FIU goAML Registration in Tanzania: Who Registers, the Portal's Steps and What to Prepare (2026)

Short answer: Tanzania's Financial Intelligence Unit (FIU) receives reports through its goAML portal, goaml.fiu.go.tz. The portal says that to get access "you first need to register as a reporting entity" under "Register as an Organisation". One form registers the organisation together with an administrator, whose user name and password are set on that form. Colleagues then register as users of the organisation, using its Organization ID. On submission the portal gives a reference number, and acceptance or rejection is notified by e-mail.

This guide is for money laundering reporting officers (MLROs), compliance managers and IT teams at Tanzanian banks, microfinance service providers, insurers, securities firms, bureaux de change, money transmitters, gaming operators and designated non-financial businesses and professions (DNFBPs). It is a practical guide, not legal advice. The portal fields described here are its live configuration as read on 1 October 2026. They can change without notice, so check the form on the day you register.

---

Who registers

The Anti-Money Laundering Act, Cap. 423 R.E. 2023 places its reporting duties on "reporting persons" (section 3). They include banks and financial institutions (a term that covers virtual currency exchangers and wallet providers); cash dealers such as insurers, securities dealers, money transmitters, gaming operators and bureaux de change; accountants, auditors, tax advisers, real estate agents and dealers in precious stones or metals; trust and company service providers, motor vehicle dealers and auctioneers; advocates and notaries for listed client transactions; and pension fund managers, financial leasing entities and microfinance service providers. The full list is in our guide to Tanzania's Anti-Money Laundering Act and 2022 Regulations.

The portal's "Organization Business Type" list follows this range, from banks, credit unions, insurers and fund managers to advocates, audit firms, casinos, dealers in precious metals and stones, mobile financial service providers, money services businesses and real estate brokers. The registration page also offers "Supervisory Body" and "Stakeholder" types; this guide covers reporting entities.

Inside the organisation, the registration belongs with the MLRO. Every reporting person must "designate a natural person as money laundering reporting officer" (section 19(1)(b)), and the Anti-Money Laundering Regulations, 2022 require that officer to be "a senior officer at management level" (regulation 15(2)).

---

Where the portal is

The FIU's website, fiu.go.tz, has an e-Reporting block with three links: Whistle Blower, goAML and NASMS. The goAML link opens the production portal at goaml.fiu.go.tz, which runs UNODC's goAML software. NASMS is the national statistics system for anti-money laundering, counter-terrorist financing and counter-proliferation financing. It is not a goAML reporting channel for reporting entities.

For goAML questions, the portal names the FIU's contacts: barua@fiu.go.tz and (+255) 22 2129457.

---

Organisation first, then users

The registration page has two paths:

A reporting person starts with "Register an Organisation" and chooses Reporting Entity. The registration has three parts:

1. Organisation Details: the entity's own data.
2. Administrator: a person record submitted together with the organisation. The administrator's user name and password are the organisation's first login.
3. Attachments: optional.

Staff who need their own access later choose "User (Reporting Entity)" and enter the organisation's "Organization ID", which links the new user to it. If you do not know your organisation's ID, ask the FIU.

---

Step 1: the organisation details

Five fields on the reporting-entity form are mandatory:

Everything else is optional: incorporation details, a contact person, a URL, addresses and phone numbers. If you add an address, it needs an address type, the address, a City/Region and a country; District is optional. If you add a phone number, it needs a contact type, a communication type and the number.

The Swift/BIC field is the one most likely to stop a non-bank. The form gives no guidance on what a non-bank should enter, so ask the FIU before you submit rather than making up a code.

---

Step 2: the administrator and other users

The administrator, and every user who registers later, completes the same person record. Five fields are always required:

• User Name: 4 to 50 characters.
• Password: at least 8 characters, with an upper-case letter, a lower-case letter, a number and a special character. The form's own message reads "Min 8 chars, 1 upper, 1 lower, 1 number, 1 special char".
• First Name and Last Name.
• Email.

National ID No. and Organization ID are optional on the form, but a user joining an existing organisation enters the Organization ID to be linked to it. The form treats Passport Number and Passport Country as a pair, so fill in both or neither.

Give each person their own account. Users log in with the credentials they defined at registration, so a shared login would hide who filed what.

---

Attachments, CAPTCHA and approval by e-mail

• Attachments are optional. The form accepts up to 10 files in Word, Excel, PDF, image, XML, RTF or CSV format, and says: "You may upload files relevant for registration below." If you are unsure whether the FIU expects supporting documents, ask before you submit.
• CAPTCHA. You enter a displayed code before submitting.
• Reference number. On submission the portal shows a reference number. Keep it for any follow-up with the FIU.
• Approval by e-mail. The portal's message reads: "Please wait for notification of acceptance/rejection by email."
• Logging in. Once accepted, log in through the portal's Login link with the user name and password set at registration.

---

Registering your MLRO with the FIU

Separately from goAML, the FIU publishes a one-page Money Laundering Reporting Officer (MLRO) Registration Form in the Compliance section of its website. It asks for:

• the officer's names, gender, date of birth and citizenship or nationality;
• the company or organisation name, permanent and physical addresses, office and mobile phone numbers and e-mail;
• passport number, employee ID number, designation and MLRO appointment date;
• a signature and date.

A box for official use holds a registration number, "To be provided by FIU". The form does not say where to send it or how it relates to goAML registration, so ask the FIU.

The FIU's January 2023 compliance guide for DNFBPs adds two points. The STR "should be made by the Money Laundering Reporting Officer or his deputy", and a DNFBP "shall provide FIU with the contact information" of its MLRO or deputy and update the FIU on any changes. The same guide says dealers in precious metals and stones "must submit STRs through the FIU Electronic STR System". It does not name that system; for reporting entities, the FIU's website links goAML.

---

Technical settings for IT teams

On 1 October 2026 the portal's public configuration showed:

Teams that will generate XML reports from core systems should build to the schema version shown. If you are choosing software for that, our buyer's guide to AML compliance software in Tanzania sets out what to test.

---

The legal basis for filing through goAML

goAML is the electronic channel the FIU uses to receive reports, and the law leaves the choice of channel to the FIU:

• Suspicious transaction reports. Section 18(1)(b) of the Act requires the report to be submitted to the FIU "by any secure means as may be specified by FIU".
• Cash and electronic funds transfer reports. Regulation 12(b) of the Anti-Money Laundering (Electronic Funds Transfer and Cash Transaction Reporting) Regulations, 2019 (GN No. 420) requires them to be submitted "electronically or otherwise as required by FIU".
• The MLRO. Section 19(1)(b) requires a designated MLRO, to whom employees report suspicious activities or transactions, and the 2022 Regulations define the MLRO as "a natural person appointed by a reporting person".

goAML is not new in Tanzania. The FIU's 2014/15 annual report lists "A mission critical system called goAML" among the things the FIU has. At ESAAMLG's onsite visit in July 2019, most STRs came in through goAML, although the assessors also recorded that "only commercial banks are currently enlisted" on it.

---

What you file once registered

Lawyers and accountants report cash transactions only for listed activities, and gaming operators report the cash flows listed in GN 420 (regulations 6 to 8). For the law behind these duties, see our guide to Tanzania's Anti-Money Laundering Act and 2022 Regulations, and for an overview of reporting, our Tanzania FIU goAML reporting guide.

---

Registration checklist

1. Confirm that your institution is a reporting person under section 3 of the Act, and pick the matching business type on the portal.
2. Confirm that your MLRO is designated at senior management level, and complete the FIU's MLRO registration form; ask the FIU how to submit it.
3. Gather the five mandatory organisation fields: business type, name, acronym, e-mail and Swift/BIC. If you are not a bank, ask the FIU what to enter for Swift/BIC.
4. Choose the administrator and prepare their user name, a password that meets the portal's rules, their first and last names and their e-mail.
5. Register under "Register an Organisation" as a Reporting Entity, complete the CAPTCHA and keep the reference number.
6. Wait for the acceptance or rejection e-mail, then log in with the credentials you set.
7. Have each additional user register as "User (Reporting Entity)" with your Organization ID.
8. Tell the FIU whenever your MLRO or deputy changes.

---

Frequently asked questions

What is the FIU's goAML portal address?

goaml.fiu.go.tz. The FIU's website links to it as goAML in its e-Reporting block.

What do we register first, the organisation or the users?

The organisation, as a Reporting Entity, with its administrator on the same form. Other staff then register as users of that organisation with its Organization ID.

Do we have to attach documents?

The form makes attachments optional and accepts up to 10 files. Ask the FIU whether it expects any for your sector.

How do we know the registration was accepted?

The portal gives a reference number on submission and says that acceptance or rejection will be notified by e-mail.

Is the MLRO registration form part of goAML registration?

It is a separate one-page FIU form for the MLRO's details, with a registration number provided by the FIU. The form does not say how it relates to goAML, so ask the FIU.

Who can we contact about goAML?

The portal names the FIU at barua@fiu.go.tz or (+255) 22 2129457.

---

goAML reporting for Tanzanian institutions with Creodata

Creodata's goAML Reporting Platform generates schema-valid goAML XML from core-banking data, validates every report against the schema and business rules before submission, and keeps an immutable record of every report, amendment and filing. Registration on the FIU's portal remains your institution's own step: the platform prepares and validates what you file there. See goAML reporting software for Tanzania, and AML compliance software in Tanzania for the monitoring and case management behind each report.

See it on your own report types — request a demo.