goAML Registration Services for Gold Dealers in the UAE

Yes, goAML registration is mandatory for gold dealers in the UAE, and no certificate is issued once you complete it. If you trade, refine, or retail gold, jewellery, or other precious metals and stones, you are a Designated Non-Financial Business and Profession (DNFBP) under UAE AML law and must register on the goAML portal, file the DPMSR report type, and submit STRs or SARs when suspicious activity appears. The registration application is approved by your relevant Supervisory Authority, not by the UAE Financial Intelligence Unit directly.

What Gold Dealers Actually Need to Know Before Registering

The practical points that matter most for a gold dealer, especially one operating in the Dubai Gold Souk, DMCC, or a mainland jewellery business, are these. Registration is not a one-time certificate you frame on the wall. You receive an email notification approving your goAML registration, and that email is your evidence of compliance. There is no goAML certificate. The system runs on a User ID plus a Google Authenticator passcode, so two-factor authentication is mandatory, not optional. And the portal retains processed reports for only 5 calendar days and draft reports for 15 calendar days, which means you need to download and store your own records immediately after filing.

Which Supervisory Authority Approves a Gold Dealer’s Application

The goAML system itself does not approve you. Your Supervisory Authority reviews and approves the registration application. For gold dealers, the authority depends on where you are licensed. A mainland gold trading or jewellery business typically falls under the Ministry of Economy or the relevant economic department. A DMCC-licensed precious metals trader falls under DMCC. A dealer in a free zone answers to that free zone authority. The correct sequence is to identify your licensing authority first, because that is the body that will approve or reject your goAML application, and it is also the body that will inspect your AML compliance later.

Step-by-Step Registration for Gold Dealers

The registration process follows a consistent path. First, prepare your trade licence, Emirates ID and passport details for the authorised person, and your registered email address. Second, access the goAML portal and create the organisation profile using the exact legal name on your licence. Third, submit the application to your Supervisory Authority through the portal. Fourth, wait for the approval email. Fifth, set up Google Authenticator on a secure device, because the User ID alone will not get you in. Sixth, log in and familiarise yourself with the New Reports tab, where the DPMSR and STR/SAR forms live.

A common mistake is registering with a personal email that a single employee controls. If that person leaves, you lose access to password resets and approval notifications. Use a controlled company email address and whitelist [email protected] and [email protected], because goAML emails frequently land in spam or junk folders.

Report Types a Gold Dealer May Need to File

The goAML portal lists eight report types, but not all apply to every gold dealer. The one specific to your sector is the Dealers in Precious Metals and Stones Report, or DPMSR. You may also need to file a Suspicious Transaction Report (STR) or Suspicious Activity Report (SAR) when a customer’s behaviour, payment method, or transaction structure raises red flags. The remaining types are situational: Fund Freeze Report (FFR), Partial Name Match Report (PNMR), Real Estate Activity Report (REAR), High Risk Country Transaction Report (HRC), and High Risk Country Activity Report (HRCA). A gold dealer selling bullion to a walk-in customer paying cash in a high-risk currency would trigger an STR, while a dealer with recurring sales to a sanctioned-adjacent jurisdiction might need an HRC.

Password, Username, and Delegation Issues

If you forget your password, use the Forgot Password button on the login window, enter your username and registered email, and a reset link arrives by email. If you forget your username, email the goAML Support Team at [email protected] with your full registered name, registered email, Emirates ID and passport number, date of birth, nationality, and organisation ID. Delegation is permitted. You can delegate goAML reporting responsibilities to a third party, such as a compliance consultant or an accounting firm, but the legal accountability for accurate and timely filing remains with your business.

AML Training and the Broader Compliance Stack

goAML registration does not work in isolation. It sits alongside your AML Registration, your AML Policy Framework, and your UBO and ESR filings. Regulators expect gold dealers to train employees on recognising suspicious transactions, understanding cash thresholds, and escalating concerns to the MLRO. A business that registers on goAML but has no documented AML Policy Framework and no staff training is only partially compliant. The UAE’s removal from the EU AML High-Risk List does not reduce domestic enforcement; it raises expectations that DNFBPs like gold dealers maintain proper systems.

Firms such as ADS Auditors work with gold dealers on the full stack, from goAML registration through AML Training and policy documentation, because the portal is only one piece of a defensible compliance position.

Common Mistakes That Delay or Undermine Registration

The most frequent errors are using an unmonitored email address, assuming a certificate will be issued, filing the wrong report type, and treating goAML as a standalone task rather than part of a wider AML framework. Another recurring problem is waiting until a regulator asks for evidence before checking whether the approval email was ever received. Check your spam folder, whitelist the sender addresses, and keep a dated copy of the approval notification in your compliance file.

To check your goAML registration status, log in to the portal and review your organisation profile and any messages from your Supervisory Authority. If the application is pending, the status will show as such. If you cannot log in, recover your username first, then check the application state.

For help with registration, policy documentation, or AML Training, contact ADS Auditors to schedule a consultation.