Guide
Setting Up a Trading Venue, MTF or Market Operator in the UAE
The short answer
The regulator depends on where the venue sits. Onshore, the Capital Market Authority (CMA), the renamed Securities and Commodities Authority (SCA) and its legal successor, decides. In DIFC it is the Dubai Financial Services Authority (DFSA). In ADGM it is the Financial Services Regulatory Authority (FSRA). A venue that brings several buyers and sellers together under system rules needs a financial-services authorisation, not a commercial licence. What most often decides the route is who controls execution: whether orders interact under rules the operator sets, or the operator only publishes interest and the parties deal bilaterally.
The perimeter: what makes a platform a venue
A page of listings is not a venue. A platform becomes one when it brings together multiple buying and selling interests under system rules. The label does not matter. MTF, alternative venue, marketplace and matching engine all describe the same test.
Four questions settle most of the analysis:
- Can multiple parties interact under platform rules?
- When and where is a trade legally executed?
- Who may become a member, and who decides?
- How are instruments admitted and monitored?
Regulators read flows, not descriptions. "Proprietary", "platform" and "advisory" are labels. If the operator's code or rulebook decides how orders meet, the operator is performing a venue function whatever the website says.
A bulletin board with bilateral execution off the platform sits closer to the edge. It is not automatically outside regulation. It depends on what the operator does with orders, prices and parties. Write the position down: functions performed, functions excluded, functions housed with licensed counterparties, and the changes that would reopen the question. Prime brokers, banks and auditors will ask for it.
A venue for virtual assets raises a further question of its own, covered under virtual asset setup. Founders coming from a proprietary crypto-trading company should note that trading for your own account and operating a venue are different activities.
Which authority, and what each one decides
Onshore, the Capital Market Authority (CMA) is the federal regulator for capital markets activity outside the financial free zones. It is the legal successor to the Securities and Commodities Authority (SCA), which it replaced on 1 January 2026 under Federal Decree-Laws No. 32 of 2025 and No. 33 of 2025. A venue operator onshore is licensed or approved by the CMA as a Market, one of the categories of Capital Market Institution, and the CMA decides whether the activity needs authorisation and on what terms.
DIFC and ADGM run their own regimes. In DIFC, the DFSA licenses a venue as an Authorised Market Institution (AMI), a category whose permitted functions under the DFSA rulebook include operating a multilateral trading facility. In ADGM, the FSRA licenses a venue as a Recognised Investment Exchange or a multilateral trading facility, and separately acts as the Listing Authority for admission to its Official List.
The choice of zone follows the category, not the reverse. Fix these variables first:
- Public, professional or institutional participation.
- Listed, private, digital or commodity instruments.
- Member model and market-maker obligations.
- Whether post-trade infrastructure is external or built into the venue.
Only then compare DIFC, ADGM and the onshore route.
What the regulator will read
Each regulator assesses a venue on the quality of its design, not the strength of its pitch. The file should contain, and be consistent about:
- The rulebook and market model.
- Matching and resilience architecture.
- Member and instrument admission standards.
- Market-abuse surveillance design.
- Clearing, settlement and default arrangements.
Settlement is where weak venue plans show. If the rulebook is silent on who clears, who settles and what happens after a member default, the problem has been passed to a third party without naming it. Regulators expect the market design to answer that before the matching engine is built.
The specific capital, officer and reporting requirements for a venue are set by the regulator that authorises it, and differ by licence category and location. Obtain them from the authority's current rulebook before any budget is fixed. The written business plan and documentation usually carries most of the weight in this category.
Money, banks and counterparties
A venue touches money in ways a bank will probe. Know the answer to each before an account application:
- Do member funds pass through the operator, or only through licensed custodians and settlement agents?
- Who holds client assets, and under whose authorisation?
- Where does revenue come from: membership fees, per-trade fees, data or listing fees?
- Who funds the operator's capital, and from what source?
Banks, prime brokers and fund administrators read the regulatory file first. They then compare it with the story told in the account application. Keep the account of strategy, flows, capital and control identical across every document. Consistency speeds onboarding. It does not guarantee an account, a relationship or an approval. Corporate bank account readiness covers this preparation, and source of wealth and funds matters when shareholders are funding regulatory capital.
Ownership, substance and people
The regulated entity must carry real substance: senior officers who are resident and can be interviewed, systems that match the category, and capital that is actually in place. Holding companies and technology companies can sit around it, but each needs a genuine role.
A common group is a venue entity, a separate technology company that builds the matching engine, and a holding company. The regulator will ask who controls the venue, who can change the rules, and who can override the technology. Where shareholders are corporate, trusts or layered, expect questions to go through to the individuals. Regulated and complex ownership is where that mapping is done.
What commonly goes wrong
- Calling automated matching a neutral marketplace.
- Leaving settlement outside the market design.
- Assuming private securities remove venue regulation. A private-market platform with controlled admissions is still a venue question if orders interact under its rules.
- Building technology before there is a credible member pipeline. A rulebook with no members is hard to defend, and a venue with no liquidity is hard to run.
- Describing the business one way to the regulator and another way to the bank.
The costliest error is finding late that the category was wrong. For a venue, a misread classification does not just delay launch. It can change who the members are, who holds client assets and which regulator, CMA, DFSA or FSRA, you answer to.
Cost and timeline
Cost is built in layers, and the firm's fee is itemised in the engagement letter. See how Velarozone works. In this category the cost driver is the authorisation category: capital held, officers hired, systems built and reporting carried. Incorporation fees are the wrong comparison. The timeline is regulator-led, with application, systems testing and operational readiness each gated. No one should present an incorporation date as a launch date.
