Regulated Financial Services in the UAE: Licences & Regulators

Quick Summary: regulated financial services in the UAE

• Five regulators, not one. The DFSA licenses financial services in the DIFC, the FSRA in ADGM, the SCA onshore across the rest of the UAE, the Central Bank for banking and payments, and VARA for virtual assets in Dubai. Picking the right one is the first decision, and the most expensive one to get wrong.
• The financial free zones are separate legal systems. The DIFC and ADGM run English common law with their own courts and their own regulator – which is why funds, family offices and institutional managers cluster there rather than onshore.
• Capital scales with what you actually do, not with ambition: a venture-capital manager can start from effectively zero base capital, while a crypto exchange or a full securities brokerage sits at the top of the ladder.
• Tax: UAE Corporate Tax is 9% with 0% on the first AED 375,000, and a qualifying entity in a free zone can earn 0% on qualifying income. There is no personal income tax.
• The single most common mistake is over-scoping the licence – applying to run a venue when you only intend to advise or arrange. It multiplies capital, cost and timeline for permissions you will never use.

“Financial services licence” covers a dozen very different businesses in the UAE, spread across five regulators and three legal systems. A family office, a crypto OTC desk and a payment provider have almost nothing in common except that each needs the right permission from the right authority. This hub maps that landscape – who regulates what, which centre suits which business, roughly what capital each tier demands – and links to the detailed guide for every licence we cover.

“Almost every founder arrives asking which free zone is cheapest. That is the wrong first question. Define the regulated activity precisely, and the regulator, the capital and the centre mostly choose themselves – and you stop paying for permissions you were never going to use.”

— Reviewed by CA Akbar Ali, Financial & Regulatory Specialist

The five regulators, and what each covers

Regulator	Where it applies	Typically used for
DFSA	DIFC (Dubai International Financial Centre)	Funds, asset and wealth management, family offices, brokerage, insurance, banking
FSRA	ADGM (Abu Dhabi Global Market)	The same activities plus a long-standing virtual-asset regime
SCA	Onshore UAE, outside the financial free zones	Securities broking on the DFM and ADX, onshore funds and advisory
CBUAE	Federal, UAE-wide	Banks, finance companies, payment services, electronic money, stablecoins
VARA	The Emirate of Dubai (excluding the DIFC)	Virtual assets – exchanges, broker-dealers, custody, management

Two practical consequences. First, a Dubai crypto business answers to VARA, but the same business inside the DIFC answers to the DFSA instead – the address decides the regulator. Second, if you want to trade UAE-listed shares you need the SCA route; the financial free zones do not give you access to the local exchanges.

DIFC or ADGM – which centre?

For most regulated financial businesses the real choice is between the two financial free zones. Both run English common law, both have their own courts, and both offer 100% foreign ownership and the 0% qualifying-income tax treatment.

• DIFC has the deepest concentration of managers, banks, law firms and service providers in the region, and a US$0 base-capital route for venture-capital-only fund managers.
• ADGM has run the Gulf’s first comprehensive virtual-asset regime since 2018, a well-worn venture-capital manager framework, and lighter regimes aimed at smaller and institutional managers.

Neither is universally better. The honest answer usually comes down to where your investors sit, which service providers you already work with, and which regime fits your specific activity. Our DIFC vs ADGM comparison works through it properly, and the DFSA licence categories guide is the spine of the DIFC side.

Every licence, by what you actually do

Find the description that matches your business and start there.

The capital ladder, roughly

Capital is the fastest way to understand where an activity sits. These are indicative starting points, not quotes – each regulator also applies an expenditure-based test, so a firm with a large cost base is held to that instead of the headline figure.

Tier	Typical activities
Lightest	Venture-capital-only fund manager (from effectively US$0 base capital); advising and arranging permissions
Middle	Fund manager for professional-investor funds (from roughly US$50,000–70,000); crypto broker-dealer (from AED 400,000 with approved custody)
Heaviest	Crypto exchange (around 12 months of operating expenses in ADGM); full securities dealing and brokerage onshore; banking

Confirm the exact figure for your permission with the relevant regulator before modelling it – all five update their rulebooks periodically.

Tax on a regulated financial business

UAE Corporate Tax is 9%, with 0% on the first AED 375,000 of profit. Two reliefs matter to this sector:

• Qualifying Free Zone Person. An entity in the DIFC, ADGM or another qualifying free zone can earn 0% Corporate Tax on qualifying income, provided it has adequate substance, sticks to qualifying activities and files audited accounts.
• Qualifying Investment Fund. A regulated fund that meets the conditions can apply to be exempt from Corporate Tax altogether – separate from the manager’s own position.

There is no personal income tax in the UAE, which is a large part of why managers relocate here. See our UAE Corporate Tax guide, and take formal advice for your structure.

How the licensing process works, in general

1. Scope the activity precisely. Dealing, arranging, advising, managing and custody are different permissions with very different costs.
2. Pick the regulator and centre that fit the activity, your clients and your market access.
3. Pre-application engagement. Every regulator here expects early dialogue and a proper regulatory business plan, not a form.
4. In-principle or initial approval, granted subject to conditions.
5. Build out – capital, senior hires, compliance officer and MLRO, systems, office and substance.
6. Full authorisation, then ongoing supervision, reporting and audited accounts.

Expect months rather than weeks for anything regulated, and budget for the running cost as seriously as the set-up.

Five mistakes that cost the most

• Over-scoping the licence. Applying to run a venue when you only intend to arrange or advise multiplies capital and build cost for permissions you will never use.
• Choosing the centre before the activity. The regulated activity should decide the regulator, not the other way round.
• Treating capital as the whole budget. Regulatory capital is a floor; working capital, compliance hires and technology usually cost more.
• Leaving banking to the end. For payment, crypto and brokerage businesses the bank account is often the hardest practical dependency.
• Thin substance. A brass-plate presence risks both the licence and the 0% tax position. Real people, real office, real decisions.

Frequently asked questions

Who regulates financial services in the UAE?

Five authorities: the DFSA in the DIFC, the FSRA in ADGM, the SCA onshore outside the financial free zones, the Central Bank for banking and payments, and VARA for virtual assets in Dubai. Which one applies depends on your activity and your address.

DIFC or ADGM – which is better?

Neither universally. Both run English common law with their own courts and regulator. The DIFC has the deepest cluster of managers and service providers; ADGM has the longest-running virtual-asset regime and lighter routes for smaller managers. Your investors, activity and service providers usually decide it.

How much capital do I need for a financial services licence?

It depends entirely on the activity. A venture-capital-only fund manager can start from effectively zero base capital; a professional-investor fund manager from roughly US$50,000-70,000; a crypto broker-dealer from AED 400,000 with approved custody; a crypto exchange or full brokerage sits far higher. Confirm your exact figure with the regulator.

Can I get 0% tax on a regulated financial business?

Potentially. An entity in a qualifying free zone can earn 0% Corporate Tax on qualifying income as a Qualifying Free Zone Person if it meets the substance and activity tests, and a regulated fund may qualify for the Qualifying Investment Fund exemption. The headline rate is 9%, with 0% below AED 375,000.

Do I need my own licence to launch a fund?

Every fund needs a licensed manager, but that does not have to be you. Appointing an external or host fund manager lets you launch a first fund without building a full authorised firm, then take your own permission later.

Which crypto licence do I need?

It depends on the activity and the emirate. Running an exchange, broking, custody and advisory are separate permissions, and Dubai (VARA), ADGM (FSRA), onshore (SCA) and payment tokens (Central Bank) are different regimes. Start with our VASP guide, which maps them.

How long does authorisation take?

Months, not weeks, for anything regulated - typically running from pre-application engagement through in-principle approval, build-out and final authorisation. Lighter permissions move faster than exchanges or banking.

Can a foreigner own a UAE financial services firm outright?

Yes. The DIFC and ADGM allow 100% foreign ownership, and 100% foreign ownership is now available for most onshore activities too.

Sources and official references

Related guides

• DFSA licence categories – the DIFC ladder explained
• DIFC vs ADGM – the full comparison
• DIFC company setup
• ADGM company setup
• Free UAE setup cost calculator
• Talk to an adviser

This guide is general information, not legal, tax or financial advice. Licence categories, capital requirements, fees and tax reliefs are set by the DFSA, FSRA, SCA, CBUAE, VARA and the UAE Federal Tax Authority and change without notice; figures are indicative and current at the time of writing. Confirm the current position with the relevant regulator, or a licensed adviser, before you act.