What to Expect in Bank Due Diligence Checks

Opening a business bank account in the UK isn’t as simple as filling in a form and waiting for your card to arrive. Banks are legally required to carry out detailed due diligence checks on every new business customer, and the process can be more rigorous than many expect. In this guide, we’ll demystify exactly what these checks involve, why UK banks are so particular, what documents and information you’ll need, and how to avoid the pitfalls that trip up so many small businesses. If you want to get your business bank account approved smoothly and quickly, this is essential reading.

Before you even start gathering your paperwork, it’s important to understand why UK banks undertake such rigorous due diligence checks. The UK has some of the world’s strictest anti-money laundering (AML) and counter-terrorist financing (CTF) regulations. Every bank, building society and even many fintechs are regulated by the Financial Conduct Authority (FCA) and must comply with the Money Laundering Regulations 2017 (as amended), as well as guidance issued by HM Treasury and the Joint Money Laundering Steering Group (JMLSG).

The core aim of due diligence is to prevent criminals from using the UK financial system to launder money, fund illegal activities, or defraud others. For small business owners, that means banks are legally obliged to verify who you are, where your money comes from, and that you’re not connected to illegal activity (knowingly or otherwise). Failing to do this properly can result in huge fines for banks, and in some cases, criminal sanctions for both the bank and its staff.

Beyond just ticking regulatory boxes, banks also use due diligence to assess your business’s legitimacy, financial health, and future risk. This isn’t about judging your business model — it’s about protecting both the bank and you from fraud, scams, and being caught up in red tape later down the line. Many new business owners are surprised by how invasive these checks can feel, but they are non-negotiable and apply to everyone, from freelancers to growing SMEs.

Opening a business bank account with a UK high street or challenger bank follows a fairly standard due diligence process. Understanding the stages will help you prepare and avoid delays. The process typically breaks down into several key phases, each with its own requirements and checks.

First comes the initial application, where you submit your basic business and personal details, often online. This is where the bank collects your name, business name, company registration number (if you have one), business address, and key contact information. At this point, the bank will perform basic identity verification and a soft credit check (which doesn’t affect your credit score).

Next is the document verification stage — here, the bank will request specific documents to prove your identity, address, and the existence and nature of your business. After document submission, the bank will move to risk assessment, which includes screening you and any business partners or directors against sanctions lists, politically exposed persons (PEP) registers, and adverse media databases. If your business is deemed higher risk (for example, it operates internationally, handles large cash volumes, or is in a regulated industry), the bank may ask for further information or clarification. Only once all checks are satisfied will your account be opened.

• Initial application: Submit personal and business details
• Document verification: Prove your identity and that of key stakeholders
• Business checks: Confirm your company’s legitimacy and activities
• Risk screening: Sanctions, PEPs, and adverse media checks
• Enhanced due diligence: Extra checks for certain high-risk businesses
• Account approval: Once all boxes are ticked, your account is opened

By far the most common reason for delays or rejections is incomplete or unacceptable identity documentation. UK banks must verify the identity and residential address of every business owner, director, and anyone with significant control (known as ‘beneficial owners’ — usually anyone owning 25% or more of the business). This requirement applies whether you’re a sole trader, partnership, limited company, or LLP.

For individuals, you’ll generally need to provide a valid, in-date passport or UK/EU driving licence. For proof of address, banks will typically accept a utility bill, bank statement or council tax bill dated within the last three months. Digital banks sometimes allow electronic verification, but traditional banks often insist on original or certified copies. For non-UK nationals, extra documentation (such as a biometric residence permit or visa) will be required.

For limited companies, the bank will cross-check your details with Companies House records, so make sure your information there is accurate and up to date before applying. If there’s a mismatch — for example, your registered address or director details don’t match your application — your account will be delayed or rejected. Partnerships need to provide information and ID for all partners, and for LLPs, all members and designated members.

• Passport or UK driving licence (photocard) for all key individuals
• Recent utility bill, bank statement or council tax bill (no older than 3 months)
• Company registration certificate and details from Companies House
• Details of all shareholders with 25%+ ownership
• For non-UK nationals, valid visa or residence permit

Banks must be satisfied that your business is legitimate, active, and operates as described. For limited companies, this is usually straightforward — the bank will check your details against Companies House and ask for your registration certificate (the ‘certificate of incorporation’). For sole traders and partnerships, you may need to provide extra evidence, as there’s no Companies House record.

Expect to be asked for your business’s trading address, details of its activities, and, if you’ve started trading, evidence such as recent invoices, business contracts, or proof of trading (e.g. a website, social media presence, or client communications). For new businesses, a solid business plan or a summary of your intended activities is often required. If you’re in a regulated or licensed sector (e.g. financial services, estate agency, legal practice), you’ll need to provide your FCA, HMRC or other regulator registration details.

Banks are particularly cautious where there’s any sign of a ‘shell’ company — that is, a business with no real trading activity. If your business is dormant or you don’t have clear evidence of trading, be ready to explain why. If you’re planning to start trading soon, a detailed business plan and evidence of set-up steps (such as contracts, supplier agreements, or marketing materials) will help.

One of the most misunderstood — but crucial — parts of bank due diligence is the source of funds and source of wealth checks. Banks must understand not just where your business’s money is coming from, but how you (and any major shareholders or directors) have acquired your wealth. This is about preventing money laundering and ensuring you’re not using criminal proceeds to start or run the business.

If your business has already started trading, you’ll be asked for details of your main clients, the types of payments you expect to receive, and — in some cases — the origin of any large sums being deposited. For new businesses, you’ll need to explain where your start-up funds are coming from. If you’re funding the business yourself, be ready to provide personal bank statements, evidence of savings, or documents showing where large sums originated (e.g. sale of a property, inheritance, redundancy payout, etc.). If you’ve received investment, a copy of the investment agreement or share subscription form will be required.

High-value or unusual transactions will always trigger extra scrutiny. For example, if you’re depositing £50,000 and your business plan shows modest turnover, the bank will want a clear explanation. If you’re receiving money from overseas, banks will want to know the source and reason for the payment, and may request additional documentation such as contracts, invoices, or proof of relationship with the sender.

• Personal bank statements showing savings or income sources
• Proof of sale (e.g. property, vehicle, shares) if using proceeds
• Inheritance documents if relevant
• Investment agreements or loan contracts
• Explanations for any large or unusual expected deposits

Every UK bank is required to screen business owners, directors, and anyone with significant control against sanctions lists, politically exposed persons (PEP) databases, and negative media reports. Sanctions screening checks whether you or your business are linked to individuals, companies, or countries subject to UK, UN, or EU sanctions. Any match will result in an automatic rejection and, in some cases, a report to the authorities.

PEPs are individuals who hold prominent public positions (for example, MPs, senior civil servants, judges, or military officers) and their close relatives or associates. If you’re a PEP, or related to one, your application will be subject to enhanced due diligence and may take longer. Adverse media screening means banks search news and public records for any links to fraud, financial crime, or other reputational issues. Negative findings don’t always mean your account will be refused, but you will be asked for explanations and, in some cases, supporting evidence to clarify the situation.

Even if you have no links to sanctions or are not a PEP, banks must document these checks for every business customer. If you’ve ever changed your name, lived or worked abroad, or have business partners overseas, expect these checks to be more thorough. False positives do occur, especially for common names or international connections, so be patient if you’re asked for clarification.

For most small UK businesses, standard due diligence is enough. However, certain factors will trigger what’s called ‘enhanced due diligence’ (EDD), which involves deeper checks and usually takes longer. EDD is required by law if your business or any key individual is considered higher risk — either because of the sector you operate in, the countries you deal with, or your business’s ownership structure.

Common triggers for EDD include handling large cash transactions, dealing with high-risk countries (as defined by HM Treasury), operating in sectors vulnerable to money laundering (like crypto, property, gambling, or financial services), or having complex company structures with offshore shareholders. EDD may also be triggered if any owner or director is a PEP, or if there’s negative media coverage about your business or its key people.

If you’re subject to EDD, banks will ask for more detailed business plans, additional financial evidence, more extensive source of wealth documentation, and detailed explanations of your business model and customer base. They may also require face-to-face interviews or video calls. While this can be frustrating, being prepared with comprehensive documentation will help avoid lengthy delays or rejection.

• Operating in regulated sectors: crypto, gambling, property, money transfer
• Complex or offshore company ownership
• International trading, especially with high-risk jurisdictions
• Large cash transactions or high turnover for your sector
• Directors or owners with PEP status or adverse media

What counts as a high-risk country?

Banks use lists published by HM Treasury and the Financial Action Task Force (FATF) to define ‘high-risk’ countries. These change regularly, but typically include countries under international sanctions, or those with weak anti-money laundering controls. Trading with or receiving funds from these countries will almost always require enhanced checks and supporting documentation.

The time it takes to open a business bank account depends on the bank, your business model, and how quickly you provide the correct documentation. High street banks usually take longer than digital or challenger banks, but all must complete due diligence before you get access to your account. Most delays are due to missing or unclear information.

For straightforward sole traders and UK-registered limited companies, accounts can sometimes be opened in as little as 48 hours with digital banks such as Tide, Starling, or Monzo. High street banks like Barclays, Lloyds, HSBC, and NatWest usually take between 1 and 4 weeks, depending on complexity and workload. If EDD is required, expect the process to take 2-6 weeks or more. International ownership, high-risk sectors, or large transactions will all add time.

To speed up the process, have all your documentation ready and respond promptly to any requests for further information. If you’re applying to more than one bank (which is allowed), make sure all your details are consistent across every application. Any discrepancy will be picked up and will slow things down.

It’s more common than you might think for small businesses to be refused a bank account, especially if you’re in a high-risk sector, have complex ownership, or struggle to provide the required documentation. Banks are not legally obliged to give a reason for refusal, but they must not discriminate unlawfully (for example, on the basis of nationality, ethnicity, or disability).

If your application is rejected, you should first ask the bank for feedback — they may not give specific details, especially if your rejection was due to a sanctions or PEP hit, but they will usually indicate if the problem was documentation, credit history, or business activity. You’re free to apply elsewhere, and some challenger banks are more flexible with certain business types. If you believe you’ve been treated unfairly, you can complain to the bank and, if unresolved, escalate to the Financial Ombudsman Service (FOS).

If you’re struggling to open any account, the British Business Bank’s guidance can help, and in rare cases, the Business Banking Resolution Service (BBRS) can assist. Don’t be tempted to operate your business through a personal account — this breaches most banks’ terms and can cause major problems with HMRC and Companies House.

• Request feedback from the bank — but expect limited detail
• Try a different bank, especially digital-only providers
• Contact the Financial Ombudsman Service if you believe discrimination occurred
• Review your documentation and update Companies House records
• Never use a personal account for business trading

Many UK small business owners underestimate just how detailed bank due diligence can be. The most frequent mistakes are submitting incomplete or expired documents, failing to update Companies House, or being vague about your business activities. Banks need specific, up-to-date information that matches across all records.

Another common pitfall is not being able to clearly evidence your source of funds — for example, trying to deposit a large sum without documentation, or being vague about investment sources. Vague or inconsistent explanations are red flags for banks, who are required to investigate further. If you’re operating in a sector banks consider high-risk, make sure you can explain your business model, customer due diligence processes, and compliance measures in detail.

Finally, some business owners try to rush the process by applying to multiple banks at once with inconsistent information. This can backfire — banks share intelligence through industry bodies and are alert to suspicious patterns. Prepare thoroughly, check all your documents, and be transparent at every stage. If in doubt, seek advice from a business accountant or solicitor familiar with UK banking regulations.

• Not updating Companies House before applying
• Submitting expired or unclear identity documents
• Inconsistent addresses or names across records
• No evidence for source of funds or business activities
• Ignoring requests for extra information or clarification
• Trying to use a personal account for business

To give you the best chance of sailing through bank due diligence, here’s what you’ll typically need. Not every bank asks for exactly the same items, but this checklist covers the essentials for most UK high street and challenger banks. Having these ready can shave days or even weeks off your application.

Banks use a risk-based approach to due diligence — meaning they assess each business according to the likelihood it could be used for money laundering, fraud, or other financial crime. While the core checks are the same for everyone, banks will dig deeper if your business has certain risk factors. These include international transactions, high cash handling, complex ownership, or trading in sectors historically linked to financial crime.

Banks look for clarity and consistency in your story. They want to see that your business activities make sense, that your funding sources are legitimate and documented, and that all records (Companies House, ID, business plan) align. They are also alert to red flags such as frequent changes of directors or shareholders, unusual payment patterns, or connections to high-risk countries or individuals.

If your business is flagged as higher risk, this doesn’t mean you won’t get an account — but you’ll need to provide more detail and evidence. Be ready to explain your business model, customer base, and compliance processes. If you have a compliance policy or anti-money laundering procedure, include it with your application. The more professional and transparent you are, the smoother the process will be.

• International payments or links to high-risk countries
• Large cash deposits relative to stated turnover
• Frequent changes of ownership or directors
• Vague or unexplained business activities
• Negative media coverage or links to PEPs
• Complex company or trust structures

Many business owners assume that once their account is open, the checks are over. In reality, UK banks are required to carry out ongoing due diligence throughout your relationship. This includes monitoring your account activity, reviewing large or unusual transactions, and periodically requesting updated documents or information — especially if your business changes direction, grows rapidly, or starts trading internationally.

If something about your account activity triggers suspicion (for example, a large overseas payment, or a sudden change in turnover), the bank may freeze your account until you provide an explanation and supporting documents. In the worst cases, they are required by law to file a Suspicious Activity Report (SAR) with the National Crime Agency. While this is rare for genuine businesses, it’s a stark reminder to keep your business records up to date and respond promptly to any bank queries.

You’ll also be subject to periodic reviews (often every 1-3 years, or sooner in high-risk sectors), where you may be asked to re-submit ID, proof of address, or updated business plans. Failing to cooperate can result in your account being closed, so keep your records organised and lines of communication open.