UAE Beneficial Ownership Rules: UBO Requirements, Deadlines and Penalties

As of the present moment, the principal federal framework is Cabinet Resolution No. (109) of 2023 Regulating the Real Beneficiary Procedures. It repealed the previous Cabinet Resolution No. (58) of 2020. Administrative penalties are governed by Cabinet Resolution No. (132) of 2023, which repealed the former penalty regime under Cabinet Resolution No. (53) of 2021. 

Beneficial ownership information is also material to banking relationships. UAE financial institutions are required to identify and verify the beneficial owners of legal entity customers and to keep that information current as part of ongoing Customer Due Diligence (CDD). 

Which Companies Are Subject to the Federal UAE UBO Framework? 

Cabinet Resolution No. (109) of 2023 applies to legal persons licensed or registered in the UAE, including those established in non-financial free zones. The federal framework excludes companies wholly owned by the Federal or a Local Government and companies wholly owned by those government-owned companies. Financial Free Zones are also excluded, and the Resolution contains a separate exclusion for a Government Partner as defined under the legislation. 

The Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM) are Financial Free Zones and therefore fall outside the general federal regime under Cabinet Resolution No. (109) of 2023. They maintain separate beneficial ownership frameworks. DIFC has its own Ultimate Beneficial Ownership Regulations, while ADGM applies the Beneficial Ownership and Control Regulations 2022 as subsequently amended, including amendments introduced in 2026. 

The first step in any UBO review should therefore be to identify the relevant Registrar and the beneficial ownership regime applicable to the entity. The federal rules should not be applied mechanically to an entity established in DIFC or ADGM. 

How Is a Beneficial Owner Identified? 

A beneficial owner under the federal framework is a natural person. An intermediate company, including a foreign holding company, does not replace the requirement to trace ownership and control to the relevant individual. 

The first test identifies a natural person who ultimately owns or controls, directly or indirectly, at least 25% of the legal person's capital or holds at least 25% of its voting rights. Where the ownership structure contains several corporate layers, the analysis must follow the chain through intermediate entities or arrangements to the natural person who ultimately owns or controls the entity. 

Where no natural person can be identified through the ownership test, or where there is doubt as to whether the person identified is the ultimate controlling owner, the analysis moves to control exercised through other means. Such control may arise, for example, through the right to appoint or dismiss a majority of the directors. 

Where no natural person can be identified after applying the ownership and other control tests, the natural person holding the position of Senior Management official is treated as the beneficial owner. The Registrar is also required to apply a risk-based approach, particularly in relation to complex ownership structures. 

The 25% threshold should therefore not be treated as the only UBO test. An individual holding less than 25% may still be the relevant beneficial owner where that person exercises ultimate control through other means. 

Which UBO Registers Must a Company Maintain? 

The federal framework requires two principal corporate registers: the Real Beneficiary Register and the Partners or Shareholders Register. Cabinet Resolution No. (109) of 2023 does not establish a separate third "nominee director register" under the general federal regime. Instead, it creates specific disclosure obligations for Board Nominee Members and requires the relevant information to be recorded in accordance with the rules governing the Partners or Shareholders Register. 

The Real Beneficiary Register must record prescribed information for each beneficial owner, including full name, nationality, date and place of birth, address, passport or identification details, the grounds and date on which the individual became a beneficial owner and, where applicable, the date on which that status ceased. 

The Partners or Shareholders Register records the shareholders or partners, the number and class of shares or interests held, associated voting rights and the date on which the person became a shareholder or partner. Where a partner or shareholder acts as a trustee or Board Nominee Member, the register must also contain the information required by the Resolution. 

A manager or board member acting as a Board Nominee Member must notify the legal person of that capacity and provide the required information within 15 days of acquiring it. Changes in that information and termination of nominee status are also subject to a 15-day notification requirement. 

What Are the Deadlines for UBO Registration and Updates? 

For a newly established legal person, the Real Beneficiary Register must be created within the applicable 60-day period. The data contained in the Real Beneficiary Register and the Partners or Shareholders Register must also be submitted to the relevant Registrar within the periods prescribed by Cabinet Resolution No. (109) of 2023, including the 60-day period applying from licensing and registration of a newly established legal person. 

The Real Beneficiary Register must be updated within 15 days from the date on which the company becomes aware of a relevant change. The Partners or Shareholders Register is similarly required to record amendments or changes within 15 days from the date on which the legal person becomes aware of them. 

Separate from the internal register update, any amendment or change to information falling within the Resolution must be submitted to the Registrar within 15 days from the date of the amendment or change. Where the Registrar requests additional information, the legal person must provide it within 14 days of the request. 

UBO compliance is therefore an ongoing obligation. Share transfers, changes in voting rights, the creation or termination of other means of control and changes to an existing beneficial owner's identifying information should be reviewed promptly. 

What Are the Main UBO Compliance Risks? 

A fundamental risk is stopping the ownership analysis at the level of an intermediate legal entity. In a holding or other multi-layer structure, the review must continue until the relevant natural persons who ultimately own or control the company have been identified. 

A second risk is treating the 25% threshold as the only test. Where no natural person reaches the threshold, or where formal ownership does not identify the person exercising ultimate control, the analysis must consider control through other means and, where necessary, the Senior Management criterion. 

Nominee arrangements also require particular attention. Cabinet Resolution No. (109) of 2023 contains specific notification obligations where a manager or board member acts under the directions, instructions or will of another person, including notification of the acquisition, alteration and termination of nominee status. 

A further practical risk arises where corporate beneficial ownership information is inconsistent with the data held by a bank or another financial institution. Such a discrepancy does not automatically establish a breach or require an account to be blocked. However, UAE financial institutions must maintain current beneficial ownership information and investigate material inconsistencies through their CDD/KYC procedures. 

What Penalties Apply to UBO Violations? 

Administrative penalties are governed by Cabinet Resolution No. (132) of 2023. The Resolution repealed Cabinet Resolution No. (53) of 2021 and establishes separate sanctions for different breaches of Cabinet Resolution No. (109) of 2023. 

The sanctions vary according to the nature and repetition of the violation. For example, failure to create and maintain the Real Beneficiary Register is subject to a written notice for the first violation, an AED 50,000 fine for the second violation and an AED 100,000 fine for the third violation. Failure to update the Real Beneficiary Register is subject to a different penalty scale, reaching AED 30,000 for a third violation. 

Different fines apply to other categories of non-compliance, with some penalties also reaching AED 100,000. In addition to the fine applicable to a third-time violation, the Registrar has the power to suspend the commercial licence and close the commercial premises of the violating legal person until the fine has been paid and the violation has been rectified. 

It is therefore not legally precise to describe the regime simply as imposing "fines of up to AED 100,000". The actual consequence depends on the particular breach, its repetition and the relevant entry in the statutory penalty schedule. 

How Can UBO Discrepancies Affect a Bank Account? 

UAE banks and other licensed financial institutions conduct their own beneficial ownership verification. This forms part of the CDD/KYC framework and includes identification and verification of beneficial owners, understanding the ownership and control structure and periodically or event-driven updating customer information. 

A discrepancy between corporate filings and information held by a bank does not automatically result in an account freeze or a suspicious transaction report. The financial institution must assess and resolve the inconsistency through its risk-based CDD process and may apply Enhanced Due Diligence where the circumstances indicate a higher risk. 

Where required CDD/KYC information cannot be obtained or verified, a customer provides materially inconsistent, false or misleading information, or discrepancies cannot be resolved, current Central Bank of the UAE guidance requires the financial institution not to establish or maintain the relevant relationship. Where an account already exists, restrictions may be applied and the relationship may ultimately be terminated in accordance with the applicable requirements. Where the relevant suspicion threshold is met, the circumstances must also be considered for a Suspicious Transaction Report or Suspicious Activity Report to the UAE Financial Intelligence Unit. 

Corporate UBO records and banking KYC information should therefore remain substantively aligned, particularly following a change in ownership or control. 

How Should a Business Organise UBO Compliance? 

Effective UBO compliance begins with tracing the complete ownership and control structure to the relevant natural persons. In complex international structures, the analysis should not stop at the first foreign holding company. 

Corporate documentation should allow ownership, voting rights and other means of control to be established consistently. The Real Beneficiary Register and Partners or Shareholders Register must be updated following relevant changes, and the appropriate Registrar must be notified within the applicable 15-day period. 

Following a change in the corporate structure, the company should also determine whether its banking KYC information remains current. Maintaining consistency between corporate and banking records reduces the risk of unresolved discrepancies during ongoing financial institution reviews. 

For entities established in DIFC or ADGM, the analysis must be conducted under the applicable specialist framework rather than the general federal regime. ADGM, for example, continues to maintain and develop its separate beneficial ownership framework and introduced further transparency-related amendments in 2026. 

Legal Assistance with UAE UBO Compliance 

Vassilev & Chisuse Law Firm advises on UAE corporate and banking compliance matters, including company establishment, corporate restructurings and reviews of existing UBO structures. Legal assistance may include analysis of ownership and control chains, identification of beneficial owners, review of UBO obligations and assessment of consistency between corporate and banking documentation. 

This material is provided for general information purposes only. It does not constitute individual legal, financial, tax or investment advice and does not create a lawyer-client relationship. The applicable regime and specific obligations must be determined by reference to the entity's legal form, place of registration, ownership structure and particular facts and circumstances.