Fintech · Payments Licensing

Payments licensing in the UAE

Every payment business in the UAE sits somewhere on a regulatory map — CBUAE Retail Payment Services, Stored Value Facilities, DIFC and ADGM money services, and for crypto payments the VARA perimeter too. Getting the category right before you apply is the difference between a nine-month authorisation and a two-year false start. Neo Legal maps the model, picks the licence and runs the application end to end.

Speak to our payments team → Compare the UAE regulators
CBUAE · DFSA · FSRA
All three payment perimeters
Crypto + Fiat
Live payment-gateway mandates across VARA & CBUAE
Since 2015
Founder's fintech & virtual-asset practice
Partner-led
Senior lawyers from day one

The UAE payments licensing map

Four regimes matter, and most models touch more than one:

And where payments meet crypto — accepting virtual assets from payers, settling fiat to merchants — the model additionally engages VARA's virtual-asset perimeter. We structure crypto payment gateways across both regulators as a core part of our practice.

What we do for you

Why Neo Legal for payments

Payments licensing sits at the junction of our financial-services regulatory practice and a virtual-asset practice our founder has run since 2015 — including advising on the world's first cryptocurrency IPO and current crypto payment-gateway mandates spanning the VARA and CBUAE perimeters. Partner-led, fixed-fee where possible, and the UAE practice of Cornwalls (established 1891).

Payments licensing — frequently asked questions

What licence does a payment gateway need in the UAE?
It depends on what the gateway actually does with funds. Pure technical processing without touching the money flow may sit outside the licensing perimeter, but merchant acquiring, payment aggregation, holding merchant funds or issuing payment instruments are Retail Payment Services requiring a CBUAE RPS licence in the category matching the services performed. Most commercial gateway models touch funds and need the licence — the category analysis is the first piece of work.
What is the difference between an RPS licence and an SVF licence?
The Retail Payment Services licence covers performing payment services — acquiring, aggregation, money transfer, payment initiation and account information, with categories scaled to the services and whether customer funds are held. The Stored Value Facility licence covers issuing stored value: wallets and prepaid balances customers load before spending. A wallet business often needs SVF; a processor or acquirer needs RPS; some models need both.
Can I run a crypto payment gateway in the UAE?
Yes, but it spans two regulators. Accepting crypto from payers and delivering fiat to merchants combines virtual-asset activity — VARA-regulated in Dubai outside DIFC — with retail payment services under the CBUAE, whose Payment Token Services framework also governs stablecoin-based payments. Whether you need VARA, CBUAE or both depends on custody, conversion and settlement design. We act on live crypto payment-gateway mandates spanning both perimeters — see also our crypto practice.
How much capital does a UAE payments licence require?
CBUAE capital requirements scale with the licence category and the volume of funds held — from a few hundred thousand dirhams for lighter categories to several million for full-scope providers holding customer funds, plus ongoing prudential and safeguarding requirements. DIFC and ADGM money-services capital follows their own prudential categories. Budget for capital plus compliance staffing — the regulator assesses substance, not just the cheque.
How long does a CBUAE payments licence take?
A well-prepared application typically runs nine to eighteen months from engagement to licence, depending on category, complexity and responsiveness. The programme covers the regulatory business plan, ownership and governance, safeguarding arrangements, AML framework, technology and outsourcing documentation, then CBUAE review rounds. Preparation quality is the single biggest driver of timeline.
Should I license with CBUAE, DIFC or ADGM for payments?
A CBUAE licence covers the UAE onshore market — required if you serve mainland merchants and consumers at scale. DIFC (DFSA) and ADGM (FSRA) money-services authorisations offer common-law regimes and can suit B2B, cross-border and institutional models. Some groups run both: a financial-centre entity for international flows and a CBUAE licence for onshore acquiring. See the regulator comparison.
Related reading
Financial Services License UAE
The umbrella guide: DFSA, FSRA, CBUAE and CMA.
DFSA vs FSRA vs CBUAE vs CMA
Which UAE regulator fits your model.
Crypto Lawyer Dubai
VARA licensing and virtual-asset counsel.
Licensing Tracker
Live view of UAE financial-services regimes.

Building a payments business in the UAE?

Describe the flow of funds. We will tell you which licence you actually need — and run the application from category selection to authorisation.

Schedule a Consultation →