A founder walks into a free zone authority in Ajman or Sharjah, pays for a company with an activity line that mentions "financial consultancy" or "brokerage services", and walks out with a certificate. Six weeks later the corporate bank account application is declined and the payment processor asks for the regulator's reference number. There is none, because that certificate is a commercial trade licence issued by a free zone authority, not an authorisation from a financial services regulator. The UAE has several of those, and they sit in different legal systems.
Four regulators, three legal systems
Onshore, the Securities and Commodities Authority supervises securities and commodities activity across the federation, and the Central Bank of the UAE supervises banks, exchange houses, finance companies and payment activity. Firms dealing in securities or commodities on an onshore basis, including brokerage activity, sit under the SCA regime and its categories of permitted activity.
Then there are the two financial free zones, each with its own civil and commercial law based on common law and its own independent regulator. The Dubai International Financial Centre is regulated by the Dubai Financial Services Authority. Abu Dhabi Global Market is regulated by the Financial Services Regulatory Authority. Both operate a category system: what you are allowed to do depends on which financial service you apply for, and the base capital requirement is scaled to those permissions rather than being a single headline number. Dealing as principal against your own clients is a different category from arranging deals or advising, and it costs more in capital, systems and staffing. Our walkthrough of the DFSA regime covers how those categories map onto a broker's actual business model.
The fourth is subject-specific. Dubai's Virtual Assets Regulatory Authority licenses virtual asset activity in the Emirate of Dubai outside the DIFC, with separate permissions for exchange services, broker-dealer services, custody and management. A firm doing both leveraged FX and spot crypto usually discovers it needs two files with two authorities, not one. The VARA breakdown sets out how the activity categories are split.
What a free zone company actually gets you
The non-financial free zones, and there are many of them across the seven emirates, issue commercial licences. Those are genuine and useful. A software company, a marketing company, a holding company, a back office for a group whose regulated entity is somewhere else, all of these work perfectly well on a free zone licence. SINGUARD's own UAE entity, SINGUARD GLOBAL FZC, is licensed in Ajman Free Zone and the team works out of Dubai, because SINGUARD writes software and does not hold client money.
What a commercial licence does not do is authorise regulated financial services. Marketing a leveraged product to UAE residents, holding client funds, or executing client orders are activities that belong to the SCA, DFSA, FSRA or VARA depending on where and what. Operating them on a trade licence alone exposes the founder to enforcement, and it collapses the moment a counterparty runs proper know-your-business checks.
This article describes how the regimes are structured. It is not legal advice, and licensing outcomes turn on facts specific to each firm. Take advice from UAE counsel before filing anything.
Who accepts a UAE licence downstream
The licence is the beginning of the conversation with banks, payment service providers, card acquirers, liquidity providers and platform vendors, not the end of it. Each of them runs its own risk model, and the questions are consistent across the market.
Banks and correspondent banks look at whether the entity is supervised by an authority they recognise, what the underlying activity is, and where the clients live. Leveraged retail derivatives sit in a high risk category for most compliance teams regardless of jurisdiction, which is why opening accounts for a trading firm takes longer than founders plan for. A DFSA or FSRA authorisation reads well to a correspondent bank because both regimes are built on common law frameworks with published rulebooks and public registers. A commercial free zone certificate with a brokerage-sounding activity line reads badly, because it looks like an attempt to appear regulated.
Card acquirers add a second layer. Trading and investment merchants are classified into high risk categories under the card scheme rules, which brings monitoring programmes, chargeback ratio thresholds and rolling reserves. The acquirer's underwriting file will want the regulator, the licence number, the client geography, the marketing material and the refund policy. Where the licence is weak, the merchant account is either refused or priced as if every transaction might be disputed, which is what approval rates quietly reflect.
Liquidity providers and prime brokers care about the same things plus one more: who is on the other side of your risk. A prime of prime will ask for the regulator, audited accounts, the risk policy and the client fund arrangement. Platform vendors and app stores add their own layer, because both Apple and Google publish developer rules requiring financial trading apps to be submitted by, or on behalf of, a properly licensed entity in the markets they target. Ad platforms run similar published certification processes for financial products in many countries. None of these gates care how impressive the certificate looks. They care which register the entity appears on.
Choosing between them
For a firm whose clients are UAE residents, the onshore SCA route is the one that matches the activity, because the DIFC and ADGM are separate jurisdictions with their own client eligibility rules rather than a shortcut into the domestic market. For a firm serving institutional and international clients, wanting a common law contract framework and a regulator whose name a European bank recognises, the DIFC or ADGM route is stronger and more expensive. For a firm that mainly wants a credible base, staff visas and a real office while its regulated entity sits elsewhere, a commercial free zone licence is honest and sufficient, provided nobody pretends it is a financial one. Our Dubai page covers how the team works with firms building in the region.
Whichever route, the operational build is the same: client onboarding with document checks, segregated flows, transaction monitoring and a reporting trail an auditor can follow. That is what our Broker CRM is built to record, and it is software, nothing more. The licence is yours to obtain.
"A free zone certificate with a nice crest on it is a company registration. It is not a permission to hold client money, and the first bank you approach will know the difference before you finish your sentence."
— Alex Onta, Executive Director, SINGUARD
Key Takeaways
- The UAE has separate regulators for separate jurisdictions: SCA onshore, DFSA in the DIFC, FSRA in ADGM, and VARA for virtual asset activity in Dubai.
- A free zone commercial licence registers a company. It does not authorise holding client money, executing client orders or marketing leveraged products.
- Capital and systems requirements scale with the permissions applied for, so dealing as principal is a heavier file than arranging or advising.
- Banks, acquirers, liquidity providers and app stores check which register you appear on, not how the certificate looks.
Frequently Asked Questions
Can I run a forex brokerage on an Ajman or RAK free zone licence?
A free zone commercial licence registers a company and its permitted commercial activities. Regulated financial services such as holding client funds or executing client orders fall to the SCA, DFSA, FSRA or VARA depending on the location and activity. Take UAE legal advice before assuming a trade licence covers a brokerage model.
What is the difference between a DFSA and an FSRA licence?
They are issued by two different regulators in two different financial free zones, the DIFC and ADGM. Both operate common law frameworks with category-based permissions and public registers. The practical difference is the jurisdiction, the rulebook detail and the client base each is a better fit for, so the choice is usually made with counsel on the specific business model.
Will a UAE licence get me a bank account and a payment processor?
It helps but does not settle it. Banks and acquirers assess the regulator, the activity, the client geography and the chargeback profile separately. Leveraged retail derivatives sit in a high risk category under card scheme rules, so underwriting is stricter and pricing reflects that regardless of how strong the licence is.
About the Author
Alex Onta is an Executive Director at SINGUARD. He built eTrader, the terminal, the mobile apps, eTrader Broker, Copytrading, Business and Community, along with the worldwide clustered-server infrastructure it all runs on, with his brother Roman Onta helping on the design, and he leads that division today. Together with Roman he builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals, and the two of them carry worldwide compliance, payment processing and international business structuring side by side. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.