On this page 4 sections
goAML is the reporting system the UAE Financial Intelligence Unit uses to receive suspicious transaction and suspicious activity reports. Registering on it is not optional for the businesses it covers, and the enforcement is not theoretical: the Ministry of Economy has suspended companies for three months purely for not registering. If you set up a firm in one of four sectors, this is a compliance step you complete before you are asked about it, not after. Everything below comes from the ministry’s own goAML pages, checked on 8 August 2026.
The four categories in the ministry’s own words
| Category | Test | Typical example |
|---|---|---|
| Real estate | Your firm carries out transactions with customers involving the buying or selling of real estate property | Brokers and agents |
| Auditing or accounting | You provide professional services and assurance to third parties on financial or business matters | Chartered accountants, accountants, auditors |
| Precious metals or stones | Production, intermediate buying or broking, cutting and polishing, refining, or manufacturing jewellery for retail or secondary markets | Jewellery stores, gold and diamond traders |
| Trust or company service provider | You provide company establishment or business administration services to third parties | Company formation agents, registered address providers |
The fourth category is the one that surprises people, because it captures a large part of the business setup industry itself. If your firm registers companies for clients or supplies them with a registered address, you are inside the perimeter regardless of how small you are.
How registration works
Two steps, in this order. Register in the SACM protection system of the goAML portal and obtain a username. Then take the password from the Google Authenticator application, which regenerates every minute, and use it to access goAML.
| Required document | Note |
|---|---|
| Authorisation letter from the institution you represent | Names you as the person acting for the entity |
| Copy of your passport, residence visa and Emirates ID | For the registering officer |
| Copy of the commercial trade licence | For companies |
| Google Authenticator installed on your phone | Holds the one minute SACM password |
The person registered is the one the unit will deal with, so register the individual who will actually hold the money laundering reporting role rather than whoever happens to be free that week. The ministry publishes a separate guide for changing the registered reporting officer later, which tells you how often that goes wrong.
What happens if you do not
The ministry publishes its own enforcement record, and it is blunt. In the third quarter of 2023 it suspended the operations of 50 firms for three months purely for failing to register on goAML, stating that suspension remains in force until the obligation is met and that stronger penalties follow if compliance is not achieved within the suspension period. Over the same year to that date it had imposed fines of approximately AED 76.9 million on 225 firms in the sector.
Registration is also not the end of the obligation. goAML exists to receive reports, so the entity that registers is expected to have the internal procedures to detect and file them. Registering and then never looking at the portal again is a different failure, not a solved one.
What sits around it
goAML is one item in a compliance set that a covered firm carries from day one: a designated reporting officer, a written policy, customer due diligence records, sanctions screening, and staff who know what a suspicious transaction looks like. Our AML compliance support page lists the firms in our directory that cover this work, and compliance mistakes after setup covers the obligations that catch new companies in their first year.
Frequently asked questions
Who has to register on goAML in the UAE?
Designated Non-Financial Businesses and Professions. That is real estate firms transacting in property, auditing and accounting firms, dealers in precious metals or stones, and trust or company service providers. Meeting any one of those tests is enough.
Is goAML registration mandatory?
Yes. The Ministry of Economy states that registration of designated non-financial companies on the goAML portal is mandatory, under Federal Decree-Law No. 20 of 2018 and Article 20(2) of Cabinet Decision No. 10 of 2019.
What is the penalty for not registering on goAML?
The ministry suspended the operations of 50 firms for three months in the third quarter of 2023 for failing to register, and said stronger penalties would follow if they did not comply during the suspension. Over that year to date it had fined 225 firms roughly AED 76.9 million in the same sector.
How do I register on the goAML portal?
Register first in the SACM protection system of the goAML portal to get a username, then obtain the one minute password from the Google Authenticator app and use it to log in to goAML.
What documents do I need for goAML registration?
An authorisation letter from the institution you represent, a copy of your passport, residence visa and Emirates ID, a copy of the commercial trade licence for companies, and Google Authenticator installed on your phone.
Does a company formation agent need goAML?
Yes. Trust and company service providers are one of the four categories, defined as providing company establishment or business administration services to third parties, including registered business address services.
Not sure whether your licence puts you inside the perimeter? Browse legal and compliance firms or describe your case and compare offers.
Official references used for context in this article.
Need help with this?
Submit a request and receive tailored offers from verified UAE business consultants. Free, no obligation.