DFSA
DFSA Capital and Prudential Requirements Explained
· 7 min read · By Aureus Worldwide
DFSA capital requirements set the minimum financial resources an Authorised Firm must hold at all times to carry on financial services in or from the Dubai International Financial Centre (DIFC). The Dubai Financial Services Authority (DFSA) frames this through its Prudential, Investment, Insurance Intermediation and Banking (PIB) module, and getting the calculation right is one of the conditions of holding your Licence. This guide explains how DFSA capital requirements are built up, why the expenditure-based minimum so often surprises new firms, and what it takes to stay above your requirement once you are live.
The starting principle: adequate financial resources
Before any formula, the DFSA imposes a broad obligation. Under its Principles for Authorised Firms, a firm must maintain adequate financial and non-financial resources for the business it runs. The PIB module then turns that principle into a number. So there are really two tests: a mechanical minimum you can calculate, and an over-arching expectation that your resources genuinely match your risk profile, wind-down costs and growth plans. A firm that scrapes the mechanical floor but cannot fund an orderly exit has not met the principle, even if the arithmetic technically passes.
Your position on the PIB scale flows from the riskiest activity on your Licence, the prudential category, which is settled during DFSA authorisation. This article assumes you know your category and focuses on how the requirement is actually assembled and maintained.
The capital requirement: the "higher of" test
An Authorised Firm must hold capital resources equal to the higher of three measures. Not the sum, the highest single figure applies:
- Base Capital Requirement (BCR), the fixed minimum for your category, ranging from around US$10,000 for a firm that only arranges and advises up to US$10 million for a deposit-taking bank.
- Expenditure Based Capital Minimum (EBCM), a floor tied to your running costs.
- Risk Capital Requirement (RCR), an additional Basel-style calculation for credit, market and operational risk, which applies to the higher-risk categories (broadly Categories 1, 2 and 5).
For most advisory, arranging and asset-management firms there is no risk-based component, so the requirement is simply the higher of base capital and the EBCM. For a bank, the risk-based figure usually dominates everything else.
Why the EBCM usually decides the answer
The base capital figures look small, and that lulls applicants into under-budgeting. In practice the EBCM is the binding constraint for most young firms. The EBCM is a set number of weeks of your annual audited expenditure, broadly around six weeks for firms that do not hold or control Client Assets, rising to roughly a quarter (thirteen weeks) for firms that do. The logic is wind-down: if the business fails, the firm should hold enough to keep operating while it returns client assets and closes in an orderly way.
The practical consequence is that your capital requirement scales with your cost base. Hire a larger team, take bigger premises or raise your compliance spend, and your EBCM rises with it. A firm forecasting rapid growth must model capital against projected expenditure, not today's lean start-up costs, or it will breach its requirement precisely as it succeeds. This is why we build the capital line into the financial model behind every DFSA financial services permission application.
Capital resources: quality, not just quantity
Meeting the requirement is only half the picture, the DFSA also dictates what may count as capital. Capital resources are measured in tiers, and lower-quality instruments are capped:
- Common Equity Tier 1 (CET1), the highest quality: paid-up ordinary share capital and audited retained earnings and reserves. This is the backbone of most firms' capital.
- Additional Tier 1 (AT1), certain perpetual, loss-absorbing instruments, subject to strict conditions.
- Tier 2, subordinated debt and similar lower-quality items, admissible only up to defined limits.
From this, the firm makes prescribed deductions, for example, intangible assets, certain investments and current-year losses, to arrive at capital resources. Two firms can show the same net assets on the balance sheet yet have very different regulatory capital once tiering and deductions are applied. Because CET1 depends on audited reserves, your capital position is only ever as reliable as the ledger and the audited financial statements behind it.
Professional indemnity insurance and non-capital resources
Capital is not the only financial resource the DFSA scrutinises. Firms in the advisory and arranging space are typically required to hold professional indemnity insurance (PII) proportionate to their business, and the adequacy of that cover, limits, excess, exclusions, is assessed alongside capital. In some cases a shortfall in PII cover must be met with additional capital. Treating PII as a box-ticking renewal rather than a genuine risk transfer is a common weakness the DFSA probes.
ICAAP, liquidity and the higher categories
For banks and principal-dealing firms, the regime goes well beyond a base figure:
- ICAAP (Internal Capital Adequacy Assessment Process), higher-category firms must run their own forward-looking assessment of the capital they need against all material risks, stress-test it, and document the conclusion for the DFSA. The regulator can set an individual capital guidance above the mechanical minimum on the strength of that review.
- Liquidity, deposit-takers and other balance-sheet firms must hold adequate liquid assets and manage liquidity risk, not merely solvency.
- Large exposures and concentration, limits prevent a firm from concentrating risk in a single counterparty or group.
Most DIFC start-ups are advisory or asset-management firms that avoid this tier entirely, which is itself a reason many structure their regulated activities to sit in a lower category.
Staying above the line: continuous monitoring
The single biggest misconception is that capital is a point-in-time hurdle cleared at authorisation. It is a continuous obligation. A firm must know its capital position throughout the period, not just at year-end, and the PIB module sets early-warning thresholds that require a firm to notify the DFSA before it actually breaches, when capital falls toward, rather than below, the requirement. Waiting until you are already in breach to raise your hand is itself a failing.
In practice this means:
- A disciplined month-end close that measures capital resources against the requirement every period.
- A rolling forecast that flags when rising expenditure or a planned investment will push the EBCM up.
- Clear escalation so the Finance Officer and Senior Executive Officer act, and notify, at the early-warning point, not after a breach.
- Feeding the numbers cleanly into your periodic prudential returns.
A well-run finance function turns capital adequacy from a recurring scare into a routine number on the management pack.
A practical capital-planning checklist
Before you file, and every year afterwards, pressure-test the following:
- Confirm your category and the correct base capital figure from the current PIB module.
- Forecast annual expenditure realistically, including salaries, premises, compliance and technology, and compute the EBCM against it.
- Take the higher of base capital, EBCM and (if relevant) the risk-based requirement.
- Build in headroom above the requirement so normal trading swings do not breach the early-warning threshold.
- Check the quality of your capital, is enough of it CET1 after deductions?
- Confirm PII cover and whether any capital add-on is needed.
- Set the monitoring rhythm, who calculates capital, how often, and who notifies the DFSA.
How Aureus Worldwide can help
Aureus Worldwide is a Dubai-based accounting, tax and CFO-outsourcing firm. We are not DFSA-authorised, we do not provide regulated financial services, and we do not sign DFSA audit reports, but we build and maintain the financial substance behind your prudential position. We model base-capital and expenditure-based capital requirements into your business plan, run a disciplined month-end close that measures capital resources against your requirement every period, and prepare the underlying numbers that feed your prudential returns and audit, all through our accounting and outsourced CFO services and coordinated with your appointed auditor and compliance team. For the regulatory structuring itself we work alongside your DIFC and ADGM advisers and in-house compliance officers. To pressure-test your capital plan before you file, contact our team.
Frequently asked questions
How much capital does a DFSA firm need?
Every Authorised Firm must hold the higher of its base capital requirement, an expenditure-based capital minimum and, for banks and principal-dealing firms, a risk-based requirement. Base capital ranges from around US$10,000 for advisory-and-arranging firms to US$10 million for a bank, but the expenditure-based minimum often bites hardest for young firms.
What is the Expenditure Based Capital Minimum?
The EBCM is a floor equal to a set number of weeks of the firm's annual audited expenditure, so a firm always holds enough to fund an orderly wind-down. It is typically around six weeks of expenditure for firms that do not hold Client Assets and rises to roughly a quarter for those that do.
What counts as DFSA capital resources?
Capital resources are measured in tiers led by Common Equity Tier 1, paid-up share capital and audited reserves, plus limited Additional Tier 1 and Tier 2 instruments, after prescribed deductions. The DFSA cares about the quality of capital, not just the headline number.
Do DFSA firms have to monitor capital continuously?
Yes. Capital adequacy is a continuous obligation, not a period-end snapshot. A firm must monitor its capital resources against its requirement throughout the period and notify the DFSA well before it approaches a breach, using the early-warning thresholds in the PIB module.