In Bangladesh, “anyone can buy a stock of any company” via your platform only works if you sit squarely inside the capital-markets rules (or partner with someone who already does). Here’s the practical roadmap and the legal boxes you must tick.
1) Decide your regulatory posture (this drives everything else)
Model A — “Full-stack broker”
You obtain:
Stock Broker & Stock Dealer registration (with BSEC), plus a TREC with DSE and/or CSE.
Depository Participant (DP) status with CDBL to open BO accounts and settle client trades.
Implications
Highest control and revenue capture (brokerage + margin products later), but heaviest capital, tech, and compliance obligations.
You must build all controls: client-asset segregation, KYC/AML stack, OMS/RMS/Surveillance, DR/BCP, incident reporting.
Model B — “Aggregator via partner”
You do tech + marketing + KYC intake, and sign one or more introducing broker / white-label arrangements with licensed TREC brokers (who in turn have DP relationships).
Orders route to their OMS; custody sits with their DP; your app is the client front-end.
Implications
Fastest time-to-market.
You do not touch “dealing” or “custody” functions; you still need strong data, outsourcing, and fair-marketing compliance—plus very clear client disclosures.
Model C — “Alternative Trading Board (ATB)/SME focus”
Aggregate access to unlisted/alternative instruments admitted under ATB/SME frameworks through exchange rules.
Useful if your differentiator is private-market liquidity.
Still expect broker/DP engagement and exchange compliance on listing/trading/settlement rules for ATB securities.
Practical tip: Many startups begin with Model B (6–12 months), then transition into Model A once product–market fit and unit economics are de-risked.
2) Entity, capital, and core registrations
Company setup: Private limited company with suitable objects (capital-markets tech, brokerage, depository services, payments—keep the objects wide, but clean).
Tax: TIN, BIN (VAT), payroll registrations; accounting policy for brokerage income, interest on client balances, and pass-throughs (stamp duty, exchange fees).
Foreign investment: If you have foreign shareholders, ensure incoming FDI reporting and post-allotment filings.
Capital planning:
Paid-up capital for broker/dealer; working capital buffer to meet net capital balance rules + tech/security spend.
Ring-fenced client money accounts at approved banks with board-approved client money policy.
3) Licenses, memberships, and approvals (by model)
Bangladesh Bank permissions may be needed if you operate any wallet-like feature, pooled balances, or initiate payment instructions yourself (see Section 6).
4) Product scope and legal boundaries
Bangladesh-listed equity and debt: straight-through whole-share execution only.
Fractionalization: Avoid unless you structure a regulated collective investment scheme (CIS) or ETF-like vehicle. Otherwise you risk straying into “units” in a pooled vehicle.
Derivatives/margin: Offer only when explicitly allowed and your risk engine, disclosures, and capital are ready.
Unlisted/ATB/SME: Follow listing, disclosure, and investor-suitability rules applicable to those boards.
Foreign securities for residents: Plan conservatively. Cross-border equity investment by retail residents typically requires prior permissions under foreign-exchange controls. Viable pathways involve authorized dealer banks and specific approvals. A common sequencing is: launch domestic first → add research/education on foreign markets → later apply for cross-border permissions.
5) End-to-end client journey (what must be in place legally & operationally)
Best execution policy: define venues (DSE/CSE), order types supported, outages/incident playbooks.
Settlement: DVP through CDBL. Corporate actions flow (dividends, rights, bonus) must reconcile to each BO.
5.4 Communications & conduct rules
Fair, clear, not misleading: all marketing, push notifications, and in-app “nudges” must avoid promissory language or implied guarantees.
Research vs. marketing: If you push analyst notes, separate research from sales, disclose conflicts and methodologies.
6) Payments, wallets, and Bangladesh Bank perimeter
If your app creates a stored balance, allows peer-to-peer transfers, or operates rails beyond simple bank transfer into broker client accounts, you may fall into PSP (Payment Service Provider) and/or PSO (Payment System Operator) regimes. That means:
Licensing/approval with Bangladesh Bank,
Settlement accounts, reconciliation and float management rules,
Consumer fund safeguards, chargeback/error resolution processes,
Cybersecurity and incident reporting aligned to BB standards.
Low-friction path: avoid wallets early on—use bank transfers straight to the broker client money account, and show real-time balance fetched from broker back-office APIs. Add PSP/PSO later when you’re ready.
7) Governance, risk, and compliance (what good looks like)
Board-approved policies:
Client Money & Asset Protection
KYC/AML/CFT (with screening SOPs and alert handling)
Best Execution & Order Handling
Conflicts of Interest & Inducements
Outsourcing & Vendor Risk (cloud, KYC, analytics)
Information Security (ISO 27001-aligned controls; encryption at rest/in transit; key management; secrets rotation)
Incident Response & Cyber Reporting
Business Continuity & Disaster Recovery (e.g., RTO ≤ 2h for trading; tested quarterly)
10) Taxes, fees, and reporting (client-facing clarity)
Fee schedule should break out:
Brokerage commission (your fee)
Exchange fees, CDBL charges
Stamp duty/levies
Tax certificates: Integrate a module for annual gain/loss reports and any required tax withholding certificates (where applicable).
Disclosure cadence: trade confirms (T+0), monthly statements, corporate action notices, pricing methodology for illiquids or ATB instruments.
11) Marketing, growth, and compliance guardrails
Claims: no back-tested returns shown without methodology and warnings; no “guaranteed” or “risk-free” language; avoid gamified prompts that could be construed as inducing excessive trading.
Onboarding funnels: require users to complete risk disclosure acknowledgement before first order.
Promotions: referral bonuses only in compliance with inducement rules; no payment for order flow that conflicts with best execution (if any such arrangement exists, disclose and obtain explicit consent).
12) Common pitfalls (and how to avoid them)
Fractional shares without a CIS → restructure as whole-share only or create a regulated vehicle.
Wallet balances held on your books without PSP/PSO approval → keep funds at broker client money accounts; you show balances via API.
Ambiguous role in Model B → sign robust tri-party terms and make it crystal-clear to users who holds custody, who executes, and who they complain to for trade errors.
Vendor sprawl → keep a vendor register; run DPIAs (data protection impact assessments); contractually cap sub-processors.
Underinvesting in surveillance → build post-trade surveillance for wash trades, spoofing patterns, front-running flags for staff accounts.
13) 180-day execution timeline (practical)
Days 0–30
Incorporate; founders’ agreement.
Pick Model B partner(s); align on APIs, fee split, service levels.
Draft client documents and core policies; choose KYC and screening vendors.
Begin app/OMS integrations; design data model for orders, allocations, and BO holdings.
Days 31–60
Finish KYC flow (NID/face, screening, BO data capture).
Implement client money screens (only bank transfers into broker client account).
Build risk disclosures and acknowledgements into onboarding.
Controls: segregation of client assets; KYC/AML; surveillance; cyber; record-keeping; DR/BCP.
Conduct: fair communications; conflicts policy; research independence (if applicable).
16) Sample clause ideas (you can lift into your documents)
Client money & asset clause (plain English)
Your cash and securities are held in segregated client accounts with approved institutions. We will not use your assets for our own purposes. You may withdraw free funds at any time, subject to settlement cycles, security checks and any legal restrictions.
Best execution summary
We execute orders on recognized exchanges. We aim for the best possible result considering price, costs, speed, likelihood of execution and settlement, and market impact. You may set specific instructions; however, doing so may prevent us from achieving best execution on other factors.
Outage & incident notice
Trading systems may occasionally be unavailable due to maintenance or external events. If that occurs, we will notify you in-app and by email/SMS and provide alternative order channels where feasible. We are not liable for market movements during outages, except as required by law.
Conflict of interest
Our staff must not front-run client orders or misuse confidential information. Staff dealing is monitored and subject to pre-approval and post-trade surveillance.
17) Hiring plan (minimum team to run cleanly)
Compliance Officer (reg liaison + AMLCO function)
Ops Lead (settlement, reconciliations, corporate actions)
Legal Response Procedure to ACC, NBR, and CIC Joint Notice in Bangladesh
Responding to ACC/NBR Money-Laundering Notices
When served with a notice by the Anti-Corruption Commission (ACC) and tax authorities (NBR/CIC) under the ACC Act 2004 and the Money Laundering Prevention Act 2012, one must act carefully and promptly.
Under Section 26 of the ACC Act 2004, the ACC can order any person to submit a statement of assets if it believes some property is beyond legal income
Importantly, failure to comply (or giving false information) under this order is a criminal offence punishable by up to 3 years’ imprisonment or a fine
Likewise, the Money Laundering Act penalizes laundering proceeds of crime with 4–12 years’ jail and heavy fines (twice the value of the property)
. Thus, first steps should include:
Review the notice and legal basis. Identify exactly which sections of law are cited. For example, an ACC notice typically cites ACC Act s.26 (declaration of properties)
The Money Laundering notice may allude to MLPA s4 (defining the offence and punishment) or related provisions.
Gather documentation and evidence: Collect all records proving the legitimate source of any questioned asset: bank statements, contracts, investment documents, audit reports, etc. Also compile the tax returns and wealth disclosures. If the issue involves tax evasion, consider voluntarily rectifying filings or settling any outstanding dues with the NBR (e.g. under any available disclosure scheme). Administratively resolving tax issues first can strengthen party’s position.
Prepare a formal written reply: Under ACC Act s.26, the notice will specify a deadline (often 7–15 days). Submit a careful wealth statement and explanation by that deadline. Cite the law where relevant: for instance, note that you are complying with ACC Act S.26’s requirement to furnish information. Ensure all figures are accurate, as giving false statements can trigger penal provisions. If the party believes that the ACC’s grounds are unfounded (e.g. they have legitimate income sources), consider including that explanation and citing supporting documents.
Exercise the right to be heard: The ACC Act guarantees that if the Commission “considers it necessary to hear” a person in an inquiry, that person “shall be given a reasonable opportunity to be heard”
( If the ACC initiates a hearing or interview, the party should attend with legal counsel and present evidence and arguments. Record their questions and your answers carefully. Cooperating during the preliminary inquiry can help resolve misunderstandings early.)
Challenge unlawful procedure if needed: If the notice or investigation appears baseless or procedurally improper, you may file a writ petition in the High Court Division under Article 102 of the Constitution to protect your rights. Courts have intervened when ACC or investigating agencies act without cause. (No specific citation, but this is an established constitutional remedy.) Meanwhile, it is often safer to comply with legitimate orders while disputing any overreach through the courts.
Appeal Rights and Escalation
If the ACC proceeds to file charges or if the party is arrested/tried, note the appellate path: offences under the ACC Act and the Money Laundering Act are triable by Special Judges (under the Criminal Law Amendment Act 1958). An appeal from a Special Judge’s judgement lies to the High Court Division
In other words, if convicted, the party can appeal to the High Court (Division) on facts or law. If the High Court’s decision is adverse or if procedural relief is needed (for example, if bail was denied), the party may further seek leave to appeal to the Appellate Division of the Supreme Court (e.g. by a special leave petition under Article 136 of the Constitution). The government may also appeal an acquittal by a Special Judge.
In practice, this means any judicial order (conviction, acquittal, or bail order) can ultimately be reviewed by the Supreme Court’s Appellate Division, although only on points of law after High Court proceedings.
Expected Timeline
There is no fixed “quick” timeline for such cases; they often take years. Under ACC rules (not statutory deadlines), a preliminary inquiry should be done in up to 75 days and a full investigation in up to 270 days
. After that, if a case is filed, trial in a Special Judge’s court may stretch over 1–3 years (due to backlog). Appeals to the High Court and then to the Appellate Division add further years. For example, TBS reports that pending ACC inquiries and investigations routinely exceed these deadlines
The Money Laundering Act also allows courts to freeze and attach assets; if that occurs, you can apply for return of property within 30 days (MLPA S15) and the court must hear objections promptly
In sum, while the ACC Act aims for prompt initial inquiry, the full process (reply, investigation, trial, appeals) generally spans several years.
Mutual Legal Assistance (MLA) is the backbone of modern cross-border investigations. Whether the matter concerns financial crime, corruption, market abuse, cyber-enabled theft, or asset recovery linked to arbitration and judgment enforcement, MLA is the mechanism that allows evidence, testimony, and coercive measures to move between jurisdictions lawfully. For corporate clients, financial institutions, sovereigns, and high-net-worth individuals, understanding how, when, and where to deploy MLA—and how to resist it when overbroad—is critical.
Tahmidur Remura Wahid (TRW) Law Firm operates at the intersection of international criminal cooperation, civil fraud litigation, and arbitration enforcement. With teams in Dhaka, Dubai, and London, we advise both applicant states/authorities and private clients who are the target, subject, or collateral of MLA activity. We design strategies that are fast, defensible, and commercially focused—preserving privilege and business continuity while securing the evidence, restraint, and recovery outcomes that matter.
This is TRW’s practitioner-level, SEO-optimised guide to MLA in 2025 for decision-makers who need clarity and action.
What Is Mutual Legal Assistance (MLA)?
Mutual Legal Assistance is the formal, treaty-based process by which one jurisdiction requests help from another to obtain evidence, compel witness testimony, serve process, restrain assets, or execute search and seizure for use in criminal investigations or proceedings. In many systems, MLA also supports confiscation and enforcement following conviction (or, in some cases, non-conviction based confiscation).
Key features:
Treaty or Convention Basis: Bilateral MLATs, regional instruments, and multilateral conventions establish channels, grounds, and safeguards.
Central Authorities: Requests are usually routed through designated Central Authorities (e.g., Ministries of Justice, Home Offices, Attorneys General).
Judicial Gatekeeping: Many measures (search, seizure, restraint, testimony by deposition) require local court approval under the requested state’s law.
Dual Criminality & Proportionality: Common conditions include that the conduct is criminal in both states and that measures are proportionate.
Use & Confidentiality: Evidence is often limited to the stated purpose; onward sharing or use for other investigations typically needs consent.
Informal cooperation (police-to-police or regulator-to-regulator) operates alongside MLA for intelligence sharing and non-coercive assistance. It is valuable for speed and scoping but cannot replace judicially sanctioned powers.
Where MLA Fits in Your Risk & Response Map
For corporates and banks: Expect MLA touchpoints when your sector is subject to regulatory probes, sanctions/export controls inquiries, AML investigations, or whistleblowing allegations with cross-border data.
For individuals & executives: MLA may be used to obtain your testimony, records, or to restrain your assets pending foreign charges.
For states & public bodies: MLA is a core instrument to secure admissible evidence abroad and preserve value pending prosecution or confiscation.
TRW designs MLA strategies to advance your goals—whether that means initiating requests, narrowing intrusive measures, safeguarding privilege, or harmonising MLA with civil fraud, arbitration support, and asset recovery.
The TRW MLA Playbook: From Strategy to Execution
1) Scoping & Strategy
We map jurisdictional touchpoints (entities, servers, banks, fiduciaries, witnesses) and choose the legal path that best fits the case:
Formal MLA for coercive powers (warrants, depositions, restraint).
Informal channels for scoping and speed (deconfliction; regulator dialogue).
Parallel civil/arbitral tracks (freezing, disclosure) to complement MLA where speed is essential.
We then select the appropriate requesting or responding forum: Bangladesh, UAE (DIFC/ADGM & onshore), England & Wales, and—where needed—common offshore jurisdictions (e.g., BVI, Cayman) and Singapore.
2) Legal Grounds & Thresholds
We identify available instruments (bilateral treaties; multilateral conventions) and test:
Dual criminality (if required);
Specialty (use limitation);
Proportionality & least-intrusive means;
Privilege, privacy, and data protection constraints;
Human rights & fair trial concerns (where relevant to refusal/limitations).
3) Drafting & Advocacy
For outgoing requests, we draft precise, court-ready schedules: clear descriptions of offences, nexus, targeted evidence, time frames, and the legal need for each measure. For incoming requests, we defend or narrow scope, raise privilege and confidentiality, and manage deposition logistics and production protocols that protect business continuity.
4) Evidence Handling & Admissibility
We ensure chain of custody, authentication, certification, and translation meet admissibility standards of the receiving court—so your effort converts into usable, reliable proof.
5) Settlement & Business Outcomes
Where appropriate, MLA pressure can be calibrated to achieve de-risked resolutions (DPAs/plea agreements in some systems, compliance undertakings, remediation) that align with corporate strategy.
Bangladesh Focus: MLA in Practice
Bangladesh operates MLA under domestic legal frameworks informed by international cooperation norms and applicable conventions. In practice, MLA requests implicate:
Central Authority processing for incoming/outgoing assistance;
Court orders for intrusive measures (search/seizure, bank disclosure, depositions);
Restraint/attachment tools to preserve assets pending foreign proceedings or post-judgment enforcement requests;
Data & privacy safeguards and privilege review;
Arbitration interface: courts may grant interim measures in aid of arbitration domestically and recognise/enforce foreign awards—often paired with MLA-adjacent evidence pathways.
TRW’s Dhaka disputes and investigations teams work end-to-end: from drafting precise incoming/outgoing requests to representing corporates and individuals responding to foreign authorities while maintaining compliance and reputational control.
UAE Focus: DIFC/ADGM and Onshore Synergy
The UAE offers a dual-track advantage:
DIFC/ADGM Courts (common law, English language): excellent for coordinated depositions, disclosure, and interim relief that can sit alongside formal MLA, especially where multinational banks, custodians, or professional intermediaries are within reach.
Onshore Courts (Dubai/Abu Dhabi): indispensable for execution (bank accounts, property, shares) when MLA requests seek restraint, search, or seizure.
TRW sequences DIFC/ADGM speed with onshore execution and aligns MLA with civil freezing orders and third-party disclosure, particularly effective for financial services and crypto-adjacent investigations.
England & Wales: A Global Hub for MLA & Evidence
England is frequently chosen for MLA activity due to its:
Robust court powers for production orders, search warrants, and worldwide freezing orders (in civil contexts) that can complement MLA strategy;
Third-party disclosure routes that facilitate bank and fiduciary evidence;
Arbitration support and recognition/enforcement strength.
TRW’s London team navigates depositions at Magistrates’ Courts, challenges overbroad requests, and orchestrates compliant productions that preserve privilege, confidentiality, and specialty.
Informal cooperation (law enforcement cooperation) is valuable for:
Rapid intelligence and scoping;
Deconfliction between multiple authorities;
Non-coercive sharing and voluntary productions (subject to local law).
TRW often runs both tracks in parallel—informal for speed, formal for admissibility—with strict guardrails to protect against tipping-off, scope creep, and unintended use.
Core MLA Measures & How TRW Uses Them
1) Production & Disclosure Orders
Purpose: obtain documents, bank records, communications, corporate registers, KYC files. TRW’s approach: narrowly framed schedules tied to elements of offences; privilege protocols and staged production to reduce disruption.
Purpose: witness testimony for use abroad (including oath-based depositions in court). TRW’s approach: witness preparation, objection handling under local law, protective orders to shield confidential information, and logistics for interpreters/technology.
4) Restraint / External Freezing
Purpose: preserve assets pending foreign proceedings. TRW’s approach: evidence packages that establish traceability and risk; guarantees/cross-undertakings where required; integration with civil freezing to lock down value across forums.
5) Confiscation / Execution of Requests
Purpose: enforce confiscation after conviction or under qualifying non-conviction regimes. TRW’s approach: validate specialty limits, proportionality, and third-party rights; settlement architecture where appropriate.
■ Policy & Playbook: A written protocol for receiving and responding to MLA and informal cooperation requests, with points of contact and escalation steps. ■ Privilege & Data Maps: Clear records of where data sits (on-prem, cloud regions), who controls it, and what is privilege-protected. ■ Forensic Readiness: Pre-approved vendors and imaging plans to preserve chain of custody without paralysing operations. ■ Regulatory Interface: A consistent position for parallel regulator queries (banking, markets, AML, export controls). ■ Communications Plan: Internal and external messaging that avoids tipping-off and manages stakeholder expectations.
Individuals: Your Rights & Risks in MLA
Executives and employees may be asked to produce documents or give evidence. Common concerns include self-incrimination, privilege against disclosure, and professional confidentiality:
Compulsion vs Voluntariness: Understand when you are compelled and what protections attach.
Privilege: Legal advice privilege and litigation privilege remain critical—do not waive inadvertently.
Use Limitations (Specialty): Evidence given for one case should not be re-purposed without consent.
Travel & INTERPOL: MLA matters often intersect with INTERPOL notices and extradition exposure; plan your movements accordingly.
TRW provides witness-side support: preparation, safe-harbour protocols, and coordinated strategies with overseas counsel.
Post-Brexit UK–EU Cooperation: Practical Effects
The UK’s departure from the EU changed, but did not end, criminal cooperation. MLA now leans more heavily on Council of Europe instruments and bilateral arrangements, while certain tools (e.g., Joint Investigation Teams) remain accessible. Practically, this means:
Slightly longer timelines in some cases;
More challenge points for individuals and corporates resisting overbroad requests;
Continued workability for prosecutors who frame requests properly.
TRW leverages these changes to shape fair, proportionate outcomes—either to obtain necessary assistance or to narrow and condition requests.
Challenges & Grounds to Resist Overreach
Typical challenge points:
Defects in the Request: lack of specificity; fishing expedition; missing treaty basis.
Dual Criminality: conduct not criminal in the requested state.
Proportionality & Necessity: measures too broad or intrusive relative to the alleged conduct.
Privilege & Confidentiality: legal professional privilege, bank confidentiality (subject to court orders), and trade secrets.
Human Rights & Fair Trial: risk of torture, inhuman treatment, or fundamentally unfair proceedings may bar assistance.
Specialty: risk that evidence will be used for unrelated purposes without consent.
TRW’s defensive posture safeguards clients while cooperating lawfully where required.
Digital Evidence, Cloud, and Crypto: 2025 Realities
MLA now routinely seeks:
Cloud Data: email, messaging, collaboration platforms. Jurisdiction hinges on data location, controller presence, and service provider nexus.
On-Device Artifacts: mobile extractions, endpoint logs, encrypted stores (with legal limits on compulsion).
TRW integrates forensic standards with legal thresholds. We coordinate preservation letters to service providers, court applications to compel production, and civil tools (e.g., disclosure against exchanges) to accelerate outcomes.
Coordinating MLA with Arbitration & Civil Recovery
Although MLA is a criminal cooperation framework, real-world disputes often blend civil, regulatory, and criminal threads. TRW routinely synchronises:
MLA for evidence + civil freezing to lock assets quickly;
MLA for witness testimony + arbitration merits to keep awards on schedule;
MLA restraint + consent orders/settlement to convert leverage into recoveries.
Scenario A — Deposition in London for a Foreign Banking Probe
A CFO based in the UK receives a summons for a deposition at a Magistrates’ Court arising from a European MLA request into historical LIBOR-adjacent practices. TRW role: prepared the witness, ring-fenced privileged content, negotiated scope limitations, and ensured the record respected specialty and privacy obligations. Outcome: compliant testimony without operational damage; no waiver of corporate privilege.
Scenario B — External Restraint on UK Property for an Italian Corruption Case
A UK company’s funds and property face an external restraint order sought by overseas prosecutors. TRW role: challenged proportionality and third-party rights, offered targeted undertakings, and secured staged disclosure while preserving business liquidity. Outcome: narrowed order; safeguarded working capital; cooperation framework established pending trial abroad.
Scenario C — Bangladesh–UAE–UK Triangle in Procurement Fraud
A Dhaka-listed company identifies inflated invoices and siphoned payments routed via UAE intermediaries and UK nominee entities. TRW role: orchestrated Bangladesh MLA + DIFC disclosure with civil freezing in England; integrated forensic accounting with bank productions. Outcome: early settlement with asset-backed security and recovery of the majority of losses.
Scenario D — Crypto Diversion with Singapore and ADGM Touchpoints
Funds converted to stablecoins and routed through Asian exchanges. TRW role: preservation letters, ADGM orders targeting custodians, Singapore assistance for exchange records, civil disclosure against a payment processor. Outcome: partial coin return plus fiat repayment schedule; subsequent compliance overhaul.
Timelines & Cost Control
Informal cooperation: days to weeks, depending on regulator/law enforcement responsiveness.
Formal MLA: weeks to months (expedited where urgency and public interest are demonstrated).
Restraint measures: can be obtained quickly if risk of dissipation is well-evidenced; execution timelines depend on local courts and service providers.
Costing: TRW stages budgets by decision gates (Request/Response Strategy → Drafting/Challenge → Court Phase → Production/Deposition → Follow-on Measures). We explore hybrid fee models where suitable and ensure spend aligns to recoverability and risk mitigation.
Compliance, Specialty & Data Protection
Specialty means evidence delivered under MLA should be used only for the specified investigation or proceedings. We build controls that:
Restrict onward disclosure without consent;
Require return or destruction post-use;
Provide auditability in sensitive corporate or personal data cases.
Data protection is not a blocker but a design constraint. We align productions to local privacy law, use minimisation and pseudonymisation where appropriate, and put protective orders in place.
Boards & General Counsel: Governance After the Storm
Following a significant MLA event, TRW helps clients close the loop:
Root Cause & Control Gaps: independent review, enhanced internal controls, and training.
Policy Updates: data retention, legal hold, dawn-raid/MLA response manuals.
Key TRW Services in MLA & International Assistance
■ Outgoing MLA Drafting & Strategy — accurate, proportionate, fast. ■ Incoming MLA Defence — scope challenges, privilege, specialty, human rights, and proportionality. ■ Depositions & Evidence-Taking — witness prep, logistics, court handling. ■ External Restraint/Freezing — preservation of value pending foreign trials. ■ Informal Cooperation Management — law enforcement and regulator dialogue aligned to legal risk. ■ Digital/Cloud/Crypto Evidence — end-to-end legal-forensic handling. ■ Parallel Civil & Arbitration Support — freezing, disclosure, and award enforcement. ■ Governance & Remediation — post-event reforms and regulator assurance.
Frequently Asked Questions (GC/Head of Litigation)
Q1: Do we have to comply immediately with any MLA request that arrives? No. The request must be lawful, precise, and proportionate under the requested state’s law. Many measures require court authorisation. TRW rapidly evaluates validity, negotiates scope, and seeks protective orders where needed.
Q2: Can we refuse to provide privileged materials? Yes. Legal professional privilege is strongly protected. Where privilege disputes arise, courts often use independent counsel or special masters to review contested materials.
Q3: What about self-incrimination? Compulsion standards vary by jurisdiction. We assess whether use/derivative use immunity applies and tailor responses accordingly.
Q4: Can evidence be used for other purposes later? Only if specialty terms allow it or if consent is granted. TRW insists on express use limitations and monitors compliance.
Q5: How do we coordinate MLA with ongoing civil litigation or arbitration? Very carefully. We harmonise tracks to avoid inconsistency and to maximise leverage (e.g., combining MLA evidence with civil freezing to pressure settlement while preserving criminal case integrity).
Q6: What if our data sits in the cloud or abroad? Location and control both matter. We design collection and production that meets local law and the receiving court’s admissibility standards without breaching privacy rules.
Q7: Can MLA help us restrain assets quickly? Yes, in many systems. We often pair MLA restraint with civil receivership or freezing orders to ensure comprehensive coverage.
Illustrative (Generic) Case Studies
The Cross-Border Treasury Probe
A FTSE-listed group’s treasury desk is under scrutiny abroad. The foreign authority seeks email archives, trader chat logs, and pricing models. TRW actions: staged production plan through MLA with privilege logging; negotiated minimisation for personally identifiable information; coordinated voluntary regulator updates to reduce surprise raids. Outcome: admissible evidence produced; regulatory goodwill; no operational outage.
The Export-Controls Matter with Deposition Risk
A dual-use goods exporter faces overseas criminal proceedings; MLA seeks depositions from Dhaka engineers and London compliance staff. TRW actions: witness education, protective orders for trade secrets, consolidated deposition calendar to limit business disruption. Outcome: precise testimony; no leakage of proprietary algorithms; parallel settlement discussion progressed.
The Offshore Fiduciary Trail
A family office alleges misappropriation through offshore SPVs. TRW actions: outgoing MLA to obtain registered-agent files; in parallel, disclosure applications in a common-law hub to compel professional trustees; linked civil freezing in England. Outcome: documentary spine obtained; assets ring-fenced; settlement with asset-backed guarantees.
How We Start: Day-One Checklist
■ Confirm engagement & privilege. ■ Issue litigation holds and suspend routine data deletion. ■ Identify systems & custodians (email, finance, messaging, cloud). ■ Decide formal MLA vs informal (or both). ■ Prepare court-ready affidavits and schedules. ■ Secure forensic vendors and create chain-of-custody plan. ■ Align communications (internal/external) to avoid tipping-off.
TRW can deploy a rapid-response team within hours across Dhaka, Dubai, and London.
1–4 weeks for preservation; 4–12 weeks for records
Coin return + fiat plan; compliance uplift
Arbitration award with parallel criminal fraud case
Multiple
MLA restraint; recognition/enforcement
Pair MLA with civil freezing; consent-award settlements
Varies by forum (weeks–months)
Award monetised; future breaches deterred
Conclusion
Mutual Legal Assistance is no longer a narrow prosecutorial channel—it is a strategic enterprise tool for corporates, financial institutions, sovereigns, and executives navigating a world of borderless data and capital. Deployed correctly, MLA unlocks admissible evidence, preserves assets, catalyses settlements, and ensures that complex cross-border matters do not stall at the water’s edge. Defended intelligently, MLA requests can be narrowed, conditioned, or resisted to protect privilege, privacy, and proportionality.
TRW Law Firm brings the discipline of white-collar defence, the speed of civil asset protection, and the precision of arbitration enforcement to every MLA mandate. From Dhaka to Dubai to London—and through aligned offshore partners—we make international assistance work for you.
If you have received an MLA request, need to initiate one, or must coordinate civil/arbitration proceedings with criminal assistance, speak to our team today. In cross-border cases, hours matter.
Asset Tracing & Fraud Recovery — TRW Law Firm’s International Playbook (Dhaka • Dubai • London)
Executive Summary
Fraud moves fast. Recovery must move faster. Tahmidur Remura Wahid (TRW) Law Firm acts as your global command-centre for fraud investigations, cross-border asset tracing, freezing and disclosure orders, strategic negotiations, and ultimate enforcement—both in Bangladesh and across key financial hubs such as the UAE and the UK. With a multidisciplinary team spanning disputes, financial services, corporate investigations, and international arbitration, we pair urgency with precision: preserving assets within hours, surfacing hidden holdings, coordinating multi-jurisdictional actions, and converting wins into real-world recoveries.
This article sets out our complete, practitioner-level guide to fraud and asset recovery. It is written for banks and funds, high-growth companies and listed corporates, family offices and sovereign entities, and for senior executives who must decide—quickly—how to protect enterprise value when fraud strikes.
Why TRW Law Firm for Fraud & Asset Recovery?
Sector-proven, globally aligned
TRW’s dispute resolution and investigations bench marries courtroom excellence with commercial pragmatism. Our lawyers have acted for and against financial institutions, conglomerates, technology platforms, state-owned enterprises, and UHNW principals. We regularly lead matters that require immediate protective relief (freezing/search orders, receivership, gagging orders), parallel civil-criminal regulatory strategy, and coordinated enforcement of court judgments and arbitral awards across multiple jurisdictions.
Speed with controls
In fraud litigation, velocity is not optional. Our internal rapid-response protocols (client triage, evidence preservation, interim-relief decisioning, and cross-border tasking) are designed to initiate within hours. We operate playbooks for Bangladesh courts, the DIFC/ADGM in the UAE, and the English courts—each offering powerful interim measures and disclosure tools that can be sequenced, stacked, and harmonised.
End-to-end: from red flags to recovery
Winning on liability is not the finish line—real recovery is. We run the full arc: intelligence-led tracing, targeted interim relief, disclosure compulsion, coordinated negotiations, settlement architecture, and forced execution (charging orders, receivership over shares, seizure of moveables/immoveables, garnishment, and recognition/enforcement of foreign awards and judgments).
Our clients choose TRW because we think like investigators, litigate like strategists, and execute like operators.
What Counts as Fraud? (And Why Definitions Matter)
Fraud is a legal conclusion based on facts that indicate deceit, misappropriation, or unlawful gains. In practice, we see patterns across:
The label matters because it determines remedies, burdens of proof, disclosure scope, limitation periods, and insurer response. Our first triage frames the right causes of action—fraud, dishonest assistance, knowing receipt, conspiracy, breach of fiduciary duty, unjust enrichment, conversion, deceit—and secures the remedies that move assets into reach.
The TRW 72-Hour Rapid Response Framework
When the call comes in, our objective is simple: stabilise, preserve, and position for recovery. Our first 72 hours typically follow this cadence:
1) Crisis triage & litigation map
Pinpoint loss vectors, counterparties, accounts, structures, and jurisdictions.
Identify fast-moving risks: cash flight, crypto tumble-dries, nominee transfers, and destruction of records.
Fix the litigation theatre: Where can we obtain the earliest, widest, and stickiest relief? (Bangladesh, DIFC/ADGM, England, BVI/Cayman, Singapore—selected for speed, service out, and cooperation.)
2) Preservation orders & interim relief
Freezing injunctions / asset preservation orders (domestic and worldwide) to restrain dissipation.
Search & seizure (search orders) where there’s a real risk of evidence destruction.
Receivership (over assets, shares, or proceeds streams) to actively manage and ring-fence value.
Gagging orders to prevent tipping-off while we move.
3) Evidence lockdown
Forensic imaging of devices and mailboxes; secure collection of ERP/accounting servers and logs.
Litigation hold notices to relevant employees and managed service providers.
Chain-of-custody protocols to ensure evidential integrity.
4) Asset intelligence & jurisdictional strategy
Corporate and land registries, beneficial-ownership gateways, shipping/aviation registers, UCC/charges, and public filings.
Open-source intelligence (OSINT), structured data analytics, and data room builds.
Sequencing multi-court filings: lead versus support jurisdictions; dovetailing injunctions to avoid conflicts.
5) Settlement pressure & negotiation posture
Push for early, enforceable settlements with verified asset pools and payment security (escrows, charges, confessions of judgment, consent awards).
Use calibrated publicity and regulator touchpoints (where appropriate) to create transaction pressure.
Jurisdiction Toolkits at a Glance
Bangladesh • UAE (DIFC/ADGM & Onshore) • England & Wales • Common Offshore (BVI/Cayman) • Singapore
Below is a practitioner-level overview. We tailor to facts and speed.
Bangladesh
Civil tools:
Injunctions restraining asset transfers and attachment before judgment under the Code of Civil Procedure for imminent dissipation.
Anton Piller-like evidence safeguards via court-supervised inspection and seizure, crafted to local procedure.
Third-party disclosure through court orders against banks/account-holders and relevant intermediaries.
Criminal & regulatory levers:
Money Laundering Prevention Act mechanisms; working with local agencies to freeze/prohibit transactions.
Cyber/digital evidence requests and lawful interception support (where authorised).
Arbitration enforcement:
Recognition and enforcement of foreign awards under Bangladesh’s arbitration framework and New York Convention obligations; coordinated interim relief in aid of arbitration.
Onshore courts can complement with local execution on assets situated within the Emirates (bank accounts, real property interests, shares with local custodians).
Bridging strategy: Use DIFC/ADGM for speed and international service/out-of-jurisdiction recognition and onshore courts for execution—particularly effective when banking flows or brokerage accounts are UAE-centred.
England & Wales
Worldwide Freezing Orders (WFOs); Search Orders; Bankers Trust and Norwich Pharmacal-type disclosure (via third parties mixed up in wrongdoing).
Section 44 Arbitration Act support for arbitrations (emergency relief, evidence preservation).
Section 25 CJJA interim relief in support of foreign proceedings.
Robust service out and cross-border enforcement pathways, extensive third-party disclosure culture.
BVI / Cayman (and other offshore)
Agile interim measures (including freezing relief supporting foreign proceedings) and information orders against registered agents, banks, and professional intermediaries.
Receivers over shares in holding vehicles—powerful where operating assets sit in onshore subsidiaries but control sits offshore.
Recognition of foreign orders/awards; court-directed disclosure to unwind nominee and trust layers.
Singapore
Mareva relief (domestic and worldwide), strong arbitration support, and bank disclosure routes.
Effective hub for Asia-Pacific asset flows and shipping; alignment with English-style evidence rules in many contexts.
The Core Remedies You Will Hear Us Recommend
Freezing injunctions (Mareva)
Purpose: restrain dissipation of assets pending judgment or award. Scope: domestic or worldwide, often with ancillary disclosure of asset location and value. Use: bank accounts, shares, receivables, realty, crypto wallets, vessels.
Search orders (Anton Piller)
Purpose: preserve evidence at risk of destruction; court-supervised entry to secure documents/devices. Use: internal conspiracies, departing executives, falsified accounting, “clean-up” attempts.
Purpose: compel third parties “mixed up in” wrongdoing (e.g., banks, platforms, exchanges) to disclose information for tracing. Use: account identifiers, KYC packs, IP logs, transactional trails, exchange order books.
Receivership (assets / shares / proceeds)
Purpose: active control of the value; maintain businesses, capture dividends/receivables, sell assets under supervision.
Gagging / non-notification orders
Purpose: prevent tipping-off to preserve surprise and asset integrity while orders bite.
Security for costs / proprietary claims
Purpose: shift costs risk; assert proprietary rights to ring-fence assets above unsecured creditors.
Recognition & Enforcement
Purpose: localise foreign judgments and arbitral awards; flip paper wins into cash. Tactics: attach receivables, charge shares, seize high-value movables, block exits (e.g., yachts, aircraft), intercept payment streams.
Emergency letters to exchanges (preservation/gagging) followed by court compulsion.
Bridging between private keys, custodial accounts, and fiat off-ramps for ultimate monetisation.
Managing Parallel Tracks: Civil, Criminal, Regulatory, and Arbitration
Fraud rarely respects silos. We frequently coordinate:
Civil claims for freezing relief, disclosure, damages, proprietary remedies.
Criminal complaints to trigger investigatory powers and restraining orders.
Regulatory notifications (banking, securities, AML supervisors) where leverage is needed.
Arbitration (institutional or ad hoc) when contracts carry arbitration clauses—often paired with court interim relief to secure assets pending an award.
The art is alignment: deploying each track to enhance—not undermine—the others, avoiding estoppel landmines, and maintaining settlement optionality.
Many clients prefer a fast, quiet, and certain recovery to a long, public fight. We structure settlements that are hard to breach and easy to enforce:
Escrows & stepped payment schedules with default triggers.
Confessions of judgment / consent awards for rapid enforcement if there’s a miss.
Asset-backed guarantees (charges over shares/realty, pledged receivables).
Cooperation covenants for continuing disclosure and assistance in asset monetisation.
We validate assets, ring-fence value, and match jurisdiction to collateral for maximal leverage.
Inside a TRW Matter: Sample (Anonymised) Scenarios
Names below are generic, per client confidentiality. They illustrate how we coordinate cross-border relief.
1) The Vanishing Vendor (Bangladesh–UAE–UK)
Client: Dhaka-listed industrial group. Problem: USD 18m prepayments to a foreign vendor vanished; funds layered through UAE brokerage and UK nominee vehicles. Play: Emergency injunction in Bangladesh (restraint + disclosure); DIFC preservation order aimed at UAE broker records; Section 25-style interim relief in England for third-party disclosure; receivership over BVI holdco shares. Result: Recovery pathway secured against broker receivables and a London property holding company; 72% cash recovery in nine months; consent award locked in remaining payments.
2) The Rogue Treasurer (UK–EU–Bangladesh)
Client: Bangladeshi bank; internal fixed-income desk loss. Problem: Falsified marks; off-market trades with friendly counterparties; asset flight to EU accounts. Play: WFO in England; Bankers Trust disclosure from correspondent banks; targeted criminal complaints in Dhaka to trigger restraint; cooperation with EU MLAs; settlement backed by charges over UK residential assets. Result: Majority recovery with interest; disciplinary and criminal outcomes aligned; message sent to market.
3) The “Tech” Investment Scheme (UAE–Singapore–Offshore)
Client: Family office in Dubai. Problem: USD 40m lost to “pre-IPO” shares; suspect wallets received stablecoins; funds washed through Asia. Play: ADGM freezing relief + gagging to secure exchange data; Singapore disclosure orders; on-chain analytics mapping; receivership over offshore SPVs; parallel negotiation with beneficial owners through their professional trustees. Result: Return of coins + fiat repayment schedule; residual enforcement against a Singapore apartment portfolio.
Governance, Insurance & Board-Level Duties
Fiduciary & oversight duties
Boards must document reasonable steps to prevent, detect, and respond to fraud: proportionate controls, independent investigations, and timely disclosures. Failure to act can create separate liability.
D&O and crime insurance
Policy wording matters. We navigate notice triggers, fraud exclusions, insured-versus-insured carve-outs, and advancement of defence costs. We align pleadings and relief to avoid prejudicing cover while maintaining recovery velocity.
Whistleblowing & retaliation
Proper escalation channels and no-retaliation policies preserve evidence and reduce litigation risk. TRW designs whistleblowing frameworks that integrate legal privilege and investigative readiness.
Inside the Courtroom: How Judges View Fraud Applications
Interim relief is extraordinary. Courts demand:
Good arguable case on the merits.
Real risk of dissipation (not mere insolvency risk).
Full and frank disclosure on without-notice applications.
Cross-undertaking in damages from the applicant (be ready).
Proportionality and clear scope: define assets, set disclosure steps, limit collateral damage to innocent third parties.
We build evidential dossiers that anticipate judicial concerns, especially on service out, jurisdiction anchors (e.g., assets or defendants within reach), and comity with foreign proceedings.
Bangladesh Focus: Practical Pathways to Relief
Interim injunctions can restrain transfers and preserve status quo; attachment before judgment can intercept disposals where there’s a credible risk of evasion.
Bank disclosure is often achievable through targeted applications identifying accounts, branches, and transaction windows.
Arbitration support: where contracts send parties to arbitration (local or foreign), courts can be engaged for interim protective measures to ensure an eventual award is not rendered hollow.
Criminal coordination: Particularly for money-laundering, forged instruments, or cyber-enabled theft, working with designated agencies can produce rapid restraints that supplement civil relief.
TRW’s Dhaka disputes team is tightly integrated with our Dubai and London teams to add offshore and common-law firepower when needed.
UAE Focus: Speed, Recognition, and Execution
DIFC/ADGM: preferred hubs for quick global freezing orders, English-language filings, tech-friendly service, and extensive recognition networks.
Onshore: the place to execute—bank accounts, real estate, company shares.
Bridging: Obtain interim measures in DIFC/ADGM, then recognise/enforce onshore to bite on local assets.
Crypto-adjacent: The UAE’s exchanges and custodians respond to well-crafted preservation requests and court orders; time is the enemy—move first.
England & Wales: The Global Asset-Protection Engine
For global frauds with UK nexus—banking channels, nominee directors, luxury property, or simply because English orders travel well—England offers:
WFOs with teeth, often paired with immediate asset disclosure.
Search orders and third-party disclosure that can crack open entire structures.
Support to arbitrations (even foreign-seated) and interim relief for foreign proceedings. The UK can also be an optimal forum for compelling global professional services providers (banks, accountants, administrators) to produce documents that map the money.
Working With Investigators & Forensic Specialists
We regularly integrate with forensic accounting and corporate intelligence teams to:
Build asset maps in weeks, not months.
Construct chronologies and transaction trees that withstand judicial scrutiny.
Run recovery economics to choose the most profitable pursuit paths (jurisdiction × asset × time).
TRW leads strategy, frames legal thresholds, guards privilege, and ensures evidentiary materials are court-ready.
Costs, Funding & Economics
Budgets with endpoints
We scope phases (triage, interim relief, disclosure, settlement/enforcement) with costed endpoints and decision gates. You will know what you will spend—and why.
Funding options
Contingency / hybrid fees where appropriate.
Third-party funding for meritorious claims with sizeable recoverability.
ATE insurance to de-risk adverse costs in certain fora.
Our test is recoverability: spend must be justified by the probability-weighted value of assets we can actually capture.
Common Pitfalls (And How We Avoid Them)
Delay kills: Evidence goes stale; assets migrate. We mobilise immediately.
Over-broad orders: Invite discharge on proportionality grounds. We calibrate relief precisely.
Tipping-off: Ill-timed letters or internal leaks destroy surprise. We use gagging orders and limited circles.
Jurisdiction clashes: Competing orders create stalemate. We sequence actions and respect comity.
Paper wins: Judgments without execution plans are theatre. We design for enforcement from day one.
Governance Upgrades After the Fire
Post-incident, we help clients harden the system:
Fraud-risk assessment and control redesign.
Enhanced vendor onboarding, beneficial-owner verification, and data analytics on payables/receivables.
Segregation of duties, treasury controls, and trade-based money-laundering detection.
Board reporting templates and incident playbooks tested by tabletop exercises.
Prevention is the best recovery.
How to Engage TRW on Day 1
Call our rapid-response line and appoint us as counsel for civil/criminal/regulatory tracks.
Q1. Do I need to prove fraud now to get a freezing order? No—you need a good arguable case and credible evidence of real risk of dissipation. Full and frank disclosure is essential on without-notice applications.
Q2. Can we get information from banks or exchanges if they are not defendants? Yes—through third-party disclosure routes (jurisdiction-specific), especially where the third party is innocently “mixed up” in the wrongdoing or holds trust/confidence information such as banking/transaction records.
Q3. We have an arbitration clause. Does that slow us down? No. Courts in key hubs (including Bangladesh, UAE common-law courts, and England) can grant interim relief in support of arbitration, including foreign-seated proceedings. We frequently run arbitration merits in parallel with court protective orders.
Q4. What if assets are held through offshore trusts and layered nominees? That is normal in modern fraud. We use receivership over shares, disclosure against registered agents/trustees, and proprietary claims to penetrate layers.
Q5. Can crypto be frozen? Yes. Courts increasingly grant orders aimed at wallets, exchanges, and identifiable on-chain holdings. We pair court orders with exchange preservation and analytics to trace and capture.
Q6. How long will recovery take? Timelines vary. With early freezes and cooperative counterparties, settlements can occur within months. Contested multi-jurisdictional matters can run longer, but interim measures preserve value while we litigate or arbitrate.
Q7. What will this cost? We stage budgets by decision gates and may arrange hybrid/funder solutions where appropriate. Our focus is recoverability and net value to the client.
Internal Resources You May Find Helpful
International Arbitration & Enforcement (how TRW converts awards to cash and localises relief): see our arbitration pages at tahmidurrahman.com for strategy notes and case studies.
(Our wider disputes, corporate and investigations teams integrate seamlessly across time zones to deliver 24/7 coverage.)
Engagement Models
Rapid-response mandate (pre-approved filings + on-call counsel): ideal for banks and listed companies.
End-to-end recovery mandate (from triage to enforcement): single accountability, clear KPIs.
Co-counsel with international firms: we frequently “quarterback” Bangladesh/UAE elements in global litigations and act as lead or local counsel in England, DIFC/ADGM, BVI/Cayman and Singapore via our network.
Monitorship & remediation packages: post-incident governance upgrades audited to international standards.
The TRW Advantage in One Page
Speed: injunctions and preservation inside critical windows.
Range: civil, criminal, regulatory, and arbitration synergy.
Reach: Dhaka, Dubai, London, and the key offshore courts that truly matter.
Results: negotiated outcomes backed by enforceable security, or judgments/awards converted into cash.
If you have even a suspicion that assets are being siphoned or hidden, contact us today. Minutes matter.
Summary Table: Tools, Tactics & Timelines
Scenario
Primary Relief / Tool
Likely Jurisdictions
Evidence Needed Early
Typical Timeline to First Relief
Recovery Pathways
TRW Role
Funds in flight from Bangladesh vendor fraud
Injunction + attachment before judgment; third-party bank disclosure
Bangladesh (civil), DIFC/ADGM (support), England (disclosure)
Contracts, bank advices, emails, shipment docs
48–96 hours
Settlement with secured instalments; execution on UAE/UK assets
Lead filings in BD; coordinate UAE/UK relief; settlement design
Senior employee siphoning via related parties
Search order + freezing; internal imaging; HR actions
Bangladesh; England/Singapore (if assets or data hosted abroad)
London: 330 High Holborn, London WC1V 7QH, United Kingdom
For immediate assistance on a live fraud or asset tracing situation, call us now. Our rapid-response team will mobilise within hours.
About TRW’s Cross-Border Disputes & Investigations Practice
TRW Law Firm is a full-service, technology-enabled international practice built for high-stakes matters. We combine elite advocacy with forensic acumen and sophisticated project management. From Bangladesh to the UAE and the UK, and across the key offshore jurisdictions that matter, we protect value, neutralise threats, and deliver recoveries that stick.
Every fraud is different, but the disciplines that drive successful recoveries are the same: move early, cut precisely, compel disclosure, preserve leverage, and execute ruthlessly. TRW brings that discipline to your matter—today.
Buy or Sell an IT Services Company in the UAE — A Complete Legal & Deal-Making Guide (TRW Law Firm)
The UAE’s digital economy is moving at a blistering pace. From sovereign-backed smart city programs and fintech sandboxes to enterprise cloud migration and AI adoption, technology has become the operating system of business. For founders, investors, and strategic buyers, IT services—managed services, cybersecurity, cloud, devops, software development, data & AI, and IT consulting—sit at the heart of this transformation. That is why transactions involving IT services companies (greenfield set-ups, acquisitions, carve-outs, and exits) are accelerating across Dubai, Abu Dhabi, and the major Free Zones.
This guide by Tahmidur Remura Wahid (TRW) Law Firm distills what you really need to know—commercially and legally—to start, buy, or sell an IT services company in the UAE, while staying compliant and preserving value. It is deliberately practical, written for operators and dealmakers. Every checklist here reflects what we actually negotiate and close for clients across the UAE, London, and Dhaka.
Who we are: TRW Law Firm is a cross-border corporate, M&A, technology, and regulatory practice with teams across the UAE, Bangladesh, and the UK. We advise founders, corporates, and funds on market entry, licensing, growth equity, and full/partial exits in tech and services. For related insights and to speak with our team, visit tahmidurrahman.com (internal link).
Why IT Services Transactions in the UAE Are Different (and Attractive)
Demand is broad-based and recurring. Banks, insurers, logistics majors, hospitality groups, retail conglomerates, healthcare chains, and public agencies now buy IT as a service—producing sticky, multi-year contracts with expansion potential.
Customers prize local presence. Even global buyers prefer a partner that can deliver onshore with UAE visas, WPS-compliant employment, and locally managed service desks.
Free Zone optionality. Jurisdictions such as Dubai Internet City (DIC), Dubai Silicon Oasis (DSO), IFZA, RAKEZ, ADGM, and DIFC offer streamlined licensing and 100% foreign ownership—powerful for acquisitions and bolt-ons.
Multiple exit paths. Trade sales to regional groups, buy-and-build platforms backed by private capital, and founder secondaries are all live options.
Three Market Entry Paths—Start, Buy, or Sell (and When Each Makes Sense)
1) Start a New IT Services Company (Greenfield)
Best if you:
Want to control culture, delivery quality, and gross margins from day one;
Have secured anchor clients or a distribution alliance;
Need a license bundle tailored to a specific niche (e.g., security operations, IT consultancy, cloud migration, managed helpdesk).
Key decisions
[■] Mainland vs Free Zone.
Mainland (e.g., Dubai’s Department of Economy & Tourism licensing) suits firms targeting onshore government contracts, multi-emirate field support, and broad B2B services.
Free Zones (e.g., DIC, DSO, IFZA, RAKEZ, ADGM/DIFC for common-law jurisdictions) offer 100% foreign ownership, simplified compliance, and efficient office/visa packages. Some free zones also streamline share transfers—important for future exits.
[■] License scope. Choose categories aligned to actual services: IT consultancy, computer systems & communication equipment software trading, information technology network services, cybersecurity services (where eligible), data processing/hosting, management services, etc. Align your scope of activity with your contracts, insurance, and talent model.
[■] People & visas. Plan staffing against visa quotas, mandatory WPS payroll, MoHRE compliance (for mainland), and emiratisation where applicable. Include offer letters, compliant employment contracts, robust IP assignment, confidentiality, and non-solicit provisions.
[■] Banking & finance ops. Open a corporate bank account, put in place KYC/UBO documentation, and design client cashflow (retainers/milestones) before onboarding.
[■] Tax & compliance. Account for VAT (5%) on qualifying supplies, corporate tax where applicable, Economic Substance Regulations (ESR), and Ultimate Beneficial Owner (UBO) filings. Choose a bookkeeping cadence (monthly/quarterly) that supports VAT and vendor payments.
[■] Data & cybersecurity posture. Implement data processing agreements (DPAs), incident playbooks, and access controls. This reduces enterprise procurement friction and strengthens valuation.
Typical greenfield timeline (efficient run)
Name reservation & initial approvals: 3–7 business days
Incorporation & license issuance: 1–2 weeks (varies by zone)
Establishment card, visas, bank account: 2–6 weeks (parallel-path where possible)
2) Buy an Existing IT Services Company (M&A buy-side)
Best if you:
Need immediate revenues, client logos, pre-qualified vendor status, and experienced delivery teams;
Lower ramp time; established SLA frameworks and billing cadence; vendor registrations you may otherwise wait months to secure.
Risks to underwrite
Contract change-of-control, IP ownership gaps, open-source license compliance, key-person dependencies, and under-priced legacy SLAs.
3) Sell Your IT Services Company (Founder/Shareholder Exit)
Best if you:
Reached scale and want a strategic premium;
Seek a partial exit with growth capital; or
Wish to pivot to a product or different geography.
Valuation drivers
Net retention on managed service contracts;
Gross margin consistency;
Churn and customer concentration;
Depth of delivery management (reduces key-person risk);
Partnership tiers (e.g., cloud hyperscalers) and certifications.
Regulatory & Legal Foundations You Must Get Right (Before Anyone Signs)
Whether starting, buying, or selling, this stack is non-negotiable:
A. Licensing & Corporate Structure
[■] Choose jurisdiction (mainland vs targeted free zone) to match sales model, visa needs, and customer procurement. [■] Draft a Memorandum of Association (or equivalent), secure license activities aligned with services, and maintain share registers to ease diligence and future share transfers.
B. Employment & Immigration (Visas)
[■] Ensure WPS compliance, offer letters, probation policies, IP assignment and confidentiality, and post-termination restrictions tailored to UAE law. [■] For acquisitions, map employee transfers, unused leaves, gratuity accruals, and visa cancellations/re-issuance timeline.
C. Data Protection & Security
[■] Maintain DPAs, data inventories, role-based access, and customer-facing security summaries (SOC2-equivalent practices if applicable). [■] In sector-sensitive deployments (e.g., healthcare, financial services), track on-prem vs cloud obligations and data residency promises made in contracts.
D. Intellectual Property & Software
[■] Assign all IP (code, documentation, integration logic, test suites) to the company from employees and contractors. [■] Audit third-party code and open-source usage for license compatibility. [■] Confirm software escrow terms for critical client deliverables, where agreed.
E. Finance, Tax, and Compliance
[■] VAT registration if thresholds apply; ensure invoice formats and SLA descriptors match licensed activities. [■] Maintain clean trial balances, AR aging, and WPS proofs—acquirers will request them. [■] Track UBO, ESR, and annual filings for the relevant authority/free zone.
F. Commercial Contracts
[■] Standardize MSAs, SOWs, SLAs, acceptance criteria, limits of liability, caps, indemnities, IP clauses, DPA, subcontracting rules, and termination for convenience/cause. [■] Catalogue enterprise vendor registrations and framework agreements—they are key assets in a sale.
The Deal Playbook — Buying an IT Services Company in the UAE
Stage 1 — Origination and Screening
[■] Mandate your buy-side advisor and legal counsel (TRW) with a clear brief: geography, service lines, revenue/EBITDA range, gross margin, customer mix. [■] Source targets across mainland and free zones; request teasers and CIMs. [■] Sign NDAs that preserve your ability to look at competing targets.
Stage 2 — Valuation & Term Sheet (LOI)
[■] Apply triangulated valuation: revenue multiple for fast-growing managed services, EBITDA multiple for stable portfolios, and DCF for projects with predictable pipelines. [■] Draft LOI/term sheet with: structure (share vs asset deal), headline price, earn-out logic, working capital normalisation, exclusivity, and key conditions precedent.
Stage 3 — Due Diligence (Where Most Value Is Won or Lost)
Net revenue retention, cross-sell/upsell evidence;
Churn root causes;
Customer concentration risk;
Pipeline verification.
Red flag examples
Undocumented code and no IP assignment from contractors;
Unpriced scope creep on fixed-fee projects;
Customer data stored offshore contrary to contract;
Auto-renewals that roll at unprofitable rates;
Key person who controls the only major client relationship.
Stage 4 — Documentation (SPA/APA, Ancillaries)
[■] Choose share purchase (default in UAE for services) vs asset purchase (if ring-fencing liabilities/IP). [■] Representations & warranties: corporate authority, financial statements, tax, IP, data security, employment, litigation, licenses. [■] Indemnities: tailor for IP infringement, data/security incidents, pre-completion tax, and undisclosed liabilities. [■] Earn-outs & retention: link to gross margin or net revenue retention to deter revenue “buybacks”. [■] Key employment: retention/vesting schedules, non-solicits, option refresh. [■] Third-party consents: landlords, banks, key customers, vendor partner programs. [■] Regulatory approvals: any sectoral notices and merger control assessments (if thresholds are relevant to the parties’ UAE market shares). [■] Free zone transfer mechanics: align on authority forms, notarisation, and updated registers.
[■] Completion deliverables: updated share registers, director/manager appointments, resignations, bank mandates, IP assignment deeds, employee transfer letters, visa road-map. [■] Communications plan: reassure top clients about continuity and escalation contacts; announce partner benefits (expanded bench, certifications). [■] 90-day PMI: harmonise pricing, tooling, and SLA management; rationalise vendor contracts; launch cross-sell motions.
The Deal Playbook — Selling Your IT Services Company in the UAE
Step 1 — Pre-Sale Readiness (3–8 weeks)
[■] Clean books (AR aging, revenue recognition, WPS, VAT support). [■] Contract hygiene: secure renewals, document change-of-control, standardise SLAs, fix IP assignment gaps. [■] People: confirm gratuity accruals, refresh confidentiality, tighten customer non-solicit. [■] Data & security: put in place a concise security overview and DPA exhibit—reduces buyer queries.
Step 2 — Go-to-Market (2–6 weeks)
[■] Prepare a Teaser and CIM (confidential information memorandum) focusing on: service lines, customer cohorts, net retention, gross margin, delivery governance, and certifications. [■] Run a tight NDA process; invite strategics and financial sponsors.
Step 3 — Management Presentations & Bids
[■] Present delivery leadership, solution architects, and project governance—not just founders. [■] Encourage structured bids (price + structure + earn-out) and request mark-ups against your SPA to flush hidden deal friction early.
Step 4 — Exclusivity, DD, and SPA Finalisation
[■] Lock exclusivity only when price and structure are clear. [■] Drive diligence Q&A through a data room checklist that mirrors what buyers need; update the disclosure letter as facts evolve (avoid surprises at signing). [■] Net working capital benchmarks: agree a peg that reflects seasonality in billing cycles.
Step 5 — Signing, Completion, and Transition
[■] Time customer announcements to reduce churn risk; align account managers early. [■] Offer founder consulting or management continuity for 6–12 months to preserve relationships and earn-out performance.
Mainland vs Free Zone: Making the Choice Strategically
Mainland (e.g., Dubai)
Broadest ability to contract across the UAE public and private sectors;
Subject to MoHRE and WPS for employment;
Attractive for field support and multi-emirate service delivery.
Free Zones (e.g., DIC, DSO, IFZA, RAKEZ, ADGM, DIFC)
100% foreign ownership with streamlined company secretarial;
Efficient share transfer formalities (helps future exit velocity);
Visa and office packages aligned to tech teams;
DIFC/ADGM common-law frameworks can be helpful for governance, courts, and English-law-style documentation (particularly in cross-border deals).
Practical tip: map where your clients are headquartered, how vendor registrations work in their procurement portals, and what on-site SLAs you must meet. Choose the jurisdiction that shortens sales cycles.
Contract Architecture That Protects Value (and Increases Multiples)
Master Services Agreement (MSA) with modular SOWs to add/remove services without re-negotiating boilerplate.
Service Level Agreement (SLA) with clear uptime/response/resolution metrics and service credits (cap the credits).
Data Processing Agreement (DPA) that mirrors your security posture; define sub-processors and breach notification windows.
IP Clauses preserving your background IP while assigning foreground IP per project logic; consider license-back where you need reusable accelerators.
Price adjustment mechanics (indexation or tiered discounts) to protect margin erosion in long contracts.
Change-of-control clause: avoid automatic termination; prefer notice + cure or right to request assurances.
Limitation of liability balanced across direct vs indirect losses, with separate caps for data/IP risks if demanded.
People Strategy Is Deal Strategy
Key employee matrix (project managers, solution architects, client success leads) with retention and incentive plans.
Bench management and subcontractor policy to avoid margin leakage; document approval workflows.
Training & certifications roadmap aligned to vendor partner tiers (Microsoft/AWS/security vendors).
Remote & hybrid policies that still meet on-site SLA obligations.
Cybersecurity & Data: From Selling Point to Deal Breaker
Maintain a crisp, shareable security overview: identity management, endpoint protection, patch cadence, backup policy, DR runbooks, logging & monitoring.
Be explicit about hosting locations, data residency, and how you segregate client environments.
If you operate a SOC or provide MSSP services, document tooling stack (SIEM/EDR), use cases, escalation paths, and evidence retention.
Valuation: How Buyers Actually Price IT Services in the UAE
Benchmark ranges vary with growth, margin, and concentration risk. Sellers should prepare for structured consideration: upfront cash + earn-out (tied to net retention/gross margin) + management incentive plans.
Cross-Border Considerations with TRW (Dubai • London • Dhaka)
Group structuring for roll-ups: UAE OpCo with HoldCo in a friendly jurisdiction; inter-company licensing of accelerators and brand IP.
English-law governed SPA with local execution mechanics (often smooth in DIFC/ADGM contexts).
Dual compliance on data flows where Bangladesh delivery teams support UAE customers; align DPAs, transfer mechanisms, and sub-processor notices.
Banking and FX planning for multi-currency billing (AED, USD, GBP), VAT handling, and corporate tax forecasting.
Case-Style Illustrations (Anonymised)
Case A — Cloud Managed Services Bolt-On in Dubai Free Zone A regional group sought immediate cloud managed services capability. TRW ran a two-track search, shortlisted three targets, and closed a share purchase in a Dubai free zone within 70 days. We ring-fenced pre-completion tax, structured a 24-month earn-out on net revenue retention, and fixed code ownership via IP confirmations and contractor novations. Post-merger, NRR improved by 14% in the first year.
Case B — Founder Exit with Retained Equity A 40-person cybersecurity boutique with strong gross margins sought liquidity. TRW cleaned WPS/VAT trails, standardised DPAs, and renegotiated three change-of-control clauses. We ran a targeted auction to both strategics and sponsors; the winning bid was cash + 18-month earn-out + 10% roll-over equity in the platform. Churn over the first year post-close was <3%.
Buyer’s Legal and Commercial Checklist (Shortform)
[■] Target’s license scope and free zone mechanics [■] Share ledger and prior transfers [■] Top 20 contracts: term, renewals, SLAs, pricing, CoC [■] AR aging; revenue recognition; unbilled WIP [■] DPAs, security posture, and incident logs [■] IP chain of title; OSS compliance [■] Employees: visas, WPS, gratuity; key-person mapping [■] Tax & filings: VAT, corporate tax posture, ESR/UBO [■] Litigation/disputes; termination notices [■] Vendor programs and certifications (proof)
Seller’s Preparation Checklist (Shortform)
[■] Clean financials (monthly TB, AR, VAT returns) [■] Standardise MSA/SOW/SLA and DPA exhibits [■] Cure IP assignment and contractor gaps [■] Renew/extend key clients; document pipeline [■] Draft a crisp CIM; map data room to buyer diligence [■] Identify consents (landlord, bank, key customers) [■] Decide deal structure (share vs asset) and tax view [■] Prepare disclosure letter as a living document
Timelines You Can Actually Use
Greenfield set-up: 2–6 weeks to operational readiness with visas started
Buy-side process (target known): 8–14 weeks to complete (with decisive governance)
Sell-side structured auction: 10–16 weeks (including readiness and buyer management)
Speed is a function of data room quality, authority processing, and consent timing (landlords/banks/key customers).
Common Pitfalls (and TRW Solutions)
Undisclosed subcontracting → tighten MSAs/SOWs; disclose and novate where needed.
Vendor program gaps → accelerate certifications, align partner status pre-close.
Off-contract work eroding margins → implement change order muscle.
Shadow IT in customer environments → codify boundaries in SOWs and DPAs.
Earn-out disputes → define metrics precisely, include audit rights and neutral expert language.
For a deeper conversation or to request a transaction roadmap tailored to your goals, see tahmidurrahman.com (internal link).
FAQs
Q1. Can a foreign shareholder own 100% of a UAE IT services company? Yes—commonly via Free Zones that allow 100% foreign ownership. On the mainland, foreign ownership is also widely permissible, but you should align license activities and any residual local participation or regulatory nuances with your sales model and target customers.
Q2. Should I buy shares or assets? Most UAE services deals are share purchases (SPA) because customer/vendor registrations and staff visas are easier to preserve. Asset deals (APA) are useful for ring-fencing liabilities or isolating service lines. TRW will model tax, consent, and operational impacts for both.
Q3. What multiple should I expect? It depends on managed services share, gross margins, NRR, concentration, and partner tier. Growth-oriented managed services firms command higher ranges than project-heavy agencies. Structure (earn-outs/retention) often lifts headline value.
Q4. How long will a sale take? With good readiness and responsive buyers, 10–16 weeks is realistic. Consents (landlords, banks, key customers) are often the pacing item.
Q5. What documents do buyers ask for first? Company license and registers, last three years’ financials, VAT returns, top 20 contracts, DPAs/security overview, employee/visa summary, and pending disputes list.
Structured Summary Table (For Easy Reference)
Topic
What to Decide
Core Documents
Authority / Venue
Typical Timeframe
TRW Tips
Market Entry
Mainland vs Free Zone; license scope; office/visa model
Name reservation, MoA/Articles, license application
DET/Mainland or selected Free Zone
1–2 weeks to license
Map choice to customer procurement and on-site SLA needs
Greenfield Ops
Banking, VAT, payroll/WPS, DPA/security
Board resolutions; bank KYC; VAT registration; WPS setup; DPAs
Bank; FTA; MoHRE/WPS; Free Zone
2–6 weeks overall
Parallel-path bank, visas, and VAT for speed
Buy-Side M&A
Share vs asset deal; price & structure
NDA, LOI, SPA/APA, disclosure letter, IP assignments
Free Zone registrar or mainland authority; notarisation as needed
8–14 weeks
Tie earn-out to NRR/gross margin; secure CoC consents early
Sell-Side Prep
Financial tidy-up; contract hygiene; IP cures
CIM, data room index, updated MSAs/DPAs, contractor novations
N/A (pre-market)
3–8 weeks
A tidy data room adds real basis points to valuation
People & Visas
Key talent plan; transfers; retention
Employment contracts, transfer letters, gratuity summary
MoHRE/WPS (mainland); Free Zone portals
2–6 weeks (parallel)
Lock key persons with incentives; document visas & accruals
Privacy & Security
DPA posture; sub-processors; incident plan
DPA exhibit; security runbook; access policies
Customer audits (as applicable)
Ongoing
A clear 2-page security summary shortens enterprise cycles
Tax & Compliance
VAT/corporate tax posture; ESR/UBO filings
VAT returns; ESR/UBO filings; TB/FS
FTA; relevant authorities
Monthly/quarterly cadence
Align invoice descriptions with licensed activities
Post-Close PMI
Pricing, tooling, SLA governance
Integration plan; comms playbook
Internal + key customers
90 days
Protect margins; announce expanded capabilities
Work With TRW Law Firm
TRW combines deal execution with tech-sector insight. Whether you plan to set up, acquire, or exit, we build a transaction path that preserves customers, protects IP, and scales value.
