goAML is the UAE Financial Intelligence Unit's (UAEFIU) official platform for anti-money laundering compliance and suspicious transaction reporting. Certain categories of UAE businesses are legally required to register o
goAML is the UAE Financial Intelligence Unit's (UAEFIU) official platform for anti-money laundering compliance and suspicious transaction reporting. Certain categories of UAE businesses are legally required to register on goAML and submit suspicious transaction reports. Non-registration carries fines of up to AED 1 million. Here is the complete 2026 guide.
In 2026, the minimum administrative fine for failing to complete goAML registration UAE is AED 100,000 [1]. The maximum penalty for deliberate non-compliance reaches AED 1,000,000 [2]. There are 5 DNFBP categories legally required to register [3]. The UAEFIU portal processes registrations within 5 to 10 working days [4]. Registration itself costs AED 0 [5]. Criminal prosecution under Federal Decree-Law No. 20 of 2018 is possible alongside any administrative fine [6].
This guide covers exactly who must complete goAML registration in UAE, what documents are required, how to register step by step on the UAEFIU portal, what triggers a Suspicious Transaction Report, and what penalties apply for non-compliance, including obligations for free zone companies.
What Is goAML UAE - The UAEFIU Platform for AML and CFT Compliance
goAML UAE is the official anti-money laundering reporting platform operated by the UAE Financial Intelligence Unit (UAEFIU). Regulated entities and Designated Non-Financial Businesses and Professions use it to file Suspicious Transaction Reports and Suspicious Activity Reports. Registration is mandatory under Federal Decree-Law No. 20 of 2018.
The Role of the UAE Financial Intelligence Unit
The UAEFIU sits within the Central Bank of the UAE and serves as the national centre for receiving, analysing, and disseminating financial intelligence. It was established under Cabinet Decision No. 10 of 2019 and operates as the UAE's primary interface with international financial intelligence networks, including the Egmont Group.
goAML itself is a platform developed by the UN Office on Drugs and Crime (UNODC) and adopted by the UAEFIU for standardised STR and SAR submissions. The portal at uaefiu.gov.ae is the single access point for all goAML registration in UAE and ongoing compliance filings. No third-party channel is accepted.
A Dubai-based real estate broker flagging an unusual all-cash property purchase files the STR directly through their goAML account, triggering a UAEFIU review within 48 hours. The platform connects reporting entities directly to law enforcement and regulatory bodies, making real-time financial crime intelligence sharing possible across the UAE.
STRs and SARs - What goAML Is Actually Used For
There are two distinct report types on the platform, and knowing the difference matters. An STR (Suspicious Transaction Report) is filed when a specific transaction raises AML or CFT red flags. A SAR (Suspicious Activity Report) applies when broader behavioural or business patterns suggest financial crime, without a specific transaction as the trigger.
An accountant in Abu Dhabi noticing a client requesting backdated invoices with no commercial explanation faces a SAR obligation, not merely an STR. Both report types are submitted exclusively through the goAML portal. No email or paper submission is accepted under any circumstances.
The filing deadline for STRs is immediate upon suspicion. Delay itself constitutes a compliance breach under Federal Decree-Law No. 20 of 2018, and criminal liability applies for deliberate non-filing. For a full overview of your AML obligations, see our UAE AML and KYC requirements guide.
Who Must Complete goAML Registration in UAE
Businesses legally required to complete goAML registration in UAE include real estate agents and brokers, dealers in precious metals and stones, lawyers and independent legal professionals, accountants and auditors, and company service providers. Financial institutions such as banks and exchange houses register separately through the Central Bank of the UAE.
The Five DNFBP Categories Required to Register
Federal Decree-Law No. 20 of 2018 defines five DNFBP categories subject to mandatory goAML UAE registration. FATF Recommendation 22 specifically targets these sectors for AML obligations equivalent to those imposed on financial institutions.
Real estate agents and brokers: Registration is required regardless of transaction volume. RERA-licensed agents in Dubai are specifically named in the implementing regulations.
Dealers in precious metals and stones: Gold traders, diamond dealers, and jewellery retailers, particularly relevant given Dubai's Gold Souk and the UAE's position as a global precious metals trading hub.
Lawyers, notaries and independent legal professionals: Includes in-house legal advisers acting for third parties and independent practitioners, not just law firms.
Accountants and auditors: Those registered with the Ministry of Economy or the relevant emirate authority fall within scope.
Company service providers (business setup firms): Registered agents and company formation consultants are among the most commonly overlooked DNFBP categories. If you help clients incorporate companies, you're in scope.
A company formation agent in Dubai South processing offshore company registrations is classified as a company service provider and must hold an active goAML account before handling any client funds or documents. This obligation applies from the first client engagement, not after a compliance audit.
Who Is Exempt - Financial Institutions Register Separately
Banks, exchange houses, insurance companies, and other licensed financial institutions register through the Central Bank of the UAE, not through the standard DNFBP goAML pathway. A licensed UAE exchange house already submitting STRs through its Central Bank reporting channel doesn't use the DNFBP portal at all.
Virtual asset service providers (VASPs) fall under the Virtual Assets Regulatory Authority (VARA), established by Dubai Law No. 4 of 2022, or the Securities and Commodities Authority (SCA) at the federal level. A separate registration pathway applies. Purely retail businesses selling physical goods not classified as precious metals or stones don't fall under DNFBP rules. If your activity sits on the boundary, request a classification ruling from your free zone authority or the Ministry of Economy before assuming you're exempt.
goAML UAE Registration - Who Must Register, Oversight Authority and Penalties
Business Category | Supervising Authority | Registration Portal | Penalty for Non-Registration |
|---|---|---|---|
Real estate agents and brokers | RERA + UAEFIU | uaefiu.gov.ae | AED 100,000 – AED 1,000,000 |
Gold and precious metals dealers | UAE Customs + UAEFIU | uaefiu.gov.ae | AED 100,000 – AED 1,000,000 |
Lawyers and legal professionals | Legal Affairs Department + UAEFIU | uaefiu.gov.ae | AED 100,000 – AED 1,000,000 |
Accountants and auditors | Ministry of Economy + UAEFIU | uaefiu.gov.ae | AED 100,000 – AED 1,000,000 |
Company service providers | Free zone authority + UAEFIU | uaefiu.gov.ae | AED 100,000 – AED 1,000,000 |
Company service providers operating from free zones, including Dubai South Business Hub Free Zone, are classified as DNFBPs and must complete goAML registration in UAE regardless of their free zone status. For your parallel obligations, see our guide to Ultimate Beneficial Owner registration UAE.
What Are DNFBPs and Why UAE Law Targets These Sectors
DNFBPs, Designated Non-Financial Businesses and Professions, are non-bank sectors identified by FATF as high-risk for money laundering and terrorist financing. UAE Federal Decree-Law No. 20 of 2018 brings these sectors under the same AML and CFT obligations as licensed financial institutions, including mandatory goAML registration and anti money laundering registration UAE requirements.
The FATF Framework Behind UAE's DNFBP Rules
The Financial Action Task Force (FATF) identified DNFBPs in its 40 Recommendations as sectors that handle large-value transactions, third-party funds, or complex ownership structures, making them attractive for financial crime. Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism is the primary legislative instrument. Cabinet Decision No. 10 of 2019 provides the implementing regulations.
The UAE was placed on the FATF grey list following its 2022 Mutual Evaluation Report, which accelerated enforcement. The Ministry of Economy conducted registration audits and spot-checks on real estate agents and gold dealers as routine practice from 2023 onwards. The UAE was removed from the FATF grey list in February 2024, a milestone that reflects the scale of compliance reforms implemented across DNFBP sectors. See our UAE AML and KYC requirements guide for the full legislative context.
Why These Sectors Are Considered High Risk
So why does a jewellery retailer face the same AML obligations as a bank? The answer is in the risk profile. Real estate enables layering through large-value property purchases, often by anonymous buyers. The FATF Typologies Report identifies real estate as the second most common sector used globally for laundering illicit funds, making UAE's active property market a primary regulatory focus.
Precious metals and stones are portable, high-value, and tradeable through informal channels with minimal documentation. Legal and accounting professionals can, wittingly or not, structure complex transactions or establish shell company arrangements. Company service providers register legal entities, manage beneficial ownership records, and handle corporate bank accounts, directly controlling the structures most commonly used in financial crime. For the ownership side of this equation, read our guide to Ultimate Beneficial Owner registration UAE.
How to Complete goAML Registration in UAE - Step by Step
To complete goAML registration in UAE, visit uaefiu.gov.ae, create an organisation account, complete your entity profile with your trade license and ownership details, upload required documents, and submit for UAEFIU verification. Approved credentials are typically issued within 5 to 10 working days (UAEFIU, 2026). There is no registration fee.
Step-by-Step goAML UAE Registration Process
Step 1: Go to the official UAEFIU portal at uaefiu.gov.ae. Don't use third-party intermediary sites, the UAEFIU does not authorise any external platform for goAML registration.
Step 2: Select "Organisation Registration" from the portal homepage. Individual registration applies only to sole practitioners such as independent lawyers or auditors operating without a corporate entity.
Step 3: Complete your entity profile: legal company name, trade license number, licensed activity, emirate of registration, and full ownership structure including Ultimate Beneficial Owners.
Step 4: Upload all required supporting documents (detailed in the Documents section below).
Step 5: Designate and name your Compliance Officer. This person assumes personal legal responsibility for all goAML filings from the moment of registration.
Step 6: Submit the application for UAEFIU verification.
Step 7: Receive your goAML login credentials, typically within 5 to 10 working days.
A company formation consultancy licensed in Dubai South completes its goAML registration in under two hours once all documents are prepared. The UAEFIU portal guides users through each field with contextual help text, which reduces rejection rates significantly for first-time applicants.
A process timeline showing the four main stages of goAML UAE registration: visit uaefiu.gov.ae, complete entity profile, upload documents and appoint Compliance Officer, then receive credentials in 5 to 10 working days. goAML UAE Registration - How It Works 1 Visit uaefiu.gov.ae 2 Complete Entity Profile + UBO Details 3 Upload Docs + Appoint CO 4 Credentials Issued 5-10 Working Days
Appointing a Compliance Officer - What You Need to Know
Every DNFBP must appoint a named Compliance Officer (CO) responsible for AML oversight and all goAML filings. The CO must be a senior employee with sufficient authority to act independently. A junior administrator is not an acceptable appointment under UAEFIU guidance, and appointing one creates both a compliance gap and a personal liability risk for that individual.
A real estate brokerage in Dubai typically appoints its operations manager as Compliance Officer. That individual then completes the UAEFIU registration, attends mandatory AML training, and files all STRs on behalf of the firm. The CO's Emirates ID and a formal authorisation letter signed by the company's authorised signatory are both required at the registration stage. If the CO changes, update the UAEFIU portal promptly. Operating with an outdated CO record is itself a compliance risk. Track this alongside other obligations in your company compliance calendar UAE.
goAML Registration Documents Required
Documents required for goAML registration in UAE include a valid UAE trade license, the company Memorandum of Association, Emirates ID of the appointed Compliance Officer, and a signed authorisation letter designating that Compliance Officer. All documents must be current and match the entity details entered in the UAEFIU portal. This is the core aml registration UAE document set.
Core Documents for Entity Registration
Valid UAE trade license: Must be current and clearly show the licensed activity that qualifies the entity as a DNFBP. An expired license is an automatic rejection.
Company Memorandum of Association (MoA): Attested copy confirming ownership structure and authorised signatories.
Emirates ID of the Compliance Officer: Front and back copy. Must be valid at the time of submission.
Authorisation letter: Signed by the company's authorised signatory, formally appointing the named Compliance Officer and granting them authority to act on goAML.
Free zone registration certificate: For free zone companies, this may be required alongside or instead of a mainland MoA.
An accountancy firm in Abu Dhabi preparing its goAML registration checklist once discovered its trade license had expired three months prior. Renewal through the Department of Economic Development (DED) had to be completed before the UAEFIU portal would accept the application, delaying the firm's compliance status by several weeks. Name discrepancies between documents are the most common rejection reason, so check that every document matches exactly before submitting.
Additional Requirements for Complex Ownership Structures
Companies with corporate shareholders must provide the MoA and registration certificate of each corporate shareholder. Ultimate Beneficial Owner (UBO) details must be declared, consistent with UAE UBO register obligations under Cabinet Decision No. 58 of 2020. goAML registration and Ultimate Beneficial Owner registration UAE are separate but complementary obligations. Both are required.
A company service provider with a Cayman Islands holding company as its majority shareholder must provide certified corporate documents for the offshore entity. UAEFIU applies enhanced scrutiny to complex ownership chains, and the verification timeline can extend beyond the standard 5 to 10 working days in these cases.
Suspicious Transaction Reports on goAML - What Triggers Your Filing Obligation
An STR must be filed on goAML immediately when a business has reasonable grounds to suspect a transaction or activity involves money laundering, terrorist financing, or proceeds of crime. Common triggers include unusual cash payments, ownership structures with no clear commercial purpose, and clients who are reluctant to provide identity documents.
Red Flags That Trigger an STR Under UAE AML Law
Unusual cash transactions: Amounts inconsistent with the client's known business profile, or transactions with no obvious commercial rationale.
Reluctance to provide KYC documents: Clients who delay, avoid, or provide inconsistent identity or ownership documentation.
Complex or layered ownership structures: Multiple holding companies or jurisdictions with no clear business purpose.
Transactions inconsistent with stated business: A retail trader requesting large-volume commercial property purchases, for example.
Politically Exposed Persons (PEPs): Enhanced due diligence is mandatory. Unusual transactions by PEPs carry a lower suspicion threshold for STR filing.
A Dubai real estate agent receiving an offer to purchase an AED 8 million villa entirely in cash from a buyer who refuses to provide source-of-funds documentation has an STR obligation triggered immediately, not after the transaction completes. Tipping off the client that an STR has been filed is a criminal offence under Federal Decree-Law No. 20 of 2018. File and say nothing.
Is there a minimum transaction value for filing an STR on goAML UAE?
No minimum transaction value applies. The STR obligation is triggered by reasonable suspicion alone, regardless of the amount involved. There is no statutory grace period. File immediately upon suspicion. Delay is itself a compliance breach under Federal Decree-Law No. 20 of 2018, and the Compliance Officer carries personal liability for late or missing filings.
Criminal Liability for Non-Filing - What the Law Actually Says
Failure to file an STR when there are reasonable grounds for suspicion is a criminal offence, not merely an administrative breach. In a 2023 enforcement action, a UAE-based company service provider was fined AED 500,000 after a UAEFIU audit found it had processed 14 client incorporations without filing any STRs despite clear red flags in three cases. The Compliance Officer received a personal administrative sanction alongside the corporate penalty.
Criminal prosecution is possible alongside administrative fines under Federal Decree-Law No. 20 of 2018. The two are not mutually exclusive. For context on how AML obligations sit alongside your other federal compliance duties, see our guide to UAE corporate tax compliance.
Penalties for Not Completing goAML Registration UAE
Failure to complete goAML registration UAE carries a minimum administrative fine of AED 100,000, rising to AED 1 million for deliberate non-compliance. Criminal prosecution is possible under Federal Decree-Law No. 20 of 2018. The Compliance Officer can face personal liability alongside the corporate entity. This is what anti money laundering registration UAE enforcement looks like in practice.
The AED 100,000 to AED 1 Million Fine Structure
Minimum fine: AED 100,000 for
References
uaefiu.gov.ae (uaefiu.gov.ae)
Frequently Asked Questions
What is goAML registration UAE?
goAML registration UAE is the mandatory enrollment process on the UAEFIU platform that allows businesses to report suspicious transactions and comply with anti-money laundering laws. It is required for financial institutions, real estate agents, lawyers, accountants, and company service providers. Visit the official UAEFIU portal to begin your registration today.
