AML Registration UAE
If your business carries out an activity regulated under UAE Anti-Money Laundering law, registration is not a paperwork formality — it is a legal obligation enforced by the Ministry of Economy & Tourism (MOET), the UAE Financial Intelligence Unit (FIU), and your bank.
Many businesses assume a trade licence is enough. It isn’t. If your licensed activity falls under a Financial Institution (FI), Designated Non-Financial Business or Profession (DNFBP), or Virtual Asset Service Provider (VASP) category, you are legally required to:
- Register on the SACM (Self-Assessment Compliance Management) platform
- Gain access to the goAML portal operated by the UAE FIU
- Appoint a Money Laundering Reporting Officer (MLRO)
- Implement AML policies, risk assessments, and customer due diligence procedures
Failing to register doesn’t just risk a fine — under Cabinet Decision No. 16 of 2021, penalties start at AED 50,000, and UAE banks increasingly freeze the accounts of unregistered DNFBPs before any regulator even issues a notice.
At AEY Auditing, we manage the entire process — SACM, EmaraTax, goAML, MLRO appointment, policy drafting, and ongoing compliance — for businesses across Dubai and the wider UAE.
Quick Overview
What Is AML Registration in the UAE?
AML registration is the process by which a regulated business gains legal access to the goAML platform — the reporting system built by the UN Office on Drugs and Crime (UNODC) and operated in the UAE by the Financial Intelligence Unit. The UAE was the first Gulf country to adopt it. Registration allows a business to:
- File Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs)
- File Dealer in Precious Metals and Stones Reports (DPMSR), Real Estate Activity Reports (REAR), Partial Name Match Reports (PNMR), and Funds Freeze Reports (FFR) where applicable
- Comply with Customer Due Diligence (CDD) obligations
- Maintain the AML records regulators expect during inspection
Registration is the starting point, not the finish line. A business that registers on goAML but never implements policies, risk assessments, or staff training is still non-compliant.
Who Needs AML Registration?
UAE AML law does not apply to every company — it applies to three specific categories of regulated entity.
Banks, insurance companies and brokers, exchange houses, money service businesses, investment and financial advisory firms.
Real estate brokers and agents, accounting and audit firms, corporate service providers, dealers in precious metals and stones, trust and company service providers (TCSPs), and lawyers carrying out regulated activities.
Crypto exchanges, digital asset custodians, and other businesses dealing in virtual assets.
⚠️
The obligation is triggered by your licensed activity, not your transaction volume. A DNFBP with zero suspicious-activity filings for the year is still required to be registered — an unregistered DNFBP is non-compliant even with a clean transaction history.
Businesses Generally Outside Scope
This is the step most guides oversimplify. Registration is not a single sign-up on goAML — it runs across up to three UAE government systems, depending on your business type.
If your licensed activities change, your AML obligations can change with them. When in doubt, confirm your status against your trade licence activity codes rather than assuming.
Yusuf Fakhree
Experienced Chartered Accountant and Audit Specialist with a proven track record in delivering high-quality audit, assurance, and compliance solutions
Follow us on
Recent Post
DMCC Approved Auditors List – Updated 2026
Tax Residency Certificate UAE | TRC Application & Requirements
UAE Bank Account Without Emirates ID | Eligibility & Requirements
Corporate Tax Registration: Revenue Below AED 3M
Our Services
How AML Registration Actually Works
Our audit engagements are performed in accordance with internationally recognised accounting and auditing standards together with applicable UAE laws and regulatory requirements.
SACM (Self-Assessment Compliance Management)
DNFBPs first register on the Ministry of Economy & Tourism’s SACM platform. SACM captures your sector, ownership structure, licensed activities, and a self-rated AML risk profile. MOET then issues a certificate that the goAML system requires before it will grant access.
EmaraTax (Where Applicable)
Certain regulated entities must cross-reference their Corporate Tax Registration Number (TRN) as part of the compliance verification chain.
goAML Portal Access
Once SACM pre-registration is complete, you download the Google Authenticator app, receive a secret key by email, and use the resulting time-based passcode to log in to the goAML portal itself. From here, the business can file STRs, SARs, and other regulatory reports whenever required.
Skipping SACM and going straight to “goAML registration” — as many businesses assume is possible — is the single most common cause of registration delays.
The Legal Basis for AML Registration in the UAE
AML registration in the UAE is not a discretionary compliance exercise — it is a direct statutory obligation under:
- Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism
- Cabinet Decision No. 10 of 2019, Article 20(2), which requires regulated entities to have procedures in place to report suspicious transactions
- Cabinet Decision No. 16 of 2021, which sets administrative penalties for AML/CFT violations, starting at AED 50,000
The Ministry of Economy & Tourism supervises AML compliance for all mainland registrars and commercial (non-financial) free zones. Financial Free Zones — specifically the DIFC (regulated by the DFSA) and ADGM (regulated by the FSRA) — are excluded from MOET/SACM supervision and follow their own, separate AML registration regime through their respective regulators.
If your licensed activities change, your AML obligations can change with them. When in doubt, confirm your status against your trade licence activity codes rather than assuming.
What Happens If You Don't Register — Beyond the Fine
Most guidance stops at “you may face administrative fines.” In practice, the more immediate consequence is often commercial, not regulatory.
The banking impact is often faster than the regulatory one. UAE banks carry their own AML obligations under the CBUAE framework and actively screen corporate customers for DNFBP/VASP status. A business operating in a regulated category without goAML registration is frequently treated as a flagged counterparty — banks may freeze existing accounts, block outbound remittances, or decline to open new accounts, well before the Ministry of Economy issues any fine.
For a business with payroll, supplier payments, or trade finance obligations, this is usually the more urgent problem.
Why Enforcement Has Intensified Since 2024
The UAE exited the FATF grey list in February 2024 after completing all 15 required action points. Since then, inspection frequency and enforcement consistency around AML registration and reporting have increased noticeably — regulators are actively verifying that registered entities have genuine, working compliance programmes, not just a completed sign-up.
Documents Required for AML Registration
- Valid trade licence (showing partners/owners list)
- Authorisation letter appointing the applicant/Compliance Officer
- Passport, Emirates ID, and UAE residence visa of the appointed MLRO
- Memorandum of Association (MOA), where applicable
- Company ownership and beneficial ownership details
- Office address information
- Contact details of the Compliance Officer (MLRO)
Additional documents may be requested depending on your regulator, sector, and risk classification.
AML Registration Timeline
AML Registration Across UAE Mainland & Free Zones
We support AML registration and compliance for businesses in Dubai Mainland, DMCC, IFZA, Meydan Free Zone, Dubai South, DAFZA, JAFZA, Dubai Silicon Oasis, Dubai CommerCity, Abu Dhabi Mainland, KEZAD, Masdar City, Sharjah Mainland, SHAMS, SAIF Zone, RAKEZ, Ajman Free Zone and Ajman Mainland, Fujairah Free Zone and Fujairah Creative City, and the UAQ Free Trade Zone.
Note on DIFC and ADGM: these are Financial Free Zones regulated respectively by the DFSA and the FSRA, and sit outside MOET/SACM supervision. If your entity is licensed in DIFC or ADGM, contact us for guidance on the correct DFSA/FSRA AML registration pathway rather than the SACM/goAML process described above.
Final pricing depends on business activity, sector risk classification, and scope of ongoing support required. No hidden charges.
Our AML Registration Services
Our audit engagements are performed in accordance with internationally recognised accounting and auditing standards together with applicable UAE laws and regulatory requirements.
AML Applicability Assessment
reviewing your trade licence, activity codes, and jurisdiction to confirm whether FI, DNFBP, or VASP obligations apply.
SACM & goAML Registration
full pre-registration on SACM, certificate issuance, and goAML portal access setup, including Google Authenticator configuration.
MLRO Appointment Support
eligibility assessment, appointment documentation, and defining internal reporting responsibilities.
Enterprise-Wide Risk Assessment (EWRA)
a risk assessment built around your customer profile, geographic exposure, delivery channels, and transaction patterns.
AML Policy & Procedure Documentation
customised (not templated) policies covering CDD, EDD, sanctions and PEP screening, record retention, and internal reporting.
Customer Due Diligence (CDD) Implementation
identity verification, UBO checks, risk classification, and ongoing monitoring frameworks.
Suspicious Transaction Reporting (STR) Support
internal reporting workflows and goAML filing guidance.
Ongoing Compliance Support
annual reviews, policy updates, staff training, and inspection readiness.
Common AML Registration Mistakes We See
Assuming SACM pre-registration and goAML registration are the same single step
Believing DIFC/ADGM entities follow the standard MOET/SACM process
Registering on goAML without implementing any AML policyAssuming SACM pre-registration and goAML registration are the same single step
Not appointing an MLRO, or appointing one without genuine seniority/board access
Using generic AML policy templates that don't reflect actual business operations
Skipping the Enterprise-Wide Risk Assessment entirely
Assuming low transaction volume exempts a business from registration
Waiting for a regulator notice — or a bank account freeze — before acting
Dubai Corporate Service Provider
Challenge: The client assumed a trade licence alone satisfied compliance and had never completed SACM/goAML registration.
What we did: Confirmed DNFBP status, completed SACM pre-registration and goAML access, supported MLRO appointment, built an Enterprise-Wide Risk Assessment, implemented CDD procedures, and delivered staff AML training.
Outcome: Registration completed within one week; the business became inspection-ready with a documented, working compliance programme rather than a dormant goAML login.
Get Started with us today
Your business is special. Let us calculate your dreams
FAQs Of AML Registration service UAE
What is AML registration in the UAE?
AML registration is the process of gaining access to the goAML platform via SACM pre-registration with the Ministry of Economy & Tourism, enabling regulated businesses to meet reporting obligations under UAE AML law.
Is AML registration the same as goAML registration?
Not exactly. goAML is the reporting portal itself; SACM is the pre-registration step required first for most DNFBPs before goAML access is granted.
Which businesses must register — FIs, DNFBPs, or VASPs?
All three categories are covered under UAE AML law: Financial Institutions, Designated Non-Financial Businesses and Professions, and Virtual Asset Service Providers.
Do DIFC or ADGM companies register the same way?
No. DIFC and ADGM are Financial Free Zones regulated by the DFSA and FSRA respectively, and are excluded from MOET/SACM supervision. They follow a separate AML registration pathway.
What is the penalty for not registering?
Administrative penalties start at AED 50,000 under Cabinet Decision No. 16 of 2021, and non-registration can also trigger bank account freezes independent of any regulatory fine.
How long does AML registration take?
Most registrations complete within 3–10 working days depending on document readiness and whether SACM, EmaraTax, and goAML stages are all required.
Do I need an MLRO?
Yes. Regulated businesses must appoint a Money Laundering Reporting Officer responsible for compliance oversight, suspicious activity review, and regulator liaison.
Can my bank freeze my account if I'm not registered?
Yes. UAE banks screen corporate customers for DNFBP/VASP status under their own CBUAE obligations and may freeze accounts or block remittances for unregistered entities — often before any Ministry of Economy penalty is issued.
How much does AML registration cost?
SACM/goAML registration typically starts from AED 1,500; complete compliance packages including policies, risk assessment, and MLRO support are quoted based on business complexity.
Can AEY Auditing manage the entire process?
Yes — from applicability assessment through SACM and goAML registration, MLRO appointment, EWRA, policy drafting, CDD implementation, and ongoing compliance support.