Regulatory · Licensing

Financial services licensing in the UAE

Four regulators, four rulebooks, one decision that shapes everything after it. Whether you are an asset manager choosing between DIFC and ADGM, a payments firm heading for the CBUAE, or a broker weighing the onshore market — Neo Legal selects the regulator, builds the application and runs the authorisation, partner-led from the first call.

4 regulators
DFSA · FSRA · CBUAE · CMA
28+
Published guides across the regimes
1,000+
Clients advised by our founder since 2015
Est. 1891
The UAE practice of Cornwalls

The four regimes

Which one you need follows your clients and your activity — and increasingly the right answer is a dual structure: a financial-centre entity for international business, an onshore licence for the mainland market. See the full regulator comparison.

What we do for you

Why Neo Legal for licensing

Financial-services licensing is the core of the practice: our regulatory team has published the most complete public library of UAE licensing guidance anywhere — 28+ guides, a live licensing tracker and category tools — because we do this work daily. Founder Harly Zappino has advised 1,000+ clients across financial services and virtual assets since 2015. Partner-led, fixed-fee where possible, and the UAE practice of Cornwalls (established 1891).

Financial services licensing — frequently asked questions

Which UAE financial regulator do I need — DFSA, FSRA, CBUAE or CMA?
It follows your clients and activity. DFSA regulates firms in or from the DIFC; FSRA regulates the ADGM; both suit asset management, advisory, broking and funds. CBUAE licenses banking, payments and finance-company activity onshore. CMA covers securities and commodities onshore. Firms serving mainland retail clients at scale generally need the onshore licence; international firms often prefer the common-law centres. See the full comparison.
What is the difference between a DFSA and an FSRA licence?
Both operate category-based regimes under English-law-based frameworks, and for most activities they are functional equivalents. What differs in practice: fees and operating costs (ADGM often wins), regulator appetite for specific models, ecosystem depth (DIFC has the larger wealth and funds community), and virtual assets — FSRA has run a dedicated crypto framework since 2018. We map your model against both before recommending one.
How long does a UAE financial services licence take?
A well-prepared DFSA or FSRA application typically takes six to twelve months from engagement to authorisation — regulatory business plan, in-principle approval, incorporation, capitalisation, final licence. CBUAE authorisations generally run nine to eighteen months depending on type. Application quality drives the timeline more than any other factor.
How much capital do I need?
It scales with the category. In the DIFC, base capital runs from US$10,000 for advisory/arranging (Category 4) to US$10 million for banking (Category 1), with expenditure-based requirements often exceeding the base; ADGM is comparable. CBUAE requirements are set by activity-specific regulation. Capital is only part of the substance test — regulators also expect resident senior officers and a real operating budget.
Can a foreign firm own 100% of a UAE licensed entity?
In the DIFC and ADGM, yes — 100% foreign ownership is standard. Onshore, ownership rules have been substantially liberalised and most financial activities can now be foreign-owned, though specific activities carry conditions. Ownership drives the fitness-and-propriety review, so group structure should be settled before filing.
Do I need a separate licence for crypto or virtual assets?
Usually yes. Virtual-asset activity in Dubai outside the DIFC is VARA-regulated under its own regime; in ADGM it is FSRA-regulated; in the DIFC the DFSA operates its own crypto token rules. A conventional licence does not automatically cover virtual assets — and vice versa. We run both tracks; see our crypto practice.

Ready to get licensed?

Tell us the business model. We will tell you the regulator, the category, the capital and the realistic timeline — then run the application end to end.

Schedule a Consultation →