Am I a DNFBP? UAE AML & goAML Compliance Explained (2026)

Many UAE businesses have anti-money-laundering (AML) obligations without realising it – and the penalties for getting it wrong run from AED 50,000 into the millions. If you are what the regulations call a DNFBP, you must register on the UAE’s reporting systems and maintain an AML framework. This guide gives you a fast self-check and a clear list of what compliance actually requires.

Quick self-check: are you a DNFBP?

A Designated Non-Financial Business or Profession (DNFBP) is a non-financial business that the UAE treats as higher-risk for money laundering. You are almost certainly a DNFBP if you are any of the following:

• Real estate agents and brokers involved in buying or selling property.
• Dealers in precious metals and precious stones (gold, diamonds, jewellery).
• Auditors and accountants providing professional services.
• Company service providers (corporate service / formation agents).
• Independent legal professionals – lawyers and notaries – for certain transactions.

If you fall into any category above, the AML obligations below apply to you – regardless of your size.

What compliance requires

DNFBP compliance is not a single form – it is a small framework. The core obligations are:

1. Register on goAML – the Financial Intelligence Unit’s platform for suspicious transaction and activity reports, via the Ministry of Economy.
2. Register on the Automatic Reporting System for sanctions list screening.
3. Appoint an MLRO – a designated Money Laundering Reporting Officer responsible for compliance and reporting.
4. Adopt a written AML/CFT policy – covering your risk assessment, customer due diligence, and record-keeping.
5. Perform customer due diligence (CDD) and sanctions screening on clients and, where relevant, beneficial owners.
6. File suspicious transaction reports (STRs/SARs) through goAML whenever you have grounds for suspicion.
7. Keep records for the required retention period and train your staff.

The cost of getting it wrong

AML enforcement in the UAE is active. Penalties for DNFBPs range from AED 50,000 to AED 1,000,000 per violation, and can reach AED 5,000,000 in serious cases – on top of licensing and reputational damage. The most common failings are simple: not registering on goAML, having no MLRO, or having a “policy” that exists on paper but is never applied.

A practical first-90-days plan

• Confirm your status and the specific obligations for your DNFBP category.
• Register on goAML and the sanctions screening system.
• Appoint your MLRO and document the appointment.
• Put a real policy in place – risk assessment, CDD procedures, and reporting workflow your team actually follows.
• Screen your existing clients and set up ongoing monitoring.

How Harrison & Morgan helps

We build audit-ready AML frameworks for UAE DNFBPs through our Regulatory & AML Compliance service – goAML and sanctions registration, MLRO support, a policy that fits how you actually work, CDD and screening processes, and STR filing. We keep it proportionate, so you meet the rules without drowning your team in paperwork.

Not sure if you’re a DNFBP – or whether you’re compliant? Book a free consultation and we’ll run the check with you.

Frequently asked questions

What is a DNFBP in the UAE?

A Designated Non-Financial Business or Profession. It covers real estate agents and brokers, dealers in precious metals and stones, auditors and accountants, company service providers, and independent legal professionals such as lawyers and notaries.

What must a DNFBP do to comply with AML rules?

At a minimum: register on the goAML system, register on the Automatic Reporting System for sanctions, appoint a compliance officer (MLRO), put a documented AML/CFT policy in place, carry out customer due diligence and sanctions screening, and file suspicious transaction reports when required.

What is goAML and who must register?

goAML is the UAE Financial Intelligence Unit’s reporting platform. All DNFBPs must register on goAML to submit suspicious transaction and activity reports. Registration is done through the Ministry of Economy portal.

What are the penalties for AML non-compliance?

Penalties for DNFBPs range from AED 50,000 to AED 1,000,000 per violation, and can reach AED 5,000,000 in severe cases – plus reputational and licensing consequences.

Do I need an MLRO and a written AML policy?

Yes. DNFBPs must appoint a Money Laundering Reporting Officer and maintain a documented AML/CFT policy covering risk assessment, customer due diligence, record-keeping, and reporting.