There is no single statutory clock for AML compliance registration in the UAE: the goAML portal registration with the UAE Financial Intelligence Unit can complete within days once your documents are ready, while registration or approval with your supervisory authority — the Ministry of Economy for most DNFBPs, or your sectoral or free zone regulator — runs on that authority's own processing times. What the law does fix is the cost of delay: failing to register on the FIU-approved system carries a minimum AED 50,000 administrative penalty.
TL;DR
- AML registration in the UAE is typically two separate registrations: the goAML portal with the FIU (no government fee) and registration with your supervisory authority, whose processing times vary.
- No federal law sets a fixed number of days for either registration — realistic timelines depend on document completeness and the authority, so any figure is a practical estimate, not a statutory deadline.
- Failure to register on the FIU-approved electronic system carries a minimum AED 50,000 administrative penalty (Cabinet Resolution No. 71 of 2024), and supervisory authorities can impose penalties from AED 10,000 up to AED 5,000,000 under Federal Decree-Law No. 10 of 2025.
- The decisive factor is the document pack — trade licence, ownership and UBO evidence, MLRO appointment and compliance policies — not the portal form itself.
The two registrations, separated
"AML registration" conflates two different processes, and knowing which one you face changes the timeline:
- goAML registration (FIU portal). DNFBPs and other reporting entities must register on the goAML portal to file suspicious transaction reports and threshold declarations. The FIU charges no fee for the account, and the portal step itself is quick once the required documents are uploaded in the accepted format.
- Supervisory registration / approval. Each reporting entity answers to a supervisory authority — the Ministry of Economy supervises most DNFBPs (dealers in precious metals and stones, real estate brokers, auditors and accountants, corporate service providers), while free zone entities often register with the free zone's compliance function and regulated sectors with their own regulator (the CBUAE for financial institutions, insurance authorities for brokers). Processing times are authority-specific and are not fixed in federal law.
The AML obligations for free zone companies and the accounting firm AML guide cover how obligations differ by entity type.
What actually takes the time: the document pack
| Stage | Practical estimate | What gates it |
|---|---|---|
| 1. Classify the obligation | Days | Confirming whether your activity makes you a DNFBP or reporting entity, and which authority supervises you |
| 2. Build the document pack | 1–3 weeks | Trade licence, ownership/UBO evidence, authorised signatory ID, MLRO appointment, risk assessment and AML/CFT policies |
| 3. goAML portal registration | Days, if documents are complete | Correct entity type selection, document format, rejection cycles on incomplete uploads |
| 4. Supervisory registration | Authority-specific | The supervisor's own queue and any additional approvals (e.g. compliance officer clearance) |
| 5. Operational readiness | Ongoing | CDD records, staff training, and reporting workflows actually functioning |
Estimates are practical observations from UAE compliance practice, checked September 2026 — not statutory timelines. The single biggest cause of delay is submitting an incomplete pack and absorbing rejection cycles.
The legal frame and the cost of delay
- Registration duty. Reporting entities must register on the electronic system approved by the FIU — goAML. Failure to register is a listed violation carrying a minimum administrative fine of AED 50,000 (Cabinet Resolution No. 71 of 2024, as cited in UAE AML guidance; checked September 2026).
- Supervisory penalties. Federal Decree-Law No. 10 of 2025 enables supervisory authorities to impose administrative penalties ranging from AED 10,000 to AED 5,000,000 per violation depending on seriousness (Federal Decree-Law No. 10 of 2025; UAE AML framework summaries, checked September 2026).
- Enforcement is real. The Ministry of Economy has publicly suspended the operations of DNFBP establishments for failure to register on the goAML system (Ministry of Economy announcements, moec.gov.ae).
- Records. AML/CFT records must generally be retained for at least five years under the AML framework (Cabinet Decision No. 10 of 2019, Executive Regulations, Art. 17; checked September 2026).
How to compress the timeline
- Confirm your category first. A wrong entity-type selection on goAML is the most common rejection; the AML services comparison covers where specialist support pays off.
- Appoint the MLRO before starting. The portal requires a compliance officer with verified details; appointing one mid-application restarts work.
- Prepare policies before the portal. A risk assessment and AML/CFT policy consistent with your licence activity prevents the supervisor stage from reopening.
- Register, then operationalise. Registration removes the penalty exposure; customer due diligence, training and reporting workflow keep you compliant after it.
Registered, not just filed
Finanshels handles AML classification, goAML registration, policies and ongoing reporting for UAE DNFBPs — end to end.
FAQ
How long does goAML registration take in the UAE?
Once the document pack is complete, the portal step typically completes within days. The timeline stretches with incomplete documents or a wrong entity-type selection, so no fixed figure is guaranteed.
Is there a government fee for goAML registration?
No — the FIU does not charge for creating a goAML account. Costs arise only from advisory support or outsourced compliance functions.
What is the penalty for not registering?
A minimum AED 50,000 administrative fine for failure to register on the FIU-approved system (Cabinet Resolution No. 71 of 2024), and supervisory penalties from AED 10,000 to AED 5,000,000 under Federal Decree-Law No. 10 of 2025.
Do all UAE companies need AML registration?
No. Only reporting entities — DNFBPs such as dealers in precious metals, real estate brokers, auditors and corporate service providers, plus regulated financial businesses — must register. Ordinary trading or services companies outside those categories do not.
Does registration alone make us compliant?
No. Registration removes the registration penalty exposure; customer due diligence, a functioning MLRO, staff training and reporting workflows carry the ongoing obligations.
