Updated August 2026. The UAE’s payment services sector operates under one of the most structured regulatory frameworks in the Middle East, governed primarily by the Central Bank of the UAE (CBUAE) through its Retail Payment Services and Card Schemes Regulation (RPSR) of 2021 and updated guidance issued in 2023 and 2024. Parallel licensing pathways exist within the DIFC (regulated by the DFSA) and ADGM (regulated by the FSRA), making the UAE a three-jurisdiction FinTech landscape for payment service providers. Capital requirements range from AED 10,000,000 for a basic payment account provider to AED 50,000,000 for a domestic card scheme operator, with annual compliance costs of AED 500,000 to AED 3,000,000 for mid-sized PSPs.
- CBUAE RPSR 2021 creates six distinct Retail Payment Service categories, with minimum capital ranging from AED 10,000,000 to AED 50,000,000 depending on activity.
- Stored Value Facility (SVF) providers — e-wallets, prepaid cards — require a separate CBUAE SVF license with capital from AED 10,000,000.
- DFSA (DIFC) licenses payment institutions operating within DIFC with capital requirements calibrated to transaction volumes and activity type.
- ADGM (FSRA) provides a payment services framework suitable for international PSPs seeking a UAE gateway under English common law.
- All CBUAE-licensed PSPs must comply with the UAE’s Instant Payment Platform (IPP/Aani) interoperability requirements and ISO 20022 messaging standards.
UAE Payment Services Regulatory Overview
Before 2021, UAE payment services were regulated through a patchwork of CBUAE circulars and ad-hoc licensing conditions. The Retail Payment Services and Card Schemes Regulation (RPSR), issued under CBUAE Board Resolution No. 3 of 2021, created a comprehensive, activity-based licensing regime modelled on the EU’s PSD2. The RPSR establishes clear definitions for each type of payment service, sets minimum capital thresholds, prescribes safeguarding requirements for client funds, and mandates open banking API access obligations under the CBUAE’s broader Open Finance Framework launched in 2023.
Payment service providers must register with the CBUAE’s National Payment Systems Oversight team before commencing any regulated payment activity in the UAE, including acquiring, issuing, money transfer, payment initiation, and account information services. Non-compliance with the RPSR can result in fines of up to AED 100,000,000 and criminal referral for operating without a license.
CBUAE Retail Payment Service Categories
The RPSR defines six categories of regulated Retail Payment Services, each requiring a separate CBUAE license and distinct minimum capital:
- Payment Account Services (PAS) — maintaining payment accounts for customers and executing payment transactions. Minimum capital: AED 10,000,000.
- Payment Initiation Services (PIS) — initiating payments on behalf of customers from their accounts held at licensed banks. Minimum capital: AED 10,000,000.
- Account Information Services (AIS) — aggregating and presenting payment account information from multiple banks. Minimum capital: AED 5,000,000.
- Payment Token Services (PTS) — issuing or redeeming payment tokens (digital fiat representations). Minimum capital: AED 25,000,000.
- Domestic Card Scheme Operations — operating a UAE domestic card scheme (similar to NAPS/Meeza). Minimum capital: AED 50,000,000.
- Merchant Acquiring Services — processing card and e-payment transactions on behalf of merchants. Minimum capital: AED 10,000,000.
A PSP that combines Payment Account Services with Merchant Acquiring must hold capital for the higher of the two requirements and demonstrate segregated operational controls for each activity. Multi-activity PSPs are common among UAE FinTech companies building super-apps or embedded finance platforms.
Stored Value Facility (SVF) License
Separate from the RPSR categories, the CBUAE licenses Stored Value Facilities (SVFs) — commonly known as e-wallets, prepaid cards, and digital purses — under its Stored Value Facility Regulation of 2020 (updated 2023). SVF providers must hold minimum paid-up capital of AED 10,000,000 for a retail SVF with customer balances capped at AED 5,000 per account. SVFs with higher per-customer balance limits (up to AED 50,000) require AED 25,000,000 minimum capital and enhanced AML controls.
SVF providers must safeguard 100% of customer balances in a UAE-domiciled ring-fenced bank account or in qualifying liquid assets approved by the CBUAE. This safeguarding requirement is strictly enforced and any shortfall can trigger immediate license suspension. CBUAE SVF application fees are approximately AED 200,000 with annual supervisory fees of AED 100,000 to AED 500,000 depending on customer volumes.
DIFC (DFSA) Payment Institution License
Within the DIFC, the DFSA licenses payment institutions under its Payment Services framework, aligned with international standards. The DFSA allows DIFC-incorporated entities to provide payment account services, payment initiation, money transmission, and related activities for both Professional and Retail Clients within and from the DIFC. DFSA-licensed payment institutions benefit from DIFC’s English common-law framework, its status as a recognised financial centre, and straightforward passporting arrangements with international banking partners.
DFSA capital requirements for payment institutions range from AED 1,835,000 (USD 500,000) for account information services to AED 7,340,000 (USD 2,000,000) for full payment account service providers. Client fund safeguarding equivalent to 100% of net payment liabilities is mandatory. DFSA application fees start at USD 10,000 (AED 36,700) with annual supervisory fees from USD 10,000. DIFC is frequently chosen by international money transfer operators (MTOs) and cross-border payment platforms seeking a UAE regulatory anchor with global recognition.
ADGM (FSRA) Payment Services Authorisation
ADGM’s FSRA licenses payment service activities under its Financial Services and Markets Regulations (FSMR) for entities incorporated within Abu Dhabi Global Market. The FSRA’s payment services framework covers payment account services, money remittance, payment initiation, and stored value facilities for both retail and institutional clients. ADGM is a strong fit for regional treasury management platforms, B2B payment hubs, and international remittance companies serving the South Asian and African corridor markets from Abu Dhabi.
FSRA minimum capital for payment services starts at USD 250,000 (AED 918,500) for account information services and rises to USD 1,000,000 (AED 3,670,000) for full payment account and money transmission services. Application fees are USD 10,000 to USD 20,000 (AED 36,700 to AED 73,400) with annual supervisory fees from USD 10,000. ADGM’s RegLab sandbox allows payment companies to test new payment instruments and business models under reduced capital requirements for an initial supervised period.
Comparison: CBUAE vs DFSA vs FSRA
| Factor | CBUAE (Mainland) | DFSA (DIFC) | FSRA (ADGM) |
|---|---|---|---|
| Retail Customers | Yes | Yes (with DFSA rules) | Yes |
| Min Capital (Basic PAS) | AED 10,000,000 | AED 7,340,000 | AED 3,670,000 |
| Min Capital (SVF/Wallet) | AED 10,000,000–25,000,000 | AED 3,670,000 | AED 918,500 |
| Application Fee | AED 200,000 (approx.) | AED 36,700 | AED 36,700–73,400 |
| Annual Supervisory Fee | AED 100K–500K | AED 36,700+ | AED 36,700+ |
| Licensing Timeline | 6–12 months | 3–6 months | 3–6 months |
| IPP/Aani Interoperability | Mandatory | Not required | Not required |
AML/CFT and Open Banking Requirements
CBUAE-licensed PSPs must register with the UAE Financial Intelligence Unit’s goAML platform, appoint a UAE-resident MLRO, implement a full AML/CFT compliance framework under Federal Decree-Law No. 20 of 2018, and file Suspicious Transaction Reports (STRs) within 35 days of detection. PSPs processing cross-border payments are subject to FATF Travel Rule obligations for transfers above AED 3,670 (USD 1,000), requiring transmission of originator and beneficiary data to receiving PSPs.
Under the CBUAE Open Finance Framework of 2023, licensed PSPs with payment account data access capabilities must expose standardised APIs using FAPI 2.0 security profiles and ISO 20022 messaging. Compliance with the UAE’s Instant Payment Platform (IPP, branded as Aani) is mandatory for all CBUAE-licensed payment account service providers, requiring real-time payment processing capability and 24/7/365 system availability with 99.95% uptime SLAs.
Total Setup Costs for a UAE PSP
For a CBUAE-licensed Payment Account Service Provider, first-year costs include: minimum capital AED 10,000,000; CBUAE application and licensing fees AED 200,000 to AED 500,000; payment technology platform (PSP gateway, core ledger, API infrastructure) AED 2,000,000 to AED 8,000,000; legal, compliance, and AML policy setup AED 500,000 to AED 2,000,000; IPP/Aani integration and ISO 20022 messaging AED 500,000 to AED 1,500,000; office and key staff AED 1,000,000 to AED 3,000,000; and cybersecurity and PCI-DSS compliance AED 500,000 to AED 1,500,000. Total first-year commitment typically ranges AED 14,700,000 to AED 26,500,000.
What is the CBUAE RPSR regulation?
The Retail Payment Services and Card Schemes Regulation (RPSR) is the CBUAE’s primary regulatory framework for payment service providers in the UAE, issued under Board Resolution No. 3 of 2021. It creates six categories of licensed payment services — payment accounts, initiation, information, payment tokens, card schemes, and merchant acquiring — each with its own capital requirements, safeguarding obligations, and conduct of business rules modelled on the EU’s PSD2 framework.
What is the minimum capital for a UAE PSP license?
Under the CBUAE RPSR, minimum capital ranges from AED 5,000,000 for an Account Information Service provider to AED 50,000,000 for a domestic card scheme operator. For the most common PSP category — Payment Account Services — the minimum is AED 10,000,000. Stored Value Facility (e-wallet) providers require AED 10,000,000 to AED 25,000,000 depending on per-customer balance limits.
Can a FinTech startup obtain a UAE PSP license directly?
Yes, though capital requirements make direct CBUAE licensing challenging for early-stage startups. The CBUAE’s FinTech Office operates a regulatory sandbox where PSP applicants can test products with up to 1,000 real customers under reduced capital obligations for twelve months. ADGM’s RegLab and DIFC’s Innovation Testing License offer similar sandbox pathways with lower minimum capital (AED 918,500 and above) for payment service proof-of-concepts.
Is PCI-DSS certification required for UAE PSPs?
Yes. All CBUAE-licensed PSPs that store, transmit, or process card payment data are required to achieve and maintain PCI-DSS certification at the appropriate level (typically Level 1 for PSPs processing over one million card transactions annually). The CBUAE’s Card Payment Standards align with PCI-DSS 4.0 requirements, and CBUAE supervisory examiners may request annual PCI-DSS Attestation of Compliance (AOC) reports during routine inspections.
What is the UAE Instant Payment Platform (Aani)?
Aani (also referred to as the Instant Payment Platform or IPP) is the CBUAE-mandated real-time domestic payment infrastructure, launched in 2023. All CBUAE-licensed payment account service providers are required to connect to Aani and support instant credit transfers in UAE dirhams with end-to-end settlement in under ten seconds. Aani operates 24/7/365 and enables peer-to-peer, person-to-business, and government payment use cases via mobile number, Emirates ID, or IBAN routing.