Due Diligence UAE 2026: Verify Companies, UBO and Partners

Every bad deal looks fine at the start – that is what makes it a deal. Due diligence is how you find out whether "fine" survives contact with the facts. In the UAE, where ownership can sit behind several corporate layers and a licence tells you less than you think, the checks you run before you commit are usually cheaper than the ones you wish you had run afterwards.

This guide explains how to verify a UAE company and counterparty properly: what to check, the legal framework that governs it, the levels of diligence, and the red flags worth stopping for. It has been reviewed by Jashvantkumar Prajapati of Avyanco Group.

The deals that go wrong rarely fail on the numbers you are shown in the meeting. They fail on the ones you were not. Diligence is simply the discipline of asking for the second set.

— Jashvantkumar Prajapati, Business Structuring Specialist, Avyanco Group (reviewer)

What due diligence is, and why it matters

Due diligence is the structured process of verifying the facts before you take on risk – before you buy a company, take a partner, rely on a supplier, or accept an investor. It replaces trust with evidence. In a UAE context, that means establishing that the entity legally exists, identifying the real people who own and control it, confirming its licence and tax are in order, and surfacing any legal, financial or reputational problems. The cost of doing it is small. The cost of skipping it shows up later, in full.

The legal framework

Due diligence in the UAE is not only good practice; for many businesses it is a legal duty. Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism requires regulated entities – including designated non-financial businesses and professionals – to perform customer due diligence, take a risk-based approach, appoint an AML compliance officer, keep records for at least five years, and report suspicious activity through the goAML platform. Penalties for failures range from AED 50,000 to AED 5,000,000. Even where you are not strictly regulated, these standards are the sensible benchmark for any verification.

Three levels of diligence

Match the depth to the exposure. A small one-off supplier needs less than a partner who will control part of your company or an acquisition you are funding.

What to verify in a UAE counterparty

• Corporate existence – valid, current trade licence with the expected activity and people
• Ownership and control – the Memorandum of Association, shareholding, and the ultimate beneficial owners
• Tax standing – verify the tax registration number on the Federal Tax Authority system
• Financial health – accounts, solvency, liabilities and, where relevant, bank references
• Legal and regulatory – litigation, licence conditions, and sanctions / PEP screening
• Reputation – adverse media and market standing

How a due diligence engagement runs

Timelines are indicative. A single-entity corporate check is quick; full commercial due diligence on an acquisition typically runs two to four weeks.

Red flags worth stopping for

• A licence that is expired, suspended, or lists activities that do not match the business
• Ownership that cannot be traced to real people, or that keeps changing
• Reluctance to share basic documents you would expect any genuine company to hold
• A tax registration number that fails verification on the FTA system
• Financials that do not reconcile with the scale of the business being described
• Connections to sanctioned parties or high-risk jurisdictions

What due diligence costs

Cost scales with depth. A focused corporate verification on one UAE company is modest and fast. Full commercial due diligence – financial, legal and ownership tracing on an acquisition – is a larger engagement priced to the work involved. Set against the size of the commitment you are checking, it is almost always the cheaper side of the equation. For investment-grade transactions, pair this with our risk and due diligence framework.

Five due diligence mistakes to avoid

1. Trusting the licence alone. A valid licence proves registration, not solvency, ownership or honesty.
2. Skipping ownership tracing. If you cannot name the real people in control, you have not finished.
3. Matching depth to deal size, not risk. A small partner with big control deserves real scrutiny.
4. Ignoring the FTA verification. An unverifiable tax number is a fast, telling red flag.
5. Running it after you have committed. Diligence only protects you if it happens before the signature.

Frequently asked questions

What is due diligence in a UAE business context?

Due diligence is the structured verification you carry out before trusting a counterparty with money or commitment - a partner, an acquisition target, a major supplier, or an investor. In the UAE it means confirming the company legally exists, who really owns and controls it, whether its tax and licence are in order, and whether there are legal, financial or reputational red flags. It turns assumptions into checked facts.

How do I verify that a UAE company is genuine?

Start with the trade licence: confirm it is valid, current, and lists the activity and people you expect, through the issuing economic department. Cross-check the tax registration number on the Federal Tax Authority's system, review the Memorandum of Association and shareholding, and identify the ultimate beneficial owners. A genuine company stands up to all of these; a problematic one usually fails on one early.

What is the difference between KYC, due diligence and enhanced due diligence?

KYC (know your customer) is the baseline identity check - who is this person or company. Due diligence goes further, verifying ownership, finances, licence status and legal standing. Enhanced due diligence (EDD) is the deeper level required for higher-risk cases - politically exposed persons, high-risk jurisdictions, or unusually large or complex deals. The right depth is set by the risk, which is the principle behind UAE AML law.

Which UAE law governs due diligence and AML?

The core framework is Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism. It requires regulated businesses - including many non-financial businesses and professionals - to perform customer due diligence, apply a risk-based approach, appoint a compliance officer, keep records for at least five years, and report suspicious transactions through the goAML system. Penalties run from AED 50,000 to AED 5,000,000.

What should a due diligence report cover?

A solid report covers corporate verification (licence, MOA, shareholding, UBO), financial review (accounts, solvency, liabilities), legal and regulatory standing (litigation, licence conditions, sanctions and PEP screening), and a clear risk rating with recommendations. The value is not the data - it is the judgement: what the findings mean for your decision, and what conditions you should attach before proceeding.

How long does due diligence take in the UAE?

A focused corporate check on a single UAE company can be done in a few days. Full commercial due diligence on an acquisition - financials, contracts, litigation, ownership tracing - typically runs two to four weeks, sometimes longer if records are incomplete or the structure crosses borders. The time depends far more on how cleanly the target keeps its records than on the size of the deal.

Do I need due diligence for a local partner or supplier?

If real money or reliance is involved, yes. A local partner who controls part of your company, or a supplier you will depend on, deserves the same scrutiny as an acquisition - proportionate to the exposure. The deals that go wrong rarely fail on the numbers you were shown. They fail on the ones you were not, and basic verification is what surfaces them.

Can you run due diligence discreetly?

Yes, and often you should. Much of the work uses official registers, public filings, the FTA verification tools and structured screening, none of which alerts the counterparty. Where direct enquiries are needed, they can be framed as standard onboarding. Discretion matters most when you are evaluating a partner you still hope to work with - you want the facts without poisoning the relationship.

Sources and official references

Related guides

• Corporate secretarial and UBO
• Risk and due diligence framework
• Open a UAE business bank account
• UAE business setup overview
• UAE cost calculator
• Talk to an adviser

This guide is general information, not legal, tax or financial advice. UAE rules, fees and penalties change without notice. Confirm the current position with the relevant authority, or speak to a licensed adviser, before you act.