goAML
Definition
UN-developed reporting platform used by the UAE Financial Intelligence Unit. AML-regulated entities must register a goAML account and file suspicious activity reports through it.
Also known as
- UAE Financial Intelligence Unit reporting platform
- goAML portal
- UAE AML reporting system
Attributes
| Developer | United Nations Office on Drugs and Crime |
|---|---|
| Operated by | UAE Financial Intelligence Unit |
| Jurisdiction | United Arab Emirates |
| Mandatory for | AML-regulated entities in UAE |
| Purpose | Suspicious activity report filing |
| Related regime | Federal AML/CFT framework |
What it is
goAML is a UN Office on Drugs and Crime (UNODC)-developed AML reporting platform used by the UAE Financial Intelligence Unit (FIU). All UAE financial institutions and DNFBPs are required to register on goAML and use it to file Suspicious Activity Reports (SARs), Suspicious Transaction Reports (STRs), and Funds Freeze Reports. Registration alone is mandatory regardless of whether suspicious activity ever arises — failing to register is a AED 50,000 fine.
Key characteristics
- Origin
- UN Office on Drugs and Crime (UNODC)
- UAE operator
- UAE Financial Intelligence Unit (FIU)
- Mandatory for
- Financial institutions and DNFBPs
- Filings
- SAR, STR, Funds Freeze Reports
How it works
- Entity determines AML-regulated status under UAE law. 2. Compliance officer completes goAML registration via the UAE FIU portal. 3. Entity receives credentials and activates the goAML account. 4. Compliance officer monitors transactions for suspicious activity. 5. Upon detection, entity files suspicious transaction report (STR) through goAML within specified timeframe. 6. Entity maintains records and responds to FIU follow-up requests. 7. Annual renewal and account maintenance ensure continued compliance.
Why it matters
goAML registration is the single most-checked AML compliance item in UAE inspections. Missing it is an automatic AED 50,000 fine before any other obligation is even reviewed.
Common misconceptions
Misconception
Only banks and large financial institutions need to register on goAML.
Reality
DNFBPs—including real estate brokers, precious metal dealers, lawyers, auditors, and corporate service providers—are explicitly required to register and report.
Misconception
goAML registration is a one-time setup with no ongoing obligations.
Reality
Entities must maintain active accounts, keep credentials current, and file reports as triggered by suspicious activity throughout their operations.
Misconception
Filing an STR through goAML automatically means the entity accuses its customer of a crime.
Reality
An STR is a regulatory filing based on suspicion, not proof; it enables the FIU to assess and investigate without prejudging guilt.
FAQs
- Do I have to file reports if my business has no suspicious activity?
- Registration is always mandatory for FIs and DNFBPs. Filing is triggered by specific events — actual suspicious activity, threshold-breaching transactions, sanctions matches. If nothing triggers, no filing is required, but the registered account must remain active and accessible.
