The Structure Did Not Age Into a Risk. The Rules Caught Up With It.
The structure was sensible when it was built. Sometime between 2018 and 2022 a founder set up a UAE operating company, often a free zone or mainland limited liability company, and placed it under an offshore international business company in a confidentiality-friendly jurisdiction. Where local ownership or discretion was wanted, nominee shareholders or nominee directors were used, holding the shares or the board seats on paper while the real owner controlled the company from elsewhere. The operating company traded, but the people who ran it, made its decisions, and earned its profits were not in the UAE. There was a licence, a registered address, and perhaps a flexi-desk, and little else. At the time this was unremarkable, sold by setup agents as standard practice, and it raised no flags.
What has changed is not the structure. It is the environment around it. Over the same period the UAE built and then enforced a connected set of rules that all ask the same question from different directions: who really owns and controls this company, and is it genuinely here. The beneficial-ownership regime asks it of the registrar. The corporate tax regime, live since 2023, asks it of the free zone rate and of corporate residence. The anti-money-laundering regime asks it of the bank. The transfer-pricing rules ask it of the related-party charges that move profit out of the UAE. Each of these is examined in its own analysis across the corridor, but the point that ties them together is that the legacy structure answers all four questions badly at once. A chain designed to obscure ownership and to keep substance out of the UAE is now the precise shape that every one of these regimes is built to detect.
This is why a structure that sat quietly for years can produce several apparently unrelated emergencies in quick succession. The account is frozen because the bank cannot see through the ownership chain. The transfer-pricing file is demanded because the related-party charges have no substance behind them. The corporate tax position is challenged because the company is run from abroad. The free zone 0% rate is lost because there are no real activities in the zone. These are treated, by the people they happen to, as separate problems with separate advisers. They are not. They are four symptoms of one cause, and the cause is the structure.
The reactive pieces in this corridor deal with the symptoms as they arrive: the frozen corporate account and the law behind the freeze, and the transfer-pricing audit and the thirty-day file. This analysis works in the other direction. It starts at the structure that produces the symptoms and sets out the proactive health-check: what the beneficial-ownership register now sees, why economic substance did not die when its standalone filing wound down, why the offshore-over-operating-company stack is the single point of failure, and how the structure is re-papered so that the symptoms stop arriving. The freeze and the audit are where the cost is felt. The structure is where it is decided.
What follows is the diagnosis in five parts: the beneficial-ownership register and the disclosure of nominees, the survival of the substance test after the Economic Substance Regulations wound down, the offshore-over-operating-company stack as the single point of failure, the convergence of bank, auditor, and registrar on the same expectation, and the re-papering decision that fixes the structure rather than the latest symptom. The structure did not become dangerous because it changed. It became dangerous because everything around it did.
The Beneficial Owner Is No Longer Hidden
The first pillar of the legacy structure to fail is confidentiality, because the rule that protected it has been replaced by one designed to remove it.
The regime. A UAE company must identify its real beneficial owners and record them on a register under Cabinet Decision No. 109 of 2023 on the regulation of the real beneficiary procedures, which came into force on 16 November 2023 and replaced the earlier regime in Cabinet Decision No. 58 of 2020. The rules apply to legal persons licensed or registered in the UAE, including those in the commercial, non-financial free zones, and they require the company to maintain a register of its beneficial owners, a register of its shareholders or partners, and a register of its nominee directors, and to file the beneficial-owner information with the relevant registrar and keep it current. The beneficial owner is defined by substance, not by the share register: it is the natural person who ultimately owns or controls the company, whether through direct or indirect ownership of a threshold shareholding, through voting rights, or through other means of control, and where no such person can be identified the test falls back to the natural person who exercises control through other means and then to the senior managing official.
Why this defeats the nominee arrangement. The defining feature of the legacy structure was the use of nominees and offshore layers to keep the real owner off the public record. The beneficial-ownership regime is built precisely to look through both. A chain of offshore holding entities does not stop the analysis, because the test follows ownership and control up the chain to the natural person at the top. A nominee shareholder or a nominee director does not conceal the principal, because the regime requires nominee arrangements themselves to be declared, identifying both the nominee and the person on whose behalf they act. The arrangement that was sold as privacy is now a specific disclosable fact, and a company that files a nominee as if they were the real owner is not compliant; it is misstating its register.
The penalties. Non-compliance is not a paperwork nicety. Administrative penalties for breaching the beneficial-ownership obligations are set out in Cabinet Decision No. 132 of 2023, issued on 15 December 2023 and replacing the previous penalties regime in Cabinet Decision No. 53 of 2021, and they escalate to fines reaching AED 100,000 together with measures against the licence, including suspension. The penalties bite on the failure to maintain the registers, the failure to provide accurate beneficial-owner information, and the failure to keep it updated when ownership changes. For a structure whose entire design was to keep the beneficial owner out of view, the regime converts the original feature into a standing exposure.
Why the registrar is the quiet front. The freeze and the audit announce themselves. The beneficial-ownership position usually does not, until it intersects with something else. A bank carrying out its own checks compares what it knows about the ownership against what is on the register. A corporate tax review of the structure looks at who controls the company. A licence renewal or a change of ownership brings the register back into focus. The beneficial-ownership obligation is therefore the connective tissue: it is the record that every other regime cross-checks against, and a structure whose register is wrong, incomplete, or built on undisclosed nominees fails those cross-checks wherever they occur. Getting the register right is not a separate compliance task; it is the foundation the other three regimes read from.
Substance Did Not Die With the Economic Substance Regulations
The second pillar to fail is the assumption that substance stopped mattering when the Economic Substance Regulations were wound down. The opposite is true: the filing went away, the test did not.
What the Economic Substance Regulations were, and what happened to them. The UAE introduced the Economic Substance Regulations in 2019, under Cabinet Resolution No. 31 of 2019, and reissued them in 2020 under Cabinet Resolution No. 57 of 2020 with Ministerial Decision No. 100 of 2020. They required entities carrying on defined relevant activities, including holding-company, financing, and intellectual-property activities, to demonstrate adequate substance in the UAE and to file an annual notification and report. The standalone regime has since been wound down. Cabinet Decision No. 98 of 2024, published in the Official Gazette in September 2024, amended Cabinet Resolution No. 57 of 2020 to limit the regulations to financial years from 1 January 2019 to 31 December 2022, and cancelled the administrative penalties previously issued for financial years ending after 31 December 2022, with paid penalties to be refunded. For accounting periods beginning on or after 1 January 2023, there is no longer a separate economic-substance notification or report to file.
Why this is the most misread development in the corridor. The wind-down has been read by many holders of legacy structures as confirmation that substance no longer matters, and that a UAE entity can again be a thin shell. That reading inverts the reason the standalone regime was retired. The Economic Substance Regulations were the UAE's answer to international pressure to ensure that low-taxed entities had real activity. From 2023 the corporate tax regime took over that function directly, so a separate substance filing became redundant rather than unnecessary. The substance expectation did not disappear; it was absorbed into the tax system and the wider compliance environment, where it now operates in four places at once.
Where the substance test now lives. The first place is the free zone 0% rate. A Qualifying Free Zone Person must satisfy an adequate-substance condition, maintaining adequate assets, an adequate number of qualified employees, and adequate operating expenditure in the free zone, and conducting its core income-generating activities there, to access the 0% rate on qualifying income. The mechanics of qualifying income and the conditions are set out in the analysis of how a free zone company earns and loses the 0% rate; the point here is that the substance the Economic Substance Regulations used to test is now a precondition of the most valuable feature of a free zone structure. The second place is corporate residence. A company that is run from abroad, with its real management and decision-making outside the UAE, is exposed to being treated as resident where it is actually controlled, the central-management-and-control problem analysed for a UAE company directed from the United Kingdom. The third place is transfer pricing: a related-party charge, a management fee, or an intra-group licence has to reflect where the functions, assets, and risks genuinely sit, and an entity with no substance cannot justify the return it books. The fourth place is the anti-money-laundering regime, where a bank applying its own obligations cannot get comfortable with an entity that has no real presence behind the licence.
The single substance. The practical conclusion is that the four tests are not four different substance requirements to be met separately. They are one expectation, read by four readers. The people, the premises, the decisions, and the activity that keep a Qualifying Free Zone Person within the 0% rate are the same people, premises, decisions, and activity that stop the company being centrally managed and controlled abroad, that support its transfer-pricing positions, and that satisfy a bank's compliance team. A structure that has none of these fails all four. A structure that has all of them passes all four. Substance, in the post-2023 environment, is not a box that the Economic Substance Regulations used to make companies tick. It is the single thing the whole system now turns on.
The Single Point of Failure: the Offshore Company Over the Operating LLC
With the register exposed and the substance test alive in four regimes, the classic legacy stack can be seen for what it now is: a single structure that fails several tests from one weakness.
The stack. The pattern is consistent. At the bottom is a UAE operating company, a free zone or mainland limited liability company that holds the licence and runs the trade. Above it is an offshore international business company, in a jurisdiction chosen for confidentiality and zero tax, which owns the UAE company. Somewhere in the chain are nominees, either standing as the registered shareholders of the UAE company or sitting on its board, or holding the offshore company on behalf of the real owner. The real owner controls the whole arrangement from outside the UAE and takes the profit, while the UAE company has a registered address, a nominal presence, and few or no real people, decisions, or activities of its own.
Why one weakness produces four failures. The weakness is the absence of substance combined with the opacity of ownership, and it propagates through every regime that now reads the structure. To the registrar, the chain and the nominees are an undisclosed or misstated beneficial-ownership position, exposed to the penalties under Cabinet Decision No. 132 of 2023. To the bank, the same chain is an ownership structure it cannot see through, which under the anti-money-laundering regime in Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019 is exactly the profile that prompts enhanced scrutiny, a request for source-of-funds and ownership information, and, where the bank cannot satisfy itself, a freeze. To the corporate tax system, an operating company whose decisions are taken abroad is a candidate for a residence challenge, and a free zone entity with no real activity in the zone fails the adequate-substance condition and loses the 0% rate. To the transfer-pricing rules, the charges that move profit from the UAE company up to the offshore company have no functional substance to support them, and collapse under examination.
Why it is a single point of failure, not four risks. The reason this matters for diagnosis is that the four exposures are correlated, not independent. A structure that triggers one is, by its nature, exposed to the others, because they share a cause. The freeze that prompts the owner to seek help is frequently the first visible sign of a structure that is simultaneously misstating its register, failing its free zone substance test, and running unsupported related-party charges. Fixing the freeze in isolation, by satisfying the bank for now, leaves the same structure exposed to the audit and the residence challenge that have not yet arrived. This is the sense in which the legacy structure is a single point of failure: it is one object that, when it fails, fails across the whole system, and any response that addresses only the symptom that happened to surface first is treating one face of a problem that has four.
The offshore layer is often a foreign problem too. For an owner connected to the United Kingdom, the offshore company in the chain is not only a UAE exposure. It is frequently a controlled foreign company or caught by the transfer-of-assets-abroad rules, generating a UK charge on the same structure, as set out in the analysis of the post-non-dom controlled foreign company and transfer-of-assets-abroad position. The legacy stack that fails four UAE tests can therefore be failing a fifth, foreign one at the same time, which is why the re-papering has to be designed against both systems rather than the UAE alone.
What the Bank, the Auditor, and the Registrar Now Expect
The structural health-check is easier to run once the expectation is stated plainly, because all three of the readers that examine a UAE structure are looking for versions of the same thing.
The registrar wants the truth on the register. The beneficial-ownership obligation is satisfied by identifying the natural persons who really own or control the company, recording them and any nominee arrangements accurately, and keeping the registers current as ownership changes. A register that names a nominee as the owner, omits a layer of the chain, or has not been updated since incorporation is the failure the regime is built to catch. The standard is not confidentiality managed cleverly; it is ownership disclosed correctly.
The bank wants to see through the chain. A bank applying the anti-money-laundering regime has to identify the beneficial owner, understand the ownership and control structure, and be satisfied about the source of the company's funds and the nature of its activity. It cannot do that with a chain designed to obscure ownership or an entity with no real presence to explain its transactions. What satisfies the bank is a transparent ownership chain that resolves to identifiable people, a clear and documented account of what the company does and where its money comes from, and a structure that matches the activity. The bank is not asking for more documents about an opaque structure; it is asking for a structure it does not have to see around.
The auditor and the tax authority want the substance to be real. For the corporate tax position, what matters is that the company's management and decision-making genuinely sit in the UAE, that a free zone entity carries on its core income-generating activities in the zone with adequate people, premises, and expenditure, and that any related-party charges reflect functions that are actually performed where they are booked. Contemporaneous evidence is part of the standard: board minutes that record decisions taken in the UAE, employment and payroll records, a lease and real premises, and the operational documentation that shows the activity happening here rather than being administered from abroad. A structure that can produce that evidence holds up; a structure that can only assert it does not.
The convergence. Read together, the three expectations describe one company: owned by identifiable people who are correctly on the register, run and managed in the UAE with real people and premises, and transacting in a way that matches what it is. That is the company the bank releases, the registrar accepts, and the tax authority does not challenge. The legacy structure is the negative of that picture in every respect, which is why the same rebuild satisfies all three readers at once. The work is not three compliance projects. It is one structural change, evidenced once, that answers to all of them.
The Re-Papering Decision
Diagnosis is only useful if it leads to a decision, and the decision for a legacy structure is what to do with it rather than how to explain it.
Regularise the register first. The cheapest and most urgent step is to make the beneficial-ownership position true. That means identifying the real beneficial owners, recording them and any nominee arrangements correctly, filing the information with the registrar, and committing to keep it current. Where nominees were used, the decision is whether to disclose the arrangement properly or to remove it by transferring the legal ownership to the real owner, and in most cases removal is cleaner, because a disclosed nominee arrangement still invites questions from the bank and the tax authority that direct ownership does not. The register is the record everything else is checked against, so correcting it is the foundation of the rebuild, not an afterthought.
Build the substance, or accept the consequences of not having it. The substantive question is whether the UAE company is going to be a real company. If the 0% free zone rate, a defensible corporate-tax residence, and supportable related-party charges are wanted, the company needs the people, the premises, the management, and the activity that the substance test now requires across all four regimes, together with the contemporaneous evidence that they exist. If the business does not justify real substance in the UAE, the honest conclusion may be that the structure should not claim the benefits that depend on it: not a Qualifying Free Zone Person, not a UAE-resident company holding profit it did not earn here. Pretending to substance that is not there is the position that fails, and it fails expensively. The choice is to make the substance real or to stop relying on it.
Decide between rebuild and unwind. For some legacy structures the right answer is to rebuild in place: collapse the unnecessary offshore layer, bring ownership into a transparent chain, give the operating company genuine substance, and document it. For others, particularly where the offshore company carries its own foreign exposure or where the activity does not warrant a UAE operating base at all, the answer is to unwind the structure and hold the business in a form that matches reality. Where a holding or succession layer is genuinely wanted, a substantive UAE arrangement such as a foundation, examined in the corridor's analysis of wealth-holding vehicles, can replace an opaque offshore one, but only if it is real and controlled consistently with its form. The common thread is that the structure should be designed to be seen, because in the current environment it will be.
Sequence the rebuild against the live exposures. A structure that is already under a freeze or an audit cannot be re-papered in tranquillity, so the order matters. The immediate exposure is managed first, on the terms set out in the analyses of the freeze and the transfer-pricing audit, but with the structural fix designed in parallel so that the resolution of the symptom and the correction of the cause arrive together. Releasing the account or closing the audit on a structure that has not changed simply resets the clock to the next failure. The re-papering is what makes the resolution durable, and it is the step the reactive responses point back to.
Five Traps
Five assumptions keep a legacy structure exposed. Each is a belief that was once true and is no longer.
Trap one: assuming nominees are invisible. The owner assumes that nominee shareholders or directors keep the real ownership off the record, as they once did. The beneficial-ownership regime requires the real owner to be identified and nominee arrangements to be disclosed, and filing a nominee as the owner misstates the register and exposes the company to penalties up to AED 100,000 and licence measures under Cabinet Decision No. 132 of 2023. The architectural answer is to identify the real beneficial owners and either disclose or remove the nominee arrangement, because the privacy the nominee was meant to provide no longer exists.
Trap two: believing a free zone removes the need for substance. The owner treats the free zone licence as a guarantee of the 0% rate regardless of activity. A Qualifying Free Zone Person must meet an adequate-substance condition and conduct its core income-generating activities in the zone, and a shell with no people or operations fails it and loses the rate for the current period and the following four. The architectural answer is to give the free zone entity real substance or to stop relying on the 0% rate it cannot support.
Trap three: running the offshore-over-operating-company stack with no one home. The owner keeps an offshore company over a UAE operating company that has a licence and an address but no real management, decisions, or activity in the UAE. That structure fails the residence test, the substance test, the transfer-pricing test, and the bank's ownership test at once. The architectural answer is to put genuine management and activity into the UAE company or to collapse the structure to match where the business actually is.
Trap four: treating economic substance as dead. The owner reads the wind-down of the Economic Substance Regulations as confirmation that substance no longer matters. The standalone filing ended with Cabinet Decision No. 98 of 2024 for periods after 31 December 2022, but the substance logic moved into the corporate tax regime, the free zone conditions, the anti-money-laundering rules, and the residence test. The architectural answer is to maintain real substance because four live regimes now require it, even though the old report no longer does.
Trap five: keeping no contemporaneous evidence of management and presence. The owner believes the substance can be asserted after the fact if anyone asks. Substance is demonstrated by contemporaneous records: board minutes of decisions taken in the UAE, payroll and employment records, a real lease, and operational documentation, none of which can be created retrospectively without inviting the conclusion that it was. The architectural answer is to generate and keep the evidence as the company operates, so that the substance can be shown rather than claimed.
The common thread is that each trap is a feature of the structure that has quietly turned into a liability. The structure that was built to be private and light is now required to be transparent and real, and the gap between the two is the exposure.
Sequencing With the Corridor
The legacy-structure review is the point where the corridor's reactive and proactive analyses meet, because it is the cause behind the symptoms the other pieces treat.
The freeze is the structure surfacing at the bank. Where an account has been frozen, the immediate triage follows the analysis of the frozen UAE corporate account, but the recurring cause is the structure the bank cannot see through, and the durable release depends on the rebuild set out here. The freeze is the reactive front; the structure is the proactive fix behind it.
The audit is the structure surfacing at the tax authority. Where a transfer-pricing file has been demanded, the response runs on the timetable in the analysis of the thirty-day file and the advance pricing agreement, but a related-party charge can only be defended if the substance behind it is real, which is the same substance this review tests. The audit is where the absence of substance is priced; the structure is where it is created.
The free zone rate and corporate residence are decided on the same substance. Whether a company keeps the 0% Qualifying Free Zone Person rate and whether it avoids a central-management-and-control residence challenge both turn on real management and activity in the UAE. The structural review is what confirms the company can hold those positions rather than assert them.
The foreign exposure runs in parallel. For a UK-connected owner, the offshore layer is frequently a controlled foreign company or within the transfer-of-assets-abroad rules, so the rebuild has to satisfy the UK system as well as the UAE one, and a fix that solves the UAE exposure while leaving a UK charge in place is not a fix.
The theme that runs through the corridor holds here in its strongest form. The freeze, the audit, the residence challenge, and the loss of the rate are all symptoms, and they share a single cause. The structure that was built to be invisible is now the most visible thing about the business, and the only durable response is to make it transparent, substantive, and consistent across every regime that reads it.
Frequently Asked Questions
What is a beneficial owner under UAE law?
The beneficial owner is the natural person who ultimately owns or controls a company, identified by substance rather than by the share register. Under Cabinet Decision No. 109 of 2023, in force from 16 November 2023, that is the person who owns or controls the company through direct or indirect ownership of a threshold shareholding, through voting rights, or through other means of control, and where no such person can be identified the test moves to the person who controls through other means and then to the senior managing official. The regime looks through offshore holding chains and nominee arrangements to the real person at the top.
Do I still have to comply with the UAE Economic Substance Regulations?
For accounting periods beginning on or after 1 January 2023, there is no separate economic-substance notification or report to file. Cabinet Decision No. 98 of 2024 limited the Economic Substance Regulations to financial years from 1 January 2019 to 31 December 2022 and cancelled the penalties for later years. The standalone filing has ended, but the substance expectation it tested now operates inside the corporate tax regime, the Qualifying Free Zone Person conditions, the anti-money-laundering rules, and the test for corporate residence, so substance still matters in practice.
Are nominee directors and nominee shareholders still allowed in the UAE?
A nominee arrangement is not concealment any more, because it has to be disclosed. The beneficial-ownership regime requires a company to maintain a register of nominee directors and to identify the real owner behind a nominee shareholder, declaring both the nominee and the person on whose behalf they act. Using a nominee to keep the real owner off the register is non-compliant and exposes the company to penalties. A disclosed nominee arrangement is permitted but still draws scrutiny from banks and the tax authority, which is why direct ownership is usually cleaner.
What are the penalties for getting the UBO register wrong?
Administrative penalties for breaching the beneficial-ownership obligations are set out in Cabinet Decision No. 132 of 2023, issued on 15 December 2023, and escalate to fines reaching AED 100,000 together with measures against the licence, including suspension. They apply to failing to maintain the registers, providing inaccurate beneficial-owner information, and failing to keep the information current when ownership changes. The penalties attach to the company and are a standing exposure for a structure whose register is built on undisclosed nominees or an incomplete ownership chain.
Why does my legacy offshore structure cause so many separate problems?
Because the problems are not separate. An offshore company over a UAE operating company with nominees and no real presence fails several tests from one weakness: the bank cannot see through the ownership, the registrar sees a misstated beneficial-ownership position, the free zone substance condition is not met, the company looks resident where it is actually managed, and the related-party charges have no substance behind them. The freeze, the audit, the residence challenge, and the loss of the 0% rate are four faces of the same structural failure, which is why fixing only the one that surfaced first does not stop the others.
Does a free zone company need real substance to keep the 0% rate?
Yes. A Qualifying Free Zone Person must satisfy an adequate-substance condition, maintaining adequate assets, qualified employees, and operating expenditure in the free zone and conducting its core income-generating activities there, to access the 0% rate on qualifying income. A free zone entity that is a shell, with no people or operations in the zone, does not meet the condition and loses the rate. The free zone licence does not remove the need for substance; it makes substance the price of the rate.
How do I fix a legacy UAE structure?
The structural fix has three steps. First, make the beneficial-ownership register true by identifying the real owners, disclosing or removing nominee arrangements, and filing the information with the registrar. Second, decide whether the UAE company will be a real company with genuine management, premises, and activity, or whether it should stop claiming the benefits that depend on substance it does not have. Third, choose between rebuilding the structure in place and unwinding it to match where the business actually operates, designing the result to satisfy the UAE regimes and any foreign exposure together.
Will fixing my UAE structure also solve a UK tax exposure on the same arrangement?
Not automatically, and the two have to be designed together. For a UK-connected owner, the offshore company in the chain is frequently a controlled foreign company or within the transfer-of-assets-abroad rules, generating a UK charge on the same structure that creates the UAE exposure. A rebuild that resolves the UAE position while leaving the UK charge in place is incomplete, so the structural review has to be run against both systems, with the UK exposure on the offshore layer addressed as part of the same decision.
A legacy UAE structure is not failing because anyone changed it. It is failing because the rules around it were rebuilt to detect exactly the shape it was designed to have. The register now sees the owner the nominees were meant to hide, the substance test the Economic Substance Regulations used to run now lives inside four regimes at once, and the offshore-over-operating-company stack is one object that fails them all together. The freeze and the audit are where the cost is felt. The structure is where it is decided, and it is the only place the cure holds.