Since the GFCI 40 results on 16 September, three founders have opened calls with us by quoting the ranking. Two of them did not need the licence they had already decided on. The ranking is real and it is earned; it just does not answer the question a founder has to answer first.
The short answer
- The Global Financial Centres Index 40, published on 16 September 2026 by Z/Yen and the China Development Institute, ranked Dubai first in the world for FinTech, second for professional services and sixth for reputation, and first for future potential for the fourth report running.
- The index is built from 39,531 assessments by financial services professionals and 143 instrumental factors. It measures how practitioners rate a centre, not how easy a licence is to get.
- The ranking sits on a real base: on DIFC's own H1 2026 figures the centre had 1,933 AI, FinTech and innovation firms, up 39 per cent in a year, inside 10,018 active companies.
- A fintech founder in the DIFC chooses between three routes: the Innovation Licence (non regulated, for technology businesses that do not carry on financial services), the DFSA Innovation Testing Licence (a regulated sandbox with restrictions), and full DFSA authorisation.
- The first question is not which licence but whether the product is a financial service at all. Most founders who call us quoting the ranking have not yet answered it, and the answer decides everything after.
Last reviewed 27 September 2026
Since the Global Financial Centres Index results came out on 16 September, three founders have opened calls with us by quoting the ranking. Two of them had already decided which licence they wanted, and in both cases it was the wrong one for what they were building. That is not a criticism of the founders. The ranking is real and it is earned. It just answers a different question from the one a founder has to answer first.
What the GFCI actually measured
The Global Financial Centres Index is compiled twice a year by Z/Yen, a London consultancy, with the China Development Institute. GFCI 40, published on 16 September 2026, drew on 39,531 assessments from financial services professionals who answered its questionnaire, alongside 143 instrumental factors covering business environment, human capital, infrastructure, financial sector development and reputation.
Within the overall ranking sit industry sub indices. Dubai took first place in the FinTech sub index, climbed to second for professional services, rose to sixth for reputation, and held first for future potential for the fourth consecutive report. It is the only centre in the Middle East, Africa and South Asia inside the global top ten.
Two things are worth being precise about. The FinTech sub index is a ranking of how professionals in the industry rate the centre for that sector; it is not a count of companies or a measure of regulatory speed. And the assessments come from outside the centre, which is why DIFC's chief executive described the result as validated by the assessments of financial services professionals worldwide. The ranking is a signal about where the industry believes the activity is, and that signal has consequences for a founder, which is where this note goes next.
The base underneath the ranking
The ranking did not come from nowhere. On DIFC's own results for the first half of 2026, published on 28 July, the centre had 10,018 active registered companies, 1,134 of them regulated financial services firms. The number of AI, FinTech and innovation companies reached 1,933, up 39 per cent in a year, after the DIFC Innovation Hub took in 361 new companies in six months. The centre also announced its intention to become what it calls the world's first AI native financial centre, with AI embedded in its regulatory frameworks and infrastructure.
Those are DIFC's figures rather than ours. We include them because the third party articles written since 16 September quote smaller, older numbers, and because the 1,933 matters for a founder in a practical way: it is the pool of neighbours, competitors, acquirers and hires that a fintech in the DIFC sits inside.
What the ranking does not change
Nothing about the licensing tests. A technology business that does not carry on a financial service still applies to the Registrar of Companies for the Innovation Licence. A business that does carry on a financial service still needs DFSA authorisation, with the approved individuals, the compliance framework and the regulatory capital that come with it. The GFCI does not sit on the DFSA's desk when it reads an application.
What the ranking changes is everything around the licence. Investors who would have asked why Dubai now ask when. Counterparties in London and Singapore are more willing to contract with a DIFC entity. Senior hires who would not have relocated two years ago will take the call. Those are real advantages, and they are the reason the licence decision matters more, not less, because a founder who chooses the wrong route loses months in a market that is now moving faster.
The question that comes before the licence
Every fintech founder who calls us gets the same first question, and it is not "which licence". It is: does your product involve a financial service?
The DFSA defines financial services by activity. Holding or controlling client money or assets. Dealing in investments, as principal or agent. Arranging or advising on investments or credit. Managing assets or a fund. Providing credit. Operating a payment service or issuing stored value. If the product does any of those, in its own name, it is a financial service, and the founder is in DFSA territory whatever the technology looks like.
If it does none of them, the business is a technology company that happens to sell to the financial industry. It builds software, data, infrastructure, analytics or tools; the money and the regulated decisions stay with a licensed customer. That business does not need the DFSA, and putting it through a DFSA application is the most expensive mistake we see.
The two founders who had chosen the wrong route had each got this question the wrong way round. One was building a compliance analytics tool for banks and had decided on the Innovation Testing Licence, which is a regulated sandbox for a product that was not regulated. The other was building a payments product that would hold client funds and had decided on the Innovation Licence, which cannot authorise that at all.
The three routes, and who each is for
The DIFC Innovation Licence. A Registrar of Companies licence for technology businesses that do not carry on financial services. It is the route for the software, data and infrastructure companies that make up most of the 1,933, and it sits outside the DFSA entirely. It comes with a defined scope of permitted activities and access to the Innovation Hub ecosystem. Our full guide to the DIFC Innovation Licence covers eligibility and the visa allocation.
The DFSA Innovation Testing Licence. The DFSA's sandbox. It is a real, restricted financial services licence that lets a firm test an innovative financial product with actual customers, under conditions the DFSA sets for that firm, for a limited testing period, with a plan at the end to migrate to full authorisation or wind down. It modifies the scale of the obligations during testing; it does not remove the fact of regulation. It is for a product that is a financial service, is genuinely new, and needs live customers to prove itself.
Full DFSA authorisation. For a financial services business whose model is proven and which wants to operate at scale. Prudential category, approved individuals, regulatory capital and ongoing supervision, all set by the activity. Our guide to the DFSA licence categories and capital covers that side for asset managers; the same architecture applies across activities.
| Route | Regulator | For | Not for |
|---|---|---|---|
| Innovation Licence | DIFC Registrar of Companies | Technology, data and infrastructure businesses selling to finance | Anything that holds client money, deals, advises, lends or pays in its own name |
| Innovation Testing Licence | DFSA | A financial service that is new and needs live testing under restrictions | A business that is not a financial service, or one already proven at scale |
| Full authorisation | DFSA | A financial service ready to operate without testing restrictions | Early stage products still finding their model |
A fourth route sits outside the DIFC. Where the product is a virtual asset service to onshore customers, VARA regulates it; where it is a retail payment service across the UAE, the Central Bank does. Founders whose product touches both institutional and onshore retail customers often end up with a DIFC entity for the first and a separate licence for the second. Our comparison of the Innovation Licence, the DFSA and VARA draws those lines in detail.
What to do with the ranking
Use it for what it is. It is a good reason to raise in the DIFC, to hire in the DIFC, and to put the DIFC entity at the top of the group. It is a good line for an investor deck, provided the deck also says which licence the company holds and why, because the sophisticated investors the ranking attracts will ask.
Then answer the first question honestly, before the licence application and before the name is reserved. If the product is a financial service, plan the DFSA route first and the company second, because the licence is the long pole. If it is not, the Innovation Licence is a Registrar process measured in weeks, and the founder's time is better spent on the product than on a regulator the business does not need. Our guide to DIFC company setup starts with exactly that test.
How Atlas can help
Atlas forms and administers DIFC technology companies under the Innovation Licence, and prepares the corporate side of DFSA applications, the entity, the registered office, the governance and the ongoing filings, working alongside the regulatory advisers who handle the authorisation itself. Atlas is a DFSA-registered corporate services provider, not an authorised firm, and we say so before a founder asks. If you are deciding between the three routes, speak with the Atlas team and describe the product in one sentence. That is usually enough to know which door it goes through.
This article is general information and does not constitute legal, tax or regulatory advice. DIFC and ADGM rules change; confirm the current position with a qualified adviser for your specific case.
Frequently Asked Questions
What does it mean that Dubai is ranked first for FinTech in the GFCI?
The Global Financial Centres Index is a twice yearly ranking of financial centres compiled by Z/Yen in London with the China Development Institute. GFCI 40, published on 16 September 2026, is built from 39,531 assessments by financial services professionals and 143 instrumental factors. Within it, industry sub indices rank centres by sector. Dubai took first place in the FinTech sub index, second for professional services, sixth for reputation, and held first place for future potential for the fourth consecutive report. It is a measure of how professionals in the industry rate the centre, which is why DIFC describes it as validated by practitioners rather than by the centre itself.
Does the ranking make it easier to get a DIFC licence?
No. The ranking measures perception and competitiveness; the licensing tests are unchanged. A technology business that does not carry on a financial service can apply for the DIFC Innovation Licence through the Registrar of Companies. A business that does carry on a financial service needs DFSA authorisation, either through the Innovation Testing Licence sandbox or a full licence, with the approved individuals, systems and regulatory capital that come with it. What the ranking changes is the ecosystem around the licence: investors, counterparties and talent who are more willing to be in Dubai than they were.
Which DIFC licence should a fintech startup apply for?
It depends on one question: does the product involve a financial service as the DFSA defines it? If the business builds software, data, infrastructure or tools and does not hold client money, deal in investments, arrange or advise, provide credit or operate a payment service in its own name, the Innovation Licence is the route, and it is a Registrar licence rather than a DFSA one. If the product does involve a financial service, the Innovation Testing Licence lets a firm test it with real clients under restrictions before committing to full authorisation. If the model is proven and the firm wants to operate at scale, full DFSA authorisation. Choosing the wrong one costs months either way.
What is the DFSA Innovation Testing Licence?
The ITL is the DFSA's regulatory sandbox. It is a restricted financial services licence that allows a firm to test an innovative financial product or service with real customers, under conditions the DFSA sets for that firm, for a limited testing period, with a plan to either migrate to full authorisation or wind down at the end. It is a real DFSA licence, so it involves an application, approved individuals and supervision; what it modifies is the scale of the obligations during testing. It is not a route for a business that is not carrying on a financial service at all; that business does not need the DFSA.
Can a fintech in the DIFC serve customers on the UAE mainland?
The DIFC is a financial free zone with its own regulator, and a DFSA licence permits financial services in or from the DIFC. Serving retail customers across the wider UAE can bring the Central Bank's regime into play, for example for payment services and stored value, and virtual asset activity outside the DIFC sits with VARA. Founders whose product touches onshore retail customers or virtual assets often end up with a DIFC entity for the institutional and holding side and a separate licence for the onshore activity. Our comparison of the Innovation Licence, the ITL and VARA sets out where the lines are.
How many fintech companies are in the DIFC?
On DIFC's own figures for the first half of 2026, published on 28 July 2026, the number of AI, FinTech and innovation companies reached 1,933, up 39 per cent year on year, after the DIFC Innovation Hub welcomed 361 new companies in the half. Regulated financial services firms stood at 1,134 and active registered companies at 10,018. Figures published by third parties that quote lower numbers are usually older.