If you’re doing business in the UAE, especially in sectors like real estate, accounting, company formation, or dealing in precious metals, chances are you’ve heard of goAML. It’s not just another compliance checkbox: registering on goAML is now a non-negotiable duty for many regulated entities. In this guide, we’ll walk you through the process, the deadline, common pitfalls, and expert tips to help you register smoothly.
Why goAML Matters?
In short, goAML helps the UAE monitor and analyze money laundering or financing of terrorism risks. If your business falls under the Designated Non-Financial Businesses and Professions (DNFBPs), or if you’re a financial institution, you’re required to register and report via goAML.
Some examples of DNFBPs include:
- Real estate agents and brokers
- Auditing and accounting firms
- Dealers in precious metals and stones
- Trust & corporate service providers
The goAML Registration Deadline: What You Need to Know
According to the Ministry of Economy (MOE), the original deadline for goAML registration was April 30, 2021.
However, it is important to note that registrations are still being accepted by the MOE. So even if you missed that “official” cutoff, you shouldn’t assume it’s too late to comply.
That said, non-compliance isn’t something to take lightly: fines for failing to register or report through goAML can range from AED 50,000 up to AED 1,000,000.
How to Register: A Step-by-Step Process
Let’s break down the registration process in an accessible, conversational way, so you know exactly what to expect.
-
-
Pre-Registration on SACM
- Go to the UAE FIU SACM portal (Services Access Control Manager).
- On the registration form, select “Reporting Entity” and “Ministry of Economy” (as your supervisory body).
- Fill in your entity name (as per your trade license), license number, plus your compliance officer or MLRO’s details (name, contact, ID).
- Upload required documents: scanned copy of your trade license, authorization letter (appointing your MLRO/CO), and the MLRO’s Emirates ID or passport.
- Agree to the terms and submit.
-
- Set Up Google Authenticator
-
-
- After you submit your pre-registration, you will receive a secret key via email. Use this to set up Google Authenticator on your phone.
- This app generates a time-based passcode (6 digits) that changes every minute. You’ll use that as your goAML portal password.
-
- Complete the Entity Registration
-
- Log in to goAML via the SACM portal. Navigate to Systems → goAML → Live / Production.
- Select “Register a New Organization.”
- Fill out all mandatory fields carefully. Make sure your details match exactly what you entered in pre-registration.
- Upload your supporting documents in a single PDF (max 5MB).
- Submit and wait for confirmation; you’ll get a reference number via email.
-
Finalize Registration
- After submitting, your SACM registration is validated, and you’ll be granted access via goAML with an Organization ID (Org ID).
- This Org ID is critical; future users in your organization will use it when registering themselves on goAML.
- Once logged in, designate your main user (usually the MLRO or Compliance Officer). They become the “admin” for your goAML account.
Common Pitfalls & Expert Tips
Now, let’s get real, the registration process isn’t just about filling forms. Here are some expert-backed tips to make your life easier:
- Use the right tools: Use Google Chrome and disable pop-up blockers when registering, which prevents technical issues.
- Be meticulous with email: Make sure you whitelist and so you don’t miss critical emails.
- Accurate info matters: Mismatch between pre-registration and registration (e.g., spelling of company name, license number) can lead to rejections.
- Prepare your docs: Scan and combine your license, MLRO ID, and authorization letter into a single PDF ≤ 5 MB.
- Register backup users: Don’t rely on just one person. Once your Org ID is active, register a second user under the same organization, just in case.
- Stay compliant: Log in to goAML even if you don’t have anything to report. It helps build familiarity, and regulators expect active users.
What Happens After Registration
Once you’re registered:
- You can submit STRs and SARs through goAML, feeding directly into the FIU’s system for analysis.
- You’ll have a user hierarchy: the MLRO or Compliance Officer can approve additional users (e.g., other staff) under your Org ID.
- If your MLRO changes, the process requires formal steps: new MLRO registers on SACM, gets approved, then registers as a “Person” under the same Org ID.
The Cost of Non-Compliance
Missing goAML registration or failing to report? That’s risky business. Here’s what could go wrong:
- Heavy fines: As mentioned, non-compliance can lead to fines from AED 50,000 up to AED 1 million.
- License risk: For DNFBPs, failure to register could jeopardize your business licence or lead to enforcement actions.
- Reputational damage: Regulators track compliance, and being on the wrong side of AML obligations can seriously hurt trust with clients, partners, and regulators.
The Bottom Line
In the UAE, goAML registration is not just a formality; it’s a vital piece of your compliance infrastructure. Whether you’re a real estate broker, a legal adviser, or a financial firm, this should be a priority. The technical process may seem a bit involved, but with proper preparation, you can get through it smoothly.
