Key takeaways
- Category 3C covers asset management, custody (excluding funds and crypto assets), trust services, and stored value issuance — a broader, relationship-oriented licence.
- Category 3D is narrowly focused on core Payment Services: Payment Accounts, Payment Transactions, and Payment Instruments.
- Base capital is US $500,000 for Category 3C (with limited exceptions) versus US $200,000 for Category 3D.
- Both categories fall under Section 6.12 of PIB for operational risk — but the specific requirements differ based on the authorised activities of each.
- Conduct of Business obligations differ materially: 3C firms face fiduciary and custody duties; 3D firms face payment-specific disclosure and security requirements.
Financial services firms considering the DIFC as a base face a structurally important decision early in the licencing process: whether their intended activities fall under Category 3C or Category 3D of the DFSA's Prudential — Investment, Insurance Intermediation and Banking (PIB) Module. The two categories are often confused because both can involve Money Services — but they cover distinct segments of the financial services landscape and carry substantially different regulatory obligations.
What is a Category 3D licence?
Under the PIB Module, an Authorised Firm is classified as Category 3D if its licence authorises it to Provide Money Services and it engages in one or more of the following activities: providing or operating a Payment Account; executing a Payment Transaction on a Payment Account provided or operated by another person; or issuing a Payment Instrument.
To be classified under Category 3D, the firm must not meet the criteria for Categories 1, 2, 3A, 3B, or 5. This exclusionary criterion confirms that Category 3D is specifically designed for firms focused on defined Payment Services — not asset management, custody, or trust activities. The business model is inherently transactional: clients interact with the firm to initiate, execute, or settle payments, rather than entering into ongoing fiduciary or investment management relationships.
What is a Category 3C licence?
Under Rule 1.3.5 of the PIB Module, an Authorised Firm is in Category 3C if its licence authorises it to carry on one or more of the following Financial Services:
- Managing Assets
- Managing a Collective Investment Fund
- Providing Custody — other than for a Fund and other than in relation to Crypto Assets
- Managing a PSIA (PSIAr — restricted Profit Sharing Investment Account)
- Providing Trust Services — where the firm acts as trustee in respect of at least one express trust
- Providing Money Services — specifically where it issues Stored Value
Like Category 3D, a Category 3C firm must not meet the criteria of Categories 1, 2, 3A, 3B, or 5. The scope is materially broader — encompassing asset management, custody (with specific carve-outs for funds and crypto assets), trust services, and a specific form of Money Services: issuing Stored Value. This is the critical distinction between 3C and 3D on the Money Services dimension: 3C covers stored value issuance; 3D covers payment account operation, transaction execution, and payment instrument issuance.
💡 Pro tip. A firm that issues both Stored Value and Payment Instruments needs to assess carefully which activities are primary and whether a single licence category covers its full scope. Where activities span both categories, early engagement with the DFSA at the authorisation stage — before submitting a formal application — is the most efficient way to resolve the classification question.
Capital requirements
The PIB Module specifies different Base Capital Requirements under Rule 3.6.2. The difference reflects the broader scope and complexity of activities typically undertaken by Category 3C firms:
Regarding the Expenditure Based Capital Minimum, Section 3.7 of PIB applies to both categories. Rule 3.7.2(a) specifies that for firms holding Client Assets or acting as Administrator of an Employee Money Purchase Scheme, the Expenditure Based Capital Minimum is 18/52 of their relevant annual expenditure.
⚠️ Common mistake. The fund manager capital exceptions under Category 3C are narrow. They apply only where Managing a Collective Investment Fund is the sole Financial Service conducted. A firm that manages a fund and also provides custody or trust services reverts to the standard US $500,000 requirement. Capital planning must account for the full scope of authorised activities — not just the primary line of business.
Operational risk requirements
Section 6.12 of PIB applies to Authorised Firms in Category 3B, 3C, 3D, or 4 that undertake one or more of the following Financial Services: Providing Custody, Managing Assets, Managing a Collective Investment Fund, Providing Trust Services, or Providing Money Services. Both Category 3C and Category 3D firms fall under this section based on their authorised activities.
Appendix 6 of PIB details the specific application. Firms Managing Assets or Managing a Collective Investment Fund — services typically associated with Category 3C — are subject to Systems and Controls Requirements and Professional Indemnity Insurance (PII) cover, but not necessarily an additional capital charge under Chapter 6. Category 3D firms face operational risk requirements focused on the specific risks of payment service operations: transaction security, system resilience, and fraud controls.
Notification and reporting obligations
Rule 3.2.6(1) of PIB mandates that Authorised Firms in Category 3B, 3C, 3D, or 4 must notify the DFSA immediately — and confirm in writing — if their Capital Resources fall below 120% of their Capital Requirement. This notification obligation applies equally to both categories and is a continuing obligation, not a one-time threshold assessment.
Section 2.3 of PIB outlines general reporting requirements. Rule 2.3.8(1) requires submission of any annual return specified in Table 1 of Section A2.4 of App2 within four months of the financial year-end. Rule 2.3.8(2) requires submission of other returns within one month after the relevant reporting period ends.
Conduct of Business obligations
The Conduct of Business (COB) module applies to every Authorised Firm with respect to carrying on any Financial Service in or from the DIFC. The specific obligations differ materially between Category 3C and 3D, reflecting the fundamentally different nature of the client relationships involved.
Key differences summary
| Aspect | Category 3C | Category 3D |
|---|---|---|
| Authorised Financial Services | Managing Assets, Collective Investment Funds, Custody (excl. funds & crypto), Trust Services, Stored Value issuance | Payment Accounts, Payment Transactions, Payment Instruments |
| Base Capital Requirement | US $500,000 (exceptions for fund-only managers: US $140K or US $70K) | US $200,000 |
| Business focus | Asset management, custody, trust services, stored value issuance | Core Payment Services |
| Operational risk | PII required for asset managers; systems and controls requirements | Focused on payment security, resilience, and fraud controls |
| Client relationships | Ongoing — asset management, fiduciary, and custody mandates | Primarily transactional payment service interactions |
| COB obligations | Fiduciary duties, custody safeguarding, stored value disclosures | Payment-specific disclosures, T&Cs, system security (COB App 7) |
🔍 Industry insight. The most common misclassification error is firms assuming that any Money Services activity defaults to Category 3D. The DFSA framework distinguishes sharply between issuing Stored Value (Category 3C) and operating Payment Accounts or issuing Payment Instruments (Category 3D). A prepaid card issuer that also holds balances on behalf of users may find its activities spanning both definitions — making early regulatory engagement essential before the authorisation application is submitted.
ComplyFactor is a specialist AML and regulatory compliance advisory firm working with MSBs, PSPs, fintechs, and VASPs across multiple jurisdictions. Our advisors hold CAMS certification and bring direct regulatory and banking experience to every engagement.
