Influencer Licensing in the UAE: NMC Permit Rules, Agency Liability, and Creator Compliance in 2026

The UAE's February 2026 Advertiser Permit closed the grey zone on paid social. Agencies face shared liability for unlicensed creators, with fines up to AED 1 million. Here is what every GCC brand needs to know.

On 1 February 2026, the UAE did something no other Gulf market had done so publicly: it closed the grey zone that let brands and creators run paid social campaigns with no paperwork. The new Advertiser Permit regime, enforced by the Media Regulatory Office (MRO) under the UAE Media Council, now requires every person and entity producing paid promotional content to hold a permit. There is no minimum follower count. There is no carve-out for "gifted" products. There is no grace period if you are a non-resident working through a Dubai-based brand. And the fines reach AED 1 million per infringement for serious breaches.

For agencies running influencer campaigns in Dubai, Abu Dhabi, and the northern Emirates, this is not a compliance footnote. It is a liability shift. When an unlicensed creator publishes a sponsored post for your client, the brand and the agency are exposed alongside the individual. After two years of advising GCC brands on paid social, we have watched the rules move from vague to specific to now openly enforceable, and most influencer contracts written before Q4 2025 are dangerously out of date.

This guide walks through what the UAE permit actually covers, how much it costs, how the rules compare to Saudi Arabia's GCAM regime, and what a defensible agency compliance stack looks like in 2026.

A Short History: From 2018 NMC Rules to the 2026 Advertiser Permit

The UAE's influencer licensing story started in March 2018, when the former National Media Council (NMC) introduced the Electronic Media Regulation. That original framework required anyone earning income from social media promotion to hold one of two things: a paid commercial licence through an approved free zone agency, or an individual e-Media licence from the NMC. The flat individual rate settled at AED 15,000 per year and remained the headline number for seven years.

In 2023, Federal Decree-Law 55/2023 replaced the fragmented media rules with a single national law, and the NMC was absorbed into the Media Regulatory Office (MRO) under the UAE Media Council. Cabinet Resolution 68 of 2024 expanded the scope of "media activity" to include content creators, digital advertising agencies, streaming platforms, and finfluencers (creators giving financial commentary).

The final piece dropped on 1 February 2026 with the Advertiser Permit. Under the new model, every paid promotion published from or targeted at UAE audiences must be backed by a valid permit. The permit is free for UAE residents for the first three years from February 2026, then renews at AED 1,000 per year. But that "free" permit sits on top of the trade or freelance licence the creator already needs, which is where the AED 5,000 to 15,000 costs come from.

Who Actually Needs a Permit

The MRO definition is deliberately broad. A permit is required if a creator produces any of the following and earns any benefit, monetary or in-kind:

• Paid sponsored posts for a brand
• Affiliate or referral links that generate commission
• Gifted product reviews, including free meals, hotel stays, and samples
• Paid partnerships with tourism boards, government entities, or free zones
• Paid shoutouts, story mentions, and link-in-bio placements
• Branded content on podcasts, Substacks, and newsletters distributed in the UAE
• Financial commentary or stock picks with any commercial relationship to the subject

Crucially, the rule is about the nature of the activity, not the size of the audience. A 2,000-follower wellness coach taking a free supplement package in exchange for a reel is in the same category as a one-million-follower entertainment creator on a six-figure retainer. Both need a permit. The MRO has made clear there is no de minimis threshold.

The Cost Stack for a Single UAE Creator

When clients ask us what a "licensed influencer" actually costs in 2026, the realistic total depends on their setup:

• NMC e-Media licence (individual): AED 1,500 per year if held directly without a trade licence. Rarely sufficient on its own after the 2026 changes.
• Dubai TECOM or Meydan Free Zone freelance permit: AED 7,500 to AED 12,500 per year depending on visa package, including one establishment card and one residence visa.
• Full trade licence under a media activity (Media City, twofour54 Abu Dhabi, SHAMS): AED 12,500 to AED 25,000 per year depending on office package and visa count.
• Advertiser Permit: Free for residents for three years from February 2026, AED 1,000 annual renewal afterwards.
• NMC classical licence for paid promotional activity: AED 15,000 per year where required for higher-tier commercial activity.

Realistic floor for a properly licensed full-time UAE creator: AED 12,000 to 18,000 per year, plus their corporate tax and VAT obligations once revenue crosses the relevant thresholds. Creators who try to operate from a tourist visa with no trade licence are now firmly outside the permitted zone.

Agency Liability: Why the Brand Pays If the Creator Is Unlicensed

This is the part most agencies underestimate. Under Cabinet Resolution 68 of 2024 and the enforcement pattern around the Advertiser Permit, liability for an unpermitted paid post does not sit only on the individual creator. It extends to:

• The advertiser (the brand whose product is promoted) — the entity that benefits from the promotion is treated as a co-publisher of the content.
• The agency that brokered or managed the campaign — if you negotiated the rate card, briefed the creator, or approved the content, you are in the chain of responsibility.
• The platform that hosted the ad — relevant for paid amplification on Meta, TikTok, or Snap when the ad account is managed from the UAE.

Penalties start at written warnings for first-time low-severity breaches but escalate quickly. Fines for promoting without an advertiser permit commonly land between AED 5,000 and AED 50,000 per infringement. Serious or repeat breaches, including posts that mislead consumers or promote unregulated financial products, can reach AED 1 million per incident under the UAE Media Council's wider enforcement powers. The MRO can also suspend licences, blacklist accounts from future permits, and refer cases to public prosecutors when health or financial harm is involved.

What this means in practice for agencies: the "influencer contract" you signed in 2024 that simply warrants the creator is "legally able to perform" is no longer enough. You need a document that names the specific permit, attaches a copy, binds the creator to maintain it for the duration of the campaign, and indemnifies the brand and agency if the permit lapses.

Enforcement Reality in 2026

Enforcement up to early 2026 was uneven. The MRO issued a wave of warning notices in late 2025 and published a public list of sanctioned accounts in the first quarter of 2026, focusing on three categories:

• Finfluencers promoting unregulated trading platforms, crypto tokens, and forex signal rooms. These got the fastest and largest penalties, often coordinated with the Securities and Commodities Authority.
• Non-resident creators publishing paid posts for UAE brands without partnering with a licensed local agency. Several travel and lifestyle creators had their content takedown-requested from platforms after the February 2026 deadline.
• "Gifted" review accounts in the F&B and wellness space that had been operating for years on the assumption that non-cash compensation was not captured by the rules. The MRO closed that interpretation publicly.

The pattern is consistent with how the UAE typically rolls out regulation: warnings and examples first, then progressively firmer enforcement against repeat offenders. Agencies who read this as "they will never actually fine me" are taking a bet against a regulator that has already demonstrated appetite to fine.

How the UAE Rules Compare to Saudi Arabia's GCAM Regime

Running a GCC-wide campaign means understanding both markets, because they are not aligned. Saudi Arabia's General Commission for Audiovisual Media (GCAM) introduced its Mawthooq advertising licence in 2022. Key differences:

• Duration: Saudi's licence is valid for three years for roughly SAR 15,000 (around USD 4,000). UAE's NMC classical licence is annual at AED 15,000. Saudi works out cheaper per year for full-time creators.
• Scope: Both cover paid and gifted content. Saudi applies GCAM rules in parallel with Maroof registration through the Ministry of Commerce, which verifies a creator's commercial account.
• Non-resident rules: Saudi is stricter. To run a campaign from outside KSA, you typically need a locally licensed creator or a registered Saudi entity. The UAE is marginally more flexible because free-zone agency partnerships allow a compliant model for international creators collaborating with a UAE agency of record.
• Content rules: Saudi has stronger cultural and religious review requirements built into the licence conditions. The UAE focuses more on commercial disclosure and advertiser transparency.

For cross-border campaigns — for example, an Abu Dhabi hospitality group reaching Riyadh audiences — the practical approach is to run two parallel creator pools: one UAE-licensed for UAE distribution, one KSA-licensed for Saudi distribution, with clear geo-targeting on paid amplification.

Disclosure Requirements: #ad, #sponsored, and the Permit Number

The MRO's disclosure rules are stricter than the ASA model in the UK or the FTC model in the US in one specific way: from February 2026, registered creators must display their Advertiser Permit number on their social media profiles. This is not optional and not platform-dependent. It applies to the bio or pinned post on every platform where the creator runs paid content.

In-post disclosure also has to be clear and unambiguous. Acceptable formats include:

• #ad placed at the start of the caption, not buried among twelve lifestyle hashtags
• #sponsored or #paid as a direct alternative
• Platform-native "Paid partnership with [brand]" tags on Instagram and TikTok, which are now treated as the gold standard because they render before the caption loads
• Spoken disclosure in the first 15 seconds of a video, not only on-screen text

Non-compliant patterns the MRO has flagged: hashtags hidden under "more," disclosures in the final frame of a reel, vague terms like "collab" or "partner," and stories without any disclosure beyond a brand tag.

A Practical Compliance Checklist for Agencies

This is the working checklist we apply to every campaign we run through Santa Media's social media management service. Adapt it to your internal process:

1. Vet the permit before briefing. Request a copy of the creator's trade or freelance licence, their NMC or MRO permit, and a screenshot of the permit number displayed in their profile. Do this before any commercial conversation, not after.
2. Verify the permit scope. Confirm the licence covers paid advertising activity specifically, not only content production. A "writer" licence without advertising scope does not cover sponsored posts.
3. Lock the contract. Your influencer agreement needs named permits, attached copies, a warranty that the permit remains valid through the content's live period (usually 12 months), and an indemnity that shifts enforcement cost to the creator if the permit lapses during the campaign.
4. Use a structured payment model. Pay through UAE-registered bank accounts against a tax invoice. Cash payments, crypto, and informal transfers increase exposure if the campaign is audited.
5. Brief on disclosure, not just creative. Include the exact disclosure wording in the creative brief. Assume the creator will not know the current rules, because most do not.
6. Capture evidence. Archive screenshots of the live post showing the disclosure and the permit number within 48 hours of publication. If the post is later edited or deleted, you need proof of compliance at the moment of publication.
7. Re-verify for non-residents. If the creator lives outside the UAE, the campaign should be routed through a UAE-licensed agency of record that can legally host the commercial relationship. Do not pay an overseas creator directly for a UAE-targeted ad.
8. Plan for finfluencer scrutiny. If the product touches finance, crypto, trading, or property investment, add a second review layer. Finfluencer content is the highest-enforcement category right now.

Free zones shape a lot of this in practice, and the interaction between free-zone licensing and influencer rules deserves its own read. Our guide to UAE free-zone marketing covers how creator-entity licences in TECOM, Meydan, SHAMS, and twofour54 fit into the wider compliance picture.

What Happens If You Work With an Unlicensed Creator

The short version: the brand and agency share in the penalty. Based on the enforcement pattern through Q1 2026, here is the realistic consequence chain:

1. MRO warning notice served on the brand, the agency, and the creator within two to six weeks of the complaint.
2. Content takedown request to the relevant platform. Meta and TikTok comply within 48 hours of a verified MRO request.
3. Fine of AED 5,000 to AED 50,000 per piece of infringing content for standard cases. A ten-post campaign can therefore run to AED 500,000 in exposure before any reputational cost.
4. Escalation to AED 1 million for repeated violations or cases involving financial or health misrepresentation.
5. Entry on the MRO's restricted-account list, which prevents the creator from obtaining a future permit and flags the agency to other regulators.

The knock-on effects matter more than the headline fine. Once a brand is named in an MRO notice, procurement teams at other brands start asking questions, media rates soften because audiences see the flag, and insurance premiums for advertising liability rise on the next renewal. We have seen the remediation budget for a single botched campaign exceed the original production cost by three to five times.

Building an Influencer Programme That Holds Up

The UAE market is not getting looser. The MRO is hiring, the UAE Media Council is funded, and the platforms are cooperating with takedown requests faster than they did in 2024. The agencies that win in 2026 are the ones whose compliance stack is boring: verified permits, tight contracts, native disclosure, audit-ready archives. The agencies that lose are the ones still running creator campaigns like it is 2021.

If you need help rebuilding your influencer programme around the 2026 rules, or running a single campaign end-to-end with a UAE-licensed creator pool, our team at Santa Media works with GCC brands on exactly this. Get in touch for a compliance audit of your current creator roster and a written recommendation within a week.

Frequently Asked Questions

Do I need an Advertiser Permit if I only post gifted content and do not take cash?

Yes. The MRO treats gifted products, free stays, meals, and any other non-cash benefit as compensation. The permit is required whenever there is a commercial relationship behind the content, regardless of whether money changes hands.

Can a UAE brand hire an overseas influencer without a UAE permit?

Not directly. The accepted compliant path is to route the engagement through a UAE-licensed agency of record that takes commercial responsibility for the campaign. Paying a non-resident creator directly for a UAE-targeted ad exposes the brand to enforcement action.

What is the difference between the NMC e-Media licence and the Advertiser Permit?

The e-Media licence is the underlying trade-style licence covering commercial media activity, priced at AED 1,500 for individuals or folded into a freelance or trade licence. The Advertiser Permit, launched February 2026, is the activity-specific permit allowing paid promotions and is free for residents for three years before a AED 1,000 annual renewal.

How does the UAE permit compare to Saudi Arabia's GCAM Mawthooq licence?

Saudi's licence runs three years for around SAR 15,000 and is tied to Maroof commercial registration. The UAE's combined stack renews annually and is administered by the MRO. For GCC-wide campaigns, you typically need separate creators permitted in each jurisdiction plus clean geo-targeting, rather than assuming one permit covers both markets.

What is the first thing an agency should change in its contracts right now?

Add three clauses: a named-permit warranty with the permit attached as a schedule, a continuing obligation to maintain the permit through the campaign period, and an indemnity that shifts MRO fines to the creator if the permit is withdrawn or expires. This converts a theoretical compliance risk into a contractual one that sits with the right party.