A guide for founders whose UAE corporate account application was declined, covering the legal reasons banks refuse, why they will not explain, and the escalation route most SMEs do not know they have.
A UAE bank that cannot complete customer due diligence on your company is legally prohibited from opening the account. Article 14(1) of Cabinet Resolution No. 134 of 2025 prohibits financial institutions from establishing or continuing a business relationship, or executing a transaction, where they are unable to apply customer due diligence measures, and requires them to consider filing a suspicious transaction report. The refusal is a compliance obligation, not a commercial preference, which is why arguing with the relationship manager rarely changes it.
This guide sets out the legal grounds banks actually apply, the ownership-disclosure rule that drives most document requests, the commercial factors that sit behind the compliance language, what to fix before reapplying, and how a sole proprietor or an SME can escalate to the Central Bank’s ombudsman. It is the counterpart to our guide on opening a business bank account in the UAE, which covers the application itself.
Rejection Is Usually Mandatory, Not Discretionary
Where a bank cannot verify who ultimately owns and controls your company, or cannot satisfy itself about the source of the funds, the law removes its discretion. It must decline.
The obligation runs from the top. Article 19 of Federal Decree-Law No. 10 of 2025 requires financial institutions to implement customer due diligence and continuous monitoring, to refrain from opening or maintaining accounts under anonymous, fictitious, alias or numbered names, and to retain the information obtained. Article 6 of the Executive Regulations requires the identity of both the customer and the beneficial owner to be verified before or during the establishment of the relationship.
The consequence of getting it wrong is severe for the bank. Article 17(1)(b) of the same decree-law allows the supervisory authority to impose an administrative fine of not less than AED 10,000 and not exceeding AED 5,000,000 for each violation, alongside activity suspension and licence revocation. Against that exposure, a small company with an unclear ownership chain is not worth the file.
What actually happens inside the bank
Your relationship manager collects the documents and passes them to a compliance team you never meet. That team runs screening against sanctions and adverse-media databases, maps the ownership chain to its ultimate natural persons, and scores the file. Where the score crosses a threshold, enhanced due diligence applies and the file needs senior management approval before the relationship can begin. The relationship manager who told you it looked fine was reporting on the documents, not on the decision.
The Legal Definition That Doubles as the Rejection Checklist
Cabinet Resolution No. 134 of 2025 defines “High-Risk Customers” and the definition reads as a list of the exact profiles that get declined. This is the most useful paragraph in UAE banking regulation for a founder trying to understand a rejection, and it is rarely quoted.
The regulation defines high-risk customers as those who present heightened risk due to their personal profile, activities, the nature of the business relationship, or geographic location, and lists:
- Customers from high-risk countries
- Non-residents not holding a State-issued identity card
- Customers with complex ownership structures
- Customers conducting complex or economically or legally unjustified transactions
- Customers engaging in large cash transactions
- Transactions with unknown third parties
- Any other high-risk transactions as determined by the institution or the supervisory authority
Read that list against your own application. A holding company in one jurisdiction owning an operating company in another, with a shareholder who has no Emirates ID and a business model that moves money between counterparties the bank has never heard of, hits four of the seven. Nothing about it is illegal. It is simply a file that costs more to approve than the account will ever earn.
Separately, Article 23 of the Executive Regulations requires enhanced due diligence proportionate to the risk for any relationship with a person from a country identified as high-risk or with deficiencies in its anti-money-laundering systems. If a director, a shareholder or a major customer sits in such a country, the file escalates automatically regardless of how clean the business is.
The 25 Percent Rule and Why They Keep Asking About Shareholders
Article 10 of the Executive Regulations requires the bank to identify the natural person who ultimately owns a controlling interest of 25 percent or more in the company, and to keep going up the chain until it finds one.
The test runs in three stages, in order:
- Identify the natural person who ultimately owns, individually or jointly, an actual controlling ownership interest or shares of 25 percent or more.
- Where there is doubt about that person, doubt that they are the beneficial owner, or where no natural person exercises control through ownership, identify the natural person who exercises legal or actual control by any other means, directly or indirectly.
- Where no natural person is identified under either test, identify the relevant natural person holding a senior management position.
This is why a bank asks for passport copies of people who are not on your UAE trade licence. If your UAE company is owned by an offshore vehicle, the trade licence names the vehicle, and the bank still has to reach the human being at the end of the chain. Every additional layer is another set of certified, attested corporate documents, and a layer the bank cannot verify is a file it must decline under Article 14(1).
Why Nominee Structures Make the Problem Worse
A nominee shareholder is expressly not treated as the beneficial owner. Using one does not remove the disclosure requirement; it adds a layer the bank must unpick and moves your file into the complex-ownership-structure category.
Cabinet Resolution No. 134 of 2025 defines a nominee shareholder as a person who exercises voting rights in accordance with the nominator’s instructions or receives dividends on their behalf, and states that they shall not be deemed the beneficial owner by virtue of holding shares in a nominee capacity. The definition of nominee director is equivalent.
Founders who were sold a nominee arrangement as a privacy feature usually discover it at account opening. The bank must still identify the nominator, and the presence of the arrangement is itself a risk indicator. If a corporate service provider structured your company that way, be ready to explain the commercial reason for it in writing.
The Commercial Reasons Behind the Compliance Language
Not every rejection is a compliance rejection. Banks also decline on economics, and the two get communicated in the same neutral wording.
| Trigger | What the bank is actually assessing | What helps |
|---|---|---|
| No physical office | Whether the business has substance in the UAE or exists only as a licence | A real tenancy contract and Ejari, staff on the visa file, utility accounts |
| No UAE trading history | Whether projected turnover is evidenced or aspirational | Signed contracts, purchase orders, invoices, audited accounts from the parent |
| General trading activity | Breadth of permitted activity makes transaction monitoring harder | A narrow activity list matching what you actually do, and named counterparties |
| Cash-intensive model | Large cash transactions are a listed high-risk indicator | Documented cash-handling controls, POS records, a realistic cash forecast |
| Virtual address only | Whether the registered address is shared with hundreds of other licences | Understanding the trade-off before choosing between a virtual office and a flexi-desk |
| Digital-asset activity | Whether the activity is licensed by the relevant regulator | The correct licence, and clarity on where the crypto regulatory perimeter sits |
| Minimum balance | Whether the relationship is profitable at the tier you applied for | Applying for a product tier you can actually maintain |
The substance point deserves emphasis. A licence bought purely to obtain residence, with no lease, no staff and no local counterparties, is a shell profile to a compliance officer regardless of the owner’s intentions. Choosing which free zone or mainland route to license in partly determines how that file will read.
Why the Bank Will Not Tell You the Reason
Where the refusal relates to a suspicion rather than a missing document, disclosing the reason risks tipping off the customer. The law routes that suspicion to the Financial Intelligence Unit instead.
Article 18(1) of Federal Decree-Law No. 10 of 2025 requires financial institutions that suspect, or have reasonable grounds to suspect, that funds represent proceeds of crime to notify the Unit without delay and in detail, without invoking confidentiality provisions. Article 14(2) of the Executive Regulations goes further: where an institution suspects a crime, it may refrain from applying due diligence measures altogether if it has reasonable grounds to believe those measures would alert the customer, and must report the reasons to the Unit.
That is the structural reason for the wall of politeness. Staff are not being obstructive. In a case involving suspicion they are prohibited from explaining, and in most cases they are simply not authorized to disclose the internal scoring. The practical consequence is that you have to diagnose the rejection from your own file rather than from their answer.
One thing this does not mean is that you have been reported. Most rejections are document and risk-appetite decisions with no suspicion component at all. There is also no public blacklist of rejected applicants: each bank makes its own assessment, which is why a file declined by one institution is sometimes approved by another with a different risk appetite.
What Enhanced Due Diligence Will Ask For
If your file is escalated, the regulations set out the measures the bank may apply. Knowing the list lets you prepare the answers instead of reacting to them.
The Executive Regulations list enhanced due diligence measures including obtaining and verifying additional information on the customer’s identity and occupation and on the beneficial owner and the amount of funds; obtaining additional information on the purpose of the relationship and the reasons for expected transactions; updating due diligence information more regularly; taking reasonable measures to identify the source of funds and the source of wealth of both the customer and the beneficial owner; increasing ongoing monitoring; carrying out the first payment through an account in the customer’s own name at an institution subject to equivalent standards; and obtaining senior management approval to commence or continue the relationship.
Two of those explain requests founders find intrusive. Source of wealth is not the same question as source of funds: the bank wants to know how the shareholder accumulated their money overall, not just where this particular deposit came from. And the first-payment condition means funding the account from a third party’s account, or in cash, can fail the file at the moment it is meant to go live.
What to Do After a Rejection
Fix the file before you approach the next bank. Applying serially with the same documents produces the same result and burns time you could spend on the gaps.
- Map your own ownership chain to natural persons. Write it out to the 25 percent threshold and beyond, and collect certified, attested corporate documents for every layer. If you cannot produce them, the bank cannot either.
- Write a one-page business rationale. What the company does, who its customers and suppliers are by name and country, expected monthly turnover and volumes, and how funds will arrive. This is the document that answers most of the enhanced due diligence questions in advance.
- Build substance evidence. Lease and Ejari, staff on the establishment file, signed contracts, and any invoices already raised.
- Narrow the activity list. A licence carrying activities you will never use widens the monitoring problem for no benefit. Removing them at renewal is straightforward.
- Match the product to the business. Applying for a tier whose minimum balance you cannot hold is a predictable decline.
- Ask for the file back in writing. You are entitled to your own documents. A written record of what was submitted is what lets the next application be different rather than identical.
Approach banks in a considered order rather than all at once. Institutions differ materially in appetite for new companies, for particular activities and for non-resident shareholders, and the same file can be a straightforward approval at one and an immediate decline at another. Our guide to which UAE banks still deal with non-residents covers the same appetite question on the personal side.
A rejection at application is a different problem from an account that was opened and later frozen. If money is already sitting in a blocked account, the route runs through the unfreezing process or, where a case is attached, through a CID or anti-money-laundering hold, not through a new application.
Escalating to the Central Bank Ombudsman
Sole proprietors and small to medium sized enterprises can take a complaint to the Central Bank’s independent ombudsman unit. The eligibility definition is wider than most business owners assume.
The Central Bank’s regulation establishing the Ombudsman Unit defines a consumer as any natural person, sole proprietor or small to medium sized enterprise who obtains or may prospectively obtain services or products from a licensed financial institution. The words “may prospectively obtain” matter: a prospective customer, not only an existing one, falls inside the definition.
Two procedural conditions apply before the unit will look at a complaint. It must first have been raised or properly communicated to the bank itself, and the complainant must have allowed at least 30 complete business days for the institution to provide a final response in writing, unless the Central Bank prescribes a different limit. The unit may also decline where the matter is already before a UAE court.
Be realistic about what this achieves. The ombudsman route addresses how a bank handled you: unexplained delay, failure to respond, misapplied process, or a fee charged wrongly. It does not compel a bank to accept a customer it is prohibited from onboarding under Article 14(1). Use it for conduct, not to overturn a risk decision.
Frequently Asked Questions
Why was my UAE corporate bank account rejected without a reason?
Banks are generally not obliged to disclose internal risk scoring, and where the decision involves a suspicion they are effectively prohibited from explaining, because Article 14(2) of Cabinet Resolution No. 134 of 2025 lets an institution refrain from due diligence measures that would alert the customer, and Article 18 of Federal Decree-Law No. 10 of 2025 routes the suspicion to the Financial Intelligence Unit instead. Most rejections, however, are ordinary document and risk-appetite decisions.
Can a UAE bank legally refuse to open a corporate account?
Yes, and in some circumstances it must. Article 14(1) of Cabinet Resolution No. 134 of 2025 prohibits a financial institution from establishing a business relationship where it is unable to apply customer due diligence measures. There is no general legal right to a bank account, and a bank may also decline on commercial grounds such as minimum balance or activity appetite.
Why does the bank want passports of people not on my trade licence?
Because Article 10 of the Executive Regulations requires it to identify the natural person who ultimately owns a controlling interest of 25 percent or more, following the chain through any holding structure. Where no such person exists, it must identify whoever exercises actual control, and failing that a senior manager. The trade licence names the immediate shareholder; the law asks for the human being at the end of the chain.
Does a nominee shareholder protect my privacy from the bank?
No. Cabinet Resolution No. 134 of 2025 states that a nominee shareholder is not deemed the beneficial owner by virtue of holding shares in that capacity, so the bank must still identify the person giving the instructions. The arrangement also puts your file in the complex-ownership-structure category, which is a listed high-risk indicator.
Does a rejection mean I have been reported to the authorities?
Usually not. A suspicious transaction report is filed where there is suspicion or reasonable grounds to suspect that funds are linked to a crime. Most declines are about incomplete documentation, an ownership chain the bank cannot verify, or a business profile outside its appetite, none of which triggers a report.
Is there a UAE bank blacklist for rejected companies?
There is no public register of rejected applicants, and each licensed institution makes its own assessment against its own risk appetite. That is why the same file can be declined by one bank and accepted by another. Sanctions and adverse-media screening lists are a different matter and do follow a person or entity across institutions.
What is the difference between source of funds and source of wealth?
Source of funds is where the money going into this account came from. Source of wealth is how the shareholder accumulated their overall net worth. The enhanced due diligence measures in the Executive Regulations require reasonable measures to identify both, for the customer and for the beneficial owner, which is why a single bank transfer statement is rarely a sufficient answer.
How long should a UAE corporate account application take?
Timelines vary by bank, structure and activity, and no authority publishes a service standard for corporate onboarding. Straightforward files with a UAE-resident sole shareholder and a clear activity move fastest; files needing enhanced due diligence require senior management approval before the relationship can begin, which adds time. Treat any guaranteed turnaround from an intermediary as a claim they cannot honor.
Can I complain to the Central Bank if a bank refuses my company?
A sole proprietor or a small to medium sized enterprise falls within the ombudsman unit’s definition of consumer, including as a prospective customer. You must first raise the complaint with the bank and allow at least 30 complete business days for a final written response. The route addresses conduct and process rather than compelling a bank to onboard a customer it is prohibited from accepting.
Does a free zone company find it harder to open an account than a mainland one?
Neither is automatically harder. What drives the outcome is substance, activity and ownership: a free zone company with a real office, local contracts and a resident shareholder presents better than a mainland company with a shared address and no trading history. The zone matters mainly through the address and facility it comes with, not through the licence type itself.
Official Sources
- Federal Decree-Law No. 10 of 2025 on Anti-Money Laundering and Combating the Financing of Terrorism and Proliferation Financing
- Cabinet Resolution No. 134 of 2025, Executive Regulations of Federal Decree-Law No. 10 of 2025
- Central Bank of the UAE — Establishment of an Ombudsman Unit Regulation
- Central Bank of the UAE — Consumer Protection Regulation
- Central Bank of the United Arab Emirates
- Sanadak — the UAE financial and insurance ombudsman
Information current as of July 2026. Individual banks set their own onboarding requirements, risk appetite, minimum balances and documentation lists, and none of these is published as a government standard, so no bank-specific figure or timeline is asserted here. Confirm requirements directly with the institution. Regulatory references are to the anti-money-laundering framework in force since December 2025, which replaced Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019.
This article explains how UAE banks apply regulatory requirements and how to prepare a complete application. It is not legal or financial advice, and nothing here should be read as guidance on presenting a file in any way other than accurately. For a complex cross-border ownership structure, take advice from a licensed UAE practitioner.
