Choosing a platform

Best Trading Platform UAE: Two Regulators, Five Licence Categories, and a Marketing Licence That Isn't a Dealing Licence

The DIFC's DFSA and onshore UAE's Capital Market Authority run different rulebooks with different leverage caps. A CMA Category 5 licence sounds like full onshore regulation and isn't one; checking which category a firm actually holds answers a different question than checking whether it's "regulated in the UAE" at all.

Last verified 27 October 2026 · how we check

Searching for a trading platform in the UAE runs into a structural fact most comparison sites skip: there are two separate regulators, with two different rulebooks and, as it turns out, two different leverage ceilings that don’t rank the way you’d expect. Checking the wrong one tells you something true about a licence that doesn’t apply to the account you’re about to fund.

What to use, and what to check first

If you want	Use	Confirm before funding
A DIFC-licensed entity with UK-style conduct rules	A DFSA Category 3A firm, e.g. Pepperstone Financial Services (DIFC) Ltd, IG Limited, XTB MENA Ltd or Amana Financial Services (Dubai) Ltd	Which DFSA reference number is on your account agreement, checked against the DFSA’s own public register
A genuine onshore dealing relationship, not just a local office	A firm holding a CMA Category 1 licence, e.g. Deriv Capital Contracts & Currencies L.L.C.	Category 1, specifically, not Category 5; the two sound similar and permit entirely different things
The full regulatory-structure explainer first	Forex broker in Dubai	Read before assuming “DFSA” and “Dubai” are interchangeable; neither regulator’s name contains the other’s jurisdiction label
To know exactly what a “UAE licence” claim can mean when it’s weaker than it sounds	Read the Category 5 section below before funding any UAE-marketed account	Pepperstone’s own UAE structure is the clearest real example on record

Two regulators, two rulebooks, and a leverage cap that runs backwards

The DFSA regulates the Dubai International Financial Centre, a financial free zone with its own common-law court system, separate from onshore UAE law. A firm needs a Category 3A licence to deal in forex and CFDs from the DIFC. Four firms hold that licence for retail clients: Pepperstone Financial Services (DIFC) Limited (DFSA F004356), IG Limited (DFSA F001780), XTB MENA Limited (DFSA F006316) and Amana Financial Services (Dubai) Limited (DFSA F003269). DFSA’s retail leverage cap is 30:1 on major currency pairs, 20:1 on minors, with a 50% margin close-out rule and mandatory negative balance protection for retail clients.

Onshore UAE falls under the Securities and Commodities Authority, renamed the Capital Market Authority effective 1 January 2026. The CMA runs several licence categories, and two of them get confused constantly because both sound like “UAE regulation.” Category 1 is the real dealing licence: it requires paid-up capital of at least AED 30 million, and it permits a firm to deal on its own account, hold client money and act as the actual counterparty to a client’s trade. Deriv’s onshore entity, Deriv Capital Contracts & Currencies L.L.C., holds a Category 1 licence and onboards UAE clients directly under it. Category 5 is something else entirely: “Arrangement and Advice,” a licence to market, promote, introduce and advise, with no permission to deal in derivatives, unregulated commodity contracts or spot FX, and no permission to hold client money.

For firms genuinely dealing onshore under a Category 1 licence, the CMA’s published retail leverage framework runs to 50:1 on major pairs, 20:1 on minors and exotics, 10:1 on commodities and 3:1 on stocks, higher on majors than the DIFC’s 30:1. That comparison only holds for an entity that actually deals under Category 1. A Category 5 entity isn’t a counterparty to any trade at all, so its presence in the UAE says nothing about which leverage cap, if any, applies to the account a client ultimately funds.

What a Category 3A licence actually requires, not just permits

A Category 3A licence isn’t a light-touch registration. The DFSA requires a Cat 3A firm to maintain regulatory capital calculated against its specific risk exposure, to appoint senior managers the DFSA itself approves individually, and to hold client money in accounts segregated from the firm’s own operating funds, the same structural promise that sits behind every client-money rule covered elsewhere on this site, in a different jurisdiction each time. The licence is the DFSA’s own record that a firm has met a specific, checkable bar, not a general reputation for being “regulated somewhere.”

A Category 5 licence sounds like full onshore regulation. It isn’t.

Pepperstone’s own UAE structure is the clearest real example of why the category matters more than the fact of holding one. Pepperstone secured a CMA Category 5 licence to open a Dubai office and market in the UAE. Under that licence, Pepperstone Financial Services L.L.C. acts strictly as an introducer: it can promote the product and bring in clients, but it cannot deal in the trade itself or hold the money. The entity that actually issues the contracts and holds client funds for those introduced clients is Pepperstone Markets Limited, in the Bahamas, a jurisdiction outside both the DFSA’s and the CMA’s dealing perimeter entirely.

A trader reading “Pepperstone is now licensed in the UAE” has learned something true and, on its own, close to meaningless for the question that actually matters: which entity holds the money, and what regulator supervises that specific entity’s dealing conduct. For this structure, the answer to both is the Bahamas, not the UAE, regardless of where the marketing office sits or which licence made the office legal to open.

What the DFSA licence actually buys a retail client

Category 3A status carries the DFSA’s standard retail protections: leverage capped at 30:1/20:1 as above, a 50% margin close-out rule that forces position closure before an account goes deeply negative, and negative balance protection, meaning a retail client cannot end up owing the firm more than was deposited. A DFSA Elective Professional classification, available to clients who can show a net worth above $500,000 and sufficient trading history, removes that leverage cap entirely, up to 500:1; confirming which classification actually applies to your account is worth doing before assuming the retail protections automatically cover you.

What the margin close-out rule actually does mid-trade

The 50% close-out threshold isn’t a warning level; it’s a trigger. If a DFSA-regulated account’s net equity drops to half the aggregate initial margin required for its open positions, the firm has to start closing positions, as soon as market conditions allow, until equity is back at or above that line. Combined with negative balance protection, the two rules together set a floor under how badly a single volatile session can end for a retail account: positions get force-closed before the account can go meaningfully negative, and whatever gap remains after that close-out is the firm’s exposure to absorb, not the client’s debt to repay. The CMA applies an equivalent close-out standard onshore, though the specific trigger percentage and reporting requirements sit in a separate rulebook from the DFSA’s, another reason “which regulator” isn’t a formality.

The enforcement record shows the DFSA acts, even off this specific niche

The DFSA fined Vault Wealth Limited $109,200 for providing financial services in or from the DIFC without the authorisation to do so, a direct enforcement case against unlicensed activity rather than against a licensed Category 3A forex firm specifically. No enforcement record this article could verify targets one of the four named DFSA brokers above; the Vault Wealth case is included because it establishes the same point the register check itself depends on: the DFSA investigates and fines firms operating in its jurisdiction without the licence the activity requires, which is exactly the scenario a register search is meant to catch before you fund an account, not after a regulator catches it first.

The order the three questions have to go in

Search the DFSA’s own public register for the exact entity name and reference number on your account agreement, not the brand name on the app icon. A DIFC entity and an onshore CMA entity sharing a brand are not interchangeable, and only one of them is the counterparty actually holding your account.

If the broker operates onshore, ask which CMA category the licence actually is, not just whether a licence exists. Category 1 means the UAE entity deals and holds your money; Category 5 means it markets and introduces you to an entity that might sit anywhere, the Bahamas included. The CMA’s higher leverage ceiling on majors only applies to the former.

Treat “regulated in the UAE” as an incomplete sentence until you know which regulator and which entity. Forex broker in Dubai covers the structural reason neither regulator’s name maps cleanly onto “Dubai” or “UAE” as a search term, and the same gap applies to picking a platform, not just to researching one.

Confirm your own client classification, retail or Elective Professional under the DFSA, since the leverage cap that applies to you depends on that status, not just on which firm you’ve chosen.

Two regulators, two leverage ceilings, and at least one widely marketed brand whose actual UAE licence doesn’t let it deal at all. The question “which platform” doesn’t have a single answer in the UAE until the question “which regulator, which category, which entity” is answered first, in that order.

Sources

Figures were checked on 27 October 2026 and change over time — confirm current terms with the provider. Nothing here is investment advice; see therisk disclaimer.