Guide
How to Set Up a Corporate Finance or M&A Advisory Firm in the UAE
Published
The short answer
Who decides depends on what the firm actually does. A consultancy that advises business owners on selling an ordinary company is a commercial matter. A firm that advises on securities, arranges investments or raises capital from investors may sit inside a financial regulator's perimeter: the Dubai Financial Services Authority (DFSA) in the DIFC, the Financial Services Regulatory Authority (FSRA) in ADGM, or the Capital Market Authority (CMA) and the Central Bank of the UAE (CBUAE) onshore. The one thing that most often decides the route is the mandate: what the engagement letter says the firm will do, for whom, and how it is paid.
Where the regulatory perimeter sits
Four labels are used loosely in pitch decks: strategy consultancy, business brokerage, corporate finance advice and investment arranging. They are different in law. The test is activity, not title.
Advising a founder on valuing and selling a trading company, preparing a buyer shortlist and managing a data room is usually commercial work. Advising on how to structure a share offer, introducing investors to a fund or issuer, or negotiating on behalf of an investor starts to look like advising on, or arranging, investments. That is where a financial regulator, not the licensing department that issues commercial licences, decides.
The perimeter also follows geography. In the DIFC the DFSA authorises firms and individuals. In ADGM the FSRA does. Onshore, the Capital Market Authority (CMA) is the federal securities regulator and took over from the Securities and Commodities Authority (SCA) on 1 January 2026 under new federal decree-laws, with the CBUAE responsible for banking and its own rulebook. A firm that serves clients across these jurisdictions has to be classified in each, as with a fund management company or a registrar or paying agent.
What the regulators decide
In the DIFC, the DFSA's own page tells a firm to review GEN Rule 7.2 of the DFSA Rulebook, submit an authorisation enquiry and meet the DFSA to discuss the proposal. Categories and requirements change, so read each regulator's page when you apply.
- The DFSA decides whether a firm in the DIFC needs authorisation, for which activities, and which individuals must be approved.
- The FSRA makes the same decisions for ADGM.
- The CMA decides the position for securities-related activity onshore.
- The CBUAE publishes the Rulebook for the institutions it supervises, which is what a bank applies when it onboards the firm.
Before committing to an entity route, ask the regulator in writing how a specific mandate is classified. In the DIFC the DFSA process starts with an authorisation enquiry and a meeting to discuss the proposal, which is the place to put the mandate. An informal view from a formation agent is not that.
Mandates, fees and where firms drift
Most problems come from fees and from drift, not from the first mandate.
- Success fees on capital raising. A fee that depends on investors subscribing makes the firm a participant in the raise. Test it against the perimeter before it appears in a term sheet.
- Generic labels. Using "M&A advisory" as a catch-all consultancy description invites the wrong licence activity and a bank question the firm cannot answer.
- Promoting deals the team did not advise. Publishing a track record that includes transactions others worked on is a financial-promotion and credibility risk.
- Holding transaction money. Receiving client or deal funds, even briefly, changes the firm's risk and its banking profile. If money must be held, a licensed escrow institution is the usual answer, not the adviser's own account.
- Mandate drift. A business-sale adviser who starts introducing investors has changed the activity. Review the perimeter when the pipeline changes, not only at launch.
Ownership, people and substance
A regulated route puts the individuals under scrutiny as well as the company. The DFSA lists a board resolution, CVs of the Board, passport copies of the UBOs and source of wealth and funds documents among its application documents. A commercial route is lighter, but a bank will still ask who the beneficial owners are and where the money behind the firm came from.
Founders who hold the firm through a holding company, a trust or foundation, or with investors from several jurisdictions should map the ownership chain before applying anywhere. That is where regulated and complex ownership setup matters.
Substance has to match the story. A firm that says it advises on UAE transactions should show UAE-based decision makers, premises that fit the activity and a documented conflicts and client-acceptance process. Staff visas and premises follow the licence, so they are sequenced after the perimeter is settled, not before.
Banking, money flows and tax
Banks and institutional clients look at the same file as the regulator: client types, fee model, conflicts, data handling and the professional record of the principals. They compare it with the business plan and the engagement letters. A mismatch matters more than a polished deck.
Prepare short explanations for unusual client countries, deal sizes, funding sources and payment routes, and show how each follows from the model. Preparing for corporate bank account onboarding means building this pack early, and the business plans and documentation should match the engagement letters.
Whether the firm falls under the anti-money-laundering supervision the Ministry of Economy and Tourism publishes, or under a financial regulator's own AML rules, follows from the classification above and should be confirmed with the authority. Tax registration with the Federal Tax Authority (FTA) is a separate step once the entity exists.
Cost is built in layers, and the firm's fee is itemised in the engagement letter; how Velarozone works explains the approach. Where a regulator publishes a capital or personnel requirement, it governs, and it should be read from the regulator's own page at the time of application.
