The UAE Tightens the Reins on Finance: A New Law Shakes Up the Industry
Client Alert | November 13, 2025
The UAE financial landscape is undergoing a seismic shift. On September 15th, 2025, the New CBUAE Law (Federal Decree Law No. 6 of 2025) came into effect, fundamentally reshaping how financial institutions operate within the country. This isn't just a tweak; it's a complete overhaul, consolidating regulations for banks, payment providers, and insurers under one roof. But here's where it gets controversial: it also introduces stringent rules for emerging technologies and significantly ramps up penalties for non-compliance.
This update dissects the key changes and their implications for businesses operating in the UAE's financial sector.
From Laissez-Faire to Lockstep: Criminalizing Unlicensed Activities
Previously, operating without a license in the UAE financial sector was prohibited, but lacked teeth. The New CBUAE Law changes that. Article 170 introduces criminal sanctions, including imprisonment and hefty fines (up to AED 500 million!), for engaging in licensed financial activities without authorization. This applies not only to entities within the UAE but also those operating from financial free zones like DIFC and ADGM, targeting UAE customers.
And this is the part most people miss: Even marketing or promoting financial products to UAE residents without a license is now considered a licensed activity, falling under the CBUAE's jurisdiction. This significantly expands the regulator's reach, potentially catching unsuspecting foreign firms in its net.
Virtual Assets and DeFi in the Spotlight
The law doesn't stop at traditional finance. Article 62 extends the CBUAE's regulatory perimeter to encompass virtual assets and decentralized finance (DeFi). This means companies providing technological infrastructure, platforms, or tools that facilitate financial services, even indirectly, may now require a license. This is a bold move, acknowledging the growing importance of these technologies while ensuring they operate within a regulated framework.
Tougher Rules for Licensed Players
Licensed financial institutions (LFIs) aren't exempt from the shakeup. The law introduces a comprehensive set of prudential, conduct, and consumer protection obligations. LFIs must adhere to stricter rules on capital adequacy, liquidity, governance, and risk management. A dedicated consumer protection regime mandates transparent disclosures, independent complaint handling, and measures to combat fraud.
A Safety Net for the System: Enhanced Resolution and Recovery
The New CBUAE Law prioritizes financial stability with a robust resolution and recovery framework. The CBUAE gains powers to intervene early in cases of financial distress, impose corrective measures, and even initiate resolution proceedings through a new Settlement and Resolution Authority. This aligns the UAE with international best practices, providing a safety net for depositors and policyholders.
Negotiated Settlements: A New Approach to Enforcement
In a departure from the past, the law introduces a negotiated settlement mechanism for administrative penalties and fines. This allows the CBUAE to consider cooperation, remedial actions, and the impact of violations when determining penalties, fostering a more nuanced approach to enforcement.
A Smooth Transition: Ensuring Continuity
Recognizing the need for a smooth transition, the law includes transitional provisions. Existing regulations remain in force until replaced by new ones, ensuring legal certainty and market stability during the implementation phase. LFIs have one year (extendable) to comply with the new requirements.
The Bottom Line: A New Era of Financial Regulation
The New CBUAE Law marks a significant turning point for the UAE's financial sector. It signals a shift towards a more stringent, internationally aligned regulatory environment, emphasizing enforcement and consumer protection. While some may view the increased regulations as burdensome, others see them as necessary to foster a stable and trustworthy financial system.
Food for Thought:
Will the new licensing requirements stifle innovation in the fintech and DeFi sectors, or will they provide a framework for responsible growth?
How will the expanded regulatory perimeter impact foreign firms operating remotely but targeting UAE customers?
Does the introduction of criminal sanctions go too far, or is it a necessary deterrent against unlicensed activities?
We encourage you to share your thoughts and engage in the discussion. The future of UAE finance is being written, and your voice matters.
For personalized guidance on how the New CBUAE Law affects your business, contact your Gibson Dunn advisor or any member of our UAE team.
Prepared by: Renad Younes, Mohammed Bashir, Sameera Kimatrai, Aliya Padhani, and Holly Alderton.
Contact:
- Sameera Kimatrai: +971 4 318 4616, skimatrai@gibsondunn.com
- Aliya Padhani: +971 4 318 4625, apadhani@gibsondunn.com
Disclaimer: This alert is for general informational purposes only and does not constitute legal advice. Please consult with qualified counsel for guidance on your specific situation.
© 2025 Gibson, Dunn & Crutcher LLP. All rights reserved. www.gibsondunn.com
