XTransfer gets CBUAE approval, 4 payment checks for UAE clinics

XTransfer said on 3 September 2026 that it has secured in-principle approval for a Retail Payment Services Licence from the Central Bank of the UAE (CBUAE), a development UAE clinics should read as another signal that payment vendors serving healthcare are moving inside the UAE regulatory perimeter.

The highest-stakes readers are clinic owners, CFOs and COOs. Dubai clinics licensed by the Dubai Health Authority (DHA), Abu Dhabi providers overseen by the Department of Health - Abu Dhabi (DOH), and northern emirates providers regulated by the Ministry of Health and Prevention (MOHAP) depend on third-party payment rails for card collection, payment links, deposits, refunds and cross-border patient receipts. A new CBUAE-approved provider does not change health licensing rules, but it should change vendor due diligence.

What CBUAE approval covers

XTransfer's release, also carried by The Manila Times, said the licence would allow XTransfer to serve mainland UAE clients after it completes pre-issuance conditions. The company framed the UAE as part of its Middle East and Africa strategy for B2B cross-border trade payments.

"The UAE is one of the world's most important trade hubs and an essential gateway between Asia, the Middle East and Africa." Bill Deng, founder and chief executive officer, XTransfer.

The relevant rule is the CBUAE Retail Payment Services and Card Schemes Regulation, issued under Circular No. 15/2021. It covers nine retail payment service categories, including payment account issuance, payment instrument issuance, merchant acquiring, payment aggregation, domestic fund transfers, cross-border fund transfers, payment token services, payment initiation and payment account information services.

For clinic CFOs, the number to check is the licence category. Public summaries of the regulation put initial capital requirements between AED 100,000 for a Category IV licence and AED 3 million for a Category I licence. The exact category matters because cross-border fund transfer, acquiring and aggregation permissions are different operating rights.

Why clinics should care

Healthcare providers in Dubai already operate across several payment use cases. A dermatology clinic may take advance deposits by payment link. A dental practice may issue card refunds after a treatment-plan change. A fertility clinic may collect from overseas patients. A physiotherapy centre may reconcile co-payments against insurer remittances. Each workflow creates a record that finance teams may need for audit, patient disputes and value-added tax documentation.

The issue is wider than patient convenience. It touches working capital. A one-day change in settlement timing affects cash flow for clinics with daily card volume. A delayed refund creates complaints for front-desk teams. A weak reconciliation file adds manual work for revenue-cycle staff. For international patients, foreign exchange spreads and bank charges can change the actual net receipt in AED.

Operators should ask payment vendors for four checkable items before changing provider:

• The exact CBUAE licence category, approval date and whether approval is final or in-principle.
• Settlement timing in business days for UAE-issued cards, international cards and payment links.
• Refund cut-off times, dispute handling timelines and chargeback evidence requirements.
• A sample reconciliation file that maps invoice number, patient receipt, insurer share, co-pay and refund reference.

Insurers should watch the same trend. Daman, Thiqa and Sukoon are named here only as live UAE payer examples; XTransfer has not announced a healthcare-specific payer integration. The practical question for payer operations is whether payment vendors can support cleaner matching between patient responsibility, provider invoices and remittance advice.

What to do next

Dubai operators should start with DHA facility rules and their merchant agreement. Abu Dhabi operators should check DOH requirements and insurer network terms. Sharjah, Ajman, Ras Al Khaimah, Fujairah and Umm Al Quwain operators should check MOHAP licensing conditions and the payment processor's CBUAE status. If a clinic is in Dubai Healthcare City, it should also account for Dubai Healthcare City Authority requirements.

A reasonable procurement file should include the vendor's CBUAE licence evidence, data residency statement, PCI DSS status if card data is touched, service fees, refund charges, settlement schedule and named UAE banking partner. Where prices are not public, ask for a written quote showing the percentage fee, fixed AED fee per transaction, chargeback fee, refund fee and foreign exchange spread. Do not compare only headline rates.

XTransfer's approval is an early-stage regulatory event, rather than a clinic payment mandate. The next facts to watch are the final licence issuance date, licence category, UAE banking partners and any healthcare-specific integrations. Clinic groups planning payment upgrades in 2026 should tighten payment vendor due diligence before changing front-desk, online booking or international patient collection workflows.

For provider verification before booking or partnering, readers can use the UAE Open Healthcare Directory for licensed clinics and providers.