DFSA fines Vault Wealth for unlicensed DIFC advice and arranging

The Dubai Financial Services Authority announced a USD109,200 fine against Vault Wealth Limited on 1 October for providing financial services in or from the DIFC without its authorisation. The firm was incorporated and licensed in Abu Dhabi Global Market, but staff used a related company’s DIFC premises for client advice and onboarding.[1]

The enforcement concerns activity between February and May 2024. DFSA found that the office did not clearly distinguish the DIFC technology entity from the wealth firm, while management continued despite knowing authorisation was needed and receiving compliance concerns.[1]

The client journey established the activity

The 21 September decision records invitations to financial-planning meetings, discussion of investment objectives and assistance completing brokerage applications. An adviser described uploading customer documents and pre-filling information before sending agreements for electronic signature. These were concrete steps in attracting and establishing investment clients.[2]

The distinction matters for groups using one entity for technology and another for regulated services. A software-development office, a shared brand and a financial-advice team can sit close together commercially, but the legal analysis follows what employees actually do with customers. Treating a premises decision as an internal property matter can leave the front-office activity outside the permission assessment.

Under GEN 2.9.1, arranging includes work intended to bring about another person’s investment transaction even where no transaction ultimately completes. It also covers receiving and transmitting client orders. The rule excludes activities amounting to operation of an alternative trading system.[3]

The associated guidance distinguishes an arranger, who cannot bind the parties, from a dealing agent who can. It also excludes delegated back-office administration and passive literature displays without further help to transact. The case therefore turns on the full client-facing activity, rather than making every administrative task a standalone permission breach.[4][2]

How the fine was calculated

Management’s knowledge and ignored compliance concerns drove the increase. The authority applied no further deterrence uplift and found no evidence of direct profit or avoided loss for disgorgement purposes. Vault agreed the relevant facts and fine.[2]

The arithmetic separates two effects that can otherwise disappear inside a settlement headline. The aggravating step added USD26,000 to the seriousness figure; settlement then reduced the enlarged figure by USD46,800. Those calculated amounts explain how management conduct increased the pre-discount exposure even though the final penalty was lower than the initial seriousness figure.[2]

Permission must follow the operating model

For a broker or wealth platform expanding through group offices, the practical control is a map of customer-facing activities: who invites the client, gives product-specific advice, assists with an application and communicates under the brand. That map can then be compared with the permissions of the relevant entity and location. The decision is especially useful because it connects observable workflow to the regulatory perimeter, instead of relying on a company’s own description of its office.

The notice concerns Vault Wealth Limited alone and leaves third parties’ positions undetermined. Vault agreed not to refer it to the Financial Markets Tribunal. Payment was required within 28 days of the notice being given.[2]

Report an error or submit an update