Your 2026 RAK ICC Compliance Checklist: UBO, AML, CRS & Corporate Tax

RAK ICC compliance looks nothing like it did when the registry ran its agent workshops in 2018 and 2019. Back then, beneficial ownership was a consultation paper, anti-money-laundering duties sat under laws that have since been replaced, corporate tax did not exist, and the main worry was a renewal fee rising to AED 2,500. In 2026, a RAK International Corporate Centre company sits inside a full federal and international compliance perimeter — UBO registers, AML files, sanctions screening, CRS data exchange and FTA corporate tax registration. This guide maps every obligation a RAK ICC company carries today, what each one costs to ignore, and how the UAE company incorporation and compliance team at Fastlane keeps offshore structures clean, bank-ready and penalty-free.

What does RAK ICC compliance involve in 2026?

A RAK ICC company answers to three layers of rules at once. The first is the Registrar’s own framework — the RAK ICC Business Companies Regulations and the RAK ICC compliance duties written into the Registered Agent Regulations 2018 — which govern renewal, filings and the agent relationship. The second is UAE federal law: beneficial ownership procedures, the anti-money-laundering regime, targeted financial sanctions and, since 2023 filing periods began, corporate tax. The third is international data exchange, principally the Common Reporting Standard, which moves your account information between tax authorities automatically.

Owners never deal with the Registrar directly — every filing goes through a licensed Registered Agent — but the legal responsibility for keeping the company compliant sits with the company itself. The table below shows the full 2026 stack, who acts on each item, and how often.

Miss any layer and the failure surfaces somewhere expensive: a stalled renewal, a rejected filing, a frozen bank onboarding or an FTA penalty. The rest of this guide takes each obligation in turn.

What changed since the old registry workshops?

Registry workshop slides from 2018–19 still circulate among agents and consultants, and almost every legal reference in them has been superseded. If your compliance picture was formed in that era — or your adviser’s was — this is what has moved.

What are the beneficial ownership (UBO) rules for RAK ICC companies?

The consultation the registry trailed in its workshops became law, and the current instrument is Cabinet Decision No. 109 of 2023 on regulating beneficial owner procedures. Every RAK ICC company must identify its ultimate beneficial owners — each natural person who owns or controls, directly or indirectly, 25% or more of the shares or voting rights, or who exercises control by other means. Where no individual meets the test, the natural person who exercises senior management control is recorded instead.

The company must maintain a register of beneficial owners alongside its register of shareholders (and disclose any nominee director arrangements), file that information through its Registered Agent, and keep it current — changes must be notified within 15 days. In practice the agent will ask for passports, recent proof-of-address documents and, for corporate shareholders, a structure chart tracing ownership up to the natural persons at the top. Administrative penalties apply for missing, late or inaccurate UBO information, and repeat breaches escalate.

Two practical points matter for offshore owners. First, the 25% UBO test is the same lens your bank uses, so a clean, current register shortens every KYC review. Second, any change in shareholders or control is a registry filing as well as a UBO update — the mechanics are covered in our guide to RAK ICC amendments for shareholders, directors and company details, and both filings should move together.

What AML and KYC checks will your registered agent run?

Registered Agents are gatekeepers under the UAE’s anti-money-laundering regime — Federal Decree-Law No. 20 of 2018 (as amended) and its executive regulation, Cabinet Decision No. 10 of 2019. The registry’s own workshops set out what a compliant agent must run: a system of internal policies and controls, an appointed compliance officer working independently, staff training, know-your-customer procedures and an independent audit function. That architecture is now supervised federal law, not registry advice.

For you as an owner, the visible part is customer due diligence: identifying and verifying every UBO, understanding the purpose of the structure, and monitoring it on an ongoing basis. Agents may rely on third parties for parts of CDD, but responsibility stays with the firm — so expect direct questions about source of funds and source of wealth, and expect them again whenever risk indicators change. Higher-risk files attract enhanced due diligence rather than refusal, provided the answers hold up.

Three statutory duties shape how your file is handled. Agents must report suspicious transactions to the UAE Financial Intelligence Unit through the goAML platform; failing to report is itself an offence. Tipping off — telling a client that a report has been made or an investigation is under way — is a criminal offence, so a professional agent will simply never discuss it. And records for each company must be kept for at least five years after the agent ceases to act or the company is wound up, struck off or liquidated — your compliance trail outlives the company itself.

Who counts as a politically exposed person — and why does it matter?

A politically exposed person (PEP) is an individual who is or has been entrusted with a prominent public function — heads of state or government, senior politicians and officials, senior judicial or military figures, senior executives of state-owned enterprises, important party officials — or a director or board member of an international organisation. The net deliberately extends to family members and close associates, and covers foreign, domestic and international-organisation PEPs alike.

PEP status is not a prohibition; it is a trigger for enhanced due diligence. Before an agent or bank takes on a PEP-linked structure, senior management must approve the relationship, reasonable measures must establish the source of wealth and source of funds, and the file moves to ongoing enhanced monitoring. Identification draws on kept-current CDD information, commercial databases, internet and media searches, government PEP lists and customer self-declarations — so an undeclared PEP connection is usually found anyway, just later and with more suspicion.

The red flags compliance teams are trained on have not changed: reluctance or vagueness about source of wealth or funds, information inconsistent with public records, layers of corporate vehicles with no commercial logic, unusual curiosity about the firm’s AML or PEP policy, inability to explain the purpose of the business, or a principal from a country that restricts its citizens holding foreign assets. If a PEP sits anywhere in your ownership chain, declare it at onboarding with the evidence ready — it is the difference between enhanced review and outright refusal.

How do CRS and the disclosure rules reach a RAK ICC company?

The Common Reporting Standard has been live for the UAE since 2018: financial institutions identify the tax residence of account holders and controlling persons, and that information is exchanged automatically between more than 100 participating jurisdictions. Your bank does the reporting — your job is the self-certification completed at account opening and refreshed whenever tax residence changes. A false or stale self-certification exposes you to penalties and your account to closure.

For a typical RAK ICC holding company the mechanics are specific: a company that mainly holds investments and earns passive income is a Passive NFE (non-financial entity), which means the bank looks through it and reports its controlling persons — broadly the same 25% test as the UBO rules — to the tax authority of each person’s residence. Owning through an offshore company does not keep an account out of CRS; it usually adds a look-through layer.

The perimeter keeps widening. Under the OECD’s Model Mandatory Disclosure Rules, promoters and service providers must disclose CRS-avoidance arrangements and opaque offshore structures — nominee shareholders with undisclosed nominators, indirect control beyond formal ownership, or access to assets without appearing as beneficial owner. There is no good-faith carve-out, the duty can bite on the initial conversation even if no structure is ever built, and promoters of schemes worth over US$1 million face a look-back to 2014. Tax authorities treat CRS avoidance itself as an indicator of money laundering, and reporting frameworks are now extending to crypto-assets. The honest route to lower taxation is genuine relocation of substance and residence, evidenced by a UAE Tax Residency Certificate — not products marketed as “CRS-proof”, which are themselves a reportable red flag.

What sanctions screening applies to RAK ICC structures?

The old approach of confirming that business avoids a named list of countries is gone. Under Cabinet Decision No. 74 of 2020, the UAE applies targeted financial sanctions: agents, banks and other gatekeepers screen every customer, UBO and connected party continuously against the UN Security Council Consolidated List and the UAE Local Terrorist List, freeze assets of listed persons without delay, refuse dealings and report to the authorities. Screening is name-and-entity based and runs for the life of the relationship, not once at onboarding.

For owners, two consequences follow. A potential name match — even a false positive against a common name — pauses filings and payments until it is resolved with documentary evidence, so complete and consistent identity data across your registry, agent and bank files genuinely matters. And exposure to sanctioned persons, vessels or trans-shipment routes anywhere in a transaction chain is a problem regardless of where your company is incorporated; an offshore certificate is not insulation.

Context helps here: the UAE’s exit from the FATF grey list in February 2024 validated a much tougher enforcement environment — and banks kept the enhanced controls they built to get there. Expect more screening and better-documented files as the norm, not a relaxation.

What are your registered agent’s duties — and the fines if they fail?

Every RAK ICC company must act through a licensed Registered Agent at all times — the agent is your only channel to the Registrar, and the Registered Agent Regulations 2018 bind that agent to maintain records, respond to the Registrar and file complete, accurate information. The registry’s warning to agents is blunt: a person who fails to provide required information, or provides information that is “incomplete, inaccurate or misleading”, commits a contravention punishable by a fine of up to level 5 — AED 20,000 under the fee schedule, alongside the separate fines in the Companies Regulations.

Enforcement is active, not theoretical. The Registrar validates agent compliance — including AML/CFT and sanctions policies — and validation can take the form of an independently audited declaration or on-site inspection by registry staff or an authorised body. An agent under sanction or remediation slows every client filing it touches.

Choose and judge your agent accordingly. The registry’s own five-pillar test for an AML programme — internal policies and controls, a compliance officer, employee training, KYC procedures and an independent audit function — doubles as a due-diligence checklist for owners. Add two practical tests: how quickly the agent turns registry queries around, and how accurately it files, because data-entry errors on the portal are the single biggest cause of rejected service requests and wrongly printed extracts. If your current agent is slow, silent or sloppy, the regulations let you move — and a change of agent is itself a routine filing.

Does a RAK ICC company pay UAE corporate tax?

Yes — scope first, rate second. A RAK ICC company is a UAE-incorporated juridical person, which makes it a taxable person under Federal Decree-Law No. 47 of 2022 regardless of its offshore label. That means mandatory FTA registration and an annual corporate tax return within nine months of each financial year end. The headline rates are 0% on taxable income up to AED 375,000 and 9% above it, and many pure holding companies end up paying little or nothing thanks to exemptions such as the participation regime for qualifying dividends and capital gains — but the registration and filing duties apply whether or not any tax is due, and an audited closure file is expected if the company is ever wound up (see our RAK ICC liquidation audit report guide).

Here is what “we’ll deal with it later” actually costs. Take a RAK ICC holding company that ignores corporate tax for its first year and starts six months after its filing deadline has passed:

Registration is a one-time fix and filing is an annual rhythm — our UAE corporate tax team handles both, including the zero-return years where the main deliverable is simply staying penalty-free.

How does the RAK ICC + RAKEZ “Premium Product” build substance?

The registry’s most durable idea from the workshop era is the Premium Product: the RAK ICC company opens a subsidiary in RAKEZ, the Ras Al Khaimah Economic Zone. The offshore vehicle stays the clean holding layer; the free zone subsidiary takes a commercial licence, can lease flexi-desk or standard office facilities, hires staff, and its general manager — typically the RAK ICC owner — becomes eligible for UAE residence visas, with family sponsorship. Banks receive an introduction letter from the zone and treat the applicant as an operating RAKEZ business rather than a bare offshore company, which measurably eases account opening at home and abroad.

The 2026 tax framing is where old marketing needs correcting. A RAKEZ subsidiary is a free zone person under corporate tax law — not tax-exempt. The 0% rate applies only to a Qualifying Free Zone Person on qualifying income, under the strict conditions of Ministerial Decision 229/2025: adequate substance in the zone, audited IFRS financial statements, and non-qualifying revenue within the de minimis limit (the lower of AED 5 million or 5% of total revenue). Fall outside the conditions and the standard 9% applies above AED 375,000. Treaty benefits under the UAE’s 100-plus double taxation agreements likewise follow real management and residence, evidenced by a Tax Residency Certificate — the structure enables them; substance earns them.

The holding-company logic itself is sound and unchanged: separated legal liability and reputational risk, consolidated accounts, group governance, stand-alone treasury, intellectual-property holding and the flexibility to add entities in whichever zone regulates an activity best. The workshop checklist for establishing the RAKEZ subsidiary is summarised below — treat it as indicative and confirm the live requirements before applying, as zone checklists and fees change.

One operating consequence owners underestimate: the subsidiary is a real licensed business with real books. Bundling its bookkeeping into RAKEZ monthly accounting with Fastlane keeps the audited-financials condition for QFZP status — and the bank’s annual review — permanently satisfied.

How do you keep RAK ICC compliance on track year-round?

Banking remains the choke point where every weakness surfaces — the registry’s workshops closed on exactly that panel discussion, and it is still true. In 2026 a bank looks for a coherent story: a transparent UBO chain matching the registry file, a current CDD pack, corporate tax registration in place, activity consistent with the declared purpose, and ideally visible substance — whether a RAKEZ layer or genuine management in the UAE. The contrast between a file that sails and a file that stalls is stark:

The whole stack compresses into one annual routine:

1. Diarise renewal 60 days ahead — instruct your agent early, confirm the live Registrar fee, and never let the anniversary become the deadline.
2. Review the UBO register every January and after any change — the 15-day update window is short, and shareholder changes trigger registry amendments and UBO filings together.
3. Refresh the CDD pack — passports in date, address proofs under three months old, structure chart and source-of-wealth note current.
4. Reconfirm CRS self-certifications — any change in a controlling person’s tax residence goes to every bank holding an account.
5. Register and file corporate tax — registration once, then the return within nine months of year end, zero-tax years included.
6. Keep five-year archives and answer fast — retain records for at least five years after any relationship or company ends, and treat agent and bank queries as same-week work.

Run that loop and RAK ICC compliance stops being a series of emergencies. Fastlane operates it as a single service — registry filings through to FTA returns — alongside full RAK ICC compliance and company setup support for new structures. The short glossary below decodes the terms this guide leans on.