DFSA regulated financial services licence

The category decides almost everything

The DFSA sorts Authorised Firms into five prudential categories. The category follows from the activities you intend to carry on, and it sets base capital, the expenditure-based capital requirement, reporting frequency and how much regulatory attention you attract. Getting it right at the scoping stage saves months.

Most new entrants land in Category 3C or Category 4. Category 3C covers managing assets, managing a collective investment fund and discretionary portfolio management, with base capital of US$500,000. Category 4 covers advising and arranging, with base capital of US$10,000, and is the usual home for corporate finance boutiques and insurance intermediaries.

• Category 1: accepting deposits or providing credit from your own balance sheet. Base capital US$10 million
• Category 2: dealing in investments as principal. Base capital US$2 million
• Category 3A: dealing as matched principal or as agent. Base capital US$500,000
• Category 3B: providing custody for a fund or acting as fund trustee. Base capital US$4 million
• Category 3C: managing assets, fund management, discretionary portfolio management. Base capital US$500,000
• Category 3D: providing money services. Base capital US$200,000
• Category 4: advising and arranging, insurance intermediation. Base capital US$10,000
• Category 5: Islamic financial institution managing unrestricted profit sharing accounts. Base capital US$10 million

Capital is base plus expenditure, whichever is higher

Base capital is a floor, not a target. Every Authorised Firm also has to hold an Expenditure Based Capital Minimum, calculated as a number of weeks of its annual audited expenditure. The multiplier depends on the category, running from six weeks for the lighter categories up to eighteen or twenty-five weeks for firms holding client assets.

For a young Category 3C firm with a US$2 million cost base, the expenditure test often bites harder than the US$500,000 base capital. Model both and hold the higher figure, with headroom. The DFSA asks for a three-year financial projection and will test whether the firm stays above its requirement in the downside case.

The Regulatory Business Plan does the heavy lifting

The RBP is the document the DFSA reads first and returns to throughout. It has to explain what the firm does, for whom, how money and instructions move, who the counterparties are, where the risks sit and how they are controlled. Vague strategy language gets picked apart. Specific operational description gets approved.

Alongside it you will produce a compliance manual, an AML policy mapped to the DFSA AML Module and the federal regime, a risk management framework, a business continuity plan, three-year financials and an internal audit approach. These are assessed as a set. A polished RBP sitting on top of a generic downloaded compliance manual is an obvious tell and slows everything down.

Authorised Individuals and where firms get stuck

Certain functions have to be held by individuals the DFSA has approved by name. The Senior Executive Officer must be resident in the UAE and have genuine authority over the business. The Compliance Officer and Money Laundering Reporting Officer must also be UAE resident, and while the two roles can sit with one person in a small firm, the DFSA looks closely at capacity before agreeing.

The most common delay is not the firm, it is the people. Finding a Compliance Officer the regulator will approve, who has the right experience and is willing to move, takes longer than most founders plan for. Start that search at the same time as you start the RBP, not after in-principle approval.

How the timeline actually runs

A pre-application meeting with the DFSA sets expectations and flags anything unusual. The formal application follows, and the case officer will come back with written questions, usually in two or three rounds. In-principle approval arrives with conditions attached: fund the capital, sign the lease, complete the incorporation, confirm the key people are in place.

Once conditions are met the DFSA issues the Licence and you can begin regulated activity. Firms that clear it in three months generally had the compliance hire lined up before they applied. Firms that take nine months usually changed the business model mid-application.