Article about goAML Registration in UAE: The DNFBP Compliance Guide 2026 : – Reviewed by: Abraham, Senior Chartered Accountant at ProAct — Expert in Auditing, Accounting, Corporate Tax, VAT, AML, UAE Company Formation & Free Zone Compliance.
If you run a real estate brokerage, an audit practice, a precious metals trading firm, or a corporate service provider in the UAE, the goAML platform is no longer something you can quietly ignore. As of 2026, under Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025, every Designated Non-Financial Business or Profession (DNFBP) and every Virtual Asset Service Provider (VASP) operating in the UAE — mainland or commercial free zone — is required to register on goAML and to file the prescribed reports within the statutory windows.
In the first half of 2025 alone, the UAE Ministry of Economy issued millions in administrative fines and enforcement has continued to rise each quarter as the Financial Action Task Force (FATF) prepares its 2026 mutual evaluation of the UAE. If your firm crossed an AED 55,000 cash transaction threshold last quarter, have you actually filed the corresponding Dealers in Precious Metals and Stones Report (DPMSR) on goAML within the two-week window — or is it still sitting in someone’s “to-do” tray?
ProAct Chartered Accountants works with DNFBPs and VASPs across the UAE, and the same compliance gaps appear in audit after audit.
What Is goAML and Why Does the UAE FIU Use It? (نظام goAML)
goAML is the UAE’s mandatory electronic reporting platform operated by the Financial Intelligence Unit (FIU) inside the Central Bank of the UAE. It is the single channel through which financial institutions and DNFBPs file Suspicious Transaction Reports (STR), Suspicious Activity Reports (SAR), Dealers in Precious Metals and Stones Reports (DPMSR), Real Estate Activity Reports (REAR), and other regulatory filings.
goAML registration UAE is the mandatory enrolment of every regulated entity — financial institution or DNFBP — onto the FIU’s reporting portal so that suspicious transactions, sanctions matches, and high-value cash dealings can be reported within the windows set by Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. Registration itself is free; non-registration is not.
The platform was originally developed by the United Nations Office on Drugs and Crime and adopted by the UAE in 2019. The Central Bank of the UAE (CBUAE) and the Ministry of Economy use the data to detect typologies, target inspections, and feed the National Risk Assessment.
goAML (نظام goAML) is the UAE Financial Intelligence Unit’s electronic platform for receiving regulatory and suspicious activity reports from regulated entities. In the UAE context, this means financial institutions, DNFBPs and VASPs are required to register on goAML and to keep their profile, MLRO details, and reports up to date; failure to register or report can result in administrative fines and supervisory action. It applies to all financial institutions, all DNFBPs, and — as a separate regulated category under Federal Decree-Law No. 10 of 2025 — to Virtual Asset Service Providers.
Who Must Register on goAML in the UAE in 2026? (من يجب أن يسجل في goAML؟)
Every financial institution, every Designated Non-Financial Business or Profession (DNFBP), and every Virtual Asset Service Provider (VASP) operating in the UAE — including commercial free zones — is required to register on goAML and comply with the reporting regime.
Under Cabinet Resolution No. 134 of 2025, the UAE AML framework recognises three distinct regulated categories: financial institutions, DNFBPs, and VASPs. They are subject to broadly comparable AML/CFT/CPF obligations but are not the same category — a point the Ministry of Economy and the Central Bank of the UAE consistently reinforce in supervisory guidance. The Ministry of Economy supervises DNFBPs; the CBUAE supervises licensed financial institutions; and the Capital Markets Authority (CMA) supervises Virtual Asset Service Providers from outside Dubai under CMA Decision No. 4/R.M/2026, while VARA supervises VASPs licensed in the Emirate of Dubai.
The five DNFBP categories under UAE law are: real estate agents and brokers, dealers in precious metals and stones, independent legal professionals, independent accounting professionals and auditors, and trust and corporate service providers. VASPs are regulated separately under the same federal AML law but are not classed as DNFBPs.
That said, not every entity in a group needs to register. Only the licensed entity that performs the regulated activity must register — a holding company that does not deal directly with clients usually does not. Speak with a ProAct specialist today — no obligation if you are unsure where the line falls in your structure.
| Regulated Category | Supervisor | Trigger for goAML Registration | Common Reports Filed |
|---|---|---|---|
| Real estate brokers & agents (DNFBP) | Ministry of Economy | Holding a real estate brokerage licence in any emirate | STR, SAR, REAR (Real Estate Activity Report) |
| Dealers in precious metals & stones (DNFBP) | Ministry of Economy | Single cash or wire transaction at or above AED 55,000 | STR, SAR, DPMSR |
| Auditors & accountants (DNFBP) | Ministry of Economy | Holding an auditing or accounting licence | STR, SAR |
| Lawyers, notaries & legal professionals (DNFBP) | Ministry of Economy | Acting on behalf of clients in defined transactions | STR, SAR |
| Trust & corporate service providers (DNFBP) | Ministry of Economy | Holding a corporate services licence | STR, SAR |
| Virtual Asset Service Providers (VASP — separate category) | VARA (Dubai) / Capital Markets Authority (outside Dubai) | Licensing under VARA rulebook or CMA Decision No. 4/R.M/2026 | STR, SAR |
Regulated categories and goAML registration triggers under Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. Sources: UAE Ministry of Economy and the UAE Financial Intelligence Unit.
What Are the goAML Registration Deadlines for 2026?
For an existing DNFBP, the original onboarding deadline of 30 April 2021 has long passed; any unregistered entity remains exposed to administrative penalties from that date forward. For a new licensee, the Ministry of Economy expects goAML registration to be completed promptly after the trade licence is issued, before regulated activity begins.
The Ministry treats goAML registration as a core post-licence compliance step alongside VAT and corporate tax registration. Acting before goAML approval — for example, signing an engagement letter or listing a property — exposes the firm to fines and supervisory action if a reportable event occurs. The FIU normally processes a complete application within 5 to 15 working days, according to the UAE Financial Intelligence Unit.
Request a compliance review from ProAct before your next deadline — particularly if your trade licence was issued in the last six months and you have not yet onboarded onto goAML.
How Do You Register Your UAE Company on goAML? (How-to)
Registration is completed entirely online through the goAML portal, but the documentation has to be precise. A single mismatch between the trade licence and the application will reject the file.
- Step 1 — Pre-register on the SACM portal. Every DNFBP must first create a profile on the Service Access Control Manager (SACM) sub-system maintained by the Ministry of Economy. SACM determines your risk rating before goAML approves your file.
- Step 2 — Appoint and approve your MLRO. Designate a Money Laundering Reporting Officer (MLRO) and a Deputy MLRO. The MLRO must be a UAE resident, fit-and-proper, and reachable by the FIU within one business day.
- Step 3 — Submit the goAML registration application. Upload trade licence, Emirates ID of the MLRO, board resolution appointing the MLRO, and authorised signatory details. Use the exact entity name on the trade licence.
- Step 4 — Receive FIU approval and activate reporting. Once approved, the FIU issues login credentials. From that day, the entity must file an STR or SAR without delay once suspicion arises, and must submit a DPMSR or REAR within two weeks of the qualifying transaction, in line with the UAE FIU Reports FAQs.
ProAct Compliance Workflow
- Data Gathering — collect trade licence, MOA, MLRO Emirates ID, board resolutions, transaction logs, and KYC files.
- 4-Layer Review — entity classification check, MLRO suitability check, SACM risk-rating consistency check, transaction-threshold mapping check.
- Issue Flagging — every gap is logged in writing with a fix and a deadline.
- Documentation & Filing — ProAct prepares the full registration pack and lodges it with the FIU on your behalf.
What Reports Must You Submit After You Register?
Registration is the start, not the finish. Once you are live on goAML, the FIU expects ongoing reporting against tight statutory windows.
The most frequent reports DNFBPs must file are:
STR (Suspicious Transaction Report), filed when a transaction has been attempted or completed and is suspected to involve proceeds of crime;
SAR (Suspicious Activity Report), filed when an activity — even without a completed transaction — raises suspicion;
DPMSR for precious metals dealers on every cash or wire transaction at or above AED 55,000;
REAR for real estate brokers on every purchase or sale of freehold real estate where payment includes AED 55,000 or more in physical cash, or any payment in virtual assets, or any funds converted from virtual assets.
Every regulated entity must keep AML records for at least five years.
The question we get asked most: “If I haven’t seen anything suspicious, do I still file anything?” The answer is yes for DPMSR and REAR (these are threshold-based, not suspicion-based) and yes for the periodic risk assessment update the FIU expects.
Get clarity on your obligations — contact ProAct.
What Are the Penalties for goAML Non-Compliance?
Administrative fines start at AED 50,000 and can reach AED 1,000,000 per violation, and they stack — every separate breach attracts its own fine inside a single inspection. For repeated offences, the penalty ceiling can rise to AED 5,000,000.
Federal Decree-Law No. 10 of 2025 raised the maximum penalty for legal persons committing a money laundering offence to AED 100,000,000, and the Executive Regulations expanded the list of administrative violations that the supervisory authorities may issue without going to court.
Do DMCC, RAKEZ, Meydan, JAFZA and IFZA Companies Need goAML Registration? (Регистрация goAML для компаний во фризонах)
Yes — commercial free zones are not exempt. DMCC, JAFZA, IFZA and other commercial free zone DNFBPs fall squarely inside the Ministry of Economy’s supervisory perimeter for AML purposes.
A Designated Non-Financial Business or Profession (المهن والأعمال غير المالية المحددة, Назначенные нефинансовые предприятия и профессии) is a non-banking entity that the UAE has designated as exposed to money-laundering risk and therefore subject to the AML/CFT/CPF regime. In the UAE context, this means a real estate broker, a precious metals trader, an auditor, a lawyer, a corporate service provider, or a non-Dubai virtual asset service provider must comply with Federal Decree-Law No. 10 of 2025. It applies whether the entity is licensed in mainland Dubai, Abu Dhabi, Sharjah, or any commercial free zone such as DMCC, JAFZA or IFZA.
How ProAct Helps You Stay goAML Compliant
ProAct Chartered Accountants is a UAE-based financial advisory firm specialising in accounting, corporate tax, auditing, VAT compliance, AML compliance, and business setup services — supporting businesses across Dubai, Abu Dhabi, and all UAE free zones including DMCC, RAKEZ, Meydan, JAFZA, and IFZA. ProAct’s AML team handles goAML registration, MLRO outsourcing, EWRA documentation, STR/SAR drafting, and pre-inspection readiness reviews for DNFBPs of every size.
When you contact ProAct, a senior consultant will respond inside 24 hours. There is no sales pitch. We open with three questions about your licence, your MLRO, and your last filed report, and we tell you on the same call whether your file is materially compliant or whether immediate action is needed. If action is needed, we send a fixed-scope proposal the same day.
Frequently Asked Questions
Is goAML registration free in the UAE?
Yes — registration on the goAML portal itself carries no government fee. There is no charge from the Financial Intelligence Unit for creating a goAML account, and there is no annual subscription fee. Costs only arise where a regulated entity engages a consultant to prepare the documentation, or where the entity needs to outsource the MLRO function. Penalties for failing to register, by contrast, start at AED 50,000 per violation, so the economic case for completing registration on time is overwhelming for every DNFBP.
Can I appoint an external MLRO for goAML?
Yes — the UAE Executive Regulations permit an external or outsourced MLRO, provided the individual is a UAE resident, suitably qualified, and able to respond to the Financial Intelligence Unit within one business day. Smaller DNFBPs frequently use this route because hiring a full-time compliance officer is not commercially viable. The board still bears ultimate responsibility, and the outsourcing arrangement must be evidenced in a written contract held on file for inspection by the Ministry of Economy.
What is the difference between STR and SAR on goAML?
An STR (Suspicious Transaction Report) is filed when a transaction has been attempted or completed and the entity has reasonable grounds to suspect it involves proceeds of crime. A SAR (Suspicious Activity Report) is filed when activity is suspicious but no completed transaction exists yet — for example, an unusual onboarding pattern. Both must be filed via goAML without delay once suspicion arises, and both trigger the prohibition on tipping off the customer under Federal Decree-Law No. 10 of 2025.
Do free zone DNFBPs in DMCC, RAKEZ, Meydan, JAFZA or IFZA need goAML?
Yes — every commercial free zone DNFBP must register on goAML and comply with federal AML reporting obligations. DMCC, RAKEZ, Meydan, JAFZA and IFZA are commercial free zones, not financial free zones, so the Ministry of Economy is the AML supervisor. The free zone authority itself may also issue internal circulars reinforcing the requirement, but the substantive obligation is federal.
How long does goAML approval take in the UAE?
The Financial Intelligence Unit usually approves a complete and accurate goAML application within 5 to 15 working days. Delays almost always come from documentation issues — a mismatched entity name, an unclear board resolution, an Emirates ID that does not match the appointed MLRO, or a missing SACM pre-registration. A clean application package, prepared by an expert consultant who has lodged similar files before, materially reduces the back-and-forth and gets the entity into a reportable state faster.
What happens if I miss a DPMSR or REAR filing on goAML?
Missing a Dealers in Precious Metals and Stones Report (DPMSR) or a Real Estate Activity Report (REAR) is treated as an administrative violation by the Ministry of Economy and attracts a fine that starts at AED 50,000 per missed report. Each missed report is a separate violation, so a six-month gap can generate cumulative fines well above AED 500,000. Voluntary remediation — filing the missing reports before the supervisor inspects — is consistently treated as a mitigating factor and frequently leads to reduced penalties.
Does goAML registration affect my UAE corporate tax obligations?
No — goAML registration is an AML compliance obligation administered by the Financial Intelligence Unit and the Ministry of Economy, while corporate tax is administered by the Federal Tax Authority (FTA) under Federal Decree-Law No. 47 of 2022. The two regimes are independent. However, both require accurate financial records, and weaknesses in one often expose weaknesses in the other. ProAct typically reviews AML and corporate tax readiness in a single integrated engagement to avoid duplicated effort and contradictory documentation.
Recommended further reading:
- UAE AML/CFT Law — Federal Decree-Law No. 10 of 2025 — Guide
- UAE AML Executive Regulations 2026 (Cabinet Resolution 134/2025)
- UAE DNFBP AML EWRA Risk Assessment Guide
Disclaimer: The content in this article is for general informational purposes only and does not constitute formal financial, legal, or compliance advice. For guidance specific to your business situation, please consult a qualified professional.
Author Bio:
Written By,
