Regulatory Services

UAE FinTech Regulatory Landscape

The UAE regulates FinTech through five authorities across three jurisdictional layers: federal onshore, the Emirate of Dubai, and the two financial free zones. Which regulator applies depends on where you incorporate, who you serve and what activity you actually perform — not on how the product is marketed. Selecting the right pathway early is the single decision that shapes capital requirements, timelines and market access.

Central Bank of the UAE (CBUAE)

Jurisdiction: UAE onshore (federal), including the mainland and freezones of every Emirate except for DIFC & ADGM. The CBUAE licenses payments, money movement, lending and fiat-backed token activity across the UAE. Most consumer-facing FinTech propositions — wallets, cards, acquiring, remittance, BNPL, stablecoins — sit here. Its frameworks are activity-based, so the licence follows what the business actually does rather than how it positions itself.
  • Retail Payment Services

    The RPSCS framework covers nine payment services, including payment account and instrument issuance, merchant acquiring, payment aggregation, domestic and cross-border fund transfers, and payment initiation and account information services. Licences are granted in four categories, so scoping the right one is a commercial decision as much as a regulatory one.

  • Stored Value Facilities

    Applies to businesses issuing or operating stored-value products such as e-wallets, prepaid accounts and closed or open-loop value schemes. Relevant where customer funds are held before being spent or redeemed.

  • Payment Token Services

    The PTSR regulates dirham payment token issuance, payment token custody and transfer, and payment token conversion. Foreign token issuers and existing regulated entities may instead qualify for registration, making this the key framework for stablecoin and on-chain settlement models.

  • Open Finance

    Data-sharing and service-initiation providers must be authorised and onboarded to the CBUAE Open Finance Framework. Directly relevant to account aggregation, PFM, embedded finance and lending platforms that rely on bank data.

  • Finance Companies and Short-Term Credit

    Digital lenders require a finance company licence; BNPL and other short-term credit providers may qualify for the lighter Restricted Licence Finance Company route. The distinction materially affects capital and governance requirements.

  • Exchange Business and Remittance

    Money exchange, cross-border remittance and related currency services fall under the CBUAE's exchange house regime — relevant to remittance-led FinTechs and payroll or corridor-specific platforms.

How we can help:  We assess which CBUAE framework and licence category fits your business model, map the activity scope, and prepare your application, governance and policy documentation.

Capital Markets Authority (CMA)

Jurisdiction: UAE onshore (federal), Except DIFC and ADGM
The Capital Markets Authority replaced the Securities and Commodities Authority on 1 January 2026 under Federal Decree-Laws 32 and 33 of 2025. The reform is more than a rename: the CMA’s remit now expressly extends to virtual assets and to persons targeting UAE clients from outside the country. Investment, securities and token-based FinTech models onshore should be re-assessed against the new regime.

  • Virtual Asset Activities

    The CMA licenses virtual asset activities including dealing as principal or agent, custody and arranging custody, advising, portfolio management, arranging deals and operating a multilateral trading facility. Minimum capital varies materially by activity, so activity scoping directly drives the cost of entry.

  • Digital and Security Tokens

    Tokens with the characteristics of securities fall within the CMA's securities perimeter rather than a payments or virtual asset regime. Relevant to tokenised funds, tokenised debt and real-world asset platforms operating onshore.

  • Crowdfunding and Alternative Finance

    Equity and debt crowdfunding platforms operating onshore require CMA authorisation. Relevant to SME financing, invoice finance and investment marketplaces.

  • Funds, Asset Management and Advisory

    Fund establishment, promotion, portfolio management, investment advisory and introducing services all require CMA licensing. Digital wealth, robo-advisory and investment app models typically engage more than one of these activities.

  • Extraterritorial Reach

    The CMA framework applies to firms that target UAE clients even where the activity is performed outside the UAE, including from a financial free zone. Offshore and free zone operators with onshore marketing should review their promotion and onboarding practices.

  • Exchange Business and Remittance

    Money exchange, cross-border remittance and related currency services fall under the CBUAE's exchange house regime — relevant to remittance-led FinTechs and payroll or corridor-specific platforms.

How we can help: We assess your model against the CMA regime, identify the licensed activities engaged, and advise on transition, promotion and cross-border marketing exposure.

Virtual Assets Regulatory Authority (VARA)

Jurisdiction: Emirate of Dubai, including free zones OF DUBAI but excluding DIFC

VARA is the world’s first dedicated virtual asset regulator and the licensing authority for crypto businesses operating from Dubai outside the DIFC. Its regime is activity-based, with a detailed rulebook for each licensed activity plus cross-cutting rules on market conduct, technology, compliance and marketing. Firms commonly hold more than one activity licence.

Activity Typical business
Exchange Services
Exchange Services
Broker-Dealer Services
Brokerage, OTC desks, agency trading
Custody Services
Wallet and key custody (separate legal entity required)
Lending and Borrowing Services
Crypto credit, collateralised lending, yield products
Management and Investment Services
Portfolio and fund management in virtual assets
Transfer and Settlement Services
On-chain transfer, payment and settlement rails
Advisory Services
Virtual asset advice to clients
VA Issuance
Token issuance, including asset-referenced virtual assets
Proprietary trading and certain issuance models follow separate approval routes rather than a full licence. VARA also applies strict marketing rules, which apply to firms promoting into Dubai even before a licence is granted. How we can help. We advise on activity classification, entity structuring and the VARA application pathway, and support preparation of rulebook-aligned compliance, technology and marketing frameworks.

Dubai Financial Services Authority (DFSA)

Jurisdiction: Dubai International Financial Centre (DIFC)

The DFSA regulates financial services in the DIFC under an English common law framework. It is the preferred pathway for institutional, wholesale and cross-border FinTech models, and for firms that want a recognised international regulatory brand.

  • Crypto Tokens

    Using a crypto token is not itself a regulated activity — authorisation is triggered by the financial service performed with it, such as dealing, arranging, custody or operating a trading facility. Since 12 January 2026, the DFSA has withdrawn its list of recognised tokens: firms must now assess and document token suitability themselves, which places real weight on internal governance.

  • Fiat Crypto Tokens

    Stablecoins referencing a single fiat currency are treated separately, with dedicated requirements for issuance and use. Relevant to settlement, treasury and on-chain payment propositions.

  • Investment Tokens

    Securities and derivatives issued or transferred in tokenised form remain securities. Directly applicable to tokenised funds, bonds and real-world asset platforms.

  • Money Services

    Covers payment accounts, money transmission, issuing payment instruments and stored value in the DIFC. The route for payment institutions and e-money models that want a DIFC base.

  • Crowdfunding and Investment Platforms

    Loan, investment and property crowdfunding platforms are separately regulated, alongside arranging and advisory permissions used by digital investment platforms.

  • Innovation Testing Licence

    A restricted licence allowing FinTechs to test products with real customers under tailored conditions before applying for a full licence. Useful where a model does not yet map cleanly to an existing category.

How we can help: We advise on DIFC entity structuring, permission scoping and DFSA authorisation, including regulatory business plans, token suitability frameworks and ITL applications.

Financial Services Regulatory Authority (FSRA), ADGM

Jurisdiction: Abu Dhabi Global Market (ADGM)

The FSRA operates one of the most established digital asset regimes in the region and is often selected by institutional crypto, tokenisation and digital infrastructure businesses. ADGM also offers company structures — including foundations — that support decentralised and token-issuing models.

  • Virtual Asset Activities

    Spot virtual asset activity is regulated across multilateral trading facilities, broker-dealers, custodians, asset managers and intermediaries. Firms may only deal in virtual assets accepted by the FSRA.

  • Fiat-Referenced Tokens

    A dedicated framework governs FRT issuance and the use of accepted FRTs by regulated firms. Central to stablecoin issuers and payment or settlement platforms based in ADGM.

  • Digital Securities

    Tokens with the characteristics of a security are regulated as securities, enabling compliant issuance, trading and settlement. The core pathway for tokenised capital markets and real-world asset platforms.

  • Digital Asset Derivatives and Funds

    Derivatives referencing digital assets and funds investing in them are regulated as derivatives and fund units, giving institutional managers a recognised route to market.

  • Money Services and Payments

    Payment services, money transmission and stored value are regulated activities in ADGM, providing an alternative to an onshore CBUAE licence for wholesale and cross-border models.

  • DLT Foundations

    A purpose-built structure for blockchain foundations and DAOs, frequently used for token issuance, protocol governance and IP holding alongside a separately licensed operating entity.

How we can help: We advise on ADGM structuring, FSRA permission scoping and authorisation, and support token classification, accepted-asset analysis and foundation set-up.

Choosing the Right Pathway

Regulator Jurisdiction Core FinTech Focus
CBUAE
UAE onshore (federal)
Payments, stored value, payment tokens, open finance, lending, remittance
CMA
UAE onshore, outside DIFC and ADGM
Securities, funds, crowdfunding, virtual asset and token activities
VARA
Dubai, excluding DIFC
All virtual asset activities
DFSA
DIFC
Crypto tokens, investment tokens, money services, investment platforms
FSRA
ADGM
Virtual assets, fiat-referenced tokens, digital securities, payments
Three distinctions drive most licensing decisions: whether the product moves fiat or virtual assets, whether the token is a payment instrument or a security, and whether the client base is retail onshore or institutional and cross-border. Many FinTech models engage more than one regulator — a payments licence alongside a virtual asset licence is a common structure — and free zone entities marketing into the UAE mainland must also consider onshore perimeter rules.

Work With Us

Planning to launch, restructure or expand a FinTech business in the UAE? Our regulatory advisory team helps you determine which activities are regulated, select the appropriate regulator and licence category, and prepare a credible application — from regulatory business plan and governance framework through to engagement with the regulator.

Contact our Regulatory Advisory Team for an initial assessment of your licensing pathway.

Get In Touch Today

The experts at Fanar Advisor are experienced professionals in business setup, corporate services, banking support, PRO services, and Golden Visa solutions. We provide practical, tailored guidance to help entrepreneurs and businesses establish, manage, and grow their presence in the UAE, with dedicated support throughout the process.

    About us

    Fanar has been the premier and reliable business setup consultant in the Middle East, offering crucial assistance to entrepreneurs and SMEs.

    Quick Links

    Business Setup

    Services

    Location

    UAE

    Opal Tower - Office No 206, 2nd floor - Burj Khalifa Blvd - Business Bay – Dubai

    India

    805, 806, Signature Elite, J-7, Narayan Singh Rd, Rambagh, Jaipur, Rajasthan 302004, India

    Linkedin Facebook Instagram Youtube TikTok

    © 2026 FANAR ADVISOR. ALL RIGHTS RESERVED

    Privacy Policy

    Terms of Use

    Cost Calculator