Not every business in the UAE needs to register for goAML. However, companies operating in certain regulated sectors must register to meet their anti-money laundering (AML) reporting obligations.
These include financial institutions, designated non-financial businesses and professions (DNFBPs), and virtual asset service providers (VASPs).
Whether your business needs to register depends on its activities, licence and regulatory authority.
As of 20 October 2026, the UAE’s AML framework is governed by Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. These regulations establish requirements for preventing money laundering, terrorist financing and proliferation financing.
What Is goAML?
goAML is an online reporting platform used by the UAE Financial Intelligence Unit (FIU) to receive and analyse reports of suspicious transactions and activities.
It allows businesses with reporting obligations to share information securely with the authorities when they identify potentially suspicious financial activity.
However, registering on goAML does not automatically make a business AML-compliant. Companies must also maintain appropriate customer verification procedures, risk assessments, internal controls and records.
Who Is Required to Register for goAML in the UAE?
The registration requirement mainly applies to three categories of regulated businesses.
- Financial Institutions
Financial institutions covered by UAE AML regulations must register on goAML.
These may include banks, exchange houses, finance companies, payment service providers and other regulated financial businesses.
The Central Bank of the UAE requires financial institutions under its supervision to maintain access to goAML for suspicious activity reporting. It also provides specific reporting and registration guidance for registered hawala providers.
Other financial institutions must follow the requirements of their respective regulators.
- Designated Non-Financial Businesses and Professions (DNFBPs)
Certain businesses outside the traditional financial sector must also register because their services may be exposed to money laundering risks.
Under the UAE regulations, DNFBPs include:
- Real estate brokers and agents involved in property purchases or sales.
- Dealers in precious metals and stones, where covered cash transactions meet the regulatory threshold.
- Lawyers, notaries and independent accountants conducting specified financial or business transactions for clients.
- Trust and company service providers offering services such as company formation, registered addresses and certain management arrangements.
- Commercial gaming operators conducting transactions covered by the relevant regulatory thresholds.
The exact activities and conditions matter. For example, providing ordinary legal advice does not automatically place every legal professional within the reporting requirements.
Businesses supervised by the Ministry of Economy and Tourism (MoET) can refer to its DNFBP Guidelines (March 2026).
- Virtual Asset Service Providers (VASPs)
Businesses offering regulated virtual asset services are also subject to UAE AML requirements.
Depending on their activities, these may include virtual asset exchanges, custody providers and businesses facilitating virtual asset transfers.
Covered VASPs must follow the registration and reporting requirements of their competent regulator. The applicable process may differ depending on where the business operates and which authority licenses it.
Important: Businesses operating in the Dubai International Financial Centre (DIFC), Abu Dhabi Global Market (ADGM) or other free zones should confirm their relevant supervisory authority rather than assume the same registration procedures apply everywhere.
Does Every UAE Company Need goAML Registration?
No. Holding a UAE trade licence does not automatically mean your company must register for goAML.
Businesses outside the regulated reporting categories may not need registration.
However, a company should not assume it is exempt simply because it is small, newly established or has never encountered a suspicious transaction.
The deciding factor is the nature of its activities and the regulations that apply.
Non-profit organisations also have specific AML-related obligations, although these do not automatically mean every organisation must register on goAML.
Is goAML Registration the Same as Reporting?
No. Registration gives your business access to the reporting platform. Reporting becomes necessary when circumstances trigger an applicable reporting obligation.
For example, where a business has reasonable grounds to suspect that funds or transactions involve criminal activity, it may need to submit a Suspicious Transaction Report (STR) or Suspicious Activity Report (SAR).
A transaction does not need to be completed before a reporting obligation can arise. Suspicious attempted or cancelled transactions may also require reporting.
Businesses should report qualifying suspicions without delay, follow the applicable legal requirements and avoid disclosing confidential reporting information to customers.
Certain statutory exceptions apply to protected information obtained by legal professionals in specified circumstances.
How to Register for goAML in the UAE
The goAML registration requirements in the UAE depends on the authority supervising your business.
For MoET-supervised businesses, the goAML System Registration Guide outlines a two-stage registration process.
Here are the main steps:
Step 1: Confirm your registration obligation
Check whether your activities fall within a regulated category and identify the authority responsible for supervising your business.
Step 2: Appoint a compliance officer
Designate an appropriately authorised compliance officer or Money Laundering Reporting Officer (MLRO), as required by the applicable rules.
Step 3: Prepare the necessary documents
Depending on your supervisor, these may include your trade licence, an authorisation letter, identification documents and the compliance officer’s details.
Step 4: Complete the registration
For MoET-supervised entities, registration starts through the Services Access Control Manager (SACM) system, followed by registration on goAML. Secure authentication is required to access the platform.
Step 5: Maintain your compliance procedures
Once registered, ensure your business has suitable procedures for identifying suspicious transactions, training employees, keeping records and submitting reports when necessary.
Registration requirements may change, so always check your regulator’s latest instructions before applying.
Common goAML Registration Mistakes
Businesses can avoid unnecessary delays and compliance problems by watching out for these common mistakes:
- Assuming every UAE company must register, or that only banks are affected.
- Following registration instructions issued by the wrong regulatory authority.
- Waiting until suspicious activity occurs before registering.
- Submitting incomplete documents or inconsistent business information.
- Failing to properly authorise the person responsible for reporting.
- Assuming goAML registration alone satisfies all AML requirements.
- Ignoring suspicious activity because the transaction was unsuccessful.
Failure to meet applicable AML requirements can lead to regulatory action and financial penalties.
Conclusion
goAML is an important compliance requirement for businesses operating in regulated sectors in the UAE. Understanding whether your business needs to register, identifying the appropriate regulatory authority, and maintaining proper AML procedures can help you avoid penalties and meet your legal obligations. If you are unsure about your requirements, seeking professional guidance can help ensure your business remains compliant with UAE regulations. Contact us now