Blog
Ozon Warehouse Strikes and Marketplace Resilience: Structuring Cross-Border E-Commerce in the UAE
The short answer
A UAE marketplace needs a trade licence for the entity. Online economic activity run through a website, app or social media can also need an e-activity No Objection Certificate (NOC) from the Telecommunications and Digital Government Regulatory Authority (TDRA). The Ozon strikes are the stress test: Reuters reported a drone hit on a distribution centre at Chapayevsk in the Samara region on 22 August 2026 and on an Orenburg region warehouse the next day. They were physical, not cyber, so the founder's question is which entity holds the stock, the seller money and the customer contracts when one site goes down.
Online economic activity run through websites, apps or social media in the UAE can need a No Objection Certificate (NOC) from the Telecommunications and Digital Government Regulatory Authority (TDRA), and personal data handling falls under Federal Decree-Law No. 45 of 2021. The TDRA service is free, lists an expected time of 2 working days and is applied for with UAE Pass. A website must be on a .ae domain, and social media account names and links must be given, with a new application if a name changes. The fact that most often decides the route is whether the company sells as principal or only connects buyers with sellers.
Before launch, write down which site every order routes through and what the platform does for the buyer when that site stops.
What the Ozon strikes show about single-site fulfilment
The Reuters report on 23 August 2026 quotes Orenburg Governor Yevgeny Solntsev: a warehouse owned by Ozon and another unnamed industrial site were damaged by drone debris, and no one was injured. Ozon said on Telegram that it had evacuated more than 300 people and stopped work at the centre. The day before, a logistics centre in the Samara region was hit, which Reuters called the first strike on the company.
The lesson for a UAE founder is operational rather than political. A marketplace is a promise to deliver. When one sorting site stops, every order routed through it stops, and the platform still owes refunds, status updates and compensation to buyers who contracted with it. Whether the platform owes them depends on how it is structured.
If the company sold as principal, it owns the stock, the delivery promise and the loss. If it only intermediated, the sellers may be responsible, but the terms must say so, and consumers tend to blame the platform whose name was on the checkout. Plan for that gap before launch, not after. For a hiring platform the question is which MOHRE licence applies, covered in recruitment marketplace or HR tech setup.
Choosing principal or intermediary
Founders often call a business a marketplace because it sounds lighter. The label does not change what the company does. If you set the price, take the order, control the delivery and issue the refund, you behave like a retailer in the eyes of your customers.
Three questions settle most of it:
- Who is named as seller on the invoice?
- Who decides when a refund is paid, and from whose money?
- Who holds the stock between supplier and customer?
A hybrid is common: first-party products alongside third-party sellers. That is workable if the two flows are documented separately in contracts, accounts and customer-facing terms, and if each flow passes the three questions above on its own. The related guide on online marketplace platforms covers the model in more detail.
Seller funds and who may hold them
Marketplaces earn their keep by collecting payment and paying sellers later. The moment the platform holds a seller's money, it may be performing a function that a financial regulator cares about. Whether it does depends on how the payment flow is arranged, and a payment partner collecting directly on behalf of sellers is a very different thing from the platform's own bank account receiving the cash.
Do not assume that a payment provider's licence covers your marketplace. Ask what the provider is permitted to do for your specific flow, in writing, and keep the answer. If the model needs the platform to hold seller funds, take that as a regulatory question to resolve with the Central Bank of the UAE (CBUAE) or the relevant financial-centre regulator before incorporation, not a drafting detail. Any money held for sellers should sit in a segregated client money account with a licensed institution, apart from the platform's own funds.
Making the fulfilment chain redundant
Single-site dependence is the Ozon lesson. A UAE marketplace can reduce it in practical ways, and each has a contract consequence.
Two fulfilment partners, not one. Splitting volume across two third-party warehouses keeps the platform running if one is closed for any reason, from fire to a flooded access road. It also means two inventory feeds, two sets of service-level terms and a routing rule. The related guide on 3PL warehousing and e-commerce fulfilment sets out what to ask a provider.
Cross-border stock held abroad. Platforms selling into the UAE from overseas sellers depend on customs clearance and last-mile carriers as well. Who is importer of record, and who bears the loss while goods are in transit, must be written down.
Delay and force majeure terms. A buyer-facing clause that reserves the right to cancel after a warehouse failure should not be buried. Sellers need the same clause in their agreement, and it should match what the platform actually does in practice.
Insurance. Stock cover, goods in transit and business interruption are usually separate policies, and a policy bought by a seller does not cover the platform. Ask the broker what is excluded for events outside the insured's control.
Cyber and data duties, kept in proportion
The trend that drew attention to Ozon was physical, but a marketplace still holds customer addresses, phone numbers and payment references. Federal Decree-Law No. 45 of 2021 has been in force since 2 January 2022 and applies to personal data processed fully or partly through electronic systems, inside or outside the UAE. It requires holders to secure and keep data confidential, generally requires agreement from the individual unless an exception applies, and sets requirements for cross-border transfers. The UAE Data Office acts as the federal data regulator. Federal Law No. 15 of 2020 on Consumer Protection separately protects consumer data and bars suppliers from using it for marketing.
For a platform with sellers abroad, the cross-border transfer rules matter on day one: every seller who receives a buyer's delivery address is a recipient. Contracts with sellers should say what they may do with it. Do not treat the vendor as the owner of the risk. The platform answers to buyers.
Preparing for banks and payment partners
Banks look hard at marketplaces because the money moves in three directions. Prepare a money-flow diagram that shows buyer, platform, seller and payment partner, with the point at which each party gets paid. Add seller terms, a prohibited-products policy, a returns process and a continuity plan that names the second fulfilment site. Show that the story is the same in the website, the contracts and the application. Consistency helps, though it guarantees nothing.
The choice between a mainland company and a free-zone company depends on where your buyers are and where your stock sits. A Dubai mainland company is licensed by the Department of Economy and Tourism (DET). A free-zone company does not by default sell directly to UAE customers: DMCC's guide names a local distributor, or a DET permit under Resolution No. 11 of 2025, as the routes. Settle the choice after the model above is fixed. Under how Velarozone works, the principal-or-intermediary decision is written down before any entity is compared.
In short
What to take from this
- Ozon, which Reuters describes as Russia's second-largest online retailer, evacuated more than 300 people and halted work at its Orenburg logistics centre on 23 August 2026.
- The seller named on the invoice, the party that sets the price and the party that controls the refund decide whether a platform is a principal or an intermediary. The label on the website does not decide it.
- If the platform will hold seller money, ask the CBUAE or the relevant financial-centre regulator before the model is fixed. Any held funds should sit in a segregated client money account with a licensed institution, apart from the platform's own funds.
- TDRA's e-activity NOC covers economic activity run through websites, apps or social media. It is free, listed at 2 working days, and a website must use a .ae domain.
- Two fulfilment partners, a written importer of record, matching delay clauses for buyers and sellers, and separate stock, transit and interruption cover each deal with a different part of a one-site failure.
- Was the Ozon incident a cyber attack?
- Reports in late August 2026 describe drone strikes on warehouses and logistics sites, not a cyber attack. Reuters reported the Samara region strike on 22 August and the Orenburg region incident on 23 August. Treat anything that calls it a cyber attack as unsupported.
- Do I need a licence just to run an online marketplace in the UAE?
- You need a trade licence for the entity, and online economic activity through a website, app or social media can need a TDRA NOC as well. TDRA lists that NOC as free of charge with an expected time of 2 working days, and a website must use a .ae domain. For restricted activities, NOCs from the competent authorities must be attached to the application. Whether additional approval applies depends on what the platform does with money, goods and data, and should be checked per activity.
- Can I run a marketplace without a UAE warehouse?
- Yes, in principle, if sellers ship from abroad or from partner sites. Then customs, importer of record and returns become the platform's problem to design, and delivery times will depend on carriers you do not control.
- Who is liable if a seller does not ship?
- That depends on the contracts and on how the platform presents the sale to buyers. A platform that takes the order, sets the terms and controls the refund will struggle to say it is only an intermediary. Get a lawyer to review the terms before launch.
Sources
Where this comes from
General information drawn from the CBUAE Rulebook, including the Retail Payment Services and Card Schemes Regulation (C 15/2021), and Cabinet Resolution No. (134) of 2025 as published, not legal or tax advice. Rules and guidance change, so confirm the current text and each institution's own requirements before you submit.
