Who needs to register on goAML in the UAE — and how to get it right.
goAML is the UAE's platform for reporting suspicious transactions to the Financial Intelligence Unit. Registration is mandatory for a defined set of businesses — here's who is in scope, what's involved, and how FinComp handles it end to end.
A reporting platform, not just a form to submit once.
goAML is the UAE Financial Intelligence Unit's system for receiving Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs) from regulated businesses. Registration — required under Federal Decree-Law No. 20 of 2018 on AML/CFT and its Cabinet Decision — is the starting point; the ongoing obligation is to actually monitor your business for red flags and file reports through the portal when they arise.
This is why registration alone isn't enough. A properly configured goAML setup includes the reporting workflow, designated compliance officer, and internal escalation process needed to use it correctly when the time comes.
Financial Institutions and Designated Non-Financial Businesses and Professions.
The UAE Ministry of Economy & Tourism identifies two broad groups required to register on goAML: Financial Institutions, and Designated Non-Financial Businesses and Professions (DNFBPs).
Financial Institutions
Banks, exchange houses, finance and leasing companies, insurance firms, and investment companies / securities brokers.
Real Estate
Brokers, agents and firms involved in buying or selling real estate on behalf of clients.
Auditors & Accountants
Independent accountants, external auditors and bookkeeping service providers offering professional assurance on financial matters.
Dealers in Precious Metals & Stones
Jewellers and traders dealing in gold, silver, platinum or diamonds — particularly where cash transactions meet the regulatory threshold.
Corporate Service Providers
Businesses providing company formation, administration, or acting as a registered address or nominee for third parties.
Expanding scope
Virtual asset service providers, legal professionals and select other sectors are increasingly drawn into AML/CFT obligations as UAE regulation evolves — worth confirming if you fall into one of these.
This is general guidance, not legal advice, and reflects our understanding of the current framework under Federal Decree-Law No. 20 of 2018 and its Cabinet Decision. Category boundaries and thresholds are periodically updated — if you're unsure whether your business is in scope, we can confirm this with you directly.
Registration is also a trust signal to banks and regulators.
Beyond the direct compliance obligation, an unregistered or incorrectly configured goAML profile can complicate bank account opening, licence renewals, and regulatory inspections — the Ministry of Economy has the authority to issue penalties for non-registration, and banks increasingly check AML posture as part of their own due diligence on business customers.
Getting registration and reporting workflows right the first time avoids both the compliance exposure and the operational friction of fixing it later, under pressure, before an inspection or audit.
We handle registration, setup, and what comes after.
Registration is only the first step — the value is in a reporting workflow your team can actually use, and an advisor on hand once questions come up.
goAML Registration & Setup
Portal registration, reporting workflow configuration, and compliance officer onboarding for standard single-entity registrations.
RegReady™
A focused, time-bound engagement that keeps your controls inspection-ready — not scrambled together before an audit. The payoff: faster turnaround times, fewer RFIs from banks and auditors, and a compliance record that builds your brand's standing with banks and customers alike.
We're a startup with barely any transactions yet — do we still need to register?
If your business falls within a regulated category, registration is generally expected shortly after incorporation regardless of transaction volume. Waiting until volume picks up is a common and avoidable gap.
Can FinComp register on our behalf, end to end?
Yes — we handle portal registration, reporting workflow configuration and compliance officer onboarding directly, so your team doesn't have to navigate the process alone.
How is this different from ongoing AML monitoring?
goAML registration is the entry point; ongoing monitoring — customer risk reviews, sanctions screening, transaction sampling — is a separate, continuous function. Our Compliance Monitoring Programme™ picks up where registration leaves off.
Not sure if you're in scope? Let's find out together.
Tell us a little about your business — sector, entity type, transaction profile — and we'll tell you plainly whether goAML registration applies, and what's involved.
Request a consultation
Tell us a little about your business and we will respond within one working day.
Your information is treated as confidential and used only to respond to your enquiry.