UBO Declaration UAE: Who Must File, and By When

If you own a UAE company, you almost certainly owe a UBO (Real Beneficiary) declaration to your licensing authority, even if nothing has changed since setup. You probably do not owe a goAML registration. These are two separate duties, and mixing them up is the single most common mistake owners make. Here is who files what, and by when.

Bottom Line

• Almost every licensed UAE company (mainland and commercial free zones) must file a UBO / Real Beneficiary register under Cabinet Decision 109 of 2023. DIFC, ADGM and government-owned entities are exempt.
• A UBO is any natural person who owns or controls 25% or more of shares or voting rights, or has control by other means. If none is found, your senior manager is treated as the UBO.
• The deadline is 60 days from licence issuance or a relevant change, and 15 days to report any later change.
• goAML is a separate platform. Only DNFBPs (four business categories) must register on it. A normal trading or holding company usually does not.
• UBO fines escalate to AED 100,000 plus possible licence suspension, but most gaps are fixed with a filing, not a fight.

Why people keep confusing UBO and goAML

Most owners treat "UBO" and "goAML" as one obligation, and most online guides encourage that error by blurring them together. They are separate legal duties with different scopes, filing places and deadlines. The cleanest way to keep them apart is by the question each one answers.

The UBO declaration answers: who ultimately owns and controls your company? You record the real human beings behind the shares and file that register with your licensing authority. goAML answers a different question: does your business have to report other people's suspicious money? That duty falls only on specific high-risk professions.

Nearly every incumbent guide (IFZA, auditor blogs, generic setup-agent posts) merges the two, which leaves the ordinary trading-company owner unsure whether goAML applies to them. Usually, it usually does not, but the UBO filing almost always does. By the end of this post you'll know which of the two applies to your specific company, and by when.

Who must file the UBO declaration

Every company licensed in the UAE, mainland and commercial free zones alike, must maintain and file a Real Beneficiary register under Cabinet Decision 109 of 2023, which replaced the earlier Cabinet Decision 58 of 2020. Only two groups are carved out: companies wholly owned by federal or local government, and companies in the financial free zones DIFC and ADGM, which are outside the scope of this decision and run their own regimes.

So what is a UBO? Under Cabinet Decision 109 of 2023, a Real Beneficiary is any natural person who, directly or indirectly, owns or controls 25% or more of the share capital or voting rights, or who exercises control by other means. If no such person can be identified, the company's senior manager is deemed the UBO.

One point owners miss most often: this is not a one-time setup formality. Your existing company owes a current, accurate register even if nothing has changed since the day you incorporated. If you set up years ago and never revisited it, the safe assumption is that a filing is due.

The UBO deadlines, and what goes in the register

The core windows are short. You have 60 days from licence issuance, or from any change affecting beneficial ownership, to file the register, and 15 days to report any subsequent change, both under Cabinet Decision 109 of 2023. If the registrar asks for more information, you have 14 days to respond.

Changes that trigger the 15-day clock include a share transfer, a new shareholder, a change of controlling manager, or a restructuring. If any of these happened recently, check whether you reported it in time.

What the register must contain

Per Cabinet Decision 109 of 2023, the register must record, for each UBO: full name, nationality, date and place of birth, residential address, passport or ID details with issue and expiry dates, ownership percentage, and the dates the person became or ceased to be a UBO.

Where you file, and how long you keep it

You file with your licensing authority. On the mainland that is the DET portal; free-zone companies file through their free-zone portal, often bundled into the renewal step (for example, a DMCC member portal). Retention is long: keep UBO and shareholder registers for the life of the company and for five years after de-registration, liquidation or dissolution.

Because the UBO clock is tied to your licence and to ownership changes, it fits alongside your other annual duties. We lay these out together in the owner's compliance calendar, which shows what's actually due when.

Who actually has to register on goAML

Only DNFBPs must register on goAML, the FIU reporting platform run by the Central Bank's Financial Intelligence Unit and built with UNODC. This is the key point that separates goAML from the UBO declaration: the UBO duty is near-universal, while goAML is narrow.

The Ministry of Economy and Tourism lists four DNFBP categories:

1. Real estate brokers and agents
2. Auditors and accountants
3. Dealers in precious metals and stones
4. Trust or company service providers (including company-formation and registered-address providers)

The plain-English self-test is one question. Does your licensed activity fall into one of those four categories? If yes, goAML registration applies to you, and the duty is ongoing: newly licensed DNFBPs must register on receiving their trade licence, and the obligation stays open for any DNFBP that has not yet registered. If no, then most ordinary trading and holding companies are not DNFBPs and do not register on goAML, though they still owe the UBO declaration.

One note that matters for existing-company owners: company-service providers are themselves a DNFBP category. So the setup or PRO firm you deal with must be on goAML, even though you, as an ordinary trading company, do not have to be.

The same split works as a side-by-side reference:

The penalties and the current AML law

The exposure is real but manageable. UBO fines under Cabinet Decision 132 of 2023 escalate in steps: a written warning first, then up to AED 50,000, then up to AED 100,000 with possible licence suspension for repeated or continued violations. That decision, issued 15 December 2023, also added a penalty for failing to disclose ownership layers in complex structures. Broader AML and UBO fines under the unified administrative-penalty list, first set in Cabinet Decision 16 of 2021 and updated by Cabinet Resolution 71 of 2024, range from AED 50,000 to AED 1,000,000.

The governing AML statute changed recently. The current law is Federal Decree-Law No. 10 of 2025, published in the Official Gazette on 30 September 2025 and effective 14 October 2025, which repealed Federal Decree-Law No. 20 of 2018. Two changes matter: knowledge of an illicit source can now be inferred from objective facts rather than requiring proof of actual knowledge, and proliferation financing is now criminalised, both in line with FATF standards. The UBO and goAML mechanics themselves continue unchanged.

Keep the whole thing in proportion. Treat it as routine housekeeping, not a crisis. Usually, most gaps are resolved with a corrective filing rather than a penalty, so the sensible move is to clear it promptly rather than panic about the AED 1,000,000 headline number. If you also have ESR or corporate tax registration items open, handle them in the same housekeeping pass.

A clean checklist for an existing company owner

Work through these five steps once, then tie the review to your licence renewal so it never drifts again. Most owners clear the whole thing in an afternoon.

1. Confirm your setup. Are you in DIFC or ADGM, or government-owned? If so, different rules apply and the mainland UBO regime above does not.
2. File or refresh your UBO register with your licensing authority, and check that the last filed version matches reality today.
3. Check for recent changes. Did anything affecting ownership happen in the last 15 days that still needs reporting?
4. Run the DNFBP self-test. Only if your activity is one of the four categories do you register on goAML.
5. Keep copies and set a reminder tied to your licence renewal date.

The failures we see almost never come from bad intent. They come from a register filed once at setup and never touched again, so a quiet share transfer three years ago is now unreported. A single visible company record and an accountable human keeping it current remove most of that risk. That is exactly what our ongoing admin service is built to hold.

Frequently asked questions

Does every UAE company have to file a UBO declaration?

Effectively yes, with two exceptions. Every company licensed on the mainland or in a commercial free zone must maintain and file a Real Beneficiary register under Cabinet Decision 109 of 2023. The only carve-outs are companies wholly owned by federal or local government and companies in the financial free zones DIFC and ADGM, which follow their own regimes.

Is UBO the same as goAML registration?

No, and this is the most common mix-up. The UBO declaration is filed with your licensing authority and applies to almost every company. goAML is a separate reporting platform run by the Central Bank's Financial Intelligence Unit, and only Designated Non-Financial Businesses and Professions (DNFBPs) must register on it. A normal trading or holding company files a UBO declaration but usually does not touch goAML.

Which businesses count as DNFBPs that must register on goAML?

The Ministry of Economy and Tourism lists four categories: real estate brokers and agents; auditors and accountants; dealers in precious metals and stones; and trust or company service providers (including company-formation and registered-address providers). If your licensed activity is not one of these, goAML registration is generally not your obligation.

What are the deadlines for the UBO declaration?

You have 60 days from licence issuance or from any change affecting beneficial ownership to file the register, and 15 days to report any subsequent change to the registrar. If the registrar asks for more information, you have 14 days to respond. Registers must be kept for the life of the company and for five years after it closes.

What happens if I don't file, and how bad is it?

UBO penalties under Cabinet Decision 132 of 2023 start with a written warning, then escalate to fines of up to AED 50,000 and up to AED 100,000, with possible licence suspension for continued non-compliance. Broader AML fines can reach AED 1,000,000. Practically, most gaps are resolved with a corrective filing rather than a penalty, so treat it as housekeeping to clear promptly rather than a reason to panic.

If you want a second pair of eyes on which duties apply to your specific licence, and someone to keep the register current from here on, book a call and we'll walk your file with you.