Skip to content
VerifiX, secured by ITSEC

UAE compliance guide

goAML reporting in the UAE

What goAML is, who must register, which reports are filed through it, and how case evidence supports a suspicious transaction report.

Short answer

goAML is the reporting platform used by the UAE Financial Intelligence Unit. Regulated entities register on it and use it to file suspicious transaction and activity reports and other required reports. Each report should be backed by the case evidence that led to the suspicion.

Last reviewed by the ITSEC compliance team. General information, not legal advice.

Who must register on goAML?

Financial institutions, VASPs and DNFBPs covered by UAE AML/CFT rules. Check the UAE FIU's guidance for the current registration requirements.

What makes a good suspicious transaction report?

A clear narrative, the customer and transaction details, and the evidence that formed the suspicion, taken from the case record rather than rebuilt later.

Frequently asked questions

What is the difference between an STR and a SAR?
An STR reports a suspicious transaction. A SAR reports suspicious activity that may not involve a single transaction.
Can the customer be told a report was filed?
No. Tipping off a customer about a report is prohibited under UAE AML law.

See VerifiX on your own onboarding flow

A 30-minute walkthrough with a compliance engineer, or a request for sandbox access.