What is goAML and why is it needed

The goAML system is the official UAE financial intelligence portal for submitting reports of suspicious activity and other messages related to compliance with anti-money laundering and counter-terrorism financing (AML/CFT) requirements.

Developed by the United Nations Office on Drugs and Crime (UNODC), the system facilitates the collection, analysis, and sharing of data on suspicious transactions. Registration in goAML is a mandatory requirement for all reporting entities, including financial institutions, DNFBPs, and virtual asset service providers.

The use of the international goAML platform promotes standardisation of reporting and enhances cooperation with foreign authorities in accordance with FATF standards.

Who is required to register in goAML

Mandatory registration in the system is required for:

• Financial institutions: banks, insurance companies, exchange offices, and other licensed organisations.

• DNFBPs (designated non-financial business and professions): legal firms, auditors, real estate agents, jewellers, corporate service providers.

• VASPs (virtual asset service providers): cryptocurrency exchanges, token issuers, and other market participants in digital assets.

The expansion of the group of obligated entities reflects the UAE's efforts to control new areas of risk in AML/CFT.

How to register in goAML: step-by-step guide

Step 1. Go to the goAML portal

1. Visit the goAML website.

2. Click Register.

3. Select the type of registration:

   • Reporting Entity — for companies;

   • Person — for employees (e.g. compliance officer);

   • Supervisory Body or Stakeholder — for regulators and stakeholders.

Step 2. Register the organisation

• Provide:

  • business licence;

  • legal name;

  • area of activity;

• Upload documents (see table below);

• Appoint a compliance officer and add their contact details.

Step 3. Register the compliance officer

• Fill in personal details;

• Upload copies of Emirates ID or passport;

• Upload employment confirmation;

• Link the profile to the organisation.

Step 4. Confirmation and activation

• All data is checked by the PFR;

• If necessary, correct errors and reapply;

• Receive confirmation via email;

• Install the Google Authenticator app — to protect access to the portal.
  
  

What documents will be needed

Linking the employee's account to the legal entity, the power of attorney, and access verification protects the reporting process and reduces the risk of misuse.

What to do after registration

Registration is just the beginning. After this, the organisation is required to:

• Submit reports:
  STRs (suspicious transaction reports), SARs (suspicious activity reports), FFRs (funds freeze reports), PNMRs (name match reports), and others are submitted through the goAML portal.

• Monitor reporting:
  The compliance officer is responsible for the timely submission and oversight of all reports on behalf of the organisation.

• Update information:
  In case of changes in the company's structure, contact details, or compliance officer — changes must be made to the profile.

Conclusion

Registration in goAML is a mandatory and strategically important condition for compliance with AML/CFT requirements in the UAE. The process requires attention to detail, formal confirmation of authority, and strict data handling.

Companies that approach registration and reporting with awareness strengthen their legal protection and reduce the risk of penalties. Timely submission of data through goAML is not only a duty but also a contribution to fostering a transparent and sustainable business environment in the UAE.