The question is not is it regulated — it is regulated by whom
Every broker that markets to Gulf residents calls itself regulated. That word is doing almost no work on its own — a broker can hold a genuine license from a small offshore regulator and technically call itself regulated, which is true and not especially useful to you. The question that actually protects your money is narrower: regulated by whom, and does that specific regulator's authority extend to you as a resident of the UAE, Saudi Arabia, Kuwait, Qatar, Bahrain or Oman?
This matters because regulatory coverage is not global by default. A broker's UK FCA license protects clients under FCA rules; it does not automatically extend the same protections to an account opened from Riyadh or Dubai unless the specific legal entity you are contracting with is the one the FCA actually licenses. Multi-entity brokers route different countries to different legal entities, and each entity carries its own license, its own compensation scheme, and its own rules for what happens if the broker fails. This guide walks through what that means for the five brokers we track and shows you exactly how to check it yourself, on us as well as on anyone else.
None of this is unique to trading. It is the same reason a UAE resident buying insurance checks whether the policy is issued locally or from an offshore underwriter, and it deserves the same five minutes of attention before you fund a trading account with money that is meant to grow, not disappear into a dispute you have no formal route to resolve. The rest of this guide gives you that five minutes back in a usable form: the actual entities, the actual registers, and the actual differences between what a UAE-based DFSA license covers and what a purely offshore one does not.
The UAE's regulator was renamed CMA in 2026 — that alone does not license any broker we track
In January 2026 the UAE's Securities and Commodities Authority was renamed the CMA — the same initials Saudi Arabia already uses for its own Capital Market Authority. They are two separate national regulators in two separate countries that now happen to share an acronym, and it is worth being precise about which CMA a broker means when it uses the term in its marketing. Neither the UAE's CMA nor Saudi Arabia's CMA licenses any of the five brokers we review here — Base Markets, ActivTrades, XM, Pepperstone or Capital.com. None of them is a UAE onshore or Saudi onshore regulated entity, and none claims to be.
Two of the five — XM and Pepperstone — do hold a license from the DFSA, the Dubai Financial Services Authority. The DFSA is a genuine, UAE-based financial regulator, and it is a real layer of protection worth knowing about. But it only covers business conducted through the Dubai International Financial Centre, a defined free zone, and the specific DFSA-licensed entity is not necessarily the one that opens your account if you register from outside the DIFC. Check which legal entity your account actually sits under before assuming DFSA oversight applies to you — the how to verify a broker's license guide shows exactly how to do that in about five minutes.
Saudi Arabia: the same offshore reality, with fewer regional options
For Saudi residents the picture is more offshore, not less. None of the five brokers we track holds a Saudi CMA license, and Saudi Arabia's own Capital Market Authority does not license retail CFD or forex trading the way the FCA or ASIC do. Most Saudi-resident traders who use one of these five brokers are, in practice, opening an account with an entity licensed somewhere else entirely — most often Mauritius, Cyprus, Australia, the UK or Seychelles.
That is not automatically a problem. A genuine offshore license — the FSC in Mauritius, for example — is a real license with real obligations around fund segregation and know-your-customer checks. But it carries less supervisory weight and a thinner compensation scheme than a tier-one regulator, and it is worth knowing that going in rather than assuming Saudi or GCC-specific coverage that is not actually there. Swap-free (Islamic) account terms also vary by which entity you register under, so confirm both at the same time — the Islamic trading accounts guide walks through what to check.
Our five brokers' licensing entities, compared
Here is exactly who licenses each broker we review, side by side. None carries UAE or Saudi onshore CMA coverage; two carry a Dubai-based DFSA license, and two carry the most regulatory weight overall.
Licensing entities of the 5 brokers we review — none is UAE or Saudi CMA-licensed
| Broker | Regulators | UAE-based entity? | Headquarters |
|---|---|---|---|
| Base Markets | FSC (Mauritius) | No | Mauritius |
| ActivTrades | FCA (UK), SCB (Bahamas), CMVM (Portugal) | No | London, United Kingdom |
| XM | DFSA (Dubai), ASIC, CySEC, FSC (Belize) | Yes — DFSA, DIFC only | Cyprus, with a DFSA entity in Dubai |
| Pepperstone | ASIC, FCA, CySEC, DFSA, BaFin, SCB | Yes — DFSA, DIFC only | Melbourne, Australia |
| Capital.com | FCA, CySEC, ASIC, SCB, FSA (Seychelles) | No | Limassol, Cyprus |