The Bank Onboarding Document Pack: A Checklist

Cabinet Resolution 134/2025 Article 6 requires that verification before or during opening. Article 14 closes the gate if customer due diligence cannot be applied.

Founders who treat the published product PDF as a shopping list stall, because the statute speaks in categories (identity, beneficial owner, purpose, source of funds where needed) and each bank then publishes its own rows. Ksenia Babochkina, Commercial Director at Medici Expert, puts the commercial order in one line: “We map jurisdiction options against banking access first, because a license without a working bank account is just a certificate on a wall.” UAE company formation and licensing is where that map is drawn.

‍

What sits in a bank onboarding document pack?

Five families of paper. Constitutional documents prove the legal person: name, form, objects, who may bind it. The UBO pack walks ownership and control to named humans. Identity papers attach passports, national IDs, and addresses to those humans and to anyone who will sign. Licences show what the company may legally do in the place it is asking for an account. Source-of-funds and expected-activity papers tell the desk where the first credit comes from and what later flows should look like.

KYB is the industry label for that stack when the customer is a legal person. FATF Recommendation 10, updated June 2025, still sets the international floor: identify the customer, identify the beneficial owner, understand purpose, and refuse the account if those steps cannot be completed. UAE licensed institutions apply Cabinet 134. US and UK banks apply their own CIP and money-laundering rules on top of the same families. The licence activity must match the website, the share register must match the UBO chart, and the signatory on the board resolution must match the passport. When those disagree, Articles 9 and 10 cannot finish, and Article 14 does the rest.

‍

What must a licensed bank obtain before it opens the account?

Cabinet 134/2025 Article 9 tells financial institutions what to obtain for a legal person, using original documents or data from a reliable independent source: legal name and form, memorandum, tax registration number if the person is subject to corporate tax, registered office, articles or equivalent, and names of persons in senior management. The institution must also verify that anyone acting for the customer is authorised, and understand purpose, business, and ownership.

Article 10 walks beneficial ownership to a natural person at 25 percent, then control, then senior management. CBUAE’s CDD guidance, dated 6 November 2025, is blunt: another legal person cannot sit as the UBO. Article 8 keeps the file alive after opening by testing transactions against the customer, the activity, and, where necessary, the source of funds. Banks add product rows. Confirm the live checklist with the institution you are filing.

‍

Do you have the constitutional pack?

The constitutional pack is the company’s legal skeleton. CBUAE’s November 2025 guidance tells licensed institutions to verify name and form, memorandum, principal place of business, attested articles, key controllers, ownership, intended purpose, and the nature of the business, using a certificate of incorporation with an official seal, a registry extract, or a government corporate ID.

Emirates NBD’s digital-intake page, fetched 24 August 2026, asks for a valid trade licence or certificate of incorporation from any UAE issuing authority, plus a memorandum, articles, or board resolution. The FAQ restates attested constitutional documents, including a general partnership contract and amendments. Those are product rules for that channel, not a Central Bank shortlist.

Is the trade licence or registrar extract current?

A UAE mainland or free-zone company shows a trade licence issued by Dubai DET, another emirate’s economic department, a free-zone authority, or the ADGM or DIFC registrar. Al Maryah Community Bank’s public business page welcomes companies registered in the UAE with a valid trade licence, including free-zone companies. ENBD asks for a licence or incorporation certificate from any UAE issuing authority. The pack question is which authority issued this paper, whether it is unexpired, and whether the activity codes cover the flows in the expected-activity note.

A US company shows articles of organization or incorporation, often plus a certificate of good standing if the bank asks. Wells Fargo’s required-documents page, fetched 24 August 2026, wants government registration. A UK limited company shows the Companies House number and incorporation date; Barclays asks for those fields on its public application page. Many desks want an extract dated inside 30 to 90 days. That window is desk convention, not a line in Cabinet 134. Pull a fresh extract the week you file.

Are the memorandum, articles, and amendments in the file?

Article 9(1)(b) of Cabinet 134 names the memorandum and the articles, or equivalent approved documents, as basic information for a legal person. ENBD lists attested MoA, AoA, board resolution, and partnership contract with amendments as mandatory for its digital product. A pack that files the 2019 memorandum and omits the 2025 share-transfer amendment will fail the ownership walk in Article 10. US LLCs often add an operating agreement. Foreign-language constitutions need a certified translation.

Who may open the account, on paper?

Article 9(2) requires the institution to verify that any person acting on behalf of the customer is duly authorised, and to identify that person. The paper that does that work is a board resolution, managers’ resolution, or banking mandate that names the account, the bank, and the signatories, matching passport romanisation. ENBD’s digital FAQ puts the board resolution in the same mandatory family as the memorandum. A power of attorney that names a person who is not on the licence is a hold.

‍

Do you have the UBO and control pack?

Beneficial ownership is a natural-person problem. Cabinet 134 Article 10 sets the walk: 25 percent, then control by other means, then senior management. CBUAE’s guidance repeats that a company cannot be classified as the UBO no matter what percentage it owns. The pack is a chart that reaches humans, identity documents for those humans, and, where filed, the UBO declaration or zone register extract. Article 11 lets institutions use public registers for listed companies with adequate disclosure. A private holding company above a UAE operating company is not that exception. The chain continues until a named individual appears.

Does the chart reach a natural person at 25 percent?

Article 10(1)(a) starts with the natural person who ultimately owns, individually or jointly, a controlling ownership interest of 25 percent or more. Joint holdings split to sit at 24.9 percent still get aggregated when the desk can see they move together. Percentages must match the share register, the MoA, and any UBO filing. Registrar UBO rules for companies are company-law filings. Bank CDD follows Article 10, beginning at 25 percent, then control, then senior management.

What if a company sits above the applicant?

A holding company is an input, not an endpoint. The pack then adds the parent’s certificate of incorporation, share register or incumbency, and the same UBO walk until humans appear. Foreign corporate documents used in the UAE typically travel the consular chain and MOFAIC, because the UAE is not a party to the Hague Apostille Convention. ENBD’s digital product, as published, is built for a sole proprietor or a single-layer company whose UBOs are individuals. Multi-layer files use a different intake. They still need the nested pack.

Where do nominees, PEPs, and the senior-management fallback sit?

Article 10(1)(b) and (c) cover control by other means and, if no natural person is identified through ownership or control, the natural person holding a senior management position. Article 39 requires nominee director and nominee shareholder disclosure on a short clock. Article 16 requires reasonable measures on source of funds and source of wealth for foreign PEPs, and the same measures for domestic and international-organisation PEPs when the relationship is high risk. Put the PEP facts in the file before the analyst has to hunt them.

‍

Do you have identity papers for every human the bank must name?

Article 9(1)(a) wants the name as on the identity card or travel document, nationality, address, date and place of birth, and a true copy of a valid identity card or travel document. On a company file that set attaches to natural-person shareholders, directors, UBOs, and authorised signatories. CBUAE’s guidance adds that Emirates ID for residents should be validated through ICP’s Validation Gateway, with the card copy and the digital evidence retained.

ENBD’s published digital list wants passports and Emirates IDs of partners and authorised signatories, and at least one UAE-resident signatory for that product. Other desks add residential address. Wells Fargo asks each owner for a primary government photo ID and a secondary ID. Barclays asks for three years of residential addresses and at least one UK resident on the application. If the licence says “Mohammed” and the passport says “Muhammad,” the analyst stops. Use one spelling on the chart, the resolution, the bank form, and the translation.

‍

Do you have licences that match the money that will move?

A trade licence proves the company may exist and may carry named activities. A sector permission (VARA, FSRA, DFSA, EMI, PSP, MSB) proves it may handle other people’s money or virtual assets in the way the website claims. The pack needs both when the account will see those flows. A consultancy licence plus an exchange homepage is a mismatch the desk cannot close with a covering letter. Amend the licence, or write a scope note that ties each flow to a licensed object, before you file. AML and KYB documentation work is where the policy binder is built. Licence copies still belong in the onboarding pack as evidence.

Which operating licence sits in the UAE file?

Mainland: DET or the emirate DED. Free zone: the zone authority. ADGM and DIFC: the financial-free-zone registrar. The activity list on the face of the licence is what the analyst reads against invoices and the website. A “licence in progress” receipt is not a licence. VAT TRN and corporate-tax registration, issued through EmaraTax, appear on some bank lists. Cabinet 134 Article 9 names a tax registration number for legal persons subject to corporate tax as basic information. If you have the certificates, put them in the pack.

When does a sector permission belong in the same binder?

When the expected-activity note describes payments, e-money, brokerage, custody, or virtual-asset services, the desk will ask for the permission that authorises those services. A VARA licence copy, an FSRA or DFSA permission, a FinCEN MSB registration, or a UK FCA authorisation is then a pack item. The objects in the memorandum should already allow the activity.

‍

Do you have source-of-funds paper the desk can reconstruct?

CBUAE splits two questions. Source of funds is the origin of the money that will credit this account. Source of wealth is how the humans who own the company built their stock of assets. Article 8 brings source of funds into ongoing monitoring where necessary. Article 16 brings both into PEP files. Higher-risk ratings, nested structures, and first credits that do not match the business plan pull the same papers even when no PEP is in the chart. The pack that works reconstructs a trail: a named bank’s closing statement, a share-subscription agreement that matches the incoming wire, a land-department sale file, or audited retained earnings.

Where did the first credit come from?

ENBD’s published digital list wants six months of bank statements of the company if it exists, or of the partner if the company is new. Other desks ask for the evidence behind the first inward payment: sale of shares, property, a named dividend, or a loan agreement. The amount should match the expected-activity note within a range the analyst can explain. Keep a founder injection labelled as a capital contribution, with the underlying personal SoF attached, rather than mixing personal spending into the company’s first credit.

When does source of wealth join the pack?

When the rating is high, when a foreign PEP is in the file, when a domestic or international-organisation PEP sits in a high-risk relationship, or when opening balances sit out of line with the stated business. CBUAE’s guidance describes SoW as the sources that generated net worth: career, inheritance, sale of a business, investments. The evidence is career history, tax filings, sale contracts, probate. Put SoW in the pack when those triggers are obvious.

‍

Do you have a business plan the bank can treat as expected activity?

Article 9(3) and (4) require the institution to understand the purpose and intended nature of the relationship and the nature of the customer’s business. The document that carries that work is usually a short expected-activity note: products, client types, geographies, currencies, monthly volume ranges, main counterparties, and which licence activity each flow sits under. Write ranges you can defend with invoices or signed pipeline, and update the note when the licence or the website changes. Existing companies add management accounts when asked. New companies can still describe the first twelve months in numbers that match the SoF pack.

‍

Which UAE papers appear on some desks and not on others?

Tenancy sits on ENBD’s published FAQ as a mandatory row. For the company, Ejari, a zone allocation letter, or a flexi-desk confirmation is the usual proof that the registered office is real. A founder’s villa lease is the company’s address only if the licence says so. Wells Fargo, on the US side, rejects PO boxes, virtual addresses, and registered-agent mailboxes as the physical address.

The establishment card is an immigration file. GDRFA Dubai publishes a service to issue one for private-sector and free-zone institutions, with issuance listed at AED 200 plus VAT (confirm live). The card lets the company sponsor visas. It is not named in Cabinet 134 Article 9 as a CDD identity document, and it is not on ENBD’s published digital mandatory list as of 24 August 2026. Some relationship managers still ask for the card or the immigration-file number. Put it in the pack if you hold it.

‍

How does the pack change for a UAE company, a US LLC, and a UK limited company?

The families stay the same. The issuing authority and the extra product gates change. Read the three profiles in the same order: constitutional evidence the bank can verify at a registrar, identity of the humans, beneficial ownership, licence or tax identifier, address, then the extra rows that desk adds. A UAE operating company files a trade licence. A Delaware LLC files articles of organization. A Companies House limited company files a CRN the bank can pull. Confirm each institution’s live list the week you apply. None of the three is a ranking. The comparison below is how those families look on published checklists as of August 2026.

UAE operating company

Constitutional evidence: current trade licence, extract, attested memorandum and articles or partnership contract with amendments, board resolution. Identity: passports of shareholders, directors, and signatories; Emirates ID for residents, validated where the bank uses ICP. Beneficial ownership: UBO declaration or zone register plus a chart to natural persons at the Article 10 walk. Licence or tax identifier: the trade licence itself; TRN and CT evidence if issued. Address: Ejari, zone letter, or tenancy in the company’s name. Extra rows: six-month statements on ENBD’s digital list, SoF for the first credit, expected-activity note, sometimes the establishment card. Digital ENBD wants single-layer individual owners and at least one UAE-resident signatory. Fits when you hold a current UAE licence and can produce that stack. Fails when the licence is expired, the UBO still ends on a company, or the website sells an activity the licence does not name. UAE company formation and licensing is the licence side of that stack.

United States LLC or corporation

Constitutional evidence: articles of organization or incorporation, and, where the bank asks, operating agreement, bylaws, or certificate of good standing. Wells Fargo lists those formation papers by entity type and wants government registration. Identity: primary plus secondary ID for owners and control persons. Beneficial ownership: FinCEN BOI is a company filing; the bank still collects owner and control-person information on its own forms. Licence or tax identifier: EIN from the IRS; Chase notes that some sole proprietors may open with an SSN, which is a product rule. Address: physical operating address; Wells Fargo will not take a PO box or a virtual office. Extra rows: DBA certificate if the trade name differs, initial deposit per product. Fits when the entity is registered in a US state, humans can attend or notarize, and the physical address is real. Fails when the only address is a registered-agent mail drop or the formation papers name different people from the bank form.

United Kingdom limited company

Constitutional evidence: Companies House number and incorporation date, which Barclays asks for in public; certificate of incorporation and articles if the desk wants copies. Identity: director and PSC identity, tied to Companies House identity verification that GOV.UK made mandatory from 18 November 2025; Barclays wants three years of residential addresses and at least one UK resident on the application. Beneficial ownership: the PSC register plus the bank’s own control questions. Licence or tax identifier: UTR and VAT number where registered; tax and turnover details on the Barclays page. Address: trading address as well as registered office. Extra rows: UK Finance’s business banking checklist, which Barclays points to; expected turnover; sometimes a business plan. Fits when a UK-resident controller can complete the application and Companies House records match the pack. Fails when every director is non-resident on a product that requires a UK resident, or identity verification is unfinished.

‍

Which certifications, translations, and legalisations belong in the file?

A scan of a scan fails Article 9’s test of original documents or a reliable independent source when the desk cannot tell what it is looking at. Certified copies, attestations, and translations make a foreign or bilingual file readable. Nested holdings almost always need this tab, because the parent’s papers were issued in another language and another legal system. Start the chain while formation is still running if you already know a foreign parent will sit above the applicant. Waiting until the relationship manager asks is how a two-week file becomes a two-month file for a group that looked simple on the licence.

How do foreign papers enter a UAE file?

The UAE is not listed as a party to the Hague Apostille Convention on the HCCH status table used in this research (last HCCH update cited 30 June 2026; confirm live). Foreign certificates of incorporation, incumbency letters, and powers of attorney typically need the consular chain in the country of issue and then MOFAIC in the UAE. An apostille from a Hague state does not replace that chain for use in the UAE.

What language does the desk actually read?

Arabic and English are the working languages of UAE banks. A memorandum in Russian or a Chinese business licence needs a certified legal translation. Names must match the passport machine-readable zone. Do not translate “LLC” into a UAE legal form the company does not hold. Colour scans at a resolution the portal accepts beat a photographed glare from a phone.

‍

When is the pack complete enough to file?

File when every family has a current paper, the chart reaches humans, the licence matches the website, the first-credit story has evidence, and the expected-activity note uses numbers you can defend. Nataly Medici, Managing Partner and CEO, puts the filing risk without decoration: “We tell clients early: a license rejected for sloppy documentation is harder to recover from than one that was never filed.” A refused bank case sits on internal watchlists that CBUAE’s November 2025 guidance tells licensed institutions to screen against before the next onboarding.

Medici’s public FAQ puts a standard trading or professional company with a single layer of individual owners, a resident signatory where the product requires one, and a reconstructable first credit in a two-to-four-week band, assuming complete papers. Crypto, payments, and other high-risk fintech files sit in the six-to-eight-week band on the same FAQ. Incomplete papers reset the clock. Neither band is an approval. Confirm the live product list, then send one PDF the analyst can work in a sitting. Crypto compliance expectations in 2026 is the policy context if the activity is virtual assets.

‍

FAQ

Which documents are required for a corporate bank account?

Constitutional papers (licence or articles, memorandum, signatory resolution), identity of owners, directors and signatories, a beneficial-ownership walk to natural persons, address evidence, and, where the desk asks, source-of-funds for the first credit plus an expected-activity note. Emirates NBD publishes a product list that includes trade licence, attested MoA/AoA or board resolution, passports and Emirates IDs, and tenancy. Confirm the live checklist. Cabinet 134 sets categories, not a universal PDF order.

Can I open a corporate bank account with only an EIN or tax number?

A US EIN identifies the entity for tax. An EIN without formation papers, owner ID, and a physical address does not satisfy Wells Fargo’s published required-documents page. In the UAE, a tax registration number is basic information under Article 9 for persons subject to corporate tax; it does not replace the trade licence or the UBO walk.

Do I need an establishment card to open a UAE corporate account?

GDRFA issues the establishment card as the company’s immigration file so the company can sponsor visas. Emirates NBD’s published digital mandatory list, fetched 24 August 2026, does not name the card. Cabinet 134 Article 9 does not name it either. Some desks still request the card or the immigration-file number. Include it if you hold it.

Can I open a corporate account online?

Some UAE and US products accept a digital pack. ENBD’s digital channel is limited to a UAE legal entity that is a sole proprietor or single-layer company with individual UBOs, and its FAQ wants a UAE-resident signatory. Multi-layer ownership uses another intake. Online submission does not reduce CDD. Article 6 still requires verification before or during opening.

How recent must company extracts and statements be?

Cabinet 134 does not set a 30-day extract rule. Desks commonly want a registry extract inside 30 to 90 days and, on ENBD’s digital list, six months of statements of the company or of the partner if the company is new. Pull fresh extracts the week you file.

What is a KYB documents list?

KYB is CDD on a legal person: identify the company, identify beneficial owners, understand purpose and business, and collect the evidence the institution’s procedures require. US, UK, and UAE banks publish different rows on top of the same families. There is no single global KYB PDF.

Does a complete pack mean the bank will open the account?

No. Article 14 requires the institution to refuse if it cannot apply CDD. A complete pack lets the desk apply CDD. Appetite, sector policy, and correspondent constraints can still decline a readable file.

‍

Sources

• Cabinet Resolution No. (134) of 2025, Executive Regulations of Federal Decree-Law No. (10) of 2025 (Arts. 6, 8, 9, 10, 11, 14, 16, 38, 39). Ministry of Justice hosted text. https://www.moj.gov.ae/assets/6b3e3bf7/cabinet-resolution-no-134-of-2025-regarding-the-executive-regulations-of-federal-decree-law-no-639053857268671601.aspx
• CBUAE, Guidance for LFIs on Customer Due Diligence / Know Your Customer and Record-Keeping, 6 November 2025. https://www.centralbank.ae/media/bj5prczk/guidance-for-lfis-on-customer-due-diligence-and-record-keeping-6-november-2025.pdf
• Emirates NBD, Open Business Bank Account Online (eligibility, packages, FAQ document list; fetched 24 August 2026). https://www.emiratesnbd.com/en/business-banking/open-business-bank-account-online
• Al Maryah Community Bank (Mbank), Business Banking. https://www.mbank.ae/business-banking/
• GDRFA Dubai, Establishment Card for Institutions in the Private Sector / Free Zone. https://gdrfad.gov.ae/en/services/0bae0953-6749-11ea-0320-0050569629e8
• Wells Fargo, What you’ll need to open a business deposit account (fetched 24 August 2026). https://www.wellsfargo.com/biz/required-documents/
• Chase for Business, What do you need to open a business bank account? https://www.chase.com/business/knowledge-center/start/what-do-you-need-to-open-a-business-account
• Bank of America, How to Open a Business Bank Account (dated 4 May 2026 in SERP). https://business.bankofamerica.com/en/resources/how-to-open-a-business-bank-account
• Barclays, Business Current Account, “What you need to apply” (fetched 24 August 2026). https://www.barclays.co.uk/business-banking/accounts/business-current-account/
• GOV.UK, Verifying your identity for Companies House. https://www.gov.uk/guidance/verifying-your-identity-for-companies-house
• FATF Recommendations, Recommendation 10 (June 2025 update). https://www.fatf-gafi.org/
• HCCH, Status table, Apostille Convention. https://www.hcch.net/en/instruments/conventions/status-table/?cid=41
• FTA, Corporate tax registration via EmaraTax (pointer). https://tax.gov.ae/