SCA regulation and what it covers

One country, several regulators 

The phrase regulated in the United Arab Emirates does not identify a regulator, because the country contains several perimeters and a firm sits in exactly one of them. Confusing them is the single most common error a reader makes when checking a financial firm in the Emirates, and it is an error a licensed firm has no interest in leaving uncorrected.

• The Securities and Commodities Authority is the federal authority for onshore securities and commodities activity. Brokerage and dealing in securities, commodities and over the counter derivatives conducted onshore fall under it, together with the onshore exchanges.
• The Central Bank of the United Arab Emirates supervises banks, exchange houses, payment and finance companies and, following the consolidation of the insurance authority into it, insurers. A bank in the Emirates is supervised there, not by the securities regulator.
• The Dubai Financial Services Authority regulates firms operating from within the Dubai International Financial Centre, a financial free zone with its own civil and commercial law framework and its own courts.
• The Financial Services Regulatory Authority regulates firms operating from within Abu Dhabi Global Market, the second financial free zone, likewise with its own legal framework and courts.

The perimeters do not overlap and the licences are not interchangeable. A firm authorised in one free zone is not authorised onshore, a firm authorised onshore is not authorised in a free zone, and each authority maintains its own public register of the firms it has licensed and the activities each licence permits. A claim of regulation is therefore only checkable once the regulator, the entity name and the licence reference are all stated together.

What the authority does 

A securities regulator's work divides into four activities, and the distinction between them explains most of what a client experiences.

1. Authorisation. A firm applies for a licence covering specified activities, and the assessment covers the fitness and propriety of its owners and controllers, its capital, its systems and controls, its governance, and the arrangements it proposes for holding client money. A licence permits named activities and no others.
2. Rule making. The authority issues the regulations a licensed firm must operate under, covering client classification and onboarding, disclosure and marketing, order handling and execution, client money treatment, record keeping, complaint handling, and anti money laundering obligations.
3. Supervision. Licensed firms report to the authority on a continuing basis, submit to inspection, and hold approved persons in specified controlled functions. Supervision is the continuing part, and it is where most regulatory work actually happens.
4. Enforcement. Where obligations are breached, the authority can direct, fine, restrict, suspend or withdraw a licence, and publish what it has done. Enforcement is retrospective by nature: it addresses conduct that has already occurred.

Two obligations in that list matter more to a retail client than the rest. Client money must be held separately from the firm's own money, with the treatment prescribed rather than left to the firm, and the firm must operate a complaint procedure with a route onward to the authority when a complaint is not resolved. Both are structural protections, and both are protections about conduct.

Onboarding, classification and why the questions are asked 

A licensed firm cannot open a client account on request alone. Identity and source of funds must be verified under anti money laundering obligations, which is why documents are required and why an account is not usable until they are accepted. Separately, the applicant is classified, conventionally as a retail client or as a professional or institutional one, and the classification determines how much protection the rules afford: retail classification carries the fullest set of disclosure, communication and client money protections, and a client classified otherwise is treated as needing fewer of them.

Firms also collect information about knowledge and experience of the product being applied for. In an execution only relationship the firm does not advise, does not recommend and does not assess whether a transaction suits the client's circumstances, and that information is collected to satisfy a rule about warning and disclosure rather than to produce a recommendation. The distinction between advice and execution only is a legal one with consequences for both sides, and it is stated in the client agreement rather than inferred from the tone of any communication.

What regulation does not do 

The boundary here is the most useful paragraph on the page, because the gap between what a regulator does and what a reader assumes it does is where disappointment is manufactured. A licence is an authorisation to conduct an activity under rules. It is not a warranty on a firm and it is not insurance on a market.

• It does not protect against market loss. A position that moves adversely produces a loss under a supervised firm exactly as it would anywhere else, and no conduct rule alters the arithmetic of a price.
• It does not guarantee a firm's solvency. Capital requirements make failure less likely; they do not make it impossible, and the client money rules exist precisely because failure is possible.
• It does not endorse or approve any product. A licence to deal in an instrument is not an opinion that the instrument is suitable for anyone.
• It does not vet performance claims one by one in advance. Marketing rules constrain what a firm may say, and enforcement follows a breach rather than preceding it.
• It does not extend beyond its perimeter. A regulator supervises the firms it has licensed, and has no authority over an unlicensed firm soliciting from elsewhere, which is why verifying the register before anything else is the check that carries the most weight.

A conduct rule with arithmetic in it 

One conduct obligation has arithmetic attached, and it is frequently misunderstood as a general safety feature. A leveraged position is opened against a margin requirement expressed as a percentage of the full contract value, and profit and loss are calculated on that full value rather than on the sum posted. Losses are therefore not limited to the amount deposited, and a sufficiently large adverse move can produce a debit exceeding the balance in the account. Favourable moves are calculated on exactly the same basis and to exactly the same degree.

A negative balance protection rule, where a firm operates one under its regulator's requirements, addresses that last case and nothing else: it limits the debit that can be carried over to the money in the account. It has no effect on the loss up to that point, and it is a contractual and regulatory term of a particular firm rather than a property of leveraged trading.

Verifying a licence 

A regulatory claim is only as good as the register entry behind it, and every authority in the country publishes one. Three details are needed to make the check meaningful, and a firm that supplies fewer than three has supplied a claim rather than a fact: the exact legal entity name, the authority that licensed it, and the licence reference under which it appears. The registered address matters too, because the free zones are separate perimeters and an address inside one of them is inconsistent with an onshore licence.

The details that check requires are stated on this site rather than left to be discovered. The legal entity is Yal Group Inc.. Yal Group Inc. is duly incorporated and registered in Saint Lucia under company registration number 2026-00484. The licence number is 2026-00484, and the registered office is Ground Floor, Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia.

Two further points are worth stating because they are where verification most often goes wrong. A register entry names activities, so a firm may be licensed for one activity and be soliciting for another. And a group can contain several entities in several jurisdictions, so the entity a client contracts with is the entity whose regulator matters, and that entity is named in the client agreement rather than in the marketing.

Where practitioners disagree 

The first argument is about how far conduct regulation should go in restricting products for retail clients. One position holds that disclosure is the appropriate instrument and that a properly informed adult should be able to transact what they choose. Another holds that disclosure has been tested repeatedly and does not change behaviour much, and that structural limits do the work disclosure was supposed to do. Regulators around the world have reached different answers on the same evidence, which is why the perimeter differs by jurisdiction.

The second argument concerns a country running an onshore regime and two free zone regimes at once. It is defended as offering firms a genuine choice of legal framework and attracting institutions that require common law courts. It is criticised for placing on the client the burden of knowing which regulator supervises the entity they deal with, when three plausible sounding claims of being regulated in the same country mean three different things. Both statements are true at once.