59 canonical definitions for digital banking, Banking-as-a-Service, payment tokens, and UAE regulatory frameworks. Referenced across all Terafin content. Updated July 2026.
These definitions represent Terafin's authoritative use of each term across all public content, regulatory analysis, and client communications. Dates are verified. Regulatory claims are sourced.
Abu Dhabi Global Market is an international financial centre and free zone in Abu Dhabi with its own civil and commercial laws, courts, and regulatory framework. The Financial Services Regulatory Authority (FSRA) of ADGM regulates financial services conducted within the zone, including virtual asset service providers and stablecoin issuers.
See: Dirham Payment Token.
The body of regulatory controls, monitoring, and reporting obligations designed to detect and prevent the movement of illicit funds through the financial system. In the UAE, AML obligations sit under CBUAE and FATF-aligned requirements and apply across banking, payments, and virtual asset activity.
An architecture model where new digital banking capabilities are deployed as a separate platform layer on top of an existing core banking system, without modifying or replacing the core. The innovation layer handles new products, new channels, and new payment rails while the core continues managing existing accounts and operations.
A model in which a licensed bank exposes its regulated banking infrastructure, including accounts, payments, and card issuance, to third parties via APIs. The bank retains the regulatory licence, the customer ledger, and the compliance accountability. Third parties access banking functionality without holding their own licence.
A ledger architecture in which the authoritative record of all transactions and balances for a banking programme sits within the bank's own infrastructure, not with a fintech partner or third-party processor. Required for regulatory compliance under CBUAE oversight frameworks for sponsored banking programmes.
A digital form of a country's sovereign currency issued directly by the central bank. Legally a central bank liability, not a commercial bank liability. In the UAE context, the Digital Dirham is CBUAE's CBDC. Banks participate as distributors of CBDC, not as issuers. Distinct from both tokenised deposits (bank liability) and stablecoins (private issuer liability).
Jordan's central bank and financial regulator, overseeing banks, payment systems, and, per its December 2025 instructions, Open Finance and API-based data sharing between banks and licensed payment and money-transfer companies.
The regulatory authority responsible for monetary policy, banking regulation, and payment system oversight in the United Arab Emirates. Issues regulations governing licensed banks, payment service providers, and digital payment token service providers.
Jordan's national instant payment system, operated by JoPACC and supervised by the CBJ. Enables 24/7 bank-to-bank and wallet-to-wallet transfers on ISO 20022 messaging, live since June 2020.
An infrastructure approach in which software is built and run entirely on cloud platforms rather than on-premise servers, using scalable, API-first architecture. Cloud-native banking platforms typically deploy with UAE data residency arrangements to meet local regulatory requirements.
Saudi Arabia's regulator for capital-markets fintech, including tokenisation and securities-adjacent digital asset activity, alongside SAMA. Relevant to any Saudi bank exploring digital asset or tokenised instrument distribution.
A banking architecture model in which products, services, and channels are built from modular, independently deployable components rather than monolithic systems. Each component, such as accounts, payments, or cards, can be configured, updated, or extended without modifying other components.
The central processing system of a bank, responsible for managing deposits, loans, and basic transactions. Legacy core banking systems are typically mainframe or client-server architectures built for branch banking operations rather than API-first digital delivery. Most were not designed for the real-time, multi-channel demands of modern digital banking.
A regulatory requirement that customer and transaction data be stored and processed within a specific jurisdiction, often the country in which the bank is licensed. UAE banking technology deployments typically require data residency arrangements aligned to CBUAE technology risk expectations.
The Dubai government entity responsible for information security policy and cyber resilience standards across government and, where applicable, regulated entities operating in Dubai. Relevant to technology risk and cybersecurity assessments for digital banking deployments in the emirate.
The UAE Central Bank Digital Currency (CBDC) issued by CBUAE. A two-tier model: CBUAE issues the Digital Dirham and licensed banks distribute it to customers via approved wallets. As of July 2026, the Digital Dirham is in advanced pilot stage with gradual expansion planned and full commercial launch targeted for late 2026. Distinct from private stablecoins and tokenised deposits.
A cloud-native platform deployed above a bank's existing core banking system that adds modern digital banking capabilities, including virtual accounts, real-time payments, card issuance, and embedded finance, without modifying or replacing the core. Enables banks to launch new products without core vendor dependency or operational disruption.
A bank-owned ledger that mirrors a partner programme's system in real-time, providing the bank with independent visibility and audit capability over outsourced ledger programmes. Enables regulatory compliance for sponsored banking and embedded finance arrangements where the operational ledger sits with a partner.
Financial services, such as lending, trading, and asset issuance, delivered through blockchain-based protocols and smart contracts rather than through licensed intermediaries. Explicitly brought within the UAE's expanded regulatory perimeter under FDL 6/2025.
The independent regulator of financial services conducted within DIFC. Oversees banks, brokers, asset managers, and other regulated entities operating under DIFC's common law framework.
An international financial centre in Dubai with its own legal system, courts, and regulatory framework. The Dubai Financial Services Authority (DFSA) regulates financial services within DIFC. Several international stablecoin issuers including Circle (USDC) and Ripple (RLUSD) hold DIFC-recognised status.
An AED-denominated digital payment token regulated under CBUAE's Payment Token Services Regulation (PTSR, Circular 2/2024). Requires a full CBUAE licence, appropriate only for authorised entities. A tokenised deposit issued by a licensed bank on a distributed ledger is the most defensible form of a Dirham Payment Token under the PTSR framework.
The integration of financial products, including accounts, payments, and lending, into non-financial platforms and experiences. In banking, embedded finance typically refers to a licensed bank providing its products via APIs to partner brands, enabling those partners to offer banking services under their own brand without holding a banking licence.
The intergovernmental body that sets global standards for combating money laundering and terrorist financing. UAE AML obligations, including Travel Rule requirements for virtual asset transfers, are aligned to FATF standards.
UAE federal law effective 16 September 2025 that expands the central banking regulatory perimeter to include DeFi, tokenised real-world assets, enabling technology providers, and AED 1 billion penalty exposure. Full compliance deadline is 16 September 2026. Separate from and does not replace PTSR.
A non-AED stablecoin permitted under CBUAE's PTSR framework following registration, not full licence. Approved instruments include USDC (Circle) and RLUSD (Ripple) as of December 2025, and USDU as of January 2026. Distinct from Dirham Payment Tokens which require full CBUAE licencing.
The independent regulator of financial services conducted within ADGM. Oversees banks, fund managers, and virtual asset service providers operating under ADGM's common law framework.
United States federal legislation establishing a regulatory framework for payment stablecoins, signed into law in July 2025. Part of the broader global trend of jurisdictions formalising stablecoin oversight alongside the EU's MiCA and Hong Kong's Stablecoins Ordinance.
Hong Kong's regulatory framework for licensing fiat-referenced stablecoin issuers, live since August 2025. One of several jurisdictions, alongside the EU, US, and Singapore, that have formalised stablecoin regulation in the past two years.
The identity verification and due diligence process financial institutions must complete before onboarding a customer, and periodically thereafter. A foundational compliance control across banking, payments, and virtual asset services in the UAE.
A pricing safeguard used in crypto-backed spend products to fix the conversion rate at the moment of transaction authorisation, protecting both the customer and the issuer from price movement between authorisation and settlement. One of the mechanisms that can make a volatile-asset spend product commercially defensible.
Singapore's central bank and integrated financial regulator, overseeing banking, capital markets, insurance, and payment services, including a live regulatory framework for stablecoins.
The European Union's comprehensive regulatory framework for crypto-assets, including stablecoins, live since December 2024. Widely referenced as an early mover among major jurisdictions formalising digital asset and stablecoin regulation.
A banking capability that allows a customer to access multiple investment classes, such as local equities, international stocks, and digital assets, from within a single banking app, typically through partner-integrated execution rather than the bank holding its own trading licence.
A digital-first bank that operates primarily or exclusively through a mobile app, without a traditional branch network. May hold its own banking licence or operate under a sponsor bank's licence via BaaS.
CBUAE's framework for API-based access to financial data and services, enabling third parties to access customer banking data and initiate payments with customer consent. Requires banks to implement standardised APIs for data sharing and payment initiation. Relevant to above-core platform deployments that provide the API infrastructure required for Open Finance compliance.
In digital banking, an orchestration platform is a software layer that coordinates and integrates multiple banking services, payment rails, and third-party capabilities through a unified API interface. Acts as the central control layer connecting core banking systems, payment networks, card processors, and digital channels.
The UAE's federal data protection legislation, governing the collection, processing, storage, and cross-border transfer of personal data. Requires consent management, data minimisation, breach notification, and rights such as erasure to be built into digital platforms operating in the UAE.
A licensed bank whose product, infrastructure, and partnership model is built around composing financial services from best-of-breed providers and delivering them through a single mobile-first interface, rather than operating every capability in-house. Typically combines its own banking licence with a set of licensed partners covering adjacent activities such as brokerage or digital assets.
CBUAE Circular 2/2024. UAE regulation governing third-party payment tokens and stablecoins. Creates two categories: Dirham Payment Tokens (full CBUAE licence) and Foreign Payment Tokens (registration). Transitional period ended 14 June 2025. Now fully in force. Separate from FDL 6/2025.
A security model in which system access is granted based on a user's role within an organisation rather than individually assigned permissions. In banking technology deployments, RBAC is required for regulatory compliance, ensuring that access to customer data, transaction processing, and configuration is restricted to appropriate personnel.
A physical or traditional financial asset, such as property, bonds, or commodities, represented as a digital token on a blockchain or distributed ledger. Tokenised RWAs are explicitly included in the expanded regulatory perimeter of FDL 6/2025.
Regulator for banks, payment service providers, and finance companies in Saudi Arabia, and, per the March 2026 licensing regime, open banking providers. The Kingdom's equivalent of CBUAE for banking and payments oversight.
SAMA's standardised API framework for account information and payment initiation services, issued November 2022 and moved to a formal licensing regime on 26 March 2026 - the Saudi counterpart to the UAE's Open Finance framework.
A card issuing architecture that is not tied to a single payment scheme, allowing a bank or platform to issue virtual and physical cards across multiple card networks depending on commercial and market needs.
A licensed bank that provides its regulatory licence, ledger, and compliance oversight to a fintech or enterprise partner under a BaaS arrangement, while the partner owns the customer-facing product and brand.
A category of AED-denominated stablecoin initiative backed by sovereign or quasi-sovereign capital, settling on blockchain infrastructure and expanding distribution through VARA-regulated platforms. Distinct from a bank-issued tokenised deposit and from a privately issued Dirham Payment Token, though it typically falls under the same PTSR licensing perimeter.
A digital asset designed to maintain a stable value relative to a reference asset, typically a fiat currency. Issued by a licensed non-bank entity. In the UAE, governed by PTSR as either a Dirham Payment Token (AED-pegged, full licence) or Foreign Payment Token (non-AED, registration). Legally distinct from a tokenised deposit (bank liability) and a CBDC (central bank liability).
A digital representation of a commercial bank's own deposit liability, issued on a distributed ledger. Legally equivalent to a traditional bank deposit. The bank is the issuer and the liability holder. No separate PTSR licence required beyond the existing banking licence. The most regulatory-defensible form of digital money for a licensed bank in the UAE.
A FATF-derived compliance requirement obliging virtual asset service providers to collect and share originator and beneficiary information for virtual asset transfers above a threshold, mirroring long-standing wire transfer rules in traditional banking. Central to VARA's supervisory expectations of licensed VASPs.
A sterling-denominated stablecoin framework under development by the Bank of England, currently at draft code stage as of the last review. Part of the global pattern of central banks and regulators formalising rules for regulated digital money.
The independent regulatory authority established in Dubai to oversee virtual asset service providers operating in or from Dubai, outside DIFC and ADGM. Issues licences for virtual asset activities including exchange, custody, and transfer. Digital asset features in banking products distributed in Dubai may fall within VARA's regulatory perimeter depending on the instrument and activity type.
An entity licensed to provide virtual asset services such as exchange, custody, broker-dealer, or transfer activity. In the UAE, VASPs are licensed by VARA in Dubai or by FSRA within ADGM. Banks distributing digital asset features typically route the regulated activity to a licensed VASP partner rather than holding the licence themselves.
A logical account that exists as an entry in a ledger system without requiring a separate physical account at a bank. Virtual accounts allow financial institutions to provision unlimited sub-accounts above their core banking system, enabling granular tracking of funds by customer, programme, or purpose without the overhead of creating individual core banking accounts.
A digitally issued card, typically available instantly at account opening, that can be used for payments before or instead of a physical card being produced. Usually paired with configurable spend controls and issued in a scheme-agnostic manner.
A unique International Bank Account Number issued at the sub-account or customer level within a virtual account structure, allowing each virtual account to receive payments directly without a separate underlying bank account.