Financial Services Regulatory Authority
ADGM's FSRA runs one of the region's most respected regimes — an English common-law jurisdiction with its own courts and a virtual-asset framework that predates almost every other. We map your business to the right prudential category and carry the Financial Services Permission through, from perimeter analysis to the licence and the compliance that follows.
Confidential & non-binding · Same-day response in UAE hours
ACTIVITIES
The FSRA is the independent regulator of financial services within ADGM — an English common-law jurisdiction on Al Maryah Island with its own courts that apply English law directly.
It doesn't licence by label; the activities you carry out determine which of five prudential categories you fall into, and the heavier the activity, the heavier the capital and scrutiny. Picking the right category, then evidencing the controls behind it, is where most applications succeed or fail.
Deposit-taking and dealing as principal — the full banking permission.
Dealing in investments as principal, including matched-principal dealing, market-making and underwriting.
Executing and arranging trades on behalf of clients, including execution and arranging deals.
Providing custody for, or acting as trustee of, a fund.
Managing assets, collective investment funds, custody (non-fund) and PSIAs.
Payment services and stored value — capital scales with transaction volume, no client money held.
Advising on investments, arranging deals and marketing funds — no client money held.
An institution running its entire business under Sharia — with Sharia governance layered on top of the underlying category.
Exchanges (MTF), custody, and dealing and broking in Accepted Virtual Assets — layered on the underlying prudential category.
MARKET
ADGM is Abu Dhabi's international financial centre on Al Maryah Island, expanding across Al Reem Island — a fast-growing hub for asset managers, funds, family offices, VC and one of the deepest concentrations of licensed virtual-asset firms in the region. An FSRA licence puts you inside an English common-law jurisdiction whose courts apply English law directly, backed by a virtual-asset framework the rest of the world has spent years catching up to.
WHY ADGM
The UAE offers more than one regulator, and the right choice depends on who you serve. VARA suits crypto-native operators onshore in Dubai; the DFSA mirrors ADGM in the DIFC. But if you want an English common-law regime with courts that apply English law directly and a virtual-asset framework built years ahead of the field, the FSRA carries exceptional weight. Here's how it sits against the alternatives.
CAPITAL
The FSRA sets capital as the highest of your category's base capital, a risk-based capital requirement, and an Expenditure-Based Capital Minimum (roughly a quarter of annual expenditure). Firms that don't hold client assets hold liquid resources against their base capital. It's a runway question, not just a filing one. Select a category to see the layers.
*Base capital figures reflect ADGM FSRA's published Prudential Rules and should be reconfirmed against the current Rulebook for your exact category.
PROCESS
FSRA authorisation runs in two stages: you earn an In-Principle Approval before you build and deposit capital, then satisfy the conditions to receive your Financial Services Permission — so problems surface early, not after you've committed.
We confirm your activities fall within the FSRA's remit and map them to the correct prudential category before a dirham is spent.
Submit the Regulatory Business Plan, financial projections, AML/CFT and risk frameworks, and personal questionnaires for Controllers.
The FSRA reviews the file, holds meetings, and issues an IPA setting the conditions you must satisfy. No financial services yet.
Incorporate in ADGM, secure a physical office, put systems and controls in place, make key hires and deposit the required paid-up capital.
The FSRA confirms your Approved Persons, controls and capital are genuinely in place and every IPA condition has been met.
Your Financial Services Permission is issued for your category and permitted activities — and your live supervisory obligations begin.
You're authorised to operate — live supervisory obligations begin from day one.
The four things the FSRA pushes back on most — and the four we harden before you file.
Boards and Approved Persons without genuine financial-services track record.
Evidence that doesn't cleanly meet base capital, the risk-based figure and liquidity together.
Off-the-shelf policies not tailored to your specific category and risk profile.
Infrastructure and controls below the FSRA's technology and resilience expectations.
REQUIREMENTS
The category sets your capital. But authorisation turns on a wider set of requirements — the ones applicants most often underestimate. Here's the full checklist, in the FSRA's own terms.
A company incorporated in ADGM on Al Maryah or Al Reem Island. Financial services must be carried on in or from ADGM — virtual-asset activity in particular requires ADGM incorporation.
The base capital for your category, and capital equal to the higher of base, risk-based and an Expenditure-Based Capital Minimum. Firms not holding client assets hold liquid assets equal to their base capital.
Approved role holders — a Senior Executive Officer resident in the UAE plus Finance Officer, Compliance Officer and MLRO. Given the FSRA's technology focus, a CISO is expected for tech-intensive firms.
Genuine local substance is expected: a real ADGM office, secured as part of satisfying your In-Principle Approval conditions — not a flexi-desk afterthought.
Controllers, directors and Approved Persons must pass the FSRA's fit-and-proper assessment — competence, experience, financial soundness and integrity. The FSRA screens the people, not just the paperwork.
An adequate governance framework, clear division of responsibility, conflicts-of-interest management and internal controls proportionate to your scale and complexity — evidenced, not asserted.
Compliance with the FSRA's AML Rules and Conduct of Business rules: AML/CFT procedures, sanctions screening, client-money and client-asset protection, and — for virtual assets — documented suitability assessments.
The FSRA expects technology risk, resilience and cyber controls proportionate to your business — penetration testing, business continuity and incident-response — with professional indemnity and other insurance on top.
DIFFERENCE
Getting the licence is one thing. Staying licensed — with compliance that holds up to supervision and security that holds up to attack — is another. We're the only Abu Dhabi advisor that carries all three in-house, so nothing gets handed off and dropped.
We don't coach from the sidelines. We run the whole file — perimeter analysis, entity, capital structuring, the full Regulatory Business Plan and every round of FSRA questions — through to authorisation.
AML/KYT screening, transaction monitoring and regulatory reporting on our own platform — so the controls you're approved on are the controls you actually run, not a slide deck.
The FSRA holds technology and cyber resilience to a high bar. Our sister firm ITSEC delivers the penetration testing, cyber controls and audit evidence in-house — a capability no other licensing advisor has.
Three disciplines competitors outsource to three vendors. With KOLL Group it's one engagement, one accountable team — advisory, RegTech and cybersecurity under one roof.
HOW WE HELP
We map your activities to the correct FSRA category and confirm what is — and isn't — in scope before you commit capital or time.
We prepare the Regulatory Business Plan, AML/CFT policy pack and Approved Persons documentation, defend it through review — then keep you compliant after authorisation: AML, KYC, governance, reporting and audit.
The FSRA expects technology risk and cyber resilience proportionate to your business. As part of ITSEC, we bring penetration testing, CISO and incident-response into the application from day one — where others outsource it later.
LIGHTER PATH
The FSRA runs alternative routes alongside the five prudential categories — and choosing the right entry point can save months and capital. Two sit next to full authorisation, and mistaking one for the other is a common, costly error.
ADGM's RegLab lets FinTech and digital-asset firms test innovative products live, within a restricted scope and tailored conditions, before committing to a full licence — a genuine on-ramp for new models.
Watch the exit: RegLab is time-limited and scope-restricted. Scaling beyond the test parameters means migrating to a full FSRA category licence — which we plan for from the start.
A holding company, consultancy or tech developer may only need an ADGM non-financial licence — not FSRA authorisation. A foreign firm marketing its group's services can instead take an ADGM Representative Office licence.
Watch the perimeter: a Representative Office may only market and refer — it cannot conclude deals or hold client money. Cross that line and a full category licence is triggered.
OBLIGATION
The FSRA supervises actively and enforces its rules. Its toolkit escalates with the breach, and includes:
Contested decisions are referred to ADGM's own independent courts — a full common-law appeal path, applying English law directly. Staying ahead of obligations is cheaper than answering for them.
Where KOLL takes it from here
Authorisation is one part of the engagement. We also handle regulatory and compliance advisory across the submission, RegTech implementation for KYC, transaction monitoring and reporting, cybersecurity assurance for licensed firms, and ongoing compliance after your licence.
FAQ
It depends on the activities you carry out — the FSRA licenses by activity, not by label. The five categories run from Category 1 (accepting deposits) down to Category 5 (advising and arranging), with sub-types for principal dealing, agency dealing, fund custody, asset management and money services, plus a separate track for Islamic financial institutions. We confirm the right category in a perimeter analysis before anything is filed.
ADGM has one of the region's most developed virtual-asset frameworks. We advise whether it or VARA fits your model best.
Authorised firms need an ADGM presence and adequate substance. We advise on premises and the controlled-function roles required.
Prudential, conduct and reporting obligations begin. We stay on as your compliance partner so they are met without disruption.
Capital is the highest of three figures: your category's base capital, a risk-based requirement, and an Expenditure-Based Capital Minimum. Firms not holding client assets instead hold liquid assets equal to their base capital. Category 1 (accepting deposits) starts at USD 10,000,000; Category 5 (advising and arranging) is USD 10,000.
RegLab is ADGM's regulatory sandbox, letting FinTech and digital-asset firms test innovative products live within a restricted scope before committing to a full category licence. It's time-limited and scope-restricted — scaling beyond the test parameters means migrating to a full FSRA licence.
Typically 6–12 months end-to-end for well-prepared applicants — around 2–4 months to In-Principle Approval, then a further period for build-out, capital deposit and final review before Authorisation is granted.
Building trust in Abu Dhabi
Tell us your goals. In one confidential call we'll confirm the permissions you need, the right structure, a realistic timeline and the exact next steps.
