DFSA

DFSA Prudential Categories 1–5 Explained

2026-02-10 · 6 min read · By Aureus Worldwide

DFSA prudential categories 1 to 5 determine how much capital an Authorised Firm must hold and how heavily it is supervised. The Dubai Financial Services Authority (DFSA) assigns each investment or banking firm a prudential category under its Prudential, Investment, Insurance Intermediation and Banking (PIB) module, based on the riskiest activity the firm is permitted to carry on. Understanding the DFSA prudential categories early is essential, because your category flows directly from your permitted activities and shapes your entire financial-resources obligation.

Why the category matters

Your prudential category is not a label the DFSA chooses at random. It is derived from the Financial Services on your Licence, and it sets three things in motion: your base capital requirement, the way your ongoing capital requirement is calculated, and the frequency and depth of your prudential reporting. Choose a business model that holds client money or deals as principal and you move up the categories; keep to pure advice and arranging and you stay near the bottom. Because the category is settled during DFSA authorisation, it should be modelled before you file, not discovered afterwards.

Insurers are handled separately under the PIN (Prudential, Insurance Business) module and are not part of the 1-to-5 scale, so the categories below apply to investment and banking firms.

The five categories at a glance

The table shows the typical activities in each category and an indicative base capital figure. Treat these as a guide to the structure of the regime rather than a current fee schedule, the DFSA updates its Rulebook, so confirm the applicable amount in the PIB module.

Categories 1 and 5, the highest tier

Category 1 covers deposit-taking banks and Category 5 covers Islamic firms managing an unrestricted profit-sharing investment account (PSIAu). Both carry the highest base capital because they take balance-sheet risk on behalf of depositors or investment-account holders. Firms in these categories face the most demanding regime: a full risk-based capital calculation, an Internal Capital Adequacy Assessment Process (ICAAP) and detailed disclosure.

Category 2, dealing as principal

Category 2 captures firms that deal in investments as principal (beyond matched principal) or provide credit, taking positions onto their own book. The elevated base capital reflects the market and credit risk this creates.

Category 3, the sub-categories

Category 3 is the most nuanced band and splits into sub-categories:

• 3A, dealing as matched principal or as agent, where the firm executes but does not take principal risk.
• 3B, providing custody for, or acting as trustee of, a fund, which attracts a higher base capital because the firm is responsible for fund assets.
• 3C, managing assets, managing a collective investment fund, other custody, trust services and money services. This is where most asset managers and fund managers sit.
• 3D, providing money services such as payments and stored value, added to accommodate payment and e-money businesses.

Category 4, advising and arranging only

Category 4 is the lowest-risk band: firms that only arrange deals or advise and never hold or control client money or assets. Corporate finance advisers, arrangers and many advisory boutiques sit here, with the smallest base capital requirement. If your model can avoid holding client assets, Category 4 dramatically reduces your capital burden, a key structuring decision covered in our regulated financial services activities guide.

How the capital requirement is actually calculated

Base capital is only the floor. A firm must hold the higher of several measures:

1. Base Capital Requirement, the fixed minimum for the category, from the table above.
2. Expenditure-Based Capital Minimum (EBCM), a set fraction of the firm's annual audited expenditure, so that a firm always holds enough to cover a number of weeks of operating costs while it winds down in an orderly way. Firms that hold client assets carry a larger fraction.
3. Risk Capital Requirement, for Categories 1, 2 and 5, an additional Basel-style calculation covering credit, market and operational risk.

For a young advisory firm the EBCM usually bites hardest, because its expenditure runs ahead of the modest base capital. For a bank, the risk-based calculation dominates. Modelling all three from the start avoids an unpleasant surprise at authorisation.

Prudential returns and continuous monitoring

Your category also dictates your prudential reporting. Authorised Firms file periodic prudential returns to the DFSA, higher categories report more often and in more detail, covering capital resources, the capital requirement and, for the higher tiers, liquidity and large-exposure information. Just as importantly, capital adequacy is a continuous obligation, not a quarter-end snapshot: a firm must monitor its position throughout the period and notify the DFSA promptly if its capital falls, or is likely to fall, below the requirement. A disciplined month-end close that measures capital resources against the requirement every period is the practical answer, and it is far cheaper than explaining a breach after the event. This is where reliable, audit-ready accounting stops being a back-office nicety and becomes a regulatory necessity.

Capital resources: the quality of your capital

The DFSA cares about the quality of capital, not just the amount. Capital resources are measured in tiers:

• Common Equity Tier 1 (CET1), the highest-quality capital: paid-up share capital and audited retained earnings.
• Additional Tier 1 (AT1), certain perpetual instruments.
• Tier 2, subordinated debt and other lower-quality items, subject to limits.

Deductions apply, and the firm must be able to demonstrate its capital position at any time. This is where disciplined, audit-ready accounting matters: your capital calculation is only as reliable as the ledger behind it.

Choosing and defending your category

Because the category follows the riskiest permitted activity, firms often reduce their capital burden simply by structuring the business to avoid a higher trigger, for example, arranging rather than dealing as principal, or using a third-party custodian instead of holding client assets themselves. These are legitimate design choices, but they must be genuine and reflected in your systems, client agreements and conduct-of-business arrangements. The DFSA will test whether your actual operations match the category you have applied for.

How Aureus Worldwide can help

Aureus Worldwide is a Dubai-based accounting and CFO-outsourcing firm. We are not DFSA-authorised and we do not provide regulated financial services or sign DFSA audit reports, but we support DIFC firms with the financial modelling and record-keeping behind the prudential regime. We build base-capital and expenditure-based capital models for your business plan, maintain audit-ready books so your capital calculation is defensible, and prepare the underlying numbers for your prudential returns through our accounting and outsourced CFO services, coordinated with your appointed auditor. For deeper regulatory structuring we work alongside your DIFC and ADGM advisers. To pressure-test your capital plan, contact our team.

Talk to our chartered accountants →