Guide
Setting Up a Mortgage Broker or Loan-Intermediation Business in the UAE
Published
The short answer
Whether a mortgage or loan-intermediation business needs financial authorisation is a perimeter question, and the regulator answers it, not the authority that issues the trade licence. For a mainland or onshore company that regulator is the Central Bank of the UAE (CBUAE); inside the DIFC it is the Dubai Financial Services Authority (DFSA), and inside ADGM it is the Financial Services Regulatory Authority (FSRA). The point that most often decides the route is whether the company only introduces a lead to a lender, or goes further and advises on, recommends or arranges a specific facility.
Where the regulatory perimeter sits
Introducing a borrower to a bank, comparing products, giving a recommendation and submitting an application on a client's behalf can look like one business from the outside, but a regulator may treat them differently. The label on the commercial licence does not settle that question.
Onshore, the CBUAE licenses and supervises banks and finance companies, including mortgage lenders, through its Rulebook; its law also reaches anyone who carries on, offers or facilitates a licensed financial activity, and it is this broader test, not a separately named mortgage-broker licence category, that decides whether a given broking or introducing model sits inside the CBUAE's perimeter. Inside the DIFC the DFSA runs authorisation for financial services firms, and inside ADGM the FSRA does. A company that incorporates in one of those two centres answers to that centre's regulator, not the CBUAE's onshore rules, so choosing the centre also chooses the regulator.
No licence category, capital figure or activity code is stated here. Those are set by whichever regulator has the perimeter and should be read from its own current text, then confirmed in writing before the structure is fixed.
The decision that sets the route: introducer or arranger
Four models are common in this sector, and each puts a different weight of regulation on the company.
- A lead-generation business that passes an enquiry to a bank and does nothing more.
- A comparison platform that shows indicative rates without recommending a specific product.
- An intermediary that collects documents and submits a completed application on the client's behalf.
- A broker that advises on which facility suits the client and negotiates terms with the lender.
The first model carries the lightest regulation. The fourth sits squarely inside the perimeter that the CBUAE, the DFSA or the FSRA will ask about. Most businesses land between the second and the fourth, and that is where the boundary needs testing. Write the workflow as a transaction: who speaks to the client, who makes the recommendation, who is paid by whom, and who the lender holds responsible if the application turns out wrong.
A related question sits one step earlier in the funnel: a consumer finance or lending company that lends its own balance sheet is a different regulatory animal from a broker that never funds anything.
How money moves and what a bank looks at
A mortgage or loan broker typically earns a commission from the lender once a facility completes, sometimes alongside a disclosed client fee. The broker does not hold the mortgage proceeds; those move from the bank to the seller, the developer or the lender being refinanced, never through the broker's own account.
A bank assessing the broker's own account will ask about:
- the source of commission income and which lenders pay it;
- whether any client money, deposit or document ever passes through the company's account;
- how a referral panel is structured and whether exclusivity or a volume target affects the recommendation;
- how the company proves it told the client which lenders it does and does not represent.
A broker that cannot show commission income cleanly separated from any client fee invites more questions, not fewer. Corporate bank account readiness settles that before the first banking meeting, and a documented business plan and operating narrative sets out the panel, the fee model and the customer journey in one place.
Ownership, substance and the roles the model needs
Credit intermediation runs on access to sensitive customer data: income documents, bank statements, identity records and, where a credit report is pulled, data held by a credit bureau. Whichever regulator holds the perimeter looks at who is accountable for consent, storage and disclosure of that data, and whether the people running the business can explain the products they recommend.
A company that only introduces leads needs far fewer of those controls than one that advises and arranges. Where ownership includes a fund, a holding company or several layers of shareholders, that chain is part of what the regulator and the bank both review; the regulated and complex ownership setup route is built for that case. A digital comparison platform raises its own questions about where client data sits, which fintech setup works through before the entity is formed.
What commonly goes wrong
- Calling an advice-and-arranging service an "introduction" to avoid the heavier perimeter test.
- Quoting an indicative rate or implying approval before the lender has made a decision.
- Collecting income documents, bank statements or a credit report before consent is recorded.
- Running an undisclosed or exclusive lender panel while telling the client the comparison is independent.
- Letting a client's deposit, fee or document touch the broker's own bank account.
- Comparing incorporation quotes before the introducer-versus-arranger question is settled in writing.
Most of these failures come from one mistake: treating the trade licence as the answer to the regulatory question. A trade licence confirms the company may trade. It does not confirm the company may advise on or arrange credit.
