The four-payment button at checkout looks simple. The regulation behind it is not.
The older version of this article said Tabby, Tamara, and Postpay were all CBUAE-licensed and had all been reporting your payment behavior to the credit bureau since 2025. After checking the current rules, the June 2026 Central Bank register, provider disclosures, and this week’s Etihad Credit Bureau announcement, that wording is too broad.
The good news is that buy now, pay later is no longer a regulatory gray zone in the UAE. The useful part is understanding how each provider sits inside that framework, because “regulated,” “permitted,” and “licensed” are not interchangeable words.
| T H E R O B I U S V E R D I C T CAUTION: UAE BNPL is regulated, but the public status differs by provider. Tamara holds a direct CBUAE restricted finance license. Tabby says its short-term credit business is permitted by the CBUAE, while a separate Tabby entity holds an SVF license. We could not verify Postpay as a direct CBUAE licensee by that name in the June 2026 public register. That does not automatically make Postpay unauthorized. The UAE framework also allows approved agent models through licensed banks or finance companies. It does mean Robius should not call a provider “CBUAE-licensed” unless we can identify the exact licensed entity and license type. |
What the UAE Rules Actually Say
The Central Bank changed the BNPL landscape in late 2023 by bringing short-term credit into the Finance Companies Regulation. Under that framework, a company can provide short-term credit in one of two broad ways: obtain a Restricted License Finance Company license, or operate as an approved agent of a licensed bank or finance company.
That second route is important. A brand can be operating inside the CBUAE framework without appearing in the register as its own restricted finance company. So a missing brand name is a reason to ask for the underlying entity and partner, not a reason to jump straight to “illegal.”
The rules also put hard boundaries around the product. A restricted finance company or agent cannot charge interest on short-term credit. Total fees, including late-payment fees, cannot exceed 30% of the original credit amount. The repayment term cannot exceed 12 months. And total short-term credit to one borrower is capped at AED 20,000 or three months of verified net income, whichever is lower. Individual providers can set much lower limits.
The regulation also requires clear disclosures about the amount, expiry date, repayment process, fees, default consequences, and borrower rights. In other words, “interest free” does not mean “not credit.”
Tamara: The Cleanest Direct-Licence Case
Tamara is the easiest of the three to verify from the public register.
The CBUAE register as of June 2026 lists Tamara FZE as a National Finance Company with a Conventional Restricted license. Its identification number is 02.01.03.025.2025.02. Tamara separately announced in October 2025 that it had received the restricted finance license.
That is a direct, named licensing relationship for the UAE entity. There is no need to infer it from a logo or a press quote. The entity is in the regulator’s register and the license category is visible.
Tamara currently says it charges no late fees. Its terms also say it may use credit bureau information for customer due diligence and may report late or failed payments to credit bureaus.
Tabby: Regulated, But Two Different Legal Stories
Tabby needs more precise wording because two different entities and two different regulatory concepts are easy to blur together.
Tabby’s UAE help pages say Pay Later and Tabby Card short-term credit are provided by Tabby LLC, and that Tabby is permitted to operate by the Central Bank of the UAE. That supports calling the short-term credit business CBUAE-permitted or operating under CBUAE oversight.
Separately, Tabby Payments LLC appears in the June 2026 CBUAE register under Stored Value Facilities. Tabby announced that SVF license in April 2026. It lets that entity hold customer funds and build spending-account, card, and money-management products.
That SVF license is real, but it is not the same thing as a BNPL restricted finance license. We should not use the wallet license as proof of the legal basis for Pay in 4.
Our current Tabby app review is useful here because it explains what the new wallet license changes and, just as importantly, what it does not.
One more correction from the old article: Tabby’s current UAE help pages say missed payments may attract collection charges. So the blanket statement “Tabby has no late fees” should not remain live.
Postpay: Do Not Claim a Direct Licence Without the Entity
This is the part where the previous article was too confident.
I searched the CBUAE register dated June 2026 and did not find an institution named Postpay. I also could not verify a current public CBUAE notice naming Postpay as a Restricted License Finance Company.
That does not prove Postpay is operating outside the rules. Remember the agent route: short-term credit can also be offered through an approved arrangement with a licensed bank or finance company. A consumer-facing brand and the regulated credit provider do not always have the same name.
But until we can identify the exact entity or licensed partner behind the UAE product, the defensible wording is simple: Postpay operates in the UAE market, but Robius has not independently verified a direct CBUAE license under the Postpay name from the current public register.
That is much better than filling the gap with a green tick.
| Provider | What we verified | What not to say | Robius status |
| Tamara | Tamara FZE is listed by CBUAE as a Restricted National Finance Company | Do not reduce the licence to a generic “fintech approval” | Direct licence verified |
| Tabby | Tabby says short-term credit is CBUAE-permitted; Tabby Payments LLC separately holds an SVF licence | Do not call the SVF wallet licence the BNPL licence | Regulatory status verified, structure needs precise wording |
| Postpay | Active UAE BNPL brand; no Postpay-named entity found in June 2026 CBUAE register | Do not claim direct CBUAE licence without naming the entity or partner | Direct licence unverified from public register |
The Credit-Report Story Changed This Week
This is the biggest factual update to the old article.
On July 27, 2026, Etihad Credit Bureau announced that account information from Tabby and Tamara is now being incorporated into UAE credit reports, effective from July 2026. The change applies to existing and new customers and includes relevant historical transactions.
So the old claim that all three major providers had been reporting your behavior since 2025 was not supportable. The current confirmed position is narrower and more important: Tabby and Tamara account data is now part of the formal UAE credit-reporting ecosystem.
We covered the credit-report shift before it went live. That article now needs a small follow-up update of its own because the future tense became present tense this week.
For consumers, the takeaway is simple. A four-payment plan is no longer something to mentally file next to a discount code. It is a credit obligation that lenders can increasingly see when they assess your wider financial profile.
What Happens If You Miss a Payment?
Do not rely on an old comparison table. Provider fees and policies change, and the legal framework sets ceilings rather than identical pricing for every app.
Tabby currently says an overdue payment can trigger a collection charge, pause access to products, and potentially affect your credit score. Tamara currently says it charges no late fees, but repeated delays may suspend the account and affect your credit score.
That difference matters, but the bigger point is the one both products now share: late behavior can follow you outside the app.
The CBUAE rules also require credit information to be provided to the Credit Information Agency under its terms, and require a credit report before extending AED 5,000 or more in short-term credit.
So if you are stacking several plans because each one looks small on its own, the system is moving in the opposite direction. Regulators and lenders are trying to see the combined obligation, not the checkout illusion.
What Regulation Gives You, and What It Does Not
A regulated BNPL product has rules around disclosure, fees, affordability, governance, and complaint handling. That is meaningful consumer protection.
It does not turn the purchase into free money. It does not guarantee that every dispute with a merchant will be resolved in your favor. And it does not mean every app with a familiar logo has the same license or the same complaint route.
Check the legal entity shown in the key facts statement or terms. Then check the CBUAE register. If the brand is operating through another regulated company, the provider should be able to tell you who that is and what role it plays.
Our guide to scams targeting people who are trying to report a scam is also a useful reminder to use the official escalation route. For complaints about a CBUAE-licensed financial institution, the Central Bank directs consumers to Sanadak after first trying to resolve the issue with the institution.
The Bottom Line
BNPL in the UAE is regulated. That part is clear.
What is not clear enough in most coverage is that regulation can sit behind different legal structures. Tamara gives us a straightforward direct restricted finance license. Tabby gives us a CBUAE-permitted short-term credit business plus a separate SVF-licensed payments entity. Postpay requires more evidence before we describe it as a direct CBUAE licensee.
And as of July 2026, Tabby and Tamara account information is entering UAE credit reports, including relevant history. That changes the consumer conversation more than any app-store rating or merchant count.
Use BNPL because it makes a planned purchase easier to manage, not because four smaller numbers make the price feel lower. And before trusting the regulatory claim on any finance app, check the entity behind the brand.
That is the same rule behind every Robius Scam or Legit? investigation: verify the company, the license, the activity, and the safety net before you trust the interface.
Sources
• CBUAE: June 2026 Register of Licensed Financial Institutions, including Tamara FZE and Tabby Payments LLC — https://www.centralbank.ae/media/thblruug/cb-register-june-2026.pdf
• CBUAE Rulebook: Finance Companies Regulation, Part II: licensing routes for Restricted Licence Finance Companies and Agents — https://rulebook.centralbank.ae/en/entiresection/5094
• CBUAE Rulebook: Short-term credit limits, fee cap, no-interest rule and maximum 12-month term — https://rulebook.centralbank.ae/en/entiresection/5094
• CBUAE Rulebook: Transparency and disclosure requirements for short-term credit — https://rulebook.centralbank.ae/en/rulebook/article-29-transparency-and-disclosures
• CBUAE Rulebook: Credit reporting obligations for Restricted Licence Finance Companies and Agents — https://rulebook.centralbank.ae/en/rulebook/article-24-credit-reports
• Tamara: October 2025 announcement of CBUAE restricted finance licence — https://tamara.co/en-ae/blog-post/tamara-secures-central-bank-uae-approval
• Tamara: Current UAE key facts statement and terms — https://tamara.co/en-ae/key-fact-statement
• Tabby: Current UAE regulatory disclosure for Pay Later and Tabby Card — https://tabby.ai/en-AE/help-business/about-tabby/is-tabby-regulated
• Tabby: April 2026 Stored Value Facilities licence announcement — https://tabby.ai/en-AE/newsroom/wallet-licence
• Tabby: Current UAE missed-payment and collection-charge guidance — https://tabby.ai/en-AE/help/help-pay-later/what-happens-if-i-dont-pay-my-bill-on-time
• WAM / Etihad Credit Bureau: July 27, 2026 announcement adding Tabby and Tamara account information to UAE credit reports — https://www.bignewsnetwork.com/news/279212005/etihad-credit-bureau-expands-uae-credit-reporting-ecosystem-with-buy-now-pay-later-data
• CBUAE: Consumer complaint route to Sanadak — https://www.centralbank.ae/en/contact-us/
• Sanadak: Complaint submission process for Licensed Financial Institutions — https://sanadak.gov.ae/en/make-a-complaint/complaint-submission-process/
This is not financial advice.
Robius.news — Dubai, UAE — 2026 | Built to be first. Built to be trusted.
