Why UAE Corporate Bank Accounts Get Rejected

A UAE corporate bank account is refused for one of three reasons: the file does not match the licence, the business falls outside the bank’s own money laundering risk appetite, or the bank cannot verify who ultimately owns and controls the company. Everything else is a symptom of one of those three. What changed on 13 September 2026 is that the bank now owes you a written list of what it needs, a written timeline, and a final decision it has to tell you about, because the Central Bank’s new SME Customer Protection Regulation came into force that day.

Key takeaways

• Regulation C 2/2026, the Small to Medium Sized Enterprises Customer Protection Regulation, took effect on 13 September 2026 and Article 10.1 cancels the older SME Market Conduct Regulation, Circular No. 1/2021.
• That older regulation carried the familiar three-business-day account opening target for low-risk applicants. It is cancelled. The new text replaces a target with disclosure duties.
• Article 3.4 now requires the bank to give you a list of every document it needs before it starts, to explain the stages and expected timeline in writing, and to tell you the final decision in a timely manner.
• Article 4.31 says banks must act fairly on account opening regardless of size, profits, market standing, nationality of the ownership, years of presence or type of activity, and Article 4.32 forbids rejection on discriminatory grounds. Both are qualified by the bank’s own financial crime risk appetite.
• A refusal you think is unfair has a defined route: written acknowledgement within two business days, a final written response with detailed reasons within thirty business days, and escalation to the Sanadak ombudsman. The one lawful exception is a reason connected to financial crime compliance.

What actually changed on 13 September 2026

For five years the reference point for SME banking conduct was the Central Bank’s SME Market Conduct Regulation, Circular No. 1/2021, effective 26 February 2021. Its clause 3.20 asked licensed financial institutions to have systems that allow a customer bank account to be opened within three business days where the applicant was assessed as low risk and standard due diligence documentation was satisfactory. Business setup firms quoted that line constantly.

Article 10.1 of the new regulation cancels Circular No. 1/2021 outright. The replacement, C 2/2026, applies to all banks and finance companies licensed by the Central Bank in relation to the activities in Article 61 of the Central Bank Law, Federal Decree-Law No. 6 of 2025, including Islamic institutions.

The new text does not restate a three-day number. It does something more useful for an applicant. Article 3.4 sets out what the bank must do before providing a financial product, and three of its clauses are directly about account applications: give the customer a list of all documents and information the bank needs, explain in writing all stages of the process of considering the application including the expected timeline, and keep the customer informed about the status at particular stages and about the final decision in a timely manner.

If your application has been sitting for nine weeks with no written timeline and no status, that is now a conduct question rather than bad luck.

The refusals that are really about your paperwork

Most declined applications never reach a risk committee. They fail in review because the file contradicts itself.

The licence activity does not describe the business

This is the single most common cause we see. A company licensed for general trading opens a file describing a software consultancy. A management consultancy licence arrives with invoices for freight forwarding. The bank is obliged to understand the nature and purpose of the relationship, and a licence that says something different from the business plan makes that impossible to document. Choosing activities carefully at incorporation is cheaper than amending them later, and our guide to choosing business activities for a UAE trade licence covers how that list is built.

The ownership chain stops at a company, not a person

Cabinet Decision No. 109 of 2023, which came into force on 16 November 2023 and replaced Cabinet Decision No. 58 of 2020, defines the beneficial owner of a legal person as the natural person who owns or controls 25 per cent or more of the capital or voting rights, directly or through a chain of ownership. Banks apply the same logic. A file that presents a BVI holding company as the shareholder and stops there will be returned. You need to reach a named individual with a passport, at every level.

Physical presence that nobody can verify

A flexi-desk package is a valid licence arrangement and it is not, by itself, a refusal. What causes problems is when the address on the licence, the address on the tenancy contract and the address the bank’s officer visits do not agree, or when a shared desk is presented as an office with staff. Our note on office space requirements for a Dubai licence explains where the thresholds sit.

Source of funds that is asserted rather than evidenced

“Personal savings” is not a source of funds. Bank statements from the country of origin, a sale agreement, a dividend resolution or an employment contract are. Applicants often treat this question as intrusive; the bank treats an unevidenced answer as an unmanageable file.

The refusals that are about the bank, not about you

Some applications are complete, honest and still declined. That is lawful, and it is worth understanding why rather than taking it personally.

Every licensed institution sets its own risk appetite for money laundering, terrorism financing and proliferation financing, under Federal Decree-Law No. 20 of 2018 and its implementing regulation, Cabinet Decision No. 10 of 2019. Article 4.31 of the new SME regulation is careful on this point: banks must incorporate anti-discrimination principles into their code of conduct and act fairly on account opening regardless of the customer’s size, income, business growth, market standing, nationality of the ownership, years of presence and type of business activities, but it adds the words “in accordance with the Financial Institution’s money laundering, terrorism financing and proliferation financing risk appetite”. Article 4.32 then says rejection must not be on discriminatory grounds.

Read together, those two clauses do useful work. A bank may not decline you because you are a new company with a small balance and a foreign passport. It may decline you because your activity, jurisdictions or counterparties sit outside the risk appetite it has set and documented. The second is a business decision the regulation preserves; the first is now a conduct breach you can complain about.

Activities that repeatedly fall outside appetite at mainstream banks include money exchange and remittance, virtual assets, precious metals and stones, used-car and general trading with high cash turnover, and anything with a counterparty base in a sanctioned or high-risk jurisdiction. None of these is illegal. They carry correspondent banking consequences that a mid-sized UAE bank may not want.

The country context also shifted. The UAE was removed from the Financial Action Task Force’s list of jurisdictions under increased monitoring on 23 February 2024, having been added in March 2022. That eased enhanced due diligence applied to UAE parties by overseas counterparties. It did not loosen what a UAE bank asks of a new applicant, and in practice several banks tightened onboarding to protect the correspondent relationships they had just recovered.

Why “we cannot tell you why” is sometimes lawful

Applicants find this the hardest part, so it deserves the exact wording. Article 6.10 of C 2/2026 requires a final response on a complaint to accept or reject its validity and to provide detailed reasons for the rejection, “except where the reason is related to obligations related to Financial Crime Compliance or as may be prohibited by law”.

That carve-out exists because of the tipping-off rules in the anti-money laundering framework. Where a decision is connected to a suspicious activity report or to sanctions screening, telling the customer why would defeat the purpose of the report and expose the institution. So a bank that says only that it is unable to proceed, and cannot say more, may be complying precisely rather than being evasive.

The practical reading for a business owner: if the bank will not give a reason at all, chasing the reason is the wrong move. Fixing what you can control and applying elsewhere is the right one. If the bank gives a reason that is about your size, your age or your nationality, that is a different conversation and it belongs in a written complaint.

What to do when the answer is no

The complaint route is now specific, free and time-bound. Article 6.1 requires the process to be accessible, transparent and provided without fees.

1. Put the complaint in writing to the bank’s complaints function, which Article 6.2 requires to be independent of the business line and to report to senior management.
2. Expect written acknowledgement within two business days, with a unique reference number for tracking, under Article 6.5.
3. Expect a final written response with detailed reasons within thirty business days, under Article 6.9.
4. If the response does not resolve it, Article 6.10 requires the bank to tell you how to escalate to an external complaints resolution function, including the Sanadak ombudsman unit.

Keep your own copies. Article 6.15 requires the bank to retain complaint records for at least five years from resolution or closure, which is a reasonable standard for your own file as well.

One more point that applies if you already bank somewhere and are being pushed out. Articles 4.33 to 4.36 cover customer mobility: the bank must not impose barriers to switching, must facilitate the transfer of account details and records without additional fees, and may not ask why you are leaving or what the competing offer is, unless it has evidence or suspicion of financial crime risk.

Whether your company is even covered

C 2/2026 protects SME customers, and the definition is not a loose one. Article 1.33 adopts the thresholds in Cabinet Resolution No. 22 of 2016 on the unified definition of small and medium enterprises. In the services sector, a micro enterprise has up to 5 employees or revenue up to AED 2 million, a small enterprise has 6 to 50 employees or revenue up to AED 20 million, and a medium enterprise has 51 to 200 employees or revenue up to AED 200 million. The trade and industry sectors carry their own headcount and revenue bands, with the medium ceiling at AED 250 million.

Sole proprietors are included in the definition of customer. Most Dubai companies reading this are comfortably inside the scope. A large group is not, and falls under the general consumer protection framework instead.

A preparation checklist that removes most rejections

1. Read your own trade licence and write one paragraph describing the business. If the paragraph and the licence activities disagree, fix the licence first.
2. Map the ownership chain to named individuals at 25 per cent or more, with passports and proof of address for each, before you approach a bank.
3. Prepare a short business plan with expected monthly turnover, main customers, main suppliers and the countries involved. Banks ask for this and applicants improvise it.
4. Evidence the source of the initial capital with documents, not adjectives.
5. Make the address consistent across the licence, the tenancy contract, the website and the application.
6. Ask for the document list in writing at the first meeting. Article 3.4 entitles you to it, and it prevents the drip-feed of requests that stretches applications into months.
7. Ask for the expected timeline in writing at the same meeting, for the same reason.
8. Apply to more than one bank in parallel. Risk appetite differs between institutions, and a decline at one carries no formal consequence at another.

A related warning, because it costs people real money: nobody can guarantee an account. Any adviser who offers one is selling something they cannot deliver, and the vetting questions in our piece on how to vet a Dubai business setup consultant apply directly here.

If an application has stalled or been declined, read your own file the way a compliance officer would before you approach anyone else: licence, ownership chain, address and source of funds, in that order. Our team supports corporate bank account opening in Dubai alongside company formation, and will tell you when the honest answer is to change the licence before approaching another bank.

Regulatory references here are indicative and were checked against the CBUAE Rulebook and primary legislation on 22 September 2026. Rules and bank policies change, and this is general information rather than legal, tax or financial advice; take professional advice on your own circumstances. Cover photo: Dubai skyline at night by John Christian Fjell…, via Wikimedia Commons (CC BY 3.0).