sboghossian Knowledge Pack — CBUAE Banking Regulation (UAE)
Scope
This pack covers the UAE Central Bank (CBUAE) regulatory framework for banking and financial institutions operating in the UAE mainland (onshore). It covers:
- CBUAE mandate and legal basis
- Regulated entities and license types
- Capital requirements and prudential framework
- Islamic banking oversight
- AML/CFT framework (post-FATF grey-list reforms)
- Consumer protection
- Payments and stored value licensing
- Free zone distinction (DIFC/ADGM have separate regulators)
CBUAE — mandate and legal basis
Central Bank of the UAE (CBUAE) operates under Federal Decree-Law 14/2018 (UAE Central Bank Law, replacing the 1980 Union Law on the UAE Currency). CBUAE's mandate includes:
- Banking supervision and regulation
- Monetary policy
- Currency issuance (UAE dirham, AED) — pegged to USD at 3.6725
- Payment systems oversight
- Consumer protection in financial services
- AML/CFT supervision for banks and financial institutions
Regulatory perimeter — onshore UAE
CBUAE regulates financial institutions operating in the UAE mainland. Free zones have separate regulators:
| Regulator | Jurisdiction | Regulated entities |
|---|---|---|
| CBUAE | UAE mainland (onshore) | Banks, insurance, finance companies, payment providers |
| DFSA | DIFC (Dubai) | Banks, investment firms, funds, insurance |
| FSRA | ADGM (Abu Dhabi) | Banks, investment firms, funds, crypto |
| VARA | Dubai mainland + DIFC excluded | Virtual asset service providers |
Key trap: An entity licensed by the DFSA to operate from the DIFC cannot conduct retail banking with UAE residents outside the DIFC without a separate CBUAE license (the "financial perimeter" rule).
License types
| License | Activities |
|---|---|
| Commercial bank | Full deposit-taking, lending, payments, FX |
| Investment bank | Capital markets, M&A advisory, institutional finance; no retail deposits |
| Islamic bank | Sharia-compliant banking only; supervised under Higher Shariah Authority (HSA) |
| Specialized financial institution | Narrow activities (e.g., export finance, mortgage-only) |
| Finance company | Consumer and corporate lending; no deposits |
| Exchange house | Currency exchange + remittance |
| Payment service provider | Payment processing; stored value; e-wallet |
| Stored Value Facility (SVF) | E-money issuance |
| Branch of foreign bank | Limited activities; no retail deposits without additional approval |
Capital requirements
Commercial banks
| Requirement | Standard |
|---|---|
| Minimum paid-up capital | AED 3 billion (approx. USD 820M) |
| Common Equity Tier 1 (CET1) ratio | ≥ 7% |
| Total Capital Adequacy Ratio (CAR) | ≥ 12% |
| Liquidity Coverage Ratio (LCR) | ≥ 100% |
| Net Stable Funding Ratio (NSFR) | ≥ 100% |
| Leverage ratio | ≥ 3% |
Other entities
- Finance company: AED 300M minimum
- Exchange house: AED 50M+
- Payment service provider: AED 5M–50M (tiered by activity type)
Basel III implementation
CBUAE has fully implemented the Basel III framework. The UAE banking sector is generally well-capitalized compared to regional peers, reflecting CBUAE's conservative supervisory approach and the UAE's position as a financial hub.
Prudential framework — key rules
Large exposure limits
- Single counterparty: ≤ 25% of eligible capital
- Group: ≤ 35% (with Board approval)
- UAE Government and quasi-government exposures: higher limits
Real estate concentration
Real estate sector exposure limits to prevent systemic concentration risk. Residential mortgage: loan-to-value caps (typically 80% for UAE nationals, 75% for expats).
Connected party transactions
- Transactions with shareholders, directors, and affiliates require Board approval
- Enhanced disclosure requirements
Emiratisation (UAE national hire)
- Banking sector Emiratisation targets (Tawteen) — mandatory percentages of UAE national staff
- CBUAE monitors compliance; affects banking licence renewal
Islamic banking
Higher Shariah Authority (HSA)
CBUAE's Higher Shariah Authority is the federal-level Sharia supervisory body for Islamic banking:
- Issues fatawa (religious rulings) on product structures
- Resolves Sharia compliance disputes between Internal Sharia Supervisory Committees
- Sets minimum standards for Islamic banking products
Internal Sharia Supervisory Committee (ISSC)
Each Islamic bank or Islamic window at a commercial bank must have an ISSC of qualified Sharia scholars. The ISSC:
- Approves all Islamic banking products
- Issues annual Sharia compliance report
- Can prohibit non-compliant products
AAOIFI standards
CBUAE has adopted standards from the Accounting and Auditing Organization for Islamic Financial Institutions (AAOIFI) for Islamic banking accounting and governance.
Common Islamic products supervised by CBUAE
- Murabaha (cost-plus sale financing)
- Ijara (lease finance)
- Musharaka (equity partnership)
- Sukuk (Islamic bonds/certificates)
- Wakalah (agency deposits)
AML/CFT
Framework
- Federal Decree-Law 20/2018 on AML/CFT
- CBUAE AML/CFT Standards for Licensed Financial Institutions (issued under CBUAE mandate)
- goAML platform for SAR filing — mandatory registration
- FATF-aligned requirements
Post-grey-list reform (2022–2024)
UAE was placed on FATF's grey list in 2022, removed in 2024. Major reforms during this period relevant to CBUAE-supervised entities:
- Enhanced UBO disclosure and verification requirements
- Strengthened correspondent banking due diligence
- Increased SAR filing volumes and quality standards
- Enhanced DNFBP supervision by Ministry of Economy
- Expanded targeted financial sanctions screening requirements
Practical requirements for CBUAE banks
- AML program: documented risk-based AML policy, approved by Board
- MLRO: designated Money Laundering Reporting Officer with direct Board access
- CDD: standard + EDD for high-risk customers/transactions; PEP screening
- Sanctions screening: real-time; UN + OFAC + EU + CBUAE targeted lists
- SARs: filed via goAML; minimum threshold reporting + suspicion-based
- Record retention: 5 years from end of relationship or transaction
Consumer protection
CBUAE issued a Consumer Protection Regulation (CPR) in 2020, updated in 2024. Key consumer protection requirements:
- Transparent product disclosure (pricing, fees, risks)
- Anti-fraud controls and monitoring
- Complaint handling procedures (24-hour acknowledgment; 30-day resolution)
- Cooling-off periods for certain products
- Restrictions on certain fee structures and penalty interest
Mortgage rules
- LTV caps: 80% for UAE nationals; 75% for expats
- Income verification requirements
- Stress-testing of borrower affordability
Payment services and fintech
PSP licensing
Payment service providers (PSPs) require a CBUAE PSP license for:
- Payment processing (card processing, merchant acquiring)
- Money transfer services
- E-wallet / stored value facilities
Open banking framework (2025)
CBUAE is implementing an open banking framework requiring licensed banks to offer standardized APIs for authorized third-party providers.
Digital bank licensing (2026+)
CBUAE has signaled a digital-only bank licensing framework allowing pure-play digital banks to operate without physical branches.
Practical guidance — licensing
Commercial bank license application
Typical requirements:
- Regulatory business plan (products, risk management, financials)
- Proof of paid-up capital (AED 3B) deposited in escrow
- Management fit and proper assessment (all senior management)
- AML program documentation
- IT and cybersecurity framework
- Emiratisation plan
- Physical office in UAE
Timeline: 12–24 months from application to license issuance. CBUAE process is rigorous.
Foreign bank branch
- Requires CBUAE approval
- Letter of support from home country regulator
- Minimum capital (varies)
- Activities limited compared to locally incorporated bank
How to use this pack
Load this pack when the user:
- Needs to understand the CBUAE regulatory framework for a UAE banking activity
- Is advising on a banking license application in the UAE mainland
- Has AML/CFT compliance questions for a CBUAE-regulated institution
- Needs to understand capital requirements or prudential rules for UAE banks
- Is assessing the distinction between CBUAE, DFSA (DIFC), and FSRA (ADGM) jurisdiction
Caveats & currency
CBUAE regulations evolve continuously. The open banking framework, digital bank licensing, and ongoing AML reforms mean the regulatory landscape is actively changing. Verify current CBUAE regulations and circulars at centralbank.ae. Capital requirement figures may be updated.
Related skills
- [[kb-aml-fatf-mena]] — MENA-wide AML/CFT context
- [[kb-banking-regulation-sama]] — SAMA (KSA) for comparison
- [[kb-banking-regulation-bdl]] — BDL (Lebanon) for comparison
- [[kb-corporate-law-uae]] — UAE corporate law for bank entity structure
- [[kb-crypto-vara-dubai]] — VARA for virtual asset activities in Dubai