The letter is short: “following a review of your application, we are unable to offer you a banking relationship.” No reason given. Most applicants then take the same file to the next bank and get the same answer. This is what happens inside the bank between submission and refusal — and why the second attempt usually fails the same way as the first.
On banks in Cyprus and Europe. Updated September 2026.
A bank has no duty to tell you what it did not like. Often it is not allowed to.
Here is why. Every bank has a team that checks customers for money laundering risk — this is the compliance department. If your application was stopped by them, the bank cannot legally tell you what raised the concern: that counts as tipping you off, and the bank itself would be answerable for it.
So assume you will not be told. You have to work it out yourself — from the questions you were asked, the documents you were asked to add, and the point at which everything stopped.
There is a reason for it, and it explains almost everything.
To move money in dollars, a Cyprus bank needs an account with a partner bank in the United States. Without one it cannot work in dollars at all. And that partner can end the relationship at any time if it decides the Cyprus bank is taking on customers who are too risky. This is exactly what happened in 2018: American banks began closing these relationships in bulk, and Cyprus banks had to review every customer they had.
Now look at it from their side. A new customer brings the bank a few hundred euros a year. The risk is losing the ability to work in dollars entirely. So in any borderline case the bank will decline. It is not about you personally — it is about their arithmetic.
In mid-2025 the Central Bank of Cyprus rewrote its customer due diligence rules, and the substance of the change is simple: banks now have to sort customers by risk level rather than apply the same effort to everyone. For an ordinary applicant with clear income it has become noticeably easier — fewer documents, copies accepted in more situations, previously verified data not requested again.
The same logic runs the other way, though. The attention freed up goes to whoever lands in the elevated-risk category: companies without real activity, multi-layered ownership structures, links to problem jurisdictions, crypto moved through unregulated venues. For that group scrutiny went deeper rather than lighter — up to a visit in branch or address confirmation by return correspondence.
If you are reading this article, you are probably in the second group.
The most useful thing to understand is this: nobody is assessing you. They are assessing the folder of documents you sent.
The person who signs off on your case has never met you and never will. In front of them sit the application form, a passport, papers about where your money came from, a description of the business, bank statements. And their job is not what most people assume. They are not looking for a reason to decline. They need to be able to justify the decision to an inspector two years from now, when they will have forgotten every detail.
If they cannot write one coherent sentence along the lines of “this client does this, the money came from there, expected turnover is that, and all of it is evidenced by these documents” — they will not sign. Not out of obstruction, but because they sign under personal responsibility.
Which gives the one rule that matters: your documents have to explain everything on their own. You will not be there.
“Consulting.” “Investments.” “International trade.” To a bank these are empty words. They give no idea what money will come into the account, or from where.
What is needed instead: who exactly you provide services to, under which contracts, where the counterparties are, where the money comes from and how often. One signed contract with a real customer removes more doubt than a page describing the business model.
If the company is registered in Cyprus while the director, the office, the staff, the customers and the decision-making all sit somewhere else, the bank has a fair question: why does this company need a Cyprus account.
The rule here is simple. A bank treats a company as an empty shell if it has nothing in its country of registration beyond a mailing address, or if it does no real business and cannot prove otherwise with documents. Premises means an office you own or rent, where somebody actually works. Paying a small fee to a firm that supplies an address and a nominee director does not count.
Exceptions exist, and there are several: a holding company with stakes in operating businesses with identifiable beneficial owners; a company holding real assets such as property, an investment portfolio or intellectual property; a group treasury function. But each of these has to be shown in documents, not asserted on a form.
This is where applications most often break, because two different questions are asked and many people answer only one.
The first: where the particular money you are putting into this account came from. On the form this is called source of funds.
The second: how you built up everything you own in the first place. This is source of wealth.
“Savings” answers neither. What works is a chain with evidence at every link: salary at a named employer from 2015 to 2022 — employment contract plus statements; sale of a property in 2021 — sale agreement plus the payment record; dividends — distribution resolutions plus tax returns showing the income was declared.
The rule is simple: every statement about money needs a document, and the documents have to add up to the figure you are claiming.
Tax residence says one country on the form, the utility bill shows an address in another, LinkedIn suggests a third, and the tenancy agreement a fourth. Compliance cross-checks all of it, and finds the gaps.
A contradiction is not in itself suspicious — people move, documents go out of date. The problem is that each discrepancy requires a clarification request, and clarification costs the bank time. By the third or fourth one, declining is cheaper than resolving.
Crypto is not a blanket prohibition, and that is worth stating plainly — the myth of an outright ban is considerably overstated. But dealings through unregulated venues sit in the elevated-risk category, which triggers deeper scrutiny automatically, with no ill will on the bank’s part.
In practice that means a traceable chain: when and on which venue the asset was acquired, against what fiat funds, where those fiat funds came from, and how the result was treated for tax. A wallet-screening report from an analytics provider helps considerably. Without any of it, refusal is close to automatic.
A closed account at another bank, a previous structure in an offshore jurisdiction, an earlier refusal you chose not to mention. Banks usually find out — through their own databases, through correspondents, through open sources.
The omission does more damage than the fact. A three-year-old refusal explained in a paragraph of a cover note is a workable situation. The same refusal surfacing in screening after you answered “no” ends the application.
Two million euros of projected turnover for a company with no staff, no premises and no signed contracts. Or the reverse: the form states no significant activity is expected, and a month after opening a large inbound payment arrives.
The second case is the more dangerous one. It does not produce a refusal at the door; it produces a freeze on a working account, which is a far worse position to argue from.
Recognise your own case? It can usually be turned around.
A refusal more often means “you did not explain it” than “you do not fit here”. The difference matters, because the first is fixable.
The first conversation is free. We work out what the bank caught on and whether a second attempt is worth making. If there is no realistic path, I will say so plainly. Going through the documents and building the file is paid work — I quote for it once I can see your situation.
Sending the same file to another bank. The most common reaction and the least useful one. Banks differ in risk appetite, but not in assessment criteria — those derive from the same directives. A file that failed to explain itself at one bank will fail at the next.
Looking for an intermediary with “contacts at the bank”. The decision is made by compliance, not by a relationship manager. A manager can speed up review and package the submission properly, which is real value. They cannot change the outcome, and a promise to the contrary says more about the intermediary than about the bank.
Simplifying the business description so as not to alarm anyone. This works in reverse. The less specific the file, the higher the risk rating assigned: for a compliance officer, unclear is always worse than complicated but explained.
Applying to every bank at once. Refusals accumulate and become part of your record. Three refusals in a month weaken your position at the fourth bank.
Work out the reason first. You will not be told it directly, but it can almost always be inferred: from the documents requested, from the questions that kept recurring, from the stage at which review stopped. Without this step, reapplying is a lottery.
Assemble a file, not an application. At the centre of it sits a short cover note of one or two pages: who the ultimate beneficial owner is, what the business does, where the money came from, what flows are expected, and why an account is needed here specifically. Everything else is documents, each one evidencing a particular statement in that note.
The purpose of the note is utilitarian: to hand the compliance officer wording they can carry into their own justification. You are doing the least pleasant part of their job for them, and it changes how the file is received.
Match the bank to the profile. Risk appetite varies substantially between institutions — by sector, by counterparty countries, by structure type. Selecting before applying saves both time and standing.
Close the weak points in advance. If there is something in the structure that will prompt a question, the question will be asked. Better to answer it in the cover note on your own initiative than to defend it after a request.
Besides banks there are payment companies, known as EMIs. These are licensed firms that give you an account with payment details, but they are not banks. They open faster and take cases a bank has turned down. It is a sound way to keep trading while a bank application runs.
The limits are worth knowing in advance. You will not usually get credit. There are often restrictions on currencies and on which countries you can pay. Your money is protected differently from a bank deposit: it is held separately from the firm's own money, but there is no state deposit guarantee on it. And some partners, larger companies in particular, will not accept EMI payment details.
So the sensible pattern is this: a payment account to trade now, a bank application running alongside it for the longer term.
A straightforward profile — Cyprus resident, clear income, no complex structures — takes two to four weeks.
A complex profile — several jurisdictions, crypto assets, an elevated-risk sector, a non-resident structure — takes one to three months, usually with two or three rounds of clarification requests.
Reapplying after a refusal always takes longer than the first attempt: on top of the usual pack, the earlier refusal itself has to be explained.
A refusal is not a verdict and not an assessment of your reputation. It is what happens when a file fails to explain itself to someone who does not know you and is not allowed to call you.
It is nearly always fixable. What is needed is to find where the explanation broke down, assemble the missing links, and reapply — to a bank that takes this kind of profile.
Rules and banking practice change. Everything here is stated as at September 2026.
This material is provided for information only. It is not tax, legal or financial advice and should not be treated as a recommendation to take any particular action.
Account opening decisions are made by the bank under its own internal procedures. No adviser can guarantee the outcome, and any promise of a guaranteed result is a reason to doubt the adviser rather than the bank.
The patterns described here generalise from practice and from published regulatory requirements. They do not replace an assessment of a specific situation: two cases that look alike can end differently because of details visible only in the documents.
Reading this material does not create a relationship between you and FinStudio. Rules and banking practice change, and individual points may differ by the time you get in touch.
Send the bank, the profile and the questions you were asked at submission. We work out where the explanation broke down, assemble what is missing and reapply — to a bank that takes this kind of case. The first conversation is free: we see whether a second attempt is worth making. The work that follows is charged separately.