What We Never Promise a Client
A serious licensing consultant controls preparation, scope, and correspondence. We do not control regulator votes, bank credit committees, or tax law that changes after your structure is filed.
Medici Expert publishes this list because founders ask us to match pitches from other firms that promise guaranteed licences, guaranteed IBANs, permanent zero tax, and ownership nobody can see. Those promises are not ours to make. If your shortlist includes a firm that sells certainty on outcomes it does not own, read the sections below before you sign.
Why we name non-promises in public
Market-entry sales in the UAE still run on package ads: trade licence plus visa plus bank account in one line, tax-free forever, approvals in days. The language works because founders are buying speed and certainty at a stressful moment. We lose deals when we refuse to echo it. We publish what we will not promise anyway, because the clients we want are the ones who will still be operating when a bank asks for a refreshed UBO chart or the FTA asks about qualifying free-zone income.
Honesty here is not modesty. A licence rejected for documentation that does not match the business model is harder to repair than a file never submitted. Nataly Medici states that plainly on our licensing page, and we treat it as operating doctrine. Naming non-promises filters out buyers who need a magic shop. It attracts buyers who will invest in a file that survives regulator and bank review.
The list below is not a disclaimer buried in footnotes. Each heading names a promise we have seen in competitor decks, Instagram reels, and conference booths. Under each, we explain the structural reason the promise cannot be kept, then what our team actually delivers. If you are comparing advisers, use the headings as a scorecard. Any firm that agrees on all seven is playing on the same field as us. Any firm that insists on exceptions without written scope is asking you to carry risk they will not own.
We never promise a guaranteed licence
No consultant holds a regulator's signature. VARA, ADGM Financial Services Regulatory Authority, Dubai Financial Services Authority, Central Bank of the UAE pathways, and free-zone authorities each run discretionary reviews. They can approve, approve with conditions, request more information, or refuse. Refusal reasons include activity mismatch, weak AML narrative, incomplete beneficial-ownership disclosure, capital or insurance shortfalls, and substance that does not match the permission sought. A prior approval for a different client in the same zone is not a precedent for yours.
We have filed many licence applications across jurisdictions. None of that history obligates a regulator to approve the next file. Marketing that implies otherwise confuses track record with authority. Track record means we know which gaps cause refusals; authority sits with the supervisory body alone.
Why regulators refuse despite a paid consultant
Regulators refuse when the permission object does not match the product. A trading desk described as software support, a custodial model filed as advisory-only, or a payment flow that omits client-money segregation will stall regardless of which agent uploaded the PDF. They also refuse when policies are generic: AML manuals copied from unrelated sectors, KYC procedures that do not describe your actual customer types, or business plans that contradict the cap table. Free zones and financial centres publish activity lists and fit criteria; choosing the wrong code to save a week invites a later amendment or a full refile.
Substance and capital tests bite on financial permissions. VARA categories carry insurance, systems, and governance expectations that cannot be waved by a formation agent. European EMI and CASP routes add local substance rules that differ by member state. Offshore company registers may incorporate quickly; that is not a licence to conduct regulated activity from that register without a separate permission.
What we do instead on licensing
Licensing and company formation work starts with a business-model review: product, corridors, client types, token or payment mechanics, and existing entities. We map permission type, entity form, and regulator before anyone pays an application fee. The deliverable is an application pack where the licence narrative, AML policies, and corporate chart tell one story.
We communicate with regulators during review, respond to information requests, and advise on remedial steps if conditions appear. We do not invoice success fees tied to approval, because that would incentivise hiding weak facts. If the model is not licensable as drawn, we say so early and discuss phased structures, different jurisdictions, or non-regulated operating paths where they exist. A rejection handled transparently is less damaging than a certificate obtained by mis-describing the business.
We never promise a guaranteed bank account
Corporate banking in the UAE and internationally is a separate gate from incorporation. Banks and payment institutions run their own AML, sanctions, and sector appetite reviews. CBUAE-regulated banks, international institutions with correspondent relationships, crypto-friendly challengers, and PSP onboarding teams each maintain lists they do not publish as brochures. A trade licence does not entitle you to an account. Neither does a consultant's introduction letter.
We prepare bank-ready files: constitutional documents, UBO charts, source-of-funds narratives, AML policies that match the licence file, and management CVs that explain who runs the business. Ksenia Babochkina's line on our site is operational: jurisdiction options are mapped against banking access first, because a permission without a working account is only a wall decoration. That is sequencing discipline, not a promise that every file opens an account.
Why banks decline fintech and crypto files
Banks decline when the risk story is incoherent. Common triggers include beneficial owners who cannot be verified, flows that touch high-risk jurisdictions without mitigation, tokens or stablecoins described vaguely, nested OTC structures, and operating companies that do not match the economic reality of the group. Banks also decline when documentation is stale: extracts older than their policy, UBO charts that omit intermediate holdcos, or policies that describe a B2C exchange while the application says B2B software.
Sector appetite moves on its own clock. A bank that onboarded crypto custody last year may pause new crypto clients this quarter. Correspondent banking pressure, sanctions events, and internal audit findings change desks without a public announcement. No consultant sits on those committees.
What we do instead on banking
We state a banking hypothesis in the roadmap: institution type, geography, and realistic onboarding sequence. We align the compliance pack with what that desk typically requests, and we flag when the model needs a PSP or EMI route instead of a classical corporate account. Where multiple paths exist, we order them by fit rather than by marketing glamour.
We join client calls with banks when invited, answer KYC questionnaires, and revise packs after feedback. We do not sell "guaranteed IBAN" bundles, do not claim unnamed banking partnerships, and do not route client funds through consultant accounts. If every plausible door closes, we report that honestly rather than recycling the same introduction until the client stops asking.
Payment institutions and crypto exchanges are often the realistic first rail for high-risk models even when a classical corporate account remains the long-term goal. We say that in the roadmap instead of pretending every fintech receives a tier-one bank on day one. PSP onboarding carries its own KYC depth; we treat it as a permission path with documentation standards, not as a workaround that avoids AML scrutiny.
We never promise tax zero forever
UAE tax messaging often collapses into a sticker: zero tax. Corporate Tax law is more conditional. Standard rate applies to taxable income above thresholds published by the Federal Tax Authority. Qualifying Free Zone Persons can access a zero percent rate on qualifying income when substance, de minimis, and audited financial tests are met. Mainland entities and non-qualifying income face the standard rate. Free-zone treatment is not a permanent personal immunity from tax questions in every country you touch.
Tax residency elsewhere, permanent establishment in customer markets, transfer pricing on related-party flows, and substance in another jurisdiction can all create filings outside the UAE sticker. Treaties allocate taxing rights; they do not erase record-keeping. A consultant who promises "tax zero forever" without scoping your income categories, group structure, and home-country residence is selling a slogan.
What actually drives UAE corporate tax outcomes
Entity location alone does not finish the analysis. A free-zone licence with mainland customers, a management team sitting in Europe, or intellectual property billed from a low-substance holdco can each pull income out of the qualifying bucket. The FTA publishes guidance on qualifying income, excluded activities, and registration duties; confirm the live rule set on tax.gov.ae before you model a structure.
VAT registration sits on its own thresholds and timing rules for UAE supplies. Economic substance reporting for certain offshore and UAE entities adds another calendar. None of these obligations disappear because a formation agent called the package "tax free."
What we do instead on tax framing
We separate marketing language from registration and filing duties in the roadmap. Licensing forms the entity; accounting and tax colleagues map corporate tax registration, VAT if applicable, transfer-pricing documentation for groups, and qualifying-person tests where relevant. We do not draft aggressive minimisation stories that will not survive bank or FTA review.
When a founder needs tax depth beyond formation, we involve the accounting service line or coordinate with their existing advisers. We cite categories (corporate tax registration, qualifying income test, substance filing) and point to official guidance rather than quoting schedules in a blog post. Percentages that are statutory rates (nine percent standard, zero on qualifying income) are rules, not price quotes.
We never promise anonymous beneficial ownership
UAE federal law requires beneficial ownership disclosure for mainland and free-zone companies under Cabinet Resolution No. 109 of 2023, with implementing detail in Cabinet Resolution No. 134 of 2025. Natural persons who meet ownership or control tests must be identified, verified, and reported through the appropriate register or authority channel. Updates are due within prescribed day counts when ownership or control changes. Nominee arrangements, layered shells, and "privacy" packages that hide the operator from the regulator are not compatible with lawful UAE company operation.
Banks apply their own thresholds, often stricter than the legal minimum. Wolfsberg-style questionnaires may ask for ten percent owners even when law sets a twenty-five percent test. International exchange of information and sanctions screening mean obscured ownership eventually surfaces as a refusal reason, not as a feature.
Why anonymity fails under UAE rules
The Article 10 cascade in Cabinet 134/2025 walks from shareholding thresholds through control tests to senior managing officials when no natural person is identifiable otherwise. Trusts, foundations, and foreign holdcos each have attribution rules. Zone portals and federal channels validate data; inconsistent filings between licence, UBO register, and bank KYC create remedial notices or fines. Privacy for public marketing is not the same as anonymity from the supervisor.
Consultants who sell "confidential shareholder" structures without explaining filing duties set clients up for bank exits and regulatory breach. VARA and financial-centre regulators expect identifiable responsible individuals.
What we do instead on ownership transparency
Compliance and risk work builds UBO charts that match legal tests and bank practice: cascade logic, ID verification, attestations for foreign layers, and update procedures when cap tables move. We file what the law requires and prepare the same facts for onboarding packs. If a founder's goal is concealment from authorities, we decline the engagement.
For legitimate privacy needs (commercial sensitivity, investor NDAs), we discuss lawful boundaries: what appears on public extracts, what stays in KYC files, and how group structures are explained without contradicting registers. Transparency to regulators and banks is non-negotiable.
We never promise regulator pre-approval by WhatsApp or messaging apps
Informal screenshots from messaging apps are not permissions. Regulators and free zones issue formal correspondence through official portals, registered email, or signed letters. A sales agent's voice note that "the authority already said yes" is not a file you can rely on in a board meeting or a bank KYC upload. Pre-approvals for one activity code do not transfer to another. Verbal comfort does not replace published fit criteria.
We have seen founders pay incorporation invoices based on chat assurances that an activity is "fine," only to learn the written review disagrees. The cost is lost fees, reputational damage with the zone, and a harder second submission.
How informal "approvals" mislead
Messaging apps strip context. A general comment that crypto is welcome in the UAE is not approval for your token model under your chosen permission. Internal zone sales teams are not the same unit as compliance review. Screenshots can be old, edited, or taken out of thread. Regulators do not bind themselves to third-party paraphrases.
For VARA, ADGM, DFSA, and CBUAE-related routes, the only durable record is the case file in the official system plus written questions and answers. Anything else belongs in sales notes, not in your compliance archive.
What we do instead on regulator correspondence
We route regulator contact through accountable channels: named case officers where available, portal submissions, and written Q&A we can append to the client file. If a zone offers optional pre-application meetings, we document outcomes in minutes and map them to the formal application. Clients receive copies of substantive correspondence, not summaries that soften refusals.
We do not ask regulators to bless structures over informal chat, and we do not tell clients an approval is certain because a business development contact sounded positive. When uncertainty remains, we say so and price the risk of rework into the roadmap.
We never promise a fixed all-in price without scope
Published "all-in" packages mix categories that move independently: licence fee, establishment card, visa bundles, office product, registered agent, government knowledge fees, attestation, translation, medical tests, and professional fees. Zones and regulators revise schedules. Activity changes add lines. Banking preparation, AML manual drafting, VARA application stages, and compliance retainers are not the same SKU as a flexi-desk trade licence.
A single number without scope hides who pays which authority, what happens when a visa quota increases, and whether the quote includes the AML pack a bank will still request. Mills advertise low entry points; the stack grows when reality arrives.
Fee categories that rarely stay in one bundle
Government lines attach to the register you choose: incorporation, annual renewal, activity amendments, and supervision levies on financial permissions. Professional lines attach to work product: business plan, policies, filing labour, attestation coordination. Third-party lines attach to life outside the agent: office rent scales with square metres, insurance scales with activity, audit scales with complexity. Confirm each category on the live schedule for your zone or regulator before you treat a brochure quote as complete.
Crypto and payment licensing add stages: legal opinions, systems descriptions, insurance, capital held in trust where required. None of that fits a static web price next to a generic trading licence.
What we do instead on commercial terms
We scope engagements after the business-model review. The proposal lists workstreams (formation, licence application, compliance build, banking support) and fee categories separately from government charges clients pay directly to authorities. We point to official calculators and schedules for authority lines; we quote our professional fees for defined deliverables.
Change orders follow scope changes: new activity, added visa, extra jurisdiction, supplemental policy pack. We do not ask for full prepayment of undefined "government fees" into opaque consultant accounts without reconciliation. If you need a single number for board approval, we can sum categories with stated assumptions, not with hidden pass-throughs.
We never promise a timeline without your documents
Calendars depend on client-side inputs. Passport copies, proof of address, corporate extracts from foreign parents, audited accounts, source-of-wealth evidence, and signed resolutions all gate submissions. Attestation and apostille chains add weeks that no agent controls. Regulator queues vary by season and permission type. Banks run parallel clocks after the licence exists.
Advertised "seven-day company" timelines usually measure incorporation only, not permission, banking, or immigration. They also assume clean KYC with no follow-up questions.
Client-side delays that blow schedules
Founders postpone disclosing a prior refusal, a politically exposed person in the cap table, or a pending investigation. Corporate parents miss notarisation deadlines. Shareholder disputes stall signed constitutions. Product pivots mid-file force narrative rewrites. Each event resets regulator and bank review. Consultants who promised a fixed week count before seeing the KYC pack are guessing.
What we do instead on timing
We publish bands, not guarantees: typical incorporation windows when documents are complete, longer bands for financial permissions, separate bands for bank onboarding. The roadmap lists client deliverables with dates and names responsible on both sides. We chase missing items early because idle files lose priority with authorities.
When delays are ours, we own them. When delays are documentary or regulatory, we report status without blaming the client in public and without pretending the original date still holds. Execution phase work includes sitting in regulator and bank threads until the file resolves or fails for a stated reason you can fix.
Immigration steps add their own gates after the company exists: medical fitness, Emirates ID biometrics, establishment card linkage, and quota rules tied to office product. A consultant who counts only incorporation days ignores half the calendar founders actually live through. We list those steps in the roadmap when visas are in scope so the board sees a chain, not a single milestone.
Three pitches you will hear and what each omits
Setup marketing repeats a handful of lines. The parallel blocks below use the same lens: what the pitch sounds like, what it leaves out, and how we answer when a founder reads them aloud on a call.
"Licence and bank account in two weeks"
Pitch: One invoice, one fortnight, operational company.
Omission: The fortnight usually ends at certificate issuance, before VARA or bank KYC, and before visa medicals. Banking is not bundled with formation in law or in bank policy.
Our answer: We sequence incorporation, permission, and onboarding with separate gates and document lists. Speed where the file is clean; silence where it is not.
"Zero tax, no questions"
Pitch: UAE equals no tax ever, regardless of structure.
Omission: Qualifying income tests, mainland exposure, home-country residence, VAT, and substance filings.
Our answer: We map registration duties and qualifying tests; we do not sell permanent immunity.
"Nobody will know who owns the company"
Pitch: Confidentiality through nominees and offshore layering.
Omission: Federal UBO duties, zone registers, bank Wolfsberg questionnaires, and sanctions exposure.
Our answer: Lawful disclosure to authorities and institutions; we decline concealment mandates.
How to use this list when you compare firms
Bring these seven non-promises to any pitch meeting. A firm that agrees with all of them is describing the same reality we operate in. A firm that argues exceptions for your case without writing scope, without naming the regulator, and without showing a sample correspondence log is selling certainty they cannot deliver.
Ask who holds the regulatory relationship, how government fees are invoiced, whether success fees tie to approval, and what happens to prepayment if the model changes. Ask for a redacted sample roadmap and a list of client deliverables with dates. Those questions are standard diligence, not insults.
Red flags cluster when answers stay vague under pressure. Watch for reluctance to put the regulator's name in writing, refusal to separate government lines from professional fees, insistence on full prepayment before you share a cap table, or discomfort when you mention UBO filing duties. Watch for success-fee language tied to licence issuance, which can encourage under-disclosure. Watch for social-proof screenshots that replace portal confirmations.
Our About page and licensing service pages describe what we do across service lines; this page is the mirror image: outcomes we do not sell. If you need help interpreting another firm's proposal against the rules above, that is part of the work we take on after a scoped review. We apply the same standards when you evaluate us.
FAQ
Can any consultant guarantee my UAE licence will be approved?
No. Licences are granted by regulators and free-zone authorities with discretionary review. A consultant can improve documentation and correspondence; they cannot vote on your file. Track record is evidence of preparation quality, not a binding precedent for your matter.
Why do some firms promise guaranteed bank accounts?
Bundled marketing sells certainty. Banks open accounts under their own policies. Treat guaranteed account language as a red flag unless the promise is written as a refundable service failure with clear scope, which is rare and still does not bind the bank.
Is UAE corporate tax always zero percent?
No. Qualifying Free Zone Persons may access zero percent on qualifying income when tests are met. Standard rate applies elsewhere. Mainland revenue, non-qualifying activities, and de minimis breaches can pull income into the standard band. Confirm current FTA guidance for your activity and income type before you model a structure.
Can I keep my name off the UBO register?
UAE law requires beneficial ownership disclosure for covered entities. Banks may require broader ownership detail. Structures designed to hide the operator from authorities are not lawful operating paths.
Does a WhatsApp message from a zone agent count as approval?
No. Rely on formal regulator correspondence and portal records. Informal chats are not evidence for boards, banks, or auditors.
Why won't Medici quote one all-in price on the first call?
Because activity, jurisdiction, permission type, visa count, and compliance depth change the stack. We quote after scoping, with government categories pointed to official schedules.
What client documents slow timelines the most?
Foreign corporate extracts awaiting attestation, incomplete source-of-wealth evidence, cap-table disputes, and unsigned resolutions. Provide KYC packs early if speed matters.
Does Medici charge success fees tied to licence approval?
We price defined professional workstreams. Tying fees to outcomes we do not control would misalign incentives. Government fees are paid to authorities per their schedules.
