Guide · UAE compliance
goAML registration: a step-by-step guide for UAE DNFBPs.
goAML registration is mandatory for every Designated Non-Financial Business or Profession in the UAE. goAML is the reporting platform of the UAE Financial Intelligence Unit, built by the United Nations and used by regulators worldwide, and registering on it is how your firm files the suspicious transaction and activity reports the law requires.
LAST UPDATED AUG 2026 · GENERAL GUIDANCE, NOT LEGAL ADVICE
Who has to register
Designated Non-Financial Businesses and Professions operating in the UAE must register on goAML: real estate agents and brokers, dealers in precious metals and stones, auditors and accountants, corporate and trust service providers, and lawyers and notaries carrying out certain transactions for clients. Free zone firms are not exempt by default; confirm scope with your supervisory authority.
If you are unsure whether you qualify, ask your supervisory authority rather than assuming you are out of scope. Free zone firms are not exempt by default, and the DNFBP AML requirements UAE supervisors enforce go well beyond registration: risk assessment, screening, reporting and record keeping all follow. Corporate service providers in particular should read our dedicated page on AML software for CSPs and TCSPs, since formation work attracts the closest supervision.
How to register on goAML, step by step
Registering on goAML as a UAE DNFBP takes six steps: confirm your supervisory authority, prepare the trade licence, passport, Emirates ID and authorisation letter, complete the pre-registration security layer that issues your credentials, register the entity on the portal, wait for FIU approval, then start filing and keep the registration updated.
Confirm your supervisory authority
Most mainland DNFBPs are supervised by the Ministry of Economy; firms in financial free zones answer to their own regulator. Your supervisor determines the exact checklist that applies to you.
Prepare the documents before you open the portal
Trade licence, passport and Emirates ID of the authorised person, an authorisation letter on letterhead, and entity details exactly as they appear on the licence. Most rejections come from small mismatches between the form and the licence.
Complete the pre-registration security layer
goAML sits behind a separate access-control registration that issues the credentials you need before you ever see the portal itself. Register the authorised person there first and keep the confirmation email.
Register the entity on the goAML portal
With credentials in hand, complete the entity registration: organisation details, the compliance officer, and reporting contact. Use a monitored, role-based email address, not a personal inbox that leaves with an employee.
Wait for FIU approval and answer clarifications quickly
The FIU reviews submissions and may come back with questions. Slow answers stall the approval; keep the authorised person available until the account is confirmed.
Start filing, and keep the registration alive
Once approved you can file STRs, SARs and the other report types goAML supports. Update the registration when your licence renews or your compliance officer changes; a stale registration is a finding waiting to happen.
What you actually file through goAML
Suspicious transaction reports and suspicious activity reports are the core filings made through goAML, alongside additional report types supervisors may require in defined situations, such as funds linked to designated persons. Registration exists to serve this goAML reporting; the harder task is recognising what is reportable, which depends on continuous counterparty screening.
The hard part is not the filing mechanics; it is recognising what is reportable in the first place. That recognition depends on knowing your counterparties and screening them continuously, which is the programme behind the portal.
Where firms get caught out
Firms get caught out on goAML registration by avoidable details: entity information that does not match the trade licence character for character, expired Emirates IDs on the authorised person, personal email addresses that leave with staff, registrations never updated after licence renewal, and registering then filing nothing, with no screening programme behind the account.
Registration is the door, not the job
Registration on goAML opens the reporting channel; the real job is the programme behind it: knowing your counterparties, screening them against sanctions and PEP lists, spotting what is reportable, and proving it later. KYCK runs that programme for UAE firms as AML software built for the UAE; a best AML software UAE shortlist starts with evidencing every decision.
goAML reporting after registration
goAML reporting is the ongoing duty that follows registration: suspicious transaction reports, suspicious activity reports and the other report types your supervisor expects are filed through the goAML portal, with deadlines that start from detection. Registration gets you the account; reporting discipline is what an FIU inspection actually measures.
DNFBP AML requirements in the UAE
DNFBP AML requirements in the UAE apply to designated non-financial businesses and professions: real estate brokers, dealers in precious metals and stones, auditors and corporate service providers. The core duties are goAML registration, a documented risk assessment, customer due diligence, ongoing monitoring and suspicious transaction reporting, supervised by the Ministry of Economy.
AML fines in the UAE
AML fines in the UAE are administrative penalties issued for failures such as skipping goAML registration, weak customer due diligence or missed suspicious transaction reports, with published schedules running from tens of thousands to millions of dirhams per violation. Verify the current schedule with your supervisor; amounts are updated and enforcement has been active.
Frequently asked questions
Is goAML registration mandatory for DNFBPs in the UAE?
Yes. Designated Non-Financial Businesses and Professions operating in the UAE are required to register on the goAML portal so they can file suspicious transaction and activity reports with the Financial Intelligence Unit. Operating without registration exposes the firm to supervisory action.
What documents do I need for goAML registration?
Typically a valid trade licence, the passport and Emirates ID of the person authorised to act for the entity, an authorisation letter on company letterhead, and accurate entity contact details. Your supervisory authority may ask for more, so check its current checklist before you start.
Which authority supervises my goAML registration?
Most mainland DNFBPs are supervised by the Ministry of Economy, while firms in financial free zones answer to their own regulator. Your supervisor is the reference point for both the registration checklist and the ongoing obligations behind it.
What reports are filed through goAML?
Suspicious transaction reports and suspicious activity reports are the core, and the platform supports additional report types that supervisors may require in specific situations. The obligation to recognise what is reportable sits with the firm, which is why screening and monitoring have to run behind the registration.
What happens if a DNFBP does not register on goAML?
Supervisors in the UAE have issued administrative penalties for failing to register and for failing to file reports, and published rounds of AML fines in the UAE have named hundreds of firms at a time. Beyond fines, an unregistered firm cannot submit the reports the law requires of it, which compounds the breach over time.
Registered on goAML? The reports are only half the job.
KYCK screens your counterparties, flags what needs attention and keeps the audit trail your supervisor will ask for.
This guide is general information based on public guidance as of August 2026, not legal advice. Requirements change: confirm the current process with your supervisory authority and the FIU before relying on it.