In brief
Opening a corporate bank account is not the end of banking readiness. The information supplied during onboarding creates a profile of the company at a particular point in time: who owns and controls it, what it does, where its money comes from, and how the account is expected to be used.
The company then changes. It wins larger customers, enters new countries, adds shareholders or signatories, launches services, obtains funding, and makes transactions that were not anticipated at onboarding. Its bank records may not change at the same pace.
The corporate bank file should therefore be treated as a maintained company record—not an application folder archived after approval.
Why banks continue to ask questions
The CBUAE rulebook requires licensed financial institutions within its scope to conduct ongoing monitoring. This includes risk-based periodic and event-driven updates to customer and beneficial-ownership information, review of the customer risk profile, and assessment of whether transactions are consistent with the expected activity established through customer due diligence.
Those rules apply to the financial institution. A company's obligations to notify its bank or provide information depend on its account terms, the bank's requests, and other applicable laws and authority requirements. In practice, maintaining accurate records helps the company respond properly and promptly.
A later request may result from:
- a periodic KYC review;
- transaction monitoring or an unusual or larger payment;
- a change in ownership, management, or signatories;
- an application for credit or another service;
- expiry of corporate or identity documents; or
- a change in the company's activity, geography, or risk profile.
A request does not necessarily indicate suspected wrongdoing. It may mean that information held from onboarding no longer explains the current business or transaction.
What is the corporate bank file?
The corporate bank file is the maintained body of information supporting the company's banking relationship. It may include:
- incorporation, licence, constitutional, and address documents;
- shareholder, beneficial-owner, group-structure, manager, and director records;
- authorised-signatory documents, resolutions, mandates, and powers of attorney;
- a business plan, company profile, website, and marketing information;
- customer and supplier contracts, invoices, purchase orders, and delivery evidence;
- source-of-funds and, where relevant, source-of-wealth evidence;
- financial statements, management accounts, and tax registrations;
- the expected transaction profile and principal operating countries;
- explanations and agreements for related-party transactions; and
- previous correspondence and complete submissions to the bank.
The precise requirements vary by bank, customer, service, risk assessment, and transaction. The objective is not to predict every request; it is to maintain one coherent and evidenced explanation of the business.
1. Keep ownership and control information current
Review the file after a share transfer or issue, new investment, shareholder exit, change in an intermediate holding company, merger, acquisition, change in voting or control rights, or change in ultimate beneficial ownership.
Maintain both the current position and the evidence showing how it was reached. Depending on the event, this may include:
- transfer, subscription, or investment agreements;
- shareholder and board approvals;
- amended constitutional documents and registers;
- ownership certificates and beneficial-owner filings;
- an updated group chart extending to the relevant natural persons;
- identification and address documents; and
- evidence of the source of investment funds.
A structure chart ending at another corporate shareholder may not give the bank enough information to understand ultimate ownership and control.
2. Keep the licence, narrative, and activity aligned
A mismatch can arise when a consultancy starts selling products, a software developer launches a marketplace, a trader changes its goods, a local business enters new countries, or revenue shifts away from the activity described during onboarding.
First determine whether the licence, permissions, or regulatory position needs to change with the relevant authority. Then check the bank's notification process and update its information where required.
The explanation should state what changed, why and when it changed, the customers and suppliers involved, expected transaction types and values, new countries or currencies, and the supporting licence, approvals, contracts, and invoices. The website and other public descriptions should also be consistent with the real and licensed activity.
- Maintain contracts, invoices, and delivery evidence
Representative, current commercial records can show the contracting parties, goods or services, value, payment terms, countries, delivery responsibilities, currency, duration, and connection to the company's activity.
Potential inconsistencies include:
- one group company holds the contract while another receives the money;
- an invoice describes an activity not reflected in the licence or agreement;
- an unrelated third party pays without a documented explanation;
- the invoice differs materially from the contract or actual delivery;
- an agreement is unsigned or signed by a person with unclear authority; or
- descriptions are generic, incomplete, or contradictory.
Not every payment requires a lengthy contract. Evidence should be proportionate to the transaction and sufficient to reconstruct its commercial basis.
4. Preserve source-of-funds evidence
Evidence for operating revenue may include contracts, invoices, purchase orders, delivery records, statements of account, and transaction correspondence.
Evidence for shareholder or intercompany funding may include resolutions, subscription or capital records, loan agreements, the purpose and repayment terms, accounting treatment, transaction confirmations, group information, and evidence supporting the funder's own source of funds. A bank may request source-of-wealth evidence where relevant to its risk assessment.
The records should distinguish customer revenue, capital, debt, reimbursement, intercompany service payments, dividends, and asset-sale proceeds. Labels such as “shareholder funds” or “intercompany transfer” do not, without supporting facts and records, explain the commercial basis of a receipt.
- Compare expected and actual account activity
Onboarding estimates may cover turnover, transaction count and size, currencies, customer and supplier countries, cash use, international transfers, principal counterparties, and initial funding.
Estimates need not predict the future perfectly. Review them when:
- turnover or transaction values change materially;
- the business begins receiving fewer but much larger payments;
- new countries, currencies, or overseas suppliers become important;
- the customer base changes materially;
- shareholder or intercompany funding becomes regular;
- marketplace or payment-processor settlements begin; or
- refunds, commissions, or other new payment types appear.
Growth can be a legitimate explanation. The company should still understand the cause, retain the evidence, and check whether the bank should be informed through its prescribed channel.
- Review counterparties and countries
Maintain a current view of major customers, suppliers, group companies, agents, distributors, processors, logistics providers, and operating countries.
For significant or unusual flows, consider:
- whether the payer is the customer named in the contract;
- why a third party is paying or receiving funds;
- whether the supplier's work matches the company's activity;
- whether the company is paying for another group entity;
- whether the countries match the business model previously described;
- whether a new market changes sanctions, financial-crime, tax, or regulatory risk; and
- whether intermediaries and related parties have a documented role.
A commercially familiar counterparty may not be self-explanatory to the bank. The supporting records should stand on their own.
7. Keep managers, contacts, and signatories updated
Review the file after the appointment or departure of a manager or director, addition or removal of a bank signatory, change in signing rules or transaction limits, grant or revocation of a power of attorney, departure of a finance employee, or change in the online-banking administrator or authorised contact.
Reconcile:
- the constitutional documents;
- formal manager or director appointments;
- corporate approvals and resolutions;
- powers of attorney;
- the bank mandate;
- online-banking access; and
- the internal payment-approval policy.
A former employee should not retain access because an external or internal update was missed. A promotion does not automatically give the person legal authority or bank access.
8. Align bank, tax, and corporate records
Relevant information should be checked across the licensing authority, commercial and beneficial-owner records, tax registrations, customs data, bank records, accounting systems, contracts, invoices, website, insurance, and internal corporate records.
For taxpayers registered with the UAE Federal Tax Authority, changes that require tax-record updates must be notified through the applicable amendment process within 20 business days. The FTA service specifically addresses changes including business name, principal address, business activities, trade-licence renewal or amendment, authorised-signatory details, and bank-account data.
This deadline concerns tax records; it should not be treated as the bank's notification deadline. Check each institution's rules separately. A whole-company change checklist is more reliable than expecting each adviser or department to update its own system independently.
9. Prepare for periodic KYC reviews
A current review pack may contain:
- Corporate documents: licence, constitutional documents, ownership and beneficial-owner records, management information, and address evidence.
- Authority documents: signatory resolutions, mandate, powers of attorney, and identification documents.
- Business evidence: company profile, current website, material contracts, representative invoices, and an expected-transaction narrative.
- Financial information: management accounts or financial statements, tax information, source-of-funds support, and intercompany balances and agreements.
- Change summary: new owners, activities, countries, counterparties, funding, management, or material growth since the previous review.
Check the documents for consistency before submission. Sending records from different dates and sources without reconciling them can generate avoidable follow-up questions.
10. Respond to bank questions as a managed process
Appoint one response owner who will:
- read the complete request and confirm the deadline and submission channel;
- create a list of every question and requested document;
- assign internal and external contributors;
- reconcile conflicting information before responding;
- prepare concise, accurate explanations of material changes;
- check that documents are current, complete, and legible;
- retain the complete response and subsequent correspondence; and
- update the permanent bank file with the final information.
Answer each question directly. A smaller indexed pack with a clear explanation can be more useful than a large, unstructured folder. Information should never be altered, invented, or mischaracterised to make a complex transaction appear simpler.
Events that should trigger an immediate review
Review the bank file after:
- a shareholder, beneficial-owner, manager, director, or signatory change;
- a licence, activity, registered-address, or company-name amendment;
- entry into a new country or a major new customer or supplier relationship;
- a material change in turnover, transaction size, currency, or funds flow;
- new investment, shareholder lending, or intercompany arrangements;
- an acquisition, disposal, merger, or restructuring;
- adoption of a marketplace, payment processor, or new banking product; or
- an application for finance or another service.
A scheduled review is also useful. Quarterly may suit a fast-growing or changing company; a stable business may use a different risk-based interval. The bank's own review cycle remains separate.
Warning signs that the file is unreliable
The file needs attention if:
- no one knows what was submitted during onboarding;
- the ownership chart or signatory list is outdated;
- former personnel retain access;
- the website, licence, contracts, and transactions describe different businesses;
- actual account activity is materially different from the original profile;
- principal contracts or source-of-funds records cannot be produced;
- intercompany or third-party payments have no documented purpose;
- the bank repeatedly asks for the same information;
- bank, tax, licensing, and corporate records contain conflicting details; or
- management can explain transactions verbally but cannot evidence them.
These are company-record and operating-control issues, not merely banking issues.
The Kapiti view
Banking readiness is continuous. The account should remain connected to the company's ownership, control, licence, business activity, contracts, accounting, tax data, funding, and actual transactions.
A well-maintained file cannot guarantee that a bank will approve a transaction, retain an account, or provide a service. Those decisions remain with the institution under its own policies and regulatory obligations. It can, however, ensure that the company responds with current, coherent, and properly supported information when questions arise.