A UAE Tax Expert’s Guide to AML Compliance:
Why It’s More Than Just a Box to Tick!

As the UAE solidifies its position as a global financial hub, the fight against financial crime has become a top priority. Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) rules are not just bureaucratic hurdles; they are a critical part of maintaining the integrity of our economy. For businesses, big or small, understanding these rules and using the right tools—like the GoAML system—is non-negotiable.

What are the UAE’s AML Rules?

The UAE’s AML framework is based on Federal Decree Law No. 20 of 2018 and its Cabinet Decision No. 10 of 2019, among other laws. This legislation is designed to align the UAE with international standards set by the Financial Action Task Force (FATF).

In simple terms, these rules require businesses—particularly those in high-risk sectors—to be vigilant against financial crime. They apply not only to banks and financial institutions but also to “Designated Non-Financial Businesses and Professions” (DNFBPs). This includes:

  • Real estate agents and brokers
  • Dealers in precious metals and stones
  • Auditors, accountants, and consultants
  • Company and trust service providers

So, what does compliance look like for these businesses? It boils down to a few key principles:

  1. Risk Assessment: You must understand your business’s specific risks related to money laundering and terrorist financing.
  2. Due Diligence: Get to know your customers. This means verifying their identity (Know Your Customer or KYC), understanding the nature of their business, and, for high-risk customers, performing enhanced due diligence to verify the source of their funds and wealth.
  3. Appoint a Compliance Officer: Your business must have a designated person responsible for overseeing all AML/CFT compliance efforts.
  4. Implement Policies and Procedures: You must have a clear, written AML policy, with internal controls and procedures in place to detect and report suspicious activity.
  5. Employee Training: All relevant staff must be trained to recognize and report suspicious activities.
  6. Record Keeping: All transaction records and customer information must be maintained for at least five years.
  7. Reporting: This is where the GoAML system comes in. You must report any suspicious activity or transaction to the UAE Financial Intelligence Unit (FIU) immediately.

What is the GoAML System and Why Is It So Important?

The GoAML system is an online portal developed by the United Nations Office on Drugs and Crime (UNODC) and used by the UAE FIU. It is the official and mandatory platform for businesses to report financial crime.

Think of GoAML as the central nervous system for the UAE’s AML efforts. Its purpose is to:

  • Standardize Reporting: It provides a secure, streamlined way to submit reports like Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs).
  • Facilitate Analysis: The FIU uses the data submitted through GoAML to analyze patterns, identify new threats, and generate intelligence that helps law enforcement.
  • Improve Communication: It’s a secure communication channel for the FIU to provide feedback and updates to reporting entities.


How to Get on Board with GoAML

Registration on the GoAML system is not optional for most businesses falling under the DNFBP category. The process is straightforward but requires attention to detail:

  • Step 1: Pre-Registration (SACM). You begin by registering on the Service Access Control Manager (SACM) system of the UAE FIU. This is where you’ll get a username and a “secret key” for a Google Authenticator app, which provides a rotating password for enhanced security.
  • Step 2: GoAML Portal Registration. Once you have your credentials from the SACM, you can register your organization and your designated Compliance Officer on the main GoAML portal. You will need to provide business details and upload key documents like your trade license, an authorization letter, and a copy of the compliance officer’s passport and Emirates ID.
  • Step 3: Verification and Approval. After you submit your application, it will be reviewed by the relevant supervisory authority. Once approved, you will receive an email confirmation.


Don’t Fall Behind: The Consequences of Non-Compliance

The UAE government takes AML/CFT compliance very seriously. Failure to register on the GoAML system or to report suspicious activities can result in severe penalties, including:

  • Significant administrative fines, which can run into the millions of dirhams.
  • Legal action, including imprisonment for individuals involved in non-compliance.
  • Damage to your reputation, which can be a death sentence for any business.

In short, GoAML is not just another government portal. It’s a critical tool in the UAE’s strategy to maintain a secure and transparent financial system. By understanding your AML obligations and using the GoAML system correctly, you protect your business, contribute to the nation’s economic security, and avoid the costly consequences of non-compliance.