How to Open Password-Protected GCC Bank Statements

1. Why banks password-protect e-statements

Banks in Qatar, the UAE, Saudi Arabia and the wider GCC commonly lock the monthly e-statements they send by email. Ordinary email does not guarantee that a message is encrypted all the way to the inbox, and a statement carries account numbers, IBANs, transaction history and often an address, so the PDF is protected with a document password.

2. What the password is commonly built from

Each bank sets its own rule. Banks commonly build the password from a personal detail they already hold, such as:

• Date of birth, as digits (for example 05111990 for 5 November 1990 in DDMMYYYY). Keep the leading zeros.
• An ID number: a national, civil or residence ID, in full or the last few digits.
• Card digits: the first or last few digits of the debit card linked to the account.

This is general knowledge, not a directory of banks, and it is not a promise about yours. If the email specifies a format, use exactly that format.

3. What Gulf banks say about it on their own websites

Where a bank says something about its statement password on its own website, it is quoted here with the link. A bank can change its rule without notice, so if your statement email says something different, the email is right.

Emirates NBD — account e-statements

Emirates NBD: "the e-Statement is password protected, and the password is the primary CIF ID. The CIF ID is the middle 8 digits of your account number." If it is refused, the same page lists the usual causes: a typing error, a space after the number, or the CIF of a different account. The rule is given for account e-statements; for a card statement, use the password the statement email gives. (Source: Emirates NBD: e-Statements.)

ADCB

ADCB says its e-statement service "is backed by robust encryption and is always password protected". It does not publish how the password is made; look in the email that delivered the statement, or ask ADCB. (Source: ADCB: e-Statement.)

First Abu Dhabi Bank (FAB) — account e-statements

FAB: "Your e-statement password is made up of the last four digits of your account number" followed by the day and month of your date of birth (DDMM) — for an account ending 1234 and a birthday of 1 February, the 8-digit password is 12340102. FAB's page states this for account e-statements; it does not cover card statements. (Source: FAB: Help and support.)

RAKBANK — credit card statements

RAKBANK: "enter last 4 digits of your credit card number and your date of birth as ddmm (as per your passport)" — for a card ending 1234 and a birthday of 16 September, 12341609. Letters and digits in lower case, no special characters. (Source: RAKBANK: How can I access my e-statement?.)

RAKBANK — account statements

RAKBANK: "enter first 4 letters of your account name and date of birth as ddmm" — for an account named Ramesh Singh and a birthday of 16 September, rame1609. If the first name is shorter than four letters, use it in full followed by the first letter of the second name. (Source: RAKBANK: How can I access my e-statement? (accounts).)

Emirates Islamic — account e-statements

Asked whether the e-statement is password protected, Emirates Islamic answers: "Yes, it is. In the email you receive, you will find instructions on how to access your e-Statement." It does not publish the rule on that page. (Source: Emirates Islamic: All about your account statement.)

Emirates Islamic — card statements

Of card e-statements it says: "Your e-statement will be sent to your registered email address by default." and "they’re password protected so no one but you can access them." (Source: Emirates Islamic: Your credit card statement.)

Abu Dhabi Islamic Bank (ADIB) — account e-statements

ADIB's notice says to "key in the first 4 letters of your name, (no spaces & lowercase), followed by the date, month and the last two digits of the year of your birth (DDMMYY)." Its examples: Mohammed Hamad, born 22-10-1974, is moha221074; Ali Ahmed, born 01-02-2001, is alia010201. The notice is about account e-statements; it does not cover card statements. (Source: ADIB: Your account e-statement password requirements have been updated (PDF).)

QNB

"Your E-Statement is secure as it requires a password to open or you have to login to download online using QNB Internet Banking." QNB does not publish the format on that page. (Source: QNB: Internet Banking.)

Qatar Islamic Bank (QIB)

"Receive password protected QIB e-statements directly in your inbox, with a frequency of your choice – daily, weekly, fortnightly and monthly." QIB does not publish the rule on that page. (Source: QIB: E-statement.)

Doha Bank

"You can also download password protected statements through Doha Bank website." The website's steps end: "Click on ‘Download’ for generating your password protected PDF statement." Doha Bank does not publish the rule on that page. (Source: Doha Bank: View and download statement.)

Converter pages for every bank covered, each with what that bank says about its statements: Emirates NBD, ADCB, First Abu Dhabi Bank (FAB), Dubai Islamic Bank (DIB), RAKBANK, Emirates Islamic, Abu Dhabi Islamic Bank (ADIB), Mashreq, Al Rajhi Bank, Riyad Bank, Alinma Bank, Saudi Awwal Bank (SAB), QNB, Commercial Bank of Qatar (CBQ), Qatar Islamic Bank (QIB), Doha Bank, National Bank of Kuwait (NBK), Kuwait Finance House (KFH), Bank of Bahrain and Kuwait (BBK), Bank Muscat, Bank Dhofar.

4. The way around it: download a fresh copy

A statement you download yourself from your bank’s app or website is often not password-protected, because you are already signed in. If the emailed copy will not open:

1. Sign in to your bank’s official mobile app or web portal.
2. Open the account and choose Statements or Documents.
3. Pick the date range and download it as a PDF or, if offered, a CSV.

Not every bank does this the same way, so if you cannot find the option, ask your bank how to get an unlocked copy. The statement download guide has the usual places to look.

5. How MyFulus handles a locked statement

If you convert a password-protected PDF with MyFulus and give it the password:

• The password is used once, on the server, to open the file and read its text.
• It is not stored, not written to any log, and not sent to the AI provider — only the statement’s text is.
• A wrong password costs nothing; a statement that did not open never uses up a conversion.

The password is the file’s own, not your online-banking login, which MyFulus never asks for. The full details are in the privacy policy.