Digital business banking in the UAE: how online-only accounts work

A digital business account is opened and run through an app or website instead of a branch. In the UAE it is either an account with a bank licensed by the Central Bank, such as Wio Bank or Zand Bank, both listed as banks in its August 2026 register, or a service from a company that uses a partner bank or holds a narrower licence. The register shows which.

Key takeaways

• A digital business account is opened and managed online, but the same due diligence law applies as at a branch.
• The CBUAE Register lists each licensed institution and its licence type, such as bank, stored value facility or retail payment services.
• Wio Bank and Zand Bank are listed as banks in the CBUAE Register as of August 2026.
• An app that is not a bank may hold customers' money at a partner bank, and the account agreement shows which institution that is.
• The Central Bank's SME rules on disclosure, fees and complaints apply to banks and finance companies serving SMEs whatever the channel, including mobile apps.

On this page 9 sections

What a digital business account is

A digital business account is one that a company applies for, opens and runs online, through a mobile app or a website, without visiting a branch in the normal course. Documents are uploaded or scanned, the contract is accepted electronically, and statements and notices arrive in the app. The legal duties behind the account do not change with the channel.

Due diligence under the AML law

In force from 14 October 2025

Federal Decree by Law No. (10) of 2025, in force from 14 October 2025, requires financial institutions to apply customer due diligence and continuous monitoring based on risk, including identifying and verifying the customer and its beneficial owner, the nature of its business and its ownership and control structure, and forbids opening or keeping accounts under anonymous, fictitious, alias or numbered names.

An app changes how those checks are carried out, with documents scanned instead of photocopied, not whether they happen. As in the know your customer process at a branch, the institution can ask follow-up questions or for more documents before it opens the account.

The paperwork is electronic as well. The SME Customer Protection Regulation of the Central Bank of the UAE treats electronic and digital documents as “in writing” where they meet Federal Decree Law No. 46 of 2021 on Electronic Transactions and Trust Services. A notice, a fee schedule or a Key Facts Statement delivered in an app can therefore meet a written disclosure duty, and the bank must give the customer copies of the contracts and documents the customer signed, including those accepted digitally.

Digital banks and apps on a partner bank

Digital business accounts come from two kinds of provider: banks with a Central Bank banking licence that serve customers through an app, and app companies that rely on a partner bank or a narrower licence. The kind of provider decides which rules protect the business and its money.

Licence types in the CBUAE Register

9 licence types in the CBUAE Register

The Central Bank of the UAE licenses and supervises financial institutions in the UAE and publishes the CBUAE Register, which can be searched by institution name and by licence type: bank, finance company, exchange business, stored value facility, representative office, retail payment services, dirham payment token issuance, payment token conversion, and payment token custody and transfer.

The three licence types most relevant to business accounts:

The register has no separate licence type for digital banks. A bank that serves its customers through an app holds the same kind of bank licence as one with branches.

Banks licensed by the Central Bank

A bank is licensed mainly to take deposits, and an account it opens through an app is still an account with that licensed bank, with the same duties as one opened at a counter.

App-based banks in the register

Listed as banks (August 2026)

The CBUAE Register as of August 2026 lists WIO Bank P.J.S.C and Zand Bank P.J.S.C in its Banks section.

The SME Customer Protection Regulation applies to all banks and finance companies licensed by the Central Bank in their dealings with SME customers, the small, micro and medium businesses within the size thresholds explained in SME finance. Its disclosure rules apply expressly to every channel a bank operates, including mobile applications and internet banking, and the information must be available in English and Arabic.

Fintech apps and narrower licences

An app that is not itself a bank works in one of two ways. It may provide the software and the customer service while the account is held at a partner bank. Or it may hold its own Central Bank licence for a narrower activity, such as a stored value facility or retail payment services.

Each narrower licence has its own regulation. Under the Stored Value Facilities Regulation, the issuer must keep customers’ money segregated from its own funds and protected against claims by its other creditors, for example in segregated accounts with licensed banks. Under the Retail Payment Services and Card Schemes Regulation, a payment provider may hold users’ funds only while they are in transit and must safeguard them, for example by keeping them apart from other funds and out of reach of its other creditors. Both regulations require licensees to follow the Central Bank’s consumer protection requirements.

How to check a provider’s licence

Look up the institution that holds the money, not the app’s brand name, in the CBUAE Register on the Central Bank’s licensing page. Four steps cover it:

1. Find the legal name. Look in the app’s terms and conditions or account agreement for the institution that provides the account. Many names in the register end in a legal suffix such as P.J.S.C or L.L.C.
2. Search the register. The search on centralbank.ae/en/licensing takes an institution name and can be narrowed by licence type and head office. The page also links the full register as a PDF; on 21 October 2026 that file was the register as of August 2026.
3. Match the licence to the service. An account described as a bank account should sit with an institution listed as a bank. A wallet or prepaid balance fits a stored value facility licence; transfers or payment collection fit retail payment services.
4. Check the partner bank. If the terms say the money is held at a partner bank, search for that bank too, and note which institution the account agreement is actually with.

If the legal name does not appear under any licence type, the register does not show the institution as licensed by the Central Bank.

Opening an account online

Opening an account online generally takes the same kinds of documents as a branch application, because the same due diligence law applies; what changes is how the documents reach the bank. The full list, and why banks ask for each item, is in opening a business bank account.

Apps add their own practical requirements. Emirates Development Bank’s page for its EDB 360 business banking app, for example, lists an active UAE mobile number, an email address, a valid Emirates ID and the company trade licence, and asks applicants to scan key documents in the app. Requirements vary between providers, and whether owners and signatories who live outside the UAE can use online onboarding depends on each provider’s policy; accounts for owners who live abroad covers what banks ask in that case.

Account opening for a low-risk SME

3 business days (delay up to 2 weeks)

Under the CBUAE SME Customer Protection Regulation (Circular 2/2026, effective 13 September 2026), which applies to banks and finance companies licensed by the Central Bank, a bank must open a low-risk SME customer's account within 3 business days of receiving a complete application; if other valid reasons delay it, the delay may not exceed 2 weeks and the bank must explain it, and it may open the account with limited transactions meanwhile.

In an app, the clock starts when the last document or answer the bank needs has been supplied, not when the first screen is filled in. The regulation also expects banks to record account requests made through every channel, websites included, and the average time accounts take to open.

Limits and features to check

The account terms, not the look of the app, decide whether an account fits the way a business pays and gets paid. These are the points to set side by side:

For money received in US dollars, the dirham’s peg to the dollar gives a fixed reference rate for checking the rate an account applies when it converts; the AED-USD peg explains the link.

Transfer limits show how much the terms can matter.

Worked example

Paying an AED 126,000 invoice under an AED 50,000 daily transfer limit

The invoice and the limit are illustrations, not any provider’s figures.

1. The invoice is AED 126,000, and the account allows transfers of up to AED 50,000 a day.
2. Days needed: AED 126,000 ÷ AED 50,000 = 2.52, which rounds up to 3 days.
3. Day 1: AED 50,000. Day 2: AED 50,000. Day 3: AED 126,000 − AED 50,000 − AED 50,000 = AED 26,000.
4. Check: AED 50,000 + AED 50,000 + AED 26,000 = AED 126,000.

The supplier is paid in full on day 3 unless the limit can be raised for the payment.

Is a digital business account safe?

A digital account rests on the licence of the institution that holds the money; the channel does not lower the legal protections. The first check is the register entry. For a bank or finance company serving an SME, the SME regulation’s rules then apply whether the account is used in a branch or in an app, including the complaint timetable:

Complaint deadlines

Acknowledge in 2 business days; answer in 30

Under the CBUAE SME Customer Protection Regulation, banks and finance companies licensed by the Central Bank must let SME customers complain easily and free of cost, acknowledge a complaint in writing within two business days with a reference number, send a final written response with reasons within 30 business days, and tell the customer how to escalate an unresolved complaint, including to the Ombudsman Unit (Sanadak).

Because the regulation counts electronic documents as written ones, the acknowledgement and the final response can arrive in the app or by email. For an app under a stored value facility or retail payment services licence, the protection is the safeguarding of funds described above and its own regulation’s consumer protection duties.

Fees on digital accounts

For a bank or finance company, fees on a digital account are disclosed the same way as on any other account: the fees and a Key Facts Statement before the account is provided, and a written fee schedule.

Fees disclosed in full

Copy of the fee schedule; all fees disclosed

Under the CBUAE SME Customer Protection Regulation, banks and finance companies licensed by the Central Bank must have a transparent fee and pricing structure, disclose all fee components including third-party costs, and give SME customers clear information on all applicable fees, whether one-time or recurring and how often they recur, including a copy of the fee schedule.

A bank must give the fee schedule in writing when it provides the account or signs the contract, and again whenever the customer asks for it. How minimum balances and fall-below charges work is covered in minimum balances and bank fees, and other topics on accounts and finance are in Business banking guides.