A one-line declination email, or several weeks of silence, can stop a newly incorporated free zone company before it trades a single dirham. If you have had your UAE corporate bank account rejected, you have almost certainly been given no reason at all, and that silence is deliberate rather than rude. Under the Central Bank of the UAE (CBUAE) guidance for licensed financial institutions on Customer Due Diligence (CDD), Know Your Customer (KYC) and record-keeping, a bank that cannot complete its due diligence is not merely allowed to decline you. The guidance states that where a licensed financial institution is unable to undertake the required CDD and KYC measures, it “shall not open the account, commence business relations or perform the transaction”, and it “shall file a Suspicious Transaction Report (STR) or Suspicious Activity Report (SAR)” with the UAE Financial Intelligence Unit. A file that ends in a report to the FIU is not a file the bank will discuss with you.
That single rule explains almost everything about how a rejection feels. Banks do not decline corporate applications on impressions, and no one at the branch disliked your business plan. Every UAE corporate bank account rejected this way represents a specific evidentiary gap, an unresolved risk flag, or a contradiction between your documents and the record. The same CBUAE guidance is explicit that institutions “should not establish or maintain relationships with customers who are unable or unwilling to provide required CDD/KYC information”, whether at onboarding or during a later review. The framework behind this sits in Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism, and in Cabinet Decision No. 10 of 2019, as amended by Cabinet Decision No. 24 of 2022, which together the guidance calls the AML-CFT Law and the AML-CFT Decision. Your job now is not to appeal. It is to find the gap and close it with evidence.
Diagnosing a UAE corporate bank account rejected file starts with the last question the bank asked
The most reliable diagnostic is also the simplest: look at the final document request or clarification the bank sent you before communication stopped. That request marks the point where the file stalled. If a relationship manager asked for older personal bank statements, a supplier contract, or a shareholder agreement and then went quiet, the answer to why you had a UAE corporate bank account rejected is sitting in that last email, not in the declination notice.
What the bank was testing at that moment is defined. Article 8 of the AML-CFT Decision requires institutions to identify each customer and verify identity using documents, data or information “from a reliable and independent source”, and to understand the nature of the customer’s business along with the nature and purpose of the relationship, including the expected uses to which the customer will put the bank’s products and services. Those last words matter. Identity alone is not the test. The bank has to be able to describe, in its own file, what your company does and what it will do with the account, and a UAE corporate bank account rejected at this stage usually failed the second half of that sentence rather than the first.
For a legal person such as a free zone company, Article 8.1 sets out what has to be verified from original documents or data from a reliable and independent source: the name, legal form and memorandum of association; the headquarters office address or principal place of business; articles of incorporation, bylaws or similar documents attested by the competent authority within the UAE; key countries of operation outside the UAE; the names of key controllers and senior management, meaning a Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, General Partner, Treasurer, President or equivalent, together with every account signatory or person authorised to give instructions on the account; the ownership and structure of the entity up to an individual level of ownership; the intended purpose and nature of the business relationship; and the nature of the customer’s business. Read that list against what you actually submitted. Anything on it that you supported with a self-declaration rather than a document is a candidate for the gap. Choosing which bank to approach and how long it takes changes the service you get, but every licensed institution runs this same statutory list.
Identity is also machine-checked, which is why small inconsistencies are fatal. The guidance names official government-issued documents such as a passport or a national ID like the Emirates ID, documents certified by a notary, and documents issued by a reputable third party or public authority such as utility bills or credit reporting agencies, as reliable and independent sources. When verifying an Emirates ID, banks are directed to use the online Validation Gateway maintained by the Federal Authority for Identity, Citizenship, Customs and Ports Security (ICP) and to keep evidence of that digital verification. A name spelled one way on a free zone memorandum and another way in the identity record does not look like a typing error to that process.
The compliance gaps that get a UAE corporate bank account rejected most often
A new free zone company presents a predictable set of weaknesses. Almost every application that fails contains at least one of the following, and most contain two or three at once.
An unevidenced source of funds explanation is the single most common gap
CBUAE guidance separates Source of Funds, meaning the direct source of the money used to fund the account initially and the funds transacted through it, from Source of Wealth, meaning the sources that generated or significantly contributed to total net worth. Verification requirements scale with risk: a customer’s own statement of employment and income may be enough at lower risk, while bank or brokerage statements, housing deeds or signed court rulings are expected at higher risk.
The guidance then lists the red flags directly. A generic description such as “inheritance”, “salary”, “income”, “investment” or “self-funding” where the customer cannot produce supporting documentation. A newly formed legal entity with little or no business history funding an account with significant funds, which describes a large share of free zone startups. Supporting documentation revealing an opaque ownership structure with multiple ownership layers lacking a clear rationale. An account funded by a third party with no apparent link to the customer. A customer stating they will transfer funds in from another institution in order to close their account there. Wanting to use multiple bank accounts to fund the newly opened account with no apparent business purpose. Funds deposited from high-risk countries or countries subject to United Nations or UAE sanctions. Owners who have had a UAE corporate bank account rejected on this ground usually submitted a transfer receipt where the bank needed a documented history.
The ownership chain has to resolve to real individuals under Article 9
Article 9 of the AML-CFT Decision requires banks to identify the ultimate beneficial owners of a customer: all individuals who, individually or jointly, have a controlling ownership interest in the legal person of 25 percent or more. Where no individual meets that description, the institution must identify the individuals exercising control instead, and the guidance is blunt that this route “should be used only as a last resort”.
If your free zone entity sits under a corporate shareholder, a holding company or a trust, the bank has to trace ownership upward through every layer until it reaches human beings, and it has to verify each of them the same way it verifies an individual customer. The guidance separately flags an overly complex shareholder composition, and a trust or shell company reluctant to provide information on controlling parties and underlying beneficiaries, as red flags in their own right. A structure that exists for a reason you can document is manageable. A structure with no stated rationale is a UAE corporate bank account rejected on paper before anyone reads the business plan.
Expected activity that does not match the licence fails the peer test
Banks are required to collect your expected account activity and test whether it is reasonable, comparing it against the stated purpose of the account and against the transactional profile of your peer group. Where the self-reported figures are inconsistent with the stated purpose, or materially different from comparable customers, the guidance directs the bank to run additional transaction analysis and to collect a written explanation, supporting business documentation or past financial statements.
This is where a broad licence activity such as general trading becomes a liability rather than an advantage. The guidance also flags a customer indicating an intention to engage in high-risk products or services, such as high-volume and high-value cross-border funds transfers, without a reasonable explanation. Declaring large international turnover on a licence issued weeks ago, with no contracts or purchase orders behind it, is exactly the mismatch the test is designed to catch, and it is one of the quieter ways to have a UAE corporate bank account rejected without ever being told why.
Contradictions between documents stop the file immediately
Every person acting on behalf of a corporate customer must be verified as authorised, through board resolutions, articles of incorporation, other constitutional documents, a Letter of Authority or a Power of Attorney. Beyond that, the guidance names the specific circumstances where required CDD and KYC cannot be completed: the customer refuses to provide the information; the customer provides apparently false or misleading information or documentation; the customer is suspected of identity theft; or the customer provides information that differs from information obtained during verification or later monitoring. That last trigger is the one that catches honest applicants, and it accounts for a large share of every UAE corporate bank account rejected without an obvious risk factor anywhere in the file. Where information is inaccurate or incomplete, the guidance tells the bank to apply additional CDD measures, which is how a short wait turns into a long one. Making sure the licence name matches the passport, the memorandum and the signatory list is unglamorous work, and it is worth doing before you re-apply. It is also why trade name reservation rules matter beyond incorporation day.
Geography is assessed on counterparties, not just on where you are registered
The guidance requires banks to collect and assess the jurisdictions where the customer resides, is registered, or does business in or with, the jurisdictions of the customer’s counterparties, and the jurisdictions with which the customer expects to transact. Article 15 of the AML-CFT Decision then makes Enhanced Due Diligence mandatory for foreign and domestic politically exposed persons, including direct family members and known close associates, and for business relationships and transactions with natural persons, legal persons or legal arrangements from high-risk countries. Enhanced Due Diligence is also warranted for high-net-worth individuals and for correspondent banking and similar relationships. Founders are often surprised to have a UAE corporate bank account rejected over a supplier’s location rather than their own.
A presence the bank cannot corroborate invites a site visit you may not survive
Article 8.1 requires verification of the headquarters office address or principal place of business, and the guidance goes further: “for a corporate customer that meets a certain risk threshold, an LFI may choose to conduct a site visit.” A flexi-desk is a legitimate free zone product, but it gives the bank very little to corroborate. If the institution asks for a tenancy contract, a utility connection or evidence of people working somewhere, and the answer is a shared address you have never visited, the file stops. It is a frustrating way to have a UAE corporate bank account rejected, because nothing about the business is actually wrong. Reviewing the substance requirements for a free zone company is worth doing for tax reasons anyway, and the same evidence answers the bank.
Your consultant’s file gets re-tested from scratch under Article 19
Article 19 of the AML-CFT Decision states that even where reliance on third parties is permitted, the ultimate responsibility for CDD measures remains with the institution relying on the third party. In practice the bank cannot accept a formation agent’s pre-packaged pack at face value. It re-verifies the documents itself and speaks to signatories and beneficial owners directly. A template business plan that does not match how the founder actually describes the business is a contradiction, and contradictions are the trigger the guidance names. Owners are frequently astonished to have a UAE corporate bank account rejected on a document they never read. If you are reassessing your advisers, understanding how setup consultants structure their fees tells you whether post-incorporation compliance support is included or was never in scope.
Rebuild the pack around evidence, then decide where to re-apply
Sending the same dossier to a different bank after having a UAE corporate bank account rejected produces the same result, because every licensed institution applies the same statutory tests. Rebuild it first.
- Audit every document against the Article 8.1 list. Trade licence, certificate of incorporation, memorandum and articles, share certificates. Corporate name, trade name and shareholding percentages must match exactly across all of them and against the identity documents behind each name.
- Resolve the ownership chain to individuals. Produce an ownership diagram running from the free zone entity up to every natural person holding a controlling interest of 25 percent or more, with certified passport copies, identity documents and proof of residential address for each. Where no one reaches the threshold, document who exercises control and why.
- Build a source of funds and source of wealth file, not a sentence. If the company is funded from personal savings, provide continuous personal bank statements covering the period in which those funds accumulated, together with employment contracts, dividend vouchers or property sale deeds. If it is funded by a parent company, provide that company’s audited financial statements and operating bank statements.
- Write a transactional profile the bank can test. Set out the actual activities, products, target markets and pricing, then expected monthly volumes, largest single transaction, operating currencies and the direction of funds in and out. Keep it consistent with the licensed activity.
- Evidence your counterparties. Signed contracts, letters of intent, pro-forma invoices or registry extracts for your main suppliers and customers, with their jurisdictions stated openly rather than left to be discovered.
- Fix the authority documents. Board resolutions or Powers of Attorney must expressly authorise the named individuals to open and operate bank accounts, satisfying Article 8.1, and every signatory must hold valid identity documents.
Separate the compliance problem from the product problem while you do this. Account tiers differ in what they cost to run: RAKBANK publishes RAKstarter as a zero-balance business account aimed at startups, with no ledger or minimum balance fee and availability in AED, USD, EUR or GBP, while its Business Current Account is published with a minimum average monthly balance of AED 25,000. Choosing a tier that matches your working capital prevents avoidable friction, but no tier lowers the CDD and KYC standard. If you had a UAE corporate bank account rejected on compliance grounds, a cheaper account will not fix it.
On where to apply next, be realistic. Where an institution closed the file after an unresolvable compliance stop, returning to it without a documented change in ownership, evidence or presence rarely works. A remediated pack presented to a new institution is usually the faster route, and our UAE company formation guide covers how the corporate structure itself affects which institutions will look at you.
What Sanadak can and cannot do about a bank decision
Sanadak is the UAE’s independent financial and insurance ombudsman unit, and describes itself as the first such unit in the Middle East and North Africa region. Its published counters show coverage of 262 licensed financial institutions and 58 insurance companies. The published eligibility criteria must all be met: you are filing as a natural person, sole proprietor or small to medium sized enterprise; the complaint is not currently before a court; you have not previously filed a complaint on the same issue; you have already filed an official complaint with the institution itself; and 15 calendar days have elapsed since you submitted it, with either no written response or a response you are not satisfied with. The helpline is 800SANADAK (800 72 623 25), and the unit is based at the Emirates Institute of Finance building in Abu Dhabi.
Be clear about the limit. Nothing in those published criteria gives Sanadak the power to order a bank to open an account for you, and the decision on who a bank will bank remains the bank’s. Use Sanadak where the institution’s conduct is the problem: no written response at all, documents retained, an application left open indefinitely, or an unexplained freeze or closure of an account you already hold. It is not an appeal route against a compliance decline, and anyone who has had a UAE corporate bank account rejected on due diligence grounds will lose fifteen days there that would have been better spent rebuilding the file.
Approval is not the finish line, because monitoring never stops
Article 7 of the AML-CFT Decision subjects all customers to ongoing monitoring throughout the business relationship, with periodic reviews whose frequency matches the customer’s risk profile and one-off reviews triggered by specific events. During those reviews the bank compares real activity against the expected activity you declared at onboarding. Material deviation in turnover, transaction size or destination countries prompts a request for updated documentation.
If that request goes unanswered, the guidance applies the same outcome as at onboarding: where the institution cannot complete its CDD measures on an existing customer, it shall terminate the business relationship and submit a Suspicious Transaction Report. Under Article 16 of the AML-CFT Law and Article 24 of the AML-CFT Decision, banks must retain CDD records, account files, business correspondence, copies of identification documents and transaction records, so the file you submit today is the file you will be measured against later. Tell your bank when beneficial owners change, when signatories change, when your activity changes and when your licence is renewed. Founders who have had a UAE corporate bank account rejected once rarely want to discover the same test applied to an account they already depend on.
Image: “Banks Street in Dubai” by Mahmoud Farrag, licensed under CC BY 3.0 via Wikimedia Commons.
Frequently Asked Questions
Why was my UAE corporate bank account rejected without any reason being given?
Because the CBUAE guidance that stops the bank opening the account also requires it to file a Suspicious Transaction Report with the UAE Financial Intelligence Unit where required due diligence cannot be completed. A file that ends in a report to the FIU is not one the institution will explain to the applicant, so declines arrive as generic notices. The reason is real and specific, but you have to reconstruct it from the last documents you were asked for.
Can I re-apply to the same UAE bank after my corporate account application was declined?
You can, but it rarely succeeds without a documented change. If the file closed because source of funds was unevidenced, the ownership chain was unresolved, or documents contradicted each other, resubmitting the same pack produces the same outcome. Fix the specific gap, gather the evidence that was missing, and be ready to show what changed. Otherwise a new institution with a rebuilt dossier is usually the faster path.
How does the CBUAE define an ultimate beneficial owner for a corporate account?
Under Article 9 of the AML-CFT Decision, the beneficial owners of a legal person are all individuals who, individually or jointly, have a controlling ownership interest of 25 percent or more. Where no individual meets that description, the bank must identify the individuals who exercise control by other means, and the guidance treats that as a last resort. Ownership must be traced through every corporate layer to real people.
What evidence actually proves source of funds to a UAE bank?
Documentation that traces where the money came from, rather than a description of it. The guidance names bank or brokerage statements, housing deeds and signed court rulings as the kind of corroboration expected as risk rises, and specifically flags generic answers such as savings, salary, inheritance or self-funding offered without supporting documents. Continuous statements showing funds accumulating, supported by employment or dividend records, are far stronger than a single transfer receipt.
Does Sanadak have the power to force a bank to open my corporate account?
No. Sanadak handles complaints about how a licensed institution has treated you, and nothing in its published eligibility criteria extends to ordering an institution to accept a customer. It is the right route for silence, retained documents, or an unexplained freeze or closure of an existing account, and only after you have complained to the bank first and waited 15 calendar days. It is not an appeal against a compliance decision.
Will a zero-balance business account be easier to get approved?
No. Minimum balance requirements are a product feature, not a compliance threshold. RAKBANK publishes RAKstarter as a zero-balance startup account and its Business Current Account with a minimum average monthly balance of AED 25,000, but both sit under the same CBUAE due diligence rules on identity, beneficial ownership, source of funds and expected activity. A lower balance requirement solves a cash flow problem, never an AML one.
Rebuilding a rejected banking file is document work, and it is far easier when the corporate structure, licence activity and substance were set up to survive the questions in the first place. Talk to StartZone UAE about your free zone company and your banking pack. Start your UAE business journey today →
