Regulator

UAE Capital Market Authority (UAE CMA)

The UAE Capital Market Authority (UAE CMA), previously the Securities and Commodities Authority (SCA), is the federal regulator of securities and capital-market activities in the UAE. Its website still uses the sca.gov.ae address. This page sets out how a firm gets licensed by it.

NameUAE Capital Market Authority (UAE CMA), previously the Securities and Commodities Authority (SCA). Guidance sca.gov.ae home page
JurisdictionFederal. The Authority exercises its powers within the UAE, excluding the financial free zones, which have their own regulators. Rule Federal Decree-Law No. 32 of 2025, Art. 5(3)
Established byFederal Decree-Law No. 32 of 2025 and Federal Decree-Law No. 33 of 2025, which replaced Federal Law No. 4 of 2000 with effect from 1 January 2026. Rule Federal Decree-Law No. 32 of 2025; Federal Decree-Law No. 33 of 2025
What it doesRegulates and supervises financial activities, licensed persons and issuers onshore, and publishes warnings about entities that are not licensed. Rule Federal Decree-Law No. 32 of 2025, Art. 5(1); UAE CMA, Warnings
How it licensesThe Authority's financial-activity licensing service lists the requirements an applicant must meet, including financial eligibility, experience and integrity, a feasibility study and adequate resources, and the suitability of partners, board members and senior management. The application runs in phases, with a separate licensing phase and its own document list. Guidance UAE CMA, Financial activity licensing service
Check a firmThe Authority's site lists licensed entities and publishes warnings. It urges investors to verify the licensing status of any entity before entering into agreements or transferring funds. Guidance UAE CMA, Warnings and Licensed companies

Rules as at 3 November 2026. Each statement carries its label and the section it comes from.

The licensing requirements and the phased application are described on the Authority's financial-activity licensing page. Guidance UAE CMA: Financial activity licences

Who it licenses

Firms carrying on any of its financial activities in the State outside the financial free zones. The applicant can be a UAE company, a foreign branch, or a free-zone company where that zone's law permits. Rule UAE CMA Financial Activities Rulebook Section 2 Ch 2 Art 1, Ch 4 Art 2(1) It also licenses virtual-asset service providers outside Dubai; firms serving Dubai are licensed by VARA and registered with the UAE CMA by default. Rule UAE CMA VASP General Module Art 2(1); UAE CMA and VARA agreement, 5 September 2024

Financial activity categories and capital

CategoryActivitiesBase capitalSource
First CategoryDealing in securities: brokers, OTC derivatives, commodities and forex brokers, financial products dealersAED 30mRule UAE CMA Financial Activities Rulebook Section 2 Annex 1
Second Category, fund managementManagement of investment fundsAED 1mRule Annex 1
Second Category, portfolio managementPortfolio managementAED 3mRule Annex 1
Second Category, fund administrationAdministrative services for investment fundsAED 1mRule Annex 1
Second Category, family business investment managementInvestment management for a family businessAED 1mRule Annex 1 (footnote 5)
Third CategoryCustody, registrar, clearing, deposit bank and agent, covered warrants issuerAED 50mRule Annex 1
Fourth CategoryCredit ratingAED 5mRule Annex 1
Fifth CategoryFinancial consultation, issuance manager, listing advisor, promotion, introducingAED 500,000Rule Annex 1
Sixth CategoryInvestment crowdfunding platformAED 1mRule Annex 1

Virtual-asset service providers

Virtual-asset service providers are licensed under the VASP General Module, in force from 28 February 2026. Rule UAE CMA Chairman's Decision 04/Chairman/2026 Art 6

CategoryActivitiesBase capitalSource
Category OneDealing in virtual assets as principalAED 4m or 25% of annual expenses, whichever is higherRule UAE CMA VASP General Module Art 21(1)
Category TwoDealing as agent or matched principalAED 1m or 25% of annual expensesRule VASP General Module Art 21(1)
Category ThreeCustody of virtual assetsAED 3m or 25% of annual expensesRule VASP General Module Art 21(1)
Category FourArranging custody, arranging deals, investment adviceAED 1m or 25% of annual expensesRule VASP General Module Art 21(1)
Category FivePortfolio management of virtual assetsAED 1m or 25% of annual expensesRule VASP General Module Art 21(1)
Category SixOperating a multilateral trading facility for virtual assetsAED 500,000 or 35% of annual expensesRule VASP General Module Art 21(1); ATS Module

Fees

  • Fifth Category: consultation AED 1,000 to apply and AED 5,000 for the licence; promotion AED 3,000 and AED 10,000; introducing AED 5,000 and AED 10,000; issuance manager and listing advisor AED 3,000 and AED 5,000. Rule UAE CMA service cards: Resolution 32/Chairman 2018 as amended by 18/Chairman 2026
  • Second Category: portfolio management AED 5,000 and AED 75,000; fund management AED 5,000 and AED 35,000; fund administration AED 3,000 and AED 5,000. Rule UAE CMA service cards
  • Virtual assets: Cabinet Resolution 83/2025 sets fees by the older activity names, for example AED 5,000 to apply and AED 75,000 for a broker or custodian licence. Rule Cabinet Resolution 83/2025 Art 1(2) How those lines map to the 2026 categories is our reading, and no fee line is published for Categories Four and Five. Judgement Cabinet Resolution 83/2025; VASP General Module

People, premises and reporting

A Fifth Category firm needs a category head or manager and a Head of Compliance, plus a Promotion Manager where it promotes; consultation, issuance manager and listing advisor activities add a Financial Analyst. Rule UAE CMA Financial Activities Rulebook Annex 1

A virtual-asset service provider needs a board, a Senior Manager, a chief executive, a chief financial officer, a Compliance Officer, an MLRO and an internal auditor. The Senior Manager, chief executive, Compliance Officer and MLRO must be resident, and the Compliance Officer and MLRO roles can be combined. It needs a physical head office in the State. Rule UAE CMA VASP General Module Art 54 to 57; Annex 2

Financial activity firms file reviewed quarterly reports within 45 days and audited annual reports within three months, keep records for ten years and keep cloud servers inside the State. Rule UAE CMA Financial Activities Rulebook Section 2 Ch 4 Art 2; Ch 5 Art 7

Documents

Every application pack, whichever the regulator, contains the same core documents. Rule UAE CMA Manual Chapter 4

  • Regulatory business plan: the activities applied for, clients, products, three-year financial projections, and the capital plan showing the base capital and how it is funded.
  • Corporate documents: constitution or articles, an ownership chart to the ultimate beneficial owners, the group structure, and for a branch the home regulator's consent or no-objection.
  • Fit-and-proper files for every controller, director and senior manager: CVs, declarations, criminal and credit checks, and the regulator's own individual forms.
  • Compliance and AML framework: compliance manual, AML and CFT policy and risk assessment, and the MLRO arrangements.
  • Risk management framework and internal controls, including outsourcing and IT and cyber policies.
  • Financial resources: capital adequacy workings and, for existing groups, audited accounts.
  • Evidence of premises and of professional indemnity insurance where the category requires it.

The UAE CMA follows two steps: initial approval on the business plan and governance file, then the final licence once capital is paid up, premises and systems are in place, and the category head and head of compliance are accredited. Chapter 4 of the Manual lists the policies and guides required for each activity, and virtual-asset service providers go through the VASP General Module with an in-principle stage. Rule UAE CMA Manual Chapter 4; VASP General Module

How to apply, and published timelines

  1. Confirm the activity and category. Clara, our AI assistant, maps your business to the Authority's financial activities or VASP categories.
  2. File the initial-approval request, or for a virtual-asset service provider the in-principle request.
  3. Meet the conditions within the period allowed.
  4. File for the licence.

Financial activities: initial approval within 20 business days, the licence within 30 working days of a complete file, and six months, extendable once, to meet the conditions. Rule UAE CMA Financial Activities Rulebook Section 2 Ch 3 Art 1(3); Ch 4 Art 1(3)

Virtual-asset service providers: an in-principle decision within 45 working days of a complete application, six months, extendable once, to obtain the licence, and a licence decision within 60 working days. Rule UAE CMA VASP General Module Art 26, 74 A trading facility follows the ATS Module, with a decision within 60 working days of a complete file. Rule UAE CMA ATS Module Art 80

Check a firm

The Authority's site lists licensed companies and publishes warnings about entities operating without a licence. Guidance UAE CMA: Licensed companies; Warnings and violations

Questions

Is the UAE CMA the same body as the SCA?

Yes. The UAE Capital Market Authority was previously the Securities and Commodities Authority, and its website still uses the sca.gov.ae address. Guidance sca.gov.ae home page

What capital does a UAE CMA Fifth Category firm need?

AED 500,000, covering all five Fifth Category activities. Rule UAE CMA Financial Activities Rulebook Section 2 Annex 1

How long does the UAE CMA take?

For financial activities, initial approval within 20 business days and the licence within 30 working days of a complete file. Rule UAE CMA Financial Activities Rulebook Section 2 Ch 3 Art 1(3); Ch 4 Art 1(3) We do not promise timelines.

Can a VARA-licensed firm serve clients elsewhere in the UAE?

It is registered with the UAE CMA by default to serve the wider UAE, at AED 3,000 a year. Rule UAE CMA and VARA agreement, 5 September 2024; Cabinet Resolution 83/2025

Know your route before you apply

Ask for a call-back. We confirm your route with you and arrange your place in the assessment beta.

Request a call-back