Loan Apps in UAE: What's Legal, What's Predatory in 2025

If you're scrolling the App Store looking for a quick AED 5,000 to cover rent or a vet bill, you've probably noticed there are dozens of loan apps in UAE marketplaces promising "instant approval, no salary transfer." Some are licensed. Most aren't. And the difference matters more than you'd think — frankly, the wrong app can land you in a debt trap that's nearly impossible to dispute in court.

Quick answer

Only banks and finance companies licensed by the Central Bank of the UAE can lawfully lend money to residents. That includes products offered through apps by banks like Emirates NBD, FAB, ADCB, Mashreq Neo, and licensed finance houses like Aafaq or Reem. Buy-now-pay-later apps (Tabby, Tamara, Postpay) operate under specific CBUAE Stored Value Facility rules. Anything else — Telegram lenders, offshore "salary advance" apps, peer-to-peer crypto loans — is unlicensed and unenforceable. If you've borrowed from an unlicensed app and they're harassing you, they have no legal collection rights in the UAE.

Who can legally offer loan apps in UAE

The Central Bank of the UAE (CBUAE) regulates all consumer lending under Federal Decree-Law No. 14 of 2018 on the Central Bank and the Organisation of Financial Institutions and Activities. Any entity offering credit to UAE residents needs a licence — full stop.

Three categories of loan apps in UAE are actually legal:

Bank-owned apps. Emirates NBD, FAB, ADCB, Mashreq, ENBD's Liv, and Mashreq Neo all lend through their apps. Personal loans here typically cap at 20 times your monthly salary, per CBUAE Regulation 29/2011 on bank loans and services to individual customers.

Licensed finance companies. Think Aafaq Islamic Finance, Reem Finance, Amlak. They operate under CBUAE Finance Companies Regulation (Circular 112/2018). Their apps are smaller but the loans are real loans.

Buy-now-pay-later providers. Tabby and Tamara are licensed under the CBUAE Stored Value Facilities Regulation (2020). Technically not "loans" — they're deferred payment products. The distinction matters for how disputes are handled.

Everything else is a grey market. Some of it dangerously so.

Watch out: If an app asks you to send money first as a "processing fee" or "insurance deposit" before your loan is disbursed, it's a scam. Licensed lenders deduct fees from the loan amount. They never ask you to pay upfront.

The cap on interest, fees, and what apps must disclose

Here's where most clients get blindsided. CBUAE Consumer Protection Regulation (Circular 8/2020) and the Consumer Protection Standards (2021) set hard rules on what licensed loan apps in UAE can charge:

• Early settlement fee: capped at 1% of outstanding balance or AED 10,000, whichever is lower.
• Late payment fee: capped at AED 200 per month for personal loans.
• Interest rate must be disclosed as a reducing balance rate AND an Annual Percentage Rate (APR). Not just the flat rate, which sounds smaller and confuses everyone.
• The total cost of credit must be shown before you sign.

A licensed app shows you all of this on the final screen before you accept. If you scroll through and see only a monthly instalment with no APR, no early-settlement clause, and no total repayable amount — close the app. That's not compliant disclosure.

In my experience, the biggest complaint at the CBUAE Sanadak ombudsman isn't interest rates — it's hidden insurance fees bundled into loan apps without clear consent. Always read the insurance line on the disclosure screen.

The unlicensed loan apps problem

You'll see ads on Instagram and TikTok for apps with names like "QuickCash UAE," "Dubai Loans Fast," "Salary Advance Emirates." Many are fronts for offshore operators in Karachi, Lagos, or Manila. They ask for:

• Your Emirates ID front and back
• A selfie holding the ID
• Access to your phone contacts and photos
• Your bank account details

That contact-list permission is the trap. When you miss a payment, they message your boss, your mother, your university group chat with edited photos and threats. It's textbook extortion. And it's been a serious enough issue that the CBUAE issued a public warning in 2023 against unlicensed digital lending platforms.

If this has happened to you, three things are true: the "loan" is legally unenforceable because the lender isn't licensed under Federal Decree-Law 14/2018; the harassment is a criminal offence under Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes (Article 43 on extortion via electronic means); and you can file a complaint with the UAE Cybercrime portal (eCrime.ae) or call 901 in Dubai.

Don't pay them. Paying once invites a second round.

Buy-now-pay-later apps: the fine print

Tabby and Tamara are the two big BNPL players, and they're genuinely useful for splitting a AED 2,000 furniture purchase into four chunks. Postpay also operates. All three are CBUAE-licensed.

But — and this is important — BNPL is still credit. Missed payments are reported to Al Etihad Credit Bureau (AECB). Your credit score takes a hit just like with a bank loan. I've seen clients denied a mortgage in 2024 because of three unpaid AED 400 Tabby instalments from 2022. The mortgage officer pulled the AECB report and there it was.

The other catch: BNPL apps charge late fees that, on a percentage basis, can be brutal. A AED 100 late fee on a AED 400 instalment is effectively a 25% penalty. Pay on time, or don't use them.

Costs at a glance (2025):
- Bank app personal loan APR: typically 5.99%–14.99% reducing
- Finance company app APR: typically 12%–24% reducing
- BNPL late fee: AED 30–100 per missed instalment
- Unlicensed app effective APR: often 300%+ when fees are added — and again, unenforceable

What to do if a loan app is harassing you

Step one is documentation. Screenshot every message, every call log, every threat sent to your contacts. Don't delete anything, even if it's humiliating. You'll need it.

Step two: report to the CBUAE consumer protection unit through the Sanadak ombudsman (sanadak.gov.ae) if the lender claims to be licensed. If you're unsure, check the CBUAE public register of licensed financial institutions before reporting — Sanadak only handles licensed entities.

Step three: for unlicensed apps, file a cybercrime report. Dubai Police eCrime portal, Abu Dhabi's Aman service (8002626), or call 901. Bring the screenshots. They take this seriously now — there were over 4,000 such complaints in 2023 according to public Dubai Police statistics.

Step four: lock down your phone. Revoke contact list permissions, remove the app, change your bank app password. If you gave them your bank login (please tell me you didn't), call your bank's fraud line immediately.

For broader context on consumer banking rights, see our banking category for related guides on debt recovery and credit bureau disputes.

When a "legitimate" loan app still goes wrong

Even with a licensed app, things break. Disbursement delays, wrong instalment amounts, insurance you didn't agree to, double deductions. CBUAE rules give you specific recourse:

The bank or finance company must acknowledge your complaint within 2 working days and resolve it within 30 days under the Consumer Protection Regulation. If they don't, or you're unhappy with the outcome, escalate to Sanadak within 6 months. Sanadak decisions up to AED 500,000 are binding on the financial institution.

Honestly, most clients don't know Sanadak exists. It's free, it's faster than court, and the financial institutions actually comply with its rulings because non-compliance affects their CBUAE licence.

Court is your last resort for loan disputes, and for amounts under AED 50,000 you'd go through the small claims process at the relevant Court of First Instance. For DIFC-based lenders (rare for consumer apps), the DIFC Small Claims Tribunal handles claims up to USD 500,000.

One more thing worth remembering: bounced cheques given as security for a loan are no longer criminal under Federal Decree-Law No. 14 of 2020 amending the Commercial Transactions Law — they're enforced through civil execution. That changed the leverage dynamic significantly. Lenders can still chase you, but they can't threaten you with prison anymore.

Need this checked for your situation? Talk to a UAE-licensed lawyer →

Citations

[1] Federal Decree-Law No. 14 of 2018 on the Central Bank and Organisation of Financial Institutions and Activities — centralbank.ae [2] CBUAE Regulation 29/2011 on Bank Loans and Services to Individual Customers [3] CBUAE Consumer Protection Regulation, Circular 8/2020 and Consumer Protection Standards 2021 [4] CBUAE Stored Value Facilities Regulation 2020 [5] CBUAE Finance Companies Regulation, Circular 112/2018 [6] Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes, Article 43 [7] Federal Decree-Law No. 14 of 2020 amending the Commercial Transactions Law (bounced cheques) [8] Sanadak — UAE Financial Ombudsman, sanadak.gov.ae [9] CBUAE public register of licensed financial institutions, centralbank.ae [10] Dubai Police eCrime portal, ecrime.ae