Key takeaways
- goAML is the UNODC-built system the UAE Financial Intelligence Unit (FIU) uses to receive and analyse suspicious transaction reports.
- The current law is Federal Decree-Law No. 10 of 2025, which repealed Decree-Law No. 20 of 2018; its executive regulation took effect on 14 December 2025.
- The Ministry of Economy and Tourism (MoET) supervises DNFBP licenses issued on the mainland and in commercial free zones; ADGM and DIFC firms are outside its supervision.
- Registration is free and has two stages: a SACM account with an authenticator app, then the entity's own goAML registration.
- The law lets supervisors fine up to AED 5,000,000 per violation, and failing to report, deliberately or through gross negligence, can mean prison.
What goAML is and which law applies
goAML is an anti-money laundering platform built by the United Nations Office on Drugs and Crime (UNODC). u.ae (updated 27 October 2026) says the UAE FIU uses it to receive and analyse suspicious transaction reports, and that all designated non-financial businesses and professions (DNFBPs) were required to register on it.
| Instrument | What it does | Status |
|---|---|---|
| Federal Decree-Law No. 10 of 2025 | The AML law; Article 18 says reports go to the FIU without delay through the electronic system it designates | Issued 30 September 2025; repealed Decree-Law No. 20 of 2018 |
| Cabinet Resolution No. 134 of 2025 | The executive regulation; MoET says its Article 3 defines DNFBPs | Issued 29 October 2025; in force since 14 December 2025 |
| Ministry circulars from 2021 and 2022 | Sector reports such as the DPMSR and REAR | Stay in effect where they don't conflict with the 2025 law, until replaced (Article 41(3)) |
MoET's goAML web page (updated 12 November 2026) still cites the 2018 law and Cabinet Resolution No. 10 of 2019. The 2025 law and its executive regulation now apply; MoET's updated guide already cites Cabinet Resolution No. 134 of 2025.
Who must register on goAML
Under Article 11 of the 2025 law, financial institutions, DNFBPs and virtual asset service providers all report to the FIU. For DNFBPs, MoET's goAML page lists four groups:
| Group | Examples MoET gives | Supervisor |
|---|---|---|
| Real estate firms | Brokers and agents | MoET |
| Dealers in precious metals or stones | Jewellery stores | MoET |
| Auditing or accounting firms | Chartered accountants and auditors | MoET |
| Trust or company service providers | Company formation and registered business address services | MoET |
| Lawyers and legal consultants | Listed as DNFBPs in MoET's March 2026 release | That release names the Ministry of Justice as a supervisory authority too |
MoET's guide says it supervises DNFBP licenses issued by all mainland registrars and commercial free zones. ADGM's FSRA and DIFC's DFSA are excluded, and the DFSA says DNFBPs in the DIFC must register with it. Article 18(2) exempts lawyers, notaries, other legal professionals and independent legal auditors from reporting where professional secrecy applies.
Applying for a real estate broker license, or a general trading company selling gold or jewellery? Check these groups before you start trading.
How to register on goAML: two stages
MoET's updated registration guide sets out the process for businesses it supervises, and MoET says registration is free.
- 1. Appoint a compliance officer. The guide asks for a letter appointing a compliance officer or money laundering reporting officer (MLRO), on company letterhead and/or stamped. This person registers.
- 2. Prepare one PDF under 5 MB with the trade license, the authorisation letter and the officer's Emirates ID and/or passport copy. The system accepts only one attachment.
- 3. Stage 1: register on SACM at services.uaefiu.gov.ae/sacm. Choose the Ministry of Economy & Tourism as supervisory body, enter the trade license number and a UAE mobile number, then verify your email. The request doesn't reach MoET until you do.
- 4. Wait for MoET's review. Its AML team approves or rejects, with a reason. On approval you get email and SMS OTPs, valid for 24 hours, to get your user name and secret key; then set up an authenticator app.
- 5. Stage 2: register the entity on goAML at services.uaefiu.gov.ae/goaml. Log in with your SACM username and authenticator code, complete the form, upload the documents and submit. On approval, you get an organisation ID.
Each company needs its own email address and mobile number. Other MoET instruction pages point stage 2 to a Central Bank portal and let a managing director, operations head or CFO register if there's no compliance officer. Follow the updated guide and check anything unclear with MoET.
Global Sky PRO prepares the paperwork: license copies, the authorisation letter on your letterhead and the combined PDF. We can walk your compliance officer through the forms, which they submit from their own account. MoET decides on the application. See business setup.
Reports DNFBPs file on goAML
| Report | Who files | When, as published |
|---|---|---|
| STR or SAR | Every reporting entity | On a suspicious transaction or activity; the law says without delay (Article 18) |
| DPMSR | Dealers in precious metals and stones | Cash deals of AED 55,000 or more with individuals; deals of AED 55,000 or more in cash or by wire transfer with entities |
| REAR | Real estate brokers and agents | Freehold sales or purchases with AED 55,000 or more in cash, in one or several payments, or paid with or from virtual assets |
MoET says the UAE FIU website has detailed guides to each report. What to file, and when, is your compliance officer's call.
Penalties for not registering or not reporting
MoET's goAML page says failure to register may result in severe penalties from the ministry. Cabinet Resolution No. 71 of 2024, issued under the 2018 law, lists a fine of AED 50,000 to AED 200,000 for failing to register on the FIU's system. Article 41(3) of the 2025 law keeps earlier regulations in effect where they don't conflict with it, until replaced. The 2025 law sets these ranges:
| Breach | Penalty | Law |
|---|---|---|
| Violating AML obligations (imposed by the supervisor) | Warning; fine of AED 10,000 to AED 5,000,000 per violation; sector ban; suspending managers or the activity; license revocation | Article 17(1) |
| Same violation again within one year | An incremental fine | Article 17(3) |
| Not reporting, deliberately or through gross negligence | Prison and a fine of AED 100,000 to AED 1,000,000, or either | Article 28 |
Enforcement is active: MoET reported 1,063 violations and fines of more than AED 42 million from its first-half 2025 inspections of dealers, brokerages, corporate service providers and auditors.
Global Sky PRO isn't an AML consultant, compliance officer or auditor, and this isn't legal advice. For your AML programme and reporting, use your compliance officer or an AML specialist. We handle registration paperwork, trade license details and related filings such as your ultimate beneficial owner records.
Sources
- u.ae: Combatting money laundering
- UAE Legislation: Federal Decree-Law No. 10 of 2025 on anti-money laundering
- UAE Legislation: Cabinet Resolution on the executive regulations of the AML law
- Ministry of Economy and Tourism: Registering companies in goAML
- Ministry of Economy and Tourism: goAML system registration guide
- Ministry of Economy: Circular 08/AML/2021 on goAML reporting for DPMS
- DFSA: Registered DNFBPs
Official sources checked on 13 November 2026. This guide explains published rules in plain English and is not legal or tax advice. Rules change; we check the current position for your case before you act.