Telephone Numbers
Telephone Numbers
For detailed information +90 542 381 3868'Call.
Table of Contents
The United Arab Emirates is one of the fastest-growing hubs for international trade and investment. This growth has been matched by stricter financial transparency and Anti-Money Laundering (AML) requirements. Companies operating in specific sectors across Dubai and all other emirates are legally required to complete an official AML application and goAML registration. This guide explains how the DNFBP scope is determined, the goAML registration steps, current reporting thresholds and the penalties for non-compliance, based on the regulations in force as of July 2026.
DNFBP (Designated Non-Financial Businesses and Professions) refers to non-bank businesses and professions that are subject to AML regulations because they carry money-laundering and terrorist-financing risk. In the UAE, four principal DNFBP categories are supervised by the Ministry of Economy & Tourism (MoET). If the activities on your trade licence fall into one of these groups, a registration obligation may arise even if you are not actively conducting that business.
Scope is determined by the activity codes on your licence. An incorrect self-assessment can lead either to unnecessary registration costs or, conversely, to administrative penalties. The table below summarises the four main categories and their key obligations.
| DNFBP Category | Example Activities | Key Obligation |
|---|---|---|
| Real estate brokers & agents | Property sale-purchase, brokerage, project marketing | Report cash transactions of AED 55,000+ (REAR) |
| Precious metals & stones dealers | Trade in gold, diamonds, precious stones | DPMSR report on cash of AED 55,000+ |
| Accounting & audit firms | Independent accounting, audit, financial advisory | Client risk rating & internal controls |
| Corporate service providers | Company formation, trusts, corporate management | Ultimate Beneficial Owner (UBO) identification |
If you are unsure, you can contact us for a free preliminary review of your licence.
Because of high-value transactions and international client portfolios, real estate is among the most heavily supervised sectors in the UAE. An AML application for real estate companies is not limited to goAML registration; it also includes ongoing obligations such as Know Your Customer (KYC), transaction monitoring, source-of-funds verification and retaining records for at least five years.
Under the official regulations, property sale-purchase transactions involving cash payments of AED 55,000 or more—whether in a single payment or in linked payments—as well as payments made with virtual assets, must be reported to the Financial Intelligence Unit through a Real Estate Activity Report (REAR). This threshold is assessed in aggregate rather than per payment; splitting a payment to stay under the threshold is itself treated as a risk indicator.
The most common mistake in practice is registering on the system without building an internal compliance programme. During inspections, authorities examine not only the registration but also the written AML policy, the appointed compliance officer, staff training records and the enterprise risk assessment.
Companies trading in gold, diamonds and other precious metals and stones fall within a high-risk DNFBP group where transaction traceability is mandatory. These businesses are also subject to reporting for cash transactions of AED 55,000 or more. Their cash intensity and international supply chains place the sector under particular regulatory scrutiny.
Accordingly, these companies must implement customer identity verification, transaction record-keeping, Suspicious Transaction Reporting (STR) and written AML policies. For precious-metals dealers operating in free zones such as DMCC, you can find further guidance on licensing and compliance in our Dubai gold trading guide.
Firms providing accounting, financial advisory and audit services carry significant responsibility under AML regulations because they directly influence their clients' financial transactions. For these firms, AML registration and the establishment of a compliance programme are legal requirements.
The process involves client risk classification, transaction analysis, internal control mechanisms and the appointment of a compliance officer. Regular staff training and internal audits are equally decisive for the sustainability of compliance.
Corporate Service Providers that form, structure and manage companies on behalf of clients are directly subject to AML regulations. These companies must identify their clients' Ultimate Beneficial Owners (UBO) and apply detailed compliance procedures. Incomplete document checks or flawed client-acceptance processes can lead to serious administrative sanctions and licensing risks.
goAML is the official suspicious-transaction reporting and AML reporting platform used by the UAE Financial Intelligence Unit (FIU). The vast majority of companies within the DNFBP scope must register on goAML and submit their reports through this platform. Companies use the system to file Suspicious Transaction Reports (STR), Suspicious Activity Reports (SAR) and sector-specific reports to the relevant authorities. Without goAML registration, it is not possible to fully meet AML obligations.
goAML registration is completed through a two-stage system and, when the correct document set is used, usually takes a few business days. The table below summarises the process:
| Step | Action | Note |
|---|---|---|
| 1 | Pre-registration (SACM portal) | Secure access with company & authorised-person details |
| 2 | Document upload | Trade licence, passport, Emirates ID, authorisation letter |
| 3 | goAML entity registration | "Reporting entity" record & selecting the supervisor |
| 4 | Compliance officer appointment | An AML Compliance Officer (MLRO) is designated |
| 5 | Compliance framework | Written policy, KYC procedures, risk assessment |
| 6 | Ongoing reporting | STR/SAR filings throughout operations |
Field errors on the application screens and missing authorisation documents are the most common reasons for rejected registrations. A pre-submission document check is recommended to complete the process in one attempt.
In the UAE, breaching AML obligations can result in sanctions ranging from administrative fines to activity restrictions and licence revocation. Penalties vary with the nature of the breach. The table below summarises current penalty ranges for common violations:
| Type of Violation | Administrative Fine Range |
|---|---|
| Failure to register on goAML / FIU system | AED 50,000 – 200,000 |
| General AML/UBO obligation breaches | AED 50,000 – 1,000,000 |
| Serious and repeated violations | Up to AED 5,000,000 |
As important as the fine amounts is another risk: violations recorded in an audit history make banking relationships and licence renewals more difficult. Indeed, the Ministry of Economy & Tourism imposed a total of AED 22.6 million in administrative fines on 29 DNFBP companies in July 2026, demonstrating that inspections are enforced actively and intensively.
goAML registration is the beginning of the compliance journey, not the end. Once registration is complete, the company is expected to maintain the following obligations throughout its operations. Neglecting them creates penalty risk during inspections even if registration has been completed.
| Obligation | Frequency / Scope |
|---|---|
| Customer due diligence (KYC / CDD) | For every new client and high-risk transaction |
| Enterprise risk assessment | Annual update recommended |
| Staff AML training | Regular and documented |
| Record retention | At least 5 years |
| Suspicious transaction reporting (STR/SAR) | Immediately upon detection |
The competence of the compliance officer (MLRO), the currency of the internal policy and reporting discipline are the areas most frequently questioned during inspections. The compliance framework should therefore be designed as a functioning process, not a static set of documents.
Our field experience shows that companies repeat certain mistakes during the AML process. Knowing these in advance significantly reduces both the risk of rejection and penalty exposure in later inspections. The most common mistakes are: assessing scope by assumption rather than by the licence activity code; registering on the system without building the internal framework such as a written policy and compliance-officer appointment; drafting the authorisation letter incompletely or incorrectly; interpreting the cash threshold per transaction instead of in aggregate; and failing to keep records consistently throughout the five-year retention period.
All of these risks can be managed with an accurate scope analysis before submission and an end-to-end compliance programme.
We recently advised a real estate brokerage that, despite working with another firm at incorporation, had not been informed that goAML registration was mandatory. The company became aware of this obligation only when its bank requested the goAML registration number during account opening.
Our initial review confirmed the company fell within the DNFBP scope. By preparing the required documents and completing the compliance checks, we finalised the goAML registration within roughly two business days. The registration details requested by the bank were provided on time, and potential administrative sanctions were avoided. This case highlights how critical it is to analyse activity scope correctly at the incorporation stage.
Across Dubai and the UAE, the AML application is a holistic process covering regulatory analysis, DNFBP scope assessment, goAML registration, risk-assessment documentation, KYC procedures and the preparation of internal compliance policies. Because obligations vary by sector, it is essential to build a compliance strategy tailored to your activity rather than a standard method. Through AML consultancy delivered in integration with our Dubai tax advisory service, official applications are prepared completely and administrative sanction risks are minimised.
Disclaimer: The rates, thresholds and penalty amounts on this page were prepared according to the official regulations in force as of July 2026. These figures and rates may change over time. Before making final decisions, we recommend verifying the most current information from the official websites of the relevant authorities (Ministry of Economy & Tourism, Central Bank, UAE Legislation).
DNFBP (Designated Non-Financial Businesses and Professions) refers to “certain non-financial businesses and professions” that, although not banks, are subject to AML regulations because they pose a money laundering risk. In the UAE, this scope includes four main groups: real estate agents and brokers; traders in precious metals and stones such as gold and diamonds; independent accounting and auditing firms; and company formation and corporate service providers.
If your business activity falls under one of these groups as listed on your trade license, you may be subject to registration requirements even if you are not actually conducting that business. Scope determination is based on license activity codes; an incorrect self-assessment can lead to both unnecessary registration costs and, conversely, administrative penalties. If you are unsure, please contact us for a free preliminary review of your license.
No. The registration requirement applies to sectors covered by the DNFBP (real estate, trade in precious metals and stones, accounting and auditing, and corporate service providers) as well as financial institutions. The scope is determined based on the activity codes listed on the business license.
If all documents are complete, pre-registration and institutional registration are typically completed within a few business days. A missing authorization letter or incorrect information are the most common reasons for delays in the process.
The basic set of documents consists of a valid business license, copies of the authorized person’s passport and Emirates ID, a letter of authorization issued by the company’s signatory, and the company’s contact information. Additional documents may be required depending on the industry.
Yes. Companies engaged in DNFBP activities are subject to AML obligations regardless of whether they operate on the mainland or in a free zone; only the applicable regulatory authority may differ.
Yes. Registration is the first step; a written AML policy, the appointment of a compliance officer, know-your-customer (KYC) procedures, staff training, record retention, and the reporting of suspicious transactions are ongoing obligations.
+90 542 381 3868
+971 58 5204103