AML compliance UAE requirements apply to a much wider group of businesses than most owners realise, especially Designated Non-Financial Businesses and Professions (DNFBPs) such as real estate brokers, dealers in precious metals and stones, company service providers, and independent accountants or auditors. If your business falls into one of these categories, registering on the goAML platform and building a proper AML policy is not optional — it is a legal obligation with real financial and reputational consequences for getting it wrong. This guide walks through what UAE businesses actually need to do, step by step, to stay compliant.

Who counts as a DNFBP under UAE AML law?

The UAE's AML framework, overseen by the Ministry of Economy and the Financial Intelligence Unit, identifies specific sectors as higher risk for money laundering and terrorist financing. These are called DNFBPs.

Common DNFBP categories

  • Real estate agents and brokers involved in property sale/purchase transactions
  • Dealers in precious metals and stones above set transaction thresholds
  • Company service providers, including formation agents and corporate service firms
  • Independent legal professionals and accountants when carrying out certain financial transactions for clients
  • Auditors reviewing client accounts and transactions

If you operate in any of these sectors, you are expected to register with the regulator, appoint a compliance officer, and file reports through goAML. Businesses unsure of their classification should seek a review from a qualified auditing and compliance specialist rather than assume the rules don't apply to them.

How do you register on goAML in the UAE?

goAML is the UAE's official platform for filing Suspicious Transaction Reports (STRs), Suspicious Activity Reports (SARs), and other regulatory disclosures to the Financial Intelligence Unit.

Step-by-step registration process

  • Register your entity on the Services Access Control Manager (SACM) portal to confirm your classification
  • Create an organisation profile on the goAML system with accurate license and ownership details
  • Appoint and register a Compliance Officer (MLRO) authorized to file reports on the entity's behalf
  • Complete the required know-your-customer (KYC) declarations and risk assessment templates
  • Maintain login access and ensure the appointed officer receives ongoing regulatory notifications

Many businesses delay this step because it feels administrative, but late or missing registration is one of the most common triggers for fines during regulatory inspections.

What should an AML policy actually include?

A written AML policy is not just a formality — inspectors expect to see it applied in daily operations, not sitting unused in a drawer.

Core elements of a compliant AML policy

  • Customer due diligence (CDD) and enhanced due diligence (EDD) procedures for higher-risk clients
  • Clear criteria for identifying and escalating suspicious transactions
  • Record-keeping rules — typically retaining transaction and client records for a defined period
  • Staff training schedule and evidence of awareness sessions
  • Sanctions list screening procedures, including UN and local designated lists
  • Internal reporting lines to the Compliance Officer and onward to goAML where required

Your policy should also address beneficial ownership verification, since understanding who ultimately owns or controls a client entity is central to effective due diligence. This links closely with Ultimate Beneficial Owner (UBO) compliance, which UAE companies must also maintain accurately.

What are the ongoing DNFBP obligations after registration?

Registering on goAML is only the starting point. Regulators expect continuous, demonstrable compliance activity.

Recurring compliance tasks

  • Conducting periodic business-wide risk assessments
  • Screening new and existing clients against sanctions and politically exposed person (PEP) lists
  • Filing STRs/SARs promptly whenever a suspicious transaction is identified — even if it's a single unusual payment
  • Refreshing staff training annually or when regulations change
  • Retaining audit trails of due diligence decisions and escalations
  • Responding to any regulator requests for information (RFIs) within the stated deadlines

Failure to maintain these ongoing obligations, even after successful initial registration, is a frequent reason businesses face penalties during compliance reviews.

What happens if a business fails to comply?

Non-compliance with AML rules in the UAE can result in administrative fines, suspension of licenses, and in serious cases, referral for further investigation. Regulators have significantly increased inspection activity across DNFBP sectors in recent years, particularly real estate, precious metals, and corporate service providers. Businesses that treat AML compliance as a one-off registration exercise, rather than an ongoing operational discipline, are the ones most likely to be caught out during spot checks.

Getting professional support to structure your AML compliance programme properly from the outset is far less costly than remediating gaps after a regulatory finding.

Frequently Asked Questions

Does every UAE company need to register on goAML?
No. Only entities classified as DNFBPs or regulated financial institutions are required to register. However, businesses should confirm their status rather than assume they're exempt, since classifications can be broader than expected.

Who should be appointed as Compliance Officer?
The Compliance Officer (or MLRO) should be a senior individual with authority to act independently, sufficient understanding of the business's transactions, and direct access to management and the goAML system.

How often should AML risk assessments be updated?
Best practice is at least annually, or immediately after any significant change in business activity, client base, or regulatory guidance.

How Elite Edge can help

Elite Edge Accounting & Bookkeeping, based at Office No. 1810, Tamani Arts Building, Business Bay, Dubai, helps DNFBPs and other regulated businesses across the UAE set up goAML registration, draft practical AML policies, and manage ongoing reporting obligations without disrupting daily operations. Whether you're registering for the first time or need to strengthen an existing compliance programme, our team can guide you through every step. Contact us today to discuss your AML compliance needs.

This article is for general information only and does not constitute professional, legal, or regulatory advice. AML rules and thresholds in the UAE can change, so businesses should confirm current requirements with a qualified advisor or the relevant regulator.