What Counts as a Financial Institute in the UAE?

What Counts as a Financial Institute in the UAE?

If you're setting up shop in the UAE and someone told you that you need a "financial institute" licence — pause. The term gets thrown around loosely, but under UAE law it has a specific meaning that determines who regulates you, how much capital you need, and whether you can operate at all.

Quick answer

In the UAE, a financial institute (more accurately, a "financial institution") is any entity licensed to carry out regulated financial activities — banking, lending, investment, insurance, brokerage, money exchange, or payment services. Which regulator you answer to depends on where you sit. Onshore, that's the Central Bank of the UAE (CBUAE) or the Securities and Commodities Authority (SCA). Inside the Dubai International Financial Centre (DIFC), it's the Dubai Financial Services Authority (DFSA). Inside Abu Dhabi Global Market (ADGM), it's the Financial Services Regulatory Authority (FSRA). Same word. Three very different rulebooks.

The legal definition

The governing text onshore is Federal Decree-Law No. 14 of 2018 on the Central Bank and the Organisation of Financial Institutions and Activities. Article 65 lists the "Licensed Financial Activities" — and this is the list that actually matters. It covers taking deposits, providing credit, currency exchange, money transfer, stored value, payment systems, virtual banking, arranging finance, custody, and financial consultation among others ^[1].

If your business does any of those, you're a financial institution. Not a trading company. Not a consultancy. A regulated entity.

The Central Bank issues the licence. It also sets minimum capital, fit-and-proper tests for shareholders and directors, and ongoing reporting obligations. Skip any of that and you're operating unlawfully — which under Article 137 of the same Decree-Law carries penalties up to AED 10 million and possible imprisonment ^[1].

Onshore vs DIFC vs ADGM

This is where people get confused, honestly.

Onshore UAE. CBUAE regulates banks, exchange houses, finance companies, and payment service providers. SCA regulates securities firms, fund managers, and crypto-asset service providers under Cabinet Decision No. 111 of 2022 ^[2].

DIFC. A financial free zone with its own civil and commercial law based on common law. The DFSA licenses everything from Category 1 banks down to Category 4 arrangers under the Regulatory Law DIFC Law No. 1 of 2004 ^[3]. Base capital ranges from USD 10,000 for a Cat 4 firm to USD 10 million for a Cat 1 bank.

ADGM. Same idea, different regulator. The FSRA operates under the Financial Services and Markets Regulations 2015 ^[4]. Prudential categories mirror the DFSA's structure roughly, but the detail differs.

A DIFC or ADGM licence does not let you solicit onshore UAE clients without additional CBUAE or SCA approval. Most people miss this until they get a warning letter.

What you actually need to set one up

Rough sequence for an onshore financial institute:

1. Decide the activity — from the Article 65 list.
2. Reserve a trade name and get initial approval from the relevant economic department.
3. Submit the CBUAE licence application with a business plan, three-year financial projections, ownership chart, source-of-funds evidence, and fit-and-proper forms for every controller.
4. Meet the minimum paid-up capital. For a finance company it's currently AED 150 million; for an exchange house, AED 2 million with tiered increases based on activities ^[5].
5. Get provisional approval, then complete premises, systems, AML framework, and hire licensed senior staff.
6. Final licence issuance.

Realistic timeline: 9 to 18 months. Anyone promising 3 months is selling you something.

Watch out: the "financial services" grey zone

Loan brokering. Payment aggregation. Crypto OTC desks. Buy-now-pay-later platforms. Robo-advisory apps.

All of these have been treated as regulated financial activities by CBUAE or SCA at some point in the last three years, even where founders assumed they were building a "tech" product. The rule of thumb: if money moves through you, or if you're advising on where money should go, assume you need a licence until a regulator confirms otherwise in writing.

For deeper reading on related regulatory categories, see our civil law category.

Need this checked for your situation? Talk to a UAE-licensed lawyer →

Citations

^[1] Federal Decree-Law No. 14 of 2018 on the Central Bank & Organisation of Financial Institutions and Activities — CBUAE, https://www.centralbank.ae ^[2] Cabinet Decision No. 111 of 2022 on the Regulation of Virtual Assets and their Service Providers — SCA, https://www.sca.gov.ae ^[3] DIFC Regulatory Law, DIFC Law No. 1 of 2004 — DFSA, https://www.dfsa.ae ^[4] Financial Services and Markets Regulations 2015 — ADGM FSRA, https://en.adgm.thomsonreuters.com ^[5] CBUAE Finance Companies Regulation (Circular No. 112/2018) — https://www.centralbank.ae