Businesses operating in the United Arab Emirates (UAE) must understand their responsibilities for preventing money laundering and other financial crimes. For organisations covered by the UAE's Anti-Money Laundering (AML) framework, this includes maintaining appropriate compliance procedures and reporting suspicious transactions or activities when required.
One important part of this framework is goAML, an official digital reporting platform used by the UAE Financial Intelligence Unit (FIU) to receive and analyse suspicious transaction reports.
However, many businesses are unsure what goAML actually does, whether their company needs to register, which documents are required, and how to complete the registration process correctly.
This guide explains what goAML is, who needs to register in the UAE, which documents to prepare, and how to complete both stages of registration. It also covers common mistakes businesses should avoid and how professional AML consulting support can help organisations understand their compliance responsibilities.
What Is goAML?
goAML is a digital system developed by the United Nations Office on Drugs and Crime (UNODC) to support financial intelligence units in combating money laundering and the financing of terrorism.
In the UAE, the platform enables relevant reporting entities to submit Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs) to the UAE Financial Intelligence Unit.
The FIU receives and analyses these reports and uses financial intelligence to support efforts to identify and investigate potential financial crime.
In simple terms, goAML provides a formal reporting channel for businesses and institutions that identify suspicious financial activity within the scope of their reporting obligations.
For example, a real estate brokerage might encounter a customer whose proposed transaction involves unexplained third-party payments or an ownership structure that raises concerns. Depending on the circumstances, the brokerage may need to conduct further due diligence and consider whether a suspicious activity report is required.
The purpose of goAML is not to register ordinary business transactions or replace a company's internal AML procedures. It supports the reporting of suspicious activity to the competent authorities.
Why Is goAML Important for UAE Businesses?
The UAE has established an AML/CFT regulatory framework designed to help prevent money laundering, terrorist financing, and related financial crime.
Businesses covered by the relevant requirements may need to identify customers, assess risks, maintain appropriate records, monitor activity, and report suspicions through the prescribed channels.
goAML is important because it provides a reporting mechanism for relevant entities to communicate suspicious activity to the FIU.
1. Supporting AML Compliance
For businesses subject to goAML registration requirements, completing registration is an important part of establishing access to the reporting system.
Organisations must also implement the other AML controls applicable to their activities. Registration alone does not satisfy every compliance obligation.
2. Reporting Suspicious Transactions and Activities
Businesses may encounter transactions that appear inconsistent with a customer's profile, involve unexplained payment arrangements, or raise concerns about the source of funds.
Where reporting obligations are triggered, the relevant entity must follow the applicable procedures and submit the appropriate report through the required channel.
3. Improving Financial Transparency
A structured reporting process helps the FIU receive information from relevant reporting entities and analyse potential financial crime risks.
Businesses support this process by maintaining accurate records, recognising warning signs, and escalating concerns appropriately.
4. Meeting Applicable Regulatory Requirements
Certain regulated entities and Designated Non-Financial Businesses and Professions (DNFBPs) are required to register and comply with the relevant AML reporting framework.
The applicable requirements depend on the business's activities and supervisory authority. Companies should confirm their classification rather than assume that every UAE business has identical obligations.
Who Needs to Register for goAML in the UAE?
The UAE Ministry of Economy and Tourism identifies several categories of DNFBPs that fall within its supervisory framework, including relevant businesses involved in:
Real estate: Brokers and agents conducting covered property purchase and sale activities.
Accounting and auditing: Professionals and firms conducting activities that fall within the applicable DNFBP definitions.
Precious metals and stones: Relevant dealers and businesses involved in covered transactions.
Trust and company services: Providers carrying out covered company formation, business administration, and related services.
The precise scope depends on the applicable legal definitions, the activities performed, and any relevant exclusions.
Other reporting entities, including financial institutions and certain virtual asset businesses, may be subject to different supervisory arrangements.
Does Every Company in Dubai Need goAML Registration?
No. Businesses should first determine whether their activities fall within the relevant reporting-entity category.
For DNFBPs supervised by the Ministry of Economy and Tourism, the Ministry's published guidance generally addresses relevant mainland and commercial free-zone entities. Financial free zones supervised by the Dubai Financial Services Authority (DFSA) or the Financial Services Regulatory Authority (FSRA) are excluded from the Ministry's supervisory scope under the cited registration guide. <Cite refs={["turn239845search12","turn239845search14"]}/>
If you are unsure whether your business qualifies as a DNFBP, review the company's trade licence and activities and consult the relevant supervisory authority.
Official classification guidance is available on the UAE Ministry of Economy and Tourism website.
Documents Required for goAML Registration in the UAE
Preparing the correct documents before starting the application can help reduce avoidable delays.
For entities registering under the Ministry of Economy and Tourism's DNFBP process, the official registration guide identifies the following documents:
1. Valid Company Trade License
The company's current trade licence is used to establish its business identity and relevant registration details.
Ensure that the company information entered into the portal matches the licence.
2. Authorisation Letter
The business must provide an authorisation letter appointing the nominated Compliance Officer or Money Laundering Reporting Officer (MLRO), as applicable.
The letter should follow the relevant official format and satisfy the authority's signature, letterhead, or company-stamp requirements.
3. Passport Copy
Prepare the passport copy of the nominated individual in accordance with the registration instructions.
4. Emirates ID and Residence Visa
The Ministry's technical instructions list the nominated person's valid UAE residence visa and Emirates ID among the supporting documents. Check the current requirements for your specific application before submission.
5. Valid Email Address and Mobile Number
The nominated person must provide accurate contact details because email verification and one-time passwords are part of the process.
6. Google Authenticator
Google Authenticator is used as part of the secure login and authentication process. Install the application on a suitable mobile device and follow the instructions provided by the portal.
Important Document Preparation Requirement
The Ministry's published instructions require the supporting documents to be combined into one PDF attachment smaller than 5 MB. The exact document requirements may vary according to the registration category and authority.
How to Register for goAML in the UAE: Step-by-Step Process
According to the UAE Ministry of Economy and Tourism's guidance, registration involves two main stages:
Pre-registration through the Services Access Control Manager (SACM).
Registration of the organisation on the goAML system.
Completing only the first stage does not mean the entire registration process is complete.
Step 1: Confirm Your Business Classification
Before starting, establish whether your business is a reporting entity and identify the correct supervisory authority.
Check your trade licence, business activities, and applicable regulatory classification.
For relevant DNFBPs supervised by the Ministry of Economy and Tourism, follow the Ministry's registration instructions. Businesses under another supervisory authority should use the applicable process for that authority.
Step 2: Open the Official goAML Registration Portal
Visit the official UAE FIU registration portal:
https://services.uaefiu.gov.ae/
Select the registration option to access the SACM pre-registration form.
Use the official portal rather than unofficial websites that claim to provide government registration.
Step 3: Complete SACM Pre-Registration
Enter the required information accurately, including:
Reporting entity name
Registration type
Supervisory body
Company registration or licence number, as applicable
Nominated person's name and identification details
Email address and mobile number
Supporting documentation
For entities following the Ministry of Economy and Tourism's DNFBP procedure, the Ministry instructs applicants to select the reporting-entity registration type and the Ministry as the supervisory body where applicable. The company licence number is used as the registration number under those instructions.
Review every field before submission.
Step 4: Upload Documents and Verify Your Email
Combine the required supporting documents into one PDF attachment that meets the applicable file-size limit.
Submit the pre-registration request and follow the email verification instructions. You may receive one-time passwords or additional authentication instructions by email and SMS.
The Ministry's technical instructions specify that the OTP used in the relevant pre-registration process is valid for 24 hours. Follow the validity period shown in your actual notification.
Check your inbox and junk folder if the verification email does not arrive.
Step 5: Complete the Authentication Setup
After the pre-registration stage is approved, follow the instructions provided for obtaining your login credentials and setting up Google Authenticator.
Keep your credentials and authentication details secure. The code generated by Google Authenticator changes regularly, so enter the current valid code when prompted.
Step 6: Register Your Organisation on goAML
Use the access method and credentials provided in the approved pre-registration process to open the goAML system.
Follow the official registration instructions to select the option to register a new organisation.
Complete the mandatory fields and ensure that the information matches the details supplied during pre-registration.
Upload the required supporting documents, verify that the upload has completed successfully, and submit the application.
Step 7: Track Your Application Status
After submitting the organisation registration, retain the reference number and monitor your registered email address for notifications.
The authority may approve the application or request corrections. If the application is rejected, read the stated reason and follow the instructions for resubmission.
Do not assume that the organisation is fully registered until the required stages have been completed and the relevant approval or access confirmation has been received.
How Much Does goAML Registration Cost?
The UAE Ministry of Economy and Tourism states that goAML registration is free.
However, a business may incur separate professional fees if it engages an AML consultant or another service provider to help determine its classification, prepare documents, complete the application, or review its wider compliance framework.
These professional fees are separate from the official portal registration process.
Common goAML Registration Mistakes to Avoid
Applications can be delayed when information is incomplete, supporting documents are incorrect, or applicants do not follow the required authentication process.
Common mistakes include:
Selecting the wrong registration category or supervisory authority.
Entering a company name or licence number that does not match the official records.
Providing incorrect contact information.
Failing to verify the email address.
Uploading multiple attachments instead of the required consolidated PDF.
Exceeding the permitted file size.
Failing to complete Google Authenticator setup.
Assuming SACM pre-registration completes the entire process.
Missing an email requesting corrections or additional action.
Failing to retain the application reference number.
The Ministry also advises applicants to use Google Chrome, check junk email folders, and complete the application promptly because sessions may expire.
A careful review before submission can help avoid preventable errors.
What Happens After goAML Registration?
Once the organisation has completed registration and received the necessary access, it should ensure that its AML procedures are ready to operate.
This may include:
Assigning clear AML and reporting responsibilities.
Maintaining customer due diligence records.
Conducting appropriate risk assessments.
Screening relevant customers and parties where required.
Establishing procedures for recognising and escalating suspicious activity.
Understanding how and when required reports must be submitted.
Maintaining appropriate documentation and staff training.
Businesses should also make sure that the individuals responsible for compliance understand the reporting process and can access the system when needed.
Registering on goAML is an important administrative step, but it does not replace the wider AML programme. Organisations remain responsible for their applicable compliance and reporting obligations.
How Can AML Consultants Help With goAML Registration?
Businesses unfamiliar with UAE AML requirements may find the process challenging, particularly when they are unsure about their regulatory classification, nominated officer, supporting documents, or internal compliance responsibilities.
An AML consultant may assist with the following, depending on the agreed scope of work.
Understanding Regulatory Requirements
The consultant can help the business identify the relevant regulatory framework and determine whether further confirmation from the supervisory authority is needed.
Preparing Registration Documents
Support may include checking the completeness and consistency of company documents, reviewing the authorisation letter, and preparing the required attachment.
Assisting With the Registration Process
A consultant can explain the registration stages, guide the applicant through the required fields, and help identify common application errors.
The business should retain control of its credentials and authentication methods.
Reviewing the Wider AML Framework
Where included in the engagement, the consultant may also review AML policies, customer due diligence procedures, risk assessments, screening arrangements, record-keeping, and reporting processes.
This broader review helps the business understand its compliance responsibilities beyond portal access.
Why Consider Kumano Consulting for AML Compliance Support in Dubai?
Kumano Consulting provides business advisory services, including AML-related support alongside tax and bookkeeping services.
For businesses seeking assistance with goAML registration or broader AML compliance, the first step is to discuss the company's activities, applicable regulatory obligations, and specific support requirements.
Depending on the services agreed, relevant assistance may include discussing registration requirements, identifying documentation gaps, reviewing compliance procedures, and helping the business understand its ongoing AML responsibilities.
Before engaging, confirm the exact scope of services, the assigned professional's relevant experience, the deliverables included, and any applicable fees.
A suitable consulting engagement should help the business understand what is required, what actions it must take, and which compliance responsibilities remain with management.
Frequently Asked Questions About goAML Registration in the UAE
What is goAML in the UAE?
goAML is a digital reporting platform used by the UAE Financial Intelligence Unit to receive and analyse suspicious transaction reports and suspicious activity reports from relevant reporting entities.
Is goAML registration mandatory in Dubai?
Registration is mandatory for entities that fall within the applicable reporting requirements. Relevant DNFBPs under the Ministry of Economy and Tourism's framework are required to register. Businesses should confirm their classification and supervisory authority before applying.
Is goAML registration free?
Yes. The Ministry of Economy and Tourism states that registration is free. Separate fees may apply if a business hires a private consultant to provide professional assistance.
What documents are required for goAML registration?
For the Ministry's relevant DNFBP process, the published instructions include the company trade licence, an authorisation letter appointing the nominated Compliance Officer or MLRO, and the nominated person's identification documents. The technical instructions also list the residence visa and Emirates ID. Confirm the current requirements for your entity type.
How long does goAML registration take?
The processing time can depend on the completeness of the application, verification, supervisory review, and whether corrections are needed. Check the official portal and your registered email for the current application status.
Can a company register without appointing a Compliance Officer?
The Ministry's technical instructions state that, if a company does not have a nominated Compliance Officer or MLRO, its Managing Director, Operations Manager, or CFO may register. Businesses should confirm the applicable appointment and compliance responsibilities for their entity before proceeding.
What is the difference between SACM and goAML?
SACM, or Services Access Control Manager, is the access-management and pre-registration stage. The goAML system is the reporting platform used by the UAE FIU. The registration process requires completion of the relevant stages.
What should a business do after registering?
The business should ensure that its AML policies, customer due diligence, risk assessment, record-keeping, staff responsibilities, and suspicious activity reporting procedures meet its applicable obligations.
Can an AML consultant register a company on goAML?
A consultant may provide registration assistance where authorised and permitted. The company must provide accurate information, safeguard its credentials, and ensure that its legal and compliance responsibilities are properly assigned.
Conclusion
goAML plays an important role in the UAE's framework for reporting suspicious financial activity. For businesses covered by the relevant requirements, completing registration is an important step towards establishing access to the reporting system.
The process involves confirming the correct reporting-entity category, preparing the required documents, completing SACM pre-registration, setting up authentication, and registering the organisation on goAML.
Businesses should also remember that registration alone is not sufficient. Effective AML compliance requires appropriate risk assessment, customer due diligence, internal controls, record-keeping, and reporting procedures.
If your business is unsure about its registration requirements or wider AML responsibilities, consider obtaining appropriate professional guidance and confirm the applicable requirements with the relevant UAE supervisory authority.
Official Resources
UAE Ministry of Economy and Tourism — Steps to Register Your Company on goAML
UAE Ministry of Economy and Tourism — Technical Instructions Before You Start Registration
UAE FIU — Official goAML Registration Portal
UAE Ministry of Economy and Tourism — goAML System Registration Guide (PDF)
Disclaimer: This article is for general educational purposes and does not constitute legal advice. Registration requirements depend on the business's activities, regulatory classification, and supervisory authority. Verify current requirements through official UAE sources before submitting an
