The three licensing perimeters, and why the distinction is not academic
Three separate financial-services regimes operate in the UAE, in the same city, sometimes in the same tower.
Onshore, the Central Bank of the UAE licenses and supervises banks, finance companies, exchange houses and payment providers under the federal regime governing the Central Bank and financial institutions. It sets prudential requirements, large-exposure and connected-lending limits, consumer-protection standards and the AML framework applied by the licensed sector. Disputes go to the onshore courts, in Arabic.
In the DIFC, the Dubai Financial Services Authority authorises firms under its own rulebook, applying DIFC law, with the DIFC Courts as the forum. In ADGM, the Financial Services Regulatory Authority does the same under a separate rulebook, in a jurisdiction applying English common law directly, with ADGM Courts.
Three consequences follow that credit and treasury teams should treat as structural.
First, authorisation is perimeter-specific. A DIFC-authorised entity is not licensed onshore, and a CBUAE-licensed bank does not thereby hold DFSA or FSRA permissions. Groups hold licences in more than one perimeter for exactly this reason.
Second, the free-zone regulators restrict retail activity. Both the DFSA and the FSRA distinguish professional or market-counterparty business from retail business, and most firms are authorised on a professional-client basis only. Lending to individuals out of a free-zone entity is a permission question, not a documentation one, and is answered before the term sheet.
Third, the perimeter chooses the insolvency law. A borrower incorporated in the DIFC or ADGM is subject to that jurisdiction's insolvency regime, not the federal one. Lenders assuming a single UAE waterfall applies to a group spanning all three are mispricing the downside.
| Perimeter | Regulator | Governing law and courts | Client scope | What it does not cover |
|---|---|---|---|---|
| Onshore UAE | Central Bank of the UAE | UAE federal law; onshore courts, Arabic | Full retail and wholesale banking, finance companies, exchange houses, payment providers | No authority to carry on regulated activity inside the DIFC or ADGM perimeters |
| DIFC | Dubai Financial Services Authority | DIFC law; DIFC Courts, English | Predominantly professional and market-counterparty business; retail permissions are separately and narrowly granted | Confers no CBUAE licence and no FSRA permission; DIFC insolvency law applies, not the federal regime |
| ADGM | Financial Services Regulatory Authority | ADGM law applying English common law; ADGM Courts | Wholesale banking, funds, asset management and specialist activity on a professional-client basis | Confers no CBUAE licence and no DFSA permission; ADGM insolvency law applies, not the federal regime |
Bilateral, syndicated and cross-border lending into the UAE
Documentation in this market is largely settled. Syndicated facilities follow LMA or APLMA architecture, usually on English law, and the negotiation is about calibration rather than form. What is not settled, and what generates most of the real risk, is the interaction between that documentation and the UAE-specific layer beneath it.
Cross-border lending. Booking a facility offshore, marketing it into the UAE, and taking security over UAE assets are three different questions with three different answers, and the marketing limb is the one most often overlooked. Where a lender has no UAE presence, the practical route is an offshore facility with UAE-law security documents and a UAE-resident security agent able to appear before the registries and, later, the execution court.
Governing law and forum. An English-law facility agreement with an offshore forum works for the debt claim. It does not work for the collateral. Security over UAE-situated assets must be created and perfected under the law of the place of the asset, and enforced through the court supervising that register. The common failure is a coherent offshore package never tested against the question of which UAE judge will be asked to sell the asset.
What is actually negotiated. Margin ratchets and market-disruption language matter less than the UAE-specific provisions: perfection long-stops with real remedies attached, permitted-encumbrance baskets drafted against registers rather than concepts, mandatory prepayment on change of control in licensed or restricted-ownership sectors, sanctions and beneficial-ownership representations, and — where any tranche is Islamic — the intercreditor mechanics that let conventional and Sharia-compliant participants enforce together.
Security packages and what actually perfects
The single most important discipline in UAE secured lending is separating documentation from perfection. Signing creates obligations between the parties. Perfection is what makes the security good against a liquidator, a competing creditor and a purchaser — and every UAE security class has a perfection step that happens after execution.
- Mortgages over land. Real-estate security onshore is created by registration against the title with the relevant land authority — the Dubai Land Department in Dubai, the equivalent authority in each other emirate. The mortgagee must be an entity the registry will accept, in practice a UAE-licensed bank or finance company. This is why offshore lenders use a local security agent. An unregistered mortgage over onshore land is not a mortgage.
- Pledges over shares. Security over shares in an onshore limited liability company is typically created by a notarised pledge and recorded against the company's position with the licensing authority. Shares in DIFC and ADGM companies fall under those jurisdictions' own security laws and registers. The routes are not interchangeable, and a holding structure spanning both needs two separate packages.
- Assignments of receivables and account security. Security over receivables, contract proceeds and bank accounts is registered on the federal movable-assets security register — the Emirates Movable Collateral Registry. Registration governs priority. Notice to the account bank or contract counterparty remains commercially important, but the register decides who ranks first.
- Other movables. Plant, equipment and inventory sit in the same regime. Vessels, aircraft and intellectual property have their own specialist registers.
Two points follow. Sequence matters: registrations that must precede others, approvals that must precede notarisation, and consents from landlords, regulators or existing secured creditors that precede everything. Language matters: an onshore registry or court works in Arabic, and a translation prepared under time pressure by someone who has not read the credit is a defect waiting to be argued.
A closing checklist that ends at signature is not a closing checklist. Ours ends at receipt of the stamped registry evidence.
Guarantees, and the reasons they fail
Guarantees are the most heavily relied upon and least carefully drafted instrument in this market. Three distinctions decide whether one is worth its face value.
Guarantee versus independent undertaking. A guarantee proper is secondary: it depends on the underlying obligation, and defences available to the principal debtor are in principle available to the guarantor. A demand guarantee or standby letter of credit is autonomous: the issuer pays against a conforming demand and litigates afterwards. Lenders who want certainty of payment should take the latter and say so in the instrument. Those who take a secondary guarantee and behave as though it were autonomous discover the difference at the worst moment.
Authority. Corporate guarantees fail on authority more often than on substance. The signatory must hold power to bind in a form the court will accept, and the guarantee must be authorised by the constitutional documents and by shareholders where required. Guarantees for the debts of an affiliate deserve particular attention to corporate benefit and to the approvals actually obtained.
Personal guarantees. These remain standard in UAE lending and are genuinely useful — but principally because they create direct exposure for a named individual whose position in the country depends on the credit performing. Their realisable value turns on that individual's reachable assets, not on the number in the instrument. Consumer-protection expectations in the onshore licensed sector have also tightened around disclosure to individual guarantors. A personal guarantee taken without an asset picture is a negotiating instrument, and should be priced as one.
Enforcement against security, and the timeline that is actually true
Enforcement in the UAE is not slow because the law is hostile to secured creditors. It is slow because it is procedural, and because most delay is caused by defects introduced years earlier at documentation stage.
Onshore. Realising registered security runs through the courts: a claim or a direct application to the execution judge depending on the instrument, then an execution file, then valuation and sale under court supervision. Registered mortgages over land follow a defined judicial process ending in auction. The judge's first question is whether the security is properly registered and whether the documents support the sum claimed. Files where registration is clean and the Arabic is coherent move; files where it is not generate expert referrals, and each referral is months.
DIFC and ADGM. Enforcement over assets inside those jurisdictions runs through their own courts, in English, with the remedies a common-law lawyer expects. Their judgments reach onshore assets through established referral mechanisms rather than direct action — a further step, and one to plan for rather than discover.
What actually determines duration. Whether security is perfected. Whether the security agent has standing before the register and the court. Whether the debt is documented in a form the execution judge can act on directly. Whether protective measures — attachment over accounts and assets, travel restrictions where available — were obtained early enough to preserve the asset and create settlement pressure. Whether the borrower has a genuine defence or is simply running procedure. That last point is worth naming plainly: much UAE enforcement delay is deliberate, and the counter to it is speed at the front end, not vigour at the back end.
Where security sits when the borrower fails
The federal bankruptcy framework has been reformed materially, including the establishment of a specialised court for bankruptcy and restructuring matters. It provides for restructuring and liquidation, with court supervision, stays on creditor action and mechanisms to set aside transactions entered into before formal proceedings. The DIFC and ADGM each operate separate, self-contained insolvency regimes with their own administration, receivership and liquidation tools.
For a secured lender, three points govern the analysis.
Perfection determines status. A properly registered security interest gives priority in the relevant register's terms. An unregistered one leaves the lender arguing an unsecured contractual claim inside a process designed to treat unsecured claims collectively.
A stay is not an academic risk. Where formal proceedings suspend enforcement, a lender that has not already commenced execution and secured protective measures is materially worse placed than one that has. The window between visible distress and formal filing is short, and the decisions taken in it are the ones that matter.
Pre-insolvency conduct is scrutinised. Security taken close to the onset of insolvency invites challenge. Lenders restructuring a troubled credit should assume late collateral will be examined, and should document the consideration and commercial rationale at the time rather than reconstructing it later.
Most UAE workouts still resolve consensually. But the negotiating position in a consensual workout is set by what would happen in the formal process — which is why the insolvency analysis belongs at the start of the workout, not the end.
Islamic and conventional financing in the same structure
Islamic finance is not a niche here; it is a parallel system of equal standing, and large UAE financings routinely carry conventional and Sharia-compliant tranches side by side. The onshore Islamic banking sector operates under the federal framework with a higher Sharia authority setting the position for the sector, and each institution maintains its own internal Sharia supervisory board. Islamic institutions in the DIFC and ADGM operate under Islamic-finance modules within the DFSA and FSRA rulebooks.
Structure follows the asset. Murabaha cost-plus sale structures dominate short-term and trade financing. Ijara lease structures suit real estate and equipment. Wakala, mudaraba and musharaka arrangements are used where the underlying is an investment portfolio or an operating venture. Istisna suits construction and manufacture. The choice is constrained by what the borrower owns and can transfer, not by preference.
Two issues recur in multi-tranche deals. Intercreditor mechanics: conventional and Islamic participants must share security and enforcement proceeds on terms the Sharia board will accept, which shapes how the security agency is constructed and how default compensation is handled. Sequencing: the board's approval is a hard gate. Where a structure is negotiated to term sheet before the board has seen it, the risk is not delay — it is redesign.
AML, sanctions and correspondent banking
The UAE has rebuilt its financial-crime framework substantially, and the consequence for anyone banking here is that compliance friction is now a commercial variable rather than a back-office one. Federal AML and counter-terrorist-financing legislation applies across the jurisdiction, supported by beneficial-ownership registration, a national sanctions listing mechanism giving effect to United Nations designations, and supervision by the Central Bank onshore alongside the DFSA and FSRA in their perimeters.
Correspondent banking. Access to dollar and euro clearing runs through correspondent relationships, and correspondents apply their own home-jurisdiction expectations on top of local requirements. De-risking decisions are made by the correspondent, rarely explained, and difficult to reverse. For a UAE bank or trading group, the correspondent relationship is often the most fragile asset on the operational balance sheet and should be managed as one.
Sanctions in trade and commodity flows. The UAE's position as a physical trading hub makes counterparty, vessel and cargo screening a daily exposure, and the relevant regimes are not only the local one. Multi-jurisdictional sanctions risk is best addressed in the facility documentation — with representations that are accurate rather than aspirational — and in the procedures behind it.
Investigations. Where a supervisor raises findings, the response is a legal exercise before it is a compliance one: scoping, privilege, what is disclosed and to whom. A response drafted without regard to how it reads to a second regulator, or in a later dispute, outlasts the original issue.
Where banking and finance work goes wrong
The failure modes here are consistent enough to list, and almost all are cheap to prevent and expensive to fix.
- Assuming one UAE regime. A structure built on the belief that a DIFC or ADGM authorisation reaches onshore business, or that one insolvency law governs a group spread across all three perimeters.
- Security documented but not perfected. Pledges and assignments never registered, registered late, registered in the wrong register, or taken by an entity the registry will not accept as mortgagee. Discovered at enforcement, when it cannot be fixed.
- Perfection long-stops without teeth. A covenant to register within a stated period, with no event of default and no drawstop attached, is a diary entry. Funds go out; registration does not follow.
- No UAE-resident security agent. An offshore lender with no entity able to appear before the land registry or the execution court, discovering at default that it lacks standing.
- Guarantees taken on the wrong basis. A secondary guarantee relied on as if autonomous; a corporate guarantee signed by someone whose authority the court will not accept; a personal guarantee taken without any picture of reachable assets.
- Arabic documentation prepared as an afterthought. Translations done at closing by someone who has not read the credit, then relied on in a court where the Arabic governs the judge's understanding.
- Distress recognised late. The most valuable weeks in a deteriorating credit are those before the borrower files. Lenders that wait for a covenant breach to be certified spend that window on process.
- Sharia approval left to the end. An Islamic tranche structured to term sheet before the supervisory board has seen it, then redesigned when the board declines.
- Sanctions and AML representations written to be signable rather than true. They are read closely by two audiences: a correspondent considering exit, and a regulator considering enforcement.
Each item is a structuring decision that only becomes visible under stress. That asymmetry is the argument for involving finance counsel before credit approval, not at signing.
Frequently asked questions
Can a foreign bank lend into the UAE without a local licence?
Frequently yes, but the question has to be broken into three parts. Booking a facility offshore to a UAE borrower, marketing or soliciting that facility inside the UAE, and taking security over UAE-situated assets each engage different considerations. The marketing limb is the one most often overlooked, and the security limb usually requires a UAE-licensed entity to act as security agent, because certain registries will only accept a licensed institution as mortgagee. The practical structure is an offshore facility agreement with UAE-law security documents and a local agent who can appear before the registry and, later, the execution court.
Does a DIFC or ADGM licence let us do business onshore?
No. The three regimes are separate licensing perimeters with no passporting between them. A DFSA authorisation permits regulated activity in and from the DIFC; an FSRA authorisation permits it in and from ADGM; a CBUAE licence covers the onshore market. None confers the others. Groups that need presence in more than one perimeter hold more than one authorisation, and their rulebook compliance has to be built separately for each rather than adapted from one to another.
How is security over UAE assets perfected?
By asset class, and always by a step taken after execution. Real-estate security onshore is registered against the title with the relevant land authority. Security over receivables, bank accounts, inventory, equipment and other movables is registered on the federal movable-assets register, which governs priority. Pledges over shares in onshore companies are notarised and recorded against the company's position with the licensing authority. DIFC and ADGM security is created and registered under those jurisdictions' own security laws. Sequencing across a mixed package matters, because some registrations and consents must precede others.
How long does enforcement against UAE collateral actually take?
On a contested onshore file, realising registered collateral through judgment, execution and court-supervised sale is realistically measured in one to three years. Uncontested files with clean registration and coherent Arabic documentation move considerably faster. What drives the range is not the court's speed but the quality of what is put before it: whether the security is properly perfected, whether the security agent has standing, whether the debt is in a form the execution judge can act on directly, and whether protective attachment was obtained early. DIFC and ADGM enforcement over assets inside those jurisdictions is faster and more familiar to common-law lenders, but reaching onshore assets from those courts adds a referral step.
Is a personal guarantee worth taking in the UAE?
Often, but for the right reason. Its value lies in creating direct exposure for a named individual whose position depends on the credit performing, which materially affects behaviour in a workout. Its realisable value depends entirely on that individual's reachable assets, and consumer-protection expectations in the onshore licensed sector have tightened around disclosure to individual guarantors. Take one with an asset picture and a clear view of what enforcement against that person would actually involve, and price it accordingly rather than treating the face amount as coverage.
What happens to our security if the borrower enters formal insolvency?
Properly perfected security gives priority in the terms of the relevant register. Unperfected security leaves you arguing an unsecured claim inside a collective process. Where formal proceedings impose a stay, a lender that has already commenced execution and obtained protective measures is in a materially better position than one that has not, so the window between visible distress and filing is the decisive one. Security taken late in a deteriorating credit should also be expected to attract scrutiny, which is why the commercial rationale for it needs documenting at the time.
Can conventional and Islamic tranches sit in the same facility?
Yes, and in larger UAE financings they routinely do. The work is in the intercreditor and security architecture: how the collateral is held, how enforcement proceeds are shared, and how default compensation is structured on terms the Sharia supervisory board will approve. The practical discipline is to involve the board early, because its approval is a hard gate. A structure negotiated to term sheet before the board has seen it risks redesign rather than delay.
What should we do first when a credit starts deteriorating?
Confirm the security position before opening a negotiation. Establish whether every element is registered and whether the registrations say what you believe they say. Confirm who has standing to enforce and in which forum. Establish the asset picture, including what sits outside the UAE. Then decide whether protective measures are needed now to preserve the position. Only after that is the workout negotiation worth having, because the consensual outcome is priced against what would happen in the formal process, and you cannot price that without knowing what you actually hold.