A client who opened an account at a DIFC bank in four working days does not understand why his Geneva relationship needs a month. He is not being difficult. He has a reference point, and by that reference point you look slow.
The gap is real. What matters commercially is that most of it is not regulatory. Swiss due diligence obligations explain part of the delay and cannot be waived; the rest is document legalisation, ownership chains that cross three registries, and a chase conducted by email. Those are operational problems with operational answers. Confusing the two categories is what costs relationships — either you apologise for a delay you could have removed, or you compress something you were required to do properly.
This article separates them, for Swiss banks and asset managers onboarding UAE-resident clients and UAE corporate structures.
1. The regulatory map you actually need
The UAE is not one jurisdiction for onboarding purposes. Three layers matter.
Federal AML law and the onshore regulator. A federal anti-money-laundering framework applies across the UAE, with the Central Bank supervising onshore financial institutions and suspicious-activity reporting routed through the national FIU platform. Beneficial-owner procedures are set at federal level: the earlier 2020 instrument has been replaced by Cabinet Decision 109 of 2023, which governs the register of beneficial owners maintained by licensing authorities. If a counterparty cites the 2020 decision, their documentation is out of date — a small tell, but a useful one.
The two financial free zones. The Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM) are common-law jurisdictions with their own regulators — the DFSA and the FSRA respectively — and their own rulebooks. An entity registered in DIFC is not registered with the mainland authority, and its documents come from a different registry with a different format. Treating "Dubai" as a single registry is the first thing that slows a file down.
Commercial free zones and mainland. JAFZA, DMCC, RAKEZ and others are commercial free zones, not financial ones, each with its own licensing authority and its own extract format. Mainland companies fall under the relevant emirate's Department of Economy and Tourism. A group can and often does span several of these at once.
One piece of context worth holding, because clients raise it. The UAE was placed on the FATF list of jurisdictions under increased monitoring on 4 March 2022 and removed on 23 February 2024. That removal changes the country-risk conversation; it does not change your own obligations, and it is not an argument for lighter due diligence on a specific file.
2. What actually slows a Dubai file down
Five frictions, in rough order of how much time they cost.
Document legalisation. This is the big one and it surprises people every time. The UAE is not party to the Hague Apostille Convention. A corporate document issued in the UAE and intended for use in Switzerland cannot simply be apostilled: it requires the full consular legalisation route, including attestation by the UAE Ministry of Foreign Affairs. That is days to weeks of elapsed time that has nothing to do with your analyst's workload, and it is largely invisible in your internal metrics because the file simply sits in "waiting for client".
Ownership chains across registries. A typical structure is a DIFC or ADGM entity above an operating company in a commercial free zone, sometimes with an offshore holding above both. Resolving the beneficial owner means reading three extracts in three formats from three authorities, in a chain that is not always documented in English throughout.
Source of wealth in sectors with thin paper trails. Real estate development, trading, and family conglomerates generate wealth that is entirely legitimate and poorly evidenced by the standards a Swiss reviewer expects. The absence of the document you are used to is not evidence of a problem — but establishing what actually happened takes conversation, not a form.
PEP density and regional exposure. Family and commercial proximity to government is structurally more common in the Gulf than in Western Europe. That produces screening hits that are true matches and require enhanced due diligence rather than dismissal, and it produces a large volume of near-matches that consume analyst time without producing anything.
The chase. Missing documents pursued by email over weeks. This is the friction nobody counts and everybody has.
3. What Swiss law does not let you compress
Say this to the client plainly, once, early. It converts an apparent delay into a visible standard.
You are supervised in Switzerland. Your obligations follow you, not the client's location or the practice of their local bank: identify the client, establish the beneficial owner down to the natural person, build a risk profile, screen against sanctions and PEP lists, and document the reasoning so that a supervisor can follow it years later. Where the relationship carries increased risk — and cross-border Gulf structures frequently do — enhanced due diligence applies, which means more evidence and more senior sign-off, not less.
From 1 October 2026, the Federal Act on the Transparency of Legal Entities and a revised AMLA tighten identification of the ultimate controlling natural person regardless of intervening layers, and lower the thresholds at which beneficial owners must be captured. For multi-layer Gulf structures specifically, that means more identified persons per file, not fewer. We cover that reform in Swiss AML in 2026.
Three things therefore stay exactly as long as they take: the judgement on source of wealth, the enhanced due diligence on a confirmed PEP, and the sign-off. A client who is told this at the outset generally accepts it. A client who discovers it in week three does not.
4. What you can compress, and by how much
Everything else. And "everything else" is most of the calendar.
Registry extraction. Pulling the extract, reading it, and pre-filling the file is machine work. Manual re-keying of a corporate extract is a task with no judgement in it, and it is one of the reasons corporate onboarding runs at CHF 350 to 1,000 per file where structures are involved.
Ownership-chain reconstruction. Rebuilding the chain across free-zone and mainland entities down to the natural persons is systematic, not discretionary. Doing it by hand in a slide is where the hours go.
Batch screening. Entity, beneficial owners, signatories and directors screened in one pass rather than one at a time, with hits landing in a structured queue instead of an inbox.
Document chase. Automated requests to the client with automatic processing of what comes back. This matters more for a Dubai file than a Swiss one, precisely because the legalisation round trip is long: if you are going to wait three weeks for a legalised document, you cannot also lose four days discovering you asked for the wrong one.
The order of magnitude is worth stating. Manual onboarding runs at roughly 15 to 21 days of elapsed time and CHF 300 to 800 per file for natural persons; automated processing brings the per-file cost to CHF 50 to 150 and moves analyst throughput from 15–25 files a month to 80–120. Applied to a Dubai file, the compressible portion is the majority of the calendar — which is exactly why the residual, incompressible part becomes defensible to the client.
5. Sequence the file around the long pole
One practical change is worth more than any tool. Identify, on day one, which documents will need consular legalisation, and request those first. Everything else — screening, registry work, chain reconstruction, risk profiling — runs in parallel while the legalisation round trip is under way.
The common failure is sequential: collect documents, then verify, then screen, then discover on day twelve that a legalised power of attorney is missing and start a three-week clock that could have been started on day one. The regulatory work did not take a month. The scheduling did.
6. A practical checklist
- Do you know, before requesting anything, which entities in the structure sit in DIFC, ADGM, a commercial free zone, or mainland — and therefore which registry each extract comes from?
- Have you identified the documents requiring consular legalisation and MOFA attestation, and requested them on day one?
- Does your screening cover the entity, the beneficial owners, the signatories and the directors in a single pass?
- Is your PEP handling set up to distinguish confirmed matches needing enhanced due diligence from near-matches needing disposal?
- Have you told the client, in writing and early, which parts of the timeline are fixed by Swiss supervision?
- After 1 October 2026, do you know which of your existing Gulf structures will require additional beneficial owners to be identified?
- Can you show, for any file, the source of every field and the justification of every alert closure?
7. Frequently asked questions
Why does onboarding a Dubai client take longer than onboarding him in Dubai?
Because your obligations are Swiss, not local, and because of one structural factor most people underestimate: the UAE is not party to the Hague Apostille Convention, so corporate documents intended for use in Switzerland require full consular legalisation and attestation by the UAE Ministry of Foreign Affairs. That round trip runs in elapsed weeks. Add ownership chains spanning several registries and the arithmetic explains most of the gap — but the majority of it is operational, not regulatory.
Does the UAE's removal from the FATF grey list reduce our due diligence?
No. The UAE was listed on 4 March 2022 and removed on 23 February 2024. The removal legitimately changes the country-risk element of your assessment, but it does not alter your obligations on a specific relationship, and it is not a basis for reducing enhanced due diligence where other risk factors are present.
Is a DIFC company the same as a Dubai mainland company for KYC purposes?
No. DIFC and ADGM are common-law financial free zones with their own regulators — the DFSA and FSRA — and their own registries. Commercial free zones such as JAFZA or DMCC are different again, each with its own licensing authority and extract format. Mainland companies fall under the emirate's economic department. A single group frequently spans several, which is why "get the Dubai extract" is rarely a single action.
Which UAE rule governs beneficial ownership?
Beneficial-owner procedures are set federally by Cabinet Decision 109 of 2023, which replaced the earlier 2020 decision and governs the register maintained by licensing authorities. Documentation still citing the 2020 instrument is out of date — a useful signal about how current a counterparty's compliance materials are.
What can we realistically promise a Gulf client on timing?
Separate the two halves. The compressible half — registry extraction, chain reconstruction, batch screening, document chasing — can move from weeks to days with automation. The incompressible half — source-of-wealth judgement, enhanced due diligence on a confirmed PEP, sign-off — takes as long as it takes. Clients accept the second when they are told about it in week one, and resent it when they discover it in week three.
What changes for Gulf structures on 1 October 2026?
The Federal Act on the Transparency of Legal Entities and a revised AMLA tighten identification of the ultimate controlling natural person across intervening layers and lower capture thresholds. Multi-layer structures of the kind common in the Gulf are the most affected: expect more identified persons per file, and therefore more screening and more ongoing monitoring.
8. Where Wecan fits
Wecan Comply attacks the compressible half. Registry extracts are read and mapped rather than re-keyed; the ownership chain is rebuilt across layers down to the natural persons; the entity and every related party are screened in one pass through the provider you already use; and document requests go out and come back automatically, which matters most precisely when a legalisation round trip is already consuming the calendar.
What it does not do is shorten the judgement. Source of wealth on a family conglomerate, enhanced due diligence on a confirmed PEP, and the sign-off remain human work, and should. The purpose of removing the other three weeks is to leave your analysts the time to do that part properly — and to let you tell the client, credibly, which part of the wait is the standard rather than the queue.
