Skip to content

Guide

Private Credit and SPV Structure UAE: Regulator by Function

The short answer

No single regulator authorises a private-credit or securitisation structure as one thing. The Capital Market Authority (CMA) onshore, the Dubai Financial Services Authority (DFSA) in the DIFC, or the Financial Services Regulatory Authority (FSRA) in ADGM licenses specific functions (originating loans, managing a pooled fund, dealing in or arranging securities), never a "private credit" or "securitisation" label. A special purpose vehicle used to isolate a loan or an asset is a company registration, not a financial-services permission, and setting one up settles nothing about who may lend, manage money or distribute an instrument. The fact that most often decides the route is whether the vehicle takes credit risk and discretion over client money, or only holds an asset on someone else's instruction.

The regulatory perimeter: what the SPV doesn't decide

An SPV ring-fences an asset or a financing; it does not authorise anyone to lend, manage money, issue securities or take deposits. Registering one in the DIFC or ADGM is a company-law step with the zone's registrar, separate from whether the manager, originator or dealer around it needs a permission from the DFSA, the FSRA or the CMA.

Authorisation attaches to function, not the vehicle's name. Test the structure against each of these first: loan origination; fund or portfolio management; issuance of securities; arranging, distribution and investor eligibility; and security, servicing or client money. A hit does not make authorisation automatic (a genuine own-account or single-family structure can sit outside the perimeter on the right facts), but it does mean the classification is fact-based. "Proprietary", "platform" and "warehouse" are descriptions; the CMA, the DFSA and the FSRA each read flows, not labels.

What the regulator actually requires before it grants a permission

Where a fund manager, dealer or lender needs authorisation, the DFSA and the FSRA each run their own written process: an application, a regulatory business plan, named individuals for the controlled functions, and capital that is funded and demonstrable before the permission is granted, not after. The CMA runs an equivalent process onshore. None publishes one number that fits every private-credit or securitisation structure, because the category, not a flat fee, sets the capital and staffing load.

A regulatory business plan that reconciles the originator, the SPV, the servicer and the investor base in one consistent account is what the regulator actually reviews; a plan that describes the structure one way and a cash-waterfall diagram that shows another is where review stalls.

How cash and security move through the structure

What separates a clean structure from a contested one is what happens to the asset and the cash, not what the deck calls it. Does the transfer into the SPV stand up as a true sale, or does the originator keep enough risk and control that a court would look through it? Is the vehicle bankruptcy remote in substance, or only on paper? Who holds the security over the underlying assets, services collections and enforcement, and replaces that servicer if it fails?

Investor cash and collections sit in a segregated client money account with a licensed institution, under regulator oversight, never mixed with the originator's or manager's own funds. A bank handling that account reads the cash-waterfall diagram before it reads the pitch, and corporate bank account readiness work tests whether the waterfall, the security package and the account tell the same story.

Ownership, substance and the roles a structure must fill

A regulated entity in this chain needs real substance: resident senior officers the regulator has approved individually, capital held at its category's level, and systems matched to what it does. Holding companies, carry vehicles and SPVs can sit around it legitimately (see holding company vs operating company for how that split is usually drawn), but each needs a genuine role tied to risk or investor protection, not a lower number on a formation invoice.

Where capital comes from more than one investor, or an overseas parent, the source of that capital is reviewed, not assumed. Source of wealth and source of funds evidence for originators, managers and controlling investors is typically expected before a bank or regulator engages seriously, and group structures spanning more than one shareholder class benefit from being tested against regulated and complex ownership setup before incorporation.

What commonly goes wrong in private credit and securitisation deals

  • Assuming the SPV itself is the exemption. A registered vehicle says nothing about whether the manager or originator behind it needs authorisation.
  • Calling a transfer a true sale without the legal analysis to back it. The label does not change what an insolvency practitioner sees in the documents.
  • Leaving default servicing undefined. No named replacement servicer, no triggers; discovered only when the first loan defaults.
  • Marketing notes or participations before the offering route is confirmed. Distribution to the wrong investor class is a breach on day one.
  • Stacking every function into one entity to save on formation cost. It compounds the prudential requirement instead of averaging it.

From structure to operating: what continues after the licence

Authorisation, where it applies, is the start of operating, not the end of it. A regulated manager or dealer carries ongoing obligations (supervisory reporting, external audit, renewal, resident officers who stay in post and stay approved) for as long as the structure runs. An SPV used purely to hold or ring-fence assets carries a lighter load, but its own renewal, accounting and registered-agent obligations still run on the zone's calendar regardless of what the regulated entity around it is doing.

Cost tracks the category, not a single setup fee: capital held, how many approved individuals are resident, and the audit and reporting cycle all vary by function and are not numbers a formation adviser can quote before the category is settled. The Velarozone fee for structuring and preparing the application sits in the engagement letter once the route is fixed. See how Velarozone works.

Office towers and the Gate building in Dubai International Financial Centre

General guidance here; the detail that matters depends on your activity and markets.

Questions

Frequently asked

Does registering an SPV in the DIFC or ADGM require DFSA or FSRA authorisation?
Not on its own. Registering the SPV is a company-law step with the zone's registrar; authorisation depends on whether a regulated function (fund management, dealing, arranging) is carried out by the SPV or by another entity. Many SPVs hold or ring-fence assets only and need no financial-services permission.
Can one SPV sit inside a wider fund structure, or does each warehouse need its own vehicle?
Either can work, and the choice turns on bankruptcy remoteness, not convenience. A single vehicle holding several warehouses can blur the ring-fence between them if one defaults; many structures use a separate SPV per pool or financing line to keep that ring-fence intact.
What happens if a loan transfer into the SPV isn't a genuine true sale?
The assets can be treated as still belonging to the originator on its insolvency, which defeats the point of the SPV and exposes investors to the originator's own creditors: a legal analysis done before the transfer documents are signed, not an assumption carried into the structure.
Does the business need authorisation if it only originates loans onto its own balance sheet?
Not necessarily. A genuine own-account lender that never manages third-party money, pools outside capital or distributes an instrument to investors can sit outside the regulatory perimeter on the right facts. The moment outside investors, pooled capital or distributed notes enter the picture, that classification is retested.

Get your UAE setup plan

Private credit and securitisation deals turn on the category, the cash-waterfall and the ring-fence before any jurisdiction is chosen. Velarozone maps the originator, SPV, servicer and investor chain, establishes which regulator the structure answers to, and prices the roles and obligations before anything is filed.

Apply this to your own situation

Guides describe the general position. Send us your facts and an adviser will tell you which parts actually apply to you.

Message us on WhatsApp

Free assessment: current figures are confirmed within your adviser-reviewed route comparison. Your details are not shared with third parties.

Start with a structure assessment

In an initial consultation you receive a plain-language decision summary, a document-preparation list, and the next actions for your situation. Current figures are confirmed within your adviser-reviewed route comparison.

This guide provides general information, not legal, regulatory, tax, investment or financial advice. It does not guarantee a licence, authorisation, visa, bank account, funding or tax outcome.

General information drawn from the CBUAE Rulebook, including the Retail Payment Services and Card Schemes Regulation (C 15/2021), and Cabinet Resolution No. (134) of 2025 as published, not legal or tax advice. Rules and guidance change, so confirm the current text and each institution's own requirements before you submit.