Last updated: August 2026.
When operating a company in the UAE, businesses often face a payment situation that looks operational but can leave a real compliance gap: the contract is signed with Customer A, the invoice is issued to Customer A, but the incoming bank transfer shows Company B as the payer. Sales usually cares whether the money has arrived. Finance asks whether it can be booked. Banks and auditors usually care about a more precise question: why did the money come from B?
Our recommendation is not to treat a third-party payment as a small variation of normal receivables. It should be assessed through one explanation chain covering the contract, KYC, source of funds, beneficial ownership, and internal approval. If the explanation chain is complete, the third-party payment may be accepted and archived. If the chain is incomplete, the business should request documents, escalate the review, and where necessary suspend service or refund the payment.
1. Why do third-party payments become a compliance issue?
The core issue with third-party payments is a mismatch among the contracting party, the paying party, and the beneficial owner. After receiving the funds, if a business can only prove that “the customer approved the payment” but cannot explain the payer’s relationship with the customer, the reason for the payment arrangement, and the source of funds, it will be in a weak position during later bank inquiries or audit reviews.
The UAE AML Executive Regulations define Customer Due Diligence as the process of identifying and verifying the customer, beneficial owner, purpose of the business relationship, ownership structure, and control structure. In higher-risk situations, they also require further understanding of the transaction reasons, reasonable identification of the source of funds, and enhanced ongoing monitoring (Source: UAE AML Executive Regulations Cabinet Decision No.10 of 2019, February 2019, subject to the latest official publication).
💡 Practical view: your company may not be a financial institution, but your UAE bank account will be reviewed through an AML/KYC lens. The more complete your documentation is, the easier later account reviews become.
2. Step one: confirm the relationship between the payer and the contracting customer
Do not start with “can we book the revenue?” Start with “who is the payer?”
Common explainable relationships include a parent company or subsidiary paying on behalf of the customer, centralized payment within the same group, an authorized agent paying on the customer’s behalf, a project owner paying under a project arrangement, or an overseas related party handling settlement. These scenarios are not unusual in cross-border trade and project services, but each one requires written support.
We recommend keeping at least the following documents:
| Document | Purpose |
|---|---|
| Payment authorization from the contracting customer | Proves that the third-party payment arrangement comes from the customer |
| Relationship explanation between the payer and the customer | Proves that the payer is not an unrelated source of funds |
| Payment reference or payment notice | Links the payment to the specific invoice or contract |
| Internal approval record | Shows the company did not create the explanation only after the fact |
If the payer has no clear relationship with the customer and the customer refuses to explain, the business should not book the payment directly.
3. Step two: assess whether the commercial rationale is specific
An explainable relationship does not automatically make the payment arrangement reasonable. The business still needs to ask: why is the contracting customer not paying directly?
Stronger explanations are usually specific, such as centralized payment by a group finance center, payment by a project owner, currency or settlement restrictions on the customer’s account, or payment through the buyer’s procurement center. By contrast, if the customer only says “it is convenient,” “you do not need to ask,” or “a friend’s company will transfer it first,” those explanations do not create a reliable compliance record.
⚠️ Common pitfall: a sales confirmation that the customer said “no problem” does not mean finance can book the payment. A third-party payment should at least have written customer explanation and payment authorization.
4. Step three: check source-of-funds signals and unusual patterns
The following situations should trigger escalated review:
- A personal account pays on behalf of a corporate customer;
- Multiple accounts split payment for the same invoice;
- The payment amount, currency, or reference does not match the invoice;
- The payer is located in a higher-risk or sanctions-sensitive jurisdiction;
- The customer refuses to provide the payer’s identity, relationship, or source-of-funds explanation;
- The payment route appears designed to avoid bank or internal review.
In higher-risk situations, the enhanced due diligence directions set out in the UAE AML Executive Regulations include obtaining more information on the customer and beneficial owner, understanding the reasons for the transaction, identifying the source of funds, increasing transaction monitoring, and obtaining senior management approval where necessary (Source: UAE AML Executive Regulations Cabinet Decision No.10 of 2019, February 2019, subject to the latest official publication).
5. Four-level handling checklist: turn “can we accept it?” into a process
| Level | Typical scenario | Company action | Booking recommendation |
|---|---|---|---|
| Green | Same group or parent-subsidiary payment, clear authorization, matching amount | Keep authorization, relationship explanation, and payment reference screenshot | May book and archive |
| Yellow | Relationship is explainable, but authorization is missing or payment reference is incomplete | Request authorization, payment explanation, and invoice linkage | Book after documents are completed |
| Orange | Personal account payment, unfamiliar company payment, or split payments across multiple accounts | Escalate to management and request source-of-funds and commercial-rationale explanation | Process after review approval |
| Red | No clear relationship, refusal to explain, or route appears designed to avoid review | Suspend service and refund if necessary | Do not book as normal revenue |
The value of this table is that sales, finance, and management can communicate using the same standard. It does not turn every third-party payment into a risk event, but it prevents the business from collecting the money first and inventing the story later.
6. How should a company build a payment SOP?
We recommend managing third-party payments from the quotation and contract stage. Payment terms can state that payment should normally be made by the contracting customer. If a third-party payment is required, the customer should submit written explanation, third-party identity information, evidence of the relationship with the contracting customer, payment authorization, and payment reference requirements in advance.
A practical internal process can work as follows: sales submits the third-party payment request, finance checks the contract and invoice, the customer provides authorization and relationship documents, finance classifies the case under the four-level standard, orange-level cases go to management approval, and red-level cases are suspended or refunded. Every step should be saved in the file for the relevant invoice.
A bank inquiry pack will usually include the contract, invoice, payment instruction, third-party authorization, relationship evidence, payment reference screenshot, transaction background explanation, and beneficial-owner explanation.
→ See also: [UAE bank account and compliance document preparation] (/insights/uae-bank-account-compliance)
7. FAQ
Q: Can we accept payment from the customer’s parent company?
Yes, it can be handled as an explainable scenario, but the business should keep the parent-subsidiary relationship explanation, payment authorization from the contracting customer, and payment reference evidence. Do not rely only on chat confirmation.
Q: Can a personal account pay for a corporate customer?
This is higher risk. A personal-account payment requires stronger relationship evidence, source-of-funds explanation, and management approval. If the explanation is insufficient, the business should not book it directly.
Q: If the bank has not asked questions, does that mean the payment is safe?
No. Bank inquiries, account reviews, and audit checks may happen later. The business should assess the payment based on documentation completeness at the time of the transaction, not based on whether the bank asks questions immediately.
8. Recommended next steps
If your business is already receiving payments in the UAE, start with three actions:
- Review the past 6-12 months for any third-party payments;
- Reclassify them under green, yellow, orange, and red levels;
- Create templates for authorization, relationship evidence, source-of-funds explanation, and internal approval records.
Our team can help businesses build payment compliance SOPs, bank inquiry packs, and internal approval standards. A practical first step is a 30-minute payment-process assessment to identify current documentation gaps before deciding whether to supplement records or adjust contract terms.
Last updated: August 2026. This content is for informational purposes only and does not constitute legal, tax, or anti-money-laundering compliance advice. For professional consultation, please contact the MIRISE team.