goAML

A jewellery dealer notices a transaction pattern that raises a money-laundering concern; if the dealer is a reporting entity under UAE rules, staff escalate the concern to the responsible compliance function, and the business may then need to file a report with the UAE Financial Intelligence Unit through goAML. goAML is a secure reporting channel, not a public complaints website, and the UAE FIU says reporting entities connect to the platform to submit suspicious transaction reports. The Ministry of Economy and Tourism says registration for designated non-financial businesses and professions, or DNFBPs, is mandatory, and its guidance describes categories and steps, including an initial SACM access stage.

Businesses should check the current regulator guidance for their exact activity rather than assume a neighbouring firm's classification applies. Potentially covered activities include parts of real estate, precious metals and stones, accounting, legal work and company services, and the exact regulatory definition and any thresholds matter.

An ordinary shop selling unrelated goods should not be told it is covered solely because it handles cash. Registration is not the whole compliance programme, because a covered business needs customer due diligence, risk assessment, controls, record keeping and trained staff appropriate to its obligations.

An appointed compliance officer or money laundering reporting officer typically coordinates reporting, and employees need a clear internal escalation route, including what facts to record and whom to contact. Suspicion is not the same as certainty, so a reporting entity should assess available facts and follow legal and regulator guidance on when and how to report, since delay while seeking impossible proof can defeat the purpose of a suspicious report.

The FIU's reporting process distinguishes report types, as a suspicious transaction report and suspicious activity report may reflect different underlying circumstances, and other report categories can apply to specific sectors or transactions, so choose the form directed by current official guidance. A useful internal timeline measure is reports submitted within the applicable deadline divided by all reports due in that period, so nine of ten equals 90%.

Deadlines can vary with the type of reporting duty and current rules, so do not copy a timer from another jurisdiction or from an old training slide, and the compliance officer should verify the relevant rule and retain evidence of the filing. The report should be complete enough to support analysis, identifying the parties, transactions, reasons for concern and supporting information requested by the system.

Confidentiality is important, as staff should not tell a customer that a suspicious report has been or will be made if the law prohibits disclosure, and training should explain what staff can say while ordinary service questions are handled. A business with several branches must know which legal entity is registered and which people have access, since shared passwords and a departed employee's active account pose operational risks, and the official access-management process should be followed when authorised staff change.

A rejected or incomplete submission needs follow-up, so do not assume that clicking 'submit' once means the report was accepted. A firm may use an adviser, but responsibility does not disappear when drafting help is outsourced, so the business should understand its own suspicion and review any filing made on its behalf under the applicable process, with sensitive customer information kept only in permitted secure channels.

Regulators can update classifications, guides and portals, so the Ministry's page and the FIU's instructions are better references for a current workflow than a dated blog, and owners should assign someone to check for changes and maintain access before an urgent case arises; for a covered owner, the practical sequence is to establish whether the activity triggers duties, register correctly, train staff, assess and escalate concerns, and file securely when required, because goAML is the route for reporting, not a substitute for judgment or the wider anti-money-laundering framework.