Back to Blogs Blog Image

SACM Pre-Registration Issues in UAE: Common Errors Before goAML Registration

Before a UAE reporting entity can access goAML, it must complete the required SACM pre-registration stage. SACM, or the Security Access Control Manager, is used to obtain the access credentials needed to reach the UAE Financial Intelligence Unit's goAML platform.

For businesses unfamiliar with the process, problems at this first stage can delay the overall goAML registration process.

The issue may be as simple as entering an incorrect mobile number, using an international number, failing to receive an email OTP, uploading documents incorrectly, or selecting the wrong registration information.

Understanding these common SACM pre-registration issues in UAE can help businesses prepare the required information before submitting their request.

What Is SACM Pre-Registration?

SACM pre-registration is the first stage of the access process for goAML.

The UAEFIU's current registration system requires the registering person to provide information including the reporting entity name, Supervisory Body, registration or ID number, individual details, email address, UAE mobile number and supporting documentation.

The process is separate from the second-stage goAML organization registration.

The UAEFIU FAQ confirms that the Supervisory Body/Regulator approves both the organization's SACM pre-registration and its subsequent goAML registration.

Common SACM Pre-Registration Problems

1. Selecting the Wrong Registration Information

Before starting the SACM application, businesses should identify the correct Supervisory Body and use the organization's official legal information.

The current UAEFIU Pre-Registration Guide advises applicants to identify their Supervisory Body and have the organization's legal name as registered with that body available before starting the process. It also recommends preparing the trade license or equivalent document.

Using outdated or incorrect organization information can create verification problems.

Before submitting, compare the application with the company's current official records.

2. Entering the Wrong Mobile Number

An incorrect mobile number can become a significant problem because SACM uses SMS OTP verification.

The UAEFIU FAQ specifically addresses situations where an applicant entered the wrong mobile number and cannot receive the SMS OTP.

According to the UAEFIU, the existing request must be revoked so that the applicant can register again using the correct mobile number.

This means applicants should carefully verify the mobile number before submitting the SACM request.

Practical check before submission

Confirm:

  • The number belongs to the registering person.
  • The number is entered correctly.
  • The number can receive SMS messages.
  • The number is a UAE mobile number.

3. Trying to Use an International Mobile Number

Another common issue is attempting to register with a mobile number outside the UAE.

The UAEFIU FAQ states that the service provider does not deliver SMS OTPs to international mobile numbers and instructs applicants to use a UAE mobile number.

Therefore, an applicant outside the UAE should not assume that an international number will work simply because the person is authorized to register the business.

The mobile-number requirement should be checked before beginning the application.

4. SMS OTP Received but Email OTP Is Missing

SACM may require both email and SMS verification.

A business may receive the SMS OTP but fail to receive the email OTP.

The UAEFIU recommends checking the junk or spam mailbox. If the email is not there, the organization's mail server may have blocked it.

The UAEFIU advises businesses to ask their IT team to whitelist the relevant UAEFIU system email address and contact goAML Support if the OTP needs to be resent.

This is particularly relevant for companies using strict corporate email-security systems.

5. OTP Has Expired

Another possible problem is an expired OTP.

If an applicant waits too long before using the OTP, the code may no longer be valid.

The UAEFIU FAQ states that applicants whose OTPs have expired should contact the support team to request refreshed OTPs.

Applicants should therefore avoid repeatedly requesting codes without checking whether an earlier code is still active.

6. Documents Cannot Be Uploaded Correctly

Supporting documents are another area where SACM applications can encounter problems.

The current SACM registration page specifies a PDF attachment for the registration request.

The UAEFIU FAQ also explains that when the Supervisory Body rejects a SACM registration because required documents were not properly uploaded, the applicant should resubmit the request with all required documents combined into one PDF rather than sending the documents separately by email.

Therefore, businesses should prepare the required documents before beginning the application.

7. Documents Are Selected but Not Actually Uploaded

Selecting a document from the computer does not necessarily mean that the document has been uploaded successfully.

The UAEFIU FAQ explains that applicants must use the upload function after selecting the document and confirm that the upload has completed.

Before submitting the SACM request, confirm that the required attachment is actually attached to the application.

8. Browser Pop-Ups Prevent the Upload From Completing

A browser setting can also interfere with document submission.

The UAEFIU explains that if the confirmation pop-up does not appear during document upload, the browser's pop-up settings may need to be adjusted.

This can be overlooked because the applicant may believe the document was uploaded when the system never completed the upload confirmation.

If the upload does not behave as expected, check the browser's pop-up permissions and retry the process.

9. Wrong Registration Type

Applicants should also make sure they are using the correct registration route.

The UAEFIU distinguishes between organization registration and person registration.

An organization registering on goAML for the first time uses the organization registration process. Additional users are registered as Persons under an already active organization.

This distinction becomes especially important when an employee is trying to obtain access for a company that already has an active goAML organization.

10. SACM Registration Is Submitted but Still Pending

Submitting a SACM request does not mean that the first stage has immediately been approved.

The UAEFIU states that the relevant Supervisory Body/Regulator approves the organization's SACM pre-registration.

Therefore, a pending request should not automatically be treated as an error.

The business should first determine whether the request is still under review before attempting another registration.

11. Incorrect Information Entered During Registration

The SACM registration page requires several pieces of information about both the reporting entity and the individual registering on its behalf.

These include:

  • Entity name
  • Supervisory Body
  • ID or registration number
  • Individual name
  • Nationality
  • ID type
  • ID number
  • Email
  • Mobile number
  • Supporting attachment

Applicants should compare these details with their official records before submitting.

The SACM terms also state that the registering person represents that the information provided is correct and that they are authorized to register on behalf of the entity.

SACM Pre-Registration Checklist

Before submitting a SACM request, a UAE business can use this checklist:

  • Correct Supervisory Body identified
  • Current legal entity name confirmed
  • Registration/ID number checked
  • Authorized registering person identified
  • Individual identification details verified
  • Correct email address entered
  • UAE mobile number entered
  • Mobile number checked for typing errors
  • Required supporting documents prepared
  • Documents combined correctly where required
  • PDF attachment checked
  • Upload completed successfully
  • Browser pop-ups allowed if required
  • Email spam/junk folder checked if OTP is delayed
  • Corporate mail server checked for blocked UAEFIU emails

What Should You Do If SACM Registration Is Rejected?

Do not immediately create another application without understanding the reason for rejection.

First identify what the Supervisory Body or regulator rejected.

For example, if the issue concerns missing or improperly uploaded documents, the UAEFIU advises applicants to resubmit the SACM request with the required documents properly attached.

If the issue concerns an incorrect mobile number, the existing request may need to be revoked before registering again with the correct number.

The correct response therefore depends on the specific SACM issue.

SACM Pre-Registration vs goAML Registration

It is important not to treat SACM and goAML as the same step.

The UAEFIU describes SACM as the first stage and goAML registration as the second stage. The Supervisory Body/Regulator approves the relevant requests for the organization.

A simplified sequence is:

SACM pre-registration → Supervisory Body/Regulator approval → SACM access credentials → goAML access → goAML organization registration → approval

The exact requirements can vary according to the entity and its Supervisory Body, so businesses should follow the applicable UAEFIU guidance and regulator instructions.

When Should a Business Get SACM Pre-Registration Assistance?

Assistance may be useful when a business is unsure about:

  • Which Supervisory Body to select
  • Which organization information to enter
  • Which documents are required
  • How to handle a rejected SACM request
  • Why an OTP has not arrived
  • How to correct an incorrectly entered mobile number
  • Why document uploads are not completing
  • What to do before proceeding to goAML registration

However, assistance should not involve sharing passwords, OTPs, secret keys, or other credentials with another person.

The SACM terms place responsibility on users to protect their credentials and prohibit impersonation or the use of false identity information.

Frequently Asked Questions

What is SACM pre-registration in the UAE?

SACM pre-registration is the first stage of obtaining the access needed to reach the UAEFIU goAML platform. The registration requires entity and registering-person information and supporting documentation.

Can I use an international mobile number for SACM?

No. The UAEFIU states that SMS OTPs are not delivered to international mobile numbers and instructs applicants to use a UAE mobile number.

What should I do if I entered the wrong mobile number?

The UAEFIU advises contacting goAML Support to revoke the current request so that the applicant can register again with the correct mobile number.

What if I receive the SMS OTP but not the email OTP?

Check the junk or spam folder first. If the email is not received, the corporate mail server may have blocked it. The UAEFIU recommends asking the IT team to whitelist the relevant system email address and contacting support if the OTP needs to be resent.

Can SACM documents be sent by email instead?

If the Supervisory Body rejected the SACM request because required documents were not properly uploaded, the UAEFIU FAQ instructs applicants to resubmit the pre-registration request with the required documents attached rather than sending them separately by email.

Who approves SACM pre-registration?

The relevant Supervisory Body/Regulator approves the organization's SACM pre-registration.

Is SACM the same as goAML registration?

No. SACM is the first stage of the access process, while goAML registration is the subsequent stage.

Conclusion

SACM pre-registration is an important first step before a UAE business can complete its goAML access and registration process. Small errors—such as an incorrect mobile number, unsuitable email configuration, missing documents, incomplete uploads, or incorrect registration information—can prevent the application from progressing.

The best approach is to prepare the entity information and supporting documents before starting, verify the mobile and email details carefully, and confirm that uploaded documents have actually been attached successfully.

If a request is rejected or becomes stuck, businesses should identify the specific reason and follow the applicable UAEFIU or Supervisory Body process rather than repeatedly submitting new applications.