New CBUAE law fintech license deadline 2026
The Central Bank of the UAE enacted a new law that repeals and replaces the 2018 law governing its regulatory scope. One specific provision, Article 62, changes who actually needs a CBUAE license going forward. It is not just banks, insurers, and payment providers anymore. Any platform, app, protocol, or piece of technology infrastructure now falls inside CBUAE’s licensing and supervisory scope, as long as it facilitates or enables a financial service. That covers payments, credit, deposits, money exchange, remittances, or investment services. It applies even if the company behind it is not itself a bank.
Affected businesses have a real, dated deadline to sort this out: September 16, 2026.
| VERDICT: A genuine, significant expansion of who needs a CBUAE license in the UAE. If you run or rely on a fintech app that connects to banking, payments, or credit, this deadline is worth checking against your own situation. Article 62 of the new CBUAE Law extends licensing requirements to technology providers that facilitate financial services. This applies even without being a bank, insurer, or payment institution themselves. It can include API aggregators, payment gateways, and platforms connecting customers to regulated financial institutions. Entities newly brought into scope have until September 16, 2026 to regularize their licensing and compliance. Maximum administrative fines under the new law rise to AED 1 billion. New minimum penalties now apply specifically for unlicensed or promotional financial activity. |
What Actually Changed
The previous 2018 law focused CBUAE’s licensing scope on entities directly providing financial services. That meant banks, exchange houses, payment service providers, and similar regulated institutions. The new law’s Article 62 broadens that scope considerably. It now covers the offering or operation of platforms, decentralized applications, protocols, or technological infrastructure that facilitate, intermediate, or enable financial services. This applies even where the entity itself is not a bank, insurer, or payment institution.
In practice, this means something specific. A fintech company offering an API or aggregation tool that connects customers to banks, payment providers, or insurers, without itself being one of those regulated entities, is now likely to fall inside CBUAE’s licensing perimeter. Legal analysts reviewing the law describe Article 62 as drafted broadly. It clearly intends to capture technology-based intermediaries that enable or support licensed financial activity, whether or not that intermediary handles money directly.
Who This Actually Affects
The most directly affected category is technology providers that sit between a customer and a regulated financial institution. That includes embedded finance platforms letting non-financial companies offer checkout financing or insurance. It includes payment aggregation tools bundling multiple payment rails into one integration. It also includes platforms enabling credit, deposit, or remittance activity through underlying bank partnerships rather than their own banking license.
This does not automatically mean every fintech app in the UAE now needs a full banking license. It means something narrower but still significant. A broader category of technology companies now needs to actually check whether Article 62 applies to their specific activity. Some of these companies previously assumed they sat outside CBUAE’s direct supervision, simply because they were not themselves handling deposits or issuing credit.
The Deadline, and What Happens If You Miss It
Entities newly brought into scope by the new law have until September 16, 2026 to regularize their licensing and operations. The same deadline applies to entities required to change their existing compliance posture because of it. This is a firm, dated compliance deadline, not a soft guideline. The new law also raises the stakes for missing it. Maximum administrative fines climb to AED 1 billion under the new framework. New minimum penalties now apply specifically for unlicensed or promotional financial activity, a meaningful increase in enforcement severity compared to the 2018 law.
What Existing Regulations Still Apply
This matters if you are trying to figure out your own compliance status. Existing regulations issued under the 2018 law remain in force until they are formally replaced under the new law. That includes the Stored Value Facilities Regulations and the Retail Payment Services and Card Schemes Regulations. The specific rules governing many existing fintech categories have not necessarily changed overnight. What has changed is which companies now fall inside the perimeter those rules apply to.
Why This Matters for UAE Consumers, Not Just Fintech Founders
You may use fintech apps for payments, budgeting, or credit that connect to your bank behind the scenes. If so, this expanded licensing scope is a genuine consumer protection upgrade, in principle. A technology intermediary that previously operated with lighter oversight, simply by virtue of not being a bank itself, is now more likely to fall under CBUAE supervision, audit requirements, and enforcement. The practical effect should show up once the September deadline passes. More of the apps handling your financial data and transactions should carry direct Central Bank accountability. That is different from just a partnership agreement with a licensed bank operating somewhere behind the interface.
For UAE businesses building or relying on fintech infrastructure specifically, the practical step is straightforward. Review whether your platform, or a vendor platform you depend on, facilitates any of the financial activities named in Article 62. If so, confirm licensing status directly with the CBUAE well before the September 16 deadline arrives.
Sources
* White & Case: UAE enacts the new CBUAE Law which repeals and replaces the 2018 Law — https://www.whitecase.com/insight-alert/uae-enacts-new-cbuae-law-which-repeals-and-replaces-2018-law
* Central Bank of the UAE: official licensing page — https://www.centralbank.ae/en/licensing/
Robius.news — Dubai, UAE — 2026 | Built to be first. Built to be trusted.
