Registering for goAML Step by Step

goAML registration is completed in two stages. The first is registration on the SACM portal of the Financial Intelligence Unit, which gives you a user name and a secret key to be linked to an authenticator app on your phone. The second is registering the entity itself in the goAML system and uploading the documents as a single PDF file, and each stage waits for the approval of the supervisory authority. The steps look technical, but the mistakes are legal ones: who is appointed as compliance officer, which supervisory authority is selected, and what the appointment letter says.

goAML registration is mandatory for every entity that falls within the Designated Non-Financial Businesses and Professions. Failure to register is a violation carrying a fine of AED 50,000 to AED 200,000, which may be doubled on repetition. Registration is not the end of the matter either: it is where the duty to report suspicious transactions begins, and a breach of that duty can lead to imprisonment.

This article sets out goAML registration step by step, shows at each stage where the errors occur that end in rejection or in a violation, and explains what AWADH ALMHEIRI LAW FIRM AND LEGAL CONSULTATIONS handles for you along the way.

What Is the goAML System and Who Created It?

goAML is an electronic platform developed by the United Nations Office on Drugs and Crime. Financial intelligence units around the world use it to receive suspicious transaction reports, analyse them and refer them to law enforcement. The UAE was the first Gulf state to apply it, and it is operated here by the Financial Intelligence Unit established at the Central Bank.

The reason it applies is that the anti-money laundering law requires entities to report any suspicious transaction to the Unit directly and without delay through its electronic system, and goAML is that channel. An entity that has not registered has no means of reporting, and is in violation before a single transaction passes through it.

Who Must Complete goAML Registration?

Under the Executive Regulations of the anti-money laundering law, goAML registration is required of financial institutions and virtual asset service providers, together with the Designated Non-Financial Businesses and Professions, namely:

• Real estate brokers and agents when they conclude transactions for the purchase or sale of real estate on behalf of their clients.

• Dealers in precious metals and precious stones for any cash transaction, single or linked, equal to or exceeding AED 55,000.

• Lawyers, notaries, other independent legal professionals and independent accountants when carrying out specified financial transactions for clients, such as buying and selling real estate, managing funds and forming companies.

• Company and trust service providers, such as those acting as a formation agent or providing a registered office or business address.

• Commercial gaming operators within the limits set by the Regulations.

The risk is that many businesses do not know the law applies to them, because what counts is the activity written on the licence and the activity actually carried out, not the company name. The firm's role therefore starts before registration: reviewing the licence and activities and determining whether you are obliged to register, and in what capacity.

Which Supervisory Authority Do You Select in goAML Registration?

The system asks you to select the supervisory authority on the very first screen, and a wrong choice is one of the most common reasons for rejection. The Ministry of Economy and Tourism supervises Designated Non-Financial Businesses and Professions licensed by mainland licensing authorities and by commercial free zones. Entities licensed in the financial free zones, namely the Dubai International Financial Centre and Abu Dhabi Global Market, fall under the regulator of each zone. Lawyers and legal professionals are supervised by the Ministry of Justice, and financial institutions by their own competent regulators.

Identifying the supervisory authority is a legal question, not a box to tick. The authority you register with is the one that will inspect you and impose the penalty, and the one to which a grievance is later submitted.

What Documents Are Required for goAML Registration?

• The trade licence of the entity.

• An authorisation letter from the entity appointing the compliance officer, on its letterhead or bearing its stamp.

• A copy of the Emirates ID or passport of the compliance officer.

• An email address and a UAE-registered mobile number for the compliance officer, and an authenticator app on that phone.

The documents are combined into one PDF file of no more than 5 MB, because the system accepts a single attachment only. The most sensitive of them is the appointment letter, which is not a formality: the Executive Regulations require the compliance officer to be at management level, independent in decision-making, and suitably competent and experienced. Appointing a person who does not meet these conditions is a separate violation with a fine of AED 50,000 to AED 200,000. The firm drafts the appointment letter and defines the officer's duties in a way that protects both the entity and its manager.

goAML Registration Step by Step: Stage One, the SACM Portal

Stage one does not register the entity in goAML. It gives the compliance officer a secure login identity. It has five stops:

Stage Two: Registering the Entity in the goAML System

Why Is a goAML Registration Request Rejected?

• The entity name or licence number does not match the trade licence.

• A supervisory authority other than the competent one was selected.

• The appointment letter has no letterhead or stamp, or does not clearly name the compliance officer.

• The documents were uploaded as more than one file, or exceed the permitted size.

• The mobile number is not registered in the UAE, or the email was never verified.

• Missing data in the entity or officer fields.

Every rejection means starting the request again, and in the meantime the entity remains unregistered and exposed to a violation. This is why the firm reviews the whole file before submission and follows the request with the supervisory authority until the organisation ID is issued.

What Comes After goAML Registration? The Obligations Start Now

Registration only opens the channel. After it, the entity must file suspicious transaction reports with the Financial Intelligence Unit through the system without delay, respond to every request from the Unit for further information, and not alert the client that a report has been made. Wider duties remain outside the system: approved internal policies and procedures, a risk assessment, customer due diligence, record keeping and sanctions list screening, all of which are subject to desk-based and on-site inspection by the supervisory authority.

The inspector does not only ask whether you registered in goAML. The real question is what you have done since. The firm builds with the entity the compliance file that is presented at inspection, and determines when a report must be made and when it need not be.

Fines for Not Registering in goAML and Other Penalties

Under the list of violations and administrative fines issued by Cabinet decision and applied to those supervised by the Ministry of Justice and the Ministry of Economy:

• Failure to register in the electronic system approved by the Financial Intelligence Unit: AED 50,000 to AED 200,000.

• Failure to appoint a compliance officer with suitable competence and experience: AED 50,000 to AED 200,000.

• Failure to file suspicious transaction reports without delay, or to respond to the Unit's requests: AED 100,000 to AED 500,000.

• Disclosing to the client that a report has been made or that an investigation exists: AED 100,000 to AED 500,000.

The Ministry may double the fine when the violation is repeated. Under the anti-money laundering law itself, the supervisory authority may impose administrative penalties that begin with a warning and extend to a fine of AED 10,000 to AED 5,000,000 per violation, a ban on the violator working in the sector, and restrictions on the powers of management.

The criminal side is more serious. Whoever breaches the duty to report suspicious transactions, intentionally or through gross negligence, is punished by imprisonment and a fine of AED 100,000 to AED 1,000,000, or either penalty. Whoever tips off the client about a report is punished by imprisonment and a fine of not less than AED 50,000, or either penalty. At that point the matter moves from a violation against the entity to a case against a person.

If an administrative penalty has been imposed on you, the grievance against it has a time limit, and a court challenge is not accepted before the grievance. The firm prepares the reasoned grievance with its supporting documents, then the challenge before the competent court if needed.

Time Limits You Must Not Miss

Practical Tips Before goAML Registration

Legal References

• Federal Decree-Law No. 10 of 2025 on Combating Money Laundering Crimes, Countering the Financing of Terrorism and the Financing of Proliferation.

• Cabinet Decision No. 134 of 2025 on the Executive Regulations of Federal Decree-Law No. 10 of 2025.

• Cabinet Decision No. 71 of 2024 regulating the violations and administrative penalties imposed on violators of anti-money laundering and counter-terrorist financing procedures who are supervised by the Ministry of Justice and the Ministry of Economy.

• Cabinet Decision No. 74 of 2020 on the terrorism lists regime and the implementation of UN Security Council resolutions.

• Cabinet Decision No. 109 of 2023 regulating beneficial owner procedures.

• goAML System Registration Guide issued by the Ministry of Economy and Tourism.

Frequently Asked Questions About goAML Registration