A common misconception among UAE businesses is that filing a beneficial owner declaration also satisfies any applicable AML or goAML registration obligations. It does not.
The key point in UBO registration vs AML registration in the UAE is simple. UBO compliance is an ownership-transparency obligation applying to most UAE legal persons. AML and goAML obligations are narrower for non-financial businesses because they apply when the licensed activity falls within a designated non-financial business or profession, known as a DNFBP.
A company may therefore need UBO registration only, or it may need both UBO and AML/goAML registration. Treating them as interchangeable can leave an entity compliant under one regime but exposed under the other.
Why UBO and AML Are Frequently Confused
Both regimes improve transparency and reduce the misuse of legal entities. Both may require a business to identify natural persons who ultimately own or control a company. The difference is purpose.
UAE beneficial ownership compliance is about who ultimately owns or controls this legal person. On the other hand, AML compliance asks broader questions about customers, financial-crime risk, unusual transactions, and reporting suspicious activity to the UAE Financial Intelligence Unit.
goAML is the FIU’s reporting platform. It is not the UAE’s UBO register, and goAML registration does not replace a UBO filing with the relevant Registrar.
What Is UBO Registration in the UAE?
Cabinet Decision No. 109 of 2023 regulates beneficial owner procedures and replaced Cabinet Decision No. 58 of 2020. It applies broadly to legal persons licensed or registered in the UAE, including non-financial free zone entities, subject to stated exemptions. DIFC and ADGM operate separate beneficial ownership frameworks.
Under Article 5, a beneficial owner is generally the natural person who ultimately owns or controls the legal person. The first test considers direct or indirect ownership of at least 25% of capital, at least 25% of voting rights, or control through other means, such as appointing or removing a majority of directors. If no individual is identified through ownership, the rules apply a control-based cascade and may ultimately look to senior management.
The UBO register requirements UAE businesses must address include creating and maintaining a beneficial owner register and making the prescribed information available to the Registrar. A newly created legal person must establish the register within 60 days from the date of its existence. It must update the register within 15 days of becoming aware of a change.
UBO compliance is therefore not permanently completed at incorporation. Share transfers, changes in voting rights, restructuring of a corporate shareholder, or new control arrangements may require a fresh review and update.
What Is AML and DNFBP Registration?
The current federal AML framework is based on Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. For non-financial businesses, the key question is not whether the company is large or profitable. It is whether the business conducts an activity captured by the DNFBP definitions.
Article 3 uses six category headings:
- Commercial gaming operators, subject to the applicable transaction trigger.
- Real estate brokers and agents concluding purchases or sales for customers.
- Dealers in precious metals and precious stones, subject to the relevant cash-transaction trigger.
- Lawyers, notaries, other independent legal professionals, and independent accountants undertaking specified client transactions.
- Trust and company service providers.
- Any additional category designated by the relevant Supervisory Authority.
The Ministry of Economy and Tourism supervises the core mainland and commercial-free-zone sectors of real estate, precious metals and stones, independent accountants and auditors, and trust and company service providers. Legal professionals fall under Ministry of Justice supervision. DIFC and ADGM businesses follow the supervision arrangements applicable within those financial free zones.
There is no general small-business exemption from DNFBP registration in the UAE. Size does not remove an in-scope activity, although category-specific transaction thresholds or service conditions can still matter. The license, services actually provided, customers served, and transactions carried out should be reviewed together.
An in-scope DNFBP must register on goAML and keep its registration active. It must also implement a wider AML framework, potentially covering a business risk assessment, customer due diligence, sanctions and politically exposed person screening, policies, records, training, monitoring, and suspicious transaction reporting.
Therefore, goAML registration in the UAE is an entry point into the reporting framework, not the complete AML program.
UBO vs AML UAE: Two Separate Obligations
The penalty rules also differ. UBO violations are addressed through Cabinet Resolution No. 132 of 2023, while AML violations by Ministry-supervised DNFBPs are addressed through a separate breach-specific schedule.
| Comparison Point | UBO Registration | AML/DNFBP and goAML Registration |
| Main purpose | Identify who ultimately owns or controls the company | Prevent, detect, and report financial-crime risks |
| Core legal basis | Cabinet Decision No. 109 of 2023 | Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025 |
| Who is generally in scope? | Most mainland and non-financial free zone legal persons, subject to exemptions | Businesses whose activities fall within a DNFBP category |
| Regulator or authority | Relevant Registrar or licensing authority | Relevant Supervisory Authority, with reports submitted to the UAE FIU |
| Register or platform | Internal UBO register and submission to the Registrar | goAML registration and reporting, plus an internal AML framework |
| Initial timing | Register established within 60 days of the legal person’s existence | No equivalent general 60-day window. Register when the business becomes an in-scope reporting entity and maintain active status |
| Ongoing duties | Update the register within 15 days of becoming aware of a change | Maintain risk controls, records, monitoring, registration, and reporting processes |
| Penalties | Certain repeated failures can reach AED 100,000, with possible licence action | Failure to register on the FIU-approved system can attract AED 50,000 to AED 200,000; certain other violations can reach AED 1 million |
Which UAE Businesses May Need Both?
A general consultancy company that does not perform a designated activity will usually need to assess its UBO position, but it is not automatically a DNFBP merely because it provides consulting services.
A real estate brokerage generally has both obligations. Its UBO filing identifies who owns or controls the brokerage. Its DNFBP obligations require separate goAML registration and an operational AML framework.
A jewelry business may also need both where its activities and transactions bring it within the precious-metals-and-stones category. Its own UBO filing concerns the company’s ownership, while its AML framework concerns customers, transactions, screening, records, and reporting.
A company formation or corporate services provider may likewise fall within both regimes. Its client-facing formation, registered-office, nominee, or administration services can trigger DNFBP obligations independently from its own UBO filing.
Common Compliance Mistakes
A frequent mistake is assuming that “registration completed” means every related obligation is covered. UBO filing, goAML registration, and the implementation of AML controls are distinct tasks.
Another is relying only on the trade license title. Proper DNFBP scoping should consider the services and transactions actually carried out.
Businesses also treat beneficial ownership as static. A restructuring at parent-company level may change the natural person who ultimately owns or controls the UAE entity, even when its direct shareholder remains unchanged.
Finally, goAML is sometimes treated as a one-time portal exercise. The Ministry’s March 2026 guidance requires DNFBPs to register and maintain active status, so account access and responsible-person details must remain current.
Short Self-Check Checklist
- Has the entity’s UBO position been assessed under the correct jurisdiction?
- Can ownership be traced through every layer to the relevant natural person?
- Was the UBO register established within the applicable 60-day period?
- Are relevant changes reviewed and updated within 15 days?
- Does the business perform an activity within a DNFBP category?
- If so, is goAML active and supported by a complete, risk-based AML framework?
- Are UBO, bank KYC, licence, corporate, and AML records consistent?
A “yes” to the UBO questions does not answer the DNFBP questions. Each obligation needs its own evidence, owner, calendar, and review process.
How CZTA Supports UAE Compliance
At Creative Zone Tax & Accounting (CZTA), compliance is non-negotiable. Our experts help businesses determine which obligations apply, organize ownership records, support UBO filings and updates, assess DNFBP status, and strengthen practical AML processes.
Our approach connects compliance with accounting, tax, governance, and operational records. This helps reduce inconsistencies between shareholder documents, UBO filings, customer due diligence, accounting data, and bank KYC information.
Contact our experts to review your compliance obligations and get practical support with UBO, AML, and wider regulatory requirements.
Frequently Asked Questions
1. Is UBO registration the same as AML or goAML registration in the UAE?
No. UBO registration identifies the natural persons who ultimately own or control a UAE legal person and is handled through the relevant Registrar. AML registration applies to regulated reporting entities, while goAML is the UAE FIU platform used for prescribed reports. Completing a UBO registration does not activate a goAML account or establish an AML programme. A DNFBP may need to complete both obligations independently.
2. Which businesses must register on the goAML platform?
All businesses that qualify as DNFBPs must register on goAML and maintain active status. The category headings cover commercial gaming operators, real estate brokers and agents, dealers in precious metals and stones, specified legal and independent accounting activities, trust and company service providers, and any further category designated by a Supervisory Authority. Precise scope can depend on the services actually performed and, in certain sectors, transaction thresholds. CZTA’s AML compliance services can help assess the activity and establish the required controls beyond portal registration.
3. Do all UAE companies need to file a UBO declaration, regardless of sector?
Most mainland companies and legal persons in non-financial free zones fall within the federal beneficial ownership framework, subject to specific exemptions. The obligation is broad because it follows the legal person rather than a high-risk sector. DIFC and ADGM entities follow their own beneficial ownership regimes, so they are not simply outside ownership-transparency requirements. Businesses should review the applicable Registrar process and maintain the records described in CZTA’s UBO registration guidance.
4. What are the penalties for missing UBO or AML registration deadlines?
The penalty depends on the specific breach. Under Cabinet Resolution No. 132 of 2023, repeated failure to establish and maintain a UBO register can reach AED 100,000, while other UBO violations have separate graduated amounts and possible license consequences. Under Cabinet Resolution No. 71 of 2024, failure by an in-scope DNFBP to register on the FIU-approved electronic system can attract AED 50,000 to AED 200,000, while certain other AML failures can reach AED 1 million. A full compliance review is important because one weak framework can create several separate violations.
5. Do DIFC and ADGM companies follow the same UBO rules as mainland companies?
No. Cabinet Decision No. 109 of 2023 applies to the federal framework within its scope, while DIFC and ADGM operate separate beneficial ownership regimes. ADGM’s Beneficial Ownership and Control Regulations require applicable entities to maintain records and report changes, and DIFC has its own UBO Regulations and register requirements. AML supervision also differs, with the DFSA operating in DIFC and the FSRA operating in ADGM. Businesses in either financial free zone should obtain jurisdiction-specific guidance through CZTA’s compliance team rather than applying a mainland process by default.
