Opening a Corporate Bank Account in the UAE: The Real Process

Founders who have, or are forming, a mainland or free-zone company wait on this file more than on the registrar.

Ksenia Babochkina, Commercial Director at Medici Expert, puts the order of work in one line: “We map jurisdiction options against banking access first, because a license without a working bank account is just a certificate on a wall.”

‍UAE company formation and licensing is where that map is drawn. Documents, CDD, what desks ask, refusals, and clocks sit on that map.

‍

What does a UAE corporate bank account require before you apply?

The customer is the company. A personal current account in Dubai does not become a corporate operating account because you paste the trade name on an invoice. Licensed banks collect a valid UAE trade licence or certificate of incorporation, constitutional documents, signatory powers, and identity evidence for the humans behind the file. Emirates NBD’s public digital-intake page states that floor: a legal entity operating in the UAE, a licence or incorporation certificate from a UAE issuing authority, passports and Emirates IDs of partners and authorised signatories, and a memorandum, articles, or board resolution. Al Maryah Community Bank’s business page welcomes companies registered in the UAE with a valid trade licence, including free-zone companies. Those are published product rules. They are not a Central Bank shortlist of “approved” banks.

CBUAE licenses institutions and keeps a public register. Search the Licensing directory on centralbank.ae, last updated 13 August 2026, or open the CB Register banks section headed as of 23 June 2026.

The licence must exist before the bank can treat you as a local operating customer. Formation in the UAE, on Medici’s public FAQ, runs about one to three weeks for a clean file. Banking starts after the licence number is real. You can prepare the pack in parallel. You cannot skip the registrar. A PSP, EMI, or exchange account moves funds. It does not replace a UAE corporate account for rent, Wage Protection System payroll, or local supplier AED. Digital “open in minutes” products exist for eligible SME files. They still run CDD.

‍

What must the bank verify before it opens the account?

Federal Decree-Law No. 10 of 2025 is the AML statute. It entered into force on 14 October 2025, two weeks after Gazette publication on 30 September 2025, and it repeals Federal Decree-Law No. 20 of 2018. Cabinet Resolution 134/2025 is the executive regulation. The CBUAE Rulebook marks it in force from 14 December 2025. CBUAE’s 6 November 2025 CDD guidance tells licensed financial institutions to finish identification before the relationship starts and before they conduct transactions on the customer’s behalf.

Article 6 of Cabinet 134/2025 requires verification of the customer and the beneficial owner before or during the business relationship or the opening of an account. Low-risk files may finish verification after the relationship starts if the bank completes it as soon as possible, shows the delay was needed so as not to disrupt ordinary business, and applies measures that control crime risk. High-risk files do not get that deferral. Article 9 tells the institution to identify a natural person, a legal person, or a legal arrangement from original documents or from a reliable independent source. CBUAE’s November 2025 guidance still points to “Article 8 of the AML-CFT Decision” for the form of identity evidence, physical or digital, provided the source is reliable and independent. That old Cabinet 10/2019 number maps to Article 9 of 134/2025. Use Article 9 in the file.

For a company, Article 9 work is legal name and form, registration number, registered address, directors, and the powers of anyone who signs. Article 10 then walks ownership to a natural person at 25 percent, then control by other means, then senior management. CBUAE’s guidance is blunt: another legal person cannot sit as the UBO.

Article 14 is the stop. If the institution cannot apply CDD, it must not establish or continue the relationship or execute the transaction, and it must consider a suspicious transaction report. AML, KYC and onboarding work is the file the analyst can close.

‍

Which papers does the bank ask for, and who issues them?

CBUAE Consumer Protection Rulebook 3.21 tells licensed financial institutions to disclose documentary requirements in a clear and consistent way. Regulation C 2/2026 Article 4.49, in force from 13 September 2026, repeats that duty for SME customers. Each bank then publishes its own list. The pack those lists share for a mainland or free-zone operating company, as of August 2026. Confirm the live checklist. Extra items appear for nested owners, foreign parents, PEPs, and virtual-asset activity.

Emirates NBD’s digital FAQ names a trade licence, attested constitutional documents, identity documents of shareholders and partners, a tenancy contract, and six months of company statements if the company exists, or of the partner if it is new. Other desks add an expected-activity note, invoices, and source-of-funds paper for the first credit. Incomplete papers reset the clock.

‍

Valid trade licence or commercial licence

Issued by Dubai DET or another emirate DED (mainland), a free-zone authority, or the ADGM or DIFC registrar. Proof the legal person exists and the activity is licensed in the UAE. ENBD and Mbank treat a UAE-issued licence as the floor.

Certificate of incorporation or current extract

Same registrar. Name, number, status, address, directors. Many desks want this dated inside 30 to 90 days (desk convention, not a statute).

Memorandum, articles, or partnership contract, plus amendments

The company at formation; notary or zone attestation. Objects, share capital, who may bind the company. ENBD lists these as mandatory.

Board resolution or signatory mandate

Board or managers. Who may open the account and appoint online users.

UBO declaration or zone UBO register

Company; zone or DED filing. Natural persons at 25 percent, then control, then senior management (Cabinet 134/2025 Art. 10). A company cannot sit as UBO.

Passports of shareholders, directors, signatories

Home-country passport authority. Identity of the humans (Art. 9). One romanisation across licence, chart, and bank form.

Emirates ID of resident partners and signatories

ICP. CBUAE CDD guidance: validate via ICP’s Validation Gateway; keep the card copy and the digital evidence.

Proof of the company’s address

Ejari or tenancy; zone allocation or flexi-desk letter. Registered office. A founder’s villa lease is not the company’s address unless the licence says so.

Six-month bank statements

Previous bank of the company, or of the partner if the company is new. ENBD’s published digital list. Source of funds and, for an existing company, a prior banking trail.

Source-of-funds pack for the first credit

Prior bank, auditor, land department, share-subscription papers. Origin of the money that will land. CBUAE splits this from source of wealth for higher-risk humans.

Expected-activity note or short business plan

The company. Products, geographies, volumes, counterparties. Article 8 later tests transactions against this profile.

VAT TRN certificate, if registered

FTA via EmaraTax. Banks may request it. CBUAE does not make a TRN a legal condition of opening.

Corporate tax registration evidence

FTA via EmaraTax (page updated 25 June 2026). Same. A pointer, not a tax treatise. Accounting and tax for fintech structures is where that registration is built.

Foreign parent extract, share register, incumbency

Foreign registrar, then UAE embassy or consulate, then MOFAIC. Nested UBO. The UAE is not a Hague Apostille party.

Certified translation

UAE-certified legal translator, or a translator the bank lists. Non-English or non-Arabic originals.

‍

Nataly Medici, Managing Partner and CEO of Medici Expert, puts the filing risk without decoration: “We tell clients early: a license rejected for sloppy documentation is harder to recover from than one that was never filed.”

A refused bank case sits on internal watchlists that CBUAE’s November 2025 guidance tells licensed institutions to screen against before the next onboarding.

‍

How does a mainland licence versus a free-zone licence show up in the file?

The Government of Dubai’s Invest in Dubai portal treats mainland and free zone as two set-up options. Dubai Department of Economy and Tourism issues the mainland trade licence. Other emirates use their own economic-development departments. A free-zone company holds a licence from that zone’s authority. ADGM and DIFC companies hold a financial-free-zone registration. The bank’s question is narrower than the founder’s zone debate: which UAE authority issued this paper, is it current, and do the activity codes cover the flows you described.

A free-zone licence is a UAE licence. Mbank states in public that free-zone companies with a valid trade licence can apply. ENBD’s digital page asks for a licence or certificate of incorporation from any UAE issuing authority. The zone name is a document field. Desks still read the activity list. Consultancy on a flexi-desk licence and cross-border payments on the website is a mismatch the analyst cannot close. Amend the licence before you submit, or write a scope note that ties each flow to a licensed object. A “licence in progress” receipt is not a licence.

A foreign holding company above the UAE entity is an input. This article is for a UAE operating company. An offshore company that wants an account without a UAE licence is a different product.

‍

What do banks ask beyond the published checklist?

The published list gets you into the portal. The analyst then tests whether the story holds. Cabinet 134/2025 requires the institution to understand the purpose of the relationship. CBUAE’s 6 November 2025 guidance tells licensed financial institutions to build an expected-activity profile and to test later flows against it. Source of funds, the website, invoices, and the UBO chart are that test. A PDF stack that disagrees with itself fails because the desk cannot apply CDD. Digital products add gates that marketing pages bury. ENBD’s digital FAQ, fetched 18 August 2026, wants a UAE-resident signatory and a single-layer company whose owners are individuals.

Source of funds and source of wealth

CBUAE splits two questions. Source of funds is the origin of the money that will credit this account: a named bank’s closing statement, a share-subscription agreement with the incoming wire, a property sale with land-department papers, retained earnings with audited accounts. Source of wealth is how the humans who own the company built the stock of assets. Higher-risk ratings, foreign PEPs, and complex structures pull both. Article 16 of Cabinet 134/2025 requires reasonable measures on source of funds and wealth for foreign PEPs, and the same measures for domestic and international-organisation PEPs when the relationship is high risk.

A CEX screenshot and a wallet-balance PDF fail that test. If seed capital sat in digital assets, the pack is the original fiat origin, the venue that converted it, transaction IDs as support, and the accounting trail that ties those assets to the shareholder who is wiring in. Group funding needs parent board minutes, an intercompany loan or dividend resolution, and the parent’s statement showing the debit.

Activity, website, invoices, and remote KYC

Open your own site the way a junior analyst does. Legal name in the footer. Licence number. Jurisdiction. Product pages that match the objects on the licence. Three recent invoices, a master services agreement, and a payment-flow diagram beat a marketing deck. Write inbound and outbound monthly ranges, corridors, and counterparties by type.

CBUAE treats remote onboarding as higher risk when there is no video contact. Residents still need Emirates ID validation through ICP’s gateway. Non-residents bring a travel document plus an address the bank can test. Some products want a branch visit. Some accept video plus UAE Pass. You supply the evidence that channel requires, in the form Article 9 accepts.

Foreign corporate papers for a parent need a consular chain. The Hague Apostille Convention’s status table, last updated 30 June 2026, lists 130 contracting parties. The UAE is not among them. An apostille from a foreign registry does not replace UAE embassy attestation plus the Ministry of Foreign Affairs. MOFAIC’s attestation service states that fees depend on the number of documents and whether the document is personal or commercial. Confirm the live tariff in the portal.

‍

Why do applications get refused?

A refusal is a CDD decision or an appetite decision. Article 14 covers the first: the institution cannot apply CDD, so it must not open. Appetite covers the second: the bank can apply CDD and still declines the sector, the geography, or the structure. CBUAE’s November 2025 guidance tells licensed institutions to screen applicants against internal lists of customers previously exited or denied onboarding. Founders hit the same close codes: incomplete identity, a UBO chart that stops at a company, a licence that does not match the website, source of funds the desk cannot reconstruct. C 2/2026 Article 4.52, from 13 September 2026, will require SME banks to record those rejection reasons.

Incomplete CDD and papers that contradict each other

Missing passports, expired extracts, unsigned resolutions, and translations without a stamp are the mechanical refusals. Contradiction is slower. The onboarding form says payments. The licence lists management consultancy. The website sells brokerage. Pick the legal name as the spine. Put the brand on a covering note. Change the site before you upload if the product copy exceeds the licence.

Bearer shares are a hard stop. Article 38(4) of Cabinet 134/2025 forbids companies established in the State from issuing bearer shares or bearer share warrants. Nominee shareholders need the nominator named, with KYC on that nominator. Article 39 requires the nominee to disclose capacity and nominator within fifteen working days.

Nested owners, stale extracts, and watchlist hits

The reviewer does not stop at the company that filled in the portal. A BVI holdco over a UAE operating company, plus a founder who claims control in chat but not on the register, leaves the analyst with PDFs and no person to screen. Walk the chain to named humans. Attach the extract for every node. Date those extracts inside the desk’s 30-to-90-day window. Cabinet 134/2025 Article 38 gives the company fifteen working days to update beneficial-owner information after a change.

A PEP or sanctions true match is not an onboarding debate you settle by email. Foreign PEPs pull Article 16 measures. A confirmed designation is a freeze-and-notify file. Undispositioned hits sit in the case until someone writes a memo. The next bank you try will ask whether you were refused.

Risk appetite, including virtual-asset activity

Ksenia Babochkina’s other line, from Medici’s digital-assets page, belongs here: “Crypto companies don't get rejected by banks for being crypto companies. They get rejected for not being able to explain themselves clearly.” Virtual-asset activity is a different appetite file. Some licensed banks will not take it. Some will take it with a VARA, FSRA or DFSA permission, a travel-rule narrative, and wallet-screening logic. A consultancy licence with OTC desks on the site fails both CDD and appetite. This article does not rank “crypto-friendly” banks. Crypto compliance in 2026 is the overlay for the VA control stack.

Payments, remittance, FX, and gaming sit in the same appetite drawer. Ask the desk whether the sector is in appetite before you pay for attested copies. A polite “outside policy” is cheaper than a recorded refusal.

‍

How long does opening a corporate bank account take?

Marketing clocks and legal clocks are different numbers. Digital banks advertise minutes or three days for eligible SME files. Wise’s Dubai guide, still in the UAE SERP on 18 August 2026, puts traditional banks at two to four weeks. Medici’s public FAQ on banking setup uses the same two-to-four-week band for a standard corporate account, and six to eight weeks for high-risk crypto and fintech files. Incomplete papers reset those bands. The regulator’s three-business-day language applies to a narrow slice of low-risk files with complete standard CDD. Count the calendar from a complete pack. Attestation of a foreign parent can add weeks before the bank’s clock starts.

The three-business-day regulator clock

CBUAE Consumer Protection account-opening Rulebook 3.20, live on 18 August 2026, tells licensed financial institutions they should seek to complete opening within three business days where the applicant presents low money-laundering and terrorist-financing risk and the institution is satisfied with standard CDD documentation. Rule 3.22 states that the opening duty does not require the bank to permit transactions until financial-crime due diligence is done. That page still cites Federal Decree-Law No. 20 of 2018 and Cabinet Decision 10/2019. The operating AML law on this article’s date is Federal Decree-Law No. 10 of 2025 and Cabinet 134/2025.

Regulation C 2/2026, the SME Customer Protection Regulation, takes effect on 13 September 2026. Article 4.46 upgrades the three-business-day language to a “must” for low-risk SME applicants with complete standard CDD. The deadline runs from the day the customer requested the account and supplied all documents necessary to open it. The obligation is waived where the institution is adhering to UAE financial-crime compliance requirements, with the rationale documented for senior management. Article 4.50 names Cabinet 134/2025 beside Federal Decree-Law 10/2025. Article 4.48 allows a further delay of no more than two weeks for valid non-FCC reasons. High-risk files sit outside that three-day slice. Treat 4.46 as upcoming on 18 August 2026.

Two to four weeks, six to eight weeks, and a reset

A standard trading or professional company with a single layer of individual owners, a resident signatory, a matching licence, and a reconstructable first credit is the two-to-four-week file on Medici’s public FAQ. Crypto, payments, and other high-risk fintech files are the six-to-eight-week band. A missing translation or a UBO chart that still ends on a company starts the band again from the day the desk receives the fix.

Minimum-balance packages are a product choice, not a CBUAE tariff. ENBD’s Connect package, as published in August 2026, has no minimum monthly average balance and a monthly maintenance fee of AED 249. Other ENBD packages print minima from AED 25,000 through AED 3,500,000 for Platinum. Consultant pages that quote a single “AED 25,000 to 500,000 deposit” as the UAE rule are collapsing those product rows. Read the key facts statement. Fall-below fees are a pricing term. They are not CDD.

‍

What happens after the account opens?

Opening is the start of monitoring. Article 8 of Cabinet 134/2025 requires the institution to scrutinise transactions through the life of the relationship against the customer, the nature of the activity, and, where needed, the source of funds, and to keep data up to date, with extra weight on high-risk customers. The expected-activity note you wrote at onboarding is the baseline. Flows that do not match it produce queries, holds, and, if the desk cannot refresh CDD, an Article 14 exit.

Article 25 requires transaction records for at least five years from completion or from the end of the relationship, and a second five-year clock for CDD, monitoring, STRs and analysis, measured from the most recent listed event. Records must let a third party reconstruct the transaction. CBUAE’s November 2025 guidance restates that five-year hold. Keep your own copies of what you uploaded.

C 2/2026 Article 4.51, from 13 September 2026, lets the institution receive funds during establishment and requires those funds to stay blocked until opening requirements, including financial-crime compliance, are fulfilled, with written notice. Consumer Protection Rule 3.23 already allows receipt of funds with a block. Do not treat an IBAN on a welcome email as clearance to run payroll.

Periodic refresh follows the bank’s risk rating. Event-driven review fires when ownership, directors, licence activity, or website copy changes. File the zone amendment and the new extract with the bank in the same week you file them with the registrar. Article 38’s fifteen working days is the company’s UBO-update duty.

‍

FAQ

Can I use a personal bank account for a UAE company?

No. The company is a separate legal person. Licensed banks collect a UAE trade licence, constitutional documents, and CDD on the entity and its owners. Mixing personal and company flows breaks the expected-activity profile Article 8 later tests, and it leaves rent, WPS payroll, and supplier AED without an operating account in the company’s name.

Can I open a UAE business bank account online?

Some licensed banks offer digital intake. Emirates NBD’s public digital product, as of 18 August 2026, wants a UAE-resident signatory and a sole proprietor or single-layer company whose owners are individuals. Multi-layer files go to another channel. Online submission does not waive Cabinet 134/2025 CDD.

How long does approval take for a corporate account in Dubai?

Medici’s public FAQ bands a standard corporate file at two to four weeks and high-risk crypto or fintech at six to eight weeks, counted from a complete pack. CBUAE’s three-business-day language applies to low-risk SME files with complete standard CDD, and from 13 September 2026 C 2/2026 Article 4.46 can waive that duty for financial-crime compliance. Incomplete papers restart the count.

What is the minimum balance for a UAE corporate account?

There is no single CBUAE minimum. Packages differ. ENBD Connect, published August 2026, has no minimum monthly average balance and charges AED 249 per month. Other ENBD packages print minima from AED 25,000 to AED 3,500,000. Read the key facts statement. “Zero balance” search demand is a product feature. It is not a shortcut around CDD.

Which documents do I need to open a business bank account in Dubai?

A current UAE trade licence, constitutional documents, a signatory resolution, passports and, for residents, Emirates IDs, proof of the company’s address, UBO evidence down to natural persons, and source-of-funds paper for the first credit. Existing companies get asked for six months of statements. Foreign parents need consular legalisation and MOFAIC, because the UAE is not a Hague Apostille party. Banks add rows. Confirm the live list.

Do I need a tax registration number before the bank will open the account?

CBUAE does not make a TRN a legal condition of opening. Desks may still ask for VAT or corporate-tax registration evidence from EmaraTax. Register if the Federal Tax Authority requires it for this company.

What if the bank refuses the application?

Ask for the reason in writing where the product’s terms allow it. C 2/2026 Article 4.52 will require SME institutions, from 13 September 2026, to record rejected applications and the reasons. Fix the file before you apply elsewhere: licence match, UBO chain, SoF, translations, attestation.