Opening a UAE business bank account: what banks actually assess

Every rule a UAE bank applies at onboarding traces back to Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019, the AML-CFT Decision. Beneath them sit the Central Bank's regulations and the guidance a compliance officer actually works from.

The conduct side changed in 2026. The SME Customer Protection Regulation, Circular C 2/2026, issued 17 February 2026, takes effect on 13 September 2026 and replaces the SME Market Conduct Regulation C 1/2021. This guide is written against C 2/2026.

Bank pricing perishes quickly, so every figure names its document and that document's date. Where a bank publishes nothing, this guide says so. "Not published" is a finding, not a gap to fill from an aggregator.

Why onboarding is strict

Article 8 of the AML-CFT Decision requires verification from a reliable and independent source. For a legal person that means legal form, memorandum, attested articles, principal place of business and signatories — plus ownership and structure up to an individual level. A foreign legal person must also identify a UAE legal representative.

Article 9 sets the beneficial-owner threshold at a controlling interest of 25% or more. Three consequences are underestimated.

• The bank must trace up the chain until it has found every natural person owning or controlling 25% or more. A holding company in a third jurisdiction does not end that enquiry; it extends it.
• If no individual meets 25%, the bank identifies the senior managing official instead.
• The bank cannot rely on what you tell it. The guidance on services to legal persons (effective 7 June 2021) requires independent verification, and says your registrar UBO filing is not a substitute.

Enhanced due diligence is mandatory for high-risk jurisdictions, ownership or control by a politically exposed person, correspondent banking and non-profits. It brings senior management approval, documented source of funds and source of wealth, and a requirement that the first payment arrive from an account in the customer's own name at an institution of equivalent standard. Where it applies, the guidance also recommends lowering the 25% threshold.

Then the rule behind most unexplained rejections. Where due diligence cannot be completed, the institution shall not open the account and shall file a suspicious transaction report. Article 18 makes it a federal crime to tell the customer such a report has been or will be filed.

The UAE was grey-listed by FATF in March 2022 and removed on 23 February 2024. That period is when banks built the machinery founders meet today. Delisting removed the correspondent-bank penalty abroad and relaxed nothing domestically — the customer due diligence guidance was refreshed into force on 7 November 2025. Delisting fixed the UAE's reputation abroad, not the paperwork at the counter.

Two counterweights. The Central Bank has told banks in writing not to de-risk whole sectors: its real estate and precious metals guidance (effective 16 June 2021) states that it "does not expect or encourage LFIs to broadly prohibit or exit customer relationships" with those sectors. And from 13 September 2026, C 2/2026 requires opening to be completed within three business days (Art. 4.46), written rejection reasons except where the reason relates to financial crime risk (Art. 3.12), complaint acknowledgement in two business days (Art. 6.5) and a final response in thirty business days (Art. 6.9).

What a bank actually assesses

• Activity against licence against narrative. The guidance singles out as highest risk customers that generate revenue but have no apparent business activities. A general trading licence with a story about consultancy fees from three countries is a mismatch, and mismatch is the most common self-inflicted rejection.
• Jurisdiction of the licence. Mainland is easiest. Free zone is entirely bankable, but the model is sensitive to which zone and to flexi-desk against office. Offshore — RAK ICC, JAFZA Offshore, Ajman Offshore — is hardest: no visa quota, no Emirates ID through the vehicle, often no substance, and some banks will not open operating accounts for them at all.
• Nationality and residency. No published rule bars any nationality. What exists is enhanced due diligence on high-risk jurisdictions and sanctions exposure, plus unpublished bank policy screens. Residency is the harder constraint.
• Ownership layering. The biggest structural blocker at the digital-first banks, and the subject of the next paragraph.
• Presence and substance. The red-flag list reads as a checklist of what not to look like: no internet presence despite claiming commercial business, a mailbox address shared with many entities, directors who cannot be located, no employees and no premises, layers that do not appear to legitimately require that complexity, and dormancy after incorporation followed by sudden activity. Banks are told not to rely on your assertion that you passed the Economic Substance Test.
• Turnover and counterparties. Banks size the relationship at onboarding and monitor against it. Name your largest counterparties, their countries and your corridors. A file that says "worldwide" joins the enhanced due diligence queue.

The one bank that publishes its fences

Most eligibility rules are internal. Mashreq's NEO BIZ Key Facts Statement, version July 2026, is the exception, and it is the most useful document in the market for understanding digital-bank declines. Four conditions, stated as absolutes: the business must be owned 100% by individuals with no layered structures; at least one partner or power of attorney must be a UAE resident; turnover must be up to AED 100 million; and cash transactions must not exceed 49% of declared annual turnover.

Take the common case. A founder in Europe incorporates a UAE company and holds it through the family holding company that owns the rest of the group. The application is declined quickly, with no useful explanation. Nothing was wrong with the business: the shareholder is a company, so the entity is not 100% individually owned, and that fence is absolute. No volume of contracts or reference letters cures a product eligibility rule. The same founder is usually bankable at a traditional bank, which will trace the chain, collect attested parent documents and price the extra supervision as a balance requirement rather than refusing it. The right response is a different bank type, not a better-argued appeal.

ADIB publishes a narrower version — Business Connect is for a single layered company registered in the UAE, in categories set by internal acceptance criteria. Wio publishes no eligibility rules at all, which means they exist and are unpublished.

Activities that change the answer

• Virtual assets. Under the Central Bank's guidance of 20 February 2023, banks are strictly prohibited from dealing with entities performing covered virtual asset activities without a UAE licence — VARA, ADGM's FSRA, or the SCA. Unlicensed crypto activity is a prohibited relationship, not a slow one.
• Precious metals, stones and real estate. High risk for cash intensity, and explicitly not to be blanket-refused. Expect scrutiny of cash ratios and counterparty countries.
• General trading. Not prohibited, but diluted: the licence communicates nothing, so the bank substitutes documents — contracts, invoices, shipping paperwork — for the specificity it lacks.
• Payments and money movement. Holding or moving third-party money needs a licence under the Retail Payment Services and Card Schemes Regulation, C 15/2021. An unlicensed applicant has a regulatory problem before a banking one.

The document pack

No Central Bank rule prescribes a universal list; Article 8 sets the outcomes and each bank writes its own. There are two packs, and founders bring the first and skip the second.

The corporate pack: trade licence; certificate of incorporation; attested memorandum and articles; share register, with an incumbency certificate for free-zone and offshore entities; a board resolution in the bank's own format; passports for every shareholder, director and signatory, with Emirates ID and visa for those who hold them; tenancy contract, Ejari or the zone's lease; UBO declaration and the registrar filing; company stamp and signature specimen; corporate tax TRN, and VAT TRN where registered.

The evidence pack is what moves a file: a CV for each principal, so the bank can see a real operator behind the licence; six to twelve months of personal statements, and any existing business's statements, which is the primary source-of-wealth evidence for most founders; a one-page model note setting out expected turnover, largest counterparties and corridors; at least one signed contract or issued invoice; proof of overseas address; source-of-wealth documents for larger openings; and a structure chart to natural persons wherever a corporate shareholder exists.

Digital-first or traditional: balance against fit

Digital-first banks trade balance for fit — no minimum balance and no fall-below fee, but published eligibility fences that exclude exactly the structures foreign founders arrive with. Traditional banks trade fit for balance — they will bank a holding structure, an offshore parent or a licensed high-risk activity, and price it as a relationship at AED 50,000 to AED 500,000 in average balance with a monthly penalty below it.

Zero balance is not free

Emirates NBD Connect has a nil minimum balance and a nil fall-below fee — and a monthly account service fee of AED 261.45 after the first 30 days, plus the highest cheque-return charge in its range at AED 367.50 (Business Banking Schedule of Charges, effective 06/2025). Wio Business charges AED 99 a month on Essential and AED 249 on Grow, with no minimum balance and no closure fee (Key Facts Statement version 7, 1 January 2025). Mashreq NEO BIZ Pro is AED 99 + VAT a month and Pro Plus AED 199 + VAT, with the fall-below fee recorded as "not applicable" on every tier (Key Facts Statement, July 2026).

Annualised, the free account costs roughly AED 1,200 to AED 3,100 a year, while a traditional account holding AED 50,000 in average balance can cost nothing in fees at all. The real comparison is fee cost against the opportunity cost of the locked balance, and it flips on how much cash the business actually holds.

Two naming points. NBF Connect is a digital onboarding platform, not an account — the product is NBF Lite, at AED 10,000 monthly average balance. And ADIB Business Connect is AED only, a real constraint for an import or export business and easy to miss.

Timelines

The mandated standard is the three business days at Article 4.46, conditional on low risk and complete documentation. Two further rules explain why a satisfied applicant still cannot pay a supplier: opening an account does not oblige the bank to permit transactions until due diligence is complete, and the bank may receive the opening deposit and hold it blocked meanwhile. Both ran under C 1/2021 (Arts. 3.22 and 3.23) and carry forward.

What banks publish about speed is thin and mostly promotional: Mashreq markets NEO BIZ as "1 day or get AED 1,000", Wio says "3 working days", RAKBANK says "a few days" and brands its portal around 72 hours. Emirates NBD, FAB, ADCB, DIB, CBD, Zand and NBF publish no account-opening service level at all.

The ranges below are practitioner estimates, not sourced figures. No bank publishes them and no regulator measures them publicly.

• Digital bank, resident founder, single-layer licence, clean activity: 3–10 business days to an IBAN, with full transaction enablement sometimes a few days behind it.
• Traditional bank, resident founder, straightforward structure: 2–6 weeks from a complete file.
• Non-resident founder, any corporate shareholder, or a sensitive activity: 4–12 weeks, dominated by attestation, UBO tracing and enhanced due diligence.

What stretches a file is predictable: attestation of foreign documents, tracing owners through a foreign parent, an activity-narrative mismatch, an unresolved sanctions or adverse-media hit, PEP status anywhere in the chain, high-risk corridors — and answering the source-of-wealth question with a narrative instead of documents.

Escalate in order: the relationship manager, the branch or business centre manager, the bank's formal complaints channel under the C 2/2026 timeframes, then the Central Bank's complaints route. Understand the asymmetry first. The duty to give written reasons carries an exception for financial crime risk, and where that is the reason no escalation will produce an explanation, because producing one would breach the tipping-off prohibition. Escalation works on slow files and lost documents. It does not work on suspicion.

Can you open before residency and an Emirates ID?

The regulator permits remote onboarding: the Central Bank's digital identification guidance (effective 31 October 2022) says institutions may use digital identity systems as well as physical forms, and that non-face-to-face relationships may present a standard — or even a lower — level of risk. There is no regulatory bar to opening before an Emirates ID exists.

Individual banks impose residency screens anyway. Mashreq requires a UAE-resident partner or power of attorney; ADIB's list includes a signatory Emirates ID; FAB publishes that its Business Call Account is open to residents and non-residents, but that is a deposit product, not an operating account. Everything beyond that is formation marketing. The reliable pattern is one UAE-resident signatory holding an Emirates ID before applying, and any contrary claim about a named bank should come from that bank in writing before you pay anyone.

Rejection

The drivers are structural: a structure that fails a published rule; an activity-licence-narrative mismatch; a shell-shaped applicant matching the red-flag list; unlicensed regulated activity; sanctions, adverse media or PEP exposure; a source-of-wealth story with no documents behind it; and plain defects — an expired licence, unattested documents, a resolution not in the bank's format.

What happens next turns on a distinction founders are rarely told about.

• A policy rejection — structure, turnover or activity category outside the product — is not shared with other banks. There is no cross-bank register of rejected account applications, and reapplying elsewhere is normal.
• A suspicion-driven rejection may have produced a report filed through goAML, which the bank commits a federal offence by disclosing. That report goes to the financial intelligence unit rather than a shared blacklist, but the guidance also tells banks to update their own internal watchlists, which are durable.

A policy rejection is cheap; a suspicion-driven one is expensive and invisible. You usually cannot tell which you got — which is exactly why the financial-crime carve-out from reason-giving exists.

Parallel applications are normal. Nothing prohibits applying to several banks at once, corporate applications are not credit applications, and they leave no shared footprint. Two caveats: be consistent, because inconsistent stories across institutions are themselves a risk indicator; and the cost is your own time.

The recovery ladder, in order of leverage: fix the structure (collapse a layer, add a UAE-resident director or signatory); fix the licence (narrow general trading to the real activity); add substance (premises, a website, a UAE number, a domain email, a first employee); add evidence (a signed contract, an issued invoice, a paid supplier); rebuild source of wealth as documents; then change the target bank type. Free-zone bank-introduction programmes are legitimate and worth using. A "guaranteed account" is a marketing claim, not a bank commitment.

Operating the account

The customer due diligence guidance in force from 7 November 2025 sets review intervals of annually for high risk, two years for medium, three years for low, plus event-driven reviews on ownership changes, rejected transactions or unexplained variance in activity. A refresh request is not optional correspondence: because the bank cannot maintain a relationship where due diligence cannot be completed, an unanswered refresh escalates to restriction and then closure. Send renewed licences, passports, visas and UBO updates proactively.

Dormancy runs under the Dormant Accounts and Unclaimed Funds Regulation, C 9/2025, issued 31 December 2025. A current, savings or call account is dormant after three years with no customer-initiated activity and no customer communication. System-generated entries such as interest and charges do not count, so they do not reset the clock. The bank must make contact and allow a three-month response period; after five years dormant the balance transfers to the Central Bank's unclaimed balances account, from where it remains reclaimable. No fee may be charged for reactivation, closure or claiming.

Monitoring runs for the life of the relationship, and there is no minimum threshold for reporting: all suspicious transactions must be reported, including attempted ones. Freezes arrive from several directions — the bank restricting pending due diligence, or the financial intelligence unit, the courts or the tax authority acting independently. Respond fully and fast to information requests, escalate on timing, and accept that no explanation is available where financial crime is the reason.

If you will employ staff, the account must work with the Wages Protection System. The employer registers with the ministry, appoints an agent — a bank or a licensed exchange house connected to WPS — and submits a salary file each cycle. Two consequences for account choice: the account must be WPS-capable at that bank, which is not true of every product; and free zones are not exempt in the way founders assume, so the answer is zone-specific and must be checked with the zone.

Published currency sets differ more than the marketing suggests: Wio offers AED, USD, EUR and GBP; Mashreq NEO BIZ lists major currencies including EUR, CAD, USD, GBP, AUD, NZD, JPY and SAR; FAB publishes AED, USD, GBP, JPY and EUR; ADIB Business Connect is AED only. On foreign exchange the finding is an absence: no UAE bank surveyed publishes its FX spread. Per-transfer fees are published and cheaper at the digital banks — Wio charges AED 52.50 per SWIFT on Essential and AED 26.25 on Grow — but for a trading business the spread on the rate dwarfs the transfer fee. Ask for the spread in basis points, in writing.

Card acceptance is a separate exercise. Under C 15/2021 merchant acquiring is a licensed activity, but the licence sits with the acquirer, not with you. Acceptance is a second underwriting, with its own view of chargeback risk, refund policy and prohibited goods, and it may carry a rolling reserve.

On closing, note a gap. The Consumer Protection Regulation C 8/2020 gives 60 calendar days' notice before closure and before fee changes — but it applies to natural persons and sole proprietorships only. An LLC does not get consumer protection, and neither C 1/2021 nor C 2/2026 specifies a closure notice period. Early-closure fees are real: Emirates NBD charges AED 105 to AED 1,050 within six months depending on tier (06/2025), FAB AED 150 to AED 500, ADIB AED 100; Wio levies none and Zand publishes closure as nil. There is no UAE equivalent of the UK switching service — a switch is a parallel run: open, migrate standing instructions, the WPS agent registration and merchant settlement details, then close.

Cheque discipline

Federal Decree-Law No. 14 of 2020, effective 2 January 2022, decriminalised the ordinary insufficient-funds bounce. Founders hear "decriminalised" and relax. Three things say they should not.

• A dishonoured cheque, once confirmed by the bank, is an executive instrument: the holder goes straight to enforcement and can seize assets without ordinary litigation. Civil exposure did not soften; it got faster.
• The drawee bank must make partial payment from available funds unless the bearer declines, and must report the incident to the Central Bank. Partial payment does not extinguish the debt — it creates a documented, partly executed instrument.
• Criminal liability survives for the conduct founders are most likely to blunder into. Closing the account, or otherwise rendering a cheque unpayable before presentation, carries a fine of 10% of the cheque value, minimum AED 5,000 and up to double the value, and/or imprisonment of six months or more.

Return charges are steep: Emirates NBD Connect AED 367.50 and AED 315 on most other tiers (06/2025), FAB AED 300, ADIB AED 300, NBF AED 250 inward.

The other things founders get wrong

• Signatory setup. Single-signatory convenience against dual-signatory control is decided at onboarding and painful to change: every change needs a fresh board resolution, fresh due diligence and often a branch visit. Decide now who signs while a founder is abroad.
• Corporate cards are a separate approval. A debit card usually comes with the account; credit is underwritten separately, wants trading history a new company lacks, and commonly requires a cash-covered limit or a personal guarantee.
• Minimum balance has four traps. It is normally an average, so one large mid-month payment can drag it below the threshold. Emirates NBD's is an average relationship balance, which is both trap and opportunity. The fall-below fee is monthly and indefinite — AED 315 a month is AED 3,780 a year. And zero balance is not free.
• Using a personal account for business. The worst tail risk of the lot. The account is profiled as a salaried individual, so business inflows generate precisely the "activity inconsistent with the customer profile" alert the monitoring rules exist to catch — and because banks report on suspicion with no threshold and cannot say they have, a bookkeeping shortcut becomes a frozen personal account. It also collides with tax record-keeping obligations that assume separated books.

Which bank type fits you

What the banks publish

Each figure comes from that bank's own document or page on the date shown. "Not published" means the bank does not publish it. DIB's business schedule is dated March 2023 and its per-tier extraction could not be verified, so it is not tabulated.

The bank-ready file

• Licence, incorporation certificate, attested memorandum and articles, share register, incumbency certificate for free-zone and offshore entities.
• Board resolution in the bank's format, company stamp, signature specimen.
• Passports for all shareholders, directors and signatories; Emirates ID and visa where held; at least one UAE-resident signatory identified.
• Tenancy or zone lease, UBO declaration and registrar filing, corporate tax TRN and VAT TRN where issued.
• CV per principal, six to twelve months of statements, proof of overseas address, source-of-wealth documents.
• One-page model note, one signed contract or invoice, and a structure chart to natural persons.