UBO in the UAE: disclosure requirements

Mainstream

Disclosure of information about ultimate beneficiaries (UBO) in the United Arab Emirates is not a one-time formality, but a permanent compliance process built into the company’s system of market access and banking infrastructure.

The question is not whether you have submitted information once. The main question is whether the data held by the registering authority and the bank correspond to the actual ownership structure at any date.

Therefore, effective UBO compliance in the UAE begins with three checks:

Is the final beneficiary correctly determined according to the criteria of Cabinet Resolution No. 58 2020?Submitted to the register of the UBO licensing authority and whether they are relevant?Whether the same structure is reflected in bank forms, KYC-questionnaires and the internal register of company participants?

If these three blocks diverge at least one link, the business risks administrative fines, blocking of banking operations and licensing restrictions, and the liability is often joint and several – both for the company and its management.

When UBO disclosure requirements become critical

The obligation to disclose the ultimate beneficiary is actualized in the following situations:

• The company is registered in the mainland of the UAE or in the free zone
• changes in the ownership structure, including through a foreign holding chain
• The bank requests an updated KYC or UBO form
• audit or verification by the counterparty’s compliance unit
• The company participates in tenders, M&A transactions, attracts financing
• Regulator initiates scheduled or unscheduled inspection
• Request from UAE Financial Intelligence Unit (FIU)
• Company is to be liquidated – the UBO registry must be up to date at the time of closing.
• Group of Companies Implements Global Transparency Standard Affecting the UAE Unit

The mistake most companies make

Many companies start with the question: "What form do you fill out?"

That's the wrong first question.

The right question is: “Who is the UBO recognized under UAE law and does that person match the person listed in bank records, corporate registers and declarations filed with other authorities?”

Sometimes the ultimate beneficiary is a person who is not considered by the group in the “normal” management logic. Sometimes, real control is dispersed and the law requires the designation of a senior official. Sometimes the beneficiary is determined through a multi-stage chain, in which part of the links are trusts or foundations. A misunderstanding of the legal qualifications leads to a systemic error that is reproduced in all submitted documents.

The requirement to disclose UBO in the UAE is not so much the technical completion of the registry as the correct legal identification of the ultimate control.

Step 1. Understand the legal framework

The UAE’s ultimate beneficiary disclosure regime is based on several levels of regulations:

• Federal Law No. 20 of 2018 on Countering Money Laundering and Combating the Financing of Terrorism (as amended)
• Cabinet Regulation No. 58 of 2020 on the procedure for maintaining the register of ultimate beneficiaries (UBO Regulations)
• Decision of the Minister of Economy No. 53 of 2021 on sanctions for violations
• regulations of individual licensing authorities (Dubai Department of Economy and Tourism, DED of other emirates)
• Freezone rules (DMCC, DIFC, ADGM, JAFZA, DAFZA, etc.), which often set their own thresholds and formats, but cannot lower the bar set by federal law.
• Bank circulars of the UAE Central Bank obliging financial institutions to verify UBO as part of ongoing monitoring

The company is therefore under cross-regulation: Failure to comply with the licensing authority automatically becomes a signal to the bank, and vice versa.

Step 2. Determine who is UBO by UAE law

The UAE approach follows the FATF standards, but has its own specifics. The ultimate beneficiary is the individual who ultimately owns or controls the company, directly or indirectly.

The threshold criteria set out in Regulation No. 58 2020 are:

Ownership is an individual who directly or indirectly owns 25% or more of the company’s shares (stakes).Control is an individual who directly or indirectly exercises control through voting rights, the right to appoint or remove a majority of the directors, or otherwise has a significant influence on the company’s decisions.If no individual meets these criteria – for example, ownership is blurred between dozens of minority shareholders – UBO is recognized as an individual holding the post of senior managing official (SMO). In the UAE, it is often a CEO, managing partner or CEO – but it is important who actually makes the key operational decisions.

Particular attention is paid to chains with trusts, foundations and nominal structures: The UAE legal order requires transparency to the level of an individual – a founder, protector, beneficiary of a trust or other similar figure.

An error at this stage leads to the fact that the company submits information about a nominee holder, an intermediate holding or even about a manager who does not pass threshold tests, and thereby creates a basis for sanctions.

Step 3. Collect and verify information

The minimum amount of data to be included in the UBO register is expressly stated in the law:

• full name, nationality, date and place of birth
• national identification number or passport number
• residence
• address of residence (not office)
• nature and extent of beneficial ownership or control – percentage of participation, control mechanism
• date on which the person became a beneficiary

This information should be documented: passport copies, company constituent documents, chain of ownership (organgram), trust declarations, shareholder agreements. Banks often require additional proof of residence address – no older than three months, which creates a separate logistical task for international structures with nomadic beneficiaries.

Important: Documents not written in Arabic or English may require a notarized translation. The register or bank may request the transfer at any time.

Step 4. Prepare and submit the UBO Register (UBO Register)

Every company registered in the UAE (except for companies owned by the state in certain cases and listed companies subject to equivalent transparency requirements) is required to maintain and file with the licensing authority:

UBO Register; Register of Nominee Directors/Nominee Shareholders, if any.

Submission is carried out electronically through the portal of the licensing authority: for mainland companies through the DED system of the relevant emirate, for free zones through the corporate free zones portal (for example, DMCC Portal, JAFZA Portal, etc.).

Key points:

When registering a new company, the UBO registry is filed with a set of constituent documents or within 30 days from the date of issue of the license.Existing companies were required to enter data within the time limits established by the regulators, and then the register must be kept up to date.Any changes in the ownership structure or information about the beneficiary require updating information within 15 days from the date when the company became aware of the change.

In practice, the 15-day period is quite tough, especially when the change occurs in a foreign holding, and the information reaches the UAE management with a delay. However, the responsibility lies with the company located in the UAE.

Step 5. Ensure the relevance of data and regular audit of the registry

UBO compliance is not a one-time promotion. The UAE’s requirements include:

• confirmation of the relevance of data at least once a year (and in some free zones and when trigger events occur - more often)
• immediate notification of the licensing authority when discrepancies are identified
• storage of all supporting documents for the entire period of the company's activity plus 5 years after its liquidation

In addition, bank KYC updates are almost continuous: Requests are initiated by an automated monitoring system that responds to transaction patterns, sanctions changes and customer news. Therefore, an internal compliance calendar, synchronized with licensing dates and expected banking cycles, becomes a mandatory element of risk management.

Step 6. The Free Zones (Free Zones)

Each UAE Free Zone has its own registration regulations that detail federal requirements. The main points characteristic of DIFC, ADGM, DMCC, JAFZA, etc.:

Some free zones require that the UBO registry be filed simultaneously with the annual renewal of the license.Financial Free Zones (DIFC, ADGM) apply increased verification standards comparable to those required by regulated financial institutions, including mandatory disclosure of UBO at registration and under licensing control.ADGM and DIFC maintain publicly available (partially or fully) registers of beneficiaries, which increases transparency, but requires companies to be particularly careful: Any discrepancy with data submitted in another jurisdiction of the group may be noticed by third parties.

Thus, a company licensed in the free zone must simultaneously comply with the requirements of the Freezone Act and federal AML legislation. The “mainland-like” routines often don’t work here.

Step 7. Evaluate the penalties for non-disclosure or inauthentic disclosure

Responsibility for violations of the requirements for UBO in the UAE is serious and cumulative.

Administrative penalties for primary failure to provide or non-update the registry can be up to 100,000 AED per company. For repeated violations, fines increase, and the license may be suspended for up to one year. The Minister of Economy’s Decision No. 53 of 2021 also provides for:

• fine for not notifying the registrar of changes to the UBO
• penalty for not keeping the register of nominee holders
• fine for failure to provide data to the licensing authority upon request
• increased liability for companies in high-risk sectors defined by AML regulation

In addition to administrative measures, there are possible banking consequences: Freezing of accounts, refusal to conduct transactions, compliance checks, which develop into closing the account on 30-day notice. The group’s commercial reputation may be affected by disclosure of information about violations, which is particularly sensitive for entities that interact with European and American counterparties.

In cases of systematic or intentional violations, criminal proceedings may be initiated under anti-money laundering legislation, where sanctions include heavy fines and imprisonment.

Step 8. Build interaction with banks

Banking KYC is a mirror of the register filed with the regulator. If one person is listed in the UBO register and another person is listed in the bank application form, the financial institution is obliged to consider this as a red flag.

Therefore, a strong UBO compliance strategy is based on the principle of a “single source of truth”:

• The UBO form submitted to the licensing authority must be fully consistent with the bank’s data.
• All Registry Updates are Duplicated in Bank File
• When the bank requests, the company does not send the “refined” structure, but presents the same organigram that is in the register.
• any inconsistencies are legally verified before the data is updated at a time at all points

This approach not only minimizes the risk of an account being blocked, but also speeds up the passage of KYC when opening a new account or reorganizing a group.

Comparison of requirements: Mainland Company and Separate Free Zones

The differences don't change the point: The principle of strict liability is everywhere applicable, and no zone allows any evasion of the identity of the real beneficiary.

Typical mistakes in UBO disclosure in UAE

1. Recognize the nominee shareholder as the beneficiary. If the real owner is behind the denomination, the law requires both to be disclosed: the beneficiary - in the UBO-register, the nominal - in the register of nominee holders.
2. Use a group organgram without adaptation. The same scheme is sent to dozens of banks and registrars without checking whether the UAE has met the threshold criteria.
3. Miss the 15-day period when changing in a foreign holding. The company learns about the change late and does not record the date of receipt of the information, which makes it impossible to prove timeliness.
4. Do not specify a senior executive in the absence of a beneficiary with 25%. In such cases, the SMO must be registered and this is not an optional option.
5. Ignore trust structures. If the shares are held by a trust, the information about the founder, protector and beneficiaries of the trust is subject to disclosure, even if the trust is established outside the UAE.
6. Do not synchronize the data of the bank and the registrar. One “temporary” version of the UBO form is enough for a bank to provoke compliance escalation.
7. Keeping supporting documents is haphazard. During the inspection, the company cannot promptly present the beneficiary’s passport or the current chain of ownership, which delays the process and increases suspicions.

Checklist for company in UAE

Before submitting or updating the UBO Registry, answer 15 questions:

Who is the ultimate beneficiary on the basis of 25% direct or indirect ownership?If not, who is the senior executive officer?Is the ownership chain documented to an individual?Is there trusts, funds, nominees in the structure and are they properly disclosed?Is passport data and UBO residence addresses collected?Is the data submitted to the licensing authority consistent with those transferred to the bank?When was the registry last updated?Is the date when the company learned about the change?Is both registered? 15-day deadline for changes?Has the documents been translated into Arabic or English if required?Has the internal process of monitoring changes in the ownership chain been set up?Has the company a responsible person for UBO compliance?Has the company's risk category been verified by AML classification and does it affect the scope of disclosure?

What a strong UBO compliance looks like in the UAE

A strong system is usually built on five levels:

1. Legal Identification: The exact definition of the ultimate beneficiary (or SMO) under UAE law, taking into account the entire chain of ownership, including foreign trusts and partnerships.

2. A complete package of documents confirming the structure has been collected - with translations, apostilization (if necessary) and dated records of information receipt.

3. Data are timely submitted to the licensing authority, confirmations are received (acknowledgments), registers are maintained continuously.

4. Bank synchronization UBO file in the bank mirrors the registry, is updated simultaneously, the bank's requests are processed with the application of the same officially submitted data.

5. Internal regulations have been introduced, providing for annual (or more often) revision of UBO status, trigger notifications for corporate events and independent compliance audits.

Without a fifth tier, the system is not viable in the long run because the structure of international business changes faster than the license renewal calendar.

FAQ

All entities registered in the UAE, including companies in free zones, except for some state-owned companies and issuers subject to equivalent transparency requirements.

What to do if no shareholder reaches 25%?It is necessary to specify as UBO an individual who is a senior management officer (SMO), who actually controls the company’s operating decisions.

Can you name a nominee instead of a real beneficiary? The nominee holder is separately disclosed in the Nominee Register and the ultimate beneficiary is disclosed in the UBO Register. The designation of the UBO as a UBO is a violation.

Generally, 15 days from the time the company learned or should have known about the change. A number of free zones may set their own deadlines, but they do not exceed the federal standard.

Does the company’s management face liability? The UAE legislation allows for personal liability of directors and managers, and banks increasingly require the signing of UBO declarations with a direct indication of the personal responsibility of the signatory.

Does the bank check for discrepancy with the registry? Banks are obliged to carry out independent verification and verify customer data with registries. Discrepancy is considered a risk factor and can result in the account being blocked.

Can a company be closed without an up-to-date UBO registry?The liquidation of a company without bringing the UBO registry in order is practically impossible: The registrar will require that violations be corrected first, which can delay the process for months.

On the mainland and in most free zones, registries are only available to competent authorities and banks. DIFC and ADGM have publicly available registries with limited or complete data, which improves transparency.

More importantly: For business, it is critically important to both, and to do it simultaneously. The gap between the registry and the bank is one of the most common causes of compliance crises in the UAE.

Related services

• Registration and licensing of companies in the UAE (Mainland & Free Zones)
• Corporate compliance and full legal support of business in the UAE
• Opening and protecting bank accounts in the UAE
• International Regulatory Risk & Strategic Advisory
• Corporate Investigations, Regulatory Investigations & Business Integrity
• AML/CFT Compliance and Engagement with UAE Financial Intelligence

Related material

• Company registration in the UAE: Mainland vs Free Zone – Comparison
• Economic presence in the UAE: requirements, risks and strategy
• AML compliance in the UAE: What you need to know about foreign business
• How to open a corporate account in the UAE bank without refusal
• Structuring an international holding company with a company in the UAE
• Trusts and foundations in the UAE: disclosure
• KYC and UBO: How to prepare a flawless dossier for the bank
• Checking the counterparty in the UAE: compliance-minimum
• Responsibility of Directors and Managers in the UAE

Conclusion

The UBO disclosure requirements in the UAE are not a bureaucratic barrier, but a fundamental component of the company’s access to the country’s financial and licensing infrastructure.

A strong position is based not on formal filling out of the form, but on legally accurate identification of the beneficiary, documentary readiness, synchronization of the data of the registrar and the bank, as well as on continuous monitoring of changes in the ownership structure.

In an environment where regulators, financial intelligence and banks share information, it is not the person who “guessed” UBO at the time of registration who wins. The winner is the one who has built a process that allows to prove on any day the transparency and legality of the ultimate control over business in the UAE.