How to Set Up an Investment Advisory Firm in the UAE (2026), Licensing, AML & Compliance

If you are looking to set up an investment advisory firm in UAE 2026, you face a licensing landscape that has grown materially more complex since 2025. The UAE offers four distinct jurisdictional routes, mainland, the Dubai International Financial Centre (DIFC), the Abu Dhabi Global Market (ADGM), and other designated free zones, each governed by its own regulator and each imposing specific capital, governance, and anti-money-laundering obligations. This guide walks through the registration steps, documents needed, timeline, costs, and the AML/CFT compliance programme every new advisory firm must have in place before it can lawfully advise a single client.

Whether you are a family-office principal, an ex-pat entrepreneur, or an in-house compliance officer preparing the groundwork, the procedure below maps every stage, who does it, what it costs, and how long it takes.

Overview of the process and who it applies to

Any person or entity that intends to provide investment advice, manage portfolios, or arrange deals in financial products within the UAE must hold a financial-services licence from the relevant regulator. The specific regulator depends on where the firm is established. The table below summarises the principal routes for starting an investment advisory business in the UAE in 2026.

Activities that trigger the licensing requirement include providing personal investment recommendations, discretionary portfolio management, arranging deals in investments or credit, and managing collective investment funds. If your activities are limited to general financial education or non-regulated corporate advisory, a commercial licence alone may suffice, but the boundary is narrow, and the consequences of operating without the correct licence are severe, including fines and imprisonment under Federal Decree-Law No. (20) of 2018 and the relevant regulator’s enforcement powers.

Eligibility and prerequisites for setting up an investment advisory firm in the UAE

Jurisdiction selection checklist

Before filing a single form, determine which jurisdiction aligns with your client base, the regulated activities you intend to perform, and the capital you can commit. DIFC and ADGM are international financial free zones with common-law legal frameworks and English-language courts; they are the standard choice for firms serving international or institutional clients. The mainland route, supervised by the SCA and the Central Bank of the UAE (CBUAE), is appropriate when the firm’s primary activity involves advising on locally listed securities or serving UAE retail clients directly.

Business activities mapped to licence categories

Both the DFSA and FSRA classify financial services by activity type. Under the DFSA Rulebook, a firm that only advises on financial products and does not hold client assets will typically fall under Category 4, the lightest prudential category. If the firm also arranges deals or manages assets, a Category 3C or higher classification applies, bringing increased capital and compliance obligations. ADGM’s FSP framework similarly maps permissions to specific regulated activities such as “Advising on Investments” or “Managing Assets,” each carrying its own conduct and capital conditions.

Minimum governance and capital expectations

All regulators require a minimum number of approved individuals: at least a Senior Executive Officer, a Compliance Officer, and a Money Laundering Reporting Officer (MLRO). In smaller firms, the same individual may hold more than one role, provided the regulator is satisfied that conflicts are managed. Minimum capital requirements vary by licence category; DFSA Category 4 firms and ADGM advisory-only FSP holders face the lowest thresholds, though exact amounts depend on the scope of permitted activities and must be confirmed against current regulator fee schedules. Every applicant, and every individual performing a controlled function, must pass a fit-and-proper assessment covering competence, integrity, and financial soundness.

Step-by-step procedure to set up an investment advisory firm in the UAE

The registration steps below apply across all four jurisdictional routes. Specific regulator portals and form names differ, but the sequence is consistent. The timeline table consolidates who does what and for how long.

Step 1, Pre-application planning and jurisdiction choice

Engage legal counsel to prepare a regulatory business plan. This document, required by both the DFSA and FSRA, must describe the proposed regulated activities, target client profile, governance structure, risk framework, and projected financials for the first three years. It is not a marketing brochure; regulators use it to assess whether the applicant has a credible, viable business and the compliance resources to run it. Decide at this stage whether you will operate from DIFC, ADGM, a free zone, or the mainland. The choice determines every subsequent form, fee, and regulator interaction.

Step 2, Reserve trade name and register entity with the Registration Authority

Each jurisdiction has its own company-registration body. In ADGM, this is the ADGM Registration Authority; in DIFC, the DIFC Registrar of Companies; on the mainland, the relevant emirate’s Department of Economy and Tourism. Submit the proposed trade name, memorandum and articles of association, and founder identification documents. Name reservation typically takes two to five business days. Entity registration follows, producing a certificate of incorporation or commercial licence number that you will reference in your financial-regulator application.

Step 3, Apply for In-Principle Approval from the financial regulator

This is the most substantive step. File the application through the regulator’s online portal, the DFSA’s ePortal for DIFC applicants, or the FSRA’s application system for ADGM. The submission pack includes the regulatory business plan, compliance-manual drafts, organisational chart, CVs and fit-and-proper questionnaires for all proposed approved persons, and the AML/CFT policy framework. The FSRA’s general application process sets out a multi-stage review that includes desktop assessment, information requests, and, in many cases, face-to-face interviews with proposed senior management. DFSA authorisation follows a comparable pathway, with examiners assessing each module of the DFSA Rulebook that applies to the requested licence category.

Processing time ranges from four to twelve weeks, depending on the completeness of the submission and the complexity of the proposed activities.

Step 4, Fulfil IPA pre-conditions

Once In-Principle Approval is granted, the regulator sets a list of conditions that must be met before the final licence is issued. Standard pre-conditions include securing a physical office within the relevant jurisdiction (virtual offices are generally not accepted for regulated firms), opening a corporate bank account in the UAE, depositing the required paid-up capital, and submitting original or certified copies of all constitutional documents. The IPA typically sets a window, commonly 60 to 90 days, within which these conditions must be satisfied. Failure to meet the deadline may result in the IPA lapsing.

Step 5, Receive the final financial-services licence and complete post-licence registrations

On satisfying all pre-conditions, the regulator grants the final Financial Services Permission (ADGM) or Licence (DFSA). The Registration Authority then issues or updates the commercial licence to reflect the regulated activity. At this point, register for VAT with the Federal Tax Authority if the firm’s taxable supplies exceed the mandatory registration threshold, enrol with the relevant Chamber of Commerce, and process employee and dependent visa applications through the jurisdiction’s immigration portal.

Step 6, Implement the AML/CFT programme and appoint the MLRO

This step runs in parallel with Steps 3 through 5. Under Federal Decree-Law No. (20) of 2018 and its implementing regulations, every licensed financial institution must maintain a written AML/CFT programme. The programme must include, at a minimum:

• Appointment of a Money Laundering Reporting Officer (MLRO). The MLRO must be resident in the UAE and approved by the relevant regulator as a controlled-function holder.
• AML/CFT policies and procedures. Covering customer due diligence (CDD), enhanced due diligence (EDD) for high-risk clients, ongoing monitoring, and record-keeping.
• Know-Your-Customer (KYC) onboarding scripts. Standardised workflows for identifying and verifying clients, beneficial owners, and authorised signatories.
• Transaction-monitoring arrangements. Automated or manual screening of transactions against sanctions lists and unusual-activity indicators.
• Suspicious Transaction Report (STR) and Suspicious Activity Report (SAR) procedures. Internal escalation to the MLRO and external reporting to the UAE Financial Intelligence Unit (FIU).
• Staff training programme. Documented, recurring AML/CFT training for all employees, with records retained for a minimum of five years.

Industry observers expect that regulators will give increasing scrutiny to the quality and operability of AML programmes at the licensing stage in 2026, rather than reviewing them only during post-licence supervision.

Step 7, Post-licence onboarding and supervisory returns

Once licensed, the firm must comply with periodic supervisory obligations: annual returns, audited financial statements, compliance-officer reports, and, for DFSA-authorised firms, Prudential Returns filed through the regulator’s electronic system. The FSRA similarly requires periodic returns and risk-based supervisory engagement. Licence renewals are annual in most jurisdictions and require evidence of continued compliance with all conditions.

Required documents and information

The documents needed to set up an investment advisory firm in the UAE vary slightly by regulator, but the core list is consistent. The table below serves as a practical checklist.

Ensure that photocopied documents are certified within the regulator’s accepted validity window, typically three to six months from the date of certification. Submit all documents in English; Arabic translations may be required for SCA and mainland filings.

Timeline and key deadlines for setting up an investment advisory firm in the UAE

The total time from initial planning to receiving a final financial-services licence ranges from approximately 6 to 16 weeks, depending on the jurisdiction, the completeness of the application, and the speed at which pre-conditions are satisfied. Below is a consolidated timeline table.

Critical deadlines to note: the IPA fulfilment window is usually 60 to 90 days from the date of the IPA letter, if conditions are not met within that period, the approval may lapse and a fresh application may be required. Financial-services licences are renewed annually; the renewal window is typically 30 days before expiry, and late renewal attracts penalties. AML programme documentation must be operational and available for inspection from the date the licence is granted, there is no grace period.

Costs, fees, and tax considerations

The cost of setting up an investment advisory firm in the UAE depends heavily on the chosen jurisdiction and the scope of regulated activities. The table below provides indicative cost categories; exact figures should be confirmed against the current fee schedules published by the ADGM FSRA, DFSA, and relevant Registration Authority, as these are updated periodically.

On taxation, the UAE’s federal corporate tax applies to taxable income exceeding AED 375,000 at a rate of 9 %. DIFC and ADGM entities are subject to the same federal corporate-tax framework. VAT at 5 % applies to most financial advisory services, though certain financial products may be exempt or zero-rated. Both corporate tax and VAT obligations require specialist advice tailored to the firm’s structure and activities.

What changes in 2026, regulatory and AML focus

Several regulatory developments between late 2025 and mid-2026 have a direct impact on how to set up an investment advisory firm in the UAE. The DFSA implemented rule amendments in December 2025 that strengthened conduct-of-business and prudential requirements for authorised firms, including enhanced obligations on approved individuals and more granular supervisory-reporting standards. The ADGM FSRA has published updated guidance notes and policy statements refining the FSP application process and clarifying expectations around corporate governance, outsourcing, and technology risk for new applicants.

At the federal level, the CBUAE has continued to tighten its AML/CFT Rulebook. Practical effects for 2026 applicants include heightened customer-due-diligence standards, an expectation that AML risk assessments are enterprise-wide (covering all products and delivery channels from day one), and expanded record-keeping obligations. The likely practical effect is that regulators will require more detailed and operational AML documentation at the IPA stage, a marked shift from the earlier practice of accepting draft policies that were finalised post-licence.

Applicants should take immediate action: finalise the AML/CFT programme and MLRO appointment before submitting the IPA application; align the regulatory business plan with the updated rulebook modules; and budget for increased ongoing compliance costs associated with enhanced supervisory engagement.

Common pitfalls and how to avoid them

• Choosing the wrong jurisdiction. A mainland licence cannot easily service international institutional clients who expect DIFC or ADGM legal protections. Match the jurisdiction to the client base, not the cheapest registration fee.
• Submitting an incomplete AML programme. Regulators increasingly reject or delay applications where the AML/CFT manual is a template with placeholder text. Draft a fully operational AML policy, complete with KYC workflows and transaction-monitoring rules, before filing.
• Appointing unapproved persons to controlled functions. Every Senior Executive Officer, Compliance Officer, and MLRO must be individually approved. Filing the application without their fit-and-proper packs will stall the process at the first review stage.
• Missing the IPA pre-condition deadline. The 60-to-90-day IPA fulfilment window is firm. Secure office space and open the bank account early, UAE bank-account opening can itself take several weeks.
• Underestimating capital and office costs. Budget for the full first year of compliance spend, including MLRO salary, screening tools, and annual supervision fees, not just the application fee.

Sources

1. Abu Dhabi Global Market (ADGM), FSRA General Application Process
2. Dubai Financial Services Authority (DFSA), Authorisation Services Overview
3. Central Bank of the UAE (CBUAE), Federal Decree-Law No. (20) of 2018 on AML/CFT
4. Securities & Commodities Authority (SCA)
5. ADGM, Guidance and Policy Statements