How to Update Bank Signing Authority and KYC After a Director Change in Sri Lanka

After a director change, Sri Lanka bank signing authority and KYC records usually require more than an email notification. You need to coordinate company registration changes, board authority, bank mandates, online banking roles and beneficial ownership information through one controlled checklist, subject to your bank’s document requirements and review outcome.

When head office has just approved a director change, it is easy to overlook the fact that the bank may still hold the former director, signatory or online banking approver on its records. A payment may be rejected, an online instruction may not be submitted, or the bank may request additional information. This is often not because the internal appointment was incomplete, but because different records have not been updated together. Many companies assume that once company registration records are updated, the bank will receive the change automatically. In practice, the company will usually need to submit documents and complete the bank’s own review process. Delays can affect supplier payments and payroll arrangements.

What should you map before contacting the bank?

What to do

Do not begin by asking the bank only how to replace a signatory. Identify every identity, record and permission affected by the change:

• Whether directors have been appointed, resigned or had their roles changed;
• Whether account signatories need to be added, removed, or moved to a different signing rule;
• Whether online banking maker, checker, approver and administrator roles need to be reset;
• Whether the account contact person, correspondence address, telephone number or email address needs updating;
• Whether beneficial owner, controller or authorised representative information has changed as a result;
• Whether the departing person still holds a banking token, online banking device, company seal or authority document.

Who is involved

Head office will usually confirm director appointments, authority limits and group approval rules. The Sri Lankan company’s management or company secretary can coordinate local corporate documents. The relationship manager or account maintenance team can explain the bank’s account-change documents and submission method. Where company registration, legal documents or company secretarial matters are involved, they should be handled by an appropriately qualified professional firm engaged for that purpose.

A common point of delay

The issue is often not a missing document. It is that the people described by head office as authorised representatives, the directors named in corporate records, and the signatories listed by the bank are not actually the same group. If those lists do not align, resolutions and bank forms may need to be redone.

How do you prepare the corporate documents for a director change?

What to do

Based on the company’s legal structure and constitutional arrangements, prepare corporate documents that explain the director change and the scope of authority. The documents should clearly show who has resigned, who has been appointed, who may submit information to the bank on behalf of the company, who may sign account-related documents, and how the old and new signing arrangements will operate during the transition.

If the director change requires a filing or update with the company registry, confirm the filing status and what evidence can be provided to the bank. Company registration requirements should follow the latest requirements published by the Department of Registrar of Companies.

Who is involved

A company secretary, legal adviser or other properly qualified professional firm can confirm the required form of corporate documents and registration matters. Head office provides the basis for appointments, the group authority chain and required signing support. The local team compiles versions suitable for bank review and keeps signed records.

A common point of delay

Cross-border groups often have a long authority chain. Board approvals, parent-company authorisations, local company resolutions and personal identification documents may come from different jurisdictions. Dates or name spellings may not match. If the bank identifies inconsistencies, it may request explanations or replacement documents.

What should you confirm with the account bank before submitting documents?

What to do

Before submitting anything, ask the account bank for its current requirements for changes to directors, signatories, online banking access and KYC information. The useful questions are more specific than simply asking for a document list:

• Does the bank require company registration changes to be completed before it will process account updates?
• What identity and address evidence is required from new directors, signatories and beneficial owners?
• Do company resolutions, powers of attorney, signature specimens or other corporate documents require a particular signing, witnessing, certification or translation arrangement?
• When will the former signatory lose access, and when can the new signatory operate the account?
• Are online banking user roles maintained separately from account signing authority?
• Is branch attendance, video verification or another identity verification process required?
• During the review period, what could happen to existing payments, payroll, recurring debits and supplier receipts?

Banks review documents through their customer due diligence and internal risk-management processes. For matters involving banking regulation or foreign exchange, refer to the latest information published by the Central Bank of Sri Lanka, while also following the account bank’s specific requirements for the relevant account.

Who is involved

One company-appointed project owner should coordinate communication with the bank. This helps prevent head office, local finance staff and individual directors from sending inconsistent versions of documents. A relationship manager may explain the submission channel, but document acceptance and the timing of updates remain subject to the bank’s internal process.

A common point of delay

Many companies ask about a change in signing authority but do not ask about online banking administrator access at the same time. The paper account mandate may then be updated while the former person remains in the online approval chain. Or a new director may become an account signatory but still be unable to approve an online payment.

How should you submit KYC and authority documents without losing version control?

What to do

Create a submission-pack index. For each document, record its version, signing date, signatory, purpose and submission status. The package will commonly cover company identity, director and authorised person identity, beneficial owner or controller information, business address, business activity description, source-of-funds or transaction-background information, and account authority arrangements. The bank’s written checklist determines the actual scope.

After submission, retain the bank’s acknowledgement of receipt, requests for further documents and versions accepted by the bank. If questions are raised, one responsible person should coordinate the response. Before replying, check that company registration information, head-office explanations and previously submitted documents are consistent.

Who is involved

A local finance or compliance coordinator is well placed to maintain the version register. Head office confirms group ownership, control relationships and business descriptions. An engaged professional firm can support corporate documents, legal documents or certification arrangements where needed.

A common point of delay

A frequent cause of rework is submitting ownership charts, director lists and authority documents from different dates or versions. Each item may appear acceptable in isolation. Taken together, however, they may not provide a consistent explanation of control. The bank may pause its review and ask for the package to be reorganised.

Why must old permissions be removed separately?

A director’s resignation does not necessarily mean that every bank-related permission has ended. In addition to account signing authority, review online banking login accounts, approval levels, administrator rights, SMS or email verification methods, physical tokens, custody of company seals, access to payment templates and the ability to receive bank notifications.

This is a common misunderstanding. A company adds the new director to the account and assumes the work is complete. The real issue is that granting a new permission and removing an old one are separate actions. If a former person remains in the payment approval chain, retains a verification device or continues receiving notices at a former email address, both internal control and business continuity may be affected.

Use separate columns for “add”, “change” and “remove” in the checklist rather than maintaining only a list of new signatories. For active payroll, supplier payments and recurring debits, also confirm who will initiate, review and approve payments during the transition. Keep any temporary arrangement in a written record.

How do you test the account after the update is confirmed?

What to do

Once the bank confirms an update, do not simply file the email. Within the company’s internal authority limits, verify that the new signatories appear in bank records, old permissions have been removed, online banking roles follow the internal approval matrix, payment notices go to the correct contacts and normal payment workflows can operate.

If the company has multiple accounts, accounts in different currencies or more than one online banking platform, check each account separately. An update to one account does not necessarily mean permissions for every other account have also been updated.

Who is involved

The finance lead carries out and records the test under the company’s internal approval arrangements. The project owner closes outstanding items on the change checklist. The bank confirms the scope of updates completed in its systems.

A common point of delay

A bank confirmation may only mean that one category of document has been received. It may not mean that all account permissions and online banking roles are active. Compare the bank’s confirmation against the original change checklist item by item instead of treating a general email as confirmation that all work is complete.

What internal records should be retained?

To avoid starting from scratch when directors or authorised representatives change again, retain the following records on an ongoing basis:

Record category	What to retain
Change checklist	The scope of changes to directors, signatories, online banking roles, KYC contacts and beneficial owner information
Corporate documents	Signed versions of appointment, resignation, authority and related corporate resolutions
Bank correspondence	Bank document lists, submission evidence, requests for additional documents and completion confirmations
Authority register	Signing rules, online banking roles, tokens and notification methods for each account
Transition arrangements	Payment responsibilities, backup contacts and approved temporary procedures during the review period

This content is provided for general information only and does not constitute legal, tax or immigration advice. Specific requirements should follow the latest guidance of relevant Sri Lankan authorities and appropriately licensed professional firms engaged for the matter.