TRW & Co · Banking and finance
FSRA Authorisation: Getting Licensed in ADGM
FSRA authorisation ADGM firms need is a Financial Services Permission from the Financial Services Regulatory Authority. This guide explains what falls inside the ADGM perimeter, how the staged process from first meeting to in-principle approval works, what the regulator tests, and the mistakes that most often delay a licence.
Key pointIn-principle approval is not a licence: no regulated business may begin until the IPA conditions, including the Registration Authority licence, premises, bank accounts and capital, are met and the Financial Services Permission is granted.
At a glance
Who grants it
The Financial Services Regulatory Authority, ADGM's independent regulator, grants a Financial Services Permission covering specified Regulated Activities carried on in or from ADGM.
Core legislation
The Financial Services and Markets Regulations 2015, broadly modelled on the UK FSMA 2000, plus the FSRA rulebook modules such as GEN, COBS, PRU and AML.
Staged process
Initial contact, enquiry meeting, draft business plan, formal submission, review and interviews, in-principle approval, meeting conditions, then grant of the permission.
Two licences needed
Alongside the FSRA permission, the entity needs a commercial licence from the ADGM Registration Authority, which is typically a pre-condition of the final grant.
2025 prudential changes
In August 2025 the FSRA revised rules for lower-risk Categories 3B, 3C and 4, with new minimum professional indemnity standards applying from 1 January 2026.
Swipe or scroll →
The short answer: what FSRA authorisation in ADGM involves
FSRA authorisation ADGM firms need is a Financial Services Permission (FSP) granted by the Financial Services Regulatory Authority, the independent regulator of Abu Dhabi Global Market. Without it, a business cannot carry on a Regulated Activity in or from ADGM. With it, the firm becomes an Authorised Person, supervised against a defined scope of activities and a detailed rulebook.
Getting there is a staged process rather than a form-filling exercise. The FSRA expects an early conversation, a draft regulatory business plan, a full application with supporting documents and a fee, a review that may include interviews of key individuals, an in-principle approval with conditions, and finally the permission itself. The applicant also needs a separate commercial licence from the ADGM Registration Authority.
The practical point most applicants miss is that the business plan, not the form, drives everything. Scope, prudential category, capital, staffing and timeline all follow from how the plan describes what the firm will actually do, for whom and from where.
The legal framework and the ADGM perimeter
ADGM was established under Abu Dhabi Law No. 4 of 2013, which sets up its governance, legislative and regulatory framework and its three independent authorities: the Registration Authority, the FSRA and the ADGM Courts. Since 2023 its jurisdiction has extended beyond Al Maryah Island to Al Reem Island, which brought a large number of existing businesses inside the ADGM perimeter.
The core statute for financial services is the Financial Services and Markets Regulations 2015 (FSMR), which the FSRA describes as broadly modelled on the UK Financial Services and Markets Act 2000. The FSMR contains a general prohibition: no person may carry on a Regulated Activity in or from ADGM unless authorised or exempt. Regulated Activities are those specified in Schedule 1 to the FSMR, read with the definitions of Specified Investments.
Detailed obligations sit in the FSRA rulebook, available through the ADGM rulebook portal and the ADGM rules and regulations page. The modules most applicants work with are General (GEN), Conduct of Business (COBS), Prudential (PRU, or the relevant sector modules for banks and insurers) and Anti-Money Laundering and Sanctions (AML).
What sits inside the perimeter
Broadly, the Regulated Activities cover dealing in investments as principal or agent, arranging deals, advising, managing assets, managing or operating collective investment funds, providing custody, accepting deposits, providing credit, insurance business and intermediation, money services, operating trading venues and activities in relation to virtual assets. Each has its own definitions and exclusions, so the label you use commercially is less important than the activity you will actually perform.
Two separate tests matter. The first is whether the activity is a Regulated Activity at all. The second is whether it is carried on in or from ADGM. A firm that only markets into ADGM from abroad, or a group entity that provides services only to affiliates, may fall within an exclusion or an exemption. Getting this analysis right early avoids applying for the wrong permission or, worse, operating without one. Our overview of ADGM financial regulation sets out the wider framework.
How the FSRA fits with other UAE regulators
The FSRA's remit stops at the ADGM boundary. Financial activity onshore in Abu Dhabi or elsewhere in the UAE falls to the Central Bank of the UAE and the federal capital markets regulator, while the DIFC has its own regulator, the DFSA, and Dubai's virtual asset regime sits with VARA. An ADGM permission does not by itself authorise dealing with onshore clients. Our guide to choosing between VARA, the CMA (formerly SCA), the CBUAE, the DFSA and the FSRA compares the options.
Is ADGM the right home? Options compared
Before committing to FSRA authorisation ADGM applicants should test the alternatives. The choice usually turns on the target client base, the activity, the regulatory culture the group is used to, and where senior staff will live and work.
| Route | Regulator | Legal system | Typical fit | Key consideration |
|---|---|---|---|---|
| ADGM | FSRA | English common law applied directly | Asset managers, funds, advisers, custodians, virtual asset firms, banks | Abu Dhabi base; FSMR closely tracks UK concepts |
| DIFC | DFSA | Codified DIFC common-law statutes | Asset managers, advisers, banks, insurers, wealth firms | Dubai base; different rulebook and terminology |
| Onshore UAE | CBUAE or the federal capital markets regulator | UAE civil law | Banks, finance companies, payment firms and brokers serving onshore clients | Direct access to onshore retail and corporate market |
| Dubai virtual assets | VARA (outside DIFC) | UAE civil law with Dubai regime | Virtual asset service providers serving Dubai | Separate activity-based VA licensing |
Many groups end up with more than one licence, for example an ADGM fund manager with an onshore distribution arrangement. If you are weighing the DIFC, our article on DFSA authorisation in the DIFC runs through the equivalent process, and our guide to setting up an investment fund in the DIFC or ADGM covers fund vehicles specifically.
The FSRA authorisation ADGM process, step by step
The FSRA general application process is published as a sequence of stages. In our experience each stage is a genuine gate: the FSRA will not move on until it is satisfied with the previous one.
- Initial contact. The applicant approaches the FSRA Authorisation team to arrange a meeting. Come with a short, clear description of the business model, the target clients, the proposed activities and the ownership structure.
- Enquiry meeting. The FSRA assesses the model, explains which Regulated Activities appear relevant and outlines the process. If the proposal proceeds, you are invited to submit a draft regulatory business plan.
- Draft business plan review. The FSRA reviews the draft and indicates whether an application would be accepted, with feedback to address in the final submission. Expect questions on governance, substance in ADGM, outsourcing and financial crime risk.
- Formal submission. The application is accepted once the completed application forms, supporting documents and application fee are submitted. Incomplete packs slow the process more than anything else.
- Review and interviews. The FSRA works through the file, raises follow-up questions and may interview individuals proposed as Approved Persons, such as the Senior Executive Officer, Compliance Officer and Money Laundering Reporting Officer.
- In-principle approval. A successful applicant receives in-principle approval (IPA) with pre-conditions. The IPA is not a licence; no regulated business may start yet.
- Meeting IPA conditions. Typical conditions include obtaining a commercial licence from the ADGM Registration Authority, securing premises in ADGM, opening bank accounts and injecting regulatory capital.
- Grant of the FSP. Once all conditions are met, the FSRA grants the Financial Services Permission to commence Regulated Activities, and ongoing supervision begins.
The FSRA does not publish a fixed end-to-end timetable, and timing depends heavily on the complexity of the model and the quality of the submission. A focused advisory firm with experienced staff and a clean ownership structure is a very different file from a multi-activity platform with virtual assets and outsourced technology.
What the FSRA looks for in an application
Every FSRA authorisation ADGM file is assessed against the same broad themes: a coherent business model, fit and proper people, adequate financial resources and effective controls. The sections below explain what that means in practice.
The regulatory business plan
The plan should explain the business in operational terms: products and services, client types (retail, professional or market counterparty), distribution channels, revenue model, booking model, staffing, outsourcing and three-year financial projections. It must match the Regulated Activities applied for. Inconsistency between the plan, the forms and the policies is the most common cause of extended review.
People: Approved Persons and governance
Individuals performing key functions must be approved by the FSRA as Approved Persons. Expect the regulator to probe competence, experience relevant to the specific activities, time commitment and integrity. Board composition, independence, committees and the allocation of senior management responsibility are reviewed alongside individual approvals.
In a typical FSRA authorisation ADGM review, the individuals matter as much as the documents. Many start-ups underestimate the importance of the Senior Executive Officer and the compliance team. A strong technical founder is rarely enough; the FSRA wants to see people who have run a regulated business before.
Capital, insurance and financial resources
The prudential category is driven by the activities. Capital requirements depend on the category and may include base capital, expenditure-based and risk-based components. In August 2025 the FSRA finalised amendments to its prudential framework for lower-risk firms in Categories 3B, 3C and 4, revising Category 4 capital requirements, changing reporting for 3B and 3C, and introducing minimum professional indemnity insurance standards that apply from 1 January 2026. Check the current PRU rules before you build your financial model.
Financial crime controls
Every Authorised Person must have an AML and sanctions framework proportionate to its risks: a business-wide risk assessment, customer due diligence procedures, screening, transaction monitoring and suspicious activity reporting through the UAE's goAML system. Our AML compliance page explains the federal overlay that applies alongside the FSRA AML module.
Illustrative scenario: an asset manager moving to ADGM
Illustrative only. A boutique manager advising high-net-worth clients from London and Singapore wants a Gulf hub. It plans to manage segregated mandates for professional clients and to launch a fund for qualified investors.
At the enquiry stage the FSRA is likely to focus on three questions. First, which entity will actually take investment decisions, and from where? If portfolio managers remain abroad, the ADGM entity may look like a booking shell, which raises substance concerns. Second, will the firm hold client money or assets, or use a third-party custodian? That affects scope and prudential category. Third, how will clients be classified, and is any onshore UAE marketing intended?
A credible plan would place a resident Senior Executive Officer and at least part of the investment team in ADGM, appoint an independent custodian, restrict marketing to professional clients and map any onshore distribution against federal rules. The fund itself is a separate workstream, with its own constitutional documents and notification or registration requirements. Built this way, the FSRA authorisation ADGM process becomes a review of a coherent business rather than a negotiation over gaps.
Risks and common mistakes
Starting regulated activity before the FSP is granted
In-principle approval is not a licence. Pitching, onboarding clients or executing transactions before the Financial Services Permission is granted risks breaching the general prohibition. Plan launch communications around the actual grant date, and make sure the group's website, pitch decks and email signatures do not hold out the ADGM entity as authorised before it is. If group entities will continue servicing clients during the transition, document the legal basis on which they do so.
Applying for the wrong scope
Applicants often describe the business in commercial language and pick activities that sound right. The FSRA maps activities to defined terms, and a mismatch means either a permission that does not cover the real business or one that attracts unnecessary capital and conduct obligations. Analyse each revenue line against Schedule 1 and the relevant exclusions before the enquiry meeting, and revisit the analysis if the model changes during the review.
Weak substance in ADGM
A permission comes with an expectation that the firm is managed and controlled in ADGM. Heavy reliance on group staff abroad, outsourced compliance with no local oversight, or a part-time Senior Executive Officer will draw questions. Outsourcing is permitted, but the Authorised Person remains responsible, so the plan should explain oversight, service levels and exit arrangements for every material outsourced function.
Underestimating timelines and costs
The FSRA's review is iterative. Each round of questions adds time, and IPA conditions such as office fit-out, bank accounts and capital injection can take longer than the regulatory review itself. Budget for application and annual fees, professional indemnity cover, audit, compliance resourcing and technology. Investors should see a realistic runway that does not assume revenue from day one.
Ignoring the onshore UAE boundary
An ADGM permission does not authorise unsolicited marketing or services to onshore UAE clients. Firms that plan to serve clients outside ADGM need a distribution strategy that respects federal licensing and promotion rules, which may involve onshore partners, reverse solicitation analysis or a separate licence.
None of these problems is fatal, but each one adds rounds of questions. The fastest FSRA authorisation ADGM files are those where the applicant has already asked itself the questions the regulator will ask.
Treat the draft regulatory business plan as the master document. Write it first, test every policy, form and financial projection against it, and update it whenever the model changes. Consistency is what moves an application from review to in-principle approval.
Cross-border angle: groups from the UK, Singapore and South Asia
International groups approach FSRA authorisation ADGM applications with different starting points. Because the FSMR draws heavily on UK concepts, firms authorised by the UK FCA often find the structure familiar, but should not assume identical outcomes: definitions, client classification and prudential rules differ in detail. Singapore-licensed managers will recognise the emphasis on governance and substance, but need to adapt to ADGM terminology and reporting.
Groups headquartered in Bangladesh, India or elsewhere in South Asia should plan for home-regulator approvals or notifications for an overseas regulated subsidiary, outbound investment rules, and the flow of capital into the ADGM entity. Intra-group service agreements, transfer pricing and data transfers between the ADGM entity and its parent all need to be documented. Where a fintech model is involved, compare the FSRA's innovation routes with the options in our guide to fintech licensing and regulatory sandboxes in the UAE.
An in-principle approval is a promise conditional on what you do next; the permission is what lets you trade.
What to do next: an FSRA authorisation checklist
- Map every proposed service to a Regulated Activity and confirm it is carried on in or from ADGM.
- Decide client classification and whether any retail business is intended.
- Draft the regulatory business plan, including three-year projections and an outsourcing map.
- Identify candidates for each Approved Person role and check their experience against the activities.
- Confirm the prudential category and model capital and insurance needs against current PRU rules.
- Build the AML and sanctions framework, including the business-wide risk assessment.
- Plan IPA conditions early: premises, bank accounts, Registration Authority licence and capital.
- Map any onshore UAE or cross-border distribution and the licences it requires.
TRW & Co advises on scoping, business plans, policies, regulator engagement and group structuring for FSRA authorisation ADGM applications, working alongside licensed practitioners where representation is required. To discuss your plans, contact our Dubai team at info@trw.co or +971 58 942 1012.
Frequently asked questions
01How long does FSRA authorisation take in ADGM?
The FSRA does not publish a fixed timetable. Duration depends on the complexity of the business, the completeness of the application and how quickly the applicant answers follow-up questions. Simple advisory or arranging models with experienced staff tend to move faster than multi-activity platforms, banks or virtual asset businesses. Remember that meeting in-principle approval conditions, such as securing premises, opening bank accounts and injecting capital, takes its own time after the regulatory review, so plan both phases in your launch timeline.
02What is the difference between in-principle approval and a Financial Services Permission?
In-principle approval (IPA) confirms that the FSRA is minded to grant permission once specified conditions are met. It does not allow the firm to conduct Regulated Activities. The Financial Services Permission is the actual authorisation, granted after the applicant satisfies the IPA conditions, typically including a commercial licence from the Registration Authority, ADGM premises, bank accounts and regulatory capital. Only after the permission is granted may the firm begin regulated business.
03Do I need to be physically present in ADGM?
Yes, in practice. One standard IPA condition is securing premises in ADGM, and the FSRA expects the firm to be managed and controlled from there, with key individuals such as the Senior Executive Officer and compliance staff available locally. Outsourcing to group entities is possible, but the Authorised Person remains responsible for outsourced functions and must demonstrate effective oversight. A plan that places all real decision-making abroad will attract questions about substance.
04Can an ADGM-licensed firm serve clients elsewhere in the UAE?
Not automatically. The FSRA permission covers Regulated Activities in or from ADGM. Marketing to or servicing clients onshore in the UAE engages federal rules administered by the Central Bank or the federal capital markets regulator, depending on the activity. Some firms use onshore partners, others seek separate onshore licences, and some rely on narrow reverse-solicitation arguments. The right approach depends on the product and client type, so map onshore distribution before launch.
05Does ADGM regulate crypto and virtual asset businesses?
Yes. The FSRA regulates activities in relation to virtual assets carried on in or from ADGM under its own framework, separate from VARA, which regulates virtual asset activity in Dubai outside the DIFC. Virtual asset applicants face additional scrutiny on technology governance, custody, market integrity and financial crime controls. Choosing between ADGM, the DIFC and VARA depends on the activity, target clients and where the team will be based.
06What documents are needed for an FSRA application?
The core documents are the completed application forms, a regulatory business plan, financial projections, and the policies and procedures that support the proposed activities, including compliance, risk management and AML and sanctions frameworks. The FSRA also needs information on controllers and proposed Approved Persons. Exact requirements vary by activity, so the enquiry meeting and the feedback on the draft business plan are the best guide to what the FSRA will expect in your case.
Sources and official materials
- Financial Services Regulatory Authority (ADGM) — FSRA role, FSMR framework and regulatory approach
- FSRA general application process — Eight-stage authorisation process from contact to permission
- FSRA finalises amendments to its prudential framework for lower-risk firms — August 2025 changes for Categories 3B, 3C and 4 and PII standards
- ADGM rules and regulations — Index of ADGM legislation and FSRA rules
- ADGM legal framework — ADGM founding law and legislative framework
- ADGM rulebook (Thomson Reuters) — Consolidated FSMR and FSRA rulebook modules
General information only, current as at 27 October 2026. It is not legal advice and does not create a lawyer–client relationship. UAE law differs between the onshore jurisdiction, the DIFC, ADGM and the free zones, and changes frequently; check current official sources and take advice on the facts of your matter.
