Key Takeaways
- Miss the registration, and you’re not just non-compliant; you’ve also lost your only legal channel to file reports. That’s two violations for the price of one.
- Registration is a two-stage process. Get the sequence wrong, and the portal won’t open.
- Non-registration carries fines from AED 50,000 to AED 1 million – and skipping it creates a second, separate violation for failure to report.
What is the goAML Portal and Why Does It Exist?
Most business owners only hear about goAML when a compliance gap gets flagged. Two portals, a secret key, a Google Authenticator requirement – and they close the tab. This goAML registration guide exists for exactly that moment.
Built by the United Nations Office on Drugs and Crime (UNODC) and operated in the UAE by the Financial Intelligence Unit (FIU), goAML is the primary reporting channel for all mainland DNFBPs, financial institutions, and VASPs supervised by MoET and the CBUAE. Entities operating within ADGM and DIFC report through their respective supervisory frameworks, the FSRA and the DFSA, both of which operate independently of the goAML portal. Every STR, SAR, and TFS report filed by covered entities goes through here. Without FIU registration in the UAE, there’s no channel and no proof that one ever existed.
Three report types can be filed through the portal. STRs are filed when a specific transaction raises red flags for money laundering or terrorism financing. SARs are filed when it’s suspected that illegal activities and financial behavioural are in place. TFS reports exist the moment a client or beneficial owner matches a sanctions list.
The deciding factor isn’t certainty. It’s “reasonable suspicion”. Once that line is crossed, the report should be filed. Federal Decree-Law No. (10) of 2025 and Cabinet Resolution No. 134 of 2025 require the mandatory goAML portal registration for every financial institution, DNFBP, and VASP operating in the mainland UAE, supervised by the MoET, the Ministry of Justice (MoJ), or the General Commercial Gaming Regulatory Authority (GCGRA), depending on the sector. No alternatives, no shortcuts.
Who Needs goAML Portal Registration in the UAE?
These three categories of business need to be registered in the goAML portal, no grey areas.
- Financial Institutions– banks, insurance firms, exchange houses, fintech companies.
- DNFBPs– real estate brokers, precious metal dealers, lawyers, accountants, CSPs, and commercial gaming operators.
- VASPs– Virtual Asset Service Providers dealing in cryptocurrency and digital assets
If your business falls into any of these, registration isn’t a choice. Size doesn’t factor in. A solo legal consultant and a 50-branch bank carry the same obligation under UAE AML law. If you’re unsure whether your business qualifies as a DNFBP, start with our UAE AML compliance guide.
| Business Type | Reporting Threshold | Supervised by |
| Real Estate Brokers & Developers | AED 55,000 | MoET |
| Precious Metal & Gemstone Dealers | AED 55,000 | MoET |
| Corporate Service Providers | No threshold- all transactions | MoET |
| Legal Consultants & Law Firms | No threshold- all transactions | MoJ |
| Accounting & Auditing Firms | No threshold — all transactions | MoET |
| Commercial Gaming Operators | AED 11,000 | GCGRA |
| ADGM Entities (Precious Metals & Dealers) | USD 15,000 cash per single or linked transaction | FSRA (Financial Services Regulatory Authority) |
| DIFC Entities (Precious Metals & Dealers) | USD 15,000 cash per single or linked transaction | DFSA (Dubai Financial Services Authority) |
| ADGM / DIFC Legal, CSP & Accounting Firms | No threshold — all transactions | FSRA/DFSA |
What Documents Do You Need for goAML Registration in the UAE?
Document gaps are the number one cause of rejection and delay. Get these ready before you start:
- Valid commercial trade license mentioning partners’ or owners’ list
- Passport copy, Emirates ID, and residency visa of your appointed MLRO, registered on the goAML portal as the Compliance Officer.
- Signed and stamped authorization letter on company letterhead allowing the Compliance Officer to register on behalf of the company.
- Google Authenticator app installed on a UAE phone number.
What Happens After goAML Registration?
Registration is the start, but not the end. And this is where many businesses make a costly mistake.
Once approved, you receive a confirmation email with your unique Registration Number — no formal certificate is issued, so ensure to save that email. Your profile must stay current; any changes to your MLRO or company details must be updated in the portal immediately. Outdated profiles get flagged during MoET inspections as a compliance gap. MoET issues a separate guideline for updating the Compliance Officer details in the goAML portal.
Here’s what registration does not do: it does not confirm your AML framework is compliant. MoET still audits your compliance manual, Business Risk Assessment, CDD records, MLRO appointment letter, and training logs. A registered but otherwise empty framework fails inspection just as cleanly as an unregistered one. The portal is the reporting channel. The framework is what supports it: the policies, the trained staff, the documented decisions, and the records that prove the system is operational. One without the other is nothing. For the full picture on what that framework needs to contain, see our guide on AML compliance requirements for UAE DNFBPs.
Common Mistakes That Get goAML Registration Applications Rejected
Four things cause most rejections:
- Wrong supervisory authority — mainland DNFBPs select MoET; ADGM and DIFC entities use their own regulators. Wrong selection, wrong reviewer.
- Mismatched information — company name, Compliance Officer details, or contact numbers that differ between the two stages. The FIU cross-references automatically.
- Incomplete or blurry documents — If documents are unclear, with missing pages, or uploaded as separate files instead of one merged PDF, the FIU won’t chase you for corrections. They’ll reject the application.
- Unqualified Compliance Officer — the appointed person needs genuine authority and AML training. A nominal appointment doesn’t pass.
Stage one rejection: resubmit at stage one. Stage two rejection: go straight back to the portal — no need to repeat stage one.
Penalties for Failing to Complete goAML Registration in the UAE
Skipping goAML registration in the UAE isn’t a minor mistake. It’s a direct violation of UAE AML law.
Under Cabinet Resolution No. 71 of 2024, fines for non-registration run from AED 50,000 to AED 1,000,000 per violation. Repeat violations double the penalty. But the financial hit isn’t even the bigger problem — unregistered businesses can’t file STRs, which creates a second, concurrent violation for failure to report. Two breaches from one missed step.
For businesses that haven’t registered yet, the process remains open. But MoET doesn’t wait for self-reporting — inspections occur without notice, and an inactive or absent goAML profile is among the most common deficiencies cited in a Letter of Concern.
Conclusion
The goAML registration guide process itself isn’t complicated. Two stages, a specific set of documents, and consistency between both forms. What makes it complicated is being unprepared.
Document mismatches, incorrect supervisory authority selections, and nominal Compliance Officer appointments are what cause rejections, delays, and, eventually, MoET flags down your company. Get the groundwork down right the first time.
If your business needs support with the goAML portal registration, from document preparation to full activation, CorpLex’s AML Compliance Setup covers the entire process.
Frequently Asked Questions
- What happens if my Compliance Officer leaves the company?
You should update the goAML portal registration immediately. An inactive or incorrect Compliance Officer on file is treated as a compliance gap — MoET inspectors check this during audits.
- If my business just launched, do I still need to complete goAML registration?
Yes. But there is no grace period. GoAML registration in the UAE should be completed as soon as the trade license is issued and before handling the first client.
- Can I register on goAML without a Compliance Officer appointed?
No. The goAML registration guide requires a designated Compliance Officer at the point of registration. Without one formally appointed and documented, the application cannot be completed.
- How Long Does goAML Registration Take?
It can be done in two days, if the submission is all correct. Most businesses take two weeks or more, not because the FIU is slow, but because they submitted to the wrong supervisory authority or selected details that didn’t match their trade license. Start correctly to avoid delay.
