UAE M&A Due Diligence: What Actually Matters

Effective uae m&a due diligence comes down to one truth: because UAE private company records are not publicly accessible, you cannot verify a target without its full cooperation, so the quality of your investigation depends entirely on the disclosures you secure before signing. Everything else flows from that reality. Therefore, founders and SMBs buying a UAE business must structure the diligence process to force transparency, confirm regulatory standing, and price the real risk rather than the seller’s story.

Why UAE M&A Due Diligence Starts With Cooperation

In many markets you can pull filings, charges, and litigation history from a public register. In the UAE, you cannot. Private company records sit behind the licensing authorities and are not open to outsiders, as noted in published UAE M&A practice notes.

Consequently, the single most important deal term is information access. Before you spend on advisers, secure a signed letter of intent that obliges the seller to open the data room. Without that, you are buying blind.

What you must demand from the target

• Full corporate chain: shareholder register, board resolutions, and amendments to the memorandum.
• The valid trade license and proof of renewal for the current period.
• All material contracts, including supplier, customer, lease, and financing agreements.
• Tax registration and filing history with the Federal Tax Authority.
• Any pending or threatened litigation, regulatory notices, or labour disputes.

Because you depend on disclosure, a robust Legal Due Diligence UAE scope should pair contractual warranties with indemnities for anything the seller fails to reveal. As a result, you transfer the risk of hidden problems back to the party who knows the business best.

Merger Control: The AED 300 Million Question

Since 31 March 2025, the UAE operates a mandatory merger control regime under Federal Decree-Law No. 36 of 2023 and Cabinet Resolution No. 3 of 2025, with the Ministry of Economy as the competent authority. Importantly, the ministerial decree fixing the thresholds was issued on 20 January 2025.

Therefore, every deal team must screen the transaction against the filing triggers early, because notification timelines are long and the penalties for missing them are severe.

When a filing is mandatory

A mandatory merger filing is triggered in two situations:

• Total annual sales of the parties in the relevant UAE market exceed AED 300 million in the last financial year; or
• A business holds a market share above 40% of total sales in the relevant market.

Notably, the old SME exemptions (under 200 employees, or 250 for manufacturers) have been removed. As a result, smaller deals can now fall within scope, so founders should not assume size alone keeps them clear.

Timelines and the new “silence means rejection” rule

Parties must notify the Ministry of Economy at least 90 days before completing the transaction. Meanwhile, the Ministry decides within 90 days of a complete filing, extendable by 45 days.

Crucially, the regime reverses the old rule. Previously, silence implied approval. Now, if no decision is rendered within the review period, the transaction is considered rejected. Consequently, you must build the filing into your closing calendar, not treat it as an afterthought.

Penalties and minority deals

Failure to file a required notification carries a fine of 2% to 10% of the last fiscal year’s annual revenues. Where revenues cannot be calculated, the fine ranges from AED 500,000 to AED 5 million.

Furthermore, minority interests can be caught if they give rise to control. The legislation does not define control or set a minimum percentage, so even a non-majority stake with rights to block strategic decisions may need a filing. Although M&A advisory can map this early, note that the rules do not apply to undertakings in ADGM or the DIFC.

UBO, Tax, and License Checks That Catch Buyers Out

Beyond merger control, three quieter risks sink UAE deals: undisclosed beneficial ownership, misunderstood free zone tax status, and lapsed licenses. Each is verifiable during legal due diligence, provided you ask the right questions.

Ultimate Beneficial Owner disclosure

Every licensed UAE company must disclose its Ultimate Beneficial Owner under Cabinet Resolution No. 109 of 2023, which replaced Cabinet Resolution No. 58 of 2020. A UBO is any natural person who directly or indirectly owns 25% or more of capital, holds 25% or more of voting rights, or exercises effective control. If none is identified, the senior management officer is deemed the UBO.

For deadlines, new entities file UBO data within 60 days of registration; changes must reach the registrar within 15 days; and extra requested data is due within 14 days. First-time violations draw a written warning under Cabinet Decision No. 132 of 2023, while repeat breaches carry fines up to AED 50,000 and then AED 100,000, plus possible license suspension up to twelve months. However, DIFC and ADGM entities follow separate frameworks and are exempt.

The free zone “0% tax” trap

The UAE Corporate Tax Law (Federal Decree-Law No. 47 of 2022) applies a 9% tax on taxable income above AED 375,000, with a 0% rate only on Qualifying Income for a Qualifying Free Zone Person. Importantly, free zone companies are within scope by default: every entity must register with the Federal Tax Authority, file returns, and pay tax unless it qualifies as a QFZP.

QFZP status requires meeting every condition at once, including adequate substance, qualifying income, transfer pricing compliance, de minimis limits, and audited IFRS statements. Under Cabinet Decision No. 100 of 2023, published by the Ministry of Finance, a QFZP may earn limited non-qualifying income, capped at the lower of 5% of total revenue or a set cap. Therefore, a target claiming “0% tax” may in fact owe back tax, so verify its QFZP eligibility before you rely on it. A thoughtful corporate structuring review can flag this exposure early.

License validity and emirate-level fees

A lapsed trade license can void contracts, freeze bank accounts, and block share transfers. As a buyer, confirm the license is current and renewed. For context, Ajman’s official Department of Economic Development lists fees including AED 600 for economic license renewal and AED 200 for commercial register registration, so renewal costs are modest compared with the disruption of a lapse. When forming or restructuring around a deal, our company formation support keeps the licensing chain clean.

UAE M&A Due Diligence: Cost and Risk At A Glance

As of 2026, here is how the core diligence workstreams compare on what they protect and where the risk concentrates.

Workstream	What it verifies	Key threshold or rule	Risk if skipped
Merger control	Whether a filing is mandatory	AED 300m sales or 40% market share	Fine of 2%–10% of revenue
UBO disclosure	True ownership and control	25% ownership or effective control	Fines, license suspension
Corporate tax	QFZP eligibility, FTA filings	9% above AED 375,000	Back tax and penalties
License and corporate	Valid license, clean chain	Current renewal on file	Void contracts, frozen accounts

Generally, the cost of diligence is small against the liabilities it surfaces. If a dispute does emerge post-closing, early legal consultation helps you decide whether to negotiate, claim under warranties, or pursue mediation.

Frequently Asked Questions

Can you do due diligence on a UAE company without the target’s cooperation?

No, you cannot conduct meaningful due diligence on a UAE private company without its full cooperation, because private company records are not publicly accessible. Therefore, buyers must secure data-room access through the letter of intent and back it with seller warranties and indemnities.

When does a UAE M&A deal require a merger control filing with the Ministry of Economy?

A filing is mandatory where the parties’ total annual UAE sales exceed AED 300 million in the last financial year, or where a business holds over 40% market share in the relevant market. Parties must notify at least 90 days before completion, and the Ministry decides within 90 days, extendable by 45 days.

What are the penalties for failing to file a required UAE merger control notification?

Failure to file carries a fine of 2% to 10% of the last fiscal year’s annual revenues. Where revenues cannot be calculated, the fine ranges from AED 500,000 to AED 5 million. In addition, under the new regime, silence from the Ministry now counts as rejection rather than approval.

Who counts as an Ultimate Beneficial Owner in the UAE and what are the filing deadlines?

A UBO is any natural person who directly or indirectly owns 25% or more of capital, holds 25% or more of voting rights, or exercises effective control. New entities file UBO data within 60 days of registration, report changes within 15 days, and supply additional requested data within 14 days.

Why might a free zone company labelled “0% tax” still owe UAE corporate tax?

Because free zone companies are within the scope of UAE corporate tax by default and only earn the 0% rate on Qualifying Income if they meet every Qualifying Free Zone Person condition. If the entity fails any condition, such as substance, transfer pricing, or audited IFRS statements, the standard 9% rate above AED 375,000 applies.

Are DIFC and ADGM companies subject to UAE federal competition and UBO rules?

No, undertakings in ADGM and the DIFC fall outside the federal merger control regime, and entities in these financial free zones are exempt from the UBO framework under Cabinet Resolution No. 109 of 2023. Instead, they are governed by their own separate frameworks.

Disclaimer: This article is for general informational purposes only and does not constitute legal, tax, or regulatory advice. Rules and fees in the UAE change frequently. Before acting on anything you read here, speak to a qualified advisor — we are happy to help.