Opening a UAE Corporate Bank Account: How to Structure the KYC Package

The principal federal AML/CFT/CPF framework is contained in Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing and Cabinet Resolution No. (134) of 2025 regarding its Executive Regulations. Cabinet Resolution No. (134) of 2025 has been effective since 14 December 2025. The Central Bank of the UAE (CBUAE) also maintains detailed requirements and guidance for Licensed Financial Institutions concerning CDD/KYC, customer risk assessment, beneficial ownership, Source of Funds, Source of Wealth and expected account activity. 

A properly structured KYC package is intended to provide a coherent and verifiable picture of the company. It should enable the bank to understand who owns and controls the entity, what business it conducts, why it requires a UAE bank account, where the relevant funds originate and what activity is expected through the account. A strong application can reduce the need for additional clarification, but it does not guarantee account opening. 

How Do UAE Banks Assess Corporate Account Applicants? 

UAE banks apply a risk-based approach. There is no single customer risk model that automatically assigns the same risk category to every corporate applicant. Each Licensed Financial Institution must maintain its own customer risk methodology and customer acceptance policy within the applicable regulatory framework. 

For a corporate customer, the bank verifies the entity's legal form and constitutional documents, principal place of business, relevant senior management, persons authorised to operate the account, the ownership structure down to natural-person level, the nature of the business and the purpose of the banking relationship. For foreign entities, additional certified, notarised or authenticated documents may be required depending on the nature and origin of the documentation and the applicable risk assessment. 

The bank must also establish an expected transaction profile. Relevant information includes the products and services expected to be used, anticipated transaction types and volumes, geographic exposure, counterparties and the manner in which the account is intended to operate. The resulting profile provides a baseline against which actual activity can subsequently be assessed. 

A valid trade licence is therefore an essential corporate document, but it does not replace the bank's CDD/KYC assessment. 

How Should Ownership and UBO Information Be Documented? 

Disclosure of ownership and control is a core part of corporate KYC. The bank must identify the Ultimate Beneficial Owners (UBOs) and take appropriate measures to verify their identity using reliable information or sources. 

For a legal person, the CBUAE framework uses as its primary ownership criterion natural persons who, individually or jointly, hold a controlling ownership interest of at least 25%. Where no such individual can be identified through ownership, the bank must consider who exercises control and, where the applicable conditions are met, identify the relevant senior management official. In higher-risk cases, the bank may intensify its review below the 25% threshold where necessary to establish who genuinely owns or controls the customer. 

A multi-layer holding structure, trust arrangement or nominee relationship does not automatically prevent account opening. It may, however, increase the level of risk and the depth of required due diligence. An unusual or excessively complex ownership structure and the use of nominee shareholders are expressly identified as examples of circumstances that may warrant Enhanced Due Diligence (EDD). 

The KYC package should therefore allow the bank to trace the ownership chain through the corporate records of each intermediate entity to the relevant natural persons. If the bank cannot reliably identify the beneficial owners or complete the required CDD/KYC measures, it should not onboard the customer. 

What Is the Difference Between Source of Wealth and Source of Funds? 

Source of Funds (SoF) and Source of Wealth (SoW) address different issues and should not be treated as interchangeable concepts. 

Source of Funds identifies the direct origin of the money used to fund the account, both initially and in relevant subsequent transactions. Depending on the circumstances, supporting evidence may include bank statements, financing or loan agreements, documents evidencing the sale of an asset or documentation relating to a specific commercial transaction. 

Source of Wealth identifies the sources that generated or materially contributed to the overall net worth of the customer or relevant beneficial owner. These may include business activities, the sale of a company or other assets, investment income, employment or professional income, inheritance or other demonstrable sources of wealth. 

The depth of verification is risk-based. The CBUAE framework incorporates SoF and SoW into customer risk profiling, while higher-risk relationships require more rigorous collection and corroboration of this information. A bank may also adopt policies requiring documentary SoF or SoW evidence from lower or medium-risk customers depending on its risk management framework. 

There is therefore no single universal set of SoF and SoW documents that is mandatory for every corporate application. The evidence should reflect the particular ownership structure, capital source, beneficial owners and risk profile. 

How Should the Business Model and Economic Rationale Be Documented? 

A bank must understand the nature of the customer's business and the purpose of the banking relationship. Constitutional documents and the trade licence demonstrate legal existence and licensed activities, but they may not be sufficient on their own to explain how the business is expected to operate in practice. 

A Company Profile or Business Plan may be used to explain the products or services, target customers, principal suppliers, markets, anticipated payment corridors and the commercial rationale for conducting the relevant business through the UAE. These documents are not a universally prescribed regulatory filing in a fixed form, but they can assist the bank in understanding and corroborating the stated business model. 

Existing activity may be supported by contracts, invoices, purchase orders, framework agreements, bank statements, financial statements and other commercial evidence. For a newly incorporated company without an operating history, a realistic business plan, identifiable commercial relationships or negotiations and the relevant professional background of the founders and managers may be particularly useful. 

Where stated expected activity appears inconsistent with the purpose of the account or materially different from the typical activity of the relevant customer type, CBUAE guidance requires the bank to undertake further analysis and obtain sufficient explanations and supporting business or financial evidence. 

Which Circumstances Can Trigger Enhanced Due Diligence? 

Enhanced Due Diligence does not mean that the bank has established unlawful conduct. EDD applies where the risk profile requires more intensive identification, verification and monitoring. 

Examples identified by the CBUAE as potentially higher-risk include unusual or excessively complex ownership structures, nominee shareholders, cash-intensive businesses, complex operations without a clear economic objective, frequent payments from unrelated third parties and activity involving jurisdictions presenting elevated ML/TF/PF risks. 

Geographic exposure is also an integral part of customer risk assessment. Banks must consider jurisdictions in which the customer is registered or operates, the jurisdictions of counterparties and the countries with which transactions are expected. Relevant higher-risk indicators may include jurisdictions identified by the Financial Action Task Force (FATF) as high risk or under increased monitoring, countries with weaker AML/CFT controls and jurisdictions affected by applicable sanctions regimes. 

A material mismatch between the trade licence, stated business model and expected transaction profile also requires scrutiny. Significant international commercial flows should be consistent with the licensed and actual business activity and capable of being supported by appropriate commercial evidence. 

These factors are not evidence of unlawful conduct in themselves. They affect the level of CDD or EDD and the type and depth of documentation required. 

How Should a Corporate KYC Package Be Structured? 

There is no single mandatory KYC package that applies identically across all UAE banks. The scope of information depends on the customer, ownership structure, business model, anticipated transactions, geographic exposure and the risk methodology of the particular financial institution. 

In practical terms, the documents should tell one consistent story. Constitutional documents and the trade licence should align with the stated activity. The UBO structure should be traceable. The stated SoF and SoW should be consistent with the supporting evidence. Expected turnover, transaction jurisdictions and counterparties should correspond to the business model and purpose of the account. 

Where documents contain conflicting information, the bank must investigate and resolve the discrepancy. Unresolved inconsistencies, refusal to provide required information, apparently false or misleading documents or an inability to identify the UBO may lead to rejection of the application or, for an existing customer, restriction and termination of the relationship in accordance with the applicable requirements. Where the relevant threshold of suspicion is met, the circumstances must also be considered for suspicious activity or transaction reporting. 

Can a UAE Bank Refuse to Open a Corporate Account? 

Company incorporation does not create an automatic entitlement to a positive onboarding decision. The bank must satisfy its regulatory CDD/KYC obligations and applies a documented customer acceptance policy and institutional risk appetite. A financial institution may determine that particular customer categories or risk profiles fall outside the level of risk it is prepared to accept. 

Where a bank cannot complete the required CDD/KYC measures or cannot reliably establish the identity of the customer and its beneficial owners, it should not establish the relationship. Where a relationship already exists, inability to complete the required due diligence may result in the relationship being terminated. 

A well-prepared KYC package therefore does not guarantee account opening. Its purpose is to provide clear, consistent and verifiable information that enables the bank to conduct its regulatory assessment without avoidable information gaps or contradictions. 

Legal Assistance with Corporate KYC Packages 

Vassilev & Chisuse Law Firm provides legal assistance with structuring, assembling and conducting a preliminary legal review of corporate documentation and KYC packages for international business structures. The assistance may include reviewing the consistency between the scope of the trade licence, contracts with counterparties, the beneficial ownership structure and documents evidencing the source of funds. 

This material is provided for general information purposes only. It does not constitute individual legal, tax, financial, accounting or investment advice and does not guarantee the opening of a bank account. The decision to establish a banking relationship depends on the applicable regulatory requirements, the particular facts and circumstances, the bank's risk assessment and its customer acceptance policy.