What is a Shell Company? How shell companies are used in money laundering
A corporate applicant arrives with everything in order. Trade licence, memorandum of association, a director with a valid passport, a registered address. And almost nothing behind it. No staff, no premises beyond a mailbox, no customers you can identify.
That is a shell company, and it is legal in every jurisdiction that permits incorporation. Which is exactly what makes it difficult. You cannot decline every entity without operations, because a great many legitimate structures look identical on paper.
This guide covers what a shell company is, why shell companies appear in so many money laundering schemes, the red flags that separate misuse from ordinary corporate structuring, and what the rules now require in the UAE, Saudi Arabia and elsewhere.
Shell Companies - Key Takeaways |
|
|
|
|
|
|
|
|
What is a shell company?
A shell company is a registered legal entity with no meaningful commercial operations: no employees, no trading premises, few or no assets, and little or no revenue. It exists on paper. Shell company and shell corporation mean the same thing.
What defines a shell is absence rather than activity. The missing element is economic substance, meaning genuine operations that explain why the company exists and where its money comes from.
The confusing part is that a shell company is often fully documented. It can hold a valid licence, file returns, appoint directors and operate a bank account. Nothing in the registry will tell you it is a shell.
A shell company typically has:
Legal registration and a licence in good standing
A registered address, often shared with dozens or hundreds of other entities
One or more appointed directors or managers
A bank account, sometimes in a different jurisdiction from its incorporation
And typically lacks:
Employees, payroll or premises it actually occupies
Customers, suppliers or a commercial footprint you can verify
Assets beyond cash or shares in other entities
Revenue that matches the business it claims to conduct
Are shell companies legal?
Yes. Forming and owning a shell company is lawful everywhere companies can be incorporated.
The entity is not the offence. Using one to conceal the origin of criminal proceeds, evade sanctions, defraud counterparties or hide assets from tax authorities is.
This distinction matters operationally, because it means a compliance team cannot treat "this is a shell" as a conclusion. It is the start of an assessment, not the end of one.
Shell companies are used constantly in ordinary commerce:
Special purpose vehicles created to ring-fence a single project, property or financing
Holding companies that own shares in operating subsidiaries and do nothing else
Acquisition and joint venture vehicles formed ahead of a transaction that may take months to close
Asset-holding entities used to separate liability between parts of a group
Dormant entities kept alive to protect a name, a licence or a future line of business
Every one of those has no staff and no trading activity. So does the vehicle set up to move stolen funds through three countries. At the document level, they can be indistinguishable, and that is the whole problem.
Shell company, front company, shelf company or shell bank: what is the difference?
These four terms get used interchangeably and mean quite different things:
A shell has no operations.
A front company does have real operations, which it uses as cover.
A shelf company is a pre-registered entity sold off the shelf to a new owner.
A shell bank is a specific regulated concept with its own prohibition attached.
The risk profile and the regulatory treatment differ in each case.
Type | What it is | Typical purpose | Why it matters in AML |
Shell company | Registered entity with no real operations | Holding, SPVs, dormancy, structuring | Separates the beneficial owner from visible financial activity |
Front company | Entity with genuine trading activity | Legitimate business used to mask illicit flows | Harder to detect, because real revenue disguises criminal proceeds |
Shelf company | Pre-incorporated entity sold to a buyer | Fast market entry, established registration date | An older incorporation date can create a false impression of history |
Shell bank | Bank with no physical presence where it is licensed, and no affiliation with a supervised group | None legitimate in correspondent banking | Defined in AML regulation; correspondent relationships are restricted |
One point worth noting for anyone reading UAE regulation closely. The AML framework defines "shell bank" as a term, but does not define "shell company" as a standalone legal category.
Regulators address shell company risk indirectly, through beneficial ownership disclosure, substance requirements and customer due diligence obligations, rather than by naming and banning a company type.
Why do criminals use shell companies to launder money?
A shell company does two things for someone moving illicit funds. It puts distance between the beneficial owner and the financial activity an institution can observe, and it gives the money a commercial explanation that looks lawful.
A payment from an individual to another individual invites questions. An invoice between two registered companies for consulting services does not, at least not immediately. Add a second and third layer across different jurisdictions, and the ownership trail becomes expensive and slow to reconstruct.
The evidence base for this is substantial. A joint report by the FATF and the Egmont Group analysed 106 case studies from 34 jurisdictions and found that legal persons, principally shell companies, were a key feature in schemes designed to disguise beneficial ownership.
Front companies and bearer shares appeared less often.
Where shell companies fit in the money laundering process
Shell companies are most heavily used during layering, the stage where funds are moved between accounts and entities to break the link with their origin.
Inter-company loans, service invoices, management fees and share purchases all provide plausible reasons for money to move. They also appear at integration, when the accumulated funds are used to buy property, acquire an operating business or extend credit, and the proceeds re-enter the economy as investment returns or trading income.
For background on the sequence, see our overview of the three stages of money laundering.
Beyond money laundering
Shell companies show up in most financial crime typologies, not only laundering:
Sanctions evasion, where an unlisted entity is used to obscure a designated party's interest in a transaction. The UAE's proliferation financing risk assessment identified the use of shell companies alongside unregistered hawala networks as a sanctions evasion technique.
Trade-based money laundering, where invoices are inflated, deflated or issued for goods that never move.
Fraud and misappropriation, where a shell receives payments from a company the fraudster controls or influences.
Corruption, where a shell holds assets on behalf of a politically exposed person who cannot hold them directly.
Tax crime, where profits are routed through entities in low-transparency jurisdictions.
An illustrative example. A newly licensed trading company receives eleven inbound transfers of between USD 180,000 and USD 240,000 over five weeks from counterparties in three countries, then remits close to the same total to a single related entity abroad.
It has no employees, no warehousing and no customs records. None of that is proof of anything. All of it is inconsistent with the business the company said it was in, and that inconsistency is what warrants a closer look.
What are the red flags of a shell company?
No single indicator is conclusive. Read in isolation, almost every shell company red flag also describes a perfectly ordinary holding vehicle. A company with no employees is not suspicious. A registered agent address is not suspicious.
What matters is clustering: several indicators appearing on the same customer, pointing in the same direction, without a commercial explanation that holds up.
The indicators below are grouped by the kind of evidence they come from, because they are found at different points in the file.
Ownership and structure indicators
Ownership layered across multiple jurisdictions with no commercial rationale for the structure
Nominee directors or shareholders with no relevant professional background, or who appear on many unrelated entities
Shareholdings arranged so that no individual crosses the local disclosure threshold
Reluctance or inability to identify the ultimate beneficial owner, or explanations that change between conversations
Directors who cannot describe the company's business or who sign for accounts without explaining their role
Operational and documentary indicators
A registered agent or shared service address used by a large number of unrelated entities
No employees, no payroll and no lease for premises the company claims to occupy
No website, listing, trade references or any verifiable commercial footprint
A business description so broad that it covers almost any activity
A long period of dormancy after incorporation followed by sudden and unexplained activity
Corporate documents that show signs of alteration, or that cannot be corroborated against a registry
Transactional indicators
Transaction volume or value inconsistent with the stated business profile
Funds arriving and leaving quickly with little or no residual balance
Payments with no stated purpose, or identifiable only by reference to a contract or invoice number
Counterparties with no logical connection to the company's declared activity
High movement of funds combined with no operational footprint at all
The last one is worth dwelling on. High volume with no payroll, no premises and no identifiable customer base is among the clearest signals available, because it describes a company doing a great deal of business without any of the infrastructure that business would require.
For wider context, see our guide to money laundering red flags.
Indicator | Why it raises risk | What it does not prove |
No employees or premises | No operational capacity to generate the stated revenue | Holding companies and SPVs are normally staffless by design |
Shared registered address | Common in bulk incorporation and nominee arrangements | Corporate service providers legitimately host many clients |
Multi-jurisdiction ownership layers | Increases the cost and time of tracing the beneficial owner | Tax, regulatory and investor requirements produce layered groups |
Nominee director | Distances the real controller from the entity | Nominee services are lawful in many jurisdictions |
Dormancy then sudden activity | Consistent with an entity acquired or repurposed for a scheme | Businesses do start trading after long preparation |
Rapid in-and-out transfers | Characteristic of layering rather than working capital | Payment intermediaries and agents operate this way legitimately |
Reluctance to identify the UBO | Obstructs the single control that shell structures are designed to defeat | Some customers are poorly advised rather than evasive |
How do the UAE, Saudi Arabia and international regulators treat shell companies?
No major regulator bans shell companies. They attack the opacity instead, through beneficial ownership registers, disclosure duties and due diligence obligations placed on regulated businesses. Those rules differ materially between markets, and several of them have changed since 2025.
A compliance team operating across the GCC cannot assume that a requirement in one country applies in the next, and a team onboarding counterparties from outside the region needs to know which registers are still functioning.
FATF: Recommendation 24 and beneficial ownership
In March 2022, the FATF agreed tougher global beneficial ownership standards in Recommendation 24, requiring countries to ensure competent authorities can obtain adequate, accurate and up-to-date information on the true owners of companies.
Updated guidance followed in March 2023, with the stated aim of ensuring that shell companies can no longer serve as a haven for illicit proceeds linked to crime or terrorism.
A FATF Recommendation is an international standard, not directly applicable law. Countries implement it through their own legislation, at their own pace, and with their own thresholds. "The FATF recommends" and "UAE law requires" are different statements and should not be used interchangeably.
United Arab Emirates
The UAE replaced its core AML statute in 2025. Federal Decree-Law No. 10 of 2025 repealed and replaced Federal Decree-Law No. 20 of 2018 and came into force on 14 October 2025, with new executive regulations issued under Cabinet Resolution No. 134 of 2025 taking effect on 14 December 2025 and repealing Cabinet Decision No. 10 of 2019.
AML policies, risk assessments and training material that still cite the 2018 law are out of date.
Beneficial ownership is governed separately. Cabinet Decision No. 109 of 2023 on the regulation of real beneficiary procedures, which replaced Cabinet Decision No. 58 of 2020, requires licensed legal persons on the mainland and in commercial free zones to maintain three registers:
a register of real beneficial owners
a register of partners or shareholders
register of nominee management members.
The beneficial owner is generally the natural person who ultimately owns or controls 25% or more of the shares or voting rights, or who can appoint or dismiss the majority of directors.
Administrative fines for breaches are set out in Cabinet Decision No. 132 of 2023.
The financial free zones sit outside this regime. DIFC and ADGM entities are not covered by Cabinet Decision 109 of 2023 and operate their own beneficial ownership frameworks with separate disclosure obligations.
If your customer base spans mainland, commercial free zone and financial free zone entities, you are applying three sets of rules, not one.
Supervisory attention here is explicit. The UAE's 2024 National Risk Assessment identifies the misuse of legal persons and nominee structures as one of its key typologies, which means firms are expected to reflect that finding in their own business risk assessments.
See our overview of AML requirements in the UAE for the wider framework.
Saudi Arabia
Saudi Arabia introduced its first dedicated beneficial ownership disclosure regime in 2025.
The Minister of Commerce decreed the Ultimate Beneficial Ownership Rules on 21 February 2025, requiring companies registered in the Kingdom, other than those publicly listed, to disclose and maintain accurate UBO information with the Ministry of Commerce, effective 3 April 2025.
Those rules were then replaced. In late November 2025, the Ministry of Commerce issued a ministerial decision approving a new UBO framework effective 4 January 2026, which simplifies identification into three tiers:
ownership of 25% or more of capital;
failing that, effective control by any means;
failing both, the company's manager, board member or chairman.
Companies maintain a register, notify changes within a defined period and file periodically.
The practical point for a compliance team is that Saudi UBO obligations are recent, have already been revised once, and should be checked against the current Ministry of Commerce text rather than against secondary summaries.
Full Compliance Across Jurisdictions
Centralise, simplify, and scale your compliance efforts across jurisdictions and regulators. Use regulator-specific templates or create your own rules and workflows.
What changed in the United States, and why it matters here
Most international content on shell companies still tells readers that the Corporate Transparency Act requires US companies to report their beneficial owners. That is no longer the position.
On 11 August 2026, FinCEN issued a final rule, effective 14 August 2026, permanently removing the requirement for US companies and US persons to report beneficial ownership information, and announced it would delete information previously reported by US persons from the database.
Only certain non-exempt entities formed under foreign law and registered to do business in a US state remain in scope, and only for their non-US beneficial owners.
If you onboard US-incorporated counterparties, you can no longer treat a federal beneficial ownership register as a verification source.
Ownership information now has to come from the customer, from state-level filings of varying quality, or from commercial data.
The US Government Accountability Office raised this directly in a May 2026 report, noting that US-based shell companies can pose significant illicit finance risks and that the exemption removed more than 99% of entities previously required to report.
Jurisdiction | Core instrument | Who must disclose | What it means in practice |
UAE and commercial free zones | Cabinet Decision No. 109 of 2023 | Licensed legal persons, with limited exemptions | Three registers maintained by the entity and filed with the registrar |
UAE financial free zones (DIFC, ADGM) | Separate free zone frameworks | Entities registered in those zones | Outside Cabinet Decision 109; check the applicable zone rules |
Saudi Arabia | Ministry of Commerce UBO Rules, revised for 2026 | Registered companies other than listed joint-stock companies | Register maintained plus filings and change notifications to the Ministry |
United States | Corporate Transparency Act, as revised in 2026 | Certain foreign-formed registered entities only | No federal register for US-formed companies; verify ownership another way |
This content is provided for general informational purposes and does not constitute legal or regulatory advice.
AML and beneficial ownership requirements vary by jurisdiction, business type and regulatory status, and have changed materially in several markets since 2025.
Organisations should consult the applicable legislation, regulator guidance and qualified legal or compliance professionals where necessary.
How can compliance teams detect and manage shell company risk?
The objective is not to exclude shell companies from your customer base. That would rule out a large share of legitimate corporate structures and would create its own supervisory problems.
The objective is to establish whether the structure has a coherent commercial rationale, identify the natural person behind it, and calibrate controls to what you find.
The sequence below is an example workflow, not a mandatory regulatory procedure. Your own obligations depend on your jurisdiction, your licence and your regulator.
Map the structure: Obtain the full ownership chain, not just the immediate shareholder. Stopping at the first corporate layer is the most common failure, because that is precisely the layer the structure was built to present.
Identify and verify the beneficial owner: Apply both the ownership test and the control test. Ownership percentages can be engineered to sit below a threshold; control cannot be engineered away as easily. Where no natural person is identifiable through either test, most frameworks fall back to senior management, and that fallback should be documented rather than defaulted to quietly.
Test the commercial rationale: Ask what the structure is for, then check whether the answer matches the licence, the financials, the counterparties and the jurisdictions involved. A structure that nobody at the customer can explain is a finding in itself.
Screen the entity and every natural person identified: Directors, shareholders and beneficial owners, against sanctions, PEP and adverse media sources. Screening the company alone leaves the main exposure unchecked.
Decide, and record why: Proceed, apply enhanced due diligence, escalate internally, decline, or consider whether the circumstances require a report to your financial intelligence unit. Declining is not automatically the right answer; over-de-risking attracts its own regulatory attention. What matters is that the reasoning is written down and defensible later.
Keep it under review. Shell company risk frequently appears after onboarding rather than during it, when ownership changes, when dormancy ends, or when transaction behaviour diverges from the profile. Periodic review driven by customer risk rating and event-driven triggers catches what onboarding cannot.
For the process around business customers generally, see our guides to Know Your Business and checking whether a company is legitimate.
Where suspicion crystallises, our guide on reporting money laundering covers the next step.
Where technology helps with shell company risk, and where it does not
Technology is decisive on the mechanical parts of this problem and largely irrelevant to the judgement at the centre of it.
Traversing ownership layers, screening every identified party, detecting altered documents, watching for behaviour that stops matching the profile: all of that is repetitive, high-volume work where manual review runs out of time before it runs out of layers.
Deciding whether a structure has a genuine commercial purpose is a human call, and no platform makes it for you.
What a platform can do is make sure the call is made with the full picture.
Verify if a Company is Legit
Learn how azakaw's digital KYB solution verifies business identities, speeds up onboarding, and combats fraud by leveraging AI and machine learning.
Frequently asked questions
Is it illegal to own a shell company?
No. Owning a shell company is lawful. The offence lies in what the company is used for: concealing criminal proceeds, evading sanctions, defrauding counterparties or hiding assets from tax authorities.
Many people own shell entities for entirely ordinary reasons, including holding property, ring-fencing liability or preparing for a transaction.
What is the difference between a shell company and a holding company?
A holding company is defined by function: it holds shares in other companies or holds assets, and does little else. A shell company is defined by the absence of substance.
The two categories overlap heavily. Most holding companies are technically shells, but the term "shell" carries a risk connotation that "holding company" does not. The useful question is not which label applies, but whether the structure has a commercial explanation that stands up.
Do shell companies have to disclose their beneficial owners in the UAE?
Entities licensed on the UAE mainland and in commercial free zones must maintain registers of beneficial owners, shareholders and nominee management members, and file them with their licensing authority, under Cabinet Decision No. 109 of 2023.
The standard threshold is ownership or control of 25% or more of shares or voting rights, or the ability to appoint or dismiss a majority of directors. Entities in the financial free zones, DIFC and ADGM, follow separate frameworks. Confirm the current requirement with your licensing authority, since thresholds and filing procedures are subject to change.
Can a bank refuse to open an account for a shell company?
Banks and other regulated businesses apply a risk-based approach and may decline a relationship where the risk cannot be adequately understood or mitigated.
That is a risk appetite decision rather than a legal entitlement to refuse an entity type, and regulators have been clear that blanket de-risking of whole categories creates problems of its own.
In practice, most institutions will ask for more information first and decline only where the ownership or the rationale cannot be established.
How long does it take to identify the beneficial owner behind a shell structure?
It depends almost entirely on how many layers there are, which jurisdictions they sit in, and whether those jurisdictions maintain an accessible register. A two-layer domestic structure can be resolved from registry data quickly.
A five-layer structure spanning jurisdictions with restricted or unreliable registers may require information from the customer that takes weeks to obtain and corroborate, and may not be fully resolvable at all. This is the main reason shell structures work.
Conclusion
Shell companies are lawful and common, so the question is never whether an entity has operations. It is whether the structure makes sense: does the ownership chain resolve to a real person you can verify, does the stated business explain the money moving through the account, and can anyone at the customer explain why the structure exists.
Coherent answers make an empty entity unremarkable. No answers make the absence of substance a finding.
Four things worth checking in your own programme:
Do your reviewers go past the first corporate layer? That layer is what the structure was built to show you.
Do you run the control test, or only the 25% ownership test? Thresholds can be engineered around. Control is harder to hide.
Do you screen every director and beneficial owner, or just the entity? Screening the company alone leaves the main exposure unchecked.
Does your onboarding still assume a US federal beneficial ownership register exists? For US-formed companies, it no longer does.
Reach the natural person, screen everyone you find, keep the picture current, and record why you made the call. That is most of the job.
Shell companies video summary
Related articles
Sources
FATF: Guidance on Beneficial Ownership of Legal Persons (March 2023); https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Guidance-Beneficial-Ownership-Legal-Persons.html
FATF: Beneficial Ownership: Recommendations 24 and 25; https://www.fatf-gafi.org/en/topics/beneficial-ownership.html
United Arab Emirates: Federal Decree-Law No. 10 of 2025 on Anti-Money Laundering and Combating the Financing of Terrorism and Proliferation Financing; https://uaelegislation.gov.ae/en/legislations/3314/download
Central Bank of the UAE Rulebook: Federal Decree-Law No. 10 of 2025; https://rulebook.centralbank.ae/en/rulebook/federal-decree-law-no-10-2025-regarding-anti-money-laundering-and-combating-financing
UAE Ministry of Economy and Tourism: Cabinet Decision No. 109 of 2023 on the Regulation of Real Beneficiary Procedures; https://www.moet.gov.ae/documents/20121/0/Cabinet+Decision+109-2023+English+Version+06062024.pdf/f7138fc2-fe12-cef3-077b-b4c49c12eabd?t=1718181974877
United Arab Emirates: Cabinet Resolution No. 132 of 2023 on Administrative Penalties for Violations of Cabinet Resolution No. 109 of 2023; https://uaelegislation.gov.ae/en/legislations/2314
UAE Ministry of Economy and Tourism: UAE National Risk Assessment 2024: Practical Guide for DNFBPs; https://www.moet.gov.ae/documents/20121/0/UAE+National+Risk+Assessment+2024+-+Practical+Guide+for+DNFBPs+(1).pdf
Central Bank of the UAE — Sectoral Risk Assessment: Designated Non-Financial Businesses and Professions; https://centralbank.ae/media/w0sgbils/risk-assessment_dnfbp.pdf
Saudi Arabia Ministry of Commerce — Minister of Commerce Issues Ministerial Resolution Approving the Beneficial Ownership Rules (Ministerial Resolution No. 99, 05/06/1447H); https://mc.gov.sa/en/mediacenter/News/Pages/08-12-25-01.aspx
FinCEN: Beneficial Ownership Information Reporting; https://www.fincen.gov/boi
Federal Register — Beneficial Ownership Information Reporting Requirement Revision, final rule effective 14 August 2026; https://www.federalregister.gov/documents/2026/08/14/2026-16576/beneficial-ownership-information-reporting-requirement-revision
U.S. Department of the Treasury: FinCEN Permanently Ends Beneficial Ownership Reporting Requirements for Millions of Small Business Owners (11 August 2026); https://home.treasury.gov/news/press-releases/sb0603
