Forex broker solutions for the Middle East: regulators

What does a forex broker in the Middle East actually need?

A forex broker in the Middle East needs three things that rarely come from the same supplier: a licence that covers the clients it wants to serve, a trading platform configured to that regulator’s retail rules, and client-facing software that works properly in Arabic. Most launch plans we see get the second and third parts roughly right and leave the first one vague, which is the expensive way round.

The region is not one market. The UAE alone has three securities regulators with separate rulebooks, Saudi Arabia has its own Capital Market Authority with a strict view of anyone marketing into the Kingdom, and Bahrain, Qatar, Oman, Kuwait and Jordan each have their own authorities. A Dubai team selling to Riyadh is dealing with at least two regimes, not one.

What tends to be common across the Gulf is the client side: a large share of clients ask for swap-free (Islamic) accounts, Arabic is expected on every screen the client touches, and introducing brokers carry a lot of the acquisition. Those three facts shape the MT5 group design, the CRM and the commission set-up more than any single rule.

Which regulator licenses forex brokers in Dubai and the UAE?

It depends on where the business sits. Inside the Dubai International Financial Centre the regulator is the Dubai Financial Services Authority (DFSA); inside Abu Dhabi Global Market it is the Financial Services Regulatory Authority (FSRA); onshore, in the rest of the UAE, it is the federal Capital Market Authority, which until 31 December 2025 was called the Securities and Commodities Authority (SCA).

The DFSA’s starting point is blunt. Article 41(1) of the DIFC Regulatory Law says that “a person shall not carry on a Financial Service in or from the DIFC” unless an exemption applies, which in practice means a DFSA licence for anyone dealing with clients from the centre. ADGM works the same way through a Financial Services Permission from the FSRA.

For onshore activity the rename matters more than it looks. Law firm Dechert noted in February 2026 that the new federal laws “apply to activities conducted in the UAE outside the two financial free zones”, and that Article 2(1)(d) reaches “any person targeting clients within the [UAE]” even when the activity is run from abroad or from a free zone. The same note records that Article 71 provides for imprisonment of not less than one year and very large fines for unlicensed activity, and that “we are yet to see guidance from the CMA regarding its approach to cross-border activities”.

Is the SCA still the UAE regulator in 2026?

No — not under that name. The authority’s own page lists, as the first key provision of the new framework, “Renaming the Securities and Commodities Authority as the Capital Market Authority.” The same page says the two decree-laws also introduce new regulated financial activities, regulate an Investor Protection Fund and a Settlement Guarantee Fund, and give the CMA powers over systemically important persons and early intervention.

For a broker this has two practical consequences. First, documents, websites and client agreements that still say “SCA-regulated” will look out of date to anyone who checks, including app reviewers and payment processors. Second, the old SCA licence categories and how they map to the new law are something to confirm with the CMA or a UAE lawyer, not to assume; we have not seen published guidance that settles every mapping question.

Commentary from compliance firms in early 2026 suggested that existing licence holders could continue within the scope of their current permissions, but that is a secondary reading. If your business plan depends on it, ask for the position in writing.

What retail leverage and margin rules apply in the DIFC and ADGM?

In the DIFC, a firm dealing in what the DFSA calls Restricted Speculative Investments — leveraged CFDs and rolling spot forex — must collect at least 3.3% margin from a retail client on a major currency pair, which works out at roughly 30:1. COB 6.16.6 sets higher floors for everything else: 5% for non-major pairs, major equity indices, treasury assets and gold; 10% for non-major indices and commodities other than gold; 50% for crypto tokens; and 20% for any other underlying.

The same section adds the protections that brokers who know European rules will recognise. Under COB 6.16.7 a firm must make sure net equity in a retail account does not fall below 50% of the overall margin, and close all open positions when it does. Under COB 6.16.8 a retail client’s liability “is limited to the funds in that trading account” — negative balance protection. COB 6.16.10 asks firms to take reasonable steps so that retail clients do not pay margin with a credit card or third-party credit facility.

ADGM’s conduct rulebook has its own chapter for OTC leveraged products with margin, close-out and negative balance provisions of the same family. We could not load the current ADGM rule text when we updated this page, so we do not quote its figures here; check the live FSRA rulebook, because ADGM revises it regularly.

None of this is configured by the regulator. It ends up as MT5 group settings, stop-out levels, symbol margin rates and CRM payment rules, and somebody has to build and test them. The table below is how we map the DFSA rules when we configure a client environment.

Can a DIFC or ADGM broker pay introducing brokers?

Yes, but not just anyone. The DFSA rule is short and leaves little room: a firm dealing in Restricted Speculative Investments “must not accept a referral of a Retail Client made by an unregulated Person for reward.” In other words, a rewarded introducer for retail clients has to be regulated.

That changes how you build the IB side of the CRM. A Gulf IB network is often a mix of regulated partners, unregulated affiliates and individual “community” traders. Under a DFSA licence the CRM needs to know which partners are allowed to earn on retail referrals, hold their regulatory status as a record, and stop paying commission when that status lapses. We work with our own broker CRM and with partner CRMs, and propose whichever fits your IB model; ours handles IB hierarchies and commission plans; the rule about who may be paid is something your compliance officer sets and we enforce in configuration.

Brokers licensed outside the UAE often run large Gulf IB networks too. Whether that is lawful depends on their own licence and on the UAE and Saudi rules about marketing to residents, which is exactly the question the CMA has not yet answered in published guidance.

Can I serve Saudi clients from a UAE or offshore licence?

Generally not by actively marketing to them. Baker McKenzie’s regulatory guide states that “the CMA strictly prohibits any person from conducting securities business in Saudi Arabia” — or for a person in Saudi Arabia — without CMA authorisation and licensing, and that a securities advertisement includes material available to persons in Saudi Arabia via the internet.

The guide describes a narrow reverse-inquiry exemption: the client must make the first approach, it applies only to institutions and individuals above high net-asset or investment thresholds set out in the guide, and the securities must not be issued or listed in Saudi Arabia. That is a private-banking carve-out, not a route for a retail forex brokerage.

The Saudi CMA describes its own role as overseeing the development of the capital market, including “issuing regulations and rules to implement the Capital Market Law”. We have not verified which retail OTC FX or CFD permissions the CMA grants today, so we will not state it; if Saudi retail clients are central to your plan, that is the first question for a Saudi-qualified lawyer.

The same caution applies to Bahrain (Central Bank of Bahrain), Qatar, Oman, Kuwait and Jordan. Each has its own regulator and its own rules on cross-border marketing. We name them so they end up on your checklist, not because we can tell you what they allow.

How do Islamic swap-free accounts work on MT5?

On MT5, a swap-free account is usually a separate client group whose symbols carry no overnight swap, with any substitute charge applied in a controlled, documented way. The platform supports this directly: MetaQuotes’ documentation lists the swap calculation modes per symbol, and the MQL5 reference includes a mode described as “Swaps disabled (no swaps)”.

MT5 also lets you set a swap multiplier for each day of the week. MetaQuotes’ help explains that the usual triple swap on Wednesday is simply a ratio of 3 on that day, and that “the swap is not charged for weekdays with no ratio specified.” For swap-free groups we normally use group-level symbol overrides rather than separate symbols, so that prices, sessions and margin stay identical to the standard account and only the financing differs.

The commercial question is how to replace the swap without recreating it under another name. Brokers publish different answers. Tickmill’s Islamic account page, for example, says its fees “apply only to selected instruments and begin after a set grace period” and are “applied to MT4 and MT5 swap-free accounts as a separate balance entry at 00:00 server time”. Other brokers widen spreads on swap-free groups or charge a flat administration fee. Whatever you choose should be reviewed by your Sharia adviser, written into the client agreement and applied consistently by the system, not by a dealer at midnight.

How do you stop swap-free accounts being abused?

Mostly with rules agreed before launch and monitoring after it. The common abuse pattern is a client holding large carry positions — long high-yield currencies — in a swap-free account to collect a financing advantage the account was never meant to provide, sometimes hedged by an opposite position elsewhere.

MetaQuotes’ automation module lists the option to “automatically charge inactivity fees or maintenance fees for swap-free accounts”, and it can “synchronize data between MetaTrader 5 and your brokerage’s CRM”. We use that kind of logic, or equivalent scripts on the CRM side, to flag accounts that hold the same carry trade for weeks, to apply the published fee after the grace period and to move ineligible clients back to standard groups with notice.

The CRM side matters as much as the server. Eligibility (who can request swap-free), the declaration the client signs and the audit trail of every group change belong in the client record. If a regulator, auditor or Sharia board asks why a client was moved, the answer should be one click away.

Do Middle East clients need Arabic trading platforms?

Yes, if you are serious about retail clients in the Gulf. Arabic on the website alone is not enough; the trading screens, order tickets, notifications and the client portal are where clients make mistakes, and that is where a right-to-left layout has to work properly rather than as mirrored English.

Our branded WebTrader and our iOS and Android trading apps ship in English, Turkish and Arabic, with full right-to-left layout for Arabic. Numbers, prices and charts stay left-to-right where traders expect them; menus, labels and dialogs flip. You can check it yourself in the WebTrader demo and the mobile app demo, both connected to a real MT5 demo server — switch the language to Arabic and place a pending order.

English remains the working language for most Gulf compliance teams, so the CRM back office usually runs in English while the client-facing pages run in both. Other languages common in the region’s expatriate client base can be added as part of a project; ask us about the specific language before you assume it is ready.

Which payment methods do Gulf brokers use?

Bank transfer is the backbone for most regulated Gulf brokers, with cards and e-wallets on top where the licence and the payment processor allow it. Which methods you can actually offer depends less on the technology than on two other things: what your regulator permits and which processors will onboard a leveraged-trading merchant in your jurisdiction.

The DFSA rule on credit cards is a good example of the regulator shaping the cashier. Under COB 6.16.10 a DIFC firm must take reasonable steps to stop retail clients paying margin with a credit card or third-party credit facility, so the CRM needs to distinguish debit from credit cards at the processor level, block the latter for retail groups and keep a record of the check.

We connect the CRM to the processors and banks you contract with; we do not provide payment licences or merchant accounts. A practical tip from projects in the region: line up at least two processors before launch, because onboarding a forex merchant in the UAE can take longer than the platform build. If you already have processor offers, send them to us on Telegram and we will tell you what the integration involves.

Grey label, white label or own MT5 licence for a Gulf brokerage?

For most new Gulf brands an MT5 grey label is the fastest start: an MT5 grey label is a brokerage set up inside another company’s licensed MetaTrader 5 server, where you get your own client groups and your brand on the WebTrader, mobile apps, CRM and client portal, while the MT5 server licence stays with the provider. It does not give you a financial services licence; that question is separate.

An MT5 white label gives more control over symbols, groups and conditions. Whether a new white label is available depends on MetaQuotes’ current approach — trade press and several providers reported in 2022 that MetaQuotes had tightened or suspended new white labels in many cases — so we check each case before promising anything; our MetaQuotes white label policy guide collects both sides with dates. A DFSA or FSRA-licensed firm will often look at its own MT5 licence instead, because regulators expect clear control over the systems that hold client positions.

MetaQuotes’ order page lists three MT5 licence tiers by business capacity: Entry for 1,000 real accounts, Standard for 25,000 and Enterprise for 200,000. MetaQuotes does not publish prices. In the applications we handle, the licence is billed monthly at a rate that depends on the tier, and an Entry licence requires three months paid upfront. We act as consultants on that application, preparing MetaQuotes’ requirements and handling the process for a fee we quote per project. Message us and we will send current figures for the tier you need.

If you specifically need MT4, write to us and we will check availability for your case; MetaQuotes says new MT4 licences are no longer available for purchase, so we never promise it in advance. The comparison of routes is set out in white label vs grey label.

What does FXUP set up for a Middle East brokerage?

We set up and run the technology between the MT5 server and the client. On a typical Gulf project that covers the MT5 grey label or white label environment, standard and swap-free client groups with the margin and stop-out levels your compliance team signs off, the Arabic and English WebTrader and mobile apps, the CRM (our own, or a partner CRM where that fits your operation better) with KYC, deposits and withdrawals, IB commissions and MT5 account sync, and the liquidity provider integration. Copy trading and PAMM can be added where your licence allows them.

The mobile apps are publishable on the App Store and Google Play under your own developer accounts. Both stores expect licensing for the countries where a trading app is made available, so the store country list should match your licence; our guide to trading app store approval explains the review in detail.

What we do not do: we are not a broker, we do not hold your licence, and we do not give legal advice. We can introduce licence routes through partners, and as a consulting firm we handle MetaQuotes’ requirements and the MT5 licence application for clients, for a fee; the regulator’s decision is the regulator’s, and MetaQuotes’ decision is MetaQuotes’. FXUP is independent and not affiliated with MetaQuotes.

How long does it take to launch a brokerage in the Gulf?

The technology is the short part. A grey label is typically live in about one to two weeks and a white label in about two to four weeks once documents, branding and liquidity are ready. The licence is the long part, and it sets the real launch date for any regulated Gulf brokerage.

ADGM publishes its process openly, which helps with planning. The FSRA lists eight stages — contact, enquiry, proposal (a draft regulatory business plan), submission with the application fee, review including interviews of approved persons, in-principle approval with pre-conditions, fulfilment (commercial licence, ADGM premises, bank accounts and capital) and finally the Financial Services Permission. The platform build should finish during fulfilment, not before the in-principle approval, or you pay for a system you cannot use.

Minimum capital is set by the regulator for each licence category, and the DFSA, FSRA and CMA each have their own prudential rules. Our licence jurisdictions overview compares the main routes, and the technology cost guide explains what drives the platform side of the budget and what a quote should list. For current figures on an FXUP setup, ask us directly.

What should be on a Middle East brokerage launch checklist?

A short list, worked through in order, prevents most of the delays we see. The order matters: licence scope first, configuration second, front ends last.

1. Fix the licence scopeDecide which regulator (DFSA, FSRA, UAE CMA or a licence elsewhere), which client types and which countries you will market to. Get the Saudi and other GCC positions in writing from counsel.
2. Choose the MT5 routeGrey label, white label or your own MT5 licence, based on control needs, regulator expectations and timing.
3. Write the trading conditionsMargin rates per asset class, stop-out at the required level, negative balance handling and the swap-free fee model, signed off by compliance and your Sharia adviser.
4. Design client groupsStandard and swap-free retail groups, professional groups where permitted, and test groups. Every group maps to a documented set of conditions.
5. Set up IB and payment rulesRecord each IB’s regulatory status in the CRM, block rewarded referrals that your licence forbids and configure card rules with your processors.
6. Localise and brandArabic and English on the WebTrader, apps and client portal; app store country lists matched to your licence.
7. Test end to endOpen accounts, deposit, trade into a stop-out, trigger a negative balance correction and pay an IB commission on the demo environment before any client is onboarded.

How do I start the conversation with FXUP?

Send us three things: where your company is or will be licensed, which countries you want clients from and whether you need swap-free accounts from day one. That is enough for us to recommend a route and outline what the set-up involves. The quickest way is WhatsApp; for documents and business plans, Telegram or email work better, and the contact form suits a formal request.

If you already hold a DFSA or FSRA licence and want to move your client front ends or CRM, tell us what you run now. We will look at the migration path before we talk about anything new.

Questions buyers ask

Not covered here? Ask us on WhatsApp, message @FXUPCK on Telegram or write to [email protected].