Home About Services Jurisdictions Sectors Marensa Banq → About → Products → FAQ → Plans & Pricing The Navigator
Contact Us
Lending & Credit Finance

Consumer & Commercial Lending Licensing — CBUAE & DFSA

Lending without the correct UAE licence is a criminal offence — not just a regulatory breach. We manage the CBUAE and DFSA licensing process for consumer finance companies, BNPL providers, commercial lenders, and P2P platforms.

Licence Eligibility Review Licensing Services
CBUAE Consumer FinanceDFSA CreditBNPLP2P LendingCredit RiskAML/CFT
350+
Companies Structured
6
Jurisdictions
CBUAE
Consumer Finance Expertise
6 Mo
Avg. CFC Timeline
Sound Familiar?

What Lending Businesses Are Navigating in the UAE

UAE lending regulation is strict, product-specific, and carries criminal penalties for unlicensed activity. These are the questions every credit business faces before launching in the UAE.

"Do we need a CBUAE licence to lend in the UAE — or can we use a DIFC structure?"
The answer depends on where your borrowers are and how you distribute the product. Lending to consumers in mainland UAE requires a CBUAE Consumer Finance Company licence. Operating only within DIFC and lending to DIFC-based counterparties may be structured under a DFSA permission to Provide Credit. Lending to mainland customers from a DIFC entity without the right CBUAE arrangement is a common and serious mistake.
"How do interest rate caps affect our product design?"
CBUAE imposes rate caps on consumer credit products — personal loans, credit cards, auto finance, and BNPL. These caps apply not just to headline interest rates but also to fees, late payment charges, and early repayment penalties. Product design must be built around the regulatory parameters from the outset, not retrofitted after the fact. We advise on product structuring that is compliant, commercially viable, and ready for regulatory review.
"We want to launch a BNPL product. The CBUAE issued new rules — what do we need to do?"
The CBUAE's 2023 BNPL framework introduced specific licensing requirements, affordability assessment obligations, disclosure standards, and consumer protection rules for BNPL providers. BNPL is no longer a regulatory grey area in the UAE. Providers must be licensed, must assess borrower affordability before extending credit, and must meet CBUAE disclosure requirements at the point of sale. We have advised on BNPL structuring and CBUAE applications specifically under this framework.
"What AML/CFT obligations does a UAE lending business carry?"
CBUAE-licensed consumer finance companies are subject to UAE AML/CFT law and CBUAE AML supervision standards. This requires a full AML/CFT policy manual, a designated MLRO, customer due diligence including credit bureau checks, transaction monitoring, and annual risk assessments. Lenders also have specific obligations around politically exposed persons (PEPs) and sanctions screening. The CBUAE expects a compliance programme that is proportionate to the lending activity and borrower risk profile.
"We want to set up a P2P or crowdfunding platform in the UAE. What does that require?"
The DFSA in DIFC regulates crowdfunding platforms — both loan-based and equity-based. A DFSA Operating a Crowdfunding Platform permission is required, with specific rules around platform governance, investor disclosure, and borrower assessment. The CBUAE has not yet issued a comprehensive P2P/crowdfunding framework for mainland operations. Many P2P operators structure their UAE business through DIFC with a parallel CBUAE arrangement for mainland distribution.
"How long will a CBUAE consumer finance licence take — and can we operate while waiting?"
A CBUAE Consumer Finance Company licence typically takes 5–9 months from a complete application. Operating without the licence during this period is not permitted — there is no formal sandbox exception for consumer lending. We advise on structuring the pre-launch period lawfully and help clients use the application period productively: building the credit risk framework, onboarding the compliance team, and preparing the technology infrastructure for day-one operations.
Licence & Permission Categories

UAE Lending Licences — CBUAE & DFSA

The right licence depends on your product type, borrower base, and distribution geography. Most UAE lending businesses require one primary licence with a secondary arrangement for cross-perimeter activity.

CBUAE — Mainland UAE
Consumer Finance Company (CFC)
For consumer lending including personal loans, auto finance, and salary advance products. Requires CBUAE CFC licence, AML/CFT programme, credit risk framework, and compliance with CBUAE Consumer Finance Regulations. Subject to interest rate caps.
CBUAE — Mainland UAE
BNPL Provider
Buy-now-pay-later products regulated under CBUAE's 2023 BNPL framework. Specific licensing, affordability assessment, consumer disclosure, and complaints handling obligations. Subject to CBUAE consumer protection standards.
DFSA — DIFC
Providing Credit
DFSA financial services permission for direct lending within DIFC. English common law framework. Covers consumer and commercial credit. DFSA conduct-of-business standards apply including disclosure requirements and responsible lending obligations.
DFSA — DIFC
Operating a Crowdfunding Platform
DFSA permission for loan-based (P2P) and equity-based crowdfunding platforms. Specific platform governance, investor disclosure, and borrower assessment requirements. Most common structure for fintech P2P lending businesses in the UAE.
DFSA — DIFC
Arranging Credit
For credit brokers, marketplace lenders, and platforms that arrange credit on behalf of lending institutions. Lighter regulatory burden than direct lending but still requires DFSA permission, AML/CFT, and conduct compliance.
FSRA — ADGM
Providing Credit / Arranging Credit
Similar to DFSA framework — FSRA permissions for direct lending and credit arrangement in Abu Dhabi Global Market. Appropriate for businesses with Abu Dhabi proximity or GCC government counterparties as borrowers.
A GCC-based BNPL fintech approached us after the CBUAE published its 2023 BNPL framework, placing their existing business model outside the permitted regulatory perimeter. We assessed the product against the new framework, restructured the lending flow to comply with affordability assessment requirements, built a full AML/CFT programme, and prepared the CBUAE Consumer Finance Company application incorporating the BNPL-specific provisions. The licence was approved in six months. The business launched on day one of regulatory approval.
6
Months to Licence
BNPL
CBUAE Compliant
Day 1
Launch Ready
What We Delivered

Licence, Credit Risk Framework & AML/CFT in One Engagement

A lending licensing engagement with us covers the full CBUAE or DFSA submission — including the credit risk framework and AML/CFT programme that regulators scrutinise most carefully. A licence without a functioning compliance infrastructure is a licence that creates liability.

  • Licence category selection — CFC, BNPL, DFSA credit, crowdfunding
  • Company structure and UAE free zone or mainland setup
  • Full CBUAE or DFSA application — business plan, risk framework, financials
  • Credit risk policy and affordability assessment framework
  • AML/CFT policy manual and MLRO appointment
  • CBUAE or DFSA liaison throughout review
  • Post-licence compliance programme and ongoing retainer support
Licence Eligibility Review
Our Lending & Credit Advisory

End-to-End Support for UAE Lending Businesses

Licence Selection & Product Structuring
We assess your lending product, borrower base, distribution model, and capital position to identify the correct licence and structure from the outset. This includes the choice between CBUAE and DFSA, product structuring within CBUAE interest rate caps, and the right company vehicle. Product and regulatory design must happen together — not sequentially.
CBUAE Consumer Finance Licensing
Full preparation and submission of the CBUAE Consumer Finance Company application or BNPL provider registration. Covers business plan, financial projections, credit risk policy, consumer protection framework, AML/CFT programme, and fitness and propriety submissions for key persons. We manage all CBUAE interactions from submission to approval.
DFSA Credit & Crowdfunding Permissions
For DIFC-based lending and P2P/crowdfunding platforms, we prepare and manage the DFSA application for Providing Credit, Arranging Credit, or Operating a Crowdfunding Platform. Includes regulatory business plan, investor/borrower framework, platform governance documentation, and AML/CFT programme.
Credit Risk Framework Design
CBUAE and DFSA both require a credit risk policy as part of the licence application. We design credit risk frameworks that are regulator-ready and operationally functional — covering affordability assessment methodology, credit bureau integration, provisioning policy, and portfolio monitoring. The framework must be embedded in your lending operations from day one.
AML/CFT for Lending Businesses
Lending businesses face specific AML/CFT risks — loan proceeds being used to layer illicit funds, borrower identity fraud, and politically exposed person exposure. We design AML/CFT programmes proportionate to the lending product and borrower risk profile, including KYC/CDD procedures, PEP screening, sanctions checks, and suspicious transaction reporting.
Ongoing Compliance & Regulatory Maintenance
Post-licence, lending businesses face ongoing CBUAE or DFSA reporting obligations, annual AML/CFT reviews, credit risk policy updates, and consumer protection audits. We provide retainer-based compliance support — outsourced MLRO, compliance monitoring, regulatory reporting, and management of CBUAE or DFSA inspection readiness.
Common Questions

Lending & Credit Finance FAQs

The licensing requirement depends on where you lend, to whom, and through which legal entity. Consumer lending to individuals in mainland UAE requires a CBUAE Consumer Finance Company (CFC) licence. BNPL products require compliance with the CBUAE's 2023 BNPL framework. Commercial lending to businesses may fall under different CBUAE categories. For DIFC-based operations, a DFSA permission to Provide Credit or Arrange Credit is required. ADGM has equivalent FSRA permissions. Lending without the correct licence in the UAE is a criminal offence, not a civil matter.
The CBUAE sets interest rate caps for consumer credit products through its Consumer Finance Regulations. Caps apply to personal loans, auto finance, credit cards, and BNPL products — covering headline rates, fees, late payment charges, and early settlement penalties. These caps apply to CBUAE-licensed Consumer Finance Companies and banks. The DFSA applies conduct-of-business standards and responsible lending obligations to credit products in DIFC. We advise on product design that is commercially viable within the regulatory parameters.
The CBUAE issued a Regulatory Framework for Buy-Now-Pay-Later (BNPL) Products in 2023, which requires BNPL providers to be licensed, carry out affordability assessments before extending credit, comply with CBUAE disclosure requirements at point of sale, maintain a formal complaints handling process, and report to the Al Etihad Credit Bureau. BNPL is no longer a regulatory grey area in the UAE. We have advised on BNPL product structuring and CBUAE application preparation specifically under this framework.
A DFSA-licensed credit provider operates within the DIFC perimeter. Actively marketing or providing credit to consumers in mainland UAE from a DIFC entity may constitute a regulated lending activity requiring a separate CBUAE licence. The analysis depends on where borrowers are located, how they are acquired, and whether the credit agreement is formed within or outside DIFC. This is a question with real enforcement consequences and we advise on the correct structure for each business model before clients enter the UAE market.
A CBUAE Consumer Finance Company licence typically takes 5–9 months from a complete, well-prepared submission. The main variables are the quality of the credit risk framework, the AML/CFT programme, the management team fit-and-propriety documentation, and the clarity of the business model. Gaps or inconsistencies between the business plan and the risk framework are the most common cause of CBUAE delays. We prepare applications designed to be complete on first review, which is the most reliable way to manage timeline.
In the UAE, lending without the right licence is a criminal offence. The licence eligibility review is where every engagement starts.
We assess your product, borrower base, distribution model, and capital position — and tell you exactly which licence you need, whether your product needs restructuring to comply with CBUAE parameters, and what a realistic application timeline looks like.
Licence Eligibility Review Licensing Services AML/CFT & Compliance