A License That Doubles as a Preview
On July 29, 2026, the Central Bank of the UAE (CBUAE) granted KamelPay, a UAE-born payroll and business-payments platform, Stored Value Facilities (SVF) and Retail Payment Services (RPS) licenses (The Paypers; Gulf News). KamelPay says it now serves more than 2,000 corporates — including government entities — and processes payments for over 400,000 employees across construction, retail, real estate, logistics, hospitality and financial services (Gulf News). The approvals, as the company's own announcement puts it, place KamelPay "among a select group of fintech companies authorised to operate regulated payment services" in the UAE (The Paypers).
That phrasing is the real story. KamelPay's licenses are not an isolated regulatory event — they are a preview of what every UAE payments platform will need to demonstrate before September 16, 2026, when a one-year transition window under Federal Decree-Law No. 6 of 2025 closes.
The Law Behind the Clock
Federal Decree-Law No. 6 of 2025, which took effect September 16, 2025, replaced the UAE's 2018 Central Bank Law and consolidated banking, insurance and payments oversight under one statute, with the CBUAE licensing stored-value facilities, retail payment services, loan-based crowdfunding and open finance activities alongside banks and insurers (u.ae — Banking in the UAE; u.ae — Insurance). Article 62 is the provision doing the heavy lifting: it extends the CBUAE's licensing perimeter to "any person who, by any medium or technology, issues, carries out, offers, or facilitates a licensed financial activity" — language broad enough to capture not just banks and e-money issuers but payment processors, embedded-finance middleware and, per legal analysis, virtual-asset and DeFi-adjacent platforms (Chambers and Partners).
Article 184's transitional clause gives in-scope entities a one-year "reconciliation period" from the law's entry into force to regularize their status — a deadline that lands on September 16, 2026, unless the CBUAE exercises its discretion to extend it (Gibson Dunn; Chambers and Partners). The stakes for missing it are real: the law sets a maximum administrative fine of AED 1 billion (roughly $272 million) for non-compliant financial-activity providers, on top of license revocation and activity restrictions (Chambers and Partners).
The Case for a Wider Net
The steelman for Article 62 is straightforward and, on the merits, reasonable. Embedded finance has spent the last five years blurring the line between "fintech app" and "financial institution" — payroll platforms hold stored value, e-commerce checkouts issue wallets, and consumer credit gets bundled into apps that look nothing like a bank. A licensing regime keyed to fixed entity types (bank, exchange house, insurer) leaves obvious gaps for anything performing a banking-like function through a different technical wrapper. Given the UAE's ambitions as a fintech and digital-assets hub, a regulator that lets stored-value and payment-token products scale outside its supervisory perimeter is inviting the kind of consumer-protection or AML failure that draws far heavier-handed intervention later. A technology-neutral catch-all, paired with a genuine one-year runway and a working license track — the same SVF/RPS track KamelPay just cleared — is a defensible way to close that gap without banning the underlying innovation.
Where the Net Gets Too Wide
The problem sits in the word "facilitates." Read literally, Article 62 could sweep in parties that never touch customer funds or make underwriting decisions — cloud infrastructure providers, KYC/API vendors, and white-label software firms that merely supply tooling to an already-licensed bank or fintech. Nothing in the public guidance reviewed for this piece draws a bright line between a facilitator that should be licensed and a pure technology vendor that shouldn't; that distinction is left to CBUAE discretion, case by case, inside a fixed one-year clock. For a well-capitalized platform like KamelPay — which had presumably been building its SVF/RPS application well before the law's September 2025 effective date — a year is workable. For a smaller startup only now realizing its product architecture puts it inside Article 62's perimeter, a year to build governance, capital buffers and compliance infrastructure from scratch is tight, and an AED 1 billion fine ceiling is a disproportionate threat to dangle over a small team still working through the queue.
Before September 16
None of this argues against licensing stored-value and payment platforms — KamelPay's approval shows the track works and that firms can clear it on the merits. It argues for the CBUAE to publish scoping guidance separating "facilitates a licensed financial activity" from "sells software to someone who does," and to confirm publicly — not just at its discretion — that firms with pending, good-faith applications won't face September 16 enforcement while their license sits in the queue. The KamelPay approval is evidence the CBUAE's process can move. The open question, five weeks from deadline, is whether it can move for everyone who now needs it to.