DNFBP Registration in Pakistan (2026)

If your business is a real estate agency, a jewellery shop, or an accounting practice, you may be legally required to register as a DNFBP with the FBR under Pakistan's anti-money-laundering rules. This guide explains who must register, the documents you need, the step-by-step FBR IRIS process, and the AML/CFT duties that follow.

By the Filing.pk Tax Team · Reviewed by a Filing.pk tax consultant · Last updated: July 2026

What is a DNFBP?

DNFBP stands for Designated Non-Financial Businesses and Professions. These are businesses outside the banking and financial sector that handle high-value transactions and could be misused for money laundering or terrorist financing if left unmonitored. Because of this risk, Pakistan, in line with FATF (Financial Action Task Force) requirements, brought these sectors under formal AML/CFT supervision.

The Federal Board of Revenue (FBR) is the designated AML/CFT Regulatory Authority for several of these sectors. If your business falls in scope, registration is not optional, it is a legal obligation under the Anti-Money Laundering Act, 2010 and the AML/CFT rules for DNFBPs.

Who must register as a DNFBP with FBR in 2026?

FBR supervises three main DNFBP categories. You are required to register if you operate as any of the following:

Note: Some professions have their own AML/CFT regulators. Chartered accountants who are ICAP/ICMAP members are supervised by their institutes, and lawyers are supervised by the relevant bar councils. FBR covers the sectors listed above. If you are unsure which regulator applies to you, ask Filing.pk before registering.

Why DNFBP registration matters

Registering isn't just a formality. It protects your business from penalties and keeps you eligible to operate. In practice, DNFBP compliance means you:

• Are legally recognised and can continue facilitating high-value transactions.
• Avoid monetary fines, account suspensions and legal action for non-registration.
• Build trust with banks and clients, who increasingly ask for AML compliance.
• Stay ready for FBR questionnaires and inspections without scrambling.

How to register as a DNFBP with FBR (step by step)

Registration is completed online through the FBR IRIS portal. The process is:

1. Log in to FBR IRIS at iris.fbr.gov.pk using your NTN and password. If you don't have an NTN yet, register for one first.
2. Open the registration form. Select “Form of Registration as DNFBP filed voluntarily.”
3. Confirm your details. Verify your NTN or registration number and select the relevant tax year.
4. Upload the required documents (listed below).
5. Submit the form for FBR verification.
6. Receive your DNFBP certificate. FBR typically processes the application in 3 to 7 working days, after which your DNFBP registration certificate is issued.

What documents are required for DNFBP registration?

• Valid NTN (National Tax Number) of the business or individual
• CNIC of the owner / proprietor / directors
• Business registration certificate (SECP incorporation, partnership deed, or sole-proprietor letterhead as applicable)
• Office / business address proof
• Bank account details of the business

What are your obligations after registration?

DNFBP registration is the start, not the end. Once registered, you must maintain an ongoing AML/CFT programme:

What is goAML and do I need it?

goAML is the reporting system used by Pakistan's Financial Monitoring Unit (FMU). After you register as a DNFBP, you use goAML to file Suspicious Transaction Reports (STRs) and Cash Transaction Reports (CTRs). Registering on goAML with the FMU is a separate step from your FBR DNFBP registration, and it is how you meet your ongoing reporting duty. If you never file a report, you must still be registered and ready to when a reportable transaction occurs.

Sector-by-sector compliance checklist

The exact AML/CFT duties look a little different depending on which DNFBP sector you're in. Use the checklist for your business:

Real estate agents & developers

• Register as a DNFBP on FBR IRIS and obtain your certificate
• Identify and verify both buyer and seller (CNIC/NICOP, proof of address) before closing a deal
• Establish the source of funds for transactions of Rs 2 million or more
• Screen parties against UN and domestic proscribed-persons lists (NACTA Schedule IV)
• Keep signed transaction and identity records for at least five years
• File an STR with the FMU (via goAML) on any suspicious deal, for example an unexplained all-cash purchase well above market value

Dealers in precious metals & stones (jewellers)

• Register as a DNFBP and display your certificate
• Apply customer due diligence on any cash transaction of Rs 2 million or more (single or linked)
• Record buyer identity and the item/value for reportable sales
• Watch for structuring, a customer splitting one large purchase into several just-under-threshold cash payments
• Retain records for five years and file STRs/CTRs where required

Accountants (non-ICAP/ICMAP members)

• Register as a DNFBP with FBR
• Apply CDD when you manage client money, form companies, or handle real-estate/asset transactions for clients
• Assess client risk before onboarding and refuse or report where risk can't be managed
• Maintain an internal AML/CFT policy and train staff
• Report suspicious client activity to the FMU

Worked example: customer due diligence on a property sale

Seeing CDD in action makes the obligation concrete. Suppose a real estate agent is facilitating the sale of a house for Rs 8 million, paid partly in cash:

1. Identify the parties. The agent collects the CNIC of both buyer and seller and verifies each against the original.
2. Understand the transaction. Sale value is Rs 8 million, well above the Rs 2 million threshold, so full CDD applies.
3. Establish source of funds. The buyer says Rs 3 million is cash from “savings” but provides no bank trail. That's a red flag.
4. Screen the names. The agent checks both parties against the proscribed-persons lists, no match, but the cash concern remains.
5. Decide and record. The agent keeps a written file of IDs, the sale agreement and notes on the cash concern for five years.
6. Report if suspicious. Because a large cash component can't be explained, the agent files a Suspicious Transaction Report with the FMU through goAML, even though the sale itself may still complete.

What happens if you don't register? (Penalties)

Non-compliance carries real consequences. Under the Anti-Money Laundering Act, 2010, FBR can impose monetary and administrative penalties on the business as well as its directors, senior management and officers. Failing to register, ignoring an FBR AML/CFT questionnaire, or not responding within the given timeframe can result in fines, restrictions on business operations, account suspensions and possible legal action, with the severity depending on the breach.

If you have received an FBR notice or DNFBP questionnaire and aren't sure how to respond, don't ignore it. Talk to Filing.pk and we'll handle the response for you.

Need help registering as a DNFBP?

Filing.pk handles FBR registration, goAML/FMU setup, AML/CFT policy, and FBR notices end to end, all online and handled by qualified consultants.

Frequently asked questions

Is DNFBP registration mandatory in Pakistan?

Yes. If your business is a real estate agent/developer, a dealer in precious metals and stones (jeweller), or an in-scope accountant, registration with FBR under the AML/CFT framework is a legal requirement, not a voluntary choice.

Is there a fee for DNFBP registration with FBR?

FBR does not charge a government fee for the DNFBP registration itself on IRIS. Professional service charges apply only if you hire a consultant such as Filing.pk to handle the registration and compliance setup for you.

How long does DNFBP registration take?

FBR generally processes a complete DNFBP application within 3 to 7 working days, after which the DNFBP certificate is issued.

What is the transaction threshold for DNFBPs?

For real estate agents and jewellers, transactions of Rs 2 million or more trigger customer due diligence and record-keeping obligations under the AML/CFT rules.

What is the difference between DNFBP registration and goAML?

DNFBP registration on FBR IRIS enrols your business as a supervised reporting entity. goAML is the FMU's separate reporting portal you use afterwards to file suspicious and cash transaction reports.

Who regulates DNFBPs in Pakistan?

FBR is the AML/CFT regulator for real estate agents, jewellers and certain accountants. ICAP/ICMAP regulate their member accountants, and bar councils regulate lawyers.

How long must DNFBPs keep records?

DNFBPs must retain customer identity and transaction records for at least five years, so they can be produced if FBR or the FMU requests them.

Does filing a Suspicious Transaction Report stop the transaction?

No. An STR records that you met your legal reporting duty; it is not an accusation and does not automatically cancel the deal. Failing to file when a transaction is genuinely suspicious is what creates legal liability.

This article is general information, not legal or tax advice. AML/CFT rules, thresholds and FBR procedures can change, so please verify on the official FBR and FMU sites. Contact us for help with your own situation.