KYC, or Know Your Customer, is the set of processes financial institutions use to identify and verify customers, understand who ultimately owns or controls an account where relevant, understand the purpose and expected activity of the relationship, and manage financial-crime risk. KYC is not only an account-opening step; customer information can need to be reviewed and updated throughout the relationship.
Why do UAE banks perform KYC?
KYC is a core part of the UAE anti-money laundering, counter-terrorist financing, sanctions and broader financial-crime framework. Current CBUAE guidance says adequate customer due diligence and KYC help licensed financial institutions understand customers, their business or occupation, source of income or wealth, source of funds and expected activity.
The objective is not simply to collect documents. It is to establish a reasonable understanding of who the customer is and how the account or service is expected to be used.
What information can KYC involve?
The exact information depends on the customer type, product and risk profile. For an individual, this can include identity information, Emirates ID or passport details, contact information, occupation, income-related information, source of funds and the purpose of the account or transaction.
For companies and other legal persons, KYC can extend to trade or incorporation documents, ownership and control structure, beneficial owners, authorised signatories, business activity, source of funds and expected transaction behaviour.
KYC vs Customer Due Diligence (CDD)
The terms are often used together. KYC focuses on knowing and verifying the customer, while CDD is the broader risk-based process that includes identification and verification, beneficial-ownership checks, understanding the nature and purpose of the relationship and ongoing monitoring.
For higher-risk circumstances, Enhanced Due Diligence can involve additional information or checks. This does not mean every customer goes through the same level of review.
What is a KYC refresh?
KYC information does not remain accurate forever. A bank may need to update customer details periodically or when an event suggests that information has changed. Examples can include an expired identity document, a material change in ownership, a new business activity or transaction behaviour that no longer matches the expected profile.
Current CBUAE guidance specifically includes periodic and event-driven updating of customer and beneficial-ownership information and the customer risk profile.
Why can KYC delay an account or transaction?
A financial institution may need more information when documents are incomplete, details cannot be independently verified, ownership is unclear or a transaction requires additional review. The institution must complete the level of due diligence required by the applicable framework before establishing or continuing certain relationships or services.
Responding with complete, current and consistent information can help avoid avoidable delays, but it does not guarantee approval of an account, card, loan or transaction.
Common KYC documents and checks
- Government-issued identity documents such as Emirates ID and passport, as applicable.
- Address and contact information.
- Occupation, employer or business activity.
- For businesses, ownership, beneficial-owner and authorised-signatory information.
- Source of funds, source of income or source of wealth when required.
- Purpose and expected nature of the account or relationship.
- Ongoing screening and monitoring appropriate to the institution’s risk-based controls.
Frequently asked questions
Is KYC required only when opening an account?
No. Current CBUAE guidance includes ongoing monitoring and periodic or event-driven updating of customer information throughout the relationship.
Is KYC the same as AML?
No. KYC is one important control within the broader anti-money laundering and financial-crime compliance framework.
Why does a bank ask about source of funds?
Understanding source of funds helps the institution understand expected customer activity and manage financial-crime risk under its CDD/KYC obligations.
What is a beneficial owner?
In simple terms, it is the natural person who ultimately owns or controls a legal person or arrangement under the applicable rules. Business KYC commonly includes identifying and verifying beneficial owners.
Can a bank refuse service if KYC cannot be completed?
Financial institutions must meet applicable identification and due-diligence requirements. If they cannot complete required checks, this can prevent establishment or continuation of a relationship or transaction, depending on the circumstances.
Does completing KYC mean my credit application is approved?
No. KYC and credit underwriting are different processes. A bank can complete identity and compliance checks but still decline a credit application under its eligibility or risk criteria.