Guide
Setting Up a Crowdfunding or P2P Lending Platform in the UAE
The short answer
Which regulator licenses a UAE crowdfunding or peer-to-peer lending platform depends on where the business sits and which model it runs. Onshore, loan-based crowdfunding is licensed by the Central Bank of the UAE (CBUAE); investment-based (equity) crowdfunding is licensed by the Capital Market Authority (CMA), legal successor to the Securities and Commodities Authority since 1 January 2026. The DIFC runs its own crowdfunding regime through the DFSA, covering loan, investment and property models. ADGM licenses a related but narrower model — the private financing platform — through the FSRA. The model, more than the jurisdiction, decides which rulebook applies and what the platform must hold before taking a single investor's money.
Which regulator decides, and why
Four regulators run crowdfunding regimes in the UAE. Onshore, the CBUAE licenses loan-based crowdfunding — platforms matching lenders to borrowers for capital plus interest. Onshore investment-based crowdfunding, where backers receive equity or a comparable stake, sits with the CMA instead, which licenses "Crowdfunding Platform Operator" as a named financial activity category.
The DIFC has run its own regime since 2017, when the DFSA became the first GCC regulator with a dedicated crowdfunding framework for loan and investment models; property crowdfunding followed in 2019. A standard DIFC commercial licence does not cover this — the platform needs its own crowdfunding authorisation from the DFSA.
ADGM differs again. The FSRA's private financing platform framework is built for private enterprises raising equity, debt or trade-receivables funding from private and institutional investors — closer to a private placement venue than a retail crowdfunding app. None of the four authorisations passports into another: a DIFC licence does not let a platform solicit onshore, and an ADGM platform does not substitute for a CBUAE licence. Getting this right sits inside a wider fintech setup exercise, not a single licence purchase.
What each regulator actually requires
- CBUAE (onshore, loan-based): applies where the platform matches lenders with borrowers for repayment with interest. Capital and governance requirements are tiered to the lending volume the platform processes; the Central Bank sets the exact thresholds in the published regulation, and higher expected volume means a materially higher bar.
- CMA (onshore, investment-based): the published schedule sets an application review fee of AED 5,000 and a licence fee of AED 20,000 for the Crowdfunding Platform Operator category, with around 30 days for the initial review. Approval runs in two phases — a review of financial viability, competence and compliance, then a licensing phase testing capital and financial guarantees.
- DFSA (DIFC): a dedicated regime, loan and investment models from 2017, property crowdfunding from 2019. Authorisation tests client money handling, investor disclosure, and due diligence on borrowers or issuers, as part of the crowdfunding-specific licence.
- FSRA (ADGM): the private financing platform framework requires documented systems and controls for due diligence on the raising enterprise, risk disclosure, safeguarding of client assets, and AML/CFT.
Each regulator wants that due-diligence methodology written down before it looks at anything else, which is where business plans and documentation work starts alongside the application, not after it.
How investor and borrower money moves
Every regime turns on one question: whose account does investor or lender money sit in before it reaches the borrower or issuer? Funds belonging to investors or lenders sit in segregated client accounts with licensed institutions, under the relevant regulator's oversight, never mixed with the platform's own operating funds. A bank or acquirer tests this money map, in writing, before opening an account — the same test at the centre of banking readiness work for any regulated fintech.
Property crowdfunding adds a layer: investor money is typically held until a transaction completes, so the platform needs a documented client-money or escrow process, not an internal ledger it controls alone. Loan-based platforms carry the same discipline through the loan's life — repayments collected from borrowers must trace back to the lenders who funded them, never pooled in a way that obscures whose money is whose.
Ownership, roles and the people a licence requires
Every regime tests the people behind the platform, not only the technology. Loan-based and investment-based platforms both need a documented credit or investment-review function assessing borrowers or issuers before listing — a disclaimer is no substitute. An AML/CFT officer and a complaints process are standard across all four regimes; the DFSA and FSRA also individually approve senior managers.
Shareholders and controllers face the same scrutiny as the business, which is why source of wealth and funds work runs alongside the application, not after it.
What goes wrong in crowdfunding and P2P platforms
- A reward or donation platform, designed to sit outside financial regulation, quietly adds a profit share or buy-back promise — and becomes a regulated investment product overnight.
- A founder runs loan-based and equity crowdfunding on one entity and one licence; CBUAE and CMA require separate authorisations for each.
- A platform adds a secondary marketplace for investors to resell positions, without checking whether that needs its own authorisation.
- A borrower default is treated as a customer-service ticket rather than the recovery and wind-down process regulators expect documented before launch.
- A team assumes a DIFC or ADGM authorisation "passports" into the other free zone, or onshore — each regime is local to its own regulator.
