Skip to content
Company Formation

Cyprus Corporate Bank Account: KYC, Documents and Provider Checks (2026)

How to open a corporate bank account in Cyprus in 2026: the KYC/AML due diligence banks require, why substance and source of funds matter, and where EMIs fit.

PA
Philippou Accounting & TaxEditorial publisher
13 min readUpdated 8 October 2026

Quick answer

A Cyprus company applies for a business account with evidence of its legal structure, beneficial owners, authorised operators, activity and source of funds. The provider assesses the case under risk-based KYC/AML rules; incorporation and a complete file do not guarantee approval or a fixed opening date.

Key takeaways

  • Ask the provider for its current product-specific document list and explain the payments the company actually needs.
  • Map ownership and account operators, and document opening capital separately from forecast revenue.
  • Check the provider's licence and the legal protection of funds: bank deposits and electronic-money balances are different.
  • No provider-wide approval time or result can be promised for an individual application.

A Cyprus company applies for a corporate account by providing information that lets the provider identify the legal entity, the people who own or control it, its authorised operators, its expected business activity, and the origin of the money it will receive. The provider evaluates the application under its own risk-based KYC and anti-money-laundering procedures. Incorporation does not itself grant a banking product, and neither a complete file nor an adviser can guarantee approval or a particular opening date.

Prepare the file around the transactions the company will actually make. State whether it needs deposits, international transfers, payroll, card acceptance or another service, and ask the prospective provider for its current application checklist. A newly incorporated company may have forecasts rather than invoices; mark them as forecasts and support the opening capital separately. This banking guide complements our articles on company registration and economic substance. The bank's onboarding decision and the company's tax-residence position are separate questions.

It is all about due diligence (KYC/AML)

The single biggest factor is due diligence — the bank must understand who you are and where the money comes from before it will open an account. To do that it runs Know-Your-Customer (KYC) and anti-money-laundering checks on the company, its directors and its ultimate beneficial owners (UBOs). It assesses the nature of the business, where the money flows from and to, the countries involved, and whether the structure makes commercial sense. Clear and consistent information helps the provider assess the risks; it does not predict approval. These obligations flow from the EU anti-money-laundering framework, supervised in Cyprus by the Central Bank of Cyprus, and they are not optional or negotiable.

Definition

KYC (Know Your Customer) is the bank's legally required process of verifying who you are, who ultimately owns and controls the company, and the source and purpose of the funds. The provider decides whether the evidence satisfies its requirements.

Explain the commercial rationale accurately

Describe what the company sells, where its customers and suppliers are, how invoices will be paid and why the requested account product fits those flows. Existing contracts, invoices and a working website can help where they exist, but a newly formed company should not invent trading history. If the company is managed outside Cyprus, say so. A registered office does not by itself prove local management or operations.

The provider may consider the ownership chain, countries involved, product type, projected transaction pattern and other risk factors. A Cyprus address or local employee is not a general condition that guarantees approval; lack of local staff does not automatically require refusal. Give a truthful account of the business and be ready to explain changes. See our separate substance guide for tax and operational context, which should not be conflated with a bank's individual assessment.

Build a consistent document pack

Ask the provider for its precise list, required document age, and certification method. A practical starting point covers the company, its ownership, the people who may operate the account, the business, and the origin of the initial funding. A certificate of good standing, apostille, professional reference or extra financial evidence may be requested in a particular case; none should be described as universal for every new company.

CategoryUseful starting evidence, subject to provider requirements
CompanyIncorporation and constitutional documents, current directors and shareholders, registered office, and any board resolution authorising the account and its operators.
Ownership and peopleAn ownership chart through to natural-person beneficial owners; identification and address evidence for relevant directors, owners and authorised operators.
ActivityAn honest description of products, expected counterparties, countries, turnover and transaction frequency; existing contracts or invoices where available.
FundingA clear explanation of initial capital or shareholder loans, supported by appropriate records; distinguish this from forecast sales.
Provider-specific requirements may differ. Make names, ownership percentages and dates consistent across the application.

How additional due diligence is decided

European Banking Authority guidance calls for a risk-based assessment. Non-residence, multiple ownership layers, politically exposed persons, higher-risk countries, unusual payment patterns and product characteristics can be relevant factors. They do not all produce the same automatic outcome. A provider may ask for further evidence of beneficial ownership, commercial purpose, source of funds or source of wealth, or may decline within its lawful policies.

If asked for an ownership explanation, map each company and natural person, show shares and control rights, and reconcile any recent changes with company records. If asked about money, identify the specific transfer being discussed rather than replying only with an annual revenue forecast. These distinctions make the file intelligible without promising a faster or favourable decision.

Plan without assuming an opening date

There is no reliable universal number of days or weeks for a Cyprus corporate account application. Timing depends on the provider's checks, the ownership structure, the requested product, the countries and activity involved, whether evidence is complete, and any follow-up questions. An indicative date from a sales representative is not approval. Avoid committing to a first supplier payment or payroll run until the account is activated and you know its operating limits.

Maintain one version-controlled document list with expiry dates and an owner for each response. Ask for the remaining questions together where possible; respond to the actual point raised, and identify changed facts clearly. A complete submission can reduce avoidable back-and-forth, but the provider may still request more information or refuse the application. Keep another lawful payment plan available while onboarding is unresolved.

Illustrative file, not a customer result

Suppose a new Cyprus software company expects payments from EU business customers and its sole owner lives abroad. Its file would distinguish incorporation records, the owner's identity, the account operator's authority, an honest description of planned services, forecast customer countries and the documented source of its initial capital. Draft contracts should be labelled as drafts. The provider may still seek further evidence or decline; this example does not predict an approval or timeline.

Compare the legal provider and the protection of funds

A bank deposit, a payment account and an electronic-money balance are different legal products. Check the exact contracting entity in the Central Bank of Cyprus's credit-institution register or payment/electronic-money registers, including notices of revoked licences. If the provider is authorised elsewhere in the EU, check the relevant home-state register and the scope in which it serves Cyprus. An IBAN or polished app alone does not establish that the customer holds a protected bank deposit.

The Cyprus deposit-guarantee scheme states a maximum of €100,000 per eligible depositor per covered credit institution, including accrued interest, subject to its terms and exclusions. Multiple accounts with the same institution are aggregated. For a branch of a foreign institution, check the applicable scheme and depositor information sheet. Funds held with a payment or electronic-money institution are subject to safeguarding rules rather than the same deposit guarantee; read the specific provider's legal terms to understand how it safeguards client funds.

Compare supported currencies, incoming and outgoing countries, payment limits, fees, permissions, cash handling and any credit needs. Service availability and onboarding speed depend on the particular provider and product; an EMI is not automatically faster or sufficient for every business. Both banks and non-bank providers conduct due diligence and may request more documents.

Check whether the product fits the business

A provider can be properly authorised yet still lack the services a particular company needs. Verify the legal entity, account name, available currencies, incoming payment rules, transfer destinations, cut-off times, user permissions and fees before treating the product as the company's operating account. Ask whether the company can receive its expected marketplace or card-processor payments and whether payroll or tax-payment routes work in practice. A commercial mismatch is a product problem, not proof that the company failed an AML check.

Keep the provider's written tariff and terms with the onboarding file. If a product changes, review the new terms before moving balances or telling customers to pay a new account. A second account can be useful for separate needs, but it creates its own due-diligence and accounting work. Reconcile statements from every provider and record transfers between them so that the source of a payment remains traceable.

Pre-submission and post-opening checks

Before submitting, compare the legal name and company number on every form, certificate, draft contract and ownership chart. Reconcile director and shareholder changes to their effective dates. Identify who may sign the application and who will control online access. If the provider asks for a description of activity, separate current operations from future forecasts. State the source of the opening deposit independently from projected customer receipts. A forecast cannot explain money that already came from an owner.

Confirm that the product can make the payments your company actually needs. A business that pays staff or taxes should check the supported payment rails and payee rules; a company receiving marketplace income should identify whether the marketplace or end customer appears as payer. Request the current tariff, conditions, transaction limits, process for changing authorised users, and the relevant depositor or safeguarding information. Use the provider's secure upload channel for identity documents.

After activation, set access permissions, two-factor authentication and approval controls suited to transaction size. Retain statements and reconcile them to the accounting records. Tell the provider about material changes of control or activity as required by its terms. An unexpected transaction can prompt questions later even if onboarding was completed. This is why the initial application should be a truthful working description, not a polished story that differs from actual operations.

Also check the account's legal contracting entity against the name shown on any marketing page. A brand may serve clients through different subsidiaries. The relevant deposit scheme or safeguarding framework follows the legal entity and product, not the logo. Where the provider is an EU branch, its home-state arrangements can matter. Ask for written product documents and resolve any mismatch before transferring material funds.

Account opening is only the first review. Providers can refresh identification records or ask for explanations when activity changes. Store supporting contracts and invoices in a way the company can retrieve quickly. If a shareholder loan replaces initial equity, document that legal and accounting change rather than continuing to describe the transfer as capital. If a new owner joins, update both company records and the provider as required. A coherent record helps answer later questions, though it cannot prevent every review or account restriction.

Keep a record of the date each document was supplied and of any written response from the provider. This makes later questions easier to answer consistently and helps the company plan around an unresolved application.

Getting approved

Good documentation lets the provider assess the application on accurate facts. It cannot turn a regulated risk decision into a formality. Choose a product that matches the company's actual transaction needs, submit consistent evidence and allow for follow-up questions. The provider retains the final decision.

We prepare and support corporate account opening as part of company setup — assembling the KYC pack and helping explain the company's actual activity to prospective licensed providers. Get in touch, or see our company formation and corporate administration services.

Key terms

KYC
Customer due diligence used by a provider to identify and assess a client and its intended relationship.
UBO
A natural person who ultimately owns or controls an entity; identification follows applicable law and the specific structure.
Source of funds
Evidence explaining the origin of a specific payment or money entering the account.
Source of wealth
Evidence explaining how an individual accumulated their overall assets, where relevant to the provider's review.
EMI
An authorised electronic-money institution; its customer funds are subject to safeguarding rules rather than the same protection as an eligible bank deposit.

Frequently asked questions

No. The provider assesses the company, its people, business and funding independently and can seek more evidence or decline.

A starting pack covers company records, ownership through natural-person beneficiaries, authorised operators, business activity, expected transactions and the origin of opening funds. Ask each provider for its exact list and certification rules.

There is no universal time for Cyprus corporate applications. Timing depends on the provider, product, risk assessment and any follow-up questions. Do not schedule critical payments until the account is active.

No single automatic result follows from non-residence alone. The provider assesses residency alongside countries, ownership, activity and other relevant risk factors.

An electronic-money or payment balance is governed by safeguarding rules rather than the same deposit-guarantee protection as an eligible bank deposit. Check the specific legal product and provider.

Have a question about this for your situation?

Reading is one thing; your circumstances are specific. Send your details for a free, no-obligation initial discussion.

Privacy & cookies

PA

Philippou Accounting & Tax

Editorial publisher

Philippou Accounting publishes practical Cyprus accounting and tax guides. Sources and substantive update dates accompany the articles. General information should be checked against the circumstances of each case; a named professional reviewer is identified only when that review has been confirmed.

This article is general information based on the Cyprus tax framework for 2026 and is not a substitute for tailored professional advice. Speak to us about your specific circumstances.

Ready to get your numbers in order?

Book a free, no-obligation consultation. We'll review where you stand and show you exactly how we can help your business or personal finances in Cyprus.

  • Contact during business hours
  • Fixed fees, no obligation
  • Part of the Philippou Law Firm group
Free consultation