goAML Registration in the UAE: A Practical Guide

goAML is the reporting platform of the UAE Financial Intelligence Unit (FIU). Businesses supervised for AML purposes use it to submit suspicious transaction and activity reports and, depending on their sector, other report types. This guide covers what to prepare, how registration fits into your wider AML programme, and what to have in place once you are registered.

Who needs to register

Financial institutions and designated non-financial businesses and professions (DNFBPs) that are subject to UAE AML law are expected to register on goAML so that they can report to the FIU when required. Your supervisor's guidance confirms what applies to your licence. Registration should happen before you need to file a report, not when a suspicion arises.

What to prepare before you start

• A valid trade licence and the entity's registration details.
• Details of the appointed compliance officer or MLRO, who normally acts as the main reporting contact.
• Identity documents for the people who will hold user accounts.
• A clear decision on who holds each role in the system, so access matches your internal responsibilities.
• Any authorisation letter or supporting documents the FIU requests during the process.
• A working business email address that will be monitored, since FIU messages arrive through the platform and by email.

The registration screens and document requirements are set by the FIU and can change, so check the current instructions on the FIU's goAML pages before you begin.

How the process usually runs

1. Create the organisation's registration on the goAML portal and enter the entity details.
2. Register the compliance officer as the primary user and upload the requested documents.
3. Wait for the FIU to review and approve the request, and respond promptly to any query.
4. Once approved, add any further users your procedures need, with the right level of access.

Common reasons for delay

• Details that do not match the trade licence exactly.
• Missing or unclear supporting documents.
• A compliance officer whose appointment has not been formally made or notified.
• Nobody checking the mailbox where FIU queries are sent.

Registration is the start, not the finish

Being registered does not, on its own, satisfy your AML obligations. What matters is being able to recognise a suspicion and report it properly. Before you need goAML in earnest, make sure:

• Staff know how to escalate a concern internally, and to whom.
• The compliance officer or MLRO reviews each escalation and records the decision and reasons, including decisions not to report.
• Supporting information, such as customer due diligence, transaction records and the analysis behind the suspicion, is kept and easy to retrieve.
• Everyone understands that the customer must not be told a report is being considered or has been made.

Other report types

Besides suspicious transaction and activity reports, some sectors file other report types through goAML, for example reports for real estate activity or certain cash transactions in precious metals and stones, and sanctions name match reports. Our goAML reporting guide explains each report type, when to file and what a good report contains.

Before your first report

Do a dry run. Ask the compliance officer to walk through a mock case: what triggered the concern, what was checked, what the decision was and what would go into the report. It shows quickly whether the right information is being captured at the front line and whether anyone else could file if needed.

Keep access working

Review user accounts when people join or leave, keep the compliance officer's details up to date, and make sure more than one person knows how to file if the main user is unavailable. Hold credentials securely: shared logins and passwords kept on paper are a common finding in reviews.

Our illustrated explainer from suspicion to goAML report walks through the whole reporting journey, and our goAML reporting guide covers choosing and writing reports. If you would like help with registration or reporting, see our goAML registration and reporting service.