AE · run world-payments-2026-06-27 v13.3.0
content: ai_generated 95 sources retrieved model claude-opus-4-8 ·

United Arab Emirates

AE schema world-payments-v1 trajectory: not recorded

Last updated · 14 modules · 61 sourced findings · 95 sources in the cumulative register

14Modulesbaseline.modules[]
61Findingsmodules[].findings[]
28Tier-1 sourcesrun_metadata.t1_source_count
Confidence mix (sums to 14 rendered modules; click to filter)

Jurisdiction brief

Lead Signal

The Central Bank of the UAE licenses retail payment services under the Retail Payment Services and Card Schemes Regulation, in force since 15 July 2021, which defines nine retail payment service categories and exempts banks from a separate licence provided they notify CBUAE. Stored value facilities require an Additional Capital Float of at least 5% of total customer float, segregation via escrow or restricted accounts, and AED 15 million minimum paid-up capital. Jaywan, the domestic card scheme operated by Al Etihad Payments, is co-badged with Visa, Mastercard, Discover and UnionPay, and settles domestic transactions onshore through UAESWITCH. The Digital Dirham has been legislated as legal tender under the 2025 Central Bank Law, with the first government transaction executed on 11 November 2025.

14 of 14 modules
Signal
Density

Selections OR within a group, AND across groups. Press / to search.

#

CBUAE licenses and supervises Exchange Business, Stored Value Facilities and other Licensed Financial Institutions under the Central Bank Law (Federal Decree-Law No. 14 of 2018). Financial Free Zones (ADGM, DIFC) are regulated separately.

Open gap — wpm-int-4CB Law 2025 standing position does not flag that, as of the 27 Jun 2026 run date, affected entities are ~9 weeks from the 16 Sep 2026 compliance deadline and the law materially expands CBUAE jurisdiction (virtual assets, open finance, technology enablers) with fines up to AED 1bn; urgency/expanded-scope framing should be added.no under-indexing note recorded
Open gap — wpm-int-6DIFC (DFSA) and ADGM (FSRA) free-zone money-services regimes sit outside the CBUAE perimeter and are referenced but not independently baselined; free-zone licensing detail and its interaction with the onshore PTSR carve-out (VARA Non-Objection Registration) is thin.Sub-national/free-zone divergence (DIFC, ADGM, VARA) under-indexed relative to federal CBUAE coverage.
Standing sub-brief87 words · last cycle wpm-2026-06-27

Licensing, Authorisation & Market Access

The Retail Payment Services and Card Schemes Regulation, in force since 15 July 2021, sets the onshore licensing perimeter across nine retail payment service categories, exempting banks (who must still notify CBUAE) while stored value facility activity is licensed separately under Circular 6/2020.

Outlook

Affected entities face a 16 September 2026 deadline to comply with the 2025 Central Bank Law, which materially expands CBUAE's jurisdiction into virtual assets, open finance and technology enablers and carries fines of up to AED 1 billion.

No periodic updates recorded against this sub-brief.

Sources and findings (5)
  1. T1https://rulebook.centralbank.ae/en/rulebook/retail-payment-services-and-card-schemes-regulation
  2. T3https://www.kayrouzandassociates.com/insights/cbuae-payment-service-provider-licensing-uae
  3. T3https://www.mondaq.com/financial-services/1651280/payment-service-providers-in-the-uae-legal-frameworks-and-licensing-demystified
  4. T3https://10leaves.ae/legal/cbuae-retail-payment-services-and-card-schemes-license
  5. T1https://uaelegislation.gov.ae/en/legislations/3284

#

Onshore conduct and safeguarding flow from the SVF Regulation and RPSCS Regulation, supervised by the CBUAE Consumer Protection function. SVF licensees must protect customer float (segregation / additional capital floor mechanisms), maintain an Additional Capital Float buffer of at least 5% of total customer float, and meet fit-and-proper, residency, risk-management and AML/CFT obligations. Conduct standards include standardized pre-contractual disclosure (Key Facts Statements), fee-change notice rules and complaint-handling, with the Sanadak ombudsman as external escalation.

Standing sub-brief75 words · last cycle wpm-2026-06-27

Conduct, Safeguarding & Promotions

Stored value facility licensees must protect customer funds through an Additional Capital Float of at least 5% of total customer float, float segregation via escrow or restricted accounts with daily reconciliation, and AED 15 million minimum paid-up capital.

Outlook

As CBUAE's expanded 2025 Central Bank Law jurisdiction takes effect toward the 16 September 2026 deadline, safeguarding and conduct obligations for stored value and payment token issuers are expected to tighten further.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T1https://rulebook.centralbank.ae/en/rulebook/stored-value-facilities
  2. T3https://www.cryptoverselawyers.io/central-bank-uae-stored-value-facilities-regulation/
  3. T3https://bank-uae.com/uae-banks-customer-rights/
  4. T1https://rulebook.centralbank.ae/en/rulebook/article-13-technology-risk-and-information-security

#

PTSR (Circular 2/2024) governs onshore stablecoins via three activities; Dirham Payment Tokens require a licence (AE Coin first, Dec 2024), Foreign Payment Tokens require registration (USDU first, Jan 2026); 100% HQLA reserves, par redemption, no yield, algorithmic/privacy tokens prohibited; transition ended ~June 2025; excludes DIFC/ADGM.

Open gap — wpm-int-1PTSR transition period end date is mis-stated in the research as July 2025; T3 sources (Regulation Tomorrow, Pinsent Masons) cite June 2025 (14 June / end-June). The prohibition on unlicensed payment token services took full effect at transition end — the precise date should be reconciled before publication.no under-indexing note recorded
Open gap — wpm-int-2AE Coin (Dirham Payment Token licence, Dec 2024) and USDU (Foreign Payment Token registration, Jan 2026) are distinct PTSR pathways; secondary reporting conflates them as 'first stablecoin'. The two-track distinction (licence vs registration) must be preserved and USDU's restriction to professional-client/digital-asset settlement noted.no under-indexing note recorded
Open gap — wpm-int-5W2 confidence was set Confirmed in research but the specific licensing events (AE Coin, USDU) rest on T3 sources only; per the auto-downgrade rule these claims are carried at High. Under-indexed: emerging-market and private-company stablecoin operational deployment (e.g. AE Coin retail partnerships post-baseline) not captured.Private-company and emerging-market signals (post-baseline AE Coin retail partnerships, USDU use restrictions) are under-indexed relative to regulatory-framework coverage.
Standing sub-brief138 words · last cycle wpm-2026-06-27

Stablecoins & Digital Money

The Payment Token Services Regulation, effective 6 July 2024 with a one-year transition, splits stablecoin activity into a Dirham Payment Token licence for UAE-incorporated issuers and a Foreign Payment Token registration, both requiring 100% high-quality-liquid-asset reserves, par redemption within one business day, no interest or yield, and a prohibition on algorithmic and privacy tokens. AE Coin became the first licensed Dirham Payment Token in December 2024, while USDU, issued by ADGM-regulated Universal Digital, became the first registered Foreign Payment Token in early 2026 with reserves held onshore at Emirates NBD, Mashreq and Mbank.

No periodic updates recorded against this sub-brief.

Sources and findings (5)
  1. T1https://rulebook.centralbank.ae/en/rulebook/payment-token-services-regulation
  2. T3https://www.financierworldwide.com/assessing-the-uae-payment-token-services-regulation
  3. T3https://www.nephosgroup.com/nephos-blog/uae-stablecoin-regulation-ptsr-guide/
  4. T3https://www.regulationtomorrow.com/dubai-and-saudi/cbuae-payment-token-services-regulation/
  5. T3https://thepaypers.com/crypto-web3-and-cbdc/news/uae-central-bank-approves-first-usd-backed-stablecoin-under-ptsr

#

Operational resilience for onshore institutions is built from sector regulations rather than a single DORA-style instrument: the CBUAE Operational Risk Management Regulation/Standards, the Outsourcing Regulation & Standards for Banks (covering material business activity, outsourcing registers, cross-border data and concentration risk), technology/cyber requirements embedded in the RPSCS (Article 13) and SVF regulations, and the Guidelines for Financial Institutions Adopting Enabling Technologies (cloud, API, DLT). PSPs/SVF licensees must maintain fit-for-purpose technology and cyber-resilience frameworks, incident management, and business-continuity plans with escalation/reporting to the Central Bank.

Standing sub-brief51 words · last cycle wpm-2026-06-27

Operational Resilience & Critical Infrastructure

There is no single consolidated operational-resilience instrument; the UAE builds resilience from outsourcing rules, operational-risk standards and RPSCS Article 13 technology-risk and information-security requirements.

Outlook

The trajectory remains 'established' rather than escalating, with no dedicated DORA-style instrument currently tracked in the regulatory horizon for this module.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T1https://rulebook.centralbank.ae/en/rulebook/outsourcing-regulation-banks
  2. T1https://rulebook.centralbank.ae/en/rulebook/article-13-technology-risk-and-information-security
  3. T1https://rulebook.centralbank.ae/en/rulebook/guidelines-financial-institutions-adopting-enabling-technologies
  4. T1https://rulebook.centralbank.ae/en/rulebook/d-operational-risk

#

Card-scheme and network compliance in the UAE combines the international schemes (Visa, Mastercard, Discover, UnionPay) with the national domestic card scheme Jaywan, operated by Al Etihad Payments (AEP, a CBUAE subsidiary) and routed through the UAESWITCH national switch. Jaywan launched 2024 and became operational in 2025, with co-badging agreements allowing domestic routing on Jaywan and cross-border processing on global networks; it is positioned to retain interchange/processing value onshore. PCI DSS remains the card-data security baseline, and the RPSCS Regulation governs card-scheme licensing and reporting to CBUAE.

Open gap — wpm-int-3Jaywan 'operational in 2025' conflates infrastructure readiness with actual issuance/usage; as of Jan 2026 it is accepted at most POS/ATMs but not widely issued, with full rollout expected by ~2027. Current issuance penetration as of mid-2026 is not quantified in the evidence.no under-indexing note recorded
Horizon · 2027 (±year)Jaywan full issuance rolloutin_force_pending · T1
Standing sub-brief89 words · last cycle wpm-2026-06-27

Scheme & Network Compliance

Jaywan, the domestic card scheme operated by Al Etihad Payments under the FIT programme, launched in 2024 and reached infrastructure readiness in 2025, co-badged with Visa, Mastercard, Discover and UnionPay, with domestic transactions routed through UAESWITCH and settled onshore while cross-border transactions run on the global networks.

Outlook

As of early 2026 Jaywan is accepted at most points of sale and ATMs but not yet widely issued, and a CBUAE mandate for banks to issue the card is expected to drive full rollout by end-2027.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T1https://aep.ae/en/news-media/press-releasesarticles/jaywan-uaes-new-domestic-card-payment-scheme-all-your-questions-answered/
  2. T3https://blog.jobxdubai.com/2025/05/19/jaywan-uae-domestic-card-payment-scheme-guide/
  3. T3https://gulfnews.com/business/banking/uae-launches-first-domestic-card-scheme-jaywan-1.500048458
  4. T3https://itexus.com/instant-payments-domestic-card-scheme-what-builders-need-to-know/

#

The UAE is one of the world's largest remittance-source markets (88-90% expatriate population), with principal outbound corridors to India, Pakistan and the Philippines. Cross-border rails include SWIFT-based correspondent flows settled through UAEFTS, the Arab Monetary Fund's BUNA multi-currency RTGS (which includes AED) and the GCC's AFAQ system; the domestic Aani instant-payment platform (launched Oct 2023) is being linked internationally, notably to India's UPI. Exchange houses (Al Ansari, Lulu, Al Fardan) remain central to retail remittance, alongside Wise/Remitly/Western Union and emerging CBDC corridors (Digital Dirham, mBridge).

Movement — NEWAani crosses 12.5M users; federal government fee/fine adoption via Cabinet Resolution 176M/4MFirst-cycle baseline capture of instant-payments rail scaling and government adoption milestone.
Standing sub-brief82 words · last cycle wpm-2026-08-05

Payment Corridor Dynamics

The UAE is among the world's largest remittance-source markets, with 2022 outward remittances of AED 145.7 billion, led by India (31%), Pakistan (12%) and the Philippines (8%), and Aani is being linked internationally to India's UPI while BUNA and AFAQ provide regional multi-currency settlement.

Outlook

The UAE-India corridor is opening via the Aani-UPI instant-payments linkage, while the UAE-GCC corridor is integrating through AFAQ, which covers six GCC currencies including the dirham, and a planned GCC-wide real-time gross settlement system.

Periodic update · new data 2026-08-11 · run wpm-2026-08-05

Payment Corridor Dynamics

Aani, the instant-payments platform operated by Al Etihad Payments, has crossed 12.5 million users according to Q1 2026 reporting, continuing a scaling trajectory for the UAE's domestic real-time-payments rail. Al Etihad Payments also operates Jaywan, the UAE's domestic card scheme, UAESWITCH, and the Wages Protection System, giving the operator a broad footprint across retail instant payments, card-scheme infrastructure and payroll-compliance rails. This breadth is relevant to corridor dynamics because it concentrates several distinct payment functions within a single operator's infrastructure, which shapes how payment corridors into and out of the UAE interact with domestic rails at the point of settlement.

The more structurally significant development this cycle is Cabinet Resolution No. 176M/4M of 2026, which authorises Aani and Jaywan as payment channels for federal government service fees and fines, with the Ministry of Finance announced as the first implementing federal entity on 3 August 2026. This is a mandatory-adoption milestone rather than a voluntary-uptake one: it commits a federal government body to routing fee and fine payments through the domestic instant-payments rail rather than through card-scheme or legacy bank-transfer channels, a meaningful signal of the rail's perceived reliability and government-side confidence in its operational maturity.

Read together, the 12.5 million user milestone and the federal mandate describe a rail that has moved past an early-adoption phase into standing infrastructure status, a maturity marker that should inform any assessment of the UAE's domestic payment corridor as a channel increasingly capable of absorbing volume that might otherwise route through card schemes or cross-border payment rails.

Outlook

The marker to watch is whether other federal government entities beyond the Ministry of Finance adopt Aani and Jaywan for fee and fine collection following the Ministry's implementation, and whether Aani's user count continues its growth trajectory beyond the 12.5 million figure reported for Q1 2026, both of which would confirm the rail's transition from consumer-adoption success to comprehensive government-side infrastructure.

Sources and findings (4)
  1. T1https://www.centralbank.ae/en/our-operations/payments-and-settlements/buna-arab-regional-payment-system/
  2. T3https://tabinsights.com/article/improved-cross-border-payment-systems-support-growth-in-middle-east
  3. T3https://itexus.com/cross-border-payments-remittance-platforms-in-the-middle-east/
  4. T3https://www.theasianbanker.com/updates-and-articles/cross-border-payments-in-the-middle-east-become-more-inclusive

#

The UAE payments market is bank-anchored (Emirates NBD, FAB, Mashreq, ADCB) but increasingly fintech-driven, with a fast-growing card market (projected ~AED 565.5bn in 2025) and rapid wallet/contactless adoption. Acquiring and processing consolidated sharply in 2025 with the Network International–Magnati merger under a Brookfield-led consortium, creating the region's largest fintech/payments platform. The market also features exchange houses for remittance, BNPL leaders (Tabby), payment wallets (Ziina, Mamo), gateways (Telr, Checkout.com) and embedded-finance infrastructure (NymCard, TPAY).

Standing sub-brief105 words · last cycle wpm-2026-06-27

Industry Structure & Commercial

Network International and Magnati merged under a Brookfield-led consortium, with regulatory approvals secured by mid-2025 and completion around October 2025, forming the region's largest fintech and payments platform, serving more than 250 financial institutions, roughly 240,000 businesses and over 20 million cardholders across more than 50 MEA markets. The merger's own deal value was not publicly disclosed, though the combined platform is reported to process more than $400 billion in total payment volume.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T2https://www.network.ae/en/about-us/press-and-media/news/network-international-and-magnati-secure-key-regulatory-approvals-for-merger
  2. T3https://www.khaleejtimes.com/business/finance/uaes-digital-payments-boom-gets-a-boost-with-network-internationalmagnati-merger
  3. T3https://www.mondaq.com/financial-services/1651280/payment-service-providers-in-the-uae-legal-frameworks-and-licensing-demystified
  4. T3https://www.thunes.com/insights/trends/powering-payments-in-the-middle-east-the-uaes-influence/

Payments-sector legal action in the UAE is dominated by CBUAE administrative/financial enforcement rather than private litigation. In 2025 the CBUAE ran one of its most aggressive AML/CFT enforcement campaigns, with cumulative fines reported in the hundreds of millions of dirhams (~AED 370m+ since the start of 2025) across foreign bank branches, exchange houses, insurers and brokerages, including license revocations and personal sanctions on compliance officers/MLROs. Enforcement is grounded in Federal Decree-Law No. 20 of 2018 (AML/CFT) and the Central Bank Law, administered via the CBUAE Enforcement Department with appeals through the Grievances and Appeals Committee.

Standing sub-brief66 words · last cycle wpm-2026-06-27

Legal & Litigation

Federal Decree-Law No. 10 of 2025 introduced new personal liability and a lower evidentiary threshold for CBUAE administrative enforcement, underpinning fines exceeding AED 370 million levied since the start of 2025 with license revocations and personal sanctions on compliance officers and MLROs.

Outlook

The legal/enforcement trajectory is tracked as escalating, indicating continued administrative sanctions activity is likely as CBUAE deepens post-FATF-grey-list-exit supervisory intensity.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T1https://www.centralbank.ae/en/our-operations/enforcement/
  2. T1https://www.centralbank.ae/media/hhphe2s3/cbuae-imposes-financial-sanctions-of-aed-4-1-million-on-three-exchange-houses-en.pdf
  3. T3https://natlawreview.com/article/uae-central-bank-fines-foreign-bank-and-compliance-officer-money-laundering
  4. T3https://www.nortonrosefulbright.com/en-us/knowledge/publications/0eafbc05/aml-enforcement-on-the-rise

#

Merchant acquiring is a licensed retail payment service under the RPSCS Regulation, with the merged Network International/Magnati the dominant acquirer/processor alongside bank-owned and fintech acquirers (Mashreq/NeoPay, Magnati, Mamo, Telr). Acquirers onboard merchants for card-present and online acceptance, route domestic debit/prepaid through Jaywan/UAESWITCH, and increasingly support Aani QR and UPI acceptance. Onboarding, fraud, tokenisation and chargeback/dispute mechanics are embedded in scheme rules plus CBUAE technology-risk and AML guidance for payment-sector participants.

Standing sub-brief49 words · last cycle wpm-2026-06-27

Merchant Acquiring & Risk

Acquiring and processing capacity has concentrated post-merger under the Network International-Magnati platform, and NPCI-Magnati UPI QR acceptance has been launched at Dubai Duty Free.

Outlook

Merchant-acquiring risk concentration is likely to persist while the merged platform's scale advantages play out across the region's 50-plus markets.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T3https://www.kayrouzandassociates.com/insights/cbuae-payment-service-provider-licensing-uae
  2. T3https://tbreak.com/network-international-magnati-merger-uae-mea/
  3. T3https://currentaffairs.adda247.com/npci-and-magnati-partner-to-boost-upi-use-in-uae/
  4. T1https://rulebook.centralbank.ae/en/rulebook/guidance-licensed-financial-institutions-risks-relating-payments

#

The UAE is in an intense build-out phase under the CBUAE Financial Infrastructure Transformation (FIT) programme and National Payment Systems Strategy (NPSS): the Aani instant-payment platform (Oct 2023, mobile-number/QR/request-to-pay), the Jaywan domestic card scheme (2024-25), an Open Finance Regulation (published 15 April 2024) enabling pay-by-bank, and the Digital Dirham CBDC, now legislated as legal tender under CB Law 2025 with a first government transaction executed 11 Nov 2025 (mBridge/Aber lineage). BNPL, embedded finance and tap-to-pay (SoftPOS) are rapidly expanding.

Standing sub-brief93 words · last cycle wpm-2026-08-05

Product Innovation & Market Development

The Digital Dirham, a retail and wholesale central bank digital currency on a two-tier intermediated model, is now legislated as legal tender under the 2025 Central Bank Law, with the first government transaction executed on 11 November 2025 by the Ministry of Finance and Dubai Finance, and CBUAE announced its move to a launch phase in August 2025.

Periodic update · new data 2026-08-11 · run wpm-2026-08-05

Product Innovation & Market Development

The CBUAE's Open Finance Regulation has moved from framework into live implementation this cycle via Nebras Open Finance LLC, which operates the regulation's API hub and trust framework. Nebras has launched a consumer-facing brand, Al Tareq, covering account aggregation, lending, insurance comparison and onboarding use cases, and the regulation's role definitions for Payment Account, PSP and TSP participants cross-reference the Stored Value Facilities Regulation, tying the open-finance build-out directly to the UAE's existing nonbank e-money licensing architecture rather than treating it as a separate regulatory track.

The practical significance of this development is that open finance in the UAE is being built on top of an already-licensed SVF/e-money base rather than requiring a wholly new participant category, which should lower the operational barrier for existing licensed payment institutions to participate in account-aggregation and lending-adjacent open-finance use cases relative to a jurisdiction building open finance from a blank regulatory slate.

Outlook

The marker to watch is uptake of the Al Tareq brand and the API hub by banks and licensed payment institutions beyond Nebras itself, which would indicate whether the CBUAE's open-finance infrastructure investment is translating into a genuinely multi-participant ecosystem rather than a single-operator implementation.

Sources and findings (4)
  1. T1https://www.centralbank.ae/en/our-operations/payments-and-settlements/
  2. T3https://remit.ae/uae-money-movement
  3. T3https://thepaypers.com/crypto-web3-and-cbdc/news/uae-central-bank-approves-first-usd-backed-stablecoin-under-ptsr
  4. T3https://tracxn.com/d/companies/ziina/__0IibwCkPb7vnIfS1nr7vHAKCS3JL6O86zYNNg7WzDhY

#

Consumer protection is anchored in the CBUAE Consumer Protection Regulation/Standards and the Establishment of an Ombudsman Unit Regulation, which created Sanadak — the first independent financial & insurance ombudsman in the MENA region (launched 2024) — assuming the former Consumer Protection Department complaint-handling role. Consumers must first complain to the institution and wait 15 calendar days before escalating to Sanadak. There is no UK-style statutory APP-fraud mandatory reimbursement regime; redress for unauthorised/fraudulent digital-payment debits is handled case-by-case via institution complaints, the CBUAE consumer portal and Sanadak, with disclosure obligations (Key Facts Statements) on providers.

Movement — NEWParallel VARA v2.1 / CMA Decision 4/R.M/2026 virtual-asset regimes now in forceFirst-cycle baseline capture of a dual-track digital-asset licensing landscape.
Standing sub-brief110 words · last cycle wpm-2026-08-05

Consumer Protection & APP Fraud

Sanadak, established in 2023 and operational since 2024 as the first independent financial and insurance ombudsman in the MENA region, resolves consumer complaints against licensed institutions free of charge, though consumers must first complain to the institution and wait 15 calendar days before escalating. No UK-style statutory mandatory reimbursement regime for authorised push payment fraud exists, so redress for digital-payment fraud remains case-by-case, with the burden on the institution to prove the payment was authorised.

Periodic update · new data 2026-08-11 · run wpm-2026-08-05

Consumer Protection & APP Fraud

This cycle's most consumer-relevant development sits at the intersection of virtual-asset market structure and retail protection. VARA's Exchange Services Rulebook v2.1, effective 31 March 2026, permits exchange-traded virtual-asset derivatives, including futures, options, contracts for difference and perpetuals, under a permanent regime for the first time, but does so with controlled retail participation, meaning suitability and leverage-limit conditions apply specifically to protect retail investors entering a product category that carries materially higher loss potential than spot virtual-asset trading.

Layered onto this is the reconstituted Capital Markets Authority's Decision No. 4/R.M/2026, issued April 2026, creating a federal Virtual Assets Framework spanning eight licensed activity categories that operates alongside VARA's emirate-level regime. From a consumer-protection perspective, the coexistence of two virtual-asset licensing tracks without published coordination guidance creates a practical risk that a retail participant may not be able to easily determine which regulator, and which set of retail-protection conditions, applies to a given platform or product. Confidence in the CMA framework's specific characterisation is assessed rather than high, since the CMA's primary decision text was not directly retrieved this cycle.

Outlook

The marker to watch is whether VARA and the CMA publish any joint or coordinated consumer-disclosure guidance clarifying which regime's retail-protection conditions apply to a given virtual-asset product, which would materially reduce the fragmentation risk identified here.

Sources and findings (4)
  1. T1https://rulebook.centralbank.ae/en/rulebook/establishment-ombudsman-unit-united-arab-emirates-regulation
  2. T1https://u.ae/en/information-and-services/finance-and-investment/raising-complaints-against-financial-institutions-and-insurance-companies
  3. T2https://sanadak.gov.ae/en/about/
  4. T2https://sanadak.gov.ae/en/

#

Post-FATF-grey-list CBUAE AML enforcement campaign (AED 370m+ fines, license revocations, personal MLRO sanctions); PSP/SVF full AML obligations under FDL No.20 of 2018 as amended (No.7 of 2024, No.10 of 2025). Sentinel-fed; original analysis routed to FIM.

Standing sub-brief91 words · last cycle wpm-2026-08-05

AML/CFT & Financial Crime

This module is sourced from the Sentinel feed: since the start of 2025 CBUAE has levied AML/CFT fines exceeding AED 370 million (over US$100 million) across foreign bank branches, exchange houses, insurers and brokerages, including licence revocations and personal sanctions on compliance officers and MLROs, grounded in Federal Decree-Law No. 20 of 2018 as amended by No. 7 of 2024 and No. 10 of 2025.

Periodic update · new data 2026-08-11 · run wpm-2026-08-05

AML/CFT & Financial Crime

This module carries Sentinel-fed intelligence per standing methodology; original illicit-finance analysis is not performed here. Sentinel identifies two linked developments this cycle. First, Federal Decree-Law No. 10 of 2025, effective 14 October 2025, replaces the UAE's core AML/CFT/CPF statute and expands scope to payment-sector reporting entities and virtual-asset service providers. Second, the Central Bank of the UAE imposed a AED20 million institutional fine plus a AED300,000 personal fine against the branch's Money Laundering Reporting Officer on 24 June 2026, for repeated AML/CFT and sanctions-framework failures.

Readers should treat these as attributed Sentinel-feed signals rather than as this brief's own illicit-finance assessment; for typology-level analysis of the UAE's AML/CFT exposure, including beneficial-ownership and sanctions-evasion architecture, consult FIM's dedicated coverage.

Outlook

The marker to watch, per the Sentinel feed, is whether further CBUAE enforcement actions follow the pattern of this cycle's institutional-plus-personal fine structure, and whether the new statute's expanded VASP and payment-sector scope generates additional reportable enforcement activity in coming cycles.

Sources and findings (6)
  1. T1https://rulebook.centralbank.ae/en/rulebook/guidance-licensed-financial-institutions-risks-relating-payments
  2. T?FIM (sentinel.gi) per-JID baseline profile — United Arab Emirates — UAE operates under Federal Decree-Law No. 20 of 2018 (as amended) on AML/CFT, a federal FIU (goAML-based), and a layered crypto regime (CBUAE, SCA, VARA, DFSA, FSRA). Delisted from FATF grey list (Feb 2024) and EU high-risk AML list (Jun 2025) after action-plan remediation, but fragmented free-zone supervision (7 emirates, 2 financial free zones, ~39 commercial free zones/registries) and weak BO transparency persist structurally.
  3. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness
  4. T3FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-003) — Sanctions: EU divergence
  5. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: regulatory-failure
  6. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: enforcement-absence

#

Settlement access is centred on the CBUAE-operated UAE Funds Transfer System (UAEFTS), the national RTGS (operational since 2001, UAEFTS 3.0 since 2012) settling in central-bank money in AED, with access conditioned on CBUAE licensing, maintaining a CBUAE account and completing network/application certification. Exchange houses must settle all in-UAE transactions in AED via UAEFTS and obtain CBUAE no-objection to open foreign hedge/correspondent accounts. Cross-border correspondent flows run via SWIFT and increasingly via BUNA/AFAQ and the planned GCC RTGS, reducing reliance on bilateral correspondent chains; de-risking and intensified AML scrutiny shape access for higher-risk corridors.

Standing sub-brief90 words · last cycle wpm-2026-08-05

Correspondent Banking, Settlement & Access

CBUAE owns and operates UAEFTS, the national real-time gross settlement system operational since 2001 and upgraded to UAEFTS 3.0 in 2012, settling in central-bank money in AED, with exchange houses required to settle all in-UAE transactions in AED via UAEFTS and to obtain a Letter of No Objection to open foreign correspondent or hedge accounts.

Periodic update · new data 2026-08-11 · run wpm-2026-08-05

Correspondent Banking, Settlement & Access

The UAE's correspondent-banking access profile has improved materially since its removal from FATF's grey list in February 2024, and the jurisdiction remains outside the 22-jurisdiction list confirmed at the 19 June 2026 Plenary. The UAE's fifth-round mutual evaluation is due in 2026, and cumulative 2025 AML/CFT fines exceeding AED370 million, including the AED20 million institutional fine and AED300,000 personal Money Laundering Reporting Officer fine imposed 24 June 2026, are read as sustaining correspondent-banking confidence ahead of that evaluation by demonstrating active enforcement rather than passive grey-list-exit compliance.

The bank-versus-nonbank access asymmetry that typically defines this module's analytical spine is only partially evidenced this cycle: the FATF grey-list status finding applies across both bank and nonbank payment institutions, while the specific CBUAE enforcement action targeted a bank branch. No nonbank-specific correspondent-access development was identified this cycle, so the asymmetry point should be read as a standing structural feature of correspondent banking generally, banks typically hold direct correspondent relationships while nonbank payment institutions and EMIs access cross-border settlement indirectly through sponsor banks, rather than as a UAE-specific finding this cycle.

Outlook

The primary marker to watch is the outcome of the UAE's fifth-round FATF mutual evaluation, expected in the fourth quarter of 2026, which will directly test whether the correspondent-banking-confidence improvement described here is confirmed or whether the evaluation identifies new effectiveness gaps that could affect access terms for UAE-domiciled banks and payment institutions.

Sources and findings (4)
  1. T1https://www.centralbank.ae/en/our-operations/payments-and-settlements/
  2. T1https://rulebook.centralbank.ae/en/rulebook/standards-regulations-regarding-licensing-and-monitoring-exchange-business
  3. T3https://farazzafar.com/blog/my-blogs-and-position-papers-1/post/uae-central-bank-payment-and-settlement-systems-60
  4. T3https://www.ib.barclays/our-insights/payments-evolution-in-the-uae-and-middle-east.html

#

Trailing-12-month UAE commercial activity led by Network International-Magnati merger (~Oct 2025, Brookfield-led), Tabby $4.5bn valuation + CBUAE SVF licence, NymCard $33m Series B, USDU stablecoin registration, and PayPal-NEOPAY / Botim-TerraPay partnerships.

Standing sub-brief143 words · last cycle wpm-2026-08-05

Commercial Intelligence (M&A, Investment & Product)

Network International and Magnati completed their Brookfield-led merger around October 2025; the deal value of the merger itself was not publicly disclosed. Buy-now-pay-later platform Tabby reached a $4.5 billion valuation after an October 2025 secondary share sale (total funding around $604 million, amount of the secondary not separately disclosed) and separately obtained a CBUAE Stored Value Facilities licence enabling it to hold customer funds, offer spending accounts and issue payment cards. Abu Dhabi embedded-finance and card-issuing platform NymCard raised a $33 million Series B in March 2025, taking total funding to roughly $70 million, to deepen MENA card issuing, embedded lending and money movement.

Periodic update · new data 2026-08-11 · run wpm-2026-08-05

Commercial Intelligence & Fintech

The Dubai International Financial Centre added 775 companies in Q1 2026, a company-formation growth figure that reinforces Dubai's continued role as a financial gateway for banks, payment firms and fintechs operating in or through the UAE. This is a market-growth signal rather than a discrete transaction event: no specific merger, acquisition, investment round or product launch with the full set of required commercial-event details was identified this cycle, so no standalone commercial-event entry is recorded here, consistent with the drop-if-incomplete convention for this module.

The growth figure is nonetheless commercially relevant context for the other developments recorded elsewhere this cycle: a jurisdiction adding companies at this rate, combined with the open-finance implementation and dual-track virtual-asset licensing activity recorded under other modules, describes a fintech and payments ecosystem still in active expansion rather than one that has plateaued.

Outlook

The marker to watch is whether a discrete, fully-disclosed commercial event, a named acquisition, funding round or product launch, emerges from within this growing DIFC company base in a future cycle, which would allow this module to move from aggregate growth reporting to event-level commercial intelligence.

Sources and findings (5)
  1. T2https://www.network.ae/en/about-us/press-and-media/news/network-international-and-magnati-secure-key-regulatory-approvals-for-merger
  2. T3https://arabianbusinesstimez.com/top-10-fintech-startups-in-uae/
  3. T3https://www.fintechfutures.com/fintech/dubai-opportunities-finance-and-funding-for-start-ups-scale-ups-and-smes
  4. T3https://fintechnews.ae/30634/fintechdubai/top-funded-uae-fintech-startups-of-2026/
  5. T3https://tracxn.com/d/geographies/united-arab-emirates/__3OiAv3pREWpxnktEnzWFLJSYAQglJ5zhPRSqNSmDIKs
No modules match.

Filters combine as OR inside a group and AND across groups.

Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for United Arab Emirates
FieldValue
trust.lawyer_review.statusnever_reviewed
trust.lawyer_review.reviewernot recorded
trust.content_sourceai_generated

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light; derived_scores = {}.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-08-11. A year-precision row is never promoted into a tighter band.

Orphan deltas: 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 61 finding(s), 94 source(s) in the cumulative register.