UAE Banking Rules for Business Owners: 2026 Compliance Guide

The legal framework in one table

Rule 1: Banks must verify you before and after opening

Banks must identify and verify every customer, owner, and authorised signatory before they start a relationship. This is called KYC. It is not a one-off step. Banks must keep your information current and review it when your risk profile changes.

What to do: Tell your bank about changes in ownership, activity, address or signatories before they cause a mismatch in the bank's records.

Rule 2: Every owner with 25% or more must be disclosed

Banks must know who ultimately owns or controls your company. They usually define an Ultimate Beneficial Owner (UBO) as any person holding 25% or more. Anonymous accounts are not allowed, and complex holding chains trigger extra checks. Free zone companies are not exempt.

UBO records also need to stay current. Commentary on the UAE rules points to a short update window, often cited as 15 days after a change, and a record retention period of at least five years after deregistration. Check the exact deadline with your licensing authority.

What to do: Keep a simple ownership chart. If a company owns your company, be ready to trace ownership up to the individuals.

Rule 3: You must explain where the money comes from

Banks ask for source of funds, and sometimes source of wealth. The test is traceability. The bank must be able to follow the money from a legitimate, documented origin to your account.

What to do: Prepare the proof before you transfer large sums. Foreign-language documents may need certified translations.

Rule 4: Your account activity must match your licence

Banks compare three things: your trade licence, your business plan, and your real transactions. If your licence says IT consultancy and your account receives payments for general trading, expect questions. After the introduction of UAE corporate tax, banks also look harder at commercial substance, such as a real office, contracts and staff.

What to do: Describe your business honestly and keep your activity inside the licence.

Rule 5: Banks apply a risk-based approach

Banks sort customers into low, medium, and high risk. Higher risk means enhanced due diligence (EDD), senior sign-off, and longer processing. Common EDD triggers are:

•         politically exposed persons among owners or directors

•         owners linked to high-risk or sanctioned jurisdictions

•         cash-intensive businesses

•         complex or multi-layer ownership structures

•         offshore entities and virtual asset businesses

If you hold an offshore structure, see our offshore bank account consultant in Dubai page.

Rule 6: Banks monitor transactions and must report concerns

Banks monitor accounts continuously. When they see suspicious activity, they must file a suspicious transaction report with the FIU without delay. Under the 2025 framework, the FIU can freeze suspected funds for up to 30 days, and the Public Prosecutor can extend this. Penalties for serious non-compliance by regulated entities can reach AED 10 million.

What to do: Keep contracts and invoices for unusual or large payments. A quick, documented answer to a bank query often ends the matter.

Rule 7: Sanctions screening applies to every payment

Banks screen customers and payments against the UAE National Sanctions List and United Nations lists. A match, or even a close name, can pause a payment.

What to do: Know your customers and suppliers, and avoid counterparties in sanctioned jurisdictions.

Rule 8: Expect in-person verification

Most banks want at least one authorised signatory to attend with original documents. Some accept a notarised and attested Power of Attorney, but acceptance varies by bank and even by branch. Confirm before you pay for the paperwork.

Overseas owners should read our guide to the non-resident bank account consultant in Dubai service. Owners who also need their own accounts can see our personal bank account consultants in Dubai.

Rule 9: Minimum balances and fees depend on the bank

There is no single UAE minimum. Corporate thresholds are often quoted between AED 25,000 and AED 500,000, and some banks advertise lower or no minimums on selected products. Digital banks can be faster, but they still apply full KYC.

For a full walkthrough of opening a company account, see our corporate bank account opening in Dubai page.

How long does a corporate account take?

Why applications are rejected, and accounts get closed

1.       Vague or unproven source of funds.

2.       Ownership that the bank cannot verify.

3.       A business description that does not match the licence.

4.       Expired or unattested documents.

5.       Links to high-risk jurisdictions.

6.       Slow or incomplete answers to bank queries.

7.       Account activity that no longer matches what you declared.

If a bank declines you, ask for the reason, fix the gap, and apply again with a stronger file.

Annual compliance checklist for business owners

•         Review your UBO chart and update the bank on any change

•         Check that your trade licence is valid and the activity still matches your banking

•         Renew expired passports, Emirates IDs, and tenancy or Ejari documents

•         Keep invoices and contracts for large or unusual transactions

•         Confirm authorised signatories are current

•         Review account fees and balance requirements

•         Respond to bank review requests within the stated deadline

Read the regulator's guidance

The Central Bank of the UAE publishes the guidance that banks follow. Read the official CBUAE Guidance for Licensed Financial Institutions on Customer Due Diligence and Know Your Customer to see what your bank must ask for and why.