Amara Commercial Concierge — UAE

goAML Registration for DNFBPs: A Step-by-Step Guide

goAML is the UAE FIU's platform for suspicious transaction reporting. Registration is mandatory for all DNFBPs. This article walks through who must register, what the process involves, and the ongoing obligations.

What Is goAML?

goAML is the UAE Financial Intelligence Unit (FIU)'s digital platform for the submission of Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs). It is operated by the Executive Office of AML/CFT (EOCN).

Registration on goAML is mandatory for all Designated Non-Financial Businesses and Professions (DNFBPs) and financial institutions operating in the UAE. It is not optional and it is not conditional on having something to report — the obligation to register exists independently of whether you have ever filed a report.

Who Must Register?

The following categories of UAE business must register on goAML:

  • Real estate brokers and developers (for buying/selling transactions)
  • Dealers in precious metals and stones (for transactions above AED 55,000)
  • Accountants, auditors, and tax advisors
  • Lawyers, notaries, and legal professionals
  • Company formation and management agents (corporate service providers)
  • Virtual asset service providers (VASPs) and crypto exchanges
  • All licensed financial institutions (banks, exchange houses, insurers, investment firms)

If your business falls into any of these categories, you should already be registered or be in the process of registering.

Step-by-Step Registration Process

Step 1 — Access the goAML Portal

Visit goaml.eocn.gov.ae to access the UAE goAML registration portal. The portal uses Arabic and English interfaces.

Step 2 — Create an Organisation Account

Register your legal entity as an Organisation on the portal. You will need:

  • Trade licence number and copy
  • Certificate of Incorporation
  • Entity type (DNFBP category)
  • Registered address
  • Contact details for the Compliance Officer / MLRO

Step 3 — Register the Compliance Officer / MLRO as Primary User

The individual designated as your Compliance Officer or MLRO (Money Laundering Reporting Officer) must be registered as the primary user with their own credentials. Required information:

  • Full name and passport details
  • Emirates ID (if UAE resident)
  • Role and title within the organisation
  • Contact email and phone number

Step 4 — Submit for FIU Approval

The registration is submitted for review and approval by the UAE FIU. This typically takes 5–15 working days. You may receive clarification requests via email.

Step 5 — Receive Confirmation and Credentials

On approval, the Compliance Officer / MLRO receives login credentials and the entity is formally registered. The entity is now obligated to submit STRs/SARs via the portal whenever suspicion arises.

Ongoing Obligations After Registration

Registration is the beginning, not the end. Once registered, you must:

  • File STRs/SARs promptly — whenever you know, suspect, or have reasonable grounds to suspect that a transaction or activity is related to money laundering or terrorist financing
  • Keep registration details current — update the portal if your Compliance Officer changes, the entity's address changes, or other material information changes
  • Respond to FIU requests — the FIU may request additional information in relation to a filed report
  • Maintain filing records — retain records of all STRs/SARs filed and the underlying suspicious activity documentation

What to Do When You Suspect a Transaction

  1. Do not tip off the customer or counterparty that a report is being made
  2. Evaluate the suspicion and document your analysis
  3. Submit an STR/SAR via goAML as soon as practicable after the decision to file
  4. Continue or cease the business relationship as appropriate — take advice if you are unsure
  5. Retain all documentation

Filing in good faith is protected. UAE law provides a safe harbour for entities and individuals who file STRs/SARs in good faith — they cannot be held liable for any loss or damage arising from the report.

Penalties for Non-Registration

Operating as a DNFBP without goAML registration exposes the business to:

  • Administrative fines from AED 50,000 to AED 5 million
  • Licence suspension or revocation
  • Individual criminal liability for directors and senior officers

Amara manages goAML registration as a core deliverable under all retainer tiers.

Related articles

FAQ: UAE Compliance and Regulatory

Answers to common questions about UAE AML/CFT obligations, corporate tax, VAT, UBO registration, and what compliance actually looks like in practice for an SME.

ComplianceCorporate TaxVAT

Importing Goods into the UAE: MOCCAE Permits and the Clearance Process

Importing certain goods into the UAE — including live animals, plants, food products, and veterinary items — requires permits from the Ministry of Climate Change and Environment. This article explains who needs a permit and what the process involves.

Business SetupCompliance

UAE Corporate Tax: A Practical Guide for SMEs

The UAE introduced a 9% federal Corporate Tax in 2023. This guide covers who is subject, how taxable income is calculated, key exemptions, freezone qualifying conditions, registration deadlines, and how to stay compliant.

Corporate TaxCompliance

UAE VAT: A Complete Guide for Business Owners

UAE VAT was introduced at 5% in January 2018. This guide covers registration thresholds, standard-rated and zero-rated supplies, input tax recovery, EmaraTax filing, and common compliance pitfalls.

VATCompliance

AML/CFT Compliance for UAE Businesses: A Practical Guide

Anti-Money Laundering and Counter-Terrorism Financing compliance is mandatory for most UAE businesses. This guide covers who is obligated, what a compliant AML programme looks like, goAML registration, and ongoing requirements.

AML/CFTCompliance

UBO Registration in the UAE: What It Is and Why It Matters

All UAE companies must identify and register their Ultimate Beneficial Owners. This article explains who qualifies as a UBO, the registration process, deadlines, and the penalties for non-compliance.

ComplianceAML/CFT