AAA Weekly · UAE Business Pulse

Issue 07 · Week of 14–20 September 2026

Money gets dearer, the deadline gets closer, and Abu Dhabi closes the gap

The Central Bank lifted the base rate to 3.90 per cent from 17 September, the corporate tax return falls due on 30 September, and Abu Dhabi climbed eight places in the Global Financial Centres Index while Dubai slipped two. Ten developments from the week of 14 to 20 September, and what each one means for your company.

23 min readBanking · Corporate tax · Compliance · Property · Financial centres · Trade · Economy

This week at a glance

  • 3.90% UAE base rate from 17 September. Up 25 basis points
  • 30 Sep Corporate tax return and payment. 31 Dec 2025 year ends
  • 15 Sep Central Bank licensing grace period closed. Fines reach AED 500m
  • AED 6.5bn Dubai property, week to 20 September. Across 2,366 sales
  • 09th Dubai in the Global Financial Centres Index. Abu Dhabi 13th, up eight
  • 103.87 USD Brent at Friday’s settlement. A third straight week above 100

Banking

Borrowing just got dearer, and the Fed says once more this year

The Federal Reserve raised its target range by 25 basis points on 16 September, to 3.75 to 4.00 per cent, and signalled one further rise before the year is out. The dirham is pegged to the dollar, so the decision was never going to stop at the American border. The Central Bank of the UAE raised its Base Rate on the Overnight Deposit Facility to 3.90 per cent from 3.65 per cent, effective Thursday 17 September. The rate applied to borrowing short-term liquidity from the Central Bank was held at 50 basis points above the Base Rate, across all standing credit facilities.

The Base Rate is not a retail price. The Central Bank describes it as a signal of the general direction of monetary policy and a floor for overnight money market rates. What reaches a company is the repricing that follows it, and that depends on the contract rather than the announcement. A fixed-rate term loan does not move. A facility priced over EIBOR moves at the next reset, whether or not anyone writes to you about it. An overdraft usually moves fastest of all.

The part worth holding on to is the guidance rather than the quarter point. One 25 basis point step on a modest facility is a rounding error in most budgets. A tightening cycle with another rise flagged for this year, arriving on top of an oil price above 100 dollars, is a different proposition, because it changes the price of money and the price of inputs in the same quarter. No individual official was quoted in the Central Bank statement. The decision took effect the day after it was published, which is the normal course, and there was no transition period for anyone still on a floating rate.

  • 3.90 per cent UAE Base Rate, effective 17 September
  • 25 bps The rise, tracking the Federal Reserve

Why it matters

Check the pricing clause in every facility you hold, not the headline. Fixed-rate debt is unaffected this week. Anything priced over EIBOR reprices at its next reset date, and an overdraft may already have moved. If another rise lands before December, the cost of a working capital line taken in January will not be the cost of the same line in March. Model the facility at the higher rate now rather than after the letter arrives.

  1. Borrowers on variable rates
  2. Mortgage holders
  3. Companies refinancing
A quarter point is not an emergency, and we would not treat it as one. What changed this week is direction, not level. For two years the sensible planning assumption was that money would get cheaper eventually. That assumption is now wrong, and a business that built a growth plan on falling rates should rebuild it on flat or rising ones. The practical move is dull and effective. Read the repricing clause, find the reset date, and put the higher number in the cash flow before the bank does. If your borrowing is fixed, or you carry no debt at all, this story changes nothing for you this quarter and you should spend the attention on 30 September instead.

Corporate tax

Ten days to the corporate tax return, and nil is still a filing

The week closed with ten days left on the clock. Taxable persons whose first or second tax period ended on 31 December 2025 must file the corporate tax return and pay whatever is due by 30 September 2026. The window is nine months from the end of the tax period, which is where that date comes from. The Federal Tax Authority has called on all persons subject to corporate tax to file and pay within the specified timeframes to avoid late-payment penalties, and has said nothing since to suggest the date is moving.

Two points get missed every cycle. The first is that a return is required whether or not any tax is payable. A dormant company, a company in its first loss-making year and a company that elected Small Business Relief all file. The second is that relief is not an exemption from the paperwork. Small Business Relief applies where revenue does not exceed AED 3,000,000 in the tax period and in every previous tax period, it has been extended to tax periods ending on or before 31 December 2029, and it is claimed in a return. A company that decides it qualifies and then files nothing has not claimed anything.

The third thing, and the one that costs money later rather than now, is records. Transaction records, an asset register, liability documentation and ownership records have to be maintained and produced on request, and that obligation runs through the tax period regardless of whether relief was claimed. The penalty regime attaches to the failure to maintain them as much as to the failure to file. For a free zone company the return is also where the qualifying free zone position gets tested, so the filing is not a formality even where the rate on qualifying income is nil.

  • 30 Sep 2026 Return and payment deadline for 31 Dec 2025 year ends
  • AED 3,000,000 Small Business Relief revenue threshold, now running to 2029

Before 30 September

  • File even where the tax due is nil. A dormant company still files a return.
  • If you are claiming Small Business Relief, claim it in the return. Silence is not an election.
  • Free zone companies should test the qualifying income position before filing, not after.
  • Have the records ready: transactions, assets, liabilities and ownership. They are requested, not assumed.
  1. Every registered taxable person
  2. Free zone companies
  3. Dormant entities
This is the one item on the page with a penalty attached to missing it, which is why it sits second and not tenth. The common failure we see is not avoidance. It is a founder who believes that no profit means no obligation, or that a free zone licence means the return is somebody else’s problem. Neither is true. The second failure is leaving the qualifying free zone analysis until the week of the deadline, when the answer depends on transfer pricing documentation that takes longer than ten days to assemble. And Again Advisory coordinates the filing and the paperwork. We do not approve anything and we do not promise a tax outcome. If your year end is not 31 December, this deadline is not yours, and your own nine months will be a different date.

Compliance

The Central Bank’s grace period closed on Tuesday

Federal Decree-Law No. 6 of 2025 consolidated the supervision of banking, finance and insurance business under the Central Bank of the UAE. Entities already carrying on a financial or insurance activity without the right authorisation were given one year to regularise their position. That year ran out on 15 September 2026, which fell on the Tuesday of this week. There was no announcement to mark it. Deadlines of this kind rarely get one.

The scope is wider than the word financial suggests to most owners. It reaches insurance brokerage and intermediation, trade credit and export credit insurance, the extension of credit terms offered as a service rather than as an incident of a sale, banking and payment services, and financial advisory inside regulated sectors. It reaches entities licensed in the non-financial free zones, which is the part that catches people, because a DMCC, JAFZA, RAKEZ, Meydan, SAIF Zone or IFZA licence is not an authorisation to conduct a regulated financial activity. Firms in the DIFC and ADGM, supervised by the DFSA and the FSRA respectively, sit outside this regime and are not affected.

The penalty range is the reason to read the activity list rather than assume. Unlicensed financial activity carries imprisonment and fines stated as running from AED 50,000 to AED 500,000,000. That upper figure is not a number anyone expects to see applied to a small brokerage, and the spread is wide enough to be a supervisory instrument rather than a tariff. The useful reading is the lower bound. AED 50,000 is a real number for a small company, and it attaches to an activity many owners have never thought of as regulated at all, such as letting a customer pay in instalments as a standing commercial offer.

  • 15 Sep 2026 The day the regularisation period expired
  • AED 50,000 The floor of the penalty range. The ceiling is AED 500,000,000

What to check this week

  • List what you actually do, not what your licence says. The activity governs, not the label.
  • Offering customers credit terms as a service is inside the scope. Ordinary trade settlement is not.
  • A non-financial free zone licence is not an authorisation. DIFC and ADGM firms are outside this regime.
  • If you find an exposure, take advice before you file anything. Self-reporting has a sequence.
  1. Free zone licence holders
  2. Brokers and intermediaries
  3. Firms offering credit terms
Most companies reading this are not affected, and we would rather say so plainly than manufacture an alarm. If you sell goods, bill for services, or run a consultancy, you are not conducting a financial activity because you occasionally invoice on 60 days. The businesses that should read the activity list twice are narrower: anyone broking insurance on the side of another licence, anyone running a payments or remittance function for customers, and anyone whose real commercial proposition is finance dressed as a sale. The risk in that last group is genuine, and it has been sitting quietly under a free zone licence for a year. The grace period was the cheap way to fix it. That option closed on Tuesday.

Property

Dubai sold far fewer homes for nearly the same money

Dubai recorded AED 6.5 billion of direct residential sales in the week to 20 September, across 2,366 transactions. Value fell 6.07 per cent on the week. Volume fell 18.86 per cent. Those two numbers do not move together, and the gap between them is the story. Roughly one sale in five disappeared while roughly one dirham in sixteen did, which means the average ticket rose sharply even as the market thinned. Average price came in near AED 1,700 per square foot, down 0.32 per cent, and the source itself cautions that a weekly price per square foot reflects the mix of projects and areas sold rather than pure appreciation.

Set that against the fortnight before it and the shape is clearer. The week of 07 to 11 September carried AED 10.67 billion of total registrations, of which AED 6.78 billion was sales across 2,931 transactions, AED 2.80 billion was mortgage activity and AED 1.09 billion was gift transfers. August closed at AED 27.89 billion of sales across 11,600 transactions, or AED 46.22 billion across 15,611 records once mortgages and gifts are counted. There were 193 deals above AED 10 million in August against 149 in June, on an average transaction of AED 2.40 million, and the largest single sale was AED 79 million at Orla Infinity on Palm Jumeirah. Year to date through August the market stood at AED 523.44 billion, of which AED 349.83 billion was sales.

The pricing signal underneath is the one that has changed. Cavendish Maxwell put the August average at AED 1,636 per square foot, down 1.7 per cent year on year and down 1.3 per cent over three months, which is the first annual decline since February 2021. So the top of the market is busier while the broad average is softer, and the weekly volume is falling faster than the weekly value. That is what a market looks like when the buyers who need finance step back and the buyers who do not keep going. A base rate that rose on 17 September will not have made that any easier for the first group.

  • AED 6.5bn Direct sales in the week to 20 September
  • 2,366 Transactions, down 18.86 per cent on the week

Why it matters

Thin volume with a firm average is not the same as a rising market, and it is not a crash either. It means the mix changed. If you are selling a mid-market apartment, your buyer pool is smaller this month than last and more of it is rate-sensitive. If you are buying with cash, competition has fallen. If you are a developer pricing a launch, read the 18.86 per cent before you read the 0.32 per cent. One week is a data point rather than a trend, and September carries a seasonal return-to-market effect that has not fully arrived yet.

  1. Buyers with finance approved
  2. Developers pricing launches
  3. Landlords
We read this as a normalisation rather than a turn, with one reservation. The reservation is that the first annual price decline since February 2021 and the first rate rise in this cycle have now landed within a few weeks of each other, and they push the same way. Neither is dramatic on its own. Together they mean that a purchase modelled in June on flat prices and falling rates is being modelled wrong. For a business owner the practical question is simpler than the market question. If you are buying commercial or residential space to sit in rather than to trade, a softer average and a smaller buyer pool is an opening, not a warning, and you should be negotiating harder than you were in the spring. If you are holding stock to flip, the exit is getting narrower.

Financial centres

Abu Dhabi climbed eight places. Dubai lost two and gained points.

The fortieth edition of the Global Financial Centres Index was published on 16 September. Dubai ranks ninth in the world with a rating of 750, which is two places lower than the last edition and eight rating points higher. Abu Dhabi ranks thirteenth with 746, up eight places and 18 rating points. Riyadh sits at 46th on 713, up 15 places. The top of the table reads New York on 761, London 757, Hong Kong 756, Singapore 755 and Shanghai 754. The index researched 139 centres, included 117 in the main table, and drew on 144 quantitative factors with 39,531 assessments from 6,147 respondents.

A fall of two places on a gain of eight points is the kind of result that gets reported two different ways in the same week, and both readings are true. Dubai improved on its own measure and was overtaken anyway, because the band between sixth and tenth is now four rating points wide. On the sub-indices Dubai ranks first in the world for fintech and second for professional services, sixth for reputation, ninth for infrastructure and tenth for human capital. That is a centre that competes on what it does rather than on how big it is, and human capital at tenth is the number that will decide the next edition.

Abu Dhabi’s eight-place move is the more interesting one for anyone choosing where to sit, because four rating points now separate it from the top ten. Hamza Dweik of Saxo Bank said that Riyadh “is emerging as a powerhouse driven by the scale of the Saudi economy and the investment opportunities created by Vision 2030”, and added that “the region is becoming more complementary than competitive”. That is a fair description of what the table shows. Three Gulf centres moved up the index in the same edition, and they did it in different columns.

  • 09th / 750 Dubai, down two places and up eight rating points
  • 13th / 746 Abu Dhabi, up eight places and 18 rating points

Why it matters

An index rank does not change your licence, your tax position or your bank account, and nobody should relocate over two places. What it does change is the conversation with an overseas counterparty, an investor or a compliance officer who has never been here and is looking for an external reference. Dubai first in the world for fintech is a usable line in a funding deck. Abu Dhabi four points off the top ten is a usable line when a client asks why you chose ADGM. Treat it as evidence, not as strategy.

  1. Fund managers
  2. Fintech founders
  3. Firms choosing a centre
We would not choose a jurisdiction on this index and we would not ignore it either. The honest position is that for the overwhelming majority of the companies we set up, the choice between Dubai and Abu Dhabi turns on the activity list, the visa allocation, the cost of the licence and where the clients are, none of which appears in the Global Financial Centres Index at all. The index matters for a narrow group: regulated firms, fund managers and anyone whose investors ask where the money is domiciled. For that group, the useful finding this week is not Dubai’s two places. It is that Abu Dhabi closed eight and is now within four rating points of the top ten, which makes the ADGM conversation easier than it was in March.

Trade and logistics

Fujairah now reaches Abu Dhabi’s industrial city by rail

Etihad Rail Freight, AD Ports Group and Fujairah Terminals launched a direct rail cargo service on 20 September running from Fujairah Terminals to the Industrial City of Abu Dhabi. Cargo landing on the east coast can now move inland by rail rather than by road for the whole distance. The operational change that matters more than the service itself is that the industrial city has been granted a UN Locode, which means it can be named as the final destination on a bill of lading rather than appearing as an onward trucking leg after the port.

Customs clearance, inspection and cargo release now take place at the industrial city. For an importer that is the difference between clearing at a port and clearing at the factory gate, and it removes a handover that has historically been where time and paperwork are lost. Omar Alsebeyi, Chief Executive of Etihad Rail Freight, said the combination of rail connectivity with customs-enabled inland cargo handling supports customers to move goods more efficiently. Saif Al Mazrouei, Chief Executive of the Ports Cluster at AD Ports Group, described the partnership as enabling more seamless, reliable and resilient cargo flows.

What is not published is the part a shipper would want. There is no stated capacity, no tonnage, no transit time against the road alternative and no tariff. Until those exist, this is a route that has opened rather than a saving that can be modelled, and the honest thing to say is that the commercial case has to be quoted rather than assumed. The strategic logic is clear enough without them. Fujairah sits outside the Strait of Hormuz, and in a year when war risk premiums have repriced everything that passes through the strait, a working inland corridor from the east coast is worth more than its tonnage suggests.

  • 03 partners Etihad Rail Freight, AD Ports Group and Fujairah Terminals
  • 01 UN Locode The industrial city can now be booked as a final destination

If you import or export

  • Ask your forwarder to quote the rail leg against the road leg. The tariff is not published.
  • Check whether naming the industrial city as final destination simplifies your bill of lading.
  • Clearance moves inland. Confirm who handles inspection and release under your current terms.
  • Fujairah sits outside the Strait of Hormuz. That is the routing argument, not the speed.
  1. Importers and exporters
  2. Freight forwarders
  3. Manufacturers in ICAD
Infrastructure announcements are the easiest thing in this region to over-read, so here is the limit of it. A new rail service with no published tonnage, transit time or tariff cannot be put into a landed cost model this week, and any consultant who tells you it will cut your freight bill is guessing. What is real is the UN Locode. A destination that can be booked directly, with customs handled on site, removes a documented handover from the chain, and handovers are where small importers lose days they never get back. If your cargo comes through Jebel Ali and stays in Dubai, none of this touches you. If it lands in Fujairah and ends up in Abu Dhabi, ask for a quote in October rather than a press release.

Economy

Oil closed the week above 100 dollars, and that is your cost base

West Texas Intermediate for October settled at 100.30 dollars a barrel on Friday 18 September, and Brent for November at 103.87 dollars. WTI gained roughly 01 per cent on the week, a third consecutive weekly rise, while Brent eased roughly 01 per cent. The two moving in opposite directions in the same week is itself a signal about where the tightness sits, and it sits at the front of the curve. October WTI traded more than 02 dollars above November, which is the market paying a premium for a barrel now rather than a barrel in six weeks.

The supply picture behind it is not about production. Refined product exports from the region remain at roughly 25 per cent of pre-war volume because processing infrastructure is still damaged. Saudi Arabia declared force majeure on European deliveries and halted October term cargoes to Europe, after a Houthi attack on the East-West pipeline, a line rated at 7,000,000 barrels a day and already under repair. Diesel surged to a record in the United States later in the week. A crude price is a headline. A diesel price is an invoice.

For a company in the UAE the relevant number is rarely the crude price and almost always the refined one, because that is what reaches the fuel card, the freight quote, the generator and the delivery contract. Retail fuel is set monthly by the Fuel Price Committee, so a move in the third week of September shows up in the October price rather than immediately. The compounding problem is the one worth naming. Input costs and the cost of money rose in the same week, and a business that passes neither through to its own prices absorbs both in the same margin.

  • 103.87 USD Brent for November at Friday’s settlement
  • 25 per cent Regional refined product exports against pre-war volume

Why it matters

Retail fuel in the UAE is reset monthly, so a September move in crude lands in the October pump price rather than today. If you quote fixed prices on delivery, freight or plant hire, look at the fuel assumption inside those quotes before the month turns. Diesel is the exposure that hurts small operators, not petrol, and diesel is the product with the tightest supply story behind it right now.

  1. Logistics and transport
  2. Manufacturers
  3. Anyone with a fuel line in the budget
The uncomfortable arithmetic of this week is that the cost of money and the cost of fuel both moved up, and they hit the same kind of company hardest. A logistics SME running trucks on a facility priced over EIBOR takes both. A software business with no debt and no fleet takes neither. Most companies sit somewhere in between, and the useful exercise is to find out which one you are before October rather than after. Our view is that fixed-price contracts written in the summer are the real exposure here. If you have quoted a twelve-month delivery rate on a fuel assumption from June, that contract is now less profitable than your model says, and the time to renegotiate it is while you can still point at a published oil price rather than at a bad quarter.

Tourism

Arabian Travel Market moved to September, and Dubai’s numbers moved with it

Arabian Travel Market ran from 14 to 17 September at the Dubai World Trade Centre, shifted out of its usual spring slot after a disrupted year. More than 180 exhibitors from 30 countries attended, under the theme Travel 2040, with an 850 square metre technology and innovation hub and a new ATM Travel Tech strand. Danielle Curtis, Regional Portfolio Director for the UAE at RX Global, said the year was particularly significant given the evolution across both the industry and the event itself.

The data released alongside it was better than the mood of the last six months would suggest. Dubai received 869,000 international overnight visitors in August, the highest monthly figure since February, taking the January to August total to 6.97 million. Hotel occupancy reached 66 per cent in August, the strongest in six months, on a room supply of roughly 149,000 and 21.61 million occupied room nights across the eight months. Western Europe supplied 20 per cent of visitors, South Asia 17 per cent, the GCC 16 per cent and the CIS and Eastern Europe 14 per cent. Issam Kazim, Chief Executive of Dubai Corporation for Tourism and Commerce Marketing, credited the result to the continued efforts of everyone contributing to the visitor economy.

The qualifier matters as much as the recovery. That 66 per cent is 89 per cent of the August 2025 level, which means occupancy is climbing and is still short of where it was a year ago, on a larger room count than a year ago. March ran at 36 per cent, so the direction is not in doubt. The level is. For an operator the distinction is the whole business case, because a recovering occupancy rate spread across more rooms is a smaller improvement per property than the headline implies, and it usually arrives with rate discounting still in place.

  • 869,000 Dubai overnight visitors in August, the highest since February
  • 66 per cent August hotel occupancy, or 89 per cent of the August 2025 level

If you sell to visitors

  • Occupancy is recovering across a larger room count. Per property, the gain is smaller than 66 per cent suggests.
  • Western Europe and South Asia supply 37 per cent of arrivals between them. Price and staff for those two first.
  • The autumn and winter season now follows a September trade fair rather than a spring one. Plan the calendar around it.
  • Rate discounting has not fully unwound. Do not read recovering volume as recovering margin.
  1. Hospitality operators
  2. Tour and activity SMEs
  3. Retail and F&B
The honest read is that Dubai is recovering and is not recovered, and that the gap between those two words is where a small operator lives or dies this winter. We would be cautious about one thing in particular. A visitor number that is the best since February is still being compared to a February that was itself disrupted, and 6.97 million across eight months is a rate that depends entirely on the final quarter holding. For an SME the decision is about committing capacity, staff and stock for the winter season, and the case for committing is better this week than it was last month. It is not yet good enough to commit at 2025 levels. If you do not sell to visitors at all, this is background and nothing more.

Hospitality

Hilton lost 30 per cent of its regional revenue and did not touch the pipeline

Hilton said on 17 September that its Middle East revenue fell 30 per cent in the second quarter as a result of the war, and has returned to close to flat year on year in the third. Simon Vincent, the group’s President for Europe, the Middle East and Africa, described it as going “from minus 30 to minus 2” and called it a really strong recovery. He also said there had been no reduction in pipeline activity through the conflict. The group is working towards more than 230 hotels trading and in pipeline across the region, with 36 operating in the UAE and 13 more to come, and roughly 32,000 jobs attached to the pipeline.

The competitors told a similar story with different numbers. Accor saw UAE occupancy fall to 20 per cent in March from 80 per cent in January and February, recovering to 65 per cent in August, and cut rates by 15 to 20 per cent at some properties. Wyndham cut rates by 30 to 40 per cent and reports roughly 85 per cent average occupancy. IHG carries a 259-hotel pipeline across the Middle East and Africa with delays of one to two quarters caused by furniture and equipment disruption. Accor holds more than 190 hotels in pipeline including 11 in the UAE. None of the four laid off staff. Haitham Mattar of IHG said the group did not furlough any team members, in the field or in the office, and Duncan O’Rourke of Accor said they did not lay anybody off because they had learnt from Covid.

For an SME none of this is a hotel story. It is a demand signal for everyone who supplies hotels, and it points in a clear direction. Revenue fell hard and construction did not stop, which means fit-out contracts, furniture and equipment orders, maintenance contracts, laundry, food supply and staffing demand were deferred rather than cancelled. IHG naming furniture and equipment as the cause of a one to two quarter delay is the most useful sentence in the week for a supplier, because it says where the bottleneck is and therefore where the orders will land when it clears.

  • 230 hotels Hilton’s regional target, trading and in pipeline
  • 36 + 13 Hilton hotels operating in the UAE, and in its pipeline

Why it matters

Four international groups held their pipelines through a revenue collapse and kept their staff. That is a deferred order book rather than a cancelled one, and the deferral is measured in quarters. If you supply fit-out, furniture, equipment, maintenance, laundry or food to hotels, the work did not disappear and the procurement cycle is about to restart. Position for it now rather than when the tender appears.

  1. Hotel suppliers
  2. Fit-out contractors
  3. Recruiters
We think this is the most underrated story of the week for small businesses, and it is being published on the travel pages where the people who need it will not read it. A 30 per cent revenue fall with an untouched pipeline is a specific and unusual combination. It tells you that the operators treated the war as a timing problem rather than a structural one, and that they were willing to carry cost to hold capability. Suppliers should read that as an instruction about the next two quarters. Build the relationship and the approved-vendor paperwork now, while procurement teams are quiet, rather than competing on price when 259 delayed hotels come back to tender at once. If you sell nothing into hospitality, skip this one entirely.

Cyber risk

Ransomware in the region went from 17 cases to 357

Research published on 16 September put ransomware incidents across the Middle East at 357 in June 2026, against 17 in April 2025. The UAE is recording roughly 800,000 hacking attempts a day, up from about 200,000 before the conflict, and one ransom demand made against a private UAE company exceeded 5,000,000 dollars. On overall threat activity the region ranks Israel first, then Turkey, Iran, the UAE and Saudi Arabia. Turkey leads specifically on ransomware.

The sectors named as most exposed in the UAE are aviation, energy, education and financial services. The groups named include The Gentlemen, which has targeted Saudi businesses, and Nova, which is focused on the Gulf, alongside the Iranian-linked MuddyWater and APT42, both of which have been observed using commercial artificial intelligence tools for reconnaissance and phishing. Anirudh Batra of CloudSEK put the shift bluntly: “These groups are not testing the market. They have committed to it.” Gavin Millard of Tenable said artificial intelligence has “significantly lowered the barrier to entry, making it far easier for a lone wolf to have the skills of a state actor”.

The advice attached to the research is unusually practical, and it is not to fix everything. The recommendation is a pragmatic, risk-based and threat-based approach, concentrated on the entry points actually being used, with firewalls and VPN gateways patched as a standing discipline because that is where attackers keep getting in. A small company cannot run a security programme. It can patch a gateway, turn on multi-factor authentication and keep a backup it has actually tested restoring. The gap between a 20-fold rise in incidents and that list of three things is not a technology gap. It is an attention gap.

  • 357 Regional ransomware incidents in June 2026, against 17 in April 2025
  • 800,000 Hacking attempts a day in the UAE, up from 200,000

The three that matter most

  • Patch your firewall and VPN gateway on a schedule. That is the documented entry point.
  • Turn on multi-factor authentication for email and accounting. Invoice fraud starts in a mailbox.
  • Test a restore from backup. An untested backup is a belief, not a control.
  • Aviation, energy, education and financial services are the named UAE targets. Suppliers to them are in scope too.
  1. Every company with a VPN
  2. Finance teams
  3. Owner-managers
We are wary of cyber statistics because they are usually sold by the people who sell the remedy, and a rise from 17 to 357 partly reflects better counting as well as more attacks. Set the multiple aside and the direction is still not arguable. What we would push back on is the conclusion small companies tend to draw, which is that they are too small to be worth attacking. The named UAE sectors are aviation, energy, education and financial services, and the way into a large target is routinely a small supplier with a shared login. If you invoice any of those four industries, you are inside the perimeter whether or not you feel like it. Three controls, done properly, cover most of it, and none of them requires a consultant.

Watchlist

  • 30 Sep 2026: Corporate tax return and payment For 31 December 2025 year ends. File even where the tax due is nil.
  • 01 Oct 2026: Amended VAT Executive Regulation Cabinet Decision No. 149 of 2026. Most articles apply from that date.
  • 01 Oct 2026: Input VAT supplier verification Documented supplier checks become a condition of recovery. Test the process before the month turns.
  • No published date: The cash payment threshold Article 54(3) is live from 01 October. The number sits in a Ministerial Decision not yet issued.
  • 01 Oct 2026: October fuel prices The Fuel Price Committee resets monthly. This week’s crude move lands in that number, not today’s.
  • 30 Oct 2026: E-invoicing service provider The appointment deadline. Confirm who yours is and that they are accredited.
  • Early Oct 2026: S&P Global UAE PMI for September August read 55.3 with employment still falling. Watch whether hiring turns.
  • Q4 2026: The next Federal Reserve decision One more rise was signalled for this year. The UAE Base Rate follows the dollar, so plan for it.

You do not need to read every release. You need to know which three of them change what you do on Monday. This week the order is not difficult. 30 September comes first, because it is the only item on the page with a penalty attached to missing it, and nil tax is still not nil filing. Then the Base Rate, because 3.90 per cent from 17 September reprices every facility that sits over EIBOR, and it does that at the reset date rather than on the day your bank writes to you. Then 15 September, which has already passed, because the Central Bank’s regularisation period closed on Tuesday and the activity list is wider than the word financial suggests.

Then look at your own file. The cost of money and the cost of fuel both rose in the same week, which is hard on anyone running vehicles on a floating facility and almost invisible to anyone with neither. Dubai sold 18.86 per cent fewer homes for 6.07 per cent less money, so the buyers who need finance are the ones stepping back. Four hotel groups lost a third of their revenue and kept their pipelines, which is a deferred order book for every supplier who notices in time. We do not sell licences. We read the week for the items that change what a client should do next, and we say so before the deadline rather than after it. And Again Advisory coordinates the jurisdiction, the filing and the paperwork. Approvals stay with the authorities.

Sources: Central Bank of the UAE, Federal Tax Authority, Ministry of Finance, Ministry of Human Resources and Emiratisation, Dubai Department of Economy and Tourism, Etihad Rail, AD Ports Group, Z/Yen Global Financial Centres Index, Cavendish Maxwell, CloudSEK, S&P Global, DXBinteract, Gulf News, Khaleej Times, The National, Arab News, Travel Daily News.

This briefing is general information, not advice. Figures are as published by the sources named and may change.