Updated August 2026. Cash-in-transit (CIT) and armoured vehicle services occupy the most capital-intensive and tightly regulated corner of the UAE security industry. With over AED 120 billion in currency circulated annually through the UAE banking system and more than 9,000 ATMs spread across seven emirates, the demand for secure cash logistics is enormous — yet the regulatory and capital barriers mean that fewer than 15 licensed CIT operators exist in the entire country. This guide explains the full regulatory framework, capital requirements, and competitive landscape for starting or entering the UAE CIT sector.
- CIT companies require a SIRA Armoured Vehicle Operator Licence — the most restrictive of all SIRA licences, issued only to companies meeting stringent capital, facility, and workforce requirements.
- The Central Bank of the UAE (CBUAE) regulates all ATM cash management services; CIT providers serving banks must be CBUAE-approved cash management entities.
- Minimum startup capital for a credible CIT operation is AED 2 million to AED 10 million — the single largest investment threshold in the UAE security sector.
- Armed guard deployment is mandatory for all CIT operations; guards must hold both a SIRA guard card and a Federal Arms Authority (FAA) weapons permit.
- Competitors include G4S (now Allied Universal) and Brink’s, both of which have multi-decade UAE presence and long-term banking sector contracts.
- GPS tracking, real-time command-and-control centres, and armoured vault facilities are non-negotiable infrastructure requirements.
1. SIRA Armoured Vehicle Operator Licence: The Regulatory Framework
SIRA’s Armoured Vehicle Operator Licence is issued under a separate regulatory track from the standard Private Security Company licence. The licensing requirements are set out in SIRA Circular No. 7 of 2018 and its 2022 amendments. Key criteria include: minimum paid-up capital of AED 5 million; ownership or long-term lease (minimum 5 years) of armoured vehicles meeting UN ECE R-17 ballistic protection standards; a secure vault facility meeting SIRA’s Physical Security Standard for Cash Vaults; a real-time command-and-control centre operating 24/7; and a minimum complement of 30 trained armed guards before licence issuance.
The application package is submitted to SIRA’s Licensing and Compliance Department and typically involves a physical site inspection of the vault facility and vehicle depot, a review of the fleet’s armour certification documents, a test of the GPS tracking and command-centre integration, and a background check on all directors and the responsible manager. Processing time averages 90–120 working days. The annual licence fee is approximately AED 50,000, reflecting the premium regulatory burden of this licence category.
2. Central Bank of UAE Compliance for ATM Cash Management
Banks and exchange houses operating in the UAE are regulated by the Central Bank of the UAE (CBUAE). The CBUAE’s Payment Systems Oversight Department regulates ATM cash management as part of its broader oversight of the UAE’s payment infrastructure. CIT providers wishing to handle banknote replenishment, first-line maintenance, and cash recycler management for UAE banks must be approved as CBUAE Cash Management Entities (CMEs).
The CME approval process includes: demonstration of SIRA armoured vehicle operator licence; evidence of end-to-end cash management software (CMS) capable of real-time reporting to the bank’s treasury system; proof of bank-grade vault insurance (minimum AED 100 million per incident); and an audit of the counterfeit-detection and banknote-sorting equipment installed in the vault facility. CBUAE approval is separate from SIRA licencing and typically takes 45–60 working days after SIRA approval is obtained.
3. Armoured Fleet Requirements and Procurement
The armoured vehicle fleet is the single largest capital expenditure in CIT setup. SIRA mandates that vehicles meet specific ballistic protection standards: the minimum is B4/FB4 level (protection against 9mm handgun fire), with B6/FB6 level (protection against 7.62x51mm rifle fire) required for higher-risk routes such as gold souk cash collections, central bank transfers, and VVIP asset transport. Leading armoured vehicle suppliers in the UAE include INKAS Armoured Vehicle Manufacturing (Canadian-origin, Dubai representative), International Armored Group (IAG, Abu Dhabi), and STREIT Group (Ras Al Khaimah).
A typical CIT starter fleet of 5 armoured vehicles costs AED 1.5 million to AED 3 million (AED 300,000–AED 600,000 per vehicle depending on protection level and specification). Vehicles must undergo annual SIRA inspection for ballistic integrity — modifications to the vehicle structure, including window replacement, require SIRA re-approval. Vehicle tracking devices must use SIRA-approved GPS units with tamper-proof housings and 5-minute-maximum reporting intervals.
4. Vault Facilities: Physical and Insurance Requirements
SIRA’s Physical Security Standard for Cash Vaults specifies requirements for construction grade (minimum 300mm reinforced concrete walls), access control (multi-person authorisation, biometric + PIN), alarm systems (Grade 5 per EN 50131), and time-lock mechanisms. The vault must be located in a commercially zoned area with direct vehicle access suitable for armoured trucks — underground or first-floor vault locations are preferred by SIRA inspectors for operational security reasons.
Vault insurance is the second-largest cost item: the minimum required coverage is AED 50 million per incident (cash and valuables in vault), scaling to AED 100 million or more for operators handling central bank notes or precious metals for jewellery exporters. Underwriters in the UAE specialising in high-value vault coverage include Munich Re (through regional offices in DIFC), Zurich Insurance, and Lloyd’s of London syndicates accessed through Dubai brokers such as Marsh McLennan Gulf and Willis Towers Watson.
5. Armed Guard Requirements and FAA Weapons Permits
Every guard deployed on a CIT vehicle must hold three credentials simultaneously: a valid SIRA Security Guard Card, a Federal Arms Authority (FAA) individual weapons permit, and completion of a SIRA-approved CIT-specific operational training course (minimum 40 hours, covering cash handling, vehicle-specific emergency procedures, and use-of-force in transit scenarios). The FAA weapons permit requires a background check by the Ministry of Interior’s Weapons Registration Department, a shooting proficiency test at an approved range, and annual re-qualification.
Firearms authorised for CIT operations are limited to specified handgun models approved by the FAA for private security use. Assault rifles, shotguns, and fully automatic weapons are not permitted for private CIT operations. The company is responsible for secure storage of all firearms in a SIRA-approved weapons armory at its vault facility, with access logs maintained and auditable at any time by FAA inspectors.
6. Technology Requirements: GPS, Command Centre, and Cash Management Software
SIRA mandates that every CIT operator maintain a live command-and-control centre (CCC) operating 24 hours a day, 7 days a week. The CCC must display real-time GPS positions of all active vehicles, integrate with the vault’s access control system, and have the ability to remotely trigger vehicle lockdown protocols. Staff at the CCC must be SIRA-card-holding security professionals, not civilian call-centre agents.
Cash management software (CMS) is required for CBUAE-regulated ATM services. Leading CMS platforms used in the UAE include Prosegur’s ProCash, NCR’s APTRA, and Hyosung’s MoniMax — all of which support real-time reporting to the client bank’s treasury management system. The CMS must generate tamper-evident electronic manifests for each cash movement, which serve as the audit trail for both CBUAE compliance and insurance claim documentation. Integration with the UAE’s UAE PASS digital identity platform is increasingly required for cashier authentication at vault access points.
7. AED Cost Breakdown: Starting a CIT Company
| Cost Item | Estimated AED | Notes |
|---|---|---|
| DED Trade Licence (1 yr) | 15,000–30,000 | Cash Transport activity code |
| SIRA Armoured Vehicle Operator Licence | 50,000 | Annual renewal |
| Armoured Fleet (5 vehicles, B4/B6 mix) | 1,500,000–3,000,000 | Largest single capital item |
| Vault Facility Construction / Fit-out | 500,000–2,000,000 | SIRA standard compliance |
| Vault Insurance (annual premium) | 120,000–350,000 | AED 50M–100M coverage |
| Armed Guards × 30 (visas, training, FAA) | 300,000–450,000 | Per year including salaries |
| Command Centre Setup | 150,000–400,000 | Hardware, software, 24/7 staffing |
| Cash Management Software Licence | 80,000–200,000 | Annual SaaS or perpetual licence |
| Bank Guarantee (SIRA + CBUAE) | 200,000–500,000 | Cash held against claims |
| Total Year-1 Minimum | 2,915,000–6,930,000 | Scale rapidly with route volume |
8. Market Competition: G4S, Brink’s, and Finding a Niche
The UAE CIT market is dominated by two multinational giants: G4S (now rebranded Allied Universal following its 2021 acquisition) and Brink’s Middle East. Both companies have operated in the UAE for over two decades, hold master contracts with UAE’s largest banks (Emirates NBD, First Abu Dhabi Bank, and Abu Dhabi Commercial Bank), and benefit from economies of scale that make direct competition on ATM cash management extremely difficult for a new entrant. New entrants typically succeed by focusing on niche segments that the majors underservice: jewellery and precious-metals transport (the UAE is the world’s largest re-exporter of gold by value), high-value art and collectibles for DIFC-based auction houses, and cross-border CIT between the UAE and neighbouring GCC states. Cross-border CIT requires additional GCC country approvals — but the markup over standard ATM routes is 300–500 %.
FAQ: UAE Cash-in-Transit Company Setup
How many licensed CIT operators currently exist in the UAE?
Fewer than 15 companies hold full SIRA Armoured Vehicle Operator Licences in the UAE as of 2026. The high capital barriers — particularly the armoured fleet and vault facility requirements — effectively limit the market to well-capitalised entrants. This creates significant pricing power for existing operators but means that new entrants must be prepared for a 12–18 month setup timeline before generating revenue.
Can a free zone company operate CIT services in the UAE?
No. CIT operations on UAE public roads and within UAE banking infrastructure require a mainland DED contracting licence and a SIRA Armoured Vehicle Operator Licence. Free zone entities may handle administrative functions (HR, payroll, procurement) but the operational entity must be mainland-registered. DIFC and ADGM entities that are banks or financial institutions may use CIT services but cannot themselves hold a CIT operational licence.
What ballistic protection level is required for UAE CIT vehicles?
SIRA mandates a minimum of B4/FB4 ballistic protection (resistance against 9mm handgun fire) for standard cash transport routes. B6/FB6 protection (7.62x51mm rifle fire resistance) is required for central bank currency transfers, gold and precious metals transport, and high-risk event security. SIRA inspectors verify armour certifications against the vehicle manufacturer’s ballistic test certificates, which must be issued by an internationally accredited ballistics testing laboratory.
What is the minimum vault coverage for UAE CIT insurance?
SIRA requires a minimum of AED 50 million per incident for vault cash and valuables insurance. CBUAE-regulated ATM cash management services require AED 100 million minimum. Premium values depend on the daily cash holding limit, the vault’s physical security grade, and the insurer’s assessment of the operator’s loss history. New operators typically pay higher premiums until a 2–3 year claims-free track record is established.
How long does it take to obtain a SIRA Armoured Vehicle Operator Licence?
The SIRA Armoured Vehicle Operator Licence typically takes 90–120 working days from a complete application submission to approval — longer than any other SIRA licence category. The process includes a physical site inspection of the vault facility and vehicle depot, ballistic certification document review, GPS system testing, and background checks on all directors. Incomplete applications are rejected and must be resubmitted in full, resetting the processing timeline.