Calder & Vance International Sanctions & Compliance Counsel

Licensing & Authorizations · UAE

Frozen-account management under UAE: step by step

A corporate treasury team at a trading house receives a notification from its UAE correspondent bank: an account has been frozen pending sanctions review. The balance is material. Payments due to suppliers are already queued. The compliance officer has forty-eight hours before the situation escalates to the board. What does the law require, and what can the account holder actually do?

Under the UAE autonomous sanctions regime, administered by the Executive Office for Control and Non-Proliferation (EOCN, the central coordinating authority for UAE sanctions implementation), a frozen account must be managed through a defined process: identification, notification to the competent authority, record-keeping, and – where applicable – a licence application to access or use the frozen funds. The procedure is not optional; failure to follow it correctly can convert a manageable compliance event into an enforcement matter.

This guide walks through each stage of that process, highlights where the UAE regime converges with and diverges from the OFAC, OFSI, and UN positions, and identifies the risk flags that most frequently catch cross-border businesses off guard.

Step 1: Identifying the legal basis for the freeze

A frozen account under the UAE regime is one where the account holder, a beneficial owner, or a signatory has been designated under a UN Security Council resolution implemented by the UAE or under the UAE's autonomous list – and that designating instrument is the first document to retrieve.

The UAE implements UN Security Council Consolidated List designations as a matter of treaty obligation and domestic law. Separately, it maintains its own autonomous sanctions list, administered by the EOCN. A freeze may arise from either source, and the applicable procedure can differ depending on which list is engaged. Confusing the two at the outset delays every subsequent step.

In our cross-border practice, the most frequent error at this stage is treating a bank's account freeze as automatically synonymous with a formal sanctions designation. Banks sometimes freeze accounts on suspicion or as a precautionary measure. Before initiating any licensing process, confirm whether the freeze is a legally mandated sanctions hold or a bank's internal compliance decision. That distinction controls which authority you engage and on what timeline.

Practitioners also encounter situations where a counterparty is not itself listed but is owned or controlled by a listed person. The UAE, following the UN model and aligned with broader international practice, applies an ownership and control test (the principle that an entity majority-owned or effectively controlled by a designated person is treated as itself subject to the same restrictions). Verify the full beneficial-ownership chain before accepting that the freeze is, or is not, legally required.

Step 2: Notifying the competent authority – who, how, and when?

Once a freeze is confirmed as legally mandated, the account-holding institution and, where they are distinct, the account holder or their counsel must notify the EOCN. The notification is not merely good practice; it is a legal obligation under the UAE's domestic sanctions framework.

The notification should document: the identity and legal status of the account holder; the nature and estimated value of the frozen assets; the legal basis for the freeze (the relevant UN resolution or UAE autonomous-list entry); and the date on which the freeze was identified or applied. Precision here matters. Vague or incomplete notifications invite follow-up queries that consume time the account holder may not have.

Timelines for notification are not always published in explicit terms. The general expectation across comparable regimes is that notification occurs promptly – measured in days, not weeks. We regularly advise clients to treat the notification obligation as arising the moment the legal basis for a freeze is confirmed, not when internal processes are complete.

One cross-border point is worth flagging immediately. Where the account holder is a multinational with footprint in the United States or the United Kingdom, the OFAC reporting obligation and the OFSI report (a statutory duty to disclose knowledge or suspicion of a designated person holding funds) may run in parallel with the UAE notification. These are separate obligations to separate authorities. Meeting the UAE requirement does not discharge the OFAC or OFSI duty, and vice versa. Compliance counsel handling UAE-situated assets for a US-connected entity must maintain a parallel OFAC reporting track from day one.

Step 3: Record-keeping obligations during the freeze

From the date a freeze is applied, the account-holding institution is required to maintain complete and accurate records of the frozen assets, all transactions attempted or blocked in relation to those assets, and all communications with the competent authority. These records must be retained for a defined period; across comparable regimes, including those of the UK and EU, a five-year record-keeping standard is the benchmark, and the UAE domestic framework aligns with this in practice.

What does adequate record-keeping look like in an active freeze? It includes dated logs of every payment instruction that was blocked, every inquiry from the account holder, every piece of correspondence with the EOCN or the account-holding bank, and any valuation of the frozen balance. If the matter ultimately proceeds to a licence application or a delisting petition, these records form the evidentiary backbone of the submission.

Gaps in the record are a recurring risk flag. In a recent matter, a financial institution advised a corporate client on a UAE-situated freeze but failed to maintain contemporaneous logs of blocked payment instructions. When the client later applied for a humanitarian licensing exception, the absence of records delayed the submission by several weeks and complicated the authority's assessment of the amounts involved. Start the record from day one – this point is not procedural housekeeping.

Step 4: Assessing the licensing route – when can frozen funds be accessed?

A designated account holder or an entity whose assets are frozen is not necessarily without any recourse to those funds. The UAE regime, consistent with UN Security Council practice, provides for licensing exceptions – authorisations that permit limited use of frozen assets for defined purposes, most commonly: basic living expenses of a natural person, legal fees, and humanitarian needs.

A specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) is the mechanism through which access is sought. The application must be directed to the EOCN, set out the precise purpose of the requested access, demonstrate the need with supporting documentation, and confirm that the funds will not flow to a purpose inconsistent with the freeze.

What is the realistic scope of a UAE licence for a frozen corporate account? Corporate accounts present a narrower licensing window than individual accounts. The humanitarian and living-expense carve-outs are primarily calibrated to natural persons. For corporate entities, the most viable licensing route is generally one directed at legal fees or at the preservation of the asset itself – for example, maintenance of a property or fulfilment of an obligation that would otherwise cause the frozen asset to depreciate. The EOCN has discretion; a well-prepared application framing the request within those parameters materially improves the prospect of a favourable outcome, though no outcome can be assured.

Is the UN Ombudsperson route available? For accounts frozen under ISIL/Al-Qaida designations, the UN Ombudsperson mechanism offers an independent de-listing channel that runs alongside, and distinct from, the UAE domestic licensing process. For accounts frozen under other UN committee designations or under the UAE autonomous list, the Ombudsperson route does not apply; the applicant must engage the UAE process and, if the designation itself is contested, the UN Focal Point mechanism.

Comparing the UAE licensing route with OFAC and OFSI practice is instructive. OFAC processes specific licence applications through its own portal; the statutory review window is defined but practice indicates significant variation in processing time by programme. OFSI operates a comparable specific licence regime in the United Kingdom, with a statutory obligation on OFSI to consider applications expeditiously. The UAE process is less publicly documented in terms of processing timelines. In our experience, applicants should plan for a review period of several weeks on a complete, well-supported application, and longer where the EOCN seeks additional information. Submit complete; follow up promptly; never resubmit without first understanding why the initial submission stalled.

Step 5: Cross-border complications – OFAC, OFSI, and the UN in the same matter

A UAE-situated frozen account rarely exists in isolation from other regimes. The account holder may be subject to parallel OFAC designations; the account-holding bank may be a US-correspondent-linked institution subject to OFAC jurisdiction; or the beneficial owner may hold assets in the EU subject to Council Regulation restrictions. Each of those threads requires separate attention.

Consider the extraterritorial dimension of US sanctions. A UAE entity that processes transactions through US correspondent banking infrastructure, holds dollar-denominated accounts, or has US-person involvement in its management is within OFAC's reach regardless of where it is incorporated. A UAE account freeze will not insulate the entity from OFAC scrutiny if the US-nexus tests are met. We regularly advise on the interaction between UAE domestic sanctions obligations and US secondary-sanctions risk for non-US entities – and that interaction is not theoretical.

The divergence between regimes on the ownership and control test also produces practical complications. Under OFAC, the 50 percent ownership rule is the primary test – mechanical, aggregate, and threshold-based. Under OFSI and the EU, a control test supplements the ownership analysis: an entity that a designated person directs or manages may be caught even below the fifty-percent ownership line. The UAE applies a comparable test aligned with the UN model. An account holder arguing that it falls outside the freeze because ownership does not reach the relevant threshold must ensure that argument also accounts for the control dimension across each regime in play. If any one regime's test is satisfied, the freeze stands under that regime's authority even if it is contestable under another's.

For account holders with exposure across multiple regimes, the sequencing of engagement matters. Which authority has the primary enforcement posture? Which licence or authorisation, if obtained, would provide the broadest relief? In some matters, obtaining a UN Focal Point de-listing produces downstream relief across multiple implementing regimes simultaneously. In others, a bilateral engagement with the EOCN on the UAE autonomous list is the most direct route, because the UN listing and the UAE listing are legally distinct and resolving one does not automatically resolve the other.

See also the related practices on frozen-account management under US BIS and EAR, which addresses export-control intersections where the account holder is also a party to technology or goods transactions subject to US controls. For entities facing concurrent UN and UAE asset restrictions, the companion guide on frozen-account management under the UN regime addresses the Ombudsperson and Focal Point mechanisms in detail.

Risk flags: what most commonly goes wrong

Six patterns recur across the frozen-account matters our practice handles. None is novel, but each continues to produce avoidable complications.

  • Late notification. The account holder or its bank identifies the freeze but delays EOCN notification while running internal procedures. The notification obligation does not wait for internal sign-off.
  • Inadequate ownership-chain mapping. The initial review stops at the first level of corporate ownership. Intermediate holding structures, nominee arrangements, or trust vehicles obscure the true beneficial owner. A surface review that misses a listed beneficial owner leaves the account holder exposed to the allegation that the freeze was not properly applied and is therefore now in violation.
  • Parallel-regime blind spots. A team managing the UAE notification is unaware that a US-person director triggers an OFAC reporting obligation simultaneously. Regime silos at the client or its advisers produce gaps that regulators in either jurisdiction may later identify.
  • Licensing applications filed without evidentiary support. A bare application stating the purpose without supporting documents – bank statements, expense evidence, legal invoices – is almost invariably returned or queried, adding weeks to an already compressed timeline.
  • Confusing the UN Focal Point with the UAE domestic process. These are distinct procedures. A petition filed in the wrong channel does not toll any deadline in the correct channel.
  • Underestimating the role of the account-holding bank. The bank has its own legal obligations, its own compliance team, and its own relationship with UAE regulators. Its co-operation or resistance shapes the practical pace of every step. Engaging the bank early – formally and in writing – is not optional.

The position above covers the standard process. Your facts – the type of account, the designation basis, the account holder's corporate structure, and the regimes in play – change the analysis materially. For an assessment of your exposure under the UAE regime, contact Calder & Vance at info@caldervance.com.

When should you involve sanctions counsel?

Sanctions counsel should be involved at the earliest possible stage – ideally on the same day the freeze is identified or notified by the bank. The reason is practical, not merely defensive: the first forty-eight to seventy-two hours of a freeze are when the most consequential procedural decisions are made, when the notification obligation arises, and when a licensing or delisting strategy should begin to take shape.

There is a persistent myth in treasury and compliance circles that sanctions counsel is needed only when a matter has progressed to an enforcement stage or when a licence application has already been refused. That misreads the value of early involvement. In our experience, the matters that resolve most efficiently – with the shortest period of asset restriction and the lowest regulatory friction – are those where counsel has mapped the full picture before the first submission goes out. Repairing a deficient notification or a poorly framed licence application is substantially more costly, in time and money, than preparing them correctly from the outset.

If a transaction has already been flagged, an account frozen, or a filing refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss next steps.

Related practices

Frequently asked questions

What are the steps to manage a frozen account lawfully under UAE?
Lawful management begins with confirming the legal basis for the freeze – UN Security Council list, UAE autonomous list, or bank-initiated hold – and then following a defined sequence: prompt notification to the EOCN, comprehensive record-keeping from the date of the freeze, and, where access to funds is required, a specific-licence application supported by documentary evidence of purpose. Parallel obligations to OFAC or OFSI must be handled concurrently where the account holder has US or UK nexus. Every step must be documented; gaps in the record complicate subsequent licence and delisting submissions.
What is the most common mistake in frozen-account management?
The most common mistake is delay in notifying the competent authority while internal procedures run their course. Notification obligations arise when the legal basis for the freeze is identified, not when internal approvals are complete. A close second is inadequate ownership-chain mapping: stopping at the first corporate layer and missing a listed beneficial owner embedded deeper in the structure. Both errors convert a manageable compliance event into a more serious regulatory exposure and can complicate any subsequent licence application or delisting petition.
How does UAE differ from other regimes here?
The UAE regime is distinctive in three respects. First, it administers both UN Security Council list obligations and its own autonomous list through the EOCN, so the designation basis must always be confirmed. Second, the licensing window for corporate accounts is narrower than under OFAC or OFSI, with limited published guidance on processing timelines. Third, the control test applied by the UAE aligns with the UN model but is supplemented by the autonomous-list framework, producing a dual-track analysis that does not arise under purely UN-implementing regimes. Cross-regime divergence on the control test between UAE, OFAC, and OFSI is the most frequent source of analytical error in multi-regime matters.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.