DFSA

DFSA Regulated Financial Services Activities

2026-02-26 · 6 min read · By Aureus Worldwide

DFSA regulated financial services activities are the specific business activities that require authorisation before a firm can carry them on in or from the Dubai International Financial Centre (DIFC). The Dubai Financial Services Authority (DFSA) defines each of these Financial Services in its General (GEN) module, and any firm performing one of them by way of business must hold a Licence. This guide sets out what the regulated activities are, the tests that bring an activity into scope, and the exclusions and endorsements that shape a firm's permission.

What is a "Financial Service"?

The DFSA regulates conduct rather than firms in the abstract: it prohibits carrying on a Financial Service in or from the DIFC unless you are an Authorised Firm (or otherwise exempt). The GEN module contains an exhaustive list of Financial Services, and if your activity is on that list and no exclusion applies, you need authorisation. If it is not on the list, it is not a regulated Financial Service, although it may still be a business that must register with the Registrar of Companies.

Getting this classification right is the single most important step before you invest in a DFSA authorisation application, because it determines whether you need a Licence at all, and if so, which prudential category you fall into.

The main regulated activities

While the precise wording lives in the Rulebook, the Financial Services the DFSA regulates broadly cover:

• Accepting Deposits, core banking.
• Providing Credit, lending and credit facilities.
• Dealing in Investments as Principal, trading on the firm's own account.
• Dealing in Investments as Agent, executing on behalf of clients.
• Arranging Deals in Investments, bringing parties together without dealing.
• Managing Assets, discretionary portfolio management.
• Advising on Financial Products, personal recommendations on investments.
• Managing a Collective Investment Fund, acting as fund manager.
• Providing Custody and Arranging Custody, safeguarding or arranging safekeeping of client assets.
• Providing Trust Services and acting as trustee of a fund.
• Providing Fund Administration.
• Insurance activities, effecting and carrying out contracts of insurance, insurance intermediation and insurance management.
• Providing Money Services, payments, money transmission and stored value.
• Operating a Crowdfunding Platform, loan-based or investment-based.
• Operating an exchange, clearing house or trading facility, market infrastructure.
• Operating a Credit Rating Agency.
• Operating a Representative Office, a limited, marketing-only presence.

Each of these carries its own conduct and prudential consequences, and a single firm often holds several in combination.

The "by way of business" test

An activity is only regulated if it is carried on by way of business. This filters out isolated, one-off or purely internal acts that lack commercial regularity. A holding company that arranges a single financing for itself, or a group treasury function acting only for its own affiliates, may sit outside the regime, but the test is fact-specific and easy to misjudge. Regularity, holding yourself out to clients, and earning fees all point towards being "in business". Where there is doubt, firms should take advice rather than assume they are exempt, because carrying on a Financial Service without authorisation is a serious contravention.

Exclusions and boundaries

The GEN module contains exclusions that carve certain conduct out of the regulated activities, for example, dealings that are genuinely incidental to another business, certain intra-group arrangements, or activities carried on with or through Authorised Firms. Exclusions are narrow and precise; they are not a general escape hatch. The safest approach is to map every intended activity against the list, identify which Financial Service it engages, and then check whether a specific exclusion genuinely applies to your facts.

It also helps to remember what is not regulated by the DFSA at all:

• Ordinary trading, holding and services companies register only with the DIFC Registrar of Companies.
• Legal, audit, accounting, insolvency and company-services firms register as Ancillary Service Providers (ASPs) under a lighter regime.
• Data-protection obligations apply across the board through the Commissioner of Data Protection, regardless of authorisation.

Endorsements: permissions on top of permissions

Holding a Financial Service is not the end of the story. A Licence can carry endorsements that unlock, and obligate, additional activity:

Endorsements materially change a firm's obligations. Choosing to hold client money, for instance, raises your prudential category and imposes detailed segregation duties; choosing to serve Retail Clients adds a layer of conduct-of-business protection. Many DIFC firms deliberately restrict themselves to Professional Clients and avoid holding client assets precisely to keep their obligations proportionate.

Representative offices and fund managers

Two common entry points deserve a mention. A Representative Office is a limited category for firms that only want to market the financial products and services of their overseas head office in the DIFC, it cannot conduct the underlying business. A fund manager carries on Managing a Collective Investment Fund, which sits in the prudential regime and connects to the DIFC's collective-investment rules. Both illustrate the same principle: identify the exact Financial Service you are performing, then build the authorisation around it.

Combining activities and the regulatory perimeter

Most firms hold several Financial Services at once, an asset manager may also arrange deals and advise, and a broker may deal as agent and provide custody. The combination matters for two reasons. First, your prudential category is set by the riskiest activity you are permitted to carry on, so adding a single higher-risk service can lift your capital requirement and reporting burden across the whole firm. Second, activity tends to expand over time, and firms can drift across the regulatory perimeter without realising it, beginning to hold client money, deal as principal, or serve Retail Clients in substance while their Licence still reflects a narrower model.

That kind of drift is a breach even when it is unintentional, and "we did not apply for that" is no defence to carrying it on. The disciplined approach is to review your actual activities against your permitted activities at least annually, and to apply to vary your Licence before the business changes rather than after. Mapping every product and client relationship back to a specific Financial Service keeps the perimeter under control.

Matching activities to your application

Because your permitted activities drive your category, your capital, your mandatory functions and your reporting, the list of Financial Services you apply for should be deliberate, broad enough to run the business you actually intend, but no broader, since every added activity brings added obligation. This mapping is the foundation of a clean financial services permission application.

How Aureus Worldwide can help

Aureus Worldwide is a Dubai-based accounting, tax and CFO-outsourcing firm. We are not DFSA-authorised and we do not provide regulated financial services or legal advice, determining whether your activity is a regulated Financial Service, and which exclusions apply, is a matter for your DFSA regulatory and legal advisers. What we do is support the financial and operational side of firms operating in the DIFC: audit-ready accounting, outsourced CFO support, and coordination with your appointed auditor and DIFC and ADGM advisers. If you are scoping a DIFC financial services business and want the numbers behind it built properly, contact our team.

Talk to our chartered accountants →