Accounts and payments
Why UAE Banks Reject Account Applications — and What the New AML Framework Changed
UAE banks refuse accounts under a tougher AML regime: FDL 10/2025 and the CBUAE's 2026 guidance. What triggers refusals and how to build a file that passes.
Contact us
Overview
A UAE bank can decline an account application with no substantive explanation — where the concern is financial-crime risk, disclosure rules allow it to stay silent — and in 2026 this happens to well-documented businesses more often than founders expect. The letter, when there is one, cites internal policy. The applicant is left guessing whether the problem was the industry, the ownership chain, the counterparties or the paperwork.
The guessing is unnecessary, because the tightening has a precise legal explanation. Federal Decree-Law No. 10 of 2025 replaced the UAE’s 2018 anti-money-laundering law, Cabinet Resolution No. 134 of 2025 put the new regime into operation, and in April 2026 the Central Bank of the UAE issued updated guidance that changed how banks vet and monitor every client. This article sets out what changed, what actually triggers refusals, and how to build an application file that survives the new level of scrutiny.
The new framework
Between October 2025 and April 2026 the UAE rebuilt the legal base of its anti-money-laundering regime, and bank onboarding is where businesses feel it first.
- Federal Decree-Law No. 10 of 2025. Dates: In force 14 October 2025. What it changed: Replaced the 2018 AML law; heavier penalties; no limitation period for money-laundering, terrorist-financing and — newly — proliferation-financing offences (art. 37).
- Cabinet Resolution No. 134 of 2025. Dates: Published 15 November 2025 (Official Gazette 811), in force since 14 December 2025. What it changed: The implementing regulation; widened the supervised perimeter — gaming operators, for example, became designated non-financial businesses for transactions from AED 11,000, under GCGRA supervision.
- Updated CBUAE AML/CFT/CPF guidance. Dates: 16 April 2026. What it changed: A package covering correspondent relationships, customer due diligence (CDD/KYC), record keeping and staff training — with dynamic risk-based due diligence and real-time monitoring at its core.
Two features of this sequence matter for anyone opening an account. First, due diligence stopped being a one-off check at onboarding: the April 2026 guidance expects banks to reassess clients dynamically, verify beneficial owners as part of due diligence, and monitor transactions in real time. A client whose actual flows drift away from the declared profile gets re-reviewed, not grandfathered.
Second, leniency became expensive for the banks themselves. Professional estimates put the penalties the Central Bank imposed on financial institutions in 2025 — exchange houses included — at around AED 350 million, and individual enforcement actions appear in the regulator’s public register. Add the National AML/CFT Strategy 2024–2027 and the inclusion of virtual-asset service providers in the supervised perimeter, and the incentive structure is plain: a marginal client is a cost, and refusing one is free.
That is the sober explanation for the tightening founders describe. Banks did not become hostile; regulation made caution the cheaper option.
Why banks refuse
A refusal usually arrives without an explanation. Under the Central Bank’s Consumer Protection Standards (art. 2.1.1.26) a bank must normally disclose why it rejected an application — except where the reason relates to financial-crime compliance risk, which is precisely the territory of the refusals this article describes. In practice, therefore, the letter says little more than ‘internal policy’. What follows is therefore practice observation rather than official doctrine, verified at filing against each bank’s current requirements. The recurring triggers:
- Source of funds. The most common weakness — a declaration with no evidence chain behind it.
- Activity mismatch. Projected or actual flows that do not match the activity code on the licence.
- Opaque ownership. Beneficial-owner chains running through layered holdings, nominee arrangements or jurisdictions where verification stalls.
- Sanctions exposure. Statements from sanctioned banks, counterparties adjacent to designated persons, banking history in heavily restricted jurisdictions.
- Sector risk appetite. Virtual assets, general trading, commodities, dual-use goods, parallel imports, precious metals, offshore holdings without substance, consulting with no visible operations — segments where many banks simply set their appetite to zero.
- Process failures. Missing a deadline for additional documents, or frozen and closed accounts in the history left unexplained.
“Our practice note on refusals: the bank is not judging your business model, it is judging how expensive you are to monitor. A file that answers the compliance officer’s questions before they are asked is cheaper to approve — and cost, not eloquence, is what moves the decision.” Gennady Kurdiumov Senior Partner, Co-founder
The KYC case
Treat the application not as a form but as a case built for a sceptical reader.
The document set. Beyond the trade licence, banks typically request the memorandum of association, passports and Emirates IDs of signatories, a board resolution, the full ownership chain down to natural persons, a business plan with a 12-month cash-flow, transaction projections (volumes, counterparties, geographies), a source-of-funds declaration with supporting statements, sample invoices or contracts, and the beneficial owner’s CV.
Beyond the licence. A licence proves you may do business; it does not prove why the business belongs in the UAE or where the money comes from. Every strong file answers two questions up front: what is the commercial reason for banking here, and what is the documented origin of the funds that will move through the account. If the company is still being structured, settle the banking question before incorporation — the activity code chosen at company registration determines what the bank will later expect to see in the flows.
Projections as commitment. Under dynamic due diligence, transaction projections are not a formality — they become the baseline the bank monitors you against. Overstate volumes and you look evasive; understate them and every larger month raises questions. Write projections you can live inside.
“Our starting point with every file is the transaction projection, not the licence. When the projected flows, the activity code and the source-of-funds story read as one coherent account of the business, most other questions become routine.” Gennady Kurdiumov Senior Partner, Co-founder
Stated vs real
Bank-published timelines and lived ones are different data sets, and both are worth knowing.
On the stated side: Wio Business quotes account opening within three working days after documents are submitted, with plans at AED 99 per month (Essential) and AED 249 (Grow), the first month free and no minimum balance — tariffs as of publication. Emirates NBD’s business range is wider than the packages usually cited, running from Business Connect through Proprietor, Prime, Preferred, Prestige, Platinum and a dedicated Emirati package; Business Connect carries no minimum-balance requirement, while Business Proprietor expects average deposits from AED 50,000 under the bank’s Schedule of Charges — figures as of publication.
In practice — observation, not a promise — complete, low-risk files at classical banks take weeks rather than days, and files with flagged sectors or layered ownership can take months. The gap between a digital bank’s three-day quote and a classical bank’s compliance queue is real, which is why we often suggest running both tracks in parallel: a digital account to start operating, a classical application for the relationship, credit and cash services the digital tier does not offer.
A working plan
- Write the transaction profile first. Volumes, counterparties, geographies, currencies — before choosing a bank. This document decides which banks are realistic.
- Align the activity code. If the licence says one thing and the flows will say another, amend the licence before applying — not after the refusal.
- Build the source-of-funds chain. Not a declaration but a chain: where the capital originated, and the statements and agreements that trace it into the account.
- Flatten the ownership. Every layer between the account and a natural person is a question. Holding companies need demonstrable substance; unexplained nominees end files.
- Answer fast. Requests for additional documents come with deadlines; in our experience silence is read as withdrawal and closes the file.
- Run two tracks. Digital and classical in parallel — operational continuity on one side, full-service banking on the other.
After a refusal
The letter will not say why. The useful response is a diff, not indignation: what in the file plausibly triggered the outcome — the activity code, the ownership chain, the source-of-funds evidence, the projections — and what will be different next time.
Rebuild before resubmitting. A refreshed file with an amended activity code, substance documentation for the holding, or a completed evidence chain is a new application; the same PDF sent to a different bank is the same application.
On escalation: Sanadak, the UAE’s financial ombudsman, has operated since 2024 and handles complaints about banking services — but the route starts with a complaint to the bank itself, which has 30 days to respond, and a refusal to open an account falls within the ombudsman’s remit only where discriminatory grounds are alleged. It is not an appeal channel against a routine risk-based refusal, and we do not present it as one.
“Our advice after a refusal is unglamorous: change the file, not just the bank. The same documents in front of a new compliance team tend to produce the same answer a few weeks later.” Gennady Kurdiumov Senior Partner, Co-founder
FAQ
Why did the bank refuse without giving a reason? Because the disclosure rule has an exception that covers exactly this case. CBUAE Consumer Protection Standards (2.1.1.26) require a bank to give the reason for rejecting an application — unless the reason relates to financial-crime-compliance risk. AML-driven refusals sit squarely inside that exception, so the letter stays silent. Diagnosis therefore has to run on the file itself, not on the letter.
Does one refusal spoil my chances at other banks? Each bank runs its own risk assessment under its own policy, and whether refusal information travels between banks is not publicly documented. What certainly travels is your file — and an unchanged file invites an unchanged outcome. Fix the trigger before the next application.
Can I open a personal account without UAE residency? Generally yes, as a savings account — several banks maintain non-resident offerings, and the Dubai Land Department lists an e-service for opening an Emirates NBD account for non-UAE residents. A full current account, as a rule, requires a residence visa and Emirates ID — see our residence visa service if that is the missing piece.
Can I complain to a regulator about a refusal? Only narrowly. Sanadak accepts complaints about banking services after the bank has had 30 days to resolve the matter itself, and account-opening refusals fall within its remit only where discrimination is alleged. For an ordinary risk-based refusal, rebuilding the file is the productive route.
How long does opening really take? Digital banks state days — Wio quotes three working days after documents, as of publication. In our practice, classical banks take weeks for clean files and months for flagged sectors or complex ownership. Plan cash operations around the slower number.
Why do banks dislike general trading licences? Because “general trading” makes the transaction profile unfalsifiable: any flow fits, so no flow can be verified against a stated business. A narrower activity code that matches what you actually do is easier to monitor — and easier to approve.
Regulatory references, bank tariffs and thresholds in this article were verified as of 10 July 2026 against the central bank’s published guidance and public enforcement register, the banks’ live tariff schedules and the authorities’ service cards. Bank tariffs change without notice — we re-verify them at filing.
Ready to discuss your project?
