Spanish AML/KYC, business activity, beneficial owners, and source of funds
Spain’s Law on the Prevention of Money Laundering and Terrorist Financing 10/2010 and its regulations require banks to conduct customer due diligence. SEPBLAC states that financial institutions may request additional documents based on risk; each institution decides which documents to request from which customers. Banco Sabadell’s privacy notice states that it collects and verifies information on customers’ economic activity and may consult the Central Register of Beneficial Ownership to verify the ultimate beneficial owner of a legal entity and address discrepancies in the register. The bank determines case by case, based on risk, what evidence of source of funds/source of wealth, UBO threshold, and documents are required for this application; no uniform list is provided on public pages.
Source:Sepblac — Frequently asked questions for obliged subjects ↗;Banco Sabadell — Detailed information on the protection of personal data ↗
CRS/AEOI tax-residency and tax-identification-number self-certification (Spain)
AEAT's official explanation of Form 289 sets out Spanish CRS due diligence: when opening a new account, a financial institution must obtain a valid tax-residency self-certification from the account holder and, where applicable, controlling persons, and check its reasonableness against AML/KYC information obtained at account opening. The self-certification includes the name/entity name, address, tax-residence jurisdiction and the tax identification number issued by each jurisdiction. AEAT explains that entity account holders must be classified, and that passive non-financial entities also require identification of controlling persons. This is the Spanish CRS baseline; it does not mean the US participates in CRS. US tax status is dealt with separately under FATCA rules.
Source:Agencia Tributaria — Form 289 CRS due diligence FAQs ↗
FATCA (Spain–U.S. information exchange, separate from CRS)
AEAT's Form 290/FATCA due-diligence FAQ explains that Spanish financial institutions identify reportable US accounts under the Spain–US FATCA agreement and request/report information such as US TINs from relevant US account holders or controlling persons. The fact that the US is not a CRS participating jurisdiction must not be presented as meaning that the US has joined CRS; US tax status must be assessed separately under FATCA/US rules. The specific forms, reporting conclusions and exemptions for this bank's customers must be verified by the bank under applicable rules.
Source:Agencia Tributaria — FATCA Form 290 due diligence FAQs ↗
EU financial sanctions and restrictive measures
The European Commission explains that EU financial sanctions and restrictive measures are binding within EU jurisdiction and may include asset freezes and economic restrictions. Banco Sabadell’s specific sanctions screening systems for customers/transactions, list coverage and process for handling matches have not been disclosed in the sources reviewed; this does not support the conclusion that any customer is necessarily authorised to transact.
Source:European Commission — Overview of sanctions and related resources ↗
Privacy and handling of account-opening information
Banco Sabadell’s personal data disclosure dated 2026-06 lists Banco de Sabadell, S.A. as the data controller and describes purposes including application/contract administration, AML due diligence, and beneficial-owner verification, together with the corresponding legal bases, citing the EU GDPR and Spanish data protection rules. Applicants should review the complete privacy notice before submitting information; this disclosure does not replace a case-specific review of terms on international data transfers or retention periods.
Source:Banco Sabadell — Detailed information on the protection of personal data ↗