Guide
How to Set Up a Securities Broker-Dealer in the UAE
The short answer
A UAE securities broker-dealer is authorised by whichever regulator has jurisdiction over where it operates and who it deals with: the Capital Market Authority (CMA) onshore, the DFSA in the DIFC, or the FSRA in ADGM. None of the three licenses a "broker" as a single thing — each authorises specific functions (dealing as agent, dealing as principal, arranging, custody), and the functions the business actually performs decide the category, the capital and the staffing. The one thing that most often decides the route is whether the firm ever takes a position or holds client assets, or only routes and executes on behalf of others.
The regulatory perimeter: three regulators, not one licence
Three authorities can licence a securities broker-dealer in the UAE, depending on where the entity sits and who it deals with. Onshore, the Capital Market Authority (CMA) is the federal regulator for securities — it replaced the Securities and Commodities Authority (SCA) under Federal Decree-Law No. 32 of 2025, effective 1 January 2026, and inherited the SCA's rights and obligations as its legal successor. In the DIFC, the Dubai Financial Services Authority (DFSA) authorises firms; in Abu Dhabi Global Market, the Financial Services Regulatory Authority (FSRA) does the same.
None of the three treats "broker-dealer" as one licence. Each regulates by specific function — dealing as agent, dealing as principal, arranging, managing assets, custody — and each function is authorised, capitalised and supervised on its own terms. A firm that only routes client orders to another executing broker sits in a different, lighter category to one that takes positions onto its own book.
What the regulator actually requires before granting a permission
The FSRA's published application process in ADGM runs through a fixed sequence: an initial enquiry, review of a draft regulatory business plan, a full submission with supporting documents and fees, a review stage that includes interviews with key individuals, in-principle approval (IPA) subject to conditions, fulfilment of those conditions — a commercial licence from the ADGM Registration Authority, premises, a bank account and capitalisation — and only then the grant of a Financial Services Permission, scoped to the exact activities applied for. The DFSA and CMA run equivalent processes under their own rulebooks: a written application, a regulatory business plan, named individuals for each controlled function, and capital that is funded and demonstrable before the permission is granted, not after. Treat any adviser who quotes a capital figure or a processing time without naming the specific regulated activity and category as guessing.
How money moves, and why that decides the category
The test that separates categories is not what the firm calls itself but what happens to money and securities as they move through it: does the firm ever hold client cash or securities, even briefly, or does everything pass straight to a third-party custodian; does it execute strictly on instruction, or ever take the other side of a trade onto its own book; does it offer margin or securities lending against positions it holds; does settlement run through its own accounts or through a clearing member it has no ownership of.
Agency-only execution with no custody and no principal risk is the lightest version of this business. Principal or matched-principal dealing, in-house custody and margin provision each add a separate layer of prudential requirement, because each creates an exposure the regulator has to capitalise against. A firm that mixes several of these functions in one entity is asking the regulator to price all of them at once, in the same licence.
Ownership, substance and the people the regulator licenses individually
A permission is not granted to a company in the abstract — it rests on named individuals holding specific controlled functions, resident in the jurisdiction, personally approved by the regulator before they take up the role. Senior management, finance, compliance (including the money-laundering reporting function) and, depending on category, a risk function are typically expected to be filled by individuals the regulator has interviewed, not simply listed on an organisation chart.
This is a different governance question to an ordinary trading company. Shareholders, directors and the source of the capital behind the firm are part of what the regulator reviews, and source of wealth and source of funds evidence for each controlling shareholder is typically expected as part of that review, not requested afterwards.
Where a manager, a dealer and a fund sit together, capital-markets structures often resolve into a group rather than one entity — a holding company above a regulated dealer, for instance, each piece with a genuine role. The same grouping question comes up in setting up a hedge fund or quant manager in the UAE. Stacking every function into one entity to save on formation cost compounds the prudential requirement instead of averaging it, and fails exactly where it matters — with the regulator, the auditor and the counterparty.
What commonly goes wrong
- Calling principal dealing "agency execution." The label on the application does not change what the regulator sees in the order and settlement data; a mismatch found during review restarts the conversation at a higher capital category.
- Treating margin as a product feature. Offering margin or stock lending is a separate permission with its own capital implication, not a line item added to an existing agency licence.
- Comparing formation fees instead of categories. The entity-formation step is a small part of the total cost; the category — and the capital, officers and audit load that come with it — is the real figure to compare across CMA, DFSA and FSRA routes.
- Marketing to clients before the custody and clearing chain is secured. Prime brokers, custodians and clearing members run their own onboarding, and a firm that promotes market access before those relationships are confirmed is selling something it cannot yet deliver.
From licence to operating: what has to be in place before launch
Authorisation is the start of operating, not the end of it. Before taking its first client, a broker-dealer typically needs: its capital funded and maintained at the level its category sets; the approved individuals in their controlled functions, resident where required; a corporate bank account that matches the flows described in the application, since a bank that later sees different activity to what was disclosed will close the relationship; a confirmed custody and clearing chain for every market it intends to access; and a policy suite — best execution, conflicts of interest, client money handling — the regulator has actually reviewed, not a template filed to complete a form. Renewal, reporting and audit obligations then continue every year the permission is held.
Cost here is set by the category, not a single setup fee: the capital held, the number of approved individuals resident and remunerated, and the audit and reporting cycle all vary by category and are not figures a formation adviser can quote in advance. Where a regulator publishes a specific capital or fee figure for the relevant category, it is confirmed from that regulator's own rules at the time of application; otherwise, the Velarozone service fee for structuring and preparing the application is itemised in the engagement letter — see how Velarozone works.
