UAE CBUAE PSP License 2026 — Central Bank Payment Services Authorization (RPSCS) Guide

Central Bank of the UAE-regulated payment service provider authorization under the RPSCS Regulation — AED 100K–3M capital by category, plus SVF licensing for e-wallets. E-wallets, remittance, and merchant acquiring for the UAE mainland market, with a binding 16 September 2026 transition deadline

REGULATOR
Central Bank of the UAE
MIN. CAPITAL
AED 100K–15M
TIMELINE
9–18 months
LAST UPDATED
June 2026

— Last updated: June 2026 · 11 min read

⚠️ Transition Deadline: 16 September 2026

Federal Decree-Law No. 6 of 2025 came into force on 16 September 2025, broadening the CBUAE payment regulatory perimeter. Entities newly in scope — including open finance services, payment services using virtual assets, and enabling technology providers — have until 16 September 2026 to obtain the necessary CBUAE license or approval. Operating without a license after this date is a criminal offence under the 2025 Law, carrying imprisonment and fines up to AED 500 million. If you are operating a payment service in the UAE mainland without a CBUAE license, immediate action is required.

The UAE Mainland Payment Services Framework

The UAE mainland payment services market is regulated by the Central Bank of the UAE (CBUAE) under the Retail Payment Services and Card Schemes (RPSCS) Regulation, which came into force in July 2021. The RPSCS framework licenses e-wallet operators, remittance companies, merchant acquirers, payment aggregators, card scheme operators, and payment initiation service providers to serve UAE retail and corporate clients from a mainland entity.

A CBUAE PSP license provides access to the UAE's 10+ million residents and its position as the GCC's leading financial hub — covering e-commerce, digital wallets, cross-border remittances to South Asia and Africa, and merchant payment processing. Federal Decree-Law No. 6 of 2025 — in force from September 2025 — expanded the regulatory perimeter to include open finance services, payment services using virtual assets, and technology enablers. Entities in scope under the 2025 Law must be licensed by 16 September 2026. Capital requirements range from AED 100,000 (Category IV) to AED 3,000,000 (Category I) under RPSCS, plus a Stored Value Facility (SVF) license from the CBUAE separately for e-wallet products holding client balances (AED 15,000,000 minimum capital for SVF).

RPSCS License Categories

The RPSCS framework organizes PSPs into four categories based on activity scope and risk:

CategoryActivitiesMin. Capital
Category IFull payment services including cross-border, acquiring, e-moneyAED 3,000,000
Category IICross-border remittance, FX payment servicesAED 1,000,000
Category IIIDomestic payment processing, payment initiationAED 500,000
Category IVNarrow scope, lower risk payment facilitationAED 100,000

Capital requirements are dynamic — transaction volume can trigger category reclassification. PSPs should build a 24–36 month capital forecast when planning their application, as volume growth may require a Category upgrade and additional capital injection.

SVF (Stored Value Facility) — The E-Wallet License

For operators seeking to hold customer balances (float) in a digital wallet — like Careem Pay, Apple Pay UAE, or a branded e-wallet app — a Stored Value Facility (SVF) license is required separately from or in addition to the RPSCS license.

  • SVF capital — AED 15,000,000 minimum paid-up capital
  • Aggregate Capital Funds ≥ 5% of total e-money float
  • Bank guarantee — typically equal to paid-up capital

The SVF requirement is the most capital-intensive aspect of UAE payment licensing. Most operators apply for RPSCS first (for payment processing without float) and add the SVF authorization separately when wallet functionality is ready for launch. Notable SVF holders include Wise (licensed October 2025), Careem Pay, and the Emirates NBD digital wallet.

CBUAE vs DIFC/ADGM Payment Licensing

The UAE has three regulatory environments for payment businesses. Choosing the correct one is a strategic decision:

FeatureCBUAE (Mainland)DIFC (DFSA)ADGM (FSRA)
ClientsUAE mainlandProfessional + retail via DIFCInstitutional + professional
Regulatory bodyCentral Bank UAEDFSAFSRA
Applicable lawUAE Federal LawDIFC common lawADGM common law
Physical presenceUAE mainland officeDIFC officeADGM office
Retail client accessYes — full UAE marketVia Retail EndorsementLimited
Capital (PSP)AED 100K–AED 3MVariableVariable
Crypto paymentsVia VARA coordinationVia DFSA fintech perimeterFSRA digital assets
Best forUAE mass market, e-commerce, remittanceInstitutional, GCC B2B, advisoryAbu Dhabi institutional

For operators targeting the UAE retail market — e-wallets, remittance apps, e-commerce acquiring — the CBUAE RPSCS license is the correct route. For institutional B2B payment services from a DIFC entity, the DFSA framework applies.

2025 Law Expansion — What Is Now In Scope

Federal Decree-Law No. 6 of 2025 expanded the CBUAE regulatory perimeter effective September 2025. New categories now requiring CBUAE licensing or approval:

  • Open finance service providers (account aggregation, API data sharing)
  • Payment services using virtual assets (crypto-to-fiat payment rails, virtual asset payment processors)
  • Enabling technology providers (technical infrastructure operators whose systems are integral to payment processing)

No Further Extension:

This expansion captures many fintech operators who previously believed they were outside the regulatory perimeter. The September 2026 transition deadline is binding — there is no further extension.

Cost Breakdown

ItemCost
CBUAE application feeAED 10,000–50,000 (activity-dependent)
RPSCS Category I–IV capitalAED 100K–3M
SVF capital (if applicable)AED 15M+
UAE company incorporationAED 10,000–25,000
Advisory/legal serviceUSD $30,000–60,000
Annual auditUSD $10,000–25,000
Annual complianceUSD $20,000–50,000
RPSCS Year 1 all-in (excl. capital)USD $55,000–140,000

How Zitadelle AG Assists

  • Regulatory scoping — determining your RPSCS category and whether an SVF license is also required
  • 2025 Law assessment — confirming whether your activity is newly in scope ahead of the September 2026 deadline
  • UAE company incorporation and operational substance setup
  • Full CBUAE RPSCS application preparation — business plan, capital forecast, compliance and AML/CFT programmes
  • SVF authorization support for e-wallet operators holding customer float
  • CBUAE vs DIFC/ADGM jurisdiction analysis for the right regulatory route
  • Central Bank submission and follow-up throughout the assessment period
  • Post-authorization compliance support and ongoing regulatory obligations

Zitadelle AG assists e-wallet operators, remittance companies, and merchant acquirers with CBUAE RPSCS authorization — from category scoping and UAE incorporation through the full Central Bank application and SVF licensing where required. Contact Zitadelle AG for a confidential initial consultation on your UAE CBUAE PSP License.

Disclaimer:

Last updated: June 2026. Sources: Central Bank of the UAE (CBUAE), RPSCS Regulation 2021, Federal Decree-Law No. 6 of 2025. This page is for informational purposes only and does not constitute legal or regulatory advice.

How the Process Works

01

Initial Consultation

1–2 days

Free scoping call — jurisdiction selection, structure, capital requirements, and timeline assessment.

02

Document Collection

2–4 weeks

Gather all required KYC, corporate, and background documentation for all directors, shareholders, and UBOs.

03

Application Preparation

4–12 weeks

Preparation of the full application package — business plan, compliance programme, financial projections, and regulatory documentation.

04

Submission & Review

9–18 months

Submission to the regulator. Our team manages all follow-up queries and information requests during the assessment period.

05

License Issued

9–18 months

Authorization granted. Post-licensing support covers compliance setup, banking introductions, and ongoing regulatory obligations.

Frequently Asked Questions

Federal Decree-Law No. 6 of 2025, which came into force on 16 September 2025, expanded the UAE Central Bank's (CBUAE) regulatory perimeter to include open finance services, payment services using virtual assets, and enabling technology providers. Entities newly in scope under this law have until 16 September 2026 to obtain the necessary CBUAE license or approval. Operating without a license after this date is a criminal offence under UAE law, carrying imprisonment and fines up to AED 500 million.

Ready to apply for a UAE CBUAE PSP License?

Zitadelle AG provides end-to-end UAE CBUAE RPSCS authorization — from category scoping and UAE incorporation through the full Central Bank application, SVF licensing where required, and 2025 Law compliance ahead of the September 2026 deadline.

Quick Facts

Regulator
CBUAE (Central Bank of the UAE)
Framework
RPSCS Regulation 2021 + Federal Decree-Law 6/2025
Capital
AED 100,000–AED 15,000,000 (category-dependent)
Transition Deadline
16 September 2026
Criminal Penalty
Yes — imprisonment + fines up to AED 500M
Timeline
9–18 months
Passporting
UAE mainland
Best For
E-wallets, remittance, merchant acquiring in UAE
Updated
June 2026

Disclaimer: This page is for informational purposes only and does not constitute legal or regulatory advice. Requirements, timelines, and fees are subject to change. Always consult directly with the relevant regulatory authority or a qualified professional for the most current information. Zitadelle Advisory Group LTD is not a law firm and does not provide legal representation.