You completed Step 1 of your AML registration with the Ministry of Economy. The Supervisory Body approved your entity. You received the goAMLWeb confirmation email from no-reply.sacm@uaefiu.gov.ae. You clicked the TOTP secret key link, entered the email OTP, and waited for the mobile OTP — and nothing arrived. Or maybe the email OTP itself never appeared. Now you are blocked from completing Step 2.
This guide gives you the exact email template to send to UAEFIU and CBUAE goAML support to resolve OTP delivery issues, plus the troubleshooting checklist Fastlane uses with our DNFBP and FI clients to get past the Step 2 blocker fast. The fix is usually 2–5 working days once the right email reaches the right inbox.
UAE AML registration for DNFBPs (real estate brokers, dealers in precious metals and stones, auditors, lawyers, corporate service providers) and Financial Institutions has two distinct stages:
| Stage | System | What Happens |
|---|---|---|
| Step 1 | SACM (Services Access Control Manager) Ministry of Economy AML/CFT system | Entity registration, document upload, Supervisory Body approval. Confirmation email sent to the registered email ID. |
| Step 2 | goAMLWeb UAEFIU portal | Account activation using TOTP secret key + email OTP + mobile OTP. After this, you can file STRs and SARs. |
Once Step 1 is approved, the email you receive looks like this:
The blocker is at the URL: you enter the email OTP that came in the email, but no mobile OTP arrives. Or worse, the email OTP itself never lands in the inbox.
| Cause | Explanation | Fix |
|---|---|---|
| International SIM card | Some non-UAE mobile numbers (international roaming SIMs, foreign carriers) cannot receive UAE government short-code SMS | Register a UAE mobile number (Etisalat or du) |
| Wrong number entered at Step 1 | Typo in the mobile number during initial entity registration — extra digit, missing country code, etc. | Email UAEFIU to correct the number on file |
| SMS gateway delay | The UAEFIU SMS gateway occasionally backlogs. Some users wait 30+ minutes, then the OTP expires | Click "Resend OTP" after waiting 5 minutes; retry once |
| Carrier blocking short codes | Some prepaid plans block short-code SMS from government senders by default | Call your carrier and unblock short-code SMS |
| Number on Do-Not-Disturb list | TRA's DND service can block automated SMS | Remove the number from TRA DND via myTRA app or 1100 |
| Cause | Fix |
|---|---|
| Email landed in spam / junk / quarantine | Check spam, junk, and quarantine folders. Whitelist uaefiu.gov.ae domain. |
| Corporate firewall blocking gov.ae senders | Ask IT to whitelist no-reply.sacm@uaefiu.gov.ae at the gateway |
| Email OTP already expired | OTPs expire — request a new one via the SACM portal |
| Wrong email entered at Step 1 | Email UAEFIU to correct the email on file |
If basic troubleshooting fails, escalate by emailing both UAEFIU and the CBUAE goAML helpdesk. The email must come from the registered email address on the SACM/goAML system — emails from other addresses are typically ignored or stuck in security review.
💡 Tip: Replace all bracketed [placeholders] with your actual details before sending. Keep the subject line exactly as shown — UAEFIU support routes by subject keywords.
UAEFIU goAML Support: goaml@uaefiu.gov.ae
CBUAE goAML Helpdesk: goamlhelpdesk@cbuae.gov.ae
SACM Portal: services.uaefiu.gov.ae/sacm/getkey.php
If after 5–7 working days neither OTP is being received, the most reliable solution is to change the registered mobile number to a fresh UAE Etisalat or du SIM. Send a formal request from the registered email:
Attach a copy of the authorised signatory's Emirates ID and the new SIM holder identity (if different) to speed up the change.
Failing to complete Step 2 means you have a registered entity but cannot file Suspicious Transaction Reports (STRs) or Suspicious Activity Reports (SARs) — which is one of the core obligations of every DNFBP and FI under UAE AML/CFT law. The penalty regime is severe:
| Violation | Penalty |
|---|---|
| Failure to register on goAML | AED 50,000 minimum |
| Failure to file STR / SAR when required | AED 50,000 to AED 1,000,000 |
| Failure to appoint a Compliance Officer | AED 50,000 |
| Failure to apply due diligence (CDD/EDD) | AED 50,000 to AED 1,000,000 |
| Failure to maintain records | AED 50,000 to AED 500,000 |
| Repeat / serious violations | Trade licence suspension or cancellation |
The Ministry of Economy and the Supervisory Bodies actively audit DNFBPs — real estate firms in particular are under heightened scrutiny. Being stuck on Step 2 is not a defence if the firm has been operating without goAML access.
Fastlane handles AML registration end-to-end for DNFBPs across the UAE — real estate brokerages, gold and precious metal dealers, corporate service providers, auditors, and tax agents. Our process when OTP issues hit:
For clients on our full AML compliance retainer, we also build out:
The most common causes are: (1) the registered mobile number is on an international SIM that blocks UAE government short-code SMS, (2) network issues with the carrier, (3) the number was entered incorrectly during entity registration, or (4) the goAML system has a temporary delay. Email UAEFIU and CBUAE support directly with your registration details to resolve.
The email OTP is sent from no-reply.sacm@uaefiu.gov.ae. Check your spam, junk, and quarantine folders. Whitelist the uaefiu.gov.ae domain. If you still do not receive it within 15 minutes, contact UAEFIU support — the entity may need to be re-verified manually.
Email both UAEFIU (goaml@uaefiu.gov.ae) and CBUAE goAML helpdesk (goamlhelpdesk@cbuae.gov.ae) from your registered email address. Include your entity name, registration number, registered email ID, and the specific error you are facing. Always send from the registered email — emails from any other address are typically ignored.
Step 1 is the initial entity registration on the AML/CFT system of the Ministry of Economy where you submit company details for Supervisory Body approval. Step 2 is the goAMLWeb portal access registration on the UAEFIU system, which requires the TOTP secret key, mobile OTP, and email OTP to activate the account for filing Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs).
Yes, but it requires a formal request to UAEFIU support with supporting documentation. Send the request from the registered email ID with the entity name, registration number, current mobile number on file, the new UAE mobile number, and a brief explanation. UAEFIU typically updates within 2–5 working days.
If everything works smoothly, Step 2 takes under 30 minutes — retrieve the TOTP secret key, scan it into Google Authenticator or Microsoft Authenticator, and log in. When OTPs fail, resolution typically takes 2–5 working days via UAEFIU support, or up to 7–10 days if a mobile number change is needed.
The TOTP (Time-based One-Time Password) Secret Key is a unique cryptographic seed generated by the goAMLWeb system for each registered user. You scan it into an authenticator app (Google Authenticator, Microsoft Authenticator, or similar) to generate rotating 6-digit codes for every login. It replaces the SMS OTP for ongoing logins after initial setup.
If your entity is a DNFBP — real estate broker, dealer in precious metals/stones, corporate service provider, lawyer, auditor, accountant — registration is mandatory regardless of transaction frequency. The Ministry of Economy enforces this through the Supervisory Bodies and trade licence renewal checks.