How to Check Your DIFC Formation Agent Is a DFSA-Registered Corporate Service Provider

To check that your DIFC formation agent is a DFSA-registered corporate service provider, search its exact legal name on the DFSA Public Register and confirm it appears as a DNFBP with "Company Service Provider" as its business, a DFSA reference number and a registration date. Any firm that forms companies, provides registered office addresses or supplies directors, secretaries or nominee shareholders by way of business in or from the DIFC needs that registration. The point is no longer theoretical. On 15 October 2026 the Dubai Financial Services Authority (DFSA) published a penalty of USD 454,367.05 against a DIFC-incorporated company that had been doing this work for years without it.

This article sets out what the DFSA decided, what registration means, how to run the check yourself, and what it means if your provider turns out not to be registered.

What did the DFSA decide on 15 October 2026?

The subject of the decision was Hayman-Woodward Global Mobility Services (DIFC) Ltd, named here as a matter of public record. The DFSA's media release and the Decision Notice dated 6 October 2026 set out the facts.

The company was incorporated in the DIFC on 28 August 2018 and its commercial licence listed Management Consultancies and Documents Clearing Services. It was never authorised by the DFSA or registered as a DNFBP. Between 28 August 2018 and 27 February 2025 it provided 71 clients with two corporate services: acting as a formation agent of legal persons, and providing a registered office, business address, correspondence and administrative address. It advertised company registration, office registration and registered agent services on its website, and it signed referral or partner agreements with three free zones outside the DIFC to set up companies for clients.

The DFSA found a breach of the DNFBP Prohibition in Article 71A(1) of the Regulatory Law 2004. It did not allege money laundering, and it said nothing suggested the breach was intentional. It treated the matter as serious because the company was outside DFSA anti-money laundering supervision for a prolonged period, across 71 clients, and because it had signed a free zone agreement acknowledging that it was a DNFBP and corporate services provider under federal AML law while never registering with the DFSA.

The company agreed to settle, which is why the fine element was reduced. Without the discount the total would have been USD 522,047.05.

What does DFSA registration as a corporate service provider mean?

The DFSA regulates financial services in the DIFC, but it also supervises certain non-financial businesses for anti-money laundering purposes. These are designated non-financial businesses or professions (DNFBPs). Under AML Rule 3.2.1 and the DFSA Glossary, the list includes real estate developers and agencies, dealers in precious metals or stones, law firms and notaries, accounting, audit and insolvency firms, single family offices, and company service providers, where their business is carried on in or from the DIFC.

Article 71A(1) of the Regulatory Law 2004 is short: a person who is a DNFBP shall not carry on any activities in or from the DIFC unless the DFSA has registered it. Registration brings the firm under DFSA supervision of its customer due diligence, beneficial ownership checks, record keeping and suspicious activity reporting.

Registration is not a financial services licence. A DFSA-registered corporate service provider cannot advise on investments or manage assets. Our guide to DIFC corporate service providers explains the role in more detail.

Which services require registration?

The Glossary defines a company service provider as a person that, by way of business, provides any of the following to a customer:

1. Acting as a formation agent of legal persons.
2. Acting as, or arranging for another person to act as, a director or secretary of a company, a partner of a partnership, or a similar position for other legal persons.
3. Providing a registered office, business address or accommodation, correspondence or administrative address for a company, partnership or other legal person or arrangement.
4. Acting as, or arranging for another person to act as, a nominee shareholder for another person.

One service is enough. The October case involved only the first and third.

The test is where the provider's business is carried on, not where the client's company is incorporated. The Decision Notice records engagements to renew a licence in a Dubai free zone, to incorporate and domicile a company, and to set up a company in Dubai. Because the work was done through a DIFC entity and from DIFC offices, it was caught. A DIFC-based firm that forms companies elsewhere in the UAE still needs DFSA registration for that work.

How do you check the DFSA Public Register?

The check takes a few minutes and costs nothing.

1. Get the exact legal name of the entity that will sign your engagement letter, not the brand.
2. Go to the DFSA Public Register of firms and search that name. You can filter by firm type "DNFBP" and by the activity "Company Service Provider".
3. Open the entry. A registered provider shows its legal status, a DFSA reference number beginning with F, its address, its date of registration and its DNFBP business.
4. Confirm the DNFBP business reads "Company Service Provider". Registration as, say, an accounting firm does not cover formation work.
5. Make sure the firm is not listed under "DNFBP (Withdrawn)", and look at the Regulatory Actions tab on its entry.
6. Compare the name, address and reference number with the engagement letter, invoices and email signatures. They should all point to the same entity.

Ask the provider for its DFSA reference number at the first meeting. A registered firm will give it to you straight away.

Red flags when choosing a formation agent

None of these proves a problem on its own, but each is worth a question before you sign:

• The provider describes itself as "licensed" for corporate services but cannot give a DFSA reference number.
• Its DIFC commercial licence lists consultancy, document clearing or similar activities, and nothing appears for it on the DFSA register as a DNFBP.
• The engagement letter is with a different company from the one on the register, or the register shows a withdrawn registration.
• It points to registration or approval under federal AML law or with another free zone as if that covered DIFC activity. The October case shows it does not.
• It offers a DIFC registered address, nominee directors or nominee shareholders but asks few questions about who owns and controls your company.
• Fees for formation and address services are buried in a general "consultancy" or "business setup" line.

Our article on how to choose business formation services in the UAE covers the wider selection questions.

What does it mean if your provider was not registered?

The DFSA stated that its Decision Notice was addressed to the provider alone and was not a determination that any other person breached a legal or regulatory rule. Clients of an unregistered provider are not, on that basis, in breach themselves.

The practical risk is different: if the firm that formed your company or holds your registered address was outside AML supervision, the files behind your company may not be in the order you would expect. We suggest you:

• collect your engagement letter, constitutional documents, registers and filing receipts;
• confirm with the DIFC Registrar of Companies that your registered office, officers and beneficial ownership details are correct and current;
• consider moving your registered office and corporate services to a DFSA-registered provider, which will carry out its own customer due diligence on transfer; and
• take legal advice if anything in your records is missing or inconsistent.

Our note on DIFC registered office requirements explains what the address must do. If your structure includes a Prescribed Company, read our note on the Prescribed Company CSP deadline, because the choice of provider matters there too.

How Atlas helps

Atlas Corporate Services Ltd is a DFSA-registered corporate service provider, registered as a DNFBP under reference F012915; you can check the entry on the DFSA Public Register. We form and administer companies, Prescribed Companies and foundations in the DIFC, and administer entities in ADGM. We provide registered office and company secretarial services, maintain registers and filings, and take over the administration of existing entities, including a review of the records handed over. We are not an Authorised Firm, and we do not give legal, tax, investment or regulatory advice. Where a client needs that advice, we work alongside their lawyers and advisers.

This article is general information and does not constitute legal, tax or regulatory advice. It summarises the DFSA's published media release and Decision Notice and does not replace them. Confirm the position for your company with a qualified adviser before acting.