Registration on the goAML portal — the reporting platform operated by the UAE Financial Intelligence Unit (FIU) — is a mandatory anti-money-laundering obligation for designated UAE businesses. It is the channel through which firms file suspicious transaction reports and meet their duties under Federal Decree-Law No. 20 of 2018 on anti-money laundering and countering the financing of terrorism.
Key takeaways
- goAML is the UAE FIU's official portal for AML/CFT registration and for filing suspicious transaction and activity reports (STRs and SARs).
- Registration is mandatory for Designated Non-Financial Businesses and Professions (DNFBPs) and financial institutions that handle money, valuable assets or client funds.
- The core framework is Federal Decree-Law No. 20 of 2018 (as amended by Federal Decree-Law No. 26 of 2021), with the implementing regulation now set by Federal Decree-Law No. 10 of 2025.
- DNFBPs include real estate brokers and agents, dealers in precious metals and stones, independent legal professionals and accountants, and corporate and trust service providers.
- Non-registration can trigger fines from AED 50,000 to AED 1,000,000, suspension or cancellation of the trade licence, and a higher risk classification.
- AML/CFT records must be retained for at least five years.
What is the goAML portal, and who runs it?
goAML is the official platform developed by the UAE Financial Intelligence Unit for AML/CFT compliance. It is more than a one-time sign-up: it is the live channel businesses use to file suspicious transaction reports (STRs) and suspicious activity reports (SARs) when they identify potential money laundering or terrorist financing. Registering signals that a firm has systems in place to detect and report suspicious financial activity, as the UAE regime requires. The legal backbone is Federal Decree-Law No. 20 of 2018 (as amended by Federal Decree-Law No. 26 of 2021), with the implementing regulation now under Federal Decree-Law No. 10 of 2025. Those supporting instruments include Cabinet Decision No. 109 of 2023 on beneficial owner procedures, Cabinet Resolution No. 132 of 2023 on penalties for beneficial-owner violations, Cabinet Decision No. 16 of 2021 on AML/CFT violations and fines, and Cabinet Resolution No. 74 of 2020 on terrorism-list screening and the implementation of UN Security Council resolutions.
Who must register on goAML?
Registration is mandatory for businesses whose activities carry a heightened risk of financial crime, split into two broad groups.
| Designated Non-Financial Businesses and Professions (DNFBPs) | Financial institutions |
|---|---|
| Real estate brokers and agents | Banks and finance companies |
| Dealers in precious metals and stones | Exchange houses and money service businesses (including hawaladars) |
| Independent legal professionals and accountants | Insurance companies and brokers |
| Corporate service providers and trust service providers | Securities and commodities brokers, dealers, advisers and fund managers |
| Virtual Asset Service Providers (VASPs) and other financial-sector entities |
DNFBPs and financial institutions are singled out because they routinely move value that can be used to launder proceeds or finance terrorism — property, precious goods, client accounts and corporate vehicles — which is exactly what the goAML regime is built to monitor. If your business touches any of them, assume registration applies and confirm your obligations rather than waiting to be contacted.
What documents are required, and by when?
You will need a valid trade licence (mainland, free zone or offshore), authorised signatory documents (Emirates ID and passport copy), a signature authorisation letter confirming signatory authority, updated contact information, and MOEC portal credentials for verification. With those in hand, registration itself is straightforward.
On timing, the obligation is already live. Registration was originally mandatory for entities active before 31 March 2021, a deadline later extended to 30 April 2021. Businesses that missed it are not excused — they must register immediately — and any entity established since must register as soon as it obtains its commercial licence.
What are the penalties for not registering?
Failing to register is treated as a compliance failure in its own right, with consequences that escalate quickly: administrative fines from AED 50,000 to AED 1,000,000, suspension or cancellation of the trade licence, and reclassification as a higher-risk business subject to closer oversight. A higher risk rating is not just a label; it typically brings more frequent inspections and closer scrutiny of the business's customers and transactions. The UAE Ministry of Economy urges affected businesses to act promptly and to seek help from accredited AML consultants.
Failing to register on goAML is treated as a clear sign that a business is non-compliant with the UAE's AML rules — exposing it to fines of up to AED 1,000,000 and the suspension or cancellation of its trade licence.
Your AML obligations beyond registration
Registration is the entry point, not the finish line. A compliant framework also means appointing a competent AML/CFT compliance officer, completing an enterprise-wide risk assessment (EWRA), running customer due diligence (CDD) with enhanced due diligence for high-risk customers, implementing targeted financial sanctions (TFS) screening, maintaining a defined process to identify and report suspicious transactions on goAML, and retaining AML/CFT records for at least five years. These controls are what a regulator will test, so they need to be real and evidenced. In practice, the control regulators probe hardest is the one businesses treat most lightly — evidence that customer due diligence actually happened, not just a policy that says it should. Building them properly is where anti-money laundering advisers add the most value.
Frequently asked questions
Who needs to register on the goAML portal in the UAE?
Registration is mandatory for DNFBPs and financial institutions. DNFBPs include real estate brokers, dealers in precious metals and stones, independent legal professionals and accountants, and corporate and trust service providers. Financial institutions include banks, exchange houses, insurers, securities and fund managers, and Virtual Asset Service Providers.
What is the penalty for not registering on goAML?
Failing to register can lead to administrative fines ranging from AED 50,000 to AED 1,000,000, suspension or cancellation of the trade licence, and reclassification as a higher-risk business subject to increased regulatory oversight. The UAE Ministry of Economy urges affected businesses to register without delay.
What documents are needed for goAML registration?
A business needs a valid trade licence (mainland, free zone or offshore), authorised signatory documents (Emirates ID and passport copy), a signature authorisation letter confirming signatory authority, updated contact information, and MOEC portal credentials for verification. Preparing these in advance keeps the registration straightforward.
How long must AML records be kept in the UAE?
AML/CFT records must be retained for at least five years. This covers customer due diligence records, transaction data and the documentation behind any suspicious transaction reports, so a business can demonstrate compliance if the regulator or the FIU requests evidence.
How SBC Tax Consulting can help
SBC is a leading UAE AML consultancy, helping DNFBPs and financial institutions register on goAML and build compliance frameworks that hold up to scrutiny. We run AML risk assessments, draft tailored AML/CFT policies, train staff to spot red flags, and support the preparation and filing of STRs and SARs through the FIU. Explore our anti-money laundering services, read our tax and compliance FAQs, or contact us to review your obligations.
This publication is for general information only and does not constitute professional advice. Please consult your SBC advisor before acting on any matter covered here.