Table of Contents
The United Arab Emirates has rapidly established itself as a global financial hub, attracting professionals from across the world. However, its regulatory landscape is uniquely complex - with multiple overlapping authorities, frequent updates, and region-specific requirements that differ significantly from European or American frameworks.
Whether you are preparing for the CISI UAE Financial Rules and Regulations exam or simply need to understand the regulatory environment you work in, this guide provides a structured overview of what matters most in 2025.
The Three-Pillar Regulatory Structure
Unlike most countries with a single financial regulator, the UAE operates a three-pillar system:
- The SCA (Securities and Commodities Authority): Federal regulator covering the UAE mainland, including the Dubai Financial Market (DFM) and Abu Dhabi Securities Exchange (ADX).
- The DFSA (Dubai Financial Services Authority): Independent regulator for the Dubai International Financial Centre (DIFC) free zone.
- The FSRA (Financial Services Regulatory Authority): Regulator for the Abu Dhabi Global Market (ADGM) free zone.
Each authority has its own licensing requirements, rulebooks, and enforcement mechanisms. A firm operating in DIFC answers to the DFSA, not the SCA, even though both are physically in Dubai.
SCA: The Federal Backbone
The SCA is the most broadly relevant regulator for professionals taking the CISI UAE exam. Key areas include:
Licensing and Supervision
Under SCA Decision 13 of 2021, financial activities are categorized into five main groups. Any entity performing these activities on the UAE mainland must hold an SCA license and meet ongoing “Fit and Proper” requirements covering competence, integrity, and financial stability.
Corporate Governance
Public Joint Stock Companies (PJSCs) listed on the DFM or ADX must comply with the SCA’s Corporate Governance Code. This includes requirements for board independence, mandatory audit and nomination committees, related-party transaction disclosure (above the 5% threshold), and shareholder communication standards.
Investment Funds
The SCA regulates both local funds (public, private, and family) and foreign fund promotions under Resolution 01/2023. Key distinctions include Professional Investor thresholds (AED 1 million+), Real Estate Investment Fund (REIF) structures, and NAV reporting requirements.
Anti-Money Laundering: A Critical Priority
The UAE has significantly strengthened its AML framework following FATF evaluations. Federal Law 20 of 2018, combined with subsequent amendments, creates a comprehensive anti-money laundering regime:
- Customer Due Diligence (CDD): Required at onboarding and throughout the relationship. Includes identifying the beneficial owner (25%+ threshold) and understanding the purpose of the business relationship.
- Enhanced Due Diligence (EDD): Mandatory for Politically Exposed Persons (PEPs), correspondent banking relationships, and transactions involving high-risk jurisdictions.
- Suspicious Transaction Reporting: All licensed entities must file STRs through the goAML portal operated by the UAE Financial Intelligence Unit (FIU).
- Record Keeping: Transaction records and CDD documentation must be maintained for a minimum of 5 years from the date of the transaction or end of the business relationship.
Market Conduct and Integrity
The SCA enforces strict rules against market abuse, which is a heavily examined topic:
- Insider Trading: Dealing based on inside information carries severe penalties. Companies must maintain Insider Lists and observe blackout periods (15 days before financial results).
- Market Manipulation: Practices like wash trading, spoofing, and layering are prohibited and actively monitored.
- Disclosure Requirements: Material events must be disclosed to the exchange immediately, with specific timelines for different types of announcements.
DFM and ADX: Exchange-Level Rules
Beyond SCA regulations, each exchange has its own operational rules:
- Trading Priority: Both exchanges use Price/Time (PT) priority for matching orders.
- Settlement: The standard settlement cycle is T+2, using Delivery vs Payment (DVP) mechanisms.
- Short Selling: Permitted under specific conditions with securities lending requirements.
- Shariah-Compliant Products: The DFM offers Shariah-compliant securities and maintains a dedicated Shariah Supervisory Board.
Conduct of Business Standards
Firms must adhere to professional conduct rules that emphasize:
- Client Categorization: Distinguishing between retail and professional clients, with different levels of protection for each.
- Suitability and Appropriateness: Ensuring recommendations match the client’s risk appetite, financial situation, and investment objectives.
- Best Execution: Firms must take all reasonable steps to obtain the best possible result for clients when executing orders.
- Complaints Handling: Written acknowledgment within 5 business days and resolution within defined timeframes.
Staying Current
The UAE regulatory landscape evolves rapidly. Professionals should regularly review SCA circulars, attend industry briefings, and ensure their qualifications remain current. The CISI UAE Financial Rules and Regulations exam is regularly updated to reflect the latest regulatory developments, making it essential to study from current materials rather than outdated workbooks.
Frequently Asked Questions
1 What is the SCA and what does it regulate?
The Securities and Commodities Authority (SCA) is the primary federal regulator of the UAE's capital markets. It regulates securities exchanges (DFM and ADX), licensed financial activities, investment funds, corporate governance for public companies, market conduct, and anti-money laundering compliance across the UAE mainland.
2 Do I need a CISI qualification to work in UAE finance?
While not universally mandatory, the SCA requires professionals performing certain regulated activities - such as advising, dealing, or managing investments - to hold relevant qualifications. The CISI UAE Financial Rules and Regulations certification is one of the most widely recognized qualifications for meeting this requirement.
3 What are the main AML requirements in the UAE?
UAE AML requirements under Federal Law 20 of 2018 include conducting Customer Due Diligence (CDD), filing Suspicious Transaction Reports (STRs) through the goAML portal, maintaining records for at least 5 years, implementing a Risk-Based Approach, and appointing a designated MLRO. Enhanced Due Diligence is required for PEPs and high-risk jurisdictions.
4 What is the difference between DFSA and ADGM regulation?
The DFSA (Dubai Financial Services Authority) regulates the DIFC free zone in Dubai, while the FSRA (Financial Services Regulatory Authority) regulates the ADGM free zone in Abu Dhabi. Both are independent regulators with their own legal frameworks based on common law, separate from the SCA's jurisdiction over the UAE mainland.
5 How often do UAE financial regulations change?
UAE financial regulations are updated frequently as the country continues to mature its financial infrastructure. The SCA issues new decisions and circulars regularly, with major updates to AML laws, corporate governance codes, and fund regulations occurring annually. Professionals should monitor SCA announcements and update their knowledge continuously.
Ready to Ace Your CISI Exam?
Join thousands of finance professionals who passed their exams on the first attempt with our AI-powered study platform.
Explore Our CISI Trainers