Quick Summary: What This Guide Covers
This guide explains which KYC documents in UAE businesses must collect, from whom and when. It starts with what KYC documents are and who has to collect them, then gives a clear UAE KYC document list for individuals, companies, trusts, non-profits and high-risk customers such as PEPs. It also covers sector-specific needs for DNFBPs, how to verify and store documents, how long to keep them, practical ways to streamline the process, the most common challenges with simple fixes, and answers to the questions compliance teams ask most often.
Ask three UAE businesses for their KYC checklist and you’ll get three different answers. A bank wants one set of papers, a real estate broker another, a gold dealer a third.
For compliance teams that confusion is a real risk, because one missing document can mean a failed inspection.
The good news is that the core rules behind KYC documents in UAE are the same for everyone. Only the depth changes with customer type and risk. This guide breaks it down in plain English: what to ask for, why, and how to keep it current.
What Are KYC Documents?
KYC documents are the papers, data and records a business collects to confirm who its customer really is. KYC stands for Know Your Customer. In simple terms, these documents answer three questions: Who is this person or company? Who is really behind them? And what kind of business will they do with you?
They are your evidence that proper checks were done, and the first thing an inspector asks to see.
Why UAE Businesses Must Collect KYC Documents
UAE law requires regulated businesses to identify every customer and verify that identity using original documents or reliable, independent data. For companies, you also need to understand the ownership and control structure and identify the beneficial owner. You need to know the purpose of the relationship too.
Without the right KYC documents on file, a UAE business can’t show it understands its customers. That opens the door to money laundering, terrorist financing and heavy AML fines and penalties.
KYC Documents vs CDD Documents: Is There a Difference?
People often use the two terms as if they mean the same thing, and in daily work they mostly do. KYC is the overall goal of knowing your customer. Customer due diligence (CDD) is the formal process the law sets out to reach that goal. So CDD documents are simply the KYC documents you collect while carrying out CDD.
Train Your Team to Get KYC Right the First Time
Who Needs to Collect KYC Documents in UAE?
KYC documentation requirements apply to three main groups:
- Financial institutions: banks, exchange houses, finance companies, insurers, brokers and investment firms.
- Designated non-financial businesses and professions (DNFBPs): real estate brokers and agents, dealers in precious metals and stones, lawyers, notaries, accountants, corporate service providers and commercial gaming operators.
- Virtual asset service providers (VASPs): crypto exchanges, custodians, brokers and similar firms.
If you fall into any of these groups, you need a clear UAE KYC document list for each customer type you serve.
When Do KYC Documentation Requirements Apply?
You don’t only collect KYC documents once at onboarding. Under Cabinet Resolution No. 134 of 2025 (Article 7), KYC checks must be carried out:
- When you start a new business relationship.
- When you suspect money laundering, terrorist financing or another crime.
- When you have doubts about the accuracy of information you collected earlier.
- For financial institutions, on occasional transactions of AED 55,000 or more (single or linked) and on occasional wire transfers of AED 3,500 or more.
- For VASPs, on occasional transactions of AED 3,500 or more.
Some DNFBPs have their own triggers. Dealers in precious metals and stones are covered for cash transactions of AED 55,000 or more, and real estate brokers when they handle a purchase or sale for a customer.
UAE KYC Document List for Individual Customers
For a natural person, the law asks you to record the full name as it appears on the ID, nationality, address, date and place of birth and, where relevant, the employer’s name and address. You also need a true copy of a valid ID or passport. In practice, most UAE businesses use this KYC documents list:
| Document | Why It’s Needed |
|---|---|
| Emirates ID (front and back, valid) | Main proof of identity and UAE residency |
| Passport (valid) | Confirms nationality; main ID for non-residents |
| UAE residence visa (if not shown on Emirates ID) | Confirms legal residence status |
| Proof of address (utility bill, tenancy contract or bank statement, usually under 3 months old) | Confirms where the customer lives |
| Employer details or salary certificate | Shows occupation and expected income |
| Source of funds declaration with support | Explains where the money for the deal comes from |
| FATCA/CRS self-certification (banks and investment firms) | Confirms tax residency for reporting |
KYC Documents for UAE Residents vs Non-Residents
For residents, the Emirates ID does most of the work, backed by a passport. Non-residents rely on the passport plus foreign address proof, and sometimes a home-country bank reference. Remote non-resident onboarding deserves a closer look, especially for higher-risk countries.
When Someone Acts on the Customer’s Behalf (POA / Guardian)
If a person acts for the customer, such as a power of attorney holder, a guardian of a minor or an authorised signatory, you need two sets of KYC documents. One set is for the customer and one is for the representative. You also need the document that gives them authority, such as a notarised power of attorney or a guardianship order. Check that it is valid and covers the action they are taking.
Still Running KYC on the Old 2018 Rules?
Corporate KYC Documents for UAE Companies
Corporate KYC is where most files go wrong, because you have to look through the company to the people who own and run it. The basic company information now also includes the tax registration number for companies subject to corporate tax, a new item many checklists still miss. A typical list of corporate KYC documents:
| Document | Why It’s Needed |
|---|---|
| Trade licence (valid) | Confirms the company is registered and what it is allowed to do |
| Certificate of incorporation or registration | Confirms when and where it was formed |
| Memorandum and Articles of Association | Shows structure, shareholding and powers |
| Corporate tax registration number (if subject to corporate tax) | Now part of the basic company information |
| Registered office or business address proof | Confirms where the company operates |
| Shareholder register | Maps who owns the company |
| UBO declaration | Names the real people behind the company |
| Board resolution or power of attorney | Confirms who can act for the company |
| IDs of directors, managers, signatories and UBOs | Verifies the people who own and run it |
| Company profile and latest financial statements (for higher risk) | Shows the real business activity and size |
Mainland vs Free Zone Company KYC Documents
Mainland companies hold a licence from their emirate’s economic department. Free zone companies hold one from their free zone authority, such as DMCC, JAFZA or RAKEZ, usually with a share certificate and register of directors. ADGM and DIFC have their own public registers. The rule is simple: collect the documents issued by that company’s own registrar and check them against its records where you can.
Extra KYC Documents for Foreign Companies
Ask for foreign incorporation documents, the shareholder and director registers and a good standing certificate. If the company has a legal representative in the UAE, record their name and address with evidence. Foreign documents are usually attested and, if needed, translated.
How to Identify the Beneficial Owner (The 25% Rule)
The beneficial owner is the real person who ultimately owns or controls the company. UAE rules use a three-step test:
- Ownership: find any natural person who owns 25% or more of the company, directly or through other companies.
- Control: if no one meets that test, or you have doubts, find the person who controls the company in another way, such as through voting rights or agreements.
- Senior management: if you still can’t identify anyone, record the person holding the senior management position as the beneficial owner.
For layered structures, ask for a signed ownership chart that shows every layer up to the real people at the top. Then get KYC documents for each of those individuals.
Listed Companies: Simplified KYC Documents
If the customer is a company listed on a regulated stock exchange with proper disclosure rules, or a subsidiary it controls, you may not need to identify each shareholder. You can take ownership details from public registers or other reliable sources. This is one example where simplified due diligence may fit, as long as your risk assessment supports it.
KYC Documents for Trusts, Foundations and Non-Profit Organisations
Trusts need extra care because ownership and benefit are split between several parties. Identify the settlor, trustee, any protector, the beneficiaries (or class of beneficiaries) and anyone else with real control.
| Document | Why It’s Needed |
|---|---|
| Trust deed, foundation charter or NPO constitution | Sets out the legal structure and purpose |
| IDs of settlor/founder, trustees and protector | Verifies the people who set up and manage it |
| Beneficiary details or class description | Shows who ultimately benefits |
| Registration certificate and regulatory approvals | Confirms it is legally set up and licensed |
| IDs of council or board members | Verifies the governing body |
| Source of donations and funding (NPOs) | Confirms the money is legitimate |
| Annual financial reports | Shows how funds are raised and used |
If a company is a party to the trust, for example as trustee, you also need that company’s corporate KYC documents and its beneficial owners.
Struggling to Identify Beneficial Owners?
Extra KYC Documents for High-Risk Customers and PEPs
Standard KYC documents are not enough when the risk is higher. Your risk-based approach decides when to step up to enhanced due diligence (EDD), and the extra checks need extra documents.
Source of Wealth and Source of Funds Documents (With Examples)
Source of funds explains where the money for a specific transaction comes from. Source of wealth explains how the customer built their overall wealth. Useful evidence includes:
- Salary certificates and bank statements showing income
- Sale agreements for property, shares or a business
- Audited accounts or dividend statements for business owners
- Inheritance documents or gift letters with the donor’s KYC
- Loan agreements or investment statements
Match the evidence to the deal size: an AED 5 million villa purchase needs far stronger proof than a basic account.
KYC Documents for Politically Exposed Persons (PEPs)
Politically exposed persons hold, or have held, important public roles, so they carry higher corruption risk. For foreign PEPs, and for domestic PEPs where the relationship is high risk, you need senior management approval before onboarding. You also need reasonable measures to establish their source of funds and source of wealth, and closer ongoing monitoring. Keep a signed PEP declaration, your screening results and the approval record on file.
Customers Linked to High-Risk Countries
Customers connected to countries on the FATF grey list or blacklist, or to countries the UAE identifies as high risk, should face EDD. Ask for stronger address and income proof, more detail on why they are dealing with you and, where needed, references from regulated banks.
KYC Document Requirements for DNFBPs by Sector
DNFBPs follow the same core UAE KYC requirements as banks, but each sector has its own triggers and extra focus areas:
| Sector | When KYC Is Triggered | Extra Focus |
|---|---|---|
| Real estate agents | Buying or selling property for a customer | Source of funds, payment method, buyer and seller KYC |
| Dealers in precious metals and stones | Cash deals of AED 55,000 or more (single or linked) | ID of the buyer, origin of gold or stones for suppliers |
| Lawyers, notaries and accountants | When preparing or carrying out covered transactions for a client | Client and UBO KYC, purpose of the transaction |
| Corporate service providers | Forming companies, providing directors or a registered address | Full UBO chain, nominee arrangements |
| VASPs | New relationships and occasional transactions of AED 3,500 or more | Wallet ownership, source of crypto funds |
How to Verify the KYC Documents You Collect
Collecting documents is only half the job. You also need to prove they’re real and belong to the customer.
Use Reliable and Independent Sources
Check documents against the original or a trusted source. That can mean seeing the original in person, using certified true copies, reading the Emirates ID chip, or using approved digital ID and UAE Pass based eKYC tools where your supervisor allows them. Look out for signs of document forgery, such as edited fonts, mismatched dates or a photo that doesn’t match the person.
Screen Names Against Sanctions and PEP Lists
Every customer, beneficial owner and authorised signatory should go through name screening against the UAE Local Terrorist List, the UN Consolidated List and PEP databases. Keep the screening results with the KYC file so you can show what you checked and when.
How Long to Keep KYC Documents in UAE
The law requires you to keep all CDD records, including copies of ID documents, for at least five years from the end of the business relationship or the completion of an occasional transaction (Article 25 of Cabinet Resolution No. 134 of 2025). Where an inspection, investigation or court case is involved, the five years run from whichever date is latest. Records must be organised so you can rebuild any transaction and share it with authorities quickly when asked.
Through ongoing monitoring you must also keep files current, so an expired Emirates ID or ownership change should trigger an update.
Get a Ready-to-Use UAE KYC Document Checklist
How to Streamline KYC Documentation in the UAE
Good KYC doesn’t have to slow onboarding down. Five steps help:
Use Digital Identity Verification Tools
Digital ID tools read an Emirates ID or passport, check it’s genuine and match it to a live selfie in minutes, with a clear audit trail.
Keep All KYC Documents in One Central System
Scattered email attachments are a nightmare during an inspection. One central system means everyone works from the latest file, and you can pull a full customer pack in seconds.
Automate Sanctions and PEP Screening
The right AML software screens customers at onboarding and rescreens them automatically whenever sanctions lists change.
Set a Schedule to Refresh KYC Documents
Set review cycles by risk, such as yearly for high-risk customers and every two to three years for low-risk ones, with alerts for ID and licence expiry.
Train Your Team on KYC Documentation Requirements
Regular AML training helps front-line staff know which documents to ask for, spot red flags and explain why the paperwork matters.
Common KYC Documentation Challenges and How to Fix Them
Incomplete or Inconsistent Records
Challenge: Half the documents arrive, or names and dates don’t match.
Fix: Share a customer-type checklist up front and don’t open the file until it’s complete.
Tracing the Real Beneficial Owner in Layered Structures
Challenge: Holding companies in several countries hide who is really in charge.
Fix: Ask for a signed ownership chart, check each layer against official registers, and keep going until you reach a real person.
Documents in Arabic or Other Languages
Challenge: Staff can’t read foreign-language documents.
Fix: Ask for certified English or Arabic translations and keep both versions.
Expired Emirates IDs and Passports
Challenge: IDs expire during the relationship and nobody notices.
Fix: Track expiry dates in your system and request new copies before they lapse.
Policies Still Built on the Old 2018 Law
Challenge: Many KYC procedures still quote rules that have been repealed.
Fix: Update your AML policies and procedures to the 2025 UAE AML law, including the new corporate tax number requirement.
What If a Customer Can’t Provide KYC Documents?
Challenge: A customer refuses or delays without a good reason.
Fix: Don’t start the relationship or carry out the transaction. If something feels wrong, consider filing a suspicious transaction report with the UAE FIU. Be careful not to tell the customer, because that can count as tipping off.
Benefits of Getting KYC Documentation Right
When your KYC documents in UAE are complete and current, you:
- Pass regulatory inspections with confidence and avoid fines.
- Onboard good customers faster, because the process is clear.
- Build trust with banks, partners and clients.
- Spot and stop financial crime before it touches your business.
How GRC Advisors Can Help
GRC Advisors helps UAE businesses build KYC processes that work in practice and stand up to inspection. We design your KYC and CDD framework, prepare customer-type document checklists and review existing KYC files for gaps. We also handle PEP and high-risk customer management, run customer risk assessments and train your team. Whether you are a bank, a DNFBP or a VASP, on the mainland or in a free zone, we bring your KYC up to the 2025 law.
Not Sure Your KYC Files Would Pass an Inspection?
FAQs
What documents are required for KYC in UAE?
For individuals, the core KYC documents in UAE are a valid Emirates ID, passport, proof of address and source of funds information. For companies, you need the trade licence, MOA/AOA, shareholder register, UBO declaration, board resolution and IDs of directors and beneficial owners.
Is Emirates ID enough for KYC in UAE?
Usually not. It confirms identity and residency, but most businesses also need a passport, address proof and source of funds details.
What are the corporate KYC documents for a UAE company?
A trade licence, certificate of incorporation, MOA/AOA, tax registration number (if subject to corporate tax), shareholder register, UBO declaration, board resolution or POA, and IDs of directors, signatories and beneficial owners.
What is the UBO threshold in UAE?
A beneficial owner is any natural person who owns or controls 25% or more of a company. If no one reaches that level, you look at who controls it in other ways, and then at senior management.
How long must KYC documents be kept in UAE?
For at least five years from the end of the business relationship or the completion of the transaction, or longer if an inspection, investigation or court case is ongoing.
Can KYC documents be collected online in UAE?
Yes, through digital ID and eKYC tools where your supervisor allows it, as long as checks are reliable and recorded.
What KYC documents are needed for a free zone company?
The free zone licence, certificate of incorporation, MOA/AOA, share certificate, director and shareholder registers, UBO declaration and IDs of directors and beneficial owners.
