UAE compliance guide
goAML reporting in the UAE
What goAML is, who must register, which reports are filed through it, and how case evidence supports a suspicious transaction report.
Short answer
goAML is the reporting platform used by the UAE Financial Intelligence Unit. Regulated entities register on it and use it to file suspicious transaction and activity reports and other required reports. Each report should be backed by the case evidence that led to the suspicion.
Last reviewed by the ITSEC compliance team. General information, not legal advice.
Who must register on goAML?
Financial institutions, VASPs and DNFBPs covered by UAE AML/CFT rules. Check the UAE FIU's guidance for the current registration requirements.
What makes a good suspicious transaction report?
A clear narrative, the customer and transaction details, and the evidence that formed the suspicion, taken from the case record rather than rebuilt later.
Frequently asked questions
- What is the difference between an STR and a SAR?
- An STR reports a suspicious transaction. A SAR reports suspicious activity that may not involve a single transaction.
- Can the customer be told a report was filed?
- No. Tipping off a customer about a report is prohibited under UAE AML law.
Official sources
Related on VerifiX
See VerifiX on your own onboarding flow
A 30-minute walkthrough with a compliance engineer, or a request for sandbox access.

