A rejection is a diagnosis, not a conclusion.
Most foreign founders who receive a rejection from a Spanish bank make the same move immediately afterwards: they apply to the next bank on the list without changing anything.
This rarely works, and it compounds the problem. Spanish banks increasingly share compliance signals through internal risk systems and sector monitoring. A company that has been declined once and reapplies — to the same institution or a different one — without addressing the underlying issue is likely to meet the same outcome, with less room left afterwards.
The productive framing is the opposite. A rejection tells you something specific about how your company reads to a compliance department. Identifying that signal — not the stated reason, which is usually vague, but the actual concern — is the first step to resolving it.
Why banks rarely tell you the real reason.
Spanish banks operating under SEPBLAC oversight and Bank of Spain reporting requirements are legally constrained in what they may disclose about onboarding decisions. A compliance team that suspects a money laundering risk cannot say so. A bank that has flagged a UBO's country of origin as elevated risk will not put that in a letter.
What arrives instead is a generic communication, or a request for further documents that does not resolve anything when satisfied. That gap between the stated reason and the actual reason is where most founders get stuck: they supply the document that was asked for, the application is still declined, and nobody explains why.
The four real reasons behind most rejections.
In practice, refusals cluster around four areas — and most cases involve more than one at the same time.
01
Incoherent business modelThe activity declared in the Modelo 036 does not match how the business is described in the application, or how the expected flows look to the bank. A consultancy carrying manufacturing CNAE codes, a trading company that cannot name its suppliers, a digital business with no visible clients. Not illegal — unreadable. And an unclear picture is treated as a risk signal.02
Source of funds not documentedCapitalisation, even at the €3,000 minimum, needs a traceable origin. For non-resident founders the friction point is how money moved from the home country into Spain. Undocumented conversions, cash-based origins or capital from elevated-AML jurisdictions all need explicit documentary explanation. Not a moral judgment — an audit trail requirement.03
Governance and UBO exposureA company managed entirely from abroad, with a non-resident sole director and no visible local presence, raises the substance question. A structure that looks like a shell is treated as one until shown otherwise. The UBO's own profile matters too: FATF monitoring history, sanctions adjacency or politically sensitive backgrounds trigger enhanced due diligence regardless of the company's legal standing.04
Documents that disagreeThe escritura, the Modelo 036, the website, the application and the business plan should tell one story. When the declared activity differs between documents, when the director in the deed does not match the UBO declaration, or when the estatutos describe a different shareholder structure than the one presented, compliance flags the inconsistency and the file stalls. The five steps, in order.
Step 01
Diagnose before you reapplyReconstruct what the compliance team saw. Review the Modelo 036 for activity codes and VAT status, compare the escritura against the application for structural consistency, test the source of funds documentation for traceability, and assess the UBO profile against current risk classifications. If a gestoria handled the first application, ask exactly what was submitted and in what form — the problem is usually not missing documents but documents submitted without context.Step 02
Rebuild the KYC file as a narrativeA proper KYC file is not a folder of documents. It is an argument, supported by documents, that answers the compliance officer's questions before they are asked.Step 03
Address substance structurally, not cosmeticallyA registered address does not satisfy modern substance expectations. Where management sits entirely outside Spain, the effective response is a genuine local administrador who can interface with the bank, sign locally and represent the company. This only works if it is real — a nominal appointee who cannot answer basic questions about the business deepens the concern rather than resolving it.Step 04
Use an EMI as a bridge, not a destinationRegulated EU payment institutions provide IBAN accounts that receive payments, send transfers and hold euro while the main case is rebuilt. They are not a substitute for a Spanish banking relationship — no credit facilities, and treated differently in some compliance and tax contexts — but they keep the company operating. The point of the bridge is to buy time for the fix, not to justify a rushed second application.Step 05
Match the bank to the profileSpanish institutions differ meaningfully in risk appetite, in the strength of their international business units and in their experience with particular founder profiles and sectors. Applying to the best-known name is not a strategy. Submit only once the KYC file is complete, the narrative is consistent with every registered document and the source of funds traces end to end — submitting before that is the most common reason second applications also fail. The five questions your file has to answer.
Each of these should be answered in writing, not assumed to be self-evident from the corporate documents.
What compliance is actually asking
What does this company do?
1-2 page business model summary, in Spanish
Where does the revenue come from?
Expected counterparties and transaction volumes
Who controls it?
Organisational chart with the full UBO chain
Where did the initial capital originate?
Source of funds memo with supporting bank records
Why does this company exist in Spain?
Commercial rationale, stated plainly
The quality of that narrative is frequently the whole difference between a declined application and an approved one. A bank statement without an explanation of what it shows, or a business plan in English with no Spanish summary, is a document that has been supplied but not communicated.
What not to do.
Four ways to make it worse
Do not apply to several banks at once, or in quick succession.Each application leaves a compliance trace. A company reviewed and declined by several institutions in a short window generates its own risk signal.
Do not simplify the declared activity without updating the registrations.Changing the story to make it easier to tell, while the Modelo 036 still says something else, creates exactly the inconsistency that caused the first refusal.
Do not run company revenue through a personal account.This creates accounting, tax and compliance problems substantially harder to unwind than the original banking issue.
Do not assume the problem is the bank.In most cases the refusal reflects a real gap in how the company was positioned, not an arbitrary decision by one institution.
The takeaway
A rejection solved is a company that works.
A Spanish company that cannot bank is a company that cannot operate — but the path from refusal to a functioning account is defined and repeatable, provided the underlying issues are addressed rather than bypassed. The founders who resolve it treat the rejection as structural feedback, rebuild the case properly, and approach the second application with a file that answers every compliance question before it is asked.
General information on Spanish corporate banking practice, not legal or financial advice. Onboarding criteria vary by institution, by branch and by case, and no preparation guarantees an outcome.