AML Checks for Dormant Business Accounts Reactivated in the UAE

A business account that remains inactive for months or years and then suddenly begins processing transactions may require closer review. For UAE businesses and compliance teams, reactivation after a long period of inactivity can raise questions about the customer’s current business activities, the purpose of transactions, and whether the account’s activity remains consistent with its known profile.

Dormant account reactivation does not automatically indicate money laundering. However, when activity changes significantly or cannot be reasonably explained, businesses should investigate the circumstances, document their findings, and escalate concerns in line with their AML procedures.

This guide explains how to review dormant business accounts that become active again, identify potential warning signs, and maintain appropriate AML records.

What Is a Dormant Business Account?

A dormant business account is an account that has experienced little or no activity for an extended period. The exact definition and period of inactivity may depend on the financial institution’s policies, the account type, and applicable requirements.

Examples may include:

• A company account that has not processed transactions for several months.
• A business that temporarily stopped trading and later resumed operations.
• An account belonging to a company undergoing restructuring or ownership changes.
• A business account that suddenly starts receiving or sending large payments after a prolonged inactive period.

Inactivity alone is not proof of suspicious activity. Seasonal businesses, temporarily closed companies, and businesses waiting for new contracts may have legitimate reasons for limited account activity.

The key consideration is whether the account’s renewed activity is consistent with the customer’s expected business profile and whether the business can provide reasonable explanations and supporting documentation.

Why Does Dormant Account Reactivation Require AML Review?

When an account becomes active again, its previous transaction history may no longer reflect the customer’s current circumstances. The business may have changed its ownership, management, suppliers, customers, or commercial activities during the inactive period.

A review can help compliance teams determine whether the customer’s information remains accurate and whether the new activity presents any additional risks.

Important considerations include:

• Changes in business activity: The company may be conducting transactions in a different industry or with different counterparties.
• Unusual transaction values: Payments may be significantly larger than those previously associated with the account.
• Unexpected counterparties: Funds may come from or go to parties that have no clear connection to the stated business purpose.
• Outdated customer information: Business licences, ownership details, contact information, or other records may require review.
• Unexplained changes in transaction patterns: The account may begin processing frequent transfers or international payments that differ from its previous activity.

A risk-based approach helps businesses decide whether routine verification is sufficient or whether enhanced review is appropriate.

Warning Signs to Look for When a Dormant Account Becomes Active

No single indicator proves that money laundering has occurred. Compliance teams should consider the full circumstances, the customer’s profile, and the available evidence.

1. Sudden High-Value Transactions

An account that previously showed little activity may suddenly receive or transfer substantial amounts of money. The transactions may be legitimate, such as proceeds from a new contract or the sale of a business asset.

However, if the amounts cannot be reconciled with the company’s business activities, further review may be necessary.

2. Rapid Movement of Funds

A dormant account may begin receiving funds and transferring them to other accounts shortly afterwards. Repeated transfers with no clear commercial purpose can warrant investigation, particularly when the account appears to act only as an intermediary.

3. Transactions Inconsistent With the Business Profile

A company registered for one type of activity may begin processing payments associated with unrelated industries or unexplained international trade. Compliance teams should establish whether the activity reflects a legitimate change in business operations.

4. Unexplained Third-Party Payments

Payments from unrelated individuals or businesses may require closer scrutiny if their connection to the account holder is unclear. The review should establish who the counterparties are, why they are involved, and whether the transactions have a documented business purpose.

5. Recent Changes in Ownership or Management

A dormant company may resume operations after a change in directors, shareholders, beneficial ownership, or authorised representatives. These changes do not automatically indicate risk, but customer records should be reviewed and updated where required.

6. Missing or Inconsistent Supporting Documents

The customer may be unable to explain the reason for reactivation or provide documents supporting the transactions. Inconsistent invoices, unclear contracts, or explanations that do not match transaction records may require additional verification.

How to Conduct an AML Review of a Reactivated Business Account

A structured review helps compliance teams make consistent, evidence-based decisions.

Step 1: Review the Account’s Previous Activity

Examine the account’s historical transactions and compare them with the new activity. Consider the length of the inactive period, the previous transaction frequency, typical amounts, counterparties, and known business purpose.

The objective is to establish a meaningful baseline rather than treating every new transaction as suspicious.

Step 2: Verify the Customer’s Current Business Profile

Confirm whether the company’s information remains accurate. Depending on the customer and applicable requirements, this may involve reviewing its business licence, ownership structure, beneficial owners, authorised representatives, contact details, and stated business activities.

If material changes have occurred, ensure the relevant customer records are updated through the appropriate process.

Step 3: Understand the Reason for Reactivation

Establish why the account has become active again. Possible explanations include the launch of a new contract, resumption of trading, receipt of investment, or completion of a business restructuring.

The explanation should be assessed against available evidence. Depending on the circumstances, supporting material may include contracts, invoices, purchase orders, financial statements, or other relevant business records.

Step 4: Analyse the New Transaction Pattern

Compare recent transactions with the customer’s historical profile and stated purpose. Review transaction amounts, frequency, counterparties, destinations, and the timing of incoming and outgoing funds.

Where unusual activity is identified, assess whether it has a reasonable explanation. Avoid relying on transaction value alone; the surrounding circumstances may be equally important.

Step 5: Assess Whether Additional Due Diligence Is Needed

If the review identifies unresolved concerns, consider whether additional customer information or enhanced due diligence is appropriate under the business’s AML framework and applicable UAE requirements.

The extent of additional checks should be proportionate to the identified risk. Record why further verification was requested and how the information obtained affected the assessment.

Step 6: Document Findings and Escalate Concerns

Maintain a clear record of the review, including the reason for reactivation, the transactions examined, the information requested, the explanations received, and the final decision.

If activity creates a reasonable suspicion of money laundering or another relevant offence, escalate the matter to the designated compliance officer or MLRO in accordance with internal procedures. The responsible person should assess whether reporting through the appropriate official channel is required.

Do not assume that every unusual transaction requires an STR, and do not delay an appropriate escalation merely because the customer has provided a partial explanation.

What Records Should Businesses Maintain?

Good documentation allows a business to demonstrate how it assessed the account and why it reached a particular decision.

Relevant records may include:

• The date and reason the account became active again.
• Previous and current transaction summaries.
• Updated customer and beneficial ownership information.
• Supporting documents obtained during the review.
• Explanations received from the customer.
• Internal alerts, investigation notes, and escalation records.
• The reviewer’s findings and the rationale for the final decision.
• Any reporting decision and associated records, handled in accordance with confidentiality requirements.

Records should be maintained securely and retained for the applicable period under UAE law and the organisation’s recordkeeping procedures.

How Does Dormant Account Review Relate to goAML Reporting in the UAE?

Reviewing a dormant business account is part of an organisation’s broader AML control process. Where the review identifies potentially suspicious activity, the compliance team should assess the facts and determine the appropriate next steps under the applicable UAE reporting framework.

The goAML platform is used by relevant reporting entities to submit reports to the competent authority. However, the discovery of unusual account activity does not automatically mean that an STR must be filed.

The decision should be based on the circumstances, the information available, and the applicable reporting obligations. If a report is required, the relevant information should be accurate, supported by available evidence, and submitted through the appropriate procedure.

Businesses should also ensure that staff follow confidentiality requirements and avoid tipping off customers where this is prohibited.

Common Mistakes to Avoid

When reviewing reactivated dormant accounts, businesses should avoid these mistakes:

• Treating inactivity as proof of wrongdoing: A dormant account can have a legitimate commercial explanation.
• Reviewing only transaction values: Context, counterparties, timing, and business purpose also matter.
• Using outdated customer information: Changes in ownership, management, or business activities may affect the risk assessment.
• Accepting explanations without verification: Customer explanations should be assessed against relevant supporting evidence.
• Failing to document decisions: An unexplained decision to close an alert or take no further action can create audit and governance concerns.
• Delaying escalation: Potentially suspicious activity should be handled according to established escalation procedures.

Frequently Asked Questions

Is a dormant business account automatically considered high risk?

No. Inactivity alone does not establish that a customer is high risk. The business should assess the account’s renewed activity, customer profile, transaction purpose, and any other relevant risk indicators.

What should a company do when a dormant account suddenly receives a large payment?

The company should assess whether the payment is consistent with the customer’s business profile and determine its purpose. Depending on the circumstances, it may need to verify the counterparty, obtain supporting documents, and escalate unresolved concerns.

Should every reactivated dormant account trigger an STR?

No. Reactivation is not, by itself, proof of suspicious activity. The decision to file a report should follow an assessment of the facts and applicable reporting requirements.

Can a business request documents from a customer during the review?

Yes, where appropriate under its procedures and applicable requirements. The documents requested should be relevant to understanding the customer’s current business activities and the transactions under review.

How can goAML compliance support a dormant account review?

An effective AML framework helps businesses identify unusual activity, maintain customer records, document investigations, and escalate potential concerns. Where reporting is required, the responsible reporting entity should follow the applicable official process.

Conclusion

Dormant business accounts that suddenly resume activity deserve a proportionate, risk-based review. UAE businesses should compare new transactions with historical behaviour, confirm that customer information remains accurate, understand the reason for reactivation, and investigate activity that lacks a clear commercial explanation.

A consistent review process helps organisations distinguish legitimate business changes from activity that may require further investigation. By maintaining reliable records, applying appropriate due diligence, and escalating concerns promptly, businesses can strengthen their AML controls and support accurate goAML reporting when required.