DFSA

DFSA Regulatory Reporting and Returns: A Guide

2026-03-09 · 6 min read · By Aureus Worldwide

DFSA regulatory reporting is the structured set of returns, notifications and filings that every Authorised Firm must submit to the Dubai Financial Services Authority (DFSA) to demonstrate, on an ongoing basis, that it remains financially sound and compliant. Reporting is where the DFSA's continuous supervision actually happens: authorisation gets you the Licence, but disciplined DFSA regulatory reporting is what keeps it. This guide sets out the main returns, how they are filed, roughly when they fall due, and the notification duties that sit alongside them.

The reporting landscape: four workstreams

It helps to see DFSA regulatory reporting as four connected but distinct workstreams:

1. Prudential returns, periodic financial data on capital, and (for larger firms) liquidity and exposures.
2. Audited financial statements, the annual accounts and the auditor's regulatory reports.
3. AML reporting, the annual AML return and event-driven suspicious-activity reports.
4. Notifications, event-driven alerts about material changes, breaches and significant events.

Firms that treat these as one integrated calendar, owned by the Finance Officer and Compliance Officer together, stay comfortably ahead of the DFSA. Firms that treat each as a last-minute scramble accumulate exactly the kind of avoidable failings supervisors notice.

Prudential returns and EPRS

The core of financial reporting is the periodic prudential return, submitted through the DFSA's Electronic Prudential Reporting System (EPRS), the secure online portal for regulatory data. The return you complete depends on your prudential category: the forms capture your capital resources, your capital requirement and, for the higher categories, liquidity, large-exposure and risk information.

Frequency also follows your category. As a general guide:

• Most investment firms (Categories 3 and 4) file quarterly prudential returns, typically due about a month after each quarter-end.
• An annual return is filed alongside the audited financial statements, usually within four months of the financial year-end.
• Banks and other higher-category firms report more frequently and in greater depth, including detailed liquidity and risk data.

We deliberately describe these timings as typical rather than exact, because the DFSA sets the precise reporting periods and deadlines in its rules and in the conditions on your Licence, confirm your own dates in the Supervision (SUP) and PIB modules. The discipline that makes quarterly returns painless is a reliable month-end close: if your capital calculation is already produced every month, the quarterly return is a formatting exercise, not a reconstruction. The numbers themselves come straight from your capital requirement working.

Audited financial statements

Once a year, every Authorised Firm must file audited financial statements prepared under International Financial Reporting Standards (IFRS) and audited by a DFSA-registered auditor, together with the auditor's prescribed regulatory reports. Because this is a substantial obligation in its own right, with its own standards, timelines and auditor duties, we cover it in full in our guide to DFSA audit and financial reporting obligations. For reporting-calendar purposes, the key point is that the audited accounts and the annual prudential return are due together, so the year-end close, the audit and the annual return must be sequenced as one project.

The annual AML return and event-driven reports

AML reporting runs on its own track. Every Authorised Firm must submit an annual AML return to the DFSA, describing its anti-money-laundering and counter-terrorist-financing systems, the work of the Money Laundering Reporting Officer (MLRO), training, and the volume and handling of internal and external suspicious-activity reports. This sits on top of the event-driven duty to report suspicious activity to the UAE Financial Intelligence Unit through the federal goAML system.

The annual AML return is a supervisory priority, and a thin or box-ticking submission invites scrutiny. Our guide to DFSA AML/CTF obligations explains the underlying programme the return is meant to describe, and firms often strengthen it with specialist AML consulting support.

Notifications: the event-driven duty

Beyond scheduled returns, the DFSA expects firms to tell it promptly when something material happens. The notification regime is broad, and under-reporting is a frequent enforcement theme. A firm must generally notify the DFSA of:

• A breach of a rule, or a likely breach.
• A capital shortfall, or, under the early-warning thresholds, a position approaching a shortfall.
• Changes to Authorised Individuals, a departing Senior Executive Officer, Finance Officer, Compliance Officer or MLRO must be replaced, and the DFSA approves the successor.
• Changes to controllers and significant shareholders, a change in control usually needs prior notification and approval.
• Core-information changes, registered office, auditor, name, business model.
• Other significant events, litigation, fraud, a major system failure or adverse regulatory action elsewhere.

The governing idea is "no surprises": the DFSA would far rather hear about a problem early, with your remediation plan attached, than discover it later in a return or an inspection.

A worked reporting calendar

To make the moving parts concrete, here is an illustrative annual rhythm for a Category 3C asset manager with a December year-end. Confirm your own dates against your Licence and the SUP module.

The pattern shows why finance and compliance cannot work in silos: the same underlying ledger feeds the quarterly returns, the annual accounts and the capital notifications.

What happens if reporting slips

Regulatory reporting is not administrative housekeeping, it is a Licence condition. Late, incomplete or inaccurate returns can lead to supervisory questions, financial penalties and, in serious or repeated cases, public censure or action against the firm's Licence and its Authorised Individuals. Inaccurate reporting is treated especially seriously, because the DFSA relies on the data to supervise; a return that misstates capital or omits a breach undermines the whole system. The reputational cost of a public enforcement notice usually dwarfs the cost of the resource that would have prevented it.

Building a reporting function that runs itself

The firms that find DFSA regulatory reporting effortless share a few habits:

• A single compliance calendar listing every return and its owner, with reminders set well ahead of each deadline.
• A month-end close that already produces the capital calculation, so quarterly returns are quick.
• Clean, reconciled accounting records that tie directly to the audited accounts and the returns.
• Clear escalation so notifications are made at the first sign of a material event, not after the next return.
• A Finance Officer and Compliance Officer who plan the year-end and the annual return together.

How Aureus Worldwide can help

Aureus Worldwide is a Dubai-based accounting and CFO-outsourcing firm. We are not DFSA-authorised and we do not provide regulated financial services, submit returns in your name or act as your DFSA-registered auditor, but we build the financial engine that makes reporting reliable. We run a disciplined month-end close, keep audit-ready books that reconcile to your returns, prepare the underlying capital and financial figures behind your prudential submissions, and support your year-end so the audited accounts and annual return land on time, all coordinated with your appointed auditor, your compliance officers and your MLRO. To take the strain out of your reporting calendar, contact our team.

Talk to our chartered accountants →