The UAE credit rating industry operates at the intersection of capital markets regulation, banking supervision, and sovereign debt infrastructure. With over AED 300 billion in outstanding sukuk — 80%+ of which requires a rating — and a growing SME credit scoring ecosystem underpinned by the Al Etihad Credit Bureau (AECB), establishing or licensing a credit rating agency (CRA) in the UAE in 2026 demands precise navigation of SCA Decision 3/2020, CBUAE ECAI recognition, and DFSA approvals.
SCA Decision 3/2020: The UAE CRA Licensing Framework
The Securities and Commodities Authority (SCA) regulates credit rating agencies in the UAE under SCA Decision No. 3/2020 on the Regulation of Credit Rating Agencies. This framework governs the licensing, conduct, methodology disclosure, and oversight of CRAs operating in or from the UAE.
SCA License Requirements for CRAs
- Minimum paid-up capital: AED 10,000,000 — a significant barrier to entry designed to ensure financial stability of rating entities
- Ownership restrictions: No single bank, insurance company, or financial institution may hold more than 5% of the CRA’s equity — preventing conflicts of interest where rated entities control the rater
- Certified analysts: All credit analysts must hold recognized financial certifications and demonstrate relevant rating methodology experience
- Methodology documentation: Full disclosure of rating methodologies, criteria, and assumptions is mandatory; methodologies must be filed with SCA and made publicly available
- Annual methodology review: SCA conducts an annual review of each licensed CRA’s rating methodologies to assess adequacy, transparency, and consistency
CBUAE ECAI Recognition: Ratings Used for Bank Capital Purposes
For credit ratings to be used by UAE-licensed banks in calculating risk-weighted assets under the Basel framework, the rating agency must be recognized as an External Credit Assessment Institution (ECAI) by the Central Bank of the UAE (CBUAE).
CBUAE currently recognizes the following ECAIs for bank regulatory capital purposes:
- Fitch Ratings
- Moody’s Investors Service
- S&P Global Ratings
- DBRS Morningstar
- Capital Intelligence Ratings (CI Ratings) — the only UAE-domiciled internationally recognized CRA
Capital Intelligence (CI Ratings): The UAE-Domiciled CRA
Capital Intelligence Ratings (CI Ratings) holds the unique distinction of being the only UAE-domiciled credit rating agency with international recognition. CI Ratings covers sovereigns, financial institutions, corporates, and structured finance in the Middle East, Africa, and Asia. Its Dubai base, combined with CBUAE ECAI recognition and EU CRA registration, positions it as the only credible UAE-incorporated alternative to the Big Three global agencies.
Global CRAs in the UAE: DIFC Presence
The major global CRAs maintain UAE operations primarily through the DIFC:
| CRA | UAE Location | DFSA Status | Focus Areas |
|---|---|---|---|
| Fitch Ratings | DIFC, Dubai | Recognised Rating Agency | Sovereigns, GCC banks, corporates |
| Moody’s Investors Service | DIFC, Dubai | Recognised Rating Agency | Sovereigns, sukuk, GCC financial institutions |
| S&P Global Ratings | DIFC, Dubai | Recognised Rating Agency | Corporates, sukuk, project finance |
| CI Ratings | Dubai (non-DIFC) | N/A (regulated by SCA) | ME banks, sovereigns, GCC corporates |
DFSA Recognised Rating Agency License
Credit rating agencies providing ratings for use within the DIFC — particularly for DIFC-regulated entities, DIFC funds, or capital markets transactions — must obtain Recognised Rating Agency status from the Dubai Financial Services Authority (DFSA). This DFSA-specific approval is separate from and in addition to the mainland SCA CRA license.
DFSA Recognised Rating Agencies are subject to DFSA’s ongoing supervisory oversight, including conduct of business rules, conflict of interest management, and rating quality controls.
AECB: Consumer and Commercial Credit Scoring
The Al Etihad Credit Bureau (AECB), established in 2014, operates as a state-backed credit bureau rather than a traditional CRA. It compiles credit histories and generates credit scores for:
- Consumers: AECB scores range from 300 to 900; score reports available for AED 100 per individual request via the AECB app or website
- Commercial entities: Business credit reports available for AED 250 per report; widely used by UAE banks for SME lending decisions
AECB data feeds into SME credit scoring models used by UAE banks for automated lending decisions. New entrants into the UAE credit intelligence space often develop alternative credit scoring models (using telecoms data, utility payment history, trade payables) to supplement AECB scores for thin-file borrowers — creating a niche adjacent to traditional CRA services.
UAE Sukuk Market: Rating Demand Driver
The UAE is the world’s second-largest sukuk market. Key statistics for 2026:
- UAE sukuk outstanding: AED 300 billion+
- Proportion rated: 80%+ of outstanding sukuk carry at least one rating from a recognized CRA
- Key issuers: UAE sovereign (Abu Dhabi), ADNOC, Emaar, DEWA, UAE banks, GCC corporates tapping Dubai as an issuance hub
- Rating mandate: DFM and Nasdaq Dubai listing rules require independent credit ratings for debt securities listed on their markets
This structural demand for sukuk ratings — combined with AED 300B+ market size — makes the UAE one of the highest-volume credit rating markets in the Middle East.
Setup Costs: Establishing a UAE Credit Rating Agency
- Minimum capital requirement: AED 10,000,000 (SCA mandatory)
- SCA CRA license application fee: AED 50,000–100,000
- Methodology development and documentation: AED 500,000–2,000,000 for initial build-out
- Senior analyst team (5–10 FTEs with CFA/relevant qualifications): AED 2,000,000–5,000,000/year
- Rating committee infrastructure and IT systems: AED 500,000–1,500,000
- Professional indemnity insurance: AED 100,000–500,000/year (high due to rating liability exposure)
- Legal and compliance (SCA annual reporting, methodology reviews): AED 200,000–500,000/year
Frequently Asked Questions
Can a new CRA obtain CBUAE ECAI recognition in the UAE?
CBUAE ECAI recognition is granted to rating agencies demonstrating objectivity, independence, international acceptance, transparency, and track record. A new CRA would typically need 3–5 years of published ratings with measurable default-prediction accuracy before CBUAE would consider ECAI status. This creates a significant market-entry barrier for new agencies seeking bank regulatory capital rating use.
Do sukuk issuers need UAE SCA-licensed CRAs specifically?
Nasdaq Dubai and DFM listing requirements accept ratings from globally recognized agencies including the three ECAI-recognized global CRAs (Fitch, Moody’s, S&P) and CI Ratings. A new SCA-licensed UAE CRA’s ratings would need to achieve market acceptance among arrangers and investors before being routinely accepted for sukuk listing purposes — international recognition is critical for capital markets mandates.
Is there a market for SME credit ratings in the UAE?
Yes. UAE bank lending to SMEs has historically been constrained by information asymmetry. A niche CRA offering standardized SME credit assessments (distinct from full investment-grade ratings) could address the gap between AECB bureau scores and full capital markets ratings. Several UAE fintech lenders and SME platforms have developed proprietary scoring models in this space, representing the most accessible point of entry for new credit assessment businesses.