Dubai's VARA Updates Anti-Money Laundering Guidelines, Requires Cryptocurrency Firms to Integrate Real-Time Risk Assessment against FATF Blacklist

BlockBeats News, June 16 - The Dubai Virtual Asset Regulatory Authority (VARA) recently released an updated version of its Anti-Money Laundering (AML) regulatory guidance. The guidance requires cryptocurrency businesses operating in Dubai to dynamically incorporate FATF high-risk and blacklist country data into their risk assessment models in real time, replacing the previous static compliance tracking mechanism. The new regulation mandates that companies update their risk assessments at least every three months, with immediate updates required in case of significant changes to their operational structure or product lines. Additionally, companies must conduct separate assessments for proliferation financing risk and targeted financial sanctions risk, which should not be conflated with general anti-money laundering compliance. Furthermore, companies are required to formally document the risks associated with AI-assisted operations and anonymous enhanced transaction platforms.

VARA stated that compliance officers, senior management, and board members must take full responsibility for the company's remaining risk rating. The regulatory approach has shifted from post facto punishment to proactive systemic risk management.