UAE GoAML Registration: Step-by-Step Guide

If you are looking to navigate the goAML registration process in the United Arab Emirates and your organisation falls under regulated sectors such as financial services, real estate, precious metals, or virtual assets, this blog is a walkthrough to get compliant, avoid delays, and keep the regulators happy.

1. Why register with goAML?

The goAML platform is operated by the UAE Financial Intelligence Unit (UAE FIU) and acts as the mandatory portal for submitting Suspicious Transaction Reports (STRs), Suspicious Activity Reports (SARs), and other required filings under UAE AML/CFT laws.

If you don’t register, your business could face major fines in the UAE. Entities that fail to register, appoint a compliance officer, or submit required reports may be penalised from AED 50,000 up to AED 5 million (or more depending on severity) under frameworks such as Cabinet Decision No. 10 of 2019 and related AML laws. So yes, registering via goAML is not optional if you’re in a regulated category. 

2. Who must register?

You should consider registering if your business falls into any of these categories in the UAE:

• Financial Institutions (banks, insurance, exchange houses)
• Virtual Asset Service Providers (VASPs)
• Designated Non-Financial Businesses & Professions (DNFBPs): real-estate brokers/developers, auditors, accountants, company service providers, dealers in precious metals & stones.
• Organisations newly formed post the initial registration deadlines must still comply and register as soon as their licence is issued.

Even if you missed earlier deadlines (for example, the initial deadline for many organisations was 30 April 2021), you can still register. 

3. Prerequisites – Documents & Technical setup

Keep the following technical setup and documents ready: 

• A valid trade or commercial licence of your entity
• Passport copy, Emirates ID, and residence visa of the authorised person/compliance officer. 
• An authorisation letter appointing an individual to register the entity (if not the licence-holder). 
• Ensure your company uses a proper business email (not free personal domains) because correspondence will be via email and OTPs. 
• Technical instructions: Use Google Chrome as a browser, disable email pop-up blockers, and whitelist FIU emails so emails don’t land in spam.
•  Download the Google Authenticator app; you’ll need the secret key from stage 1 to generate 6-digit codes.

4. Step-by-Step Registration with goAML

Here’s how Oblique Consult recommends you execute the registration smoothly:

Stage 1: SACM Pre-Registration

1. Visit the SACM portal (link typically: services.uaefiu.gov.ae/sacm) and select “Reporting Entity” registration type.
2. Complete the form with accurate details: organisation name (as per licence), trade licence number, supervisory body (e.g., Ministry of Economy), etc.
3. Upload the required documents (merged into a single PDF if required; check size limits – often < 5 MB).
4. After submission, you’ll receive an email with a username and secret key. Use the secret key to set up Google Authenticator; the 6-digit code will act as your password in the goAML portal.

Stage 2: goAML Portal Registration

1. Visit the goAML portal (typically via SACM login link) and sign in with your username and the code from Google Authenticator.
2. Choose “Register as a New Organisation” → Select registration type “Reporting Entity”.
3. Fill in organisational details (address, contact, licence, business activities) and the details of your Compliance Officer (name, Emirates ID/passport, contact details).
4. Upload any additional attachments if prompted (note: some portals allow only one PDF). Then tick the terms and conditions, and submit.
5. Wait for FIU verification and approval. Once approved, you’ll get your unique “Org ID”/Registration Number. You’re now fully registered and can log in. 

5. After Registration – What Comes Next?

Now you’re registered, here’s what Oblique Consult advises you to keep on top of:

• User management: Assign roles (Admin, User) within the goAML portal; you can add new persons/Compliance Officers.
• Update details as changes occur: If your company name, business type, or contact details change, update via “My Org Details” in goAML.
• Reporting obligations: You’ll need to file STRs, SARs, and certain mandatory reports (depending on your sector) via the goAML portal. Ensure you understand your specific obligations.
• Review internal controls & compliance framework: Registration is only step one. Make sure you have AML/CFT policies, training, risk assessments, and transaction monitoring in place. The leading AML guides (2025) emphasise this. 

6. Common Mistakes & Tips for Successful Submission

• Don’t upload expired IDs or licences; it will delay approval.
• Make sure the email you provide is active and checked regularly (including spam folder).
• Merge all documents into one PDF as required and ensure the file size is under system limits.
• Choose the correct registration type (Reporting Entity vs Stakeholder vs Supervisory Body); if incorrect, the application will be rejected.
• After approval, keep all registration credentials secure (username + authenticator codes) and restrict portal access to authorised individuals only.

The Wrap Up

Registering with goAML is an important step for any regulated business in the UAE. The process is straightforward, but mistakes or neglecting follow-up can create risks for your company. By following this guide or hiring professional tax consultants, you can complete your registration correctly, stay up to date with the latest 2025‑26 rules, and keep regulators satisfied.