Guide
How to Establish a Trade-Finance or Supply-Chain Finance Platform in the UAE
Published
The short answer
The Central Bank of the UAE (CBUAE) decides whether a trade-finance platform operating onshore needs a banking or finance-company licence; the Dubai Financial Services Authority (DFSA) and the Financial Services Regulatory Authority (FSRA) decide the same question for a platform in the DIFC or ADGM. The fact that moves a business between these outcomes is whether it takes credit risk on the trade, is paid to arrange someone else's credit, or only supplies software. A company buying receivables with its own balance sheet is financing; one introducing deals to a bank for a fee is arranging; one that only verifies documents is usually neither, and often needs no credit licence at all.
Who decides, and where the perimeter sits
Three authorities can be the decision-maker, depending on where the platform is incorporated, not what it calls itself. The CBUAE licenses banks and finance companies that extend or take on credit risk onshore; the DFSA does the same for a firm in the DIFC, and the FSRA for a firm in ADGM. Each authority's reach stops at its own territory: a DIFC authorisation does not let a platform fund trade from mainland Dubai, nor does a mainland licence cover a credit book run from ADGM.
The perimeter test is built from verbs, not labels: "trade finance platform" describes a sector, not a licence. What matters is whether the company funds a transaction, is paid to arrange someone else's funding, verifies documents without taking a position, or only licenses software to banks that lend themselves. Fintech setup work still has to answer this before the entity is chosen, the way a mortgage broker or loan-intermediation business separates introducing a loan from arranging one. A platform starting as a marketplace and adding balance-sheet funding later should treat that as a staged capability, the way an equipment-leasing or asset-finance business stages the move from arranging finance to carrying it.
What the regulators actually require
None of the three authorities grants a credit-related authorisation to a shell. Each expects the applicant to operate from a physical base in its own jurisdiction, to name someone personally responsible for the credit or arranging activity, and to show it can meet its obligations to counterparties before taking them on. The CBUAE's rulebook and the DFSA's and FSRA's own authorisation pages set out the application route itself, not a fixed fee or capital figure for this activity; expect a case-by-case assessment of the funding source, the credit-risk appetite and the people running it.
That is also why a business plan built for the application has to show the transaction mechanics, not a market story: the regulator reads it to decide who carries the loss if a debtor defaults.
How money moves, and what a bank looks for
A trade-finance platform rarely banks itself; it depends on a correspondent bank, a funder or an insurer accepting the risk model before a single transaction settles. That counterparty reviews where the platform's own funding originates, which is why evidence of the source of funds has to be ready before term sheets are signed. It also wants a named answer to who bears the loss if the buyer does not pay: the platform, a credit insurer, or the financier the deal was introduced to.
The bank account itself still has to survive onboarding, separately from credit risk. Account-opening readiness means producing, for any transaction, the invoice, the shipping document and the counterparty's verification, not a general description of the model.
Ownership, substance and the roles that must be filled
A credit-related authorisation attaches to people as much as to the entity. The regulator wants to know who controls the company, who is personally accountable for the credit function day to day, and whether that person is actually based where the licence says the business operates. A nominee director or a structure that cannot show who really decides credit exposure is a common reason an application stalls, which is why ownership that mixes several shareholders, investors or jurisdictions needs its chain mapped before filing.
Substance questions do not end at licensing. A platform claiming to operate from the DIFC or ADGM while taking credit decisions elsewhere misrepresents where the activity happens, and that gap is usually what a later audit or bank review finds first.
What commonly goes wrong in this sector
The recurring failure is financing a transaction that looks real on paper but has no matching movement of goods: a duplicated invoice, a shipment that never left the warehouse, or a receivable pledged to two financiers at once. No platform can verify this from a document alone; it needs an independent check against a bill of lading, a warehouse receipt or a logistics provider's record, and a policy for refusing a transaction when that check cannot be done.
The second is calling lending "arranging" to avoid the licensing question. A fee structure or a marketplace label does not change what the company does: setting credit terms, taking the position or collecting on default is extending credit. Advertising funding capacity not yet built repeats the mistake a consumer-finance or lending company makes when its marketing describes a product its licence does not yet cover.
The third is opening a trade corridor before the bank or funder carrying the risk has agreed to it. A platform that signs customers first usually cannot settle the first transaction, which damages its standing with banks more than a delayed launch would.
From licence to operating: tax, premises and renewals
A credit-related authorisation is the start of a reporting relationship, not the end of one. CBUAE, DFSA and FSRA each expect ongoing filings tied to the credit book, not only annual accounts, and a licence lapsed through a missed renewal interrupts live transactions, not just future ones. The UAE's corporate tax regime applies regardless of where the entity is licensed, and Federal Tax Authority registration sits alongside the financial services authorisation rather than replacing it.
Premises matter more here than in most sectors. A DIFC or ADGM authorisation is tied to a physical office in that centre, not a virtual address, because the regulator expects to find the people who take credit decisions where the licence says they are.

