According to Bitcoin.com, the Dubai Virtual Assets Regulatory Authority (VARA) recently released a new version of the Anti-Money Laundering (AML) regulatory guidelines, requiring cryptocurrency businesses operating in Dubai to incorporate real-time data on high-risk and blacklist countries from the FATF into their risk scoring models, replacing the previous static compliance tracking mechanism.
The new regulations require businesses to update their risk assessments at least every three months, and any significant changes in operational structure or product lines must be updated immediately; at the same time, the risks of diffusion financing and targeted financial sanctions must be assessed separately and not be merged with general anti-money laundering compliance; in addition, businesses must formally document the risks associated with AI-assisted operations and anonymous-enhanced exchanges.
VARA stated that compliance officers, senior management, and board members must take full responsibility for the company’s residual risk ratings, and the regulatory focus has shifted from post-event penalties to proactive systemic risk management.