The CBUAE's Payment Token Services Regulation stopped being a "future consideration" a long time ago. The transitional period that let existing operators keep running while they sought approval ended on 14 June 2025. There is no further grace period. If your institution hasn't mapped its exposure to PTSR, this is no longer a strategy conversation - it's a compliance gap.

PTSR - CBUAE Circular 2/2024 - governs third-party payment tokens and stablecoins in the UAE. It draws a clean line between two categories of instrument, and that line determines what licence, if any, you need. Dirham Payment Tokens are AED-denominated and require a full CBUAE licence to issue. Foreign Payment Tokens are non-AED and require CBUAE registration - a materially lighter bar than a full licence, but a bar nonetheless. Any bank or fintech touching either category without the corresponding approval is now operating outside the regulation, not ahead of it.

The market has already moved

While banks were deciding whether PTSR applied to them, the market answered the question by building. On the Foreign Payment Token side, USDC and RLUSD were approved and in market as of December 2025. USDU followed in January 2026 as the first USD-backed Foreign Payment Token with reserves held at UAE banks, regulated by ADGM's FSRA. On the Dirham Payment Token side, AE Coin has been live since October 2024 as the first licensed AED stablecoin, Zand Bank received CBUAE approval for its AED stablecoin in November 2025 - the first digital-native bank to issue an AED stablecoin on public blockchains - and RAKBank received in-principle CBUAE approval in January 2026.

Four institutions, two instrument categories, all operating under a regulation that is now fully in force with no transitional cover. That is the competitive backdrop every UAE bank is compliance-planning against in the second half of 2026.

PTSR didn't create a new asset class to think about someday. It created two licensing pathways that are already occupied.

The most defensible pathway for a bank

There is a third option that sits outside the Dirham and Foreign Payment Token licensing questions entirely: the tokenised deposit. Because it's a bank's own deposit liability issued on a distributed ledger - legally equivalent to a traditional deposit - a licensed bank doesn't need a separate PTSR licence to offer one. HSBC UAE proved this isn't theoretical when it launched a live tokenised deposit programme on 22 June 2026: a single-bank, closed network spanning AED and five other currencies, serving corporate and institutional clients. It is now the primary in-market precedent for how a bank issues its own liability on-chain without stepping into the Dirham Payment Token licensing regime.

What to do before Q4

For institutions that haven't formally assessed where they sit relative to PTSR, the checklist is short but urgent:

  • Determine whether any product, pilot, or partner integration touches Dirham or Foreign Payment Tokens, and whether the corresponding licence or registration is in place.
  • Evaluate the tokenised deposit pathway as the lowest-friction entry point into digital money, given it requires no new licence beyond your existing banking licence.
  • Confirm your technology partner's platform can support both PTSR instrument categories, not just one, so a future decision to issue a Dirham or Foreign Payment Token doesn't require a re-platform.

We built our orchestration platform's UAE deployment model with exactly this in mind. The platform is structured to support both the Dirham Payment Token and Foreign Payment Token pathways, so a bank that starts with a tokenised deposit isn't boxing itself out of stablecoin issuance later. PTSR rewards banks that treat this as infrastructure planning now, not a licensing scramble in Q4.