Investigative Due Diligence for a Commodities Buyer in Dubai

Case history, Corporate Intelligence & Investigative Services

A supply agreement that needed intelligence, not reassurance

A European commodities trader was in late-stage negotiation on a precious metals supply agreement with a company registered in a Dubai Free Zone. Commercial terms were substantially agreed. What remained unresolved was whether the counterparty, its ownership and its represented trading record were consistent with the evidence available from lawful sources.

The trader held a trade licence, a company profile and a set of introductions. None of that established who ultimately controlled the entity, whether it had moved metal at the volumes discussed, or what protection existed for a prepayment. The decision required more than a database result, which is the point at which investigative due diligence in Dubai becomes proportionate to the exposure.

Inside Risk Management FZCO was engaged as the client's professional point of contact. Scope, jurisdictions, purpose, source categories, timing and deliverables were agreed in writing before any collection began.

Request a Confidential Consultation Speak with an Advisor

Scope definition

The priority intelligence questions

Scope is set by the decision, not by the volume of information available. These were the questions the engagement was commissioned to answer, and the questions the final report was measured against.

Is the ownership and control structure of the counterparty transparent and credible?
Who ultimately owns, controls or influences the entity, and are there undisclosed interests or connected parties?
Is the represented trading history consistent with lawfully accessible evidence?
Do material litigation, insolvency, regulatory, sanctions or reputational concerns exist in relation to the entity, its owners or its associated companies?
Which elements of the proposed transaction structure carry cross-border or documentary exposure?
Which information gaps remain, and what further verification would be proportionate before signature?

Beneficial Ownership & Corporate Network Intelligence

Reconstructing who stood behind the contract

A supply agreement binds two legal entities. Risk attaches to the persons who own, control or influence them. Legal ownership on its own does not provide the complete intelligence picture, particularly where a structure is layered across jurisdictions, so the first workstream separated recorded ownership from indicators of actual control.

The contracting entity

Legal name, registration number, licensing authority, registered address and the licence category under which the proposed metals activity would actually fall.

Shareholding and control chain

Registered holders, percentages, documented changes over time, and whether any holder is itself a corporate vehicle in another jurisdiction requiring its own chain analysis.

Beneficial owners and control indicators

The natural persons who ultimately own or control the entity, traced through each documented layer. A beneficial ownership investigation assesses nominee or influence indicators from documented evidence. Beneficial ownership is not attributed from weak or indirect association alone.

Associated and connected entities

Cross-directorships, shared addresses, shared contact details and shared trade names, including dormant and struck-off companies carrying the same principals, presented as a network map with evidential confidence levels.

Signatories, authorised representatives and any intermediary introducing the transaction were assessed on the same basis, within the agreed scope. An agent remunerated on completion forms part of the risk picture whatever the contract describes him as.

Corporate Intelligence

Corporate verification and trading history

The UAE has no single national company register, and each free zone maintains its own filings under its own disclosure regime. A file on a Free Zone counterparty is assembled authority by authority from lawfully accessible sources. The corporate layer of this engagement was delivered as a company reputational dossier within the wider intelligence report.

Trade licence validity, issuing authority and expiry
Licensed activity codes against the metals trade proposed
Constitutional documents, share capital and amendments
Directors, managers and authorised signatories
Establishment registration and declared headcount
Operating presence and premises consistency indicators
Incorporation date and length of operating history
Declared counterparties, corridors and metal types
Evidence of prior activity at comparable volume
Vault, custodian and logistics arrangements represented
Refinery accreditations or supply relationships asserted
Group entities in other emirates and jurisdictions
Prior trade names and corporate restructuring history
Domain age, digital footprint and commercial presence
Consistency between filings and negotiation representations
Status of struck-off, dormant or liquidated affiliates

Risk indicators

What the engagement tested, and on what basis

Verification establishes that an entity exists as described. It does not establish that a commercial relationship with it is sound. The second workstream was conducted independently and without a predetermined conclusion, testing each representation against lawfully accessible evidence and recording where evidence was absent.

Reputational Intelligence

Local-language and international media, adverse-media sources and archived reporting, assessed for source credibility, chronology and materiality. Where public reporting appeared curated or thin relative to the entity's claimed profile, that was recorded as an indicator warranting further enquiry, not as a finding.

Litigation & Dispute Intelligence

Proceedings, debt claims, insolvency and arbitration across the relevant onshore and free zone forums, where lawfully accessible, together with procedural chronology and the connection between disputes, corporate changes and principals.

Fraud & integrity indicators

Patterns rather than isolated events: serial formation and dissolution, recycled trade names, documentary inconsistencies, addresses shared with unrelated entities, and principals connected to prior failures in the same commodity line.

Sanctions and PEP exposure

The entity, its owners, its directors and its identified affiliates were screened against international sanctions, PEP and compliance databases, with close-associate relationships inside scope. Sanctions and PEP screening records a match, or the absence of a match, as at the date screened.

Regulatory context

Precious metals dealers fall within the UAE anti-money-laundering perimeter as designated non-financial businesses and professions, supervised by the Ministry of Economy including in commercial free zones. The assessment considered whether the counterparty's conduct was consistent with a supervised entity.

Asset & commercial interest indicators

Companies, shareholdings, directorships and registered interests where lawfully available, assessed as financial-capacity indicators against the working capital the proposed contract implied. Private bank balances and confidential financial records are outside scope.

Dubai skyline of commercial towers, the free zone environment in which the counterparty entity was registered

Transaction exposure

Cross-border risk in a precious metals supply agreement

Counterparty risk is one component. The other sits in how the transaction is structured, and a physical metals trade crosses several jurisdictions before settlement. Each of the following was assessed against the draft agreement, within the agreed scope.

Provenance: the stated origin of the metal and whether the corridor touches conflict-affected or high-risk sourcing areas.
Chain of custody: refinery, vault, custodian and transport links, and whether each is verifiable independently of the seller.
Assay and title transfer: who assays, where title passes and which Incoterm governs the moment of transfer.
Payment routing: the banks and intermediaries in the settlement chain and the jurisdictions they sit in.
Prepayment protection: what security the buyer holds on non-delivery and whether it is enforceable where identified interests are located.
Documentary consistency: invoices, packing lists, warehouse receipts and shipping papers assessed against one another.

A supply agreement is a continuing relationship rather than a single event, so the report also established the baseline for periodic review under third party risk management once shipments commenced.

Methodology

The structured intelligence lifecycle applied

Qualification and scope

Confirm the decision, the client's authority and lawful basis, the targets and identifiers, the jurisdictions, the intended use, the exclusions and the deliverables. Work begins only once this is accepted in writing.

Collection strategy

Determine the lawful source categories, methods and verification priorities proportionate to the mandate. Availability of a source does not by itself justify its use.

Collection and multi-source validation

Gather relevant records and open-source material, then corroborate material findings against independent sources wherever reasonably possible rather than aggregating database entries.

Assessment, review and report

Connect entities, people, events and indicators in their jurisdictional context, subject the analysis to senior review and quality assurance, then deliver findings, gaps, limitations and proportionate next steps.

Source categories used in this engagement

The source mix is selected case by case, subject to lawful access, relevance and the agreed scope. For this mandate it comprised the following.

Corporate registries and official filings
Free zone authority records and company disclosures
Court, litigation and insolvency records where accessible
Regulatory publications and enforcement notices
International sanctions, PEP and compliance databases
Publicly available financial and commercial information
Licensed commercial and professional information resources
Local-language and international adverse-media sources
Open-source intelligence and archived internet resources
Domain, email and digital-footprint indicators
Client-supplied documents lawfully obtained and provided
Country, sector and corridor risk context

How every statement in the report is classified

Competitor material rarely shows the reader how the evidence behind a conclusion was categorised. We publish it, because a compliance function or deal committee needs to know which sentences are established, which are asserted by others, which are signals, and which are professional judgement.

Category	What it means	How it is treated
Verified fact	Confirmed against an identified official or primary record, with provenance, date and jurisdiction stated	Reported as established, with the source and its accessibility limitations recorded
Allegation	An assertion made publicly or by a third party that has not been adjudicated or independently confirmed	Attributed to its source, with chronology and any response or outcome, never presented as fact
Indicator	A documented signal that raises a question without resolving it, such as a shared address or a pattern of dissolutions	Recorded with the evidence behind it and the further verification it would justify
Analytical assessment	The professional judgement of the analyst on what the body of findings most plausibly means	Labelled as assessment throughout, with alternative interpretations considered at senior review
Information gap	A record that was unavailable, restricted, silent or outside the lawful scope of the mandate	Stated explicitly. The absence of a finding is never presented as a clean result

Governance

Senior analyst review and Human-in-the-Loop

No conclusion in this engagement was generated automatically. Every material finding passed through professional review before release, and the review is calibrated to the purpose, risk profile and jurisdiction of the mandate.

Analytical supervision

Relevance, source reliability, proportionality and alternative interpretations are challenged during the analysis rather than after it, with sensitive findings escalated.

Senior analyst quality assurance

A senior analyst verifies that findings and conclusions are supported by the available evidence, remain within the agreed scope, and carry their limitations on the page.

Executive validation

Material or sensitive conclusions receive an additional approval layer before release where the engagement requires it. Information-security controls are structured with reference to ISO/IEC 27001:2022 principles.

A hand signing a commercial agreement with a pen, representing the client decision the intelligence report supported

Reporting and outcome

What the report contained, and who decided

Executive summary and overall risk rating

The agreed intelligence questions, answered in order, with the methodology and source categories stated and an overall rating applied to the counterparty and to the transaction structure separately.

Findings, network map and chronology

Ownership and relationship analysis, litigation and regulatory position, reputational findings and integrity indicators, each carrying its evidential classification and its source.

Gaps, conflicts and limitations

Records that were unavailable, restricted or inconsistent were set out as such, alongside the items that would require official verification, legal advice or further authorised work.

Final Recommendation and the client's decision

An analyst-prepared recommendation of GO, Conditional GO or NO GO, with the conditions specified: prepayment security, staged volumes, independent assay and named documents before first delivery. The recommendation is advisory. The decision on the supply agreement remained with the trader and its own legal and compliance professionals.

The value to the client was proportionate exposure rather than eliminated exposure: commercial terms priced to the risk actually evidenced, a documented and defensible enquiry its own supervisors could inspect, and a clear view of the reputational association it was about to enter.

Pre-signature Scope, jurisdictions, source categories, cost and timing agreed in writing before any collection begins.

Request a scoping discussion

Legal-by-scope

What this engagement did not include

Every mandate is assessed against purpose, proportionality, jurisdiction, authority, confidentiality and data-protection requirements. The following are excluded unless specifically authorised, lawful and operationally feasible.

Private financial records: bank accounts, balances, transactions and confidential financial information.
Non-public official information: police, criminal-record, immigration or other government data not lawfully accessible.
Protected content: private communications and material behind access controls. Privacy settings are not circumvented.
Improper methods: password bypassing, unauthorised access and deceptive pretexting are not used in any circumstances.
Guaranteed discovery: no engagement guarantees identification of every concealed interest, asset, relationship or adverse event.
Legal determinations: the report does not conclude that fraud, crime, ownership, solvency or entitlement has been legally established, and it does not constitute legal, tax or financial advice.

Findings reflect the information lawfully available and verifiable at the time of the assignment. Where an engagement would involve criminal-record, financial or other sensitive personal data, additional contractual, privacy and compliance requirements apply, and a separate impact assessment may be required.

Database-led screening compared with intelligence-led assessment

× Database result alone

A valid licence is read as evidence of legitimacy.
Registered shareholders are assumed to be the controllers.
Trading history rests on the counterparty's own account.
Screening returns a list of hits without materiality assessment.
Facts, allegations and indicators are presented at the same weight.
No professional review sits between the data and the decision.

✓ Intelligence-led assessment

Licence scope is tested against the activity contracted for.
Ownership is traced through documented layers with confidence levels.
Represented volumes are corroborated across independent sources.
Findings are assessed for materiality to the specific decision.
Facts, allegations, indicators and assessments are distinguished.
Senior analyst review precedes release, and the client decides.

Frequently asked questions

What is investigative due diligence for a commodities buyer?

It is an intelligence-led assessment of a supplier or trading counterparty before contract, built from lawfully accessible sources that the counterparty does not control. For a commodities buyer it covers corporate verification, beneficial ownership and network reconstruction, trading history, litigation and regulatory position, sanctions and PEP exposure and reputational intelligence, then extends into the transaction itself: provenance, chain of custody, payment routing and prepayment protection. Financial and legal review examine what the seller provides. This examines the wider evidential picture and identifies what is missing from it.

Why is a Dubai Free Zone counterparty harder to assess than a mainland company?

The UAE has no single national company register, and each free zone maintains its own filings under its own disclosure regime. Information that sits in one searchable place in other markets has to be assembled authority by authority here, and some of it is obtainable only through lawful direct enquiry rather than a database lookup. That is a practical obstacle rather than an insurmountable one, but it is why a generic international screening product tends to return a thin result on UAE entities.

Does a valid trade licence mean the counterparty is safe to trade with?

No. A licence establishes that an entity is registered and permitted to conduct certain activities. It does not evidence solvency, trading track record, or who ultimately controls the company, and it does not confirm that the specific activity being contracted for falls within the licensed categories. That mismatch is a recurring finding in metals and general trading assessments.

How is beneficial ownership established, and what are its limits?

Ownership and control chains are reconstructed from corporate filings and other lawfully accessible records, supplemented by cross-directorship, shared-address and shared-interest analysis, and presented as a network map with evidential confidence levels. Nominee or influence indicators are assessed from documented evidence. Legal beneficial ownership is not attributed from weak or indirect association alone, and where the chain cannot be resolved the report records that as an information gap rather than filling it with inference.

How long does an assessment of a commodities counterparty take?

Jurisdictional reach drives the timeline more than budget does. A single entity in one free zone with a straightforward ownership chain resolves quickly. Layered ownership across several countries, records requiring retrieval or translation, and registries with slow response times all extend it. The timeline, cost and deliverable are defined at scoping and confirmed in the engagement documentation before work begins. The practical advice is to commission the assessment when the transaction timetable is set rather than when the first concern surfaces.

Is a clean sanctions screening result sufficient for a precious metals supply agreement?

It is necessary and not sufficient. Precious metals dealers sit within the UAE anti-money-laundering perimeter as designated non-financial businesses and professions, and responsible sourcing obligations extend beyond refineries to dealers more broadly. A screening match is a hard stop, but the absence of a match on the date screened does not address provenance, sourcing corridor, documentary integrity, or whether the counterparty operates a compliance framework of its own. Those are separate lines of enquiry.

Does Inside Risk Management FZCO decide whether we should proceed with the counterparty?

No. The report includes an executive summary, an overall risk rating, an analyst assessment and a Final Recommendation of GO, Conditional GO or NO GO. Those outputs are prepared through human analyst review and are advisory, non-automated and non-binding. The decision on the transaction, the relationship or the appointment remains exclusively with the commissioning organisation and its own legal, compliance and commercial professionals. Our function is to provide the intelligence picture that allows that decision to be made with greater clarity.

Can the findings be relied on by our bank and compliance committee?

The report is prepared for that purpose. Every material finding is attributed to an identified source with its date, jurisdiction and accessibility limitations recorded, verified facts are separated from allegations, indicators and analytical assessments, and information gaps are stated rather than absorbed. Banks running enhanced due diligence on metals exposure and internal compliance functions documenting a risk-based decision both require a record they can inspect. Admissibility and evidential weight in any proceedings remain matters for counsel.

Do you work outside the UAE within the same engagement?

Yes. Cross-border structures are the normal case in this sector rather than the exception. Our operational headquarters is at the Dubai World Trade Center, with group offices in Lugano and Milan and coverage available in more than one hundred jurisdictions through an established international partner network. Actual coverage and methodology in any given matter remain subject to the relevant jurisdiction, lawful source access, local licensing requirements, operational feasibility and the agreed mandate.

Understand the counterparty before the metal moves

Confidential scoping with a senior analyst, a defined lawful mandate agreed before collection begins, and a professionally reviewed intelligence report your compliance function can inspect. Please do not transmit sensitive data until scope and secure transfer have been agreed.