finds when reviewing an existing sanctions framework, and each one needs its own trigger, owner and evidence.
→ Sanctions Risk Assessment
→ Targeted Financial Sanctions Compliance
→ Sanctions Policies & Procedures
→ Customer / UBO / Counterparty Screening
Each surface needs its own screening trigger, owner and record. A gap in any one of them is the gap a reviewer will find first.
Screening starts at onboarding and must reach through the ownership structure. Legal entities, directors, authorised signatories and ultimate beneficial owners all need to be tested — not just the name on the account.
Payment counterparties, correspondent institutions, agents, suppliers, vessels and trade parties sit outside the customer file but carry the same exposure, particularly in cross-border and trade finance activity.
Payment instructions, trade documentation and message fields are screened in flight. Free-text and reference fields matter, because that is often where a designated party or jurisdiction actually appears.
A clean result at onboarding is only valid until the next listing. When a list changes, the entire book should be re-tested, and that re-screen must leave a record that can be shown to a reviewer.
Targeted Financial Sanctions move quickly. The distance between a list changing and a firm being able to prove it acted is where most regulatory findings are made.
United Nations Security Council designations flow into the UAE framework, and the Executive Office for Control and Non-Proliferation issues notifications to registered entities. The UAE also maintains its own Local Terrorist List, so relying on a single international list is not sufficient.
Every customer, beneficial owner and counterparty is re-screened against the updated list. Alerts are triaged into true matches, potential matches requiring investigation, and discounted matches — each with a documented reason.
A confirmed match must be frozen without delay and within the timeframe prescribed by the applicable UAE requirements. No funds or assets may be dealt with, no services provided, and the customer must not be tipped off that a freeze or report is in progress.
Funds-freeze and partial-name-match reports are filed through the goAML platform and the relevant notification channels. Records of the decision, timing, approver and supporting evidence are retained so the action can be defended later.
Screening rarely fails because a system was never bought. It fails because thresholds were left at vendor defaults, secondary identifiers were never used, and nobody recorded why an alert was discounted.
Arabic name transliteration, corporate name variants and shared common names all push false positives up. EGRC tunes matching logic against the names actually in your book, then evidences the tuning so the calibration itself can withstand review.
→ Fuzzy matching and Arabic name transliteration
→ Secondary identifiers: date of birth, nationality, ID number
→ Documented whitelisting and discount rationale
→ Testing with known-positive control samples
Drag the handle to see the practical difference tuning and evidence make.
A sanctions framework is assessed on whether it can be demonstrated. This is the practical shift EGRC works toward on most engagements.
| Capability | Typical setup | With EGRC |
|---|---|---|
| List coverage | UN list only, updated manually | UN, UAE Local Terrorist List and relevant jurisdictional lists, with change monitoring |
| Matching logic | Vendor defaults, never tested | Calibrated thresholds, tuned for name structures actually in the book |
| Alert handling | Backlog, inconsistent reasons | Risk-prioritised queue with documented discount rationale |
| Freezing | Informal, undocumented timing | Defined procedure with owners, timing and evidence of the freeze decision |
| Assurance | No independent testing | Periodic independent review with remediation tracked to closure |
Independent review is not an audit of good intentions. It tests whether screening, escalation, freezing and reporting behave the way the policy claims they do.
EGRC provides independent sanctions reviews, screening system and threshold assessments, remediation planning and targeted training — with findings tracked through to closure so management can show what changed and when.
→ Independent sanctions review
→ Screening and threshold assessment
→ Remediation planning and tracking
→ Role-based sanctions training
Practical answers to the sanctions questions that come up most often in UAE engagements.
Speak with EGRC about sanctions screening, TFS obligations, threshold tuning and independent review.