Tanzania FIU goAML Reporting: A Practical Guide for Banks

Short answer: Reporting persons file with the Financial Intelligence Unit (FIU) through its goAML portal at goaml.fiu.go.tz. Suspicious transaction reports are due within 24 hours after forming the suspicion, and cash transactions of USD 10,000 or more and electronic funds transfers of USD 1,000 or more are reported within five working days. Reports generated as XML should follow the goAML schema version the portal is configured for (5.0.2 on 1 October 2026). For software that generates and validates those files, see goAML reporting software for Tanzania.

Tanzania's AML/CFT regime has just come through its most intense period of international scrutiny. Placed on the FATF grey list in October 2022, the country worked through its FATF action plan — the Ministry of Finance reported that it had coordinated the implementation of all 21 action-plan items by April 2025 — and was removed from the list on 13 June 2025 at the FATF Plenary in Strasbourg. The Financial Intelligence Unit (FIU) has made clear through its supervisory activity that the standards built during the grey-list period are here to stay.

For compliance officers at Tanzanian banks, microfinance providers, mobile money channels, bureaux de change, and the long list of other "reporting persons" under the Anti-Money Laundering Act, the practical question is operational: how do you meet a 24-hour STR deadline and USD-denominated cash reporting thresholds, file schema-valid XML through the FIU's goAML portal, and keep the audit trail to prove it?

This guide is a practical reference for reporting entities in Tanzania. It covers the legal framework, the FIU's goAML portal, CTR and EFT reporting thresholds, the STR deadline, Tanzania-specific data requirements, the Zanzibar dimension — and how to deploy a reporting platform that handles Tanzania's rules alongside the rest of your regional footprint.

For each step in detail, see our guides to goAML registration in Tanzania, suspicious transaction reports, cash transaction and EFT reports and Tanzania's Anti-Money Laundering Act and 2022 Regulations.

For regional context, see our companion guides: Kenya FRC goAML Reporting: Complete Guide, Uganda FIA goAML Reporting, Rwanda FIC goAML Reporting, and Zambia FIC goAML Compliance.

---

Tanzania's AML Legal Framework

The Anti-Money Laundering Act, Cap. 423

Tanzania's core AML statute is the Anti-Money Laundering Act (Cap. 423, Revised Edition 2023), enacted as Act No. 12 of 2006 and amended repeatedly since — most significantly by the AML (Amendment) Act No. 1 of 2012 and the AML (Amendment) Act No. 2 of 2022, which came into force on 8 March 2022. The 2022 amendment modernised the regime substantially: it added proliferation financing, expanded customer due diligence requirements, broadened the list of reporting persons, addressed virtual assets, and strengthened the administrative-sanctions provision (section 19A, which Act No. 1 of 2012 had inserted and the 2022 Act substituted). The 2023 Revised Edition — the text the FIU now publishes — renumbered many sections, so section 19A is now section 21; this guide cites the Revised Edition numbers and gives the old number alongside, because many institutions' procedures still use it. Most recently, the Written Laws (Miscellaneous Amendments) Act, 2025 (Act No. 1 of 2025) added a subsection (2) to section 21: a regulator that has no mandate to impose one of the section's sanctions must recommend it to its "relevant authority". The FIU's Revised Edition copy does not show this change.

Section 4 of the Act establishes the Financial Intelligence Unit as an extra-ministerial department under the Ministry responsible for finance, with operational and budgetary independence and a Commissioner appointed by the President. The FIU's mandate covers receiving, analysing, and disseminating suspicious transaction reports, currency transaction reports, cross-border currency reports, and electronic funds transfer reports.

The Act is supported by subsidiary legislation that compliance teams must know in detail: the Anti-Money Laundering Regulations, 2022 (GN No. 397 of 2022, amended in January 2023 by GN No. 10A and in November 2023 by GN No. 853E), and the Anti-Money Laundering (Electronic Funds Transfer and Cash Transaction Reporting) Regulations, 2019 (GN No. 420 of 2019), which set the CTR and EFT reporting thresholds.

FATF Grey List Exit and ESAAMLG Follow-Up

Tanzania's second-round ESAAMLG mutual evaluation report was published in June 2021. On suspicious transaction reporting (FATF Recommendation 20), Tanzania was rated Largely Compliant — but the assessors' effectiveness findings were pointed: STRs came mainly from the banking sector, very few were filed by mobile money operators, money transfer providers, and DNFBPs, and the overall level of reporting remained low given Tanzania's risk profile and the size of its economy. Assessors also found that only around 7% of STRs led to disseminations to law enforcement agencies, and that the FIU acknowledged STRs without giving case-specific feedback.

Those findings translated into the FATF action plan, the October 2022 grey listing, and a sustained domestic enforcement push. Successive follow-up reports re-rated multiple Recommendations, and the June 2025 grey-list exit confirmed the progress. The compliance message for reporting institutions is unambiguous: report volume and report quality from non-bank sectors are under continued scrutiny, and the FIU has the administrative sanction powers to enforce them.

---

The FIU and the goAML Portal

How FIU Tanzania Uses goAML

The FIU operates a UNODC goAML portal as its electronic reporting platform, publicly accessible at goaml.fiu.go.tz. Reporting persons must register as an organisation on the portal before they can file. The FIU receives STRs through goAML. The report types set up on the portal are visible only after login, so confirm with the FIU how it wants currency transaction and electronic funds transfer reports submitted. Cross-border currency declarations are made by travellers to customs, which passes the information to the FIU (section 25(1)).

FIU analysts use the goAML environment to run link analysis across reports, identify common subjects, and generate intelligence for dissemination to law enforcement. As in every goAML jurisdiction, the quality of that analysis depends entirely on the quality of submissions — complete subject identification, accurate transaction data, and substantive narratives.

Who Must Register and Report

The Act's definition of "reporting person" (section 3, as amended in 2022) is broad. It covers:

• Banks and financial institutions
• "Cash dealers" — a defined term that includes insurers and insurance brokers, securities dealers and brokers, dealers in gold bullion, issuers and redeemers of traveller's cheques and money orders, persons collecting, holding, delivering or transmitting money (which captures money remitters), operators of gaming activity, collective investment scheme trustees and managers, and bureau de change operators
• Accountants, auditors, tax advisers, real estate agents, and dealers in precious stones, works of art or metals
• Trust and company service providers
• Motor vehicle dealers and clearing and forwarding agents
• Advocates, notaries, and independent legal professionals when handling client funds, real estate, or company transactions
• Pension fund managers, securities market intermediaries, financial leasing entities, microfinance service providers (other than Tier-4 community microfinance groups), and housing financing companies
• Auctioneers, and any other category the Minister specifies by Gazette notice

Mobile money flows are captured through the financial institution and money transmission categories, and the mutual evaluation discusses STR filing by mobile money operators directly — if your institution moves money through mobile channels, the reporting obligation applies in practice.

Differences from Kenya FRC in Practice

Tanzania and Kenya both run UNODC goAML, but the configurations differ in ways that matter to a compliance team operating in both markets:

• Threshold levels: Tanzania's cash and EFT reporting thresholds are USD 10,000 and USD 1,000 equivalents, while Kenya's CTR threshold is USD 15,000 — so threshold logic cannot be copied between country deployments.
• STR clock: Tanzania's STR deadline is 24 hours from forming suspicion — significantly tighter than Kenya's window. Compliance workflows tuned for Kenya will miss Tanzanian deadlines.
• Identifiers: Tanzania's STR form asks for each natural person's national identification number, but the FIU's goAML report configuration is not public, so confirm the identifiers and formats it requires rather than reusing Kenya's validation rules.
• Reporting cadence for CTRs: Tanzania's CTR filing window is set in working days from the transaction (see below) rather than a weekly batch convention.

---

CTR and EFT Thresholds in Tanzania

The USD 10,000 Cash Threshold

Under regulation 5(1)(a) of the Anti-Money Laundering (Electronic Funds Transfer and Cash Transaction Reporting) Regulations, 2019 (GN No. 420 of 2019), a reporting person must file a currency transaction report for any cash transaction of USD 10,000 or more, or its equivalent in Tanzanian shillings or any foreign currency, in a single transaction.

Two features of this rule deserve attention. First, the threshold is dollar-denominated: institutions must convert shilling and other-currency cash transactions to USD using the Bank of Tanzania official rate at the time of the transaction (regulation 5(4)) to test the threshold. Second, aggregation is explicit: under regulation 11, two or more related cash transactions within 24 hours that together total USD 10,000 or more are treated as a single transaction and must be reported.

The USD 1,000 EFT Threshold

Tanzania goes further than many peers: under regulation 5(1)(b), electronic funds transfers of USD 1,000 or more (or equivalent) in a single transaction are reportable to the FIU as EFT reports. For banks and payment providers this is a high-volume reporting obligation that is effectively impossible to discharge manually — automated extraction from core banking and payment switches, with built-in currency conversion and validation, is the only sustainable approach. The regulations define electronic funds transfers to include domestic transfers, but their reporting form and sanctions provision refer to international transfers, so confirm the domestic scope with the FIU.

Filing Window and Sector Carve-Outs

CTR and EFT reports must be submitted to the FIU not later than five working days after the date of the transaction (regulation 12), electronically or as otherwise required by the FIU. The regulations also contain tailored provisions for DNFBPs: advocates and notaries (regulation 6) and accountants (regulation 7) file CTRs when conducting specified activities, and gaming operators report specified cash movements (regulation 8).

Failure to comply carries administrative sanctions under regulation 13, including a fine of TZS 1 million to 5 million per day of default, imposed after the FIU or regulator gives written notice.

---

STR Filing Requirements

The 24-Hour Deadline

Section 18(1) of the Act (section 17(1) before the 2023 Revised Edition) requires a reporting person who suspects, or has grounds to suspect, that funds or property are proceeds of crime — or linked to money laundering, terrorism financing, or related offences — to act within twenty-four hours after forming that suspicion and, wherever possible, before the transaction is carried out: ascertain the details, prepare a report, and submit it to the FIU by secure means.

The 2022 AML Regulations phrase the deadline as "not later than twenty-four working hours after a reporting person becomes aware or has knowledge of a suspicious transaction" (regulation 21). Prudent compliance teams should build their process to the stricter reading: a 24-hour clock that starts when suspicion is formed. Either way, this is among the tightest STR windows in the region — there is no realistic margin for manual data assembly, narrative drafting from scratch, and multi-day internal review cycles.

The penalty provisions concentrate the mind. Failure to file an STR exposes an individual to a fine of up to TZS 5 million or imprisonment of up to five years, and a body corporate to a fine of up to TZS 10 million or three times the market value of the property involved, whichever is greater (section 18(4), formerly 17(4)). Tipping off is treated even more severely: fines from TZS 100 million to 500 million or five to ten years' imprisonment for individuals (section 22(2), formerly 20(2)).

Typologies the FIU Expects You to Detect

Tanzania's national risk assessment, which the Ministry of Finance says it reviewed and updated by April 2026, and the mutual evaluation set out the threats your monitoring should reflect; get the current findings for your sector from your supervisor or the FIU.

Monitoring rules in a Tanzanian deployment should therefore be calibrated to those findings; areas to test include:

• Mining and precious metals: cash-intensive activity around mining regions, transactions referencing gold or gemstone trading by unlicensed parties, and export-adjacent flows inconsistent with declared business
• Wildlife crime: payment patterns connected to trophy and ivory trafficking networks
• Real estate and hospitality: large or structured cash payments into property and hospitality businesses without a consistent economic profile
• Cash economy and informal value transfer: structuring below the USD 10,000 threshold, and hawala-style transfers
• Tax evasion and trade: invoicing patterns and cash deposits inconsistent with declared turnover

Narrative Quality

The mutual evaluation's criticism of Tanzanian reporting was not only about volume — it was about usable intelligence. STR narratives should state what was observed (amounts, dates, counterparties), why it is inconsistent with the customer's known profile, what the customer's explanation was and why it did not resolve the suspicion, and which typology the activity matches. Templates that produce "transaction appears suspicious" boilerplate create regulatory risk in both directions: they fail FIU quality expectations and they document a weak compliance process for the next inspection.

---

Tanzania-Specific Data and Validation Rules

Individual Identifiers

The STR form in the Schedule to the AML Regulations 2022 asks for the national identification number of each natural person involved (Part C), and regulation 20 requires each person's nationality, identification document number and a copy of the identification document. The FIU's goAML report configuration sits behind the portal's login, so confirm with the FIU which identifiers and formats your goAML XML subject records must carry before you build validation rules.

Entity Identifiers

For legal entities, Part D of the STR form covers the entity involved, including full details of any individual, partnership or trust holding 5% or more of the voting rights. Capture the registration and tax numbers you collect at onboarding exactly as issued, and confirm with the FIU which ones its goAML entity records require.

Penalties Snapshot

---

The Zanzibar Dimension

Tanzania is a union, and AML law reflects it. The Anti-Money Laundering Act applies to Mainland Tanzania; only Part II — which establishes the FIU and the National Multidisciplinary Committee — extends to Zanzibar (section 2). Substantive obligations for Zanzibar-licensed institutions come from Zanzibar's own statute: the Anti-Money Laundering and Proceeds of Crime Act, No. 10 of 2009 (AMLPOCA), with detailed rules in the AMLPOC Regulations, 2022, published in the Zanzibar Gazette on 13 July 2022.

In practice the regimes are aligned where it matters operationally — and both report to the same union FIU:

• STRs are subject to the same 24-hour rule
• Cash transactions of USD 10,000 or more, and EFTs of USD 1,000 or more, are reportable

For banking groups with branches on both sides of the union, the compliance architecture question is real: one reporting pipeline, two legal bases, one FIU. Your platform's country/jurisdiction profile needs to record the correct legal citation and document types per booking location while submitting through the same goAML channel.

---

Deploying an AML Platform for Tanzania

Country Profile Configuration, Not Custom Code

A well-architected reporting platform treats every FIU's specifics — thresholds, currencies, deadlines, identifier formats, document types, and XML validation rules — as configuration, not code. For Tanzania, the country profile should hold: the USD 10,000 cash and USD 1,000 EFT thresholds with Bank of Tanzania rate conversion, 24-hour related-transaction aggregation, the five-working-day CTR window, the 24-hour STR clock, the identifier rules the FIU confirms, and the goAML portal submission target — plus the Zanzibar variations where applicable.

When a requirement changes — as it did with the 2023 amendment regulations — the change is made in the country profile's configuration rather than in custom code.

Multi-Country East African Operations

For groups operating across Tanzania, Kenya, Uganda, Zambia, and Rwanda, a single platform with per-country profiles gives regional compliance leadership one view of filing rates, rejection rates, and open cases across all markets, while each country team works against its own FIU's rules. Tanzania's tight 24-hour STR window and high-volume USD 1,000 EFT reporting make it the market where automation pays back fastest.

Creodata's goAML platform holds each FIU's thresholds and validation rules as a country profile rather than custom code, and includes country profiles for Tanzania (FIU), Kenya (FRC), Zambia (FIC), Uganda (FIA) and Rwanda that administrators can configure.

---

Compliance Checklist for Tanzanian Reporting Persons

1. FIU Registration: Your institution is registered as an organisation on the FIU's goAML portal, and your compliance officer contact details are current.

2. CTR Detection: You detect cash transactions at or above USD 10,000 equivalent using Bank of Tanzania rates at transaction time, with 24-hour related-transaction aggregation across branches and channels.

3. EFT Reporting: Electronic funds transfers of USD 1,000 or more are extracted, converted, and reported automatically — manual handling at this volume is not feasible. You have the FIU's written position on whether domestic transfers are in scope.

4. Five-Day CTR Window: CTR and EFT reports reach the FIU within five working days of the transaction, with submission acknowledgements retained.

5. 24-Hour STR Process: Your alert-to-filing workflow — escalation, review, narrative, approval, submission — completes within 24 hours of suspicion being formed, and the timestamps prove it.

6. Narrative Quality: STR narratives are factual, specific, typology-linked, and reviewed before submission; boilerplate language is rejected at QA.

7. Identity Data: National identification numbers and identity document details, as the STR form and regulation 20 require, and the entity identifiers the FIU confirms — captured at onboarding, validated, and flowing into goAML XML without manual re-keying.

8. Typology Coverage: Monitoring rules reflect the current national risk assessment findings for your sector and cover the areas above: mining and precious metals, wildlife crime, real estate and hospitality, structuring, informal value transfer, and tax-evasion patterns.

9. Zanzibar Handling: If you operate in Zanzibar, your compliance documentation cites AMLPOCA 2009 and the AMLPOC Regulations, 2022, and routes reports to the same FIU pipeline.

10. Audit Trail: Every report has an immutable record of who detected, reviewed, approved, and submitted it, and every rejection has a documented correction-and-resubmission trail.

---

Frequently asked questions

What is the CTR threshold in Tanzania?

USD 10,000 or its equivalent in Tanzanian shillings or any foreign currency, in a single cash transaction, under regulation 5(1)(a) of the 2019 Electronic Funds Transfer and Cash Transaction Reporting Regulations. The threshold is dollar-denominated, so shilling transactions are converted at the Bank of Tanzania rate, and two or more related cash transactions within 24 hours that together reach USD 10,000 are treated as one (regulation 11).

Does Tanzania require reporting of electronic funds transfers?

Yes. Electronic funds transfers of USD 1,000 or more, or the equivalent, in a single transaction are reportable to the FIU as EFT reports under regulation 5(1)(b) — a high-volume obligation that is only practical with automated extraction from core banking and payment switches. Whether domestic transfers are included is unclear, because the regulations' reporting form and sanctions provision refer to international transfers, so confirm with the FIU.

What is the STR deadline in Tanzania?

Within twenty-four hours after forming the suspicion under section 18(1) of the Anti-Money Laundering Act, Cap. 423 R.E. 2023 (formerly section 17(1)), and wherever possible before the transaction is carried out. The 2022 Regulations phrase it as not later than twenty-four working hours; build the process to the stricter reading.

When must CTR and EFT reports be filed with the FIU?

Not later than five working days after the date of the transaction (regulation 12). Administrative sanctions for default include a fine of TZS 1 million to 5 million per day, imposed after written notice.

Which identifier does FIU Tanzania expect for individuals?

The STR form in the 2022 Regulations asks for each natural person's national identification number, and regulation 20 asks for the identification document number and a copy of the document. The FIU's goAML report configuration is not public, so confirm the identifiers it requires with the FIU.

Deploy Tanzania-Ready goAML Reporting with Creodata

Tanzania left the FATF grey list in June 2025, and its reporting rules leave little room for manual work: a 24-hour STR window, USD 1,000 EFT reports, and per-day fines for failing to report cash transactions and EFTs.

Creodata's goAML Reporting Platform generates schema-valid goAML XML from core-banking data, validates every report against the schema and business rules before submission, and keeps an immutable record of every report, amendment and filing.

For the screening, transaction monitoring, customer risk rating and case management that sit around those filings, see AML compliance software in Tanzania; for the goAML filing itself, see goAML reporting software for Tanzania.

See it on your own report types — request a demo.