PART THREE · 09 · Setting Up

Regulated Activities

Authored by10 Leaves Reading time · 29 min Updated · Q1 2026

The Dubai Financial Services Authority (DFSA) is the independent regulator of all financial services conducted in or from the Dubai International Financial Centre, operating under the DIFC Regulatory Law 2004 and exercising jurisdiction over 844 Authorised Firms and 119 Designated Non-Financial Businesses or Professions (DNFBPs)¹ as at the date of publication. Financial services activities are organised into five principal prudential categories — Category 1 through Category 5 — determined by the highest-risk activity a firm is licensed to conduct, with a further layer of specialist endorsements and standalone regimes covering areas such as crypto tokens, representative offices, authorised market institutions, credit rating agencies, and the innovation testing licence. This chapter covers each category in turn: the defining activities, base capital requirements, risk-capital approach, typical applicants, conduct obligations, and current DFSA fees drawn from the Fees Module (FER VER35/04-26)². The DFSA Rulebook³ is the authoritative source for all obligations; where this chapter summarises or simplifies, it directs the reader to the relevant module. Practitioners seeking authorisation are strongly encouraged to engage specialist advisers — this guide was prepared by 10 Leaves⁴ with regulatory interpretation support from Legability⁵.

The DFSA Regulatory Framework

The DFSA Rulebook is published at the DFSA Rulebook portal³ and is structured as a set of modules, each governing a distinct slice of the authorisation and conduct stack. The table below maps the live modules and their function:

Module	Name	Core function
GEN⁶	General	Definitions of all regulated Financial Services (GEN 2); core governance, systems and controls (GEN 5); financial promotions (GEN 3); crypto token recognition framework (GEN 3A); Innovation Testing Licence (GEN 13); authorisation gateway (GEN 7)
PIB⁷	Prudential — Investment, Insurance Intermediation and Banking	Capital categorisation (PIB 1.3); base capital (PIB 3.6); expenditure-based and risk capital (PIB 3.7–3.8); Basel-aligned credit, market, and operational risk (PIB 4–6); ICAAP/SREP (PIB 10)
COB⁸	Conduct of Business	Client classification (COB 2); core conduct rules — suitability, conflicts, communications (COB 3); dealing rules including best execution (COB 6); crypto token financial services (COB 15); credit rating agencies (COB 8); ATS operators (COB 9)
AMI⁹	Authorised Market Institutions	Exchange and clearing house licensing (AMI 2–3); market integrity (AMI 6); crypto token trading facilities (AMI 5B)
CIR¹⁰	Collective Investment Rules	Public, Exempt, and Qualified Investor Funds (CIR 10–12A); specialist fund classes (CIR 13); fund administrators and external fund managers (CIR 5–6)
FER²	Fees	Application fees (FER 2.1.1); annual fees (FER 3.2.1); AMI fees (FER 3.4); endorsement surcharges
AML¹¹	Anti-Money Laundering	Risk-based approach (AML 4); customer due diligence (AML 7); MLRO appointment (AML 11); SAR obligations (AML 13); implements Federal Law No. 20 of 2018
REP¹²	Representative Office	Scope and limits of representative offices; permitted marketing activities; regulatory status disclosure
IFR¹³	Islamic Finance Rules	Shari'a Supervisory Board requirements (IFR 3); profit sharing investment accounts (IFR 5); Islamic funds (IFR 6); Sukuk (IFR 7); Takaful (IFR 8)

GEN underpins the entire stack: no Authorised Firm can operate without first satisfying the licensing gateway in GEN 7, and all other modules apply in addition to GEN's baseline obligations. PIB then determines ongoing capital adequacy. COB governs how a firm treats its clients. AMI applies only to market operators. CIR applies to any firm managing or administering collective investment funds. FER governs what a firm pays for its licence. AML and IFR apply horizontally across all categories where relevant. Note: the formerly standalone AUT module has been absorbed into GEN 7; the ASP module is archived.

Categories 1–5 at a Glance

Source: PIB 1.3¹⁴ and PIB 3.6.2¹⁵.

Category	Defining activities	Base capital (USD)	Risk-based capital approach	Typical firms
1	Accepting Deposits; Managing PSIAu (unrestricted)	$10,000,000	Full Basel: Base Capital ≥ Risk Capital (Credit RWA + Market + Op Risk). CCB and CCyB. ICAAP/SREP.	Commercial banks, investment banks, private banks, wholesale deposit-takers
2	Providing Credit; Dealing as Principal (non-Matched)	$2,000,000	Highest of: Base Capital, Expenditure-Based Capital Minimum (25% annual expenditure), or Risk Capital Requirement	Proprietary trading desks, prime brokers, lending institutions, principal dealers
3A	Dealing in Investments as Agent (brokerage)	$500,000	Highest of: Base Capital, EBCM, or Risk Capital. Simplified credit risk available (PIB App 4).	Forex and multi-asset brokerages, execution-only brokers, broker-dealers
3B	Providing Custody (for a Fund or of Crypto Assets); Acting as Fund Trustee; Operating/Administering an EMPS	$500K–$2M (activity-dependent; $1M for crypto custody; $2M for fund trustee)	Highest of: Base Capital or Risk Capital. No EBCM. Liquidity requirements apply.	Fund custodians, crypto custody providers, fund trustees, EMPS operators
3C	Managing Assets; Managing a Collective Investment Fund; Insurance Management; Providing Trust Services (as trustee); Operating an ATS; Providing Money Services (Stored Value)	$40K–$500K (by activity; $140K for asset/public-fund managers; $40K for QIF/VC-only managers)	Highest of: Base Capital or Risk Capital. Liquidity requirements apply.	Discretionary asset managers, fund managers, trust companies, ATS operators
3D	Providing Money Services (payment accounts, FX, payment instruments, payment initiation; not Stored Value issuance)	$200,000	Highest of: Base Capital or Risk Capital. Liquidity requirements apply.	Payment service providers, e-money firms, multi-currency account providers
4	Arranging Deals; Advising on Financial Products; Insurance Intermediation; Fund Administration; Trust Services (non-trustee); Money Transmission; Crowdfunding	$10K–$140K (by activity)	Highest of: Base Capital or simplified Risk Capital. PII required for many activities.	Independent financial advisers, insurance brokers, fund administrators, EAMs, credit brokers, crowdfunding platforms
5	Islamic Financial Institution managing PSIAu	$10,000,000	Same full Basel framework as Category 1, plus IFR requirements (SSB, PSIA reporting)	Dedicated Islamic banks, institutions conducting exclusively Islamic financial business

Category 1 — Banks & Deposit-Takers

Category 1 is reserved for firms whose defining activity is accepting deposits or managing unrestricted Profit Sharing Investment Accounts (PSIAu) where the Category 5 criteria are not met. The base capital requirement is USD 10 million under PIB 3.6.2¹⁵, and ongoing capital must satisfy the full Basel-aligned framework: the firm must maintain capital no less than the Risk Capital Requirement, computed as the sum of Credit Risk-Weighted Assets, Market Risk Capital, and Operational Risk Capital (PIB 4–6). The Capital Conservation Buffer and Countercyclical Capital Buffer also apply. Category 1 firms are subject to the ICAAP and Supervisory Review and Evaluation Process (SREP) under PIB 10, and to comprehensive public disclosure obligations under PIB 11.

Typical applicants include regional and international commercial banks establishing a DIFC branch, wholesale deposit-taking subsidiaries, investment banks that accept deposits ancillary to their capital markets activities, and private banking operations. All must hold a physical leased office in the DIFC; the DFSA expects meaningful local substance, including a resident Senior Executive Officer and typically a resident Chief Risk Officer given the higher-risk nature of deposit-taking. The DFSA application fee for accepting deposits is USD 70,000 and the annual licence fee is USD 100,000 (base), plus an expenditure component and per-additional-service fees under FER 3.2.1¹⁶.

Category 2 — Dealing as Principal

Category 2 covers firms that provide credit or deal in investments as principal in a non-matched-principal manner, without meeting the Category 1 deposit-taking threshold. The base capital is USD 2 million, and actual capital must be the highest of base capital, the Expenditure-Based Capital Minimum (25% of audited annual expenditure), or the full Risk Capital Requirement under PIB. The full PIB prudential framework applies, including credit risk, market risk, and operational risk capital calculations.

Typical applicants include proprietary trading firms, commodity and derivatives dealers taking on-balance-sheet risk, underwriting desks, and institutions providing secured or unsecured credit to professional clients. Firms seeking to add crypto token dealing as principal face higher annual fees — USD 70,000 per year versus USD 50,000 for non-crypto principal dealers — per FER 3.2.1¹⁶. The DFSA application fee is USD 40,000.

Category 3A — Dealing as Matched Principal / Broker-Dealer

Category 3A covers dealing in investments as agent — executing client orders without taking principal risk beyond a matched-principal model. The base capital is USD 500,000, with actual capital the highest of base capital, EBCM, or Risk Capital. A simplified credit risk approach is available under PIB Appendix 4 for eligible firms.

Typical applicants are forex brokerages, multi-asset execution brokers, and broker-dealers accessing Nasdaq Dubai or international markets. By default, Category 3A firms may only deal with Professional Clients; a Retail Endorsement (additional USD 20,000 application fee, USD 4,000/year) is required to onboard retail investors. The DFSA scrutinises the pedigree and regulated track record of the applicant's management team closely for this category. Application fee: USD 25,000; annual fee: USD 25,000 (non-crypto) or USD 35,000 (with crypto token permissions) per FER 3.2.1¹⁶.

Category 3B — Custody

Category 3B is the custodian and trustee tier, covering firms that hold assets on behalf of others: providing custody for a fund, providing custody of crypto assets, acting as trustee of a fund, and operating or administering an Employee Money Purchase Scheme (EMPS). Base capital requirements are activity-specific:

USD 2 million for a fund trustee
USD 1 million for crypto asset custody or EMPS administration
USD 500,000 for fund custody (non-crypto) or EMPS operation

There is no Expenditure-Based Capital Minimum for Category 3B; capital must equal the higher of the base capital requirement or the Risk Capital Requirement, and liquidity requirements apply under PIB 3.5.

Typical applicants are global custody banks, fund administrators seeking a trustee permission, and specialist digital asset custodians. Crypto custody firms must also comply with COB 15.4⁸, which imposes technology governance requirements including private key management, cold/hot wallet segregation, and technology audit obligations.

Category 3C — Asset Management, Fund Management, Trust Services

Category 3C is the broadest middle tier, encompassing four principal sub-tracks.

Asset Manager. The core activity is Managing Assets — managing, on a discretionary basis, assets belonging to another person where those assets include investments or rights under a long-term insurance contract. The base capital is USD 140,000 per PIB 3.6.2¹⁵, reflecting the 2025 reforms that removed the Expenditure-Based Capital Minimum for firms not holding client assets or client money. Firms holding client assets continue to apply an EBCM fraction (18/52 of projected annual expenses for firms holding client assets). Typical applicants are discretionary portfolio managers, External Asset Managers (EAMs) graduating from Category 4, and boutique wealth managers. The DFSA application fee is USD 25,000 and the annual fee USD 25,000 (non-crypto) per FER 2.1.1¹⁷. A full treatment of requirements is at 10 Leaves — DIFC Asset Manager License¹⁸.

Domestic Fund Manager (DFME). A firm incorporated in DIFC and licensed to manage a collective investment fund is a Domestic Fund Manager, regulated under CIR VER40/01-26¹⁰. Base capital is tiered: USD 140,000 for managers of Public Funds or credit funds; USD 40,000 for managers of only QIFs, Venture Capital Funds, or Investment Companies managed by Corporate Directors (no credit funds). A dedicated DFSA fast-track process for Exempt Fund and QIF managers targets completion in approximately four to six weeks. The DIFC has waived ROC application fees and reduced the commercial licence to USD 2,000 per annum for the first two years for VC Fund managers. Fees: application USD 10,000 (EF managers), USD 5,000 (QIF/VC managers); annual fees mirror application fees. See 10 Leaves — DIFC Fund Manager License¹⁹.

External Fund Manager. An investment manager regulated in a recognised overseas jurisdiction may manage a DIFC-domiciled fund as an External Fund Manager under CIR 6¹⁰, without obtaining a full DFSA licence, provided it meets the DFSA's assessment criteria including host jurisdiction FATF compliance. A declaration filing is required under FER 2.12, with annual fees under FER 3.10B. This pathway is widely used by UCITS, AIFMD, and SEC-registered managers seeking to establish a DIFC fund vehicle for regional distribution. See 10 Leaves — External Asset Manager License²⁰.

Trust Services Provider. A firm providing Trust Services as trustee of an express trust falls within Category 3C with a base capital of USD 500,000 (the default for Category 3C where no lower-capital activity applies). Firms providing trust services in a non-trustee capacity (e.g. trust administration, nominee services) fall within Category 4. Typical applicants are trust companies, fiduciary service providers, and corporate services groups. The DFSA application fee for trust services as trustee is USD 25,000 per FER 2.1.1¹⁷.

Category 3D — Money Services

Category 3D covers Providing Money Services where the firm operates payment accounts, executes payment transactions, issues payment instruments (such as multi-currency corporate accounts or virtual IBANs), provides account information services, or initiates payment transactions — but does not issue Stored Value (which is Category 3C) or conduct pure Money Transmission alone (which is Category 4). The base capital is USD 200,000, though actual capital can be substantially higher once transaction-based add-ons under PIB are applied; firms issuing payment instruments may need to hold capital approaching USD 700,000 in practice, according to 10 Leaves — Category 3D Money Services License²¹.

The money services sub-tier breakdown is worth stating precisely:

Category 4 (advising/arranging): Arranging or Advising on Money Services (including Account Information Services and Payment Initiation Services) — base capital USD 10,000; DFSA application and annual fees USD 5,000
Category 4 (Money Transmission only): Pure remittance without operating payment accounts — base capital USD 140,000; DFSA application and annual fees USD 10,000
Category 3D (payment accounts): Operating multi-currency accounts, executing payment transactions, issuing corporate payment instruments — base capital USD 200,000; DFSA application and annual fees USD 15,000
Category 3C (Stored Value): Issuing prepaid instruments or e-money to consumers — base capital USD 500,000; DFSA application and annual fees USD 25,000

Typical applicants are licensed payment service providers, corporate treasury payment platforms, fintech firms operating virtual IBAN infrastructure, and regional remittance operators. Many money services applicants are directed first to the DFSA's Innovation Testing Licence (ITL)²² before submitting a full application. Conduct is governed by COB and the DFSA's AML module, reflecting the elevated financial crime risk in this sector.

Category 4 — Advisory & Arranging

Category 4 is the entry-level DFSA licence tier, covering non-discretionary activities where the firm does not take assets onto its own books. Core permissions include Advising on Financial Products, Arranging Deals in Investments, Arranging Credit and Advising on Credit, Insurance Intermediation, Insurance Management, and Providing Fund Administration. Category 4 firms may also act as crowdfunding platform operators and provide non-trustee Trust Services.

Sub-tracks and their base capital requirements under PIB 3.6.2¹⁵:

Independent Financial Advisers (IFAs) and EAMs: Advising on Financial Products and Arranging Deals — base capital USD 10,000–USD 30,000 (2025 revised figure per 10 Leaves²³); application fee USD 15,000; annual fee USD 15,000
Insurance Brokers: Insurance Intermediation — base capital per PIB 3.6.2; application fee USD 15,000; annual fee USD 15,000
Advisers to Family Offices: Non-discretionary advisory — Category 4 with standard capital; no management or custody of assets permitted
Crowdfunding Platforms: Operating a Crowdfunding Platform — base capital USD 140,000; application fee USD 10,000
Fund Administrators: Providing Fund Administration — application fee USD 15,000; annual fee USD 15,000

The DFSA requires Professional Indemnity Insurance for most Category 4 activities under PIB 6.12. By default, Category 4 firms may only serve Professional Clients; a Retail Endorsement (application surcharge USD 20,000; annual surcharge USD 4,000) is required to serve retail investors. Crypto token endorsements (advising, arranging, or managing recognised tokens) are available as additions to an existing Category 4 licence without the need for a separate higher-category application, attracting an additional annual fee of USD 5,000 per activity under FER 3.2.1¹⁶. The DFSA application fee for most Category 4 activities is USD 15,000 and the annual licence fee is USD 15,000 (non-crypto) or USD 20,000 (with crypto token permissions).

Category 5 — Islamic Finance (Dedicated Islamic Firms)

Category 5 is reserved for Islamic Financial Institutions whose primary business is managing unrestricted Profit Sharing Investment Accounts (PSIAu) — the Islamic functional equivalent of deposit-taking. The base capital is USD 10 million, and the full Basel-aligned capital framework (identical to Category 1) applies under PIB 3.3, supplemented by the requirements of the IFR module¹³.

The defining governance requirement for Category 5 firms (and any firm conducting Islamic Financial Business) is the maintenance of a Shari'a Supervisory Board (SSB) under IFR 3: an independent board of qualified Shari'a scholars that approves products, reviews operations, and issues Fatwas on permissibility. All products and documentation must be approved by the SSB, and an annual external Shari'a audit is required in addition to the standard financial audit. The IFR module further requires compliance with AAOIFI standards, segregated accounting for PSIAu holders, and separate disclosure. PSIA holders must be informed of the risk-sharing nature of their accounts and the methodology for profit allocation. The DFSA application fee for Category 5 is USD 70,000 and the annual fee is USD 100,000 (base) per FER 2.1.1 and FER 3.2.1².

Endorsements & Specialist Regimes

Credit Rating Agency

A firm that operates a Credit Rating Agency holds a standalone DFSA endorsement under COB 8⁸. The DFSA application fee is USD 10,000 and the annual fee is USD 15,000 per FER 3.2.1(3)². Conduct requirements under COB 8 include independence from rated entities, methodological consistency and disclosure, management of conflicts of interest, and mandatory registration with the DFSA before issuing ratings in or from the DIFC. Credit rating agencies are also subject to the IOSCO Code of Conduct Fundamentals for Credit Rating Agencies as a reference standard.

Authorised Market Institution (AMI)

An Authorised Market Institution is a firm licensed to operate an Exchange or a Clearing House in the DIFC, regulated under the AMI module⁹. There are currently two AMIs in the DIFC: Nasdaq Dubai, the flagship equities and Sukuk exchange, and DCCC (Dubai Commodities Clearing Corporation). Nasdaq Dubai also holds the Listing Authority endorsement (an additional USD 150,000 application fee and USD 75,000 annual surcharge under FER 2.1.3 and FER 3.4.3²).

AMI application fees are among the highest in the DIFC framework: USD 150,000 for an Exchange, USD 150,000 for a Clearing House, and USD 300,000 for both combined. Annual fees are USD 100,000 per institution (or USD 200,000 for combined Exchange and Clearing House). AMIs must maintain robust governance, market integrity frameworks, admission criteria for traded securities, and member rules under AMI 6. For crypto token trading facilities, AMI 5B sets additional requirements including technology governance and market abuse controls. DIFC also hosts crypto Alternative Trading System (ATS) operators under a lighter-touch licensing path within the COB 9 framework.

Crypto Token Regime

The DFSA Crypto Token regime entered into force on 1 November 2022 via RM328/2022¹, embedding the framework in GEN 3A²⁴ and COB 15⁸. The core rule is simple: financial services activities in the DIFC may only be conducted with Recognised Crypto Tokens — tokens that meet the criteria in GEN 3A.3.4 and have been individually recognised by the DFSA. As at the date of this guide, the recognised list per dfsa.ae/innovation²² is:

Token	Recognition date
Bitcoin (BTC)	1 November 2022
Ethereum (ETH)	1 November 2022
Litecoin (LTC)	1 November 2022
Toncoin (TON)	2 November 2023
XRP	2 November 2023
ZetaChain (ZETA)	15 November 2024
EURC	17 February 2025
USDC	17 February 2025
Ripple RLUSD	3 June 2025

Permitted financial services activities with Recognised Crypto Tokens include: Dealing in Investments as Principal, Dealing as Agent, Arranging Deals, Managing Assets, Advising on Financial Products, Providing Custody, Arranging Custody, Operating a Clearing House, and Operating an MTF/ATS. These are not separate licences — a firm requires the underlying Category 3A, 3C, 3B, or 4 permission plus a crypto token endorsement.

Custody of Crypto Tokens requires Category 3B status with base capital of USD 1 million (PIB 3.6.2). COB 15.4⁸ imposes private key management protocols, cold/hot wallet segregation, and technology audit requirements. General conduct requirements for all crypto services are set in COB 15.6⁸, covering disclosure, conflicts of interest, market abuse prevention, and financial promotions controls under GEN 3.

Fees for crypto-active firms are elevated: dealing as principal with crypto tokens costs USD 70,000/year (versus USD 50,000 non-crypto); dealing as agent USD 35,000/year (versus USD 25,000); Category 4 arranging with crypto USD 20,000/year (versus USD 15,000). ATS operators trading crypto tokens face volume-tiered annual fees under FER 3.4.6²: USD 150,000 (average daily volume below USD 50M), USD 300,000 (USD 50M–USD 100M), USD 500,000 (USD 100M–USD 200M), and USD 800,000 (above USD 200M). An additional USD 10,000/year applies where the ATS admits Direct Access Members. The ATS application fee is USD 150,000 per FER 2.1.5².

Representative Office

A Representative Office is the lowest-intensity DFSA-regulated presence, authorised to carry on the financial service of "Operating a Representative Office" under the REP module¹². It may market and promote the parent institution's services, distribute research (with prescribed disclaimers), make referrals and introductions, and in limited circumstances market Foreign Funds (REP 4.7). It may not onboard clients, execute transactions, provide advice, or market Restricted Speculative Investments.

The Representative Office falls entirely outside the PIB capital framework — there is no base capital requirement. The single mandatory appointment is a Principal Representative; there is no requirement for a Compliance Officer or MLRO at the Rep Office entity level, though the head office must provide AML oversight. The DFSA application fee is USD 6,000 under FER 2.1.4² and the annual fee is USD 6,000 flat under FER 3.2.1(5)². Physical presence in the DIFC is required; the DFSA now permits desk-sharing with an affiliated entity in certain circumstances. See 10 Leaves — Representative Office in DIFC²⁵ for a full treatment.

Innovation Testing Licence (ITL)

The Innovation Testing Licence is the DFSA's regulatory sandbox, established under GEN 13²⁶. It allows fintech and digital financial services businesses to test regulated products with live clients under a controlled, condition-limited framework, without the full burden of a standard Authorised Firm licence. It is not a substitute for a Financial Services Permission — regulated activities cannot be conducted at scale until a full FSP is obtained.

The ITL follows a two-stage process:

Stage 1 — Pre-Application: The applicant submits the ITL Pre-application Form (available at dfsa.ae/innovation²²). The DFSA assesses the firm against the eligibility criteria in GEN 13.4: genuine innovation not already available in the market, a credible business model, adequate resources, a defined test plan, and genuine intent to seek a standard licence post-testing.
Stage 2 — Full Application: Only firms that pass the pre-application assessment are invited to submit the full ITL Application Form. If accepted, the DFSA issues an ITL specifying: authorised financial services for testing, scope and parameters, restrictions and conditions, and the testing duration (typically 6–12 months for most sandbox cohorts, though duration is set case by case).

At the end of the testing period, the ITL holder either applies for a standard Authorised Firm licence or withdraws from the DIFC. Existing Authorised Firms that wish to test innovative technology may also use a GEN 13 pathway in partnership with an ITL holder. The ITL application fee mirrors the standard FER 2.1.1 fee for the Financial Service(s) being tested; there is no separately codified discounted fee tier in the published FER module, though the DFSA may negotiate individual terms. Technologies historically directed toward the ITL include robo-advisory platforms, crowdfunding models, and novel payment services. Relevant context at 10 Leaves — DIFC Tech Startup License²⁷.

Fund Regime in DIFC

The DIFC fund regime is governed by the Collective Investment Law 2010 (DIFC Law No. 2 of 2010)²⁸ and CIR VER40/01-26¹⁰. The DFSA distinguishes three fund tiers by investor access and minimum subscription:

Fund type	Regulation level	Min. subscription	Registration timing	Key features
Public Fund	Highest — full IOSCO standards (CIR 10)	None (retail-accessible)	DFSA approval required	Full prospectus disclosure; independent fund oversight; may be listed on a DIFC exchange; suitable for broad retail distribution
Exempt Fund	Intermediate (CIR 12)	USD 50,000	5-business-day DFSA notification	Max 100 unitholders; Professional Clients only; private placement; lighter disclosure; administrator not mandatory for closed-ended EFs
Qualified Investor Fund (QIF)	Lightest (CIR 12A)	USD 500,000	2-business-day DFSA notification	Max 50 unitholders; Professional Clients only; fastest registration; administrator not mandatory for closed-ended QIFs; preferred by VC, PE, and hedge fund managers

Specialist fund classes under CIR 13 include: REITs and Property Funds (closed-ended; listed within 6 months; max 50% LTV); Hedge Funds (DFSA Hedge Fund Code of Practice); Private Equity Funds; Venture Capital Funds (subsidised fee regime); Credit Funds (min 90% credit assets; closed-ended; max 10-year life; 25% single-borrower cap); ETFs; Islamic Funds (Shari'a SSB required; IFR compliance); Umbrella Funds with Protected Cell Company (PCC) or Incorporated Cell Company (ICC) structures; and Feeder/Master Fund arrangements.

Three legal vehicles are available for DIFC-domiciled funds: Investment Company (incorporated under DIFC Companies Law; may be internally or externally managed; PCC/ICC options for Umbrella Funds), Investment Trust (established by trust deed between Fund Manager and a licensed Category 3B trustee), and Investment Partnership (DIFC-registered Limited Partnership; General Partner must be a DFSA-authorised Fund Manager).

Fund administrators are licensed separately as Category 4 firms under CIR 5. Fund custodians are licensed as Category 3B firms. An External Fund Manager registered under CIR 6 can establish and manage a DIFC fund without holding a DFSA licence itself, subject to the DFSA's assessment of the home regulator's equivalence. For a comprehensive treatment of each fund class, see 10 Leaves — Investment Funds in the DIFC²⁹.

DFSA Authorisation Process

The DFSA's standard authorisation pathway comprises four stages, described in GEN 7⁶ and the DIFC licensing process guide³⁰:

Pre-Application Meeting. Prospective applicants meet with the DFSA's Authorisation team to discuss the proposed business model, activity scope, and likely conditions before submitting a formal application. This step is strongly encouraged; it can materially reduce the number of iterations required during formal review.
Regulatory Business Plan (RBP) and Application Submission. The firm submits the RBP — a detailed business plan covering the proposed activities, target clients, risk management framework, governance structure, capitalisation, and three-year financial projections — together with the completed application forms, supporting documents for Authorised Individuals (fitness and propriety evidence), and the application fee.
In-Principle Approval (IPA). If the DFSA is satisfied that the firm can meet all licence conditions, it issues an In-Principle Approval specifying conditions that must be satisfied before the full Financial Services Permission is granted. These typically include: completing DIFC ROC incorporation, leasing physical office space, appointing and registering Authorised Individuals, and evidencing paid-up capital.
Conditions Satisfaction and Full Licence. Once all IPA conditions are met and evidenced to the DFSA, the full Financial Services Permission is granted and the firm can commence regulated activities.

A standard application — for a Category 3C asset manager or Category 4 advisory firm with a straightforward business model — typically takes four to six months from submission to full licence. Category 1 (banking) and Category 2 (principal dealing) applications, which involve full prudential review, may take considerably longer. Complexity surcharges under FER 2.1.1(3)² double the application fee where the applicant has a multi-jurisdictional group structure, a DIFC holding company, no bilateral MoU with the DFSA, or where the DFSA will be the consolidated or lead supervisor.

Current Fees (DFSA FER Module)

All fees are drawn from FER VER35/04-26², specifically FER 2.1.1¹⁷ (application) and FER 3.2.1¹⁶ (annual). Fees apply to the highest single applicable licensed activity — a firm with multiple permissions pays the highest applicable fee, not a sum of each.

Licence / activity type	Application fee	Annual fee (base)	Source
Category 1 — Accepting Deposits / Providing Credit	$70,000	$100,000 + expenditure component	FER 2.1.1; FER 3.2.1
Category 2 — Dealing as Principal (non-Matched)	$40,000	$50,000 (non-crypto); $70,000 (with crypto)	FER 2.1.1; FER 3.2.1
Category 3A — Dealing as Agent / Matched Principal	$25,000	$25,000 (non-crypto); $35,000 (with crypto)	FER 2.1.1; FER 3.2.1
Category 3B — Fund Custody / Fund Trustee	$25,000	$25,000 (fund trustee); $35,000 (crypto custody)	FER 2.1.1; FER 3.2.1
Category 3C — Managing Assets	$25,000	$25,000 (non-crypto); $35,000 (with crypto)	FER 2.1.1; FER 3.2.1
Category 3C — Managing CIF (Public Fund / Credit Fund)	$10,000	$10,000	FER 2.1.1; FER 3.2.1
Category 3C — Managing CIF (QIF only)	$5,000	$5,000	FER 2.1.1; FER 3.2.1
Category 3C — Managing CIF (VC Funds only)	$2,000	$2,000	FER 2.1.1; FER 3.2.1
Category 3D — Money Services (payment accounts)	$15,000	$15,000	FER 2.1.1; FER 3.2.1
Category 4 — Arranging / Advising	$15,000	$15,000 (non-crypto); $20,000 (with crypto)	FER 2.1.1; FER 3.2.1
Category 4 — Money Transmission only	$10,000	$10,000	FER 2.1.1; FER 3.2.1
Category 4 — Arranging / Advising on Money Services	$5,000	$5,000	FER 2.1.1; FER 3.2.1
Category 4 — Crowdfunding Platform	$10,000	$10,000	FER 2.1.1; FER 3.2.1
Category 5 — Islamic Financial Institution (PSIAu)	$70,000	$100,000 + expenditure	FER 2.1.1; FER 3.2.1
Representative Office	$6,000	$6,000 (flat)	FER 2.1.4; FER 3.2.1(5)
Credit Rating Agency	$10,000	$15,000	FER 2.1.1; FER 3.2.1(3)
AMI — Exchange	$150,000	$100,000	FER 2.1.2(a); FER 3.4.2(1)
AMI — Clearing House	$150,000	$100,000	FER 2.1.2(b); FER 3.4.2(2)
AMI — Exchange + Clearing House	$300,000	$200,000	FER 2.1.2(c); FER 3.4.2(3)
AMI — Listing Authority endorsement	+$150,000	+$75,000	FER 2.1.3; FER 3.4.3
Crypto ATS (non-AMI, security tokens)	+$65,000 ATS endorsement	Volume-tiered: $150K / $300K / $500K / $800K	FER 2.1.5; FER 3.4.6
Crypto ATS (Crypto Tokens)	+$150,000 ATS endorsement	Volume-tiered as above	FER 2.1.5; FER 3.4.6
Retail Client endorsement	+$20,000	+$4,000/year	FER 2.1.6(b); FER 3.2.1(2)(f)
Trade Repository endorsement	+$15,000	+$3,000/year	FER 2.1.6(a); FER 3.2.1(2)(f)
Islamic Financial Business endorsement	—	+$1,000/year	FER 3.2.1(2)(f)
Expenditure component (all Cat 1–5)	—	$1,000 per $1M regulatory expenditure + $1 per additional $1,000	FER 3.2.1(2)(c)

Complexity surcharge: an additional 100% of the application fee applies where the applicant has a multi-jurisdictional group structure, a DIFC holding company, operates in a jurisdiction with no DFSA bilateral MoU, or where the DFSA will be the consolidated or lead supervisor (FER 2.1.1(3)). Systemic importance surcharge: an additional 100% of the annual base fee applies to Category 1, 2, or 5 firms on the FSB G-SIFI list or where the DFSA is the consolidated supervisor (FER 3.2.3).

Personnel & Office Requirements

Every DFSA Authorised Firm must appoint and register Authorised Individuals in mandatory Controlled Functions before commencing regulated activities. The standard complement under GEN 7 is:

Senior Executive Officer (SEO): Responsible for the day-to-day management of the firm's regulated activities; must be UAE-resident; typically requires 10–15 years of relevant financial services experience; must be individually approved by the DFSA
Finance Officer: Responsible for financial reporting and capital adequacy monitoring; need not be UAE-resident; can be a group-level appointment; outsourceable in most categories
Compliance Officer (CO): Responsible for compliance with DFSA rules and DIFC law; must be UAE-resident for most categories; 10+ years experience; outsourceable under limited circumstances
Money Laundering Reporting Officer (MLRO): Designated AML officer under AML 11; must be UAE-resident; 10+ years AML experience; can be combined with the CO role; outsourceable
Risk Officer: Required for Category 1, 2, and 3A firms; optional (outsourced) for Category 3C/4; responsible for the firm's risk management framework
Internal Auditor: Required for most categories; typically outsourced to a DIFC-regulated internal audit firm
External Auditor: Must be from the DFSA's list of 16 recognised auditors

All physical office space in the DIFC must be leased from DIFC-approved providers. The DFSA expects meaningful local substance commensurate with the category: a flexi-desk at the DIFC Funds Centre³¹ from approximately USD 27,000 per annum (3–4 visa allocation) is accepted for Category 3C/4 managers; Category 1 and 2 banks typically require fitted office space. The DFSA may conduct on-site visits to verify that the physical premises support the firm's stated activities and governance structure.

Typical Timelines & Costs for Common Licences

The following are indicative all-in cost ranges based on published data from 10 Leaves³², DFSA fees data², and DIFC establishment data³¹. "All-in Year 1" includes DFSA application fee, DIFC ROC incorporation, commercial licence, and minimum physical premises. It excludes salaries, outsourced compliance/MLRO, and external auditor fees.

Licence type	Indicative timeline	All-in Year 1 (indicative)	Key cost drivers
Cat 3C Asset Manager (non-public-fund)	4–6 months from submission	USD 120,000–USD 180,000	DFSA fee $25K; DIFC ROC ~$20K; Funds Centre flexi-desk ~$27K; capital $140K (locked in entity)
Cat 4 Advisory / EAM	3–5 months from submission	USD 70,000–USD 100,000	DFSA fee $15K; DIFC ROC ~$20K; office from $27K; capital $30K
Cat 3D Money Services (payment accounts)	5–8 months (often via ITL first)	USD 140,000–USD 250,000	DFSA fee $15K; DIFC ROC ~$20K; capital $200K; transaction-based capital add-on
QIF Fund Manager (fast-track)	4–6 weeks for DFSA fast-track (post DIFC ROC incorporation)	USD 60,000–USD 80,000	DFSA fee $5K; commercial licence $2K (subsidised); ROC ~$0 (waived); capital $40K
Representative Office	2–4 months	USD 25,000–USD 40,000	DFSA fee $6K; DIFC ROC branch ~$6K; desk-space from $24K; no capital requirement

Key Takeaways

The category determines everything. A firm's PIB category is set by its highest-risk licensed activity — not the majority activity. A fund manager that adds discretionary portfolio management for individual clients moves from Category 3C (fund-focused) into full asset management capital territory, and conduct obligations shift accordingly under COB.
Capital requirements reformed in 2025. The EBCM has been removed for firms that do not hold client assets, client money, or insurance monies, materially reducing the locked-in capital requirement for Category 3C and 4 firms that are fee-only advisers or non-custodial fund managers. Firms that do hold client assets continue to apply the applicable EBCM fraction.
Crypto endorsements sit on top of existing licences. The DFSA does not issue standalone crypto licences below the ATS/custody level; advising, arranging, and managing recognised Crypto Tokens are endorsements to Category 3A, 3C, or 4 licences, with associated fee uplifts.
The fund regime is deep and specialist. Public Fund, Exempt Fund, and QIF represent three meaningfully different regulatory and commercial propositions — the QIF's two-day notification process and no-fund-administrator-requirement for closed-ended structures can reduce the time from concept to launch to weeks rather than months.
Fees are transparent but complexity surcharges bite. A firm with a multi-jurisdictional group or a DIFC holding company faces a doubling of its application fee; systemic importance surcharges can also double the annual base fee for Category 1, 2, and 5 firms.
Pre-application engagement with the DFSA pays dividends. The DFSA's Authorisation team will meet prospective applicants before formal submission; firms that use this process arrive at In-Principle Approval faster, with fewer re-submissions, and with a clearer understanding of the conditions they will need to satisfy before receiving their full Financial Services Permission.

This chapter was prepared by 10 Leaves³³ with regulatory interpretation support from Legability³⁴. Authoritative source: DFSA Rulebook³. Readers should verify all figures against the current published module versions before relying on them for compliance or commercial planning purposes.