How to Launch and License an FX Business in the UAE

This guide explains the licensing routes, jurisdictions, regulatory capital, compliance obligations, costs, infrastructure, and application process for FX brokerage founders, fintech entrepreneurs, compliance teams, and international financial firms entering the UAE market.

There is no universal “FX licence” covering every foreign-exchange business model. The correct authorisation depends on the instruments offered, whether the firm acts as principal or agent, its target clients, settlement arrangements, leverage, client-money flows, and place of establishment. Leveraged FX brokerage must also be distinguished from physical or deliverable currency exchange, remittances, payment services, virtual-asset activities, and technology-only services. A standard mainland or free-zone commercial licence does not by itself authorise regulated financial services.

UAE FX Licensing at a Glance

Before choosing a UAE jurisdiction, founders should classify the actual regulated activity. A retail CFD broker, institutional FX liquidity provider, introducing broker, exchange house, discretionary manager, and trading-software vendor may all describe themselves as “FX businesses,” yet they can fall under very different regulatory frameworks.

Indicative comparison only. Regulatory classification depends on the products, settlement terms, leverage, clients, territorial reach, execution model and money flows. 

The mainland framework changed institutionally on 1 January 2026, when the Capital Market Authority became the legal successor to the Securities and Commodities Authority. Existing regulations continue to apply to the extent they are compatible with the new legislation until replaced or amended.

Define the FX Business Model and Licensing Perimeter

Products and Services

Start by documenting exactly what clients will trade: deliverable spot currencies, rolling spot FX, leveraged FX, CFDs, futures, options or other derivatives. Separately identify discretionary management, managed accounts, copy trading, introducing, liquidity provision and technology services.

The label “spot FX” is not sufficient for classification. Settlement timing, leverage, automatic rollover, speculative purpose and the underlying commercial transaction can affect whether the activity is treated as currency exchange or an investment/derivatives service.

Payments, remittances and virtual assets should be analysed separately rather than added to an FX brokerage licence by assumption.

Clients and Geographic Reach

Define whether clients will be retail, professional, institutional or other eligible counterparties, then map where those clients are located and how they will be acquired.

Websites, mobile applications, UAE-focused advertising, affiliates, influencers, call centres and other promotional channels can create regulatory exposure. In the DIFC, for example, financial promotions are themselves regulated and generally cannot be made in or from the DIFC unless the applicable requirements are satisfied.

Execution and Client-Money Model

Determine whether the broker will act as principal, matched principal, agent, arranger, adviser or introducer. Document the complete transaction chain: order receipt, execution venue, liquidity provider, hedging model, payment provider, custodian, reconciliation process and final settlement.

Client-money handling materially increases regulatory complexity because segregation, reconciliation and safeguarding controls may apply.

Do You Need a Licence to Provide FX Services to UAE Clients?

Licensing depends on what the firm actually does and its connection with the UAE—not simply where the contract says the service is provided. An overseas licence, offshore company, “technology platform” description or purported reverse-solicitation model should not be treated as a substitute for a UAE perimeter assessment.

Compare UAE Jurisdictions and Regulators

Which Regulator Licenses Leveraged or Retail FX Brokers?

There is no single answer. A leveraged FX brokerage may fall within the federal mainland CMA framework or within the separate financial-services regimes of the DIFC or ADGM.

UAE Mainland: Capital Market Authority

The CMA regulates relevant mainland capital-market financial activities. Its current rulebook includes an activity for brokers trading OTC derivatives and currencies in the spot market within the First Category, with paid-up capital of at least AED 30 million for that category. The framework also requires designated management, compliance and risk personnel.

Licensing is separate from obtaining the company's commercial registration. CMA's published licensing process includes initial approval followed by a licensing phase covering capital, premises, accredited staff, governance, systems, risk management, compliance, internal audit, business continuity and supporting corporate documentation.

UAE Mainland: Central Bank of the UAE

CBUAE regulates Exchange Business, including currency exchange and remittances, under its Exchange Business Regulation effective 26 June 2025. The regulation creates Categories I–IV according to the permitted activity.

For sole establishments or partnerships, minimum paid-up capital is AED 10 million for Category I, AED 5 million for Category II and AED 2 million for Category III. For an LLC or another structure where shareholder liability is limited to contributed capital, the minimum is AED 25 million regardless of category; this also applies to Category IV applications.

Is an Exchange-House Licence the Same as an FX Brokerage Licence?

No. Exchange Business covers currency exchange, remittances and related CBUAE-authorised activities. It should not be treated as permission to provide leveraged FX, CFDs or securities brokerage.

Dubai International Financial Centre

A firm carrying on financial services in or from the DIFC generally requires DFSA authorisation specifying its permitted activities. Relevant permissions may include dealing as principal or agent, arranging transactions, advising and managing assets.

The prudential category depends on the permissions. Current DFSA rules set a US$2 million base capital requirement for Category 2, with a US$500,000 exception for certain matched-principal activity, while Category 3A has a US$200,000 base requirement. Actual capital can be higher because expenditure-based, risk-based and other prudential requirements may also apply.

Retail OTC leveraged products require enhanced conduct controls. Under current DFSA rules, Retail Clients must post minimum margin of 3.3% for major currency pairs (approximately 30:1 leverage), 5% for non-major currency pairs, major equity indices, treasury assets and gold (20:1), 10% for non-major equity indices and commodities other than gold (10:1), 50% for Crypto Tokens (2:1), and 20% for other underlying assets (5:1). 

Abu Dhabi Global Market

ADGM authorisation is administered by the FSRA. Its framework covers dealing, arranging, advising, managing assets and other regulated investment services.

Current prudential rules set a US$2 million base capital requirement for Category 2 and US$500,000 for Category 3A generally. A Category 3A firm dealing as matched principal in OTC leveraged products with retail clients is subject to a US$2 million base capital requirement.

The application proceeds through detailed authorisation review and an in-principle approval stage, after which conditions such as incorporation, share capital, premises and staffing must be completed before the FSP is issued.

Can a DIFC or ADGM Firm Serve Mainland UAE Clients?

A DIFC or ADGM authorisation should not be treated as a UAE-wide passport. These are distinct financial free-zone regimes. Mainland solicitation, distribution and servicing arrangements can therefore require additional regulatory analysis, particularly where UAE residents are actively targeted.

Jurisdiction Comparison Table

Choose an Entity and Market-Entry Structure

New UAE Company

A new entrant can establish a mainland company, DIFC entity or ADGM entity. The decision should consider ownership, controllers, governance, regulatory capital, office requirements, taxation, staffing and the relationship with the wider group—not incorporation price alone.

Can an Overseas-Regulated FX Broker Establish a UAE Branch?

Potentially, subject to the chosen framework. Regulators will normally examine the parent’s home-country licence, supervision, financial standing, ownership, enforcement history and governance. Existing overseas regulation does not automatically authorise UAE business or remove local substance requirements.

Can a Technology or White-Label Provider Operate Without Financial Authorisation?

A genuinely technology-only supplier may remain outside financial-services licensing. The risk changes where it solicits investors, performs onboarding, controls pricing, executes transactions, handles money, gives investment recommendations or exercises discretion. Substance takes precedence over the “white label” or “software” description.

Partnerships, Introducing Brokers, and Representative Offices

Referral and representative structures can reduce the scope of activity, but they must be designed carefully. Agreements should clearly allocate onboarding, financial promotions, KYC, execution, complaints and regulatory responsibility, and customer-facing disclosures must accurately identify which regulated entity provides the service.

Step-by-Step FX Licence Application Process

1. Obtain Regulatory Classification

Map the products, target clients, execution model, revenues, marketing channels, liquidity counterparties and complete money flow. Resolve perimeter questions before incorporation.

2. Confirm the Jurisdiction and Legal Structure

Choose mainland CMA, DIFC/DFSA, ADGM/FSRA or CBUAE according to the regulated activity—not according to which company licence is cheapest.

3. Prepare the Regulatory Business Plan

Document strategy, ownership, market analysis, financial forecasts, governance, liquidity arrangements, technology, outsourcing, risk controls and an orderly wind-down plan.

4. Document Ownership and Funding

Prepare evidence for ultimate beneficial owners and controllers, together with source-of-funds, source-of-wealth, group-structure and financial-standing documentation.

5. Appoint Approved and Control Functions

Build the proposed management team, including directors, senior executives, compliance, MLRO, finance and risk functions. Regulators assess experience, competence, independence, availability and fitness and propriety.

6. Submit Licence and Incorporation Applications

Applications typically include the business plan, financial model, corporate records, policies, personal declarations, ownership evidence, technology information and outsourcing arrangements. Expect regulatory questions and revisions.

7. Satisfy In-Principle Approval Conditions

Following preliminary approval, firms may need to inject capital, secure premises, employ approved personnel, implement systems and finalise banking, insurance, liquidity and outsourcing arrangements.

8. Complete Operational Readiness

Before launch, test onboarding, KYC, transaction monitoring, sanctions screening, regulatory reporting, client-money segregation, cybersecurity, complaints, incident management and business continuity. Regulated activity and marketing should begin only after the necessary authorisation is effective.

FX Licence Costs, Capital, and Timeline

How Much Capital Is Required to Launch an FX Business?

Capital depends primarily on regulatory capacity and risk. Principal dealing generally attracts more capital than arranging or introducing. Holding client assets, serving retail clients or running a market-making book can increase prudential requirements.

Regulatory capital should not be treated as setup cash. It may need to remain available continuously and is separate from salaries, rent, legal fees, technology expenditure and liquidity required to operate the business.

Initial Setup Costs

Budgets should include regulatory and incorporation fees, legal advice, premises, immigration, recruitment, compliance personnel, trading and CRM platforms, KYC and transaction-monitoring tools, cybersecurity, insurance, banking integration and liquidity-provider onboarding.

Ongoing Operating Costs

Recurring costs include annual regulatory fees, audits, compliance and MLRO staffing, regulatory returns, technology licences, market data, insurance, premises, penetration testing, banking, legal support and corporate renewals.

Cost Comparison Table

*Planning estimates, not regulator quotations, and excluding regulatory capital. They can change materially according to staffing, premises, technology stack, legal complexity, marketing model and whether infrastructure is built or outsourced.

DFSA's current service portal confirms that Financial Services authorisation fees vary from US$2,000 to US$140,000. ADGM's published fee rules set US$40,000 for dealing as principal other than matched principal and US$25,000 for matched-principal or agency applications, with additional fees possible for further regulated activities or asset classes.

Effective date of regulatory comparison: 20 August 2026. Applicants should verify fee schedules and prudential rules immediately before submission.

Indicative Application and Launch Timeline

Treat licensing as several separate phases: classification, application preparation, formal regulatory review, in-principle approval and operational readiness. A practical project plan may allow several months for preparation and several further months for review and implementation, but there is no guaranteed approval timetable.

Ownership complexity, regulator questions, hiring, banking, office fit-out, technology implementation and liquidity-provider due diligence can all extend the launch date. The DFSA currently lists application duration as TBC rather than promising a standard completion period.

AML, KYC, Prudential, and Reporting Obligations

Governance and AML Framework

FX firms require board oversight, documented enterprise-wide risk assessments, independent compliance controls, an effective MLRO function, policies, monitoring and staff training.

The UAE's current federal AML/CFT and proliferation-financing law has been effective since 14 October 2025, with implementing regulations effective from 14 December 2025. Financial institutions must identify, assess and continuously update financial-crime risks and maintain senior-management-approved controls.

Customer and Beneficial-Owner Due Diligence

Onboarding should identify and verify customers and beneficial owners, understand the purpose and nature of the relationship, assess risk and apply ongoing monitoring. Higher-risk relationships require enhanced controls, including appropriate treatment of PEPs, high-risk jurisdictions, source of funds and, where relevant, source of wealth.

Monitoring, Sanctions, and Suspicious Activity Reporting

Firms need automated or risk-based transaction monitoring, sanctions screening and documented escalation procedures. Where there is suspicion or reasonable grounds for suspicion of money laundering, terrorist financing or proliferation financing, the current federal framework requires reporting without delay through the electronic system designated by the UAE Financial Intelligence Unit.

Targeted financial sanctions require rapid screening and freezing/prohibition measures where applicable. UAE guidance expects databases to be screened when sanctions lists change and emphasises action without delay.

Client Assets and Prudential Controls

Where a broker receives or controls client money, it should expect segregation, reconciliation, recordkeeping and safeguarding requirements. Prudential controls additionally address liquidity, counterparty concentration and ongoing capital adequacy.

Conduct and Customer Protection

Retail-facing brokers should build controls for appropriateness or suitability, leverage and margin, clear risk warnings, execution quality, conflicts of interest, financial promotions and complaints. These obligations must be embedded in the platform rather than treated solely as compliance documentation.

Regulatory Reporting, Audit, and Notifications

Ongoing obligations can include prudential returns, audited financial statements, AML reporting, controller-change notifications and notifications of material operational events. FATCA, CRS and tax-reporting obligations must also be considered where applicable.

Build the Operating Infrastructure

Trading and Execution Systems

The technical stack should support trading platforms, price feeds, liquidity connections, order management, execution monitoring, margin calculation, position limits and conflict controls.

Client Onboarding and Monitoring

Integrate CRM, identity verification, beneficial-owner checks, PEP and sanctions screening, transaction monitoring, document retention and regulatory reporting so compliance data is consistent throughout the customer lifecycle.

Banking and Client-Money Arrangements

Start discussions with banks, payment institutions and liquidity providers early. They typically need transparent ownership, credible source-of-funds evidence, clearly documented transaction flows and an understandable client-money model.

Outsourcing and Third-Party Risk

Perform due diligence on platform, cloud, KYC, payments and liquidity providers. Contracts should address service levels, data access, audit rights, security, subcontracting, business continuity and regulatory access.

Cybersecurity, Data Protection, and Resilience

The applicable privacy regime depends partly on jurisdiction. DIFC, ADGM and federal UAE entities can fall under different data-protection frameworks. ADGM, for example, operates under its Data Protection Regulations 2021 and imposes conditions on transfers of personal data outside ADGM.

Regardless of jurisdiction, an FX broker should implement access control, encryption, backups, incident response, disaster recovery, vulnerability management and tested business-continuity arrangements.

Tax, Employment, and Corporate Administration

Corporate Tax and VAT

Free-zone incorporation does not automatically mean that all profits are taxed at 0%. A Qualifying Free Zone Person can benefit from 0% corporate tax on Qualifying Income, while taxable income that is not qualifying income is generally subject to 9%.

This requires particular attention for regulated financial activities because some financial-service income may fall within excluded-activity rules. Transfer pricing, permanent establishments and related-party arrangements must also be analysed.

VAT treatment depends on how the service is remunerated. UAE guidance provides, for example, that certain financial services remunerated through an implicit margin or spread are exempt, whereas explicit fee structures can produce different results.

Employment and Immigration

The operating model should budget for employment contracts, visas, payroll, office policies and regulator-specific expectations concerning resident or locally based control functions.

Ongoing Corporate Compliance

Maintain corporate licences, beneficial-ownership information, financial statements, audits, board records and regulatory approvals or notifications required for material changes in ownership, management or business activities.

Common Reasons FX Launches Are Delayed or Rejected

Typical problems include selecting the wrong activity or regulator, confusing incorporation with financial-services authorisation, under-budgeting capital, submitting unrealistic forecasts, weak AML or client-money controls, inadequate senior personnel, incomplete source-of-funds evidence and failure to disclose group or white-label relationships.

Projects are also delayed when banking, insurance, premises, technology and liquidity-provider work begins too late. Another major risk is marketing to UAE clients before permission is effective or assuming that reverse solicitation, an overseas licence or ordinary free-zone registration permits unrestricted UAE business.

Conclusion

Launching an FX business in the UAE should follow a regulatory sequence: classify the exact business model, select the appropriate regulator and entity, calculate capital and operating costs, prepare the authorisation package, and demonstrate operational readiness.

Because requirements vary substantially between principal dealing, agency, arranging, currency exchange and technology models—and regulations continue to evolve—founders should obtain current UAE legal, tax and regulatory advice before marketing to or accepting UAE clients.