A Dubai PSP licence from the Central Bank of the UAE (CBUAE) authorises you to deliver payment services—card schemes, money transfers, e-wallets—under the Retail Payment Services regulation framework. Expect all-in costs of AED 100,000–250,000 and paid-up capital minimums ranging AED 500,000–2,000,000 depending on your business scope. The CBUAE process takes 18–24 weeks from application submission to authorisation letter.
What is a Dubai PSP Licence?
A payment service provider (PSP) licence from the CBUAE permits you to operate regulated payment services across the United Arab Emirates. This covers card acquiring, issuing, e-money issuance, money remittance, and stored-value facilities. A Dubai business setup as a licensed PSP means you comply with anti-money laundering (AML), counter-terrorist financing (CFT), customer due diligence (CDD), and fund safeguarding rules set out in the CBUAE’s Retail Payment Services Regulation issued under UAE Central Bank Law. Whether you operate from Dubai, Abu Dhabi, or another emirate, onshore CBUAE licensing is the standard route for payment activity.
Want to understand whether you need a full PSP licence or can partner via an aggregator? WhatsApp us: +971 54 332 2846.
CBUAE Retail Payment Services Regulation: Key Overview
The CBUAE regulates payment service providers under a tiered framework introduced in recent years and refined for 2026. The regulation covers retail payment systems, card schemes, e-money institutions, and money remittance providers. Each category has distinct capital, governance, and operational standards. The regulation emphasises consumer protection, financial stability, and financial crime prevention. Authorisation is issued only after the CBUAE confirms your business plan, risk management framework, AML/CFT policies, technology infrastructure, and board and senior management fit-and-propriety. There is no blanket exemption for payment aggregators or third-party facilitators; if you touch customer funds or carry payment risk, you typically need a licence.
Book a free 20-minute scoping call with DBS to map your regulatory pathway: inquiry@dubaibusinessservices.com.
PSP Licence Cost and Capital Requirements for 2026
All-in costs for a CBUAE PSP licence typically fall between AED 100,000 and AED 250,000. This span covers:
| Cost Component | Typical Range (AED) | Notes |
|---|---|---|
| Licence application fee (CBUAE) | 20,000–50,000 | Varies by PSP category (acquirer, issuer, e-money, remittance) |
| Professional advisory & compliance documentation | 30,000–80,000 | Legal, compliance audits, policy drafting |
| Corporate setup & secretarial | 10,000–30,000 | Trade licence, corporate governance, director onboarding |
| Technology & security certification | 20,000–60,000 | PCI DSS, encryption, audit trails, incident response |
| AML/CFT & KYC platform integration | 15,000–40,000 | Sanctions screening, transaction monitoring setup |
Minimum paid-up capital required is typically AED 500,000 for smaller remittance or aggregation models, rising to AED 1,000,000 for card-issuing PSPs and AED 2,000,000 for full e-money or acquiring platforms. Capital must be held in a UAE-regulated bank and remain untouched during the licensing process.
DBS has guided 80,000+ entrepreneurs through UAE compliance since 2009. Get a bespoke cost estimate: WhatsApp +971 54 332 2846.
DIFC & ADGM vs. CBUAE Onshore Licensing
Two alternative routes exist for payment businesses in the UAE:
CBUAE Onshore (Mainland) – Authorisation by the Central Bank of the UAE. Regulated under UAE Federal Law and the CBUAE rulebook. Permits nationwide operation. Capital requirements AED 500,000–2,000,000. Processing time 18–24 weeks. Best for businesses targeting the broad Emirati retail and B2B markets. Compliance oversight continuous.
DIFC (Dubai International Financial Centre) – Jurisdiction within Dubai with its own regulator, the DFSA. DIFC PSP licences authorise activity within the Centre and internationally. Capital and fee structures often higher (AED 200,000–400,000+ fees alone). Suited to regional fintech hubs and cross-border platforms. DIFC entities are not automatically recognised by CBUAE; integration requires separate mainland PSP licensing or regulatory equivalence agreements.
ADGM (Abu Dhabi Global Market) – Similar to DIFC but based in Abu Dhabi, regulated by ADGM Financial Services Regulator (AFSR). Comparable process and cost to DIFC. Less common for payment businesses but available.
For most Dubai-based payment startups, CBUAE onshore licensing is the practical choice. It offers direct access to UAE banks, lower all-in costs, and alignment with local payment infrastructure. Dubai business setup consultants can advise whether DIFC or ADGM strategically fits your model.
AML/CFT and Fund Safeguarding: Mandatory Frameworks
The CBUAE mandate requires all PSPs to implement comprehensive anti-money laundering (AML) and counter-terrorist financing (CFT) controls. This includes:
- Customer Due Diligence (CDD) – Full identity verification, beneficial ownership assessment, and source-of-funds checks for all customers.
- Sanctions Screening – Real-time transaction screening against OFAC, UN, EU, UK, and UAE terrorist and sanctions lists.
- Transaction Monitoring – Automated and manual review of suspicious patterns, thresholds, and velocity limits.
- Suspicious Activity Reporting (SAR) – Mandatory reporting to the Financial Intelligence Unit (FIU-UAE) within 7 days of detection.
- Record Keeping – Retention of all KYC, transaction, and investigation records for a minimum of 5 years.
- Staff Training – Annual compliance and AML/CFT awareness for all employees and board members.
Fund safeguarding rules stipulate that customer funds held by a PSP must be segregated in trust accounts at a regulated UAE bank, protected from the PSP’s operational creditors. Monthly reconciliation and quarterly audits are mandatory. Failure to maintain AML/CFT controls or safeguarding standards may result in licence suspension, financial penalties, or criminal referral.
Timeline and Application Process
The CBUAE PSP licence process typically unfolds as follows:
| Phase | Duration | Key Actions |
|---|---|---|
| Pre-Application (Weeks 1–4) | 4 weeks | Business plan, AML/CFT policy drafting, technology audit, board recruitment |
| Application Submission (Week 5) | 1 week | Submit full dossier to CBUAE; fee payment; formal acknowledgement |
| Initial Review (Weeks 6–8) | 3 weeks | CBUAE checks completeness; requests clarifications or supplementary docs |
| Substantive Assessment (Weeks 9–20) | 12 weeks | Regulatory analysis, site visits, senior management interviews, technology review |
| Authorisation Decision (Weeks 21–24) | 4 weeks | CBUAE issues licence, publishes notice, or raises conditions; legal registration |
Real-world timelines often stretch to 24 weeks due to back-and-forth on compliance frameworks and technology readiness. Incomplete applications or missing senior management can delay approval by 8–12 additional weeks.
Let DBS fast-track your dossier assembly. WhatsApp +971 54 332 2846 to discuss your timeline.
Frequently Asked Questions
Frequently asked questions
How do I get a PSP licence from the CBUAE in 2026?
First, establish a UAE entity (LLC or public company) with a trade licence from the Department of Economy and Tourism (DET) in Dubai or the equivalent in your emirate. Then engage compliance consultants to draft your business plan, AML/CFT policies, risk management framework, and technology documentation. Once ready, submit the complete application directly to the CBUAE’s Licensing Division via their online portal, pay the application fee (AED 20,000–50,000), and attend regulatory interviews. Approval typically takes 18–24 weeks. DBS can guide each step—WhatsApp +971 54 332 2846.
What is the minimum capital for a payment service provider in the UAE?
Minimum paid-up capital ranges from AED 500,000 to AED 2,000,000, depending on your PSP category and business scope. Money remittance operators and simple aggregators typically require AED 500,000. Card-issuing PSPs need AED 1,000,000. Full e-money or acquiring platforms often need AED 2,000,000 or higher. Capital must be deposited in a UAE-regulated bank in the PSP’s name and certified as held-in-trust during the licensing process.
How long does CBUAE PSP licensing take?
Standard processing is 18–24 weeks from application submission to licence issuance. This covers initial review (3 weeks), substantive assessment and interviews (12 weeks), and final authorisation (4 weeks). Delays occur if your application is incomplete, if your technology or AML/CFT framework requires rework, or if senior management fit-and-propriety checks take longer. Early engagement with CBUAE informally before formal submission can shorten timeline to 16 weeks.
Do I need a PSP licence or can I use an aggregator?
If you hold customer funds, carry payment transaction risk, or operate your own payment rails, you need a CBUAE PSP licence. If you only resell another licensed PSP’s services (white-label or referral model) without touching funds, you may not need a licence but must ensure your partner is licensed and you comply with their compliance obligations. The CBUAE increasingly scrutinises unlicensed payment intermediaries; legal certainty demands a licence if you have any material payment function. Consult DBS to map your model: inquiry@dubaibusinessservices.com.
What is the difference between a PSP licence and a stored value facility licence?
A PSP licence covers payment services: card acquiring, money remittance, e-wallet operation, and fund transfer. A stored value facility (SVF) licence is narrower—it authorises you to issue and manage prepaid cards or digital vouchers. PSP is broader and requires higher capital (AED 1,000,000+). SVF is more limited in scope and may require lower capital (AED 250,000–500,000). If you plan e-wallet or remittance services, you need a PSP licence; if only prepaid cards, SVF may suffice. CBUAE will classify your licence based on your stated business activities.
What are the main AML/CFT requirements for a Dubai PSP?
All PSPs must implement real-time sanctions screening against OFAC, UN, EU, and UAE terror lists; full KYC on every customer before first transaction; continuous transaction monitoring for suspicious patterns; and mandatory reporting of suspected financial crime to the FIU-UAE within 7 days. Customer files must be retained for 5 years. Staff training on AML/CFT is annual and mandatory. Non-compliance can trigger licence suspension, civil penalties up to AED 2,000,000, or criminal prosecution. DBS assists with AML/CFT policy assembly and technology integration.
Can a PSP operate from outside the UAE but serve UAE customers?
No. The CBUAE requires all PSPs serving UAE customers to be licensed onshore and have a physical registered office in the UAE. Foreign PSPs cannot legally acquire, issue, or remit payments for UAE-resident customers without CBUAE authorisation. Exceptions are limited to regulated entities in countries with which the CBUAE has formal equivalence recognition (very few). If you are foreign-based and want to serve the UAE market, you must establish a UAE entity, secure CBUAE licensing, and maintain compliance infrastructure in-country. DBS handles this setup end-to-end.
Get expert help in 20 minutes
Need clarity on your Dubai setup? Talk to DBS Documents Clearing LLC — 80,000+ entrepreneurs served since 2009. WhatsApp +971 54 332 2846 or email inquiry@dubaibusinessservices.com for a free 20-minute scoping call.
