Topic Summary
What Is goAML and When Must a Dubai Company Register on goAML
goAML is the UAE FIU's secure reporting portal for suspicious activity. A Dubai company must register on goAML once it is a financial institution, a DNFBP (designated non-financial business or profession) or another regulated entity with a duty to report, whether or not it has filed anything yet.
Which Free Zone Businesses Must Register on goAML
Which Free Zone Businesses Must Register on goAML
Regulators and Laws Behind the goAML Obligation
The duty rests on Federal Decree-Law No. 20 of 2018 and its implementing Cabinet Decision No. 10 of 2019. The Central Bank of the UAE supervises financial institutions, the Ministry of Economy oversees most DNFBPs, and the FIU analyses filed reports. These define the UAE AML KYC requirements you'll be inspected against.
Registration Sequence: Must a Dubai Company Register on goAML Before Trading?
Yes, before the first live transaction. Confirm scope, appoint an MLRO, prepare your trade license and ID documents, submit the organisation registration, then activate users after approval. Test the report format first.
Free Zone Compliance Officers and goAML Readiness
A ready company holds a written AML policy, a documented risk assessment, KYC files with UBO details, and a trained MLRO with active goAML access. Dubai South Business Hub Free Zone licensees in regulated activities should align these before the first client transaction. Licenses are activity-specific, so verify your category first.
Penalties and Mistakes: Must a Dubai Company Register on goAML to Avoid Them?
For regulated firms, yes. Failing to register can bring administrative fines, supervisory action and license consequences, plus criminal exposure if suspicious activity goes unreported. Common mistakes include assuming small size means exemption, registering late, and leaving the MLRO role empty.
Your Next Move on goAML
Whether a Dubai company must register on goAML depends on regulated activity, not size or location. In-scope firms need an approved profile, a named MLRO and tested reporting before the first transaction, backed by solid KYC and UBO records. Review your licensed activity against DNFBP categories, then speak with the Dubai South Business Hub team about licensing and compliance readiness.
The UAE Financial Intelligence Unit has processed more than 100,000 suspicious transaction reports through goAML (Central Bank of the UAE, 2024). So must a Dubai company register on goAML? If it's regulated, yes. This guide is for compliance officers and owners who need to confirm scope, timing and process.
What Is goAML and When Must a Dubai Company Register on goAML
goAML is the UAE FIU's secure reporting portal for suspicious activity. A Dubai company must register on goAML once it is a financial institution, a DNFBP (designated non-financial business or profession) or another regulated entity with a duty to report, whether or not it has filed anything yet.
How the Portal Works
The UAE FIU runs the web-based system for STRs (suspicious transaction reports), SARs and related filings. Each entity creates an organisation profile and named users. Full goAML registration UAE guidance covers the detail.
Registration is a standing duty, not a reaction. Picture a free zone real estate brokerage that registers before its first large cash deal, so the MLRO (Money Laundering Reporting Officer) can file the same day.
The Trigger That Makes Registration Mandatory
Your activity category triggers the duty, not your headcount or turnover. The licensed activity on your trade license sets the scope. A newly licensed gold trading company, for example, needs its profile live before its first qualifying transaction. Registering late doesn't erase the reporting duty for the gap.
goAML Registration Scope by Business Type
Business Type | goAML Registration Required |
|---|---|
Financial institutions | Yes. Banks, exchange houses, insurers and finance companies. |
Real estate brokers | Yes. DNFBP, covering property sales and purchases. |
Precious metals and stones dealers | Yes. Cash transactions above the threshold are reported. |
Auditors and accountants | Yes. DNFBP when handling specified client transactions. |
Non-regulated consultancy or trading firms | Generally no, unless a bank or regulator asks. |
Which Free Zone Businesses Must Register on goAML
goAML free zone companies must register if they're financial institutions or DNFBPs: real estate agents, precious metals and stones dealers, auditors, accountants, lawyers, notaries and corporate service providers. Pure trading or consulting firms outside these categories generally aren't required, though bank requests may still apply.
Financial Institutions and DNFBP Categories
Banks, exchange houses, insurers, finance companies.
Real estate brokers and bullion dealers.
Audit and accounting firms.
Corporate service providers.
A Dubai South licensed corporate services firm handling client incorporations sits inside DNFBP scope.
Sector Spotlight: Precious Metals and Stones
Dubai handled roughly USD 75 billion in gold trade in 2023 (Ministry of Economy, 2024), and cash intensity explains the tight oversight. A bullion dealer taking a cash purchase above the threshold reports it through goAML. See the AML duties for UAE dealers in precious metals.
When a Company Is Likely Out of Scope
A software consultancy has no goAML duty. It still keeps KYC files and UBO registration UAE records, because out of scope doesn't mean exempt. Confirm with your licensing authority and a compliance adviser.
Regulators and Laws Behind the goAML Obligation
The duty rests on Federal Decree-Law No. 20 of 2018 and its implementing Cabinet Decision No. 10 of 2019. The Central Bank of the UAE supervises financial institutions, the Ministry of Economy oversees most DNFBPs, and the FIU analyses filed reports. These define the UAE AML KYC requirements you'll be inspected against.
Federal Decree-Law and Cabinet Decisions
The statute requires risk assessment, KYC, record keeping and suspicious reporting without delay. A compliance officer should cite it when documenting why an STR was filed. Our guide to anti money laundering duties for Dubai businesses expands on each duty.
Role of the CBUAE and the UAE FIU
The CBUAE supervises licensed financial institutions, and the FIU hosts goAML and publishes typologies. The Ministry of Finance coordinates national AML policy. An exchange house facing a CBUAE inspection would show its goAML user records.
Registration Sequence: Must a Dubai Company Register on goAML Before Trading?
Yes, before the first live transaction. Confirm scope, appoint an MLRO, prepare your trade license and ID documents, submit the organisation registration, then activate users after approval. Test the report format first.
Step 1: Confirm Scope and Appoint an MLRO
Check your license activity against DNFBP categories.
Appoint a qualified compliance officer.
Record the decision in your AML policy.
A new audit firm might name its managing partner as MLRO at licensing.
Step 2: Gather Documents and Submit the Application
Trade license, Emirates ID, passport, authorisation letter.
Organisation profile and supervisory authority details.
Submit on the portal and track approval.
Upload license and MLRO ID copies in one submission to avoid rejection.
Step 3: Activate Users and Test Reporting
Create filing and review roles, then run an internal STR drill. A team can file a dummy-format report to confirm data fields. Add goAML to your company compliance checklist after incorporation in Dubai.
Free Zone Compliance Officers and goAML Readiness
A ready company holds a written AML policy, a documented risk assessment, KYC files with UBO details, and a trained MLRO with active goAML access. Dubai South Business Hub Free Zone licensees in regulated activities should align these before the first client transaction. Licenses are activity-specific, so verify your category first.
Linking KYC, UBO Records and goAML Filing
Strong customer due diligence produces better STRs. Your UBO data must match your KYC files, and records must be kept for the legal period. An STR naming the beneficial owner identified at onboarding speeds FIU analysis. Dubai Trade's portal is a useful reference for trade-related procedures.
Penalties and Mistakes: Must a Dubai Company Register on goAML to Avoid Them?
For regulated firms, yes. Failing to register can bring administrative fines, supervisory action and license consequences, plus criminal exposure if suspicious activity goes unreported. Common mistakes include assuming small size means exemption, registering late, and leaving the MLRO role empty.
Administrative and Criminal Exposure
Expect supervisory fines and corrective orders. Failure-to-report and tipping-off are offences, and banks may reassess your relationship. Picture a dealer penalised after an inspection finds no goAML profile despite regulated activity.
Avoidable Errors Compliance Teams Make
Assuming only banks register.
Keeping one user with no backup.
Skipping profile updates after license changes.
Leaving a resigned MLRO listed, which blocks filing.
Your Next Move on goAML
Whether a Dubai company must register on goAML depends on regulated activity, not size or location. In-scope firms need an approved profile, a named MLRO and tested reporting before the first transaction, backed by solid KYC and UBO records. Review your licensed activity against DNFBP categories, then speak with the Dubai South Business Hub team about licensing and compliance readiness.
References
Frequently Asked Questions
