Banking Regulations in JAFZA: Complete Guide
Intra-group treasury changes character once money moves for people outside the group, or the company earns a margin for moving it.
The Jebel Ali Free Zone issues trade licences and does not supervise financial services, so the real question is which regulator does. This guide sets out the three layers that apply to a JAFZA company at once, explains the point at which ordinary group treasury activity becomes a regulated one, describes what banks ask at onboarding and the drift that leads to account closure, and covers the anti-money laundering duties carried by designated non-financial businesses along with corporate tax, VAT and data protection.
A company in the Jebel Ali Free Zone that wants to open a corporate account, collect customer payments, lend, arrange finance or hold money for someone else usually starts with the wrong question. The question is not what JAFZA permits. It is which regulator supervises the activity, because JAFZA is a trading, logistics and industrial free zone, not a financial free zone. Its authority issues trade licences; it does not license or supervise banking and financial services the way the DIFC and ADGM regulators do.
That distinction decides most of what follows: which licence you need, which authority can inspect you, which court or tribunal hears a dispute, and which records you must be able to produce on demand.
Who regulates what
Three layers apply to a JAFZA company at the same time.
- The free zone authority. It registers the company under the zone's own companies rules rather than the federal Commercial Companies Law (Federal Decree-Law No. 32 of 2021), issues the licence, and approves the activities listed on it.
- The federal financial regulators. Banking, finance, payment services, money exchange and insurance activities are licensed and supervised by the Central Bank of the UAE. Securities, investment and fund activity fall to the Securities and Commodities Authority. A free zone address does not remove either requirement.
- Federal law of general application. Anti-money laundering duties, corporate tax, VAT, data protection and the Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) apply to the company's dealings whether or not it holds any financial licence.
A licence for general trading, logistics or manufacturing is not permission to carry on a financial activity. If the business model involves holding client funds, collecting payments on behalf of third parties, lending, factoring, arranging credit, running an escrow arrangement or dealing in virtual assets, establish whether that is a licensed activity before the first transaction rather than after a bank raises it.
What the licence covers, and what it does not
Treasury activity inside a group — intercompany loans, cash pooling, paying group suppliers — is normally an ordinary incident of trading. It changes character once money moves for people outside the group, once the company earns a margin or fee for moving it, or once customers are told their funds are being held. Those are the features regulators look at, and they look at what actually happens in the accounts rather than at the wording on the licence.
Where an activity turns out to be regulated, the options are narrow: obtain the licence, restructure so the regulated element sits with a licensed provider, or stop.
Opening and keeping a bank account
Banks apply their own onboarding standards on top of the law. Expect requests for the ownership chain up to natural persons, identification for each beneficial owner, the source of the founding capital, accounts, sample contracts and invoices, expected turnover and counterparty countries, and evidence of real operations in the UAE such as premises and staff.
Most account closures are not caused by wrongdoing. They are caused by drift: activity that no longer matches the licensed activities, third-party transfers nobody can explain, expired documents on file, or a shareholder change the bank learns about from a public register instead of from the client. Keep the licence, the ownership record and the traffic through the account describing the same business.
Anti-money laundering duties
The UAE anti-money laundering and counter-terrorist financing regime does not stop at licensed financial institutions. Designated non-financial businesses and professions — dealers in precious metals and stones, real estate brokers and agents, corporate service providers, auditors and independent legal professionals in certain transactions — carry the full set of obligations, and many JAFZA companies fall into those categories without realising it.
The obligations are practical ones: a written business risk assessment, customer due diligence proportionate to that risk, identification of beneficial owners, screening against the applicable sanctions lists, an appointed compliance officer, staff training, and retention of records for the period the law prescribes. Suspicion of money laundering or terrorist financing is reported to the UAE Financial Intelligence Unit through the goAML platform, and the duty to report is not satisfied by declining the transaction quietly. Failures in this area are among the most heavily penalised in the country.
Tax: a free zone is not a tax-free zone
Corporate tax under Federal Decree-Law No. 47 of 2022 applies for financial years starting on or after 1 June 2023, at 0% on taxable income up to AED 375,000 and 9% above that. A JAFZA company sits inside that law and has registration and filing duties. Whether any free zone relief is available to a particular company depends on rules that must be tested against its actual income streams and its own operations; it is not conferred by the address on the licence, and marketing material that still says "tax-free" should be treated as out of date.
VAT applies at 5% under Federal Decree-Law No. 8 of 2017 as amended by Federal Decree-Law No. 18 of 2022. Only certain movements of goods connected with designated zones are treated differently, and that treatment is narrower than most businesses assume; services rarely benefit from it.
Economic substance filings are a common source of wasted effort. The Economic Substance Regulations were cancelled for financial years ending after 31 December 2022 by Cabinet Decision No. 98 of 2024. Obligations survive only for the financial years FY2019 to FY2022, which still matters where an assessment or penalty from those years remains open.
Client data and confidentiality
A JAFZA company is subject to the federal Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). The DIFC and ADGM run their own data protection regimes; the free zones outside them do not. In practice this means identifying a lawful basis for processing customer and employee data, limiting use to the purpose it was collected for, controlling onward transfers, imposing written terms on service providers who process data on your behalf, and having a plan for responding to a breach and to individual requests. Financial records attract confidentiality duties as well, so set out the permitted disclosures to regulators, banks and auditors in your contracts.
When something goes wrong
A JAFZA company does not sit in a common-law court by default. Contractual disputes go to the Dubai courts unless the parties have agreed otherwise in writing, and both arbitration and an opt-in to the DIFC Courts are available if the clause is drafted properly. Arbitration is governed by Federal Law No. 6 of 2018 as amended in 2023. Legacy clauses need attention: the DIFC-LCIA was abolished by Dubai Decree No. 34 of 2021 and its caseload moved to DIAC, so contracts still naming it should be reviewed rather than left to be argued about later. Careful drafting at this stage is what makes financial dispute resolution a manageable process instead of a preliminary fight about forum.
A short compliance check
- Do the activities on the licence match what the bank account actually shows?
- Is any part of the business a regulated financial activity requiring a federal licence?
- Is the beneficial ownership record current, and does the bank hold the same version?
- Is there a written risk assessment, a named compliance officer and a working screening process?
- Is the company registered for corporate tax, and is its VAT position documented rather than assumed?
- Does the dispute resolution clause name a forum that still exists?
Conclusion
Banking and financial compliance in JAFZA is mostly a matter of matching three things to each other: the licensed activity, the money that moves, and the paperwork that explains it. Where those three agree, inspections and bank reviews are routine. Where they diverge, the consequences arrive as frozen accounts, penalties and licence conditions rather than as correspondence.
For advice on a specific licence, account or compliance question in JAFZA, speak to the Nour Attorneys team.
Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.
Nour Attorneys Team
Related Resources
Explore more of our insights on related topics:
- Banking Regulations Compliance in the UAE
- Fintech Legal Frameworks for Dubai Businesses
- Anti-Money Laundering Compliance for UAE Investors
- Investment Advisory Strategies for Multinational Entities
