Guide · updated 31.07.2026 · 9 min read · Lucent Legal team

UAE Bank Sent a Compliance Request: How to Answer It Correctly

Compliance Request from a UAE Bank: How to Reply — 2026

Key points

  • A compliance/KYC request is part of the bank's ongoing customer due diligence, required under UAE anti-money-laundering law — not a one-off accusation aimed at you personally.
  • The bank has to establish your source of funds (the origin of a specific sum) and source of wealth (how your overall financial position built up) — accepted proof includes payslips, an employment contract, a court judgment, gratuity/end-of-service documents, a bank statement, or a sale-and-purchase agreement.
  • Enhanced due diligence (EDD) — a deeper level of review — applies to higher-risk clients: politically exposed persons (PEPs), transfers from higher-risk jurisdictions, and unusually large or complex transactions.
  • According to banking-industry sources, if you don't respond, the bank can restrict account activity and, in some cases, close the account outright — the real risk is silence, not the review itself.
  • A compliance request on its own does not freeze your account — restrictions only follow if the bank gets no answer or isn't satisfied with the documents; if your account is already frozen, that's a separate process covered in UAE bank account frozen.

A message shows up in your banking app or inbox: "please update your account information" — followed by questions about where your money comes from, your job, and transfers over the last few months. It can look alarming, especially in formal legal English. In reality this is routine — a compliance request (also called a KYC request, for Know Your Customer) — and the bank isn't trying to "catch" you if your money is legitimate. Below: exactly what banks ask for, how to answer so the matter closes on the first try, and what happens if you stay silent or brush it off.

What a compliance request is and why it lands in your inbox

UAE banks are required to run ongoing customer monitoring under AML/CFT regulation — not just a one-time check when you open an account, but a process that continues for the whole life of the relationship. The compliance department periodically reviews client files and asks for supporting documents whenever something doesn't match the account's expected profile.

Common triggers for a request:

  • a scheduled KYC refresh — banks typically run these every 1–3 years depending on the client's risk category and the bank's own policy;
  • an expired passport, residency visa, or Emirates ID;
  • a large or unusual deposit that doesn't fit your normal account activity;
  • transfers from a higher-risk jurisdiction or routed through intermediary countries;
  • account turnover that doesn't match your stated profession or line of business (for companies).

What the bank is actually asking for: source of funds vs. source of wealth

Two terms are worth knowing precisely, since UAE banks almost always write in English.

Source of funds — where a specific sum that landed in your account came from. The bank wants a document tied to that exact transaction: a salary slip, an employment contract, a court judgment for a payout, a bank statement from the sending account, or a sale-and-purchase agreement if you sold property or assets.

Source of wealth — the broader question of how your overall financial position built up over the years, not just one transaction. Here banks may ask for business history, tax filings, inheritance documents, or investment statements.

Examples of accepted sources in bank practice: salary, gratuity/end-of-service compensation, inheritance, a bank loan, business income, proceeds from selling property or land, and investment returns. Each one needs to be backed by a document — a written explanation on its own is not enough.

How to answer the bank step by step

  1. Read the request fully and list every question separately. Banks often send 5–10 points at once — each one needs its own answer, not a single general reply.
  2. Gather a document for every specific sum or transaction they're asking about. Not "I have a job" as a description — an actual employment contract, statement, invoice, or agreement.
  3. Get documents translated into English if the original is in another language. An official or certified translation cuts the risk of a repeat request — a bank's compliance officer typically won't read anything other than English.
  4. Reply in writing, through the bank's official channel — the app, secure email, or online banking — not verbally over the phone.
  5. Match dates and amounts exactly to what's on the bank statement. A mismatched figure is a common reason for a follow-up request or added suspicion.
  6. Keep a copy of the whole exchange and proof of submission. It's your only evidence that you responded on time if a dispute comes up later.

Common mistakes when replying to a compliance request

  • Ignoring the letter, hoping it goes away. This is the most common and most expensive mistake — the bank reads silence as a refusal to cooperate, not as a misunderstanding.
  • Answering vaguely — "it's business income" with no contract, invoice, or statement attached. Compliance needs every sum backed by a document; general statements don't count.
  • Sending documents with no translation and no dates or amounts that match the transaction.
  • Confusing source of funds with source of wealth — sending a general income summary for the past several years when the bank asked about one specific transfer, or the reverse.
  • Arguing or complaining instead of just closing the request with documents. At this stage the bank isn't weighing fairness, it's building a file; there's a time to push back — later, if the account gets restricted without cause.
  • Waiting until the last day of the stated deadline, if one is given — that leaves no room to supply anything extra if the bank asks a follow-up question.

Deadlines and what ignoring the request risks

Deadlines vary by bank and request type — advisors report that a scheduled KYC refresh usually allows 30 to 60 days, while an urgent request tied to a specific transaction can come with a 48-hour deadline. The exact figure is always stated in the letter itself — go by that, not by general numbers.

If the deadline passes or the response doesn't satisfy the bank, the typical escalation looks like:

  • restricting specific account activity (for example, outgoing transfers);
  • freezing the account entirely until documents are provided;
  • closing the account — the last resort, used for repeated non-response or suspected financial crime.

A full account freeze, and what to do if it's already happened, is covered separately in UAE bank account frozen: step-by-step. If the bank skipped the document request and went straight to a closure notice, that's a different scenario — see UAE bank closing accounts for Russian nationals.

Worth understanding: a compliance request is not a court order and not a court-imposed freeze — it's entirely within the bank's own process, and in most cases you can resolve it yourself, with documents, without a lawyer. Get legal help if the bank has already restricted the account, won't explain why, or the request looks like groundwork for closing the account rather than keeping it — a broader overview of banking and tax matters in the UAE is in banking and finance in the UAE.

FAQ

What is a KYC request from a UAE bank, and how is it different from an account freeze?

A KYC request asks you to update or confirm your details and the origin of your funds; on its own, it does not freeze the account. Restrictions only follow if the request is ignored or the compliance team isn't satisfied with the answer.

Do source-of-funds documents have to be translated into English?

There's no legal requirement, but in practice a bank's compliance officer usually can't read anything other than English, and an untranslated document is almost always sent back with a repeat request — which slows things down rather than speeding them up.

What if I don't have a document proving a specific transfer?

Gather the closest indirect evidence you can — a statement from the sender's side, correspondence, an agreement — and explain in writing to the bank what's available and what isn't, and why. A complete absence of any supporting proof is a situation worth checking with a lawyer before you reply.

Can a bank close an account after just one compliance request?

Usually not — in practice, restrictions and repeat requests come first, and closure is the last resort for systemic non-response or suspected financial crime. Sources vary on the exact timeline between stages, so confirm the specifics with your own bank.

How do I tell a routine compliance check apart from the start of an account closure?

Wording about "updating your details," a "regulatory requirement," or a specific list of source-of-funds documents points to a routine KYC check. A direct notice with a closure date is a different process — covered in a separate guide.

Do I need a lawyer to answer a standard compliance request?

In most cases, no — if you have the documents and the amounts match your statement, you can prepare the response yourself. Get a lawyer if the bank has already restricted the account, won't explain its reasoning, or part of the activity has no documentary backup.

Sources

This material is for information only and is not legal advice. UAE law changes — a lawyer will assess how it applies to your situation.