UAE Central Bank Payment Services and Stored-Value Licensing

by Barrister Tahmidur Rahman | Sep 28, 2026

Trade, Competition & RegulationUAE payments, Bangladesh corridor8 min read

UAE Central Bank Payment Services and Stored-Value Licensing

Legal advice for fintechs, wallet providers, remittance businesses, banks and investors with Bangladesh links on UAE Central Bank licensing for retail payment services, stored value facilities and payment tokens, together with the Bangladesh Bank rules that govern the remittance corridor and partner arrangements.

Overview

How UAE Central Bank payment services licensing works

The United Arab Emirates is one of the largest sources of remittances to Bangladesh, and the corridor between the two countries supports a growing number of wallets, payment apps, exchange houses and fintech partnerships. Any business that wants to offer payment services or hold customer balances in the UAE mainland must first consider licensing by the Central Bank of the UAE (CBUAE). We advise Bangladesh-linked founders, Bangladeshi banks and mobile financial service partners, and international investors on these questions as part of our regulatory practice in Bangladesh, working with UAE counsel where local filings or representation are needed.

The CBUAE framework includes the Retail Payment Services and Card Schemes Regulation, the Stored Value Facilities Regulation and the Payment Token Services Regulation, alongside its rules on anti-money laundering, consumer protection, outsourcing and technology risk. The retail payments regulation covers activities such as payment account issuance, merchant acquiring, payment initiation, account information and domestic and cross-border fund transfers, with licence categories reflecting scale and risk. Stored value facilities generally need a licence, subject to limited exceptions. Payment tokens used for payments in the mainland are subject to their own conditions, including restrictions on which tokens may be accepted.

In 2025 the UAE issued Federal Decree-Law No. 6 of 2025, a new law governing the Central Bank and the institutions it regulates. It widened the regulatory perimeter in several respects and gave existing firms until September 2026 to bring their activities into line. Businesses that offered payment services without a licence, relying on a partner bank or an informal view, should now review their position. The DIFC and ADGM have their own regimes, so the choice between the mainland and a free zone depends on where customers are and how funds move.

Bangladesh-facing payment services raise questions on the other side of the corridor too. Inward remittances to Bangladesh must flow through channels approved by Bangladesh Bank, typically banks and licensed mobile financial service providers working with foreign exchange houses or remittance companies under formal arrangements. Bangladesh Bank also regulates payment systems and digital financial services within Bangladesh, and outward payments are controlled. A UAE wallet that wants to send money to Bangladeshi recipients, or a Bangladeshi provider that wants a UAE presence, needs both sides of the structure reviewed. Our technology and fintech lawyers in Bangladesh handle the Bangladesh analysis.

Licensing is followed by ongoing obligations on capital, safeguarding of customer funds, governance, outsourcing, information security, consumer protection, reporting and anti-money laundering, and the CBUAE has shown that it will enforce these requirements. Barrister Tahmidur Rahman advises on transactions, finance and payment structures, Barrister Remura Meheruba Mahbub on banking, corporate and foreign investment matters, and Adv Syed Wahid on disputes. We work with counsel in the UAE, UK, US, India, China and Singapore. To discuss a UAE payment licence, a remittance partnership or a wallet launch, please contact our Dhaka office and we will arrange an initial discussion.

01 · What we handle

Core workstreams

  • Perimeter and licence mapping
  • Remittance corridor structuring
  • Application and governance documents
  • Partnership and processing agreements
02 · How it runs

Four clear stages

  1. 01Map the model
  2. 02Choose the structure
  3. 03Apply and contract
  4. 04Operate and review
03 · Start here

Talk to a partner

Consultations in Dhaka or by video. Scope, team and fees are agreed in writing first.

Book →
How we help

How we support payment businesses

Workstream 01Trade, Competition & Regulation

Perimeter and licence mapping

  • Map the model
  • Choose the structure
  • Apply and contract
  • Operate and review
Workstream 02Trade, Competition & Regulation

Remittance corridor structuring

  • Map the model
  • Choose the structure
  • Apply and contract
  • Operate and review
Workstream 03Trade, Competition & Regulation

Application and governance documents

  • Map the model
  • Choose the structure
  • Apply and contract
  • Operate and review
Workstream 04Trade, Competition & Regulation

Partnership and processing agreements

  • Map the model
  • Choose the structure
  • Apply and contract
  • Operate and review
Workstream 05Trade, Competition & Regulation

Investment and change of control

  • Map the model
  • Choose the structure
  • Apply and contract
  • Operate and review
Workstream 06Trade, Competition & Regulation

Compliance, enforcement and disputes

  • Map the model
  • Choose the structure
  • Apply and contract
  • Operate and review
01

Perimeter and licence mapping

We analyse the product, the flow of funds and the parties involved, and map them against CBUAE retail payment services, stored value and payment token rules, the 2025 Central Bank law, and free zone alternatives. We identify which licence category applies, whether any exemption is realistic, and whether a partnership with a licensed institution is a better first step for launching payment services in the UAE market, and how that choice affects later growth, fundraising and expansion into new corridors.

02

Remittance corridor structuring

We design structures for sending money from the UAE to Bangladesh, covering the UAE licensed entity, agreements with Bangladeshi banks or mobile financial service providers, settlement accounts, foreign exchange conversion and compliance responsibilities on each side. We review Bangladesh Bank requirements for inward remittance arrangements and help ensure that every party in the chain is properly authorised for the role it plays in the corridor, from collection in the UAE to final credit to the recipient's account or wallet.

03

Application and governance documents

Working with UAE counsel, we help prepare the business plan, financial projections, ownership and controller information, governance frameworks, safeguarding arrangements, outsourcing and technology risk policies, consumer terms and anti-money laundering manuals. We check the documents for consistency with each other and with the rules, and help prepare responses to CBUAE questions so that the application proceeds without avoidable delays. We also prepare founders and controllers for regulator interviews about the payment services model and its risks.

04

Partnership and processing agreements

We draft and negotiate agreements between payment services providers, banks, card schemes, processors, agents, exchange houses and Bangladeshi payout partners. We allocate responsibilities for customer due diligence, sanctions screening, settlement, fraud, chargebacks, data protection, complaints and liability, so that the contract reflects each party's licence and the regulators' expectations in the UAE and in Bangladesh. Clear termination, transition and data return provisions protect customers and partners if the relationship ends or one party loses its authorisation.

05

Investment and change of control

We advise investors and founders on equity investments, acquisitions and restructurings involving CBUAE-licensed firms, including change of control approvals, conditions precedent and protections for investors. Where investment comes from Bangladesh, we address Bangladesh Bank approval for outward investment and the documents banks require. Where Bangladeshi institutions invest abroad, we review their own licence conditions and home regulator expectations, and the reporting the group will owe Bangladesh Bank after the investment completes.

06

Compliance, enforcement and disputes

We support licensed firms with compliance reviews, regulatory change, incident reporting, safeguarding audits and responses to CBUAE inspections and enforcement. We also act in disputes with partners, merchants, customers and investors, including claims over settlement shortfalls, frozen funds and terminated agreements, and coordinate recovery or enforcement steps in Bangladesh where a counterparty or funds are located there. Our aim is to protect the licence and the business while recovering what is owed to the client.

RecognitionThe Legal 500Asia Pacific ranks Tahmidur Remura Wahid (TRW) Law Firm for dispute resolution in Bangladesh.
Cross-border reach6 jurisdictionsMatters coordinated with counsel in the UK, US, UAE, China, India and Singapore.
Bar and admissionsDhaka and LondonBarristers and advocates in Bangladesh, with a solicitor of England and Wales (non-practising).
HeadquartersDhakaHouse 410, Road 29, Mohakhali DOHS. Consultations in person or by video.
Who leads this work

Partner-led, on every matter.

Trade, Competition & Regulation matters at TRW are led by partners, supported by associates, with one responsible lawyer from first advice to final outcome.

Meet the firm →
01

Which payment services require a UAE Central Bank licence?

The Retail Payment Services and Card Schemes Regulation covers activities such as payment account issuance, payment instrument issuance, merchant acquiring, payment aggregation, domestic and cross-border fund transfers, payment initiation and payment account information services, together with card scheme operation. Issuing or operating a stored value facility is regulated separately, and payment token services have their own regulation. Whether a particular model is caught depends on how funds flow and who holds them. Some activities may be exempt or fall outside the perimeter, but that requires careful analysis against the current rules and the 2025 Central Bank law.

02

What is a stored value facility, and how does it differ from other payment services in the UAE?

A stored value facility is broadly a product or arrangement where a customer pays money that is stored as value, such as a wallet balance or prepaid card, which can then be used to pay for goods or services or transferred. Issuing or operating such a facility in the UAE mainland generally requires a CBUAE licence, subject to limited exceptions, for example certain single-purpose or closed-loop facilities. Licensees must safeguard customer funds and meet capital, governance and anti-money laundering requirements. Loyalty schemes and marketplace balances can sometimes amount to stored value, so we review each model against the definitions.

03

How did the 2025 Central Bank law affect payment services providers?

Federal Decree-Law No. 6 of 2025 replaced the earlier Central Bank law and updated the framework for licensed financial institutions and related activities. It broadened the scope of activities and persons that may require licensing and strengthened supervisory and enforcement powers, with a transition period for existing businesses that ended in September 2026. Firms that rely on informal assumptions about being outside the perimeter, or that provide technology closely linked to regulated payment services, should review their position now. We help clients assess exposure and plan licensing, restructuring or partnership arrangements in line with the current law.

04

How can a UAE wallet send money to recipients in Bangladesh?

Money sent to Bangladesh must arrive through channels that Bangladesh Bank permits, usually a Bangladeshi bank or a licensed mobile financial service provider that has a formal arrangement with a foreign exchange house or remittance company. A UAE wallet therefore needs its own UAE licence for cross-border transfers, or a partnership with a licensed UAE institution, and a lawful connection to a Bangladeshi payout partner. Settlement, foreign exchange conversion, compliance checks and reporting must work on both sides. We review the UAE structure and the Bangladesh arrangements together, so the corridor is lawful from end to end.

05

Can a Bangladeshi mobile financial service provider operate in the UAE?

A Bangladeshi provider can participate in the UAE market, but it would usually do so through partnership with a licensed UAE institution, through a UAE subsidiary that obtains its own licence, or through arrangements with exchange houses for inbound remittances. Its own licence in Bangladesh does not authorise payment services in the UAE. Investment abroad by a Bangladeshi company generally requires Bangladesh Bank approval, and the provider must consider its home licence conditions and group supervision. We advise on the options, the approvals required in both countries and the agreements that make the partnership work in practice.

06

How much capital do payment services providers need in the UAE?

Capital requirements depend on the licence category and the scale of the business, and the CBUAE may require additional amounts based on risk, volume or other factors. Stored value facility issuers and retail payment service providers face different requirements, and payment token services carry their own. Capital is separate from safeguarding: customer funds must be protected through segregated accounts or other approved methods and cannot be treated as the firm's working capital. Because the rules are updated, we check current requirements for the relevant category and help clients plan funding before they apply.

07

Can a UAE app offering payment services accept stablecoins?

The Payment Token Services Regulation sets conditions for payment tokens in the UAE mainland. In broad terms, only licensed dirham-backed payment tokens may be used for payments for goods and services in the mainland, with limited exceptions for some foreign payment tokens in particular circumstances such as virtual asset purchases. Algorithmic stablecoins and privacy tokens are prohibited. Firms that wish to issue, convert, custody or transfer payment tokens may need specific authorisation. For Bangladesh-linked flows, the restrictive Bangladesh position on virtual currencies must also be considered. We review the model against both sets of rules.

08

What anti-money laundering rules apply to payment services providers?

CBUAE-licensed firms must comply with UAE federal anti-money laundering and counter-terrorist financing law and CBUAE guidance, including enterprise-wide risk assessments, customer due diligence, sanctions screening, transaction monitoring, record keeping, staff training and suspicious transaction reporting to the UAE Financial Intelligence Unit. Cross-border transfers carry information requirements for originators and beneficiaries. Remittance corridors such as the UAE to Bangladesh route need controls that address structuring, use of informal channels and third-party funding. In Bangladesh, payout partners have their own reporting duties to the Bangladesh Financial Intelligence Unit. We help align controls on both sides.

How a matter runs

From first call to resolution.

  1. 01

    Map the model

    We trace the flow of funds, customers and partners, identify which UAE licences or exemptions apply, and set out the Bangladesh Bank requirements for any part of the payment services chain connected to Bangladesh, from collection to payout.

  2. 02

    Choose the structure

    We compare licensing directly, partnering with a licensed institution or using a free zone, and agree the corporate structure, capital plan and partner arrangements that fit the business, its investors and its target customers in both countries.

  3. 03

    Apply and contract

    With UAE counsel, we prepare the licence application and policies, respond to CBUAE questions, and negotiate partner, processing and payout agreements in the UAE and Bangladesh so that the launch of payment services can follow approval without further delay.

  4. 04

    Operate and review

    After launch, we support compliance reviews, safeguarding audits, regulatory change, investor transactions, incidents and disputes, keeping the UAE licence and the Bangladesh arrangements aligned as volumes, partners and products grow over time.

“Demonstrates an extraordinary command over both domestic litigation and international arbitration.”

The Legal 500 Asia Pacific, Bangladesh: Dispute resolution, client feedback

FAQ

Questions, answered.

Still unsure? Email info@trw.co with a short outline of the matter.

Is a partner bank arrangement enough to avoid licensing?
Not always. Many fintechs launch by partnering with a licensed bank or payment institution, which can be lawful where the partner provides the regulated service and the fintech acts within clearly defined limits, such as technology or marketing. However, if the fintech holds customer funds, controls payment flows or presents itself as the provider, it may need its own licence. The 2025 Central Bank law has increased scrutiny of these arrangements, so each party's role should be documented clearly and reviewed whenever the product changes.
Do free zone payment services need a CBUAE licence?
Financial free zones such as the DIFC and ADGM have their own regulators and regimes for payment and money services, and firms licensed there generally operate within those zones. Serving customers in the UAE mainland from a free zone can raise additional licensing questions. The choice of jurisdiction should be made after mapping where customers are, which currencies are used and which banks will hold safeguarded funds. Payment services aimed at the Bangladesh corridor often involve both mainland and free zone elements, so a combined analysis is usually needed.
What does safeguarding mean for a UAE payment firm?
Safeguarding is the requirement to protect customer funds so that they are available to customers if the firm fails. It usually involves holding funds in segregated accounts with approved banks, reconciling them regularly and keeping them separate from the firm's own money. Safeguarding arrangements are closely examined during licensing and supervision, and failures can lead to serious enforcement. Clear documentation and daily reconciliation are essential for any provider of payment services, and auditors will test them each year.
Are exchange houses regulated differently from payment firms?
Exchange houses in the UAE are licensed by the CBUAE under their own framework for money exchange and remittance, which differs from the retail payment services and stored value regulations. Many UAE to Bangladesh remittances flow through exchange houses with arrangements with Bangladeshi banks. A fintech may partner with an exchange house rather than seek its own licence. We review which framework applies to each part of the proposed model and whether the partnership allocates regulatory responsibility correctly.
Does Bangladesh Bank need to approve a UAE remittance partnership?
Bangladeshi banks and mobile financial service providers generally need to follow Bangladesh Bank rules for arrangements with foreign exchange houses and remittance companies, which can involve approval, reporting or specific conditions. The UAE partner should expect detailed due diligence from the Bangladeshi side. We advise both UAE firms and Bangladeshi institutions on the documents and approvals required, so that the corridor can launch without regulatory interruption and payment services to recipients in Bangladesh are not suspended after launch.
How is customer data protected in cross-border payment services?
Payment firms process sensitive personal and financial data and must comply with UAE data protection law, CBUAE consumer protection and technology risk requirements, and any free zone rules. On the Bangladesh side, the Personal Data Protection Act 2026 now applies to processing of personal data by Bangladeshi partners. Data sharing agreements should define each party's role, security standards, retention and breach notification duties, and should be consistent with the payment services agreements they support.
Can a licence be lost after approval?
Yes. The CBUAE can impose conditions, require remediation, levy fines, restrict activities or suspend or revoke a licence for serious breaches, such as safeguarding failures, weak anti-money laundering controls, unapproved changes of control or misleading information. Firms should maintain strong compliance monitoring and engage constructively with supervisors. If enforcement is threatened, legal advice should be taken early, before responses are submitted, because early admissions or inaccurate statements are difficult to correct and can affect other payment services licences held by the group.
How can TRW help with UAE payment services licensing?
We map the perimeter, design UAE to Bangladesh corridor structures, coordinate Bangladesh Bank and UAE requirements, support licence applications with UAE counsel, negotiate partner and payout agreements, and advise on investment, compliance and disputes. Our particular contribution is integrating the Bangladesh side of the corridor with the UAE licence, so that founders, partners and investors work from a single, consistent legal analysis of their payment services business.

Launch your UAE payment business on firm ground

Speak with the partners about payment services in Bangladesh or across borders.

Book a consultation →
payment services: TRW & Co, Dhaka
Message TRW on WhatsApp