How to Start a Payment Services Business in Dubai

How to Start a Payment Services Business in Dubai

A customer holds a phone against a terminal on a café counter and the screen says approved. In the second that follows, money that belongs to the customer's bank becomes money owed to the café, and somewhere in the middle of that sentence sits a company that will keep a fraction of a dirham for having made it happen. It never owns the amount. It is answerable for all of it.

Payment Services provider, as the line reads in the activity catalogue, is the business of standing in that gap. The asymmetry in the previous paragraph is not a detail of the trade; it is the trade. Revenue is a sliver of the transaction and liability is the whole of it, and almost every decision a payment business makes — how it prices, who it will take on as a customer, how fast it pays out, what it builds and what it buys — is an answer to that one imbalance.

It also explains why this line is treated differently from the rest of the catalogue. A company handling funds that are not its own is not conducting a commercial activity that happens to involve money. It is conducting a financial activity, licensed on its own terms, and no general trading, consultancy or information-technology permission reaches it. Onshore, the Central Bank of the UAE is the authority for payment and money-services activity; in a financial free zone the equivalent question is asked by that zone's own regulator against its own rulebook. The useful work on a plan like this happens before anybody picks a jurisdiction, and it is the work of establishing which of several quite different activities the business is actually proposing to carry on.

What the line covers: three jobs that look like one

Under one name sit three functions with different risks, and conflating them is the commonest error in a plan on this activity.

Acceptance is the merchant's side. The provider gets a payment authorised on behalf of a business that is selling something, then settles the proceeds to it. The customer here is the café, the clinic, the school taking fees.

Transfer and initiation is the payer's side: moving money on a customer's instruction from one account to another, domestically or across a border. The customer is the person or business sending it.

A held balance is the third, and it is the one that changes the firm's character completely. If a customer can load value and spend it later, the provider is holding funds it does not own for an indefinite period, and the question of where those funds sit and whose name they are in stops being an operational matter.

The reversal is the product, not the authorisation

Getting a payment approved is the easy part and no merchant pays much for it. What a merchant is really buying is what happens when the card was stolen, when the goods never arrived, or when the customer simply disputes the charge weeks later. The chain is built so that somebody has to carry that loss, and in the ordinary case it lands on the provider's side of it rather than on the issuing bank's. A provider that has priced its service as though the exception never happens has priced a business it is not actually in.

That single fact reshapes the commercial model. The loss concentrates in a small number of customers, so the real skill of the trade is not selling but deciding who to take on, how much exposure to allow, and how long to hold settlement before releasing it. Onboarding a merchant is underwriting, whatever the sales team calls it.

Settlement timing is the working capital

The money a provider handles arrives and leaves on timetables it does not set. It frequently credits a merchant before it has itself been funded, and in between it is holding balances belonging to other people. That gap is the whole of the balance sheet in this business, and it is also the whole of the regulatory interest in it: funds that belong to customers have to be identifiable as theirs and kept apart from the firm's own money, so that a failure of the firm is not a loss to the people whose money it was holding. Paying out faster is the strongest thing a provider can sell a merchant and the most expensive thing it can promise.

The question that decides the licence

Everything above turns on one fact, and it is worth isolating because it is the fact a founder can usually answer in a sentence. Does the company itself ever hold or control the funds? A business that touches the money is in a payment activity in its own right. A business that writes the software, runs the checkout page, builds the reconciliation tools or supplies the hardware, while the funds flow entirely through a licensed party, is a technology business selling to the payments industry — a real, substantial and far lighter line to hold.

Renaming the product does not change the answer. A wallet described as a loyalty balance is still a balance a customer can spend, and a payout tool that routes money through an account in the company's own name is still a company holding other people's money.

The buyers are businesses that cannot take money without you

Four kinds of customer carry this industry, and they want different things.

Merchants with a counter or a checkout want approval rates, settlement speed and one place to see what happened. They are won on price and kept on the support call when a terminal stops working on a Thursday night.

Platforms and marketplaces are the hardest and the most valuable. One payment from a buyer has to be split between several recipients, which means the platform is also handling money that is not its own — so the provider is serving a customer with the same problem it has, and the service it sells is the answer to it.

Payroll and payout businesses pay many people on a schedule. Volume is predictable, margins are thin, and the entire relationship rests on nothing failing on the day.

Billers and subscription businesses collect repeatedly from the same customers, and for them the value sits almost entirely in the retry: a payment that fails and is recovered quietly is revenue that would otherwise have been a cancelled customer.

Worth stating who this is not for. A founder whose actual product is the interface, the reconciliation engine or the fraud model, and who has no intention of holding anybody's money, is looking at the other arm of the fork above. Taking a payment licence for that business buys a continuing obligation nobody needed.

The jurisdiction question sits downstream of the licence question

On most activities in this catalogue the choice between the mainland and a free zone is close to the first decision. Here it is close to the last, because an address does not create a permission to handle other people's money. Settle what the company does, then choose where it sits.

In general terms the mainland suits a business whose customers are UAE merchants and UAE consumers on UAE soil, because that is where those relationships are. A conventional free zone suits a business whose customers are outside the country, or one on the technology arm of the fork selling to licensed providers wherever they are. A financial free zone runs its own financial rulebook and its own regulator, and a firm choosing that route is choosing a supervisor as much as an address. In all three the common condition is substance: the people, the premises and the systems have to be in the jurisdiction whose rulebook the firm is relying on, and a licence held somewhere the work is not done is the weakest arrangement available.

Three further obligations follow the firm whichever route it takes. Customer due diligence comes before the relationship and not after it, which in this trade means knowing what a merchant actually sells before processing its first transaction. Records have to be kept so a transaction can be reconstructed on request, and suspicion reported through the federal channel by the firm's own officers. And where the business supplies the hardware — a terminal with a mobile or wireless connection is telecommunications equipment — the device carries its own type-approval control, separately from anything to do with the licence.

The permissions a specific plan needs, the conditions attached to them and the cost of holding them differ between the emirates and between the authorities, and on this activity they turn on the answer to the fork above rather than on the name of the product. ConsultZone establishes which activity is actually being proposed and confirms the conditions with the relevant authority before anything is committed.

References

1. Central Bank of the UAE — the authority for payment services, money services and the client-funds obligations that attach to firms handling money they do not own. Central Bank of the UAE
2. Telecommunications and Digital Government Regulatory Authority — type approval for the radio and telecommunications equipment in a card terminal. TDRA
3. Federal Tax Authority — corporate tax and value-added tax enrolment and filing, including the treatment of transaction fees. Federal Tax Authority
4. Ministry of Economy — company matters and the corporate filings a licensed company carries. Ministry of Economy