If your UAE business is a real estate brokerage, a gold or precious stones dealer, an accounting or auditing firm, or a corporate service provider, there’s a compliance obligation that has nothing to do with your trade licence, your VAT registration, or your corporate tax filing — and the Ministry of Economy has fined companies more than AED 130 million for missing it since 2022.
What a DNFBP actually is
DNFBP stands for Designated Non-Financial Business or Profession — the UAE’s term for non-financial sectors treated as higher-risk for money laundering because of the cash volumes or asset values that pass through them. Under Cabinet Resolution 134 of 2025, five categories are designated: commercial gaming operators, real estate brokers and agents, dealers in precious metals and stones, certain legal and accounting professionals doing listed transactional work, and company or trust service providers.
If you’re a real estate agent concluding a property sale, a gold or diamond dealer handling a single cash transaction of AED 55,000 or more, an accountant or tax agent performing specific transactional services, or a corporate service provider forming and administering companies for clients, you’re almost certainly caught by this — regardless of whether you’re set up in a mainland licence or a commercial free zone. A free zone real estate brokerage carries exactly the same goAML obligation as a mainland one.
What compliance actually requires
Registration on goAML — the UAE Financial Intelligence Unit’s reporting platform — is the entry point, but it isn’t the whole obligation. A functioning AML programme means: appointing a Money Laundering Reporting Officer (MLRO), putting a documented AML/CFT policy in place, carrying out customer due diligence and sanctions screening on your clients, applying enhanced due diligence for higher-risk clients, and filing Suspicious Transaction Reports through goAML when something warrants it. Regulators inspecting DNFBPs in 2026 spend most of their time checking whether this underlying programme actually functions — not just whether the goAML account exists.
How registration actually works
The process runs across three government systems in sequence: Ministry of Economy approval first (through its SACM portal for DNFBPs), then EmaraTax, and finally the goAML portal itself at goaml.uaefiu.gov.ae. Skipping straight to goAML without the preceding Ministry of Economy approval is a common reason registrations stall or get rejected.
What it costs to skip this
The fine structure is genuinely steep and scales with the severity of the gap. Failing to register on goAML at all starts at a minimum administrative fine of AED 50,000 — and that’s the floor, not the ceiling, since the broader penalty range under the current framework runs from AED 10,000 up to AED 5,000,000 per violation depending on what’s missing. Conducting DNFBP activity with no registration whatsoever carries its own separate, higher penalty band, reported as starting around AED 200,000. Beyond registration itself, missing pieces of the wider programme carry their own fines: failing to implement an AML policy, failing to appoint an MLRO, and failing to file a required Suspicious Transaction Report have each drawn six-figure penalties on their own in Ministry of Economy enforcement actions.
The scale of enforcement is real, not theoretical — in just the first half of 2025, Ministry of Economy AML inspections resulted in fines exceeding AED 42 million, concentrated heavily on precious-metals traders and real estate brokerages. A small independent brokerage or a single-owner gold dealer faces the same AED 50,000 minimum fine as a large firm — there’s no size-based leniency built into the framework.
What to actually check
If your business falls into real estate brokerage, precious metals and stones, accounting or auditing services, or company formation and administration, don’t assume your trade licence category alone determines whether you’re a DNFBP — the classification runs on the actual activity performed, cash thresholds included, not just how your licence is labeled. Confirm your goAML registration status directly rather than assuming a colleague or predecessor handled it, since registration doesn’t transfer automatically with a change of ownership or management. And if you are registered, check that the parts beyond the account itself — the MLRO appointment, the written AML policy, the due diligence process — are actually documented and current, since that’s where the recent enforcement activity has concentrated, not on registration status alone.
