Offshore Company with a Bank Account: What's Realistic
A mill invoice that reads “offshore company with bank account” sells two products under one SKU. The registrar issues a legal person. The bank, a payment institution, or an exchange runs customer due diligence under its own licence and refuses the file when that work cannot finish.
As of August 2026 that split is the commercial question. Licensing and company formation lines the entity, the licence overlay, and the banking logic before anyone pays for a certificate. The clocks, the document pack, and the registers that still clear a desk are below.
Why the mill SKU is two files
The registrar’s job ends when the company exists. A licensed registered agent files the memorandum, the articles, and the first KYC pack. The registry returns a certificate and a number. From that moment the company can own assets and enter contracts, subject to the statute that created it. Payment rails are a second licence. A bank or an EMI must identify the customer, the beneficial owners, the source of funds, and the intended use of the account. FATF Recommendation 10, in the June 2025 Recommendations text, forbids anonymous and fictitious-name accounts and requires that work at the start of a business relationship. If the institution cannot complete it, the same paragraph requires the institution not to open the account.
Mills compress those two files into one landing-page price, often in the US$499 to US$2,999 band that occupies the US pack SERP. The small print, when it exists, is an undertaking to introduce the file to a bank or a PSP. Introduction is a defined AML concept. Rec 17 names what that letter does. An introduction is not an IBAN. Ksenia Babochkina, Commercial Director at Medici Expert, puts the sequence banks use: “We map jurisdiction options against banking access first, because a license without a working bank account is just a certificate on a wall.” Buy the company that matches a written appetite. Run onboarding as a project.
A UAE mainland or free zone licence plus a UAE corporate account is a different pair of files. Cabinet Resolution 134 of 2025, Articles 6 and 14, require verification of the customer and the beneficial owner before or during account opening, and prohibit a relationship where CDD cannot be applied. That UAE process sits in a separate guide. Keep an IBC and a UAE operating company on separate invoices.
Why the bank runs its own CDD
A registered agent collects identity papers because company law in BVI, Cayman, and Seychelles requires a licensed intermediary to know the client before the registrar will issue a number. That file satisfies the agent and the register. It does not bind a bank. FATF Recommendation 10 requires financial institutions to identify the customer and the beneficial owner, understand the purpose of the relationship, and monitor the account. If they cannot complete those steps, they must not open the account. An agent's KYC pack is one input. The bank still verifies identity from independent sources, reconstructs the ownership chart, and decides whether the activity matches its written appetite.
Recommendation 10: identity, purpose, and a closed door
The June 2025 FATF text, identical in the official Recommendations PDF reprints hosted by Saudi AML and by the Central Bank of Russia, sets four CDD measures: identify and verify the customer from reliable independent sources; identify the beneficial owner and understand ownership and control of a legal person; obtain information on the purpose and intended nature of the relationship; conduct ongoing monitoring, including source of funds where necessary. Triggers include establishing a relationship, occasional transactions above USD/EUR 15,000, payments covered by Recommendation 16, suspicion of money laundering or terrorist financing, and doubts about prior data.
Verification must occur before or during the opening. Countries may allow completion as soon as practicable after opening only where risk is managed and interruption of ordinary business would otherwise follow. An IBC with no local office, a nominee on the board, and a one-page “trading” objects clause does not meet that low-risk carve-out. The fail state is statutory: do not open the account, do not perform the transaction, terminate if the relationship already exists, and consider a suspicious transaction report. The mill SKU has no answer to that paragraph.
Recommendation 16: the wire will carry your name
Recommendation 16, revised at the June 2025 Plenary, is the payment-transparency overlay. The Interpretive Note in the same Recommendations PDF states the objective: originator and beneficiary information must travel with payments and value transfers so that ordering, intermediary, and beneficiary institutions can detect misuse. The payment chain starts at the financial institution that receives the customer’s instruction. For peer-to-peer cross-border payments above USD/EUR 1,000, the June 2025 update standardises name, address, and date of birth on the message. Correspondent banks refuse a nameless IBC payment. A licensed institution cannot sell an anonymous offshore account. The June 2025 text sets a long implementation runway through 2030. The commercial point in August 2026 is live.
Clocks that do not stack
Three calendars sit on the same engagement. They do not add into one SLA, and none of them is a promise of approval.
The registry clock is short. Medici’s public FAQ that offshore companies form “within a few days” describes a clean filing through a licensed agent. The BVI Financial Services Commission’s incorporating guide, as an example rather than a BVI essay, states that an ordinary share company with clean papers and no foreign-character name can be on the register within one working day of the Registry’s receipt. Cayman and Seychelles turnaround is a service-provider range of one to three business days for a clean file. Incomplete KYC, a restricted word in the name, or a corporate shareholder that itself needs apostilles stretches that clock.
The bank clock is the published onboarding range, not the certificate date. Medici’s accounting and tax FAQ states two to four weeks for a standard corporate account and six to eight weeks for high-risk crypto or fintech, both on the assumption of complete papers. Incomplete papers reset the clock. A certificate dated last Tuesday does not shorten a six-to-eight-week review. A UAE operating licence plus a UAE bank is a different calendar. CBUAE guidance for licensed financial institutions, in force 7 November 2025, repeats Recommendation 10’s fail state: shall not open the account if CDD cannot be undertaken.
The licence-and-banking cycle is longer again. The licensing page quotes two to four months for EU and offshore work. That figure is the cycle that includes a licence overlay, bank or PSP onboarding, and the compliance pack. It is not the IBC certificate. Founders who budget “a few days to operate” are reading the registry line as if it were the cycle. Budget weeks for a plain holdco account, and months if the activity is payments, crypto, or FX. Confirm live with the bank’s written checklist.
Who asks for which document
Nataly Medici, Managing Partner and CEO: “We tell clients early: a license rejected for sloppy documentation is harder to recover from than one that was never filed.” The same pattern appears when a thin KYC pack reaches a bank. Build one binder that the agent, the bank, and the PSP can each read. AML and KYC work belongs in the same week as the name check, not after the first refusal.
The pack as of August 2026. Recency rules (proof of address within three months, certified copies) are bank practice, not a registrar tariff. Confirm the live checklist before you courier originals.
Certificate of incorporation
The registry issues it. The registered agent files the application. The bank takes it as an input, not an approval. A PSP or EMI treats it the same way.
Memorandum and articles / objects
The registry files them. The agent drafts. The bank reads activity against appetite. The PSP reads activity against programme.
Name with restricted words (bank, trust, insurance, fund)
The registry may refuse or demand consent. The agent flags before filing. Bank and PSP both treat it as a licence overlay.
Register of directors and members
Some registers file; most do not publish. The agent holds the statutory registers. Bank and PSP ask for certified extracts.
Beneficial-owner declaration
BO filing in BVI (VIRRGIN) and some others. The agent collects at formation and on change. The bank verifies from independent sources and looks through nominees. The PSP verifies; programme-dependent.
Certified passport and proof of residential address
The registry does not see the natural person. The agent runs KYC on every director and UBO. The bank wants KYC plus recency (often 3 months). The PSP wants KYC plus recency.
Group chart to natural persons
The registry does not take it. The agent does, for corporate shareholders. The bank does; mismatches stop the file. The PSP does.
Source-of-wealth and source-of-funds narrative
The registry does not take it. The agent often wants it for agent AML. The bank always wants it for EDD, with invoices and bank traces. The PSP often wants it, plus wallet traces if crypto.
Business plan and flow-of-funds memo
The registry does not take it. The agent sometimes does. Bank and PSP both do.
Website, contracts, sample invoices
Registry and agent do not take them. Bank and PSP do, to test the story.
AML/CFT policies, CDD procedures
The registry does not take them. The agent only if the agent’s own licence requires them. The bank wants them for high-risk and for any licensed activity. They are standard for the PSP programme.
Proof of registered office
The registry wants the statutory address. The agent provides the office. The bank wants a substance story that matches the address. The PSP is similar.
Certificate of good standing
A later registry product. The agent obtains it after formation, if fees are current. Common for bank and PSP after the company exists.
CRS / tax-residence self-certification
Registry and agent do not take it. The bank does, as a reporting financial institution. The PSP does if the PSP is a reporting FI.
Minimum funding
The registry takes the government fee only. The agent takes a retainer. The bank is product-specific; a mill headline “from $X” is not a tariff. The PSP has e-money limits and programme caps.
Licence (VASP, EMI, PSP, fund)
An objects clause is not a licence. The agent may refuse a regulated name. The bank treats it as an appetite gate; unlicensed activity is a decline. The PSP applies its own licence overlay.
A shelf or “ready-made” company with a pre-attached account is the same pack with stale directors and a history the buyer did not live. Banks treat that history as theirs to review. Accounting and tax for international structures is the workstream that keeps books, source-of-funds files, and the CRS self-certification on one calendar so the bank’s ongoing monitoring matches the story you told at onboarding.
Which registers banks still underwrite
Banks underwrite a register they can explain to a correspondent desk and to their own compliance committee. Cayman exempted companies and BVI business companies still clear that conversation for holding vehicles and fund SPVs, because counterparties already know the statute and the licensed-agent model. Seychelles IBCs remain cheap to form. Correspondent desks treat many of them as high-risk unless the narrative, source of funds, and counterparties are tight. Panama sociedades sit on the EU Annex I list dated 17 February 2026. That flag lands on EU bank and PSP forms. Score the register against the bank before you pay the agent.
Cayman and BVI as examples banks still recognise
Cayman exempted companies remain the institutional default in this set for funds and for holding vehicles that institutions already review. Banks that clear Cayman files expect a licensed registered office, an Economic Substance Notification, and a chart that matches CIMA where the product is a fund. BVI business companies remain in use for deal SPVs and holdcos. The EU list dated 17 February 2026 parks the British Virgin Islands on Annex II, the state-of-play document, not on Annex I. Annex II is a question on a bank form. Budget extra correspondence.
Those two columns are examples. Government fees, BO portals, and substance tests sit in the jurisdiction comparison. The banking overlay is whether the desk will underwrite this statute for this activity.
Seychelles, Panama, and the 17 February 2026 EU list
Seychelles left Annex II in the 17 February 2026 update after a Global Forum rating on exchange of information on request, per the Council press release and the Commission snapshot. That removal helps a tax-good-governance checklist. It does not rewrite correspondent appetite. An IBC with thin substance and a crypto objects clause still lands in enhanced due diligence. Formation in a few days remains a registry fact. Banking remains a second file.
Panama is on Annex I. The Council’s list that day names ten jurisdictions, including Panama, Turks and Caicos Islands, and Viet Nam. EY’s alert 2026-0472 and the Commission news item match that set. The next revision is scheduled for October 2026. EU banks, some PSPs, and EU withholding screens treat Annex I as a risk flag. A Panama SA that invoices Europe will feel that flag on the onboarding form. Regional holding that never touches an EU bank is a different conversation. Name the bank geography before you name the register.
Do not name a rumoured “friendly bank list”. If you need an example of published appetite, use a public policy page. HSBC’s Financial Crime Policy, cited in the next section, is one such page. It is not an offer to bank your IBC.
High-risk activity versus a plain holdco
Activity codes weigh more than the island on the certificate. A pure equity holding company that receives dividends and files a reduced substance notification is a different customer from an OTC desk that will receive fiat from unknown wallets. Banks publish risk-based programmes. HSBC's public Financial Crime Policy, used here as an example of appetite rather than a product offer, applies more stringent controls to digital asset service providers, non-bank financial institutions, PEPs, correspondent banks, and customers established in countries with strategic AML deficiencies. The same page states that HSBC may refuse a legally permitted relationship. Map that programme against your activity before you pick the island.
Crypto, payments, and fintech
Digital asset service providers sit on that elevated-controls list. So do non-bank financial institutions. A VASP, an OTC desk, a wallet, or a PSP that books the IBC as the contracting party should expect the six-to-eight-week high-risk range, extra source-of-funds work, wallet screening, and a written flow of funds that a compliance officer can defend. Ksenia’s sentence on the Digital Assets page is the operating instruction: “Crypto companies don't get rejected by banks for being crypto companies. They get rejected for not being able to explain themselves clearly.” Crypto compliance in 2026 is the rules overlay. This article is the account file. A licence application that cannot explain flows will not produce an account that can.
Unlicensed activity that looks like a VASP, an EMI, or a fund is a decline in most programmes, whatever the island. Restricted words in the company name that the registry accepted still read as a licence claim to a bank. Change the objects, or obtain the licence, before you book the onboarding slot.
Holding, intra-group, and plain trade
A holdco that only receives dividends and capital gains, with a reduced economic-substance notification where the statute provides one, is the file most likely to fit the two-to-four-week standard range, provided the UBO papers, the group chart, and the source of the first inward payment are complete. Intra-group lending, IP royalties, and management fees leave the pure-holding box and pick up substance tests plus extra bank questions. A trading company that invoices third parties needs contracts, a website that matches the invoices, and a VAT or GST analysis in the customer’s country. Those are bank documents. They are also tax documents. Keep them consistent.
Nationality of the UBO, dual passports, and a residence in a high-risk jurisdiction move a “plain” holdco into EDD. The island cannot wash that. Sanctions lists, PEP status, and a prior declined application at another institution travel with the person.
What an introduction does
FATF Recommendation 17 permits countries to let a financial institution rely on a third party to perform Recommendation 10 elements (a) to (c), or to introduce business, if set criteria are met. The third party must be regulated and supervised for CDD and record-keeping. The relying institution must obtain the identity information immediately and must be able to obtain copies of identification data on request. The June 2025 text is explicit on the point mills blur: ultimate responsibility for CDD remains with the financial institution that relies on the third party.
An “introduction” in an engagement letter is that Rec 17 act, or a weaker commercial introduction with no reliance at all. In the weaker form the agent emails a relationship manager, attaches the certificate, and the bank opens its own CDD from zero. In the stronger form the bank may take the agent’s identity pack as a starting file and still re-verify. Neither form is an approval. Neither form is a correspondent relationship. Medici prepares onboarding files. It does not sell a partnership with a named bank, and this article does not invent one.
Ask, in writing, before you pay for a pack: which institution, which product (bank, EMI, or PSP), whether the agent claims Rec 17 reliance or a commercial introduction, and what happens to the fee if the institution declines. If the answer is “we cannot name the bank until after incorporation”, you are buying a certificate plus a later attempt.
PSP rails sit beside the bank
A payment institution or an EMI can give you multi-currency wallets, card issuing, or a fiat ramp without a full commercial bank current account. That is a useful rail. It is a third file, with its own licence, its own CDD, and its own appetite. Medici’s licensing page treats corporate bank support, PSP applications, and exchange accounts as parallel work under banking and payment infrastructure. The mill SKU that prints “bank account included” often delivers, at best, a PSP introduction. Read the product name on the engagement.
PSPs still apply Recommendation 10. Many are reporting financial institutions under CRS for the accounts they maintain. They still ask for the pack above. They still decline unexplained crypto flows. They add programme caps, corridor fees, and the right to freeze a wallet pending review. Use a PSP for collections and payouts. Keep a bank current account in the plan for salary rails, tenancy standing orders, or a counterparty that will not pay an EMI. A PSP login is not proof that the offshore company came with a bank.
CRS will report the account
The OECD’s 2025 consolidated Common Reporting Standard, incorporating the August 2022 amendments, is the reporting overlay on every licensed account in a participating jurisdiction. Reporting financial institutions identify accounts held by non-residents and by entities with non-resident controlling persons, then send that data to the local tax authority for exchange. The 2022 amendments pull specified electronic-money products, central bank digital currencies, and indirect crypto exposure through certain vehicles into scope. The Global Forum’s 2025 AEOI peer-review update assessed 118 jurisdictions; 114 had legal frameworks rated in place or in place but in need of improvement. BVI, Cayman, Seychelles, Panama, Mauritius, Singapore, and the UAE participate. The United States uses FATCA rather than CRS.
The mill privacy pitch dies on that pipeline. Budget for a tax-residence self-certification at onboarding and for the account to appear in your home filing. US persons face FATCA and, separately, FBAR reporting when foreign accounts aggregate above US$10,000. That is a home-tax file, not an incorporation extra. Place of effective management still sits on top of the certificate. If you run the board from London, Mumbai, or Dubai, say so in the bank file and in the tax file. A mismatch is how onboarding stops.
Who this sequence fits
The sequence fits a founder who can name the asset or the contract the company will hold, who will complete KYC to a bank standard, who will file substance and tax forms, and who will start the bank conversation in parallel with formation. It fits a group that needs a holdco or an SPV on a register a correspondent already knows, with a plain activity code and a source-of-funds file that matches the first inward payment. It fits a licensed operating company that needs an offshore wrapper beside it, not in place of it.
It does not fit a buyer of “company plus IBAN in 48 hours”, a person who needs to live and hire in the UAE (start the operating-licence file), or a business that must hold a VASP, EMI, or CASP permission of its own and hopes the IBC will substitute. It does not fit someone who will not explain source of wealth, who wants the account on the same invoice as the certificate as a matter of right, or who plans around non-reporting.
If the banks you need will not underwrite the register you like, change the register before you pay the agent. If they will underwrite the register only for holding, do not print a crypto objects clause for speed. The realistic pack in August 2026 is a company on a register the desk still recognises, a complete CDD binder, an honest activity code, and a clock that treats the certificate as day one of onboarding rather than the day you operate.
FAQ
Do I get a bank account when I form the offshore company?
No. The registry issues a company. The bank or PSP runs a separate CDD file under FATF Recommendation 10. An engagement that says “bank included” is an introduction or a later application. Ask which institution and which product before you pay.
How long does company plus account take in 2026?
A clean offshore filing can complete in a few days (registry line). Standard corporate accounts: two to four weeks with complete papers. High-risk crypto or fintech: six to eight weeks. The EU and offshore licence-and-banking cycle on Medici’s licensing page is two to four months. Incomplete papers reset the bank clock. None of those figures is an approval.
Which country is easiest for an offshore company bank account?
Ease of formation is not ease of banking. Cayman and, for institutional SPVs, BVI still clear more holding and fund files than a thin Seychelles IBC. Panama’s place on EU Annex I (17 February 2026) adds friction at EU banks and PSPs. Score activity and the bank’s written appetite first.
Can US citizens open an account for an offshore company?
US persons can hold foreign accounts if they complete the bank’s CDD and report under FATCA and, where the aggregate exceeds US$10,000, FBAR. The bank will collect a tax-residence self-certification. Privacy from the IRS is not a design feature.
What documents does the bank want that the agent did not?
Source of wealth and source of funds, a flow-of-funds memo, sample invoices or contracts, a website that matches the story, and, for high-risk activity, AML policies and wallet traces. The agent’s passport copies are necessary and not sufficient.
Is a UAE corporate account the same as banking an offshore company?
No. A UAE operating licence plus a UAE corporate bank account is a separate regulated path under Cabinet Resolution 134 of 2025 and CBUAE CDD guidance. An IBC does not grant that licence or that account. The two structures serve different purposes and go through different approval processes.
What does a bank “introduction” mean?
FATF Recommendation 17 allows a regulated third party to introduce business or to perform part of CDD. Ultimate responsibility stays with the bank. A commercial email with the certificate attached is weaker still. Neither is an IBAN.