SCA vs DFSA vs ADGM-FSRA vs Offshore 'Introducer': Who Actually Regulates Your Money
-
The UAE runs parallel regulatory perimeters: CBUAE for banks, finance companies, exchange houses and insurance; SCA for onshore securities and investments; DFSA inside the DIFC; FSRA inside the ADGM. Each has its own rulebook, licence register, and complaint route.
-
The five-minute verification: every legitimate firm appears on its regulator's public register, and every legitimate pitch survives the question "which regulator, which licence number, which register."
-
The "introducer" is the gap in the map by design: someone marketing offshore products without holding a licence for the advice they're effectively giving. If your money leaves the UAE perimeter, so does every protection on this page.
"Are you regulated?" always gets a yes. The useful question is by whom, for what activity, and where can I see it. Here is the map, and the checks.
The four perimeters
| Regulator | Territory | What it covers | Verify at |
|---|---|---|---|
| CBUAE | UAE onshore | Banks, finance companies, exchange houses, payment firms, insurance companies and brokers | centralbank.ae registers |
| SCA | UAE onshore | Securities, brokers, investment funds, financial consultants and promoters | sca.gov.ae licensed entities |
| DFSA | DIFC (Dubai financial free zone) | Firms operating from the DIFC: wealth managers, funds, advisors | dfsa.ae public register |
| FSRA | ADGM (Abu Dhabi financial free zone) | Firms operating from the ADGM, same categories | adgm.com public register |
Three practical consequences of the parallel structure. First, a licence is for a territory and an activity: a DIFC-licensed wealth manager isn't thereby licensed to solicit clients onshore, and marketing financial products to the UAE public requires the appropriate onshore approvals. Second, your complaint route follows the licence: CBUAE-perimeter conduct escalates through the bank and Sanadak; DFSA and FSRA firms answer to their own regulators' complaint mechanisms; SCA-licensed firms to the SCA. Third, the protections differ: cooling-off rights and fee caps like the 5-business-day period and the 1% settlement cap are CBUAE-perimeter rules; the DIFC and ADGM have their own conduct standards.
The five-minute verification ritual
-
Get the exact legal entity name and licence number from the person pitching you. Reluctance here ends the conversation.
-
Find the entity on the claimed regulator's public register yourself; don't accept a screenshot or a framed certificate. Check the licence status is active and read the permitted activities: "arranging" is not "advising," and neither is "managing assets."
-
Match the person to the firm. Registers list firms; ask the firm to confirm in writing that this individual represents it in the capacity claimed.
-
Match the product to the perimeter. A UAE-regulated advisor can still hand you an application form for an offshore product; the moment your money sits with an offshore provider, your recourse follows that provider's jurisdiction, not the advisor's badge.
The introducer model, dissected
The classic structure: a slick "wealth consultancy" with a business licence (a trade licence to operate a company is not a financial services licence), whose consultants "introduce" you to offshore life-wrapped savings plans or foreign platforms. The advice is real, the commissions are real, the regulatory accountability is deliberately elsewhere. The tells: no register entry for the advising entity, products domiciled in third jurisdictions, commission structures nobody will state in writing, and urgency. The product-level red flags that usually travel with this model are the subject of how to spot mis-selling, and the recurring outcome is the subject of the expat financial mistakes list.
To be precise and fair: offshore does not mean scam, and DIFC/ADGM firms are properly regulated in their zones. The risk being flagged is unlicensed distribution: regulated-nowhere-relevant intermediaries selling regulated-elsewhere products to onshore consumers who assume UAE protections apply. They don't.
Quick routing table for common purchases
-
Bank account, loan, card, bank-sold insurance → CBUAE perimeter; the consumer protection standards apply.
-
Local brokerage account for DFM/ADX shares → SCA-licensed broker.
-
Wealth manager in DIFC/ADGM → DFSA/FSRA register, zone rules, zone complaint route.
-
"Savings plan" pitched at your office by a consultancy → verify before anything else; this is the introducer's natural habitat.
-
Insurance policy → the insurer must be CBUAE-licensed and the broker registered; verify both.
The one-sentence policy
No verification, no meeting two; a legitimate firm expects the check and passes it in minutes, and everyone else is answering your question by resisting it.
Sources and References
-
CBUAE licensed institutions registers (centralbank.ae); SCA licensed entities (sca.gov.ae)
-
DFSA Public Register (dfsa.ae); FSRA/ADGM Public Register (adgm.com)
-
CBUAE Consumer Protection Regulation (perimeter and scope)
This article is for general information and does not constitute financial or legal advice.
Published on 9 September 2026.