DFSA Fines Vault Wealth USD 109,200 for Unauthorised Activity in the DIFC

Home News DIFC DFSA Fines Vault Wealth USD 109,200 for Unauthorised Activity in the DIFC
Muhammad Aaliyan Ibrahim
Written by Muhammad Aaliyan Ibrahim
Home News DIFC DFSA Fines Vault Wealth USD 109,200 for Unauthorised Activity in the DIFC

The Dubai Financial Services Authority (DFSA) has fined Vault Wealth Limited USD 109,200 (about AED 401,000) for carrying on financial services in or from the Dubai International Financial Centre (DIFC) without DFSA authorisation. The regulator announced the penalty on 1 October 2026.

 

Vault Wealth was a licensed firm. It was incorporated in Abu Dhabi Global Market (ADGM) on 9 March 2023 and has held an FSRA Financial Services Permission since 13 June 2023, covering Advising on Investments or Credit and Arranging Deals in Investments in or from ADGM. That permission did not extend to the DIFC.

 

The decision confirms that an FSRA licence in ADGM does not carry across into the DIFC. The two centres operate separate regulatory systems, and a firm carrying on financial services from the DIFC must have its position assessed by the DFSA.

Activity at the DIFC office

According to the DFSA’s Decision Notice, Vault Wealth personnel worked from the DIFC premises of Vault Technology Limited between February and May 2024. 

 

Vault Technology is a related company that the DFSA does not regulate.

 

Prospective clients were invited to the office and given financial advice. Staff assisted with investment-platform onboarding and collected KYC documents, including Emirates ID, passports and proof of address, in connection with opening investment accounts.

 

The DFSA found this amounted to Advising on Financial Products and Arranging Deals in Investments. It looked at what staff were doing and where, rather than at where the company was incorporated.

Earlier contact with the DFSA

The Decision Notice records that Vault Wealth had approached the DFSA about authorisation before the conduct took place. 

 

On 1 August 2023, its then Compliance Officer and MLRO contacted the regulator about establishing a DIFC entity and starting the authorisation process. Representatives met the DFSA Authorisations Team on or about 7 August 2023.

 

No further communication followed. 

 

On 24 October 2023, the authorisation status was changed to “Pre Application – Dormant”, and no formal application was submitted.

 

Vault Technology Limited was incorporated in the DIFC in November 2023. DFSA officers inspected its office on 16 May 2024.

Branding and Client Perception

The premises displayed the “Vault” name without clearly separating Vault Technology from Vault Wealth. The DFSA considered this could lead prospective clients to believe Vault Wealth was authorised to provide financial services in or from the DIFC.

 

Vault Technology was not found to be in breach. The Decision Notice, issued on 21 September 2026, was directed at Vault Wealth only. The affiliate’s office, branding and lack of clear separation formed part of the circumstances the DFSA considered.

How the Penalty was Calculated

The DFSA imposed the fine under Article 90(2)(a) of the Regulatory Law 2004. The penalty began at USD 130,000 for seriousness and rose to USD 156,000 after a 20% aggravation adjustment. A 30% settlement discount reduced the final figure to USD 109,200.

 

The aggravating factors included:

  • Senior management’s awareness of the licensing requirement, 
  • The failure to address concerns raised by the Compliance Officer, 
  • The lack of clarity between the DIFC entity and the ADGM-regulated firm.

The case concerns the regulatory perimeter, not an administrative matter such as an ADGM late filing fine.

Legal Basis

Article 41(1) of the Regulatory Law 2004 contains the Financial Services Prohibition. Article 42(3) sets out who may carry on financial services within that framework, including an Authorised Firm whose DFSA Licence covers the relevant activity. 

 

An FSRA permission is not a DFSA Licence.

 

Under GEN Rule 2.2.1, an activity is a financial service where it is listed in Rule 2.2.2 and carried on by way of business under GEN section 2.3. The list includes arranging deals in investments and advising on financial products. GEN sections 2.9 and 2.11 deal with those activities in more detail.

What This Means For Groups With Entities In More Than One Centre

Plenty of UAE groups run an ADGM company, a DIFC company and a mainland company side by side. That setup is legal. 

 

Trouble starts when what people do day to day stops matching what the paperwork says.

 

Vault Wealth shows how easily that happens. Its advisers sat in a DIFC office belonging to a sister company, met clients there, and collected their documents. On paper, an ADGM firm was doing the work. In practice, the work was happening in the DIFC.

 

Calling the neighbouring company a “technology business” didn’t change that. It wouldn’t for a representative office or a fintech platform either. 

 

The DFSA looks at what is being done and which entity is doing it.

 

A quick check tells you a lot. Where do your advisers actually sit? Where do clients come for meetings? Which address is on your emails and meeting invites? Who collects KYC, and who helps clients fill in investment applications? Whose name is on the door? One awkward answer proves nothing. Several in a row usually point to a gap.

 

The internal side matters too. The DFSA said Vault Wealth’s management failed to act on concerns raised by its own Compliance Officer, and it counted that against the firm. 

 

If your compliance team spots a possible gap, write it down, take it to senior management, and set a deadline to fix it. Pause the activity in the meantime if you need to.

How ADEPTS Can Help

Most groups don’t find a licensing gap until a regulator does. By then, the question is no longer what the paperwork says but what the business was actually doing.

 

ADEPTS looks at the second part first. We review how each entity in your group operates day to day and compare that to the permissions it holds. That covers who meets clients and where, who collects KYC and helps with investment applications, which entity appears on client documents, and whether signage and branding make the regulated firm clear.

 

If the review turns up a gap, our corporate governance team can help you fix it, from restructuring roles to setting up an escalation process so compliance concerns reach senior management and get closed on a deadline.

Conclusion

Vault Wealth held an FSRA permission for ADGM. It never got DFSA authorisation for the DIFC, and it was fined for working there anyway.

 

Any group with entities in more than one centre can ask itself the same thing: does the company doing this work hold the permission for it, in the place where it’s happening? If the answer isn’t a clear yes, it’s worth finding out before the regulator does.

References

Related Articles

Muhammad Aaliyan Ibrahim
Written by Muhammad Aaliyan Ibrahim