Guide · updated 02.09.2026 · 10 min read · Lucent Legal team

UAE Bank Sent a Compliance Request: How to Answer It Correctly

A message lands in your banking app: "please update your account information," followed by questions about your job, your money, and transfers over the last few months. In formal legal English it reads like an accusation. It isn't one — this is a compliance request, also called a KYC request, and documents close it.

What a compliance request is and why it lands in your inbox

UAE banks monitor customers continuously under AML/CFT regulation, for the whole life of the relationship rather than once at opening. Compliance pulls client files periodically and asks for documents whenever something doesn't match the account's expected profile.

What usually sets one off:

• a routine KYC refresh — most banks repeat these every 1–3 years, set by your risk category and the bank's own policy;
• a passport, residency visa, or Emirates ID that has expired;
• a deposit that's large or simply out of pattern for how your account normally moves;
• money arriving from a higher-risk jurisdiction, or hopped through intermediary countries;
• turnover that doesn't line up with your stated job or, for a company, its line of business.

September 2026: banks are re-checking everyone — what to send, how long it takes

Three things converged. In April the CBUAE issued refreshed AML guidance that turns identity verification into a standing obligation rather than a one-time check at account opening. The country's FATF assessment was scheduled for June. And the new Central Bank law gave regulated firms a year to reconcile their position, a deadline that runs out in September 2026 — it bites hardest on payment and crypto services, covered in CBUAE licensing for crypto and payments.

The personal-account package is near-identical at Emirates NBD and DIB:

• a valid Emirates ID, front and back, plus passport and residency visa;
• proof of your UAE residential address;
• tax-residency self-certification — FATCA and CRS forms;
• source of income, expected turnover, and the countries you expect money from;
• source-of-funds documents behind any large credit.

Processing times, per advisors: a routine profile refresh clears in 3–10 business days once the file is complete; verification of one specific transfer takes 1–3 weeks.

Silence escalates on a ladder. Services go first — cheque book, online and mobile banking, cards, ATM withdrawals. Then a partial freeze, then a full one. Closure is the last rung, and the bank must give 60 calendar days' written notice before it.

Money from Russia gets its own set of questions. The same paperwork answers them: employment contract and salary certificate, a statement from the sending Russian bank, a property sale contract with proof of settlement, inheritance papers, a tax return. How the transfers themselves work is covered in transfers from Russia to the UAE. A sanctions questionnaire usually arrives as a separate file — Mashreq's form has a dedicated Russia section covering dealings, goods, services, and stakes in Russian business. Answer it straight: a mismatch with your statement shows up immediately.

What the bank is actually asking for: source of funds vs. source of wealth

Two phrases repay knowing exactly, since the letter almost always arrives in English.

Source of funds — the origin of one specific sum. The bank wants proof tied to that transaction: a salary slip, an employment contract, a court judgment behind a payout, a statement from the sending account, or a sale-and-purchase agreement.

Source of wealth — how your finances came together over the years, not a single transfer. Banks may want business history, tax filings, inheritance papers, or investment statements.

Accepted sources: salary, gratuity/end-of-service compensation, inheritance, a bank loan, business income, proceeds from selling property or land, investment returns. Each needs a document behind it — a written explanation is not enough.

How to answer the bank step by step

1. Break out each question on its own. A bank often fires 5–10 points in one message, and each wants its own answer.
2. Pull a document for every sum they name. "I have a job" won't do — attach the employment contract, statement, invoice, or agreement.
3. Translate anything not already in English. The compliance officer reads English only, and an untranslated file comes straight back.
4. Answer in writing through the bank's own channel — the app, secure email, or online banking — never by phone.
5. Line up every date and amount with the statement. A figure that doesn't match triggers a follow-up.
6. Save the exchange and your proof of submission. It's your only evidence that you replied in time.

Common mistakes when replying to a compliance request

• Sitting on the letter and hoping it disappears. The costliest move: the bank treats silence as refusal to cooperate.
• Answering in generalities — "it's business income," with no contract or statement behind it.
• Sending documents with no translation, and with dates or amounts that don't match the transaction.
• Mixing up source of funds and source of wealth — handing over a multi-year income summary when they asked about one transfer, or the other way round.
• Fighting or venting instead of answering with documents. The bank is assembling a file, not judging fairness. Push back later, if it restricts the account without cause.
• Leaving it to the final day of the deadline — that kills any room to add something if the bank follows up.

Deadlines and what ignoring the request risks

Whatever the letter states is the number that counts. As a general guide, advisors say a routine KYC refresh gives 30 to 60 days, while an urgent query tied to one transaction can land with a 48-hour deadline.

Miss it, or fail to satisfy the bank, and the same ladder runs: restricted activity, then a freeze, then closure for repeated silence or suspected financial crime.

What to do once a full freeze has landed is handled in UAE bank account frozen: step-by-step. A bank that skips the document request and jumps to a closure notice is a different situation — see UAE bank closing accounts for Russian nationals.

A compliance request is not a court order and not a court-imposed freeze. Get legal help if the bank has already restricted the account, won't explain why, or looks to be laying groundwork for closure. A broader overview sits in banking and finance in the UAE.

Topic: UAE Banking, Accounts & Taxes 2026

This material is for information only and is not legal advice. UAE law changes — a lawyer will assess how it applies to your situation.