How to Verify a Licensing Consultant Before You Pay

This page is for the step after those calls and before you wire money: due diligence on the adviser, not another lecture on why you need a licence.

Verification is boring on purpose. You are not trying to find the consultant with the glossiest website. You are trying to confirm that the entity invoicing you can legally contract, that the person who will speak to the regulator is named in writing, that official charges are traceable to a published schedule, and that your cash is staged so a bad fit does not become an unrecoverable prepayment. The same checks apply to boutique licensing firms, free-zone channel partners, and offshore registered agents. They apply to us too.

‍

Why does verification sit between the pitch and the payment?

Shortlisting is a conversation about fit: activity coverage, timeline bands, banking realism, compliance handoff. Paying is a commitment that locks scope, cash, and often personal data (passports, UBO charts, source-of-wealth statements) into someone else’s file. The gap between those moments is where formation mills and introducer chains extract margin from founders who never asked which company actually holds the regulator correspondence.

A serious licensing engagement touches three ledgers at once. Your corporate ledger pays the adviser’s professional fee and, usually, reimburses official charges. The regulator’s ledger records who applied, who signed declarations, and which licence category was requested. The bank’s ledger will later ask whether the adviser’s story matches the licence PDF. Verification before payment aligns those three before emotions and deadline pressure take over.

If you only verify after money leaves your account, you still learn the truth. You learn it without leverage. Chargebacks rarely cover cross-border advisory work. Refunds depend on whatever the engagement letter says, and many founders never received a letter.

‍

Is the firm you are paying the same entity that will deliver the work?

Start with the legal person on the invoice. Licensing consultancies trade under marketing names that do not match the free-zone company on the contract. Introducers route you to a second firm that actually files. A LinkedIn profile belongs to a freelancer who is not on the trade licence. Each pattern is common and each is fixable if you check before you pay.

Ask for the full legal name, licence number, registered address, and signatory capacity of the contracting party. Match that string against a government or free-zone registry. If the sales call came from Brand A and the invoice says Brand B, stop until someone explains the agency chain in writing. You are not being difficult. You are establishing who owes you a duty of care if the file stalls.

UAE free zone and mainland registrations

UAE advisers usually contract through a free-zone establishment or a mainland LLC licensed for consultancy or business services. The National Economic Register search on the Ministry of Economy portal lets you confirm whether a mainland company exists, its licence status, and its registered activities. Free-zone entities appear on their authority’s register: DMCC publishes a member company search; Meydan, IFZA, RAKEZ, and other zones maintain their own directories or confirmation letters.

Read the activity line, not only the existence tick. “Management consultancy” is not “company formation agent” in every zone. A firm licensed only for marketing services should not be the applicant of record on your VARA file. Cross-check the address on the invoice with the registry address. Serviced desk numbers in marketing brochures often differ from the legal seat.

For your future entity, the same discipline applies. The consultant should tell you which authority will issue your licence and show you where that authority publishes fee categories. If they cannot point to the register entry for themselves, treat their jurisdictional advice with the same skepticism.

Offshore agents and registered offices

Offshore engagements add a second layer. The registered agent or registered office provider is often a separate company from the consultancy brand on the webinar. Cayman, BVI, Seychelles, and Belize files list the licensed registered agent on the certificate and on the registry extract. Ask who that agent is, whether your consultant is authorised to act for them, and whether your engagement is direct with the agent or sub-contracted.

A consultancy that only resells an agent’s shelf company without disclosure is not automatically fraudulent. It is automatically opaque. Opaque files break when the bank asks for the full chain of authority and the introducer disappears. Get the chain on paper before funds move.

‍

Who holds the regulatory relationship on your file?

Regulators and licensing authorities correspond with the applicant and its authorised representatives. They do not correspond with a WhatsApp group admin who is not named on the application. Before you pay, you need a clear answer to three questions: who signs the application, whose portal credentials are used, and who receives deficiency letters and renewal notices.

In UAE free zones, the establishment’s authorised signatory and manager names appear on the licence and establishment card. The zone’s member portal shows the filing history. Ask the consultant to state whether they file as your authorised channel partner with a power of attorney, or whether you will hold credentials directly. Both models work. Undisclosed third-party control does not.

Applicant of record versus introducer

An introducer markets packages, collects a bundle payment, and hands the file to another firm. An applicant-side adviser prepares the pack, speaks to the authority under a defined mandate, and names itself in the engagement letter as responsible for specific deliverables. Introducers are not evil; they are unaccountable if you never meet the filing party.

Request a one-paragraph role map: entity filing the application, entity drafting the business plan and AML manual, entity responsible for PRO and visa logistics, entity billing you. If two different companies appear, each needs registry confirmation and a signed subcontract or assignment clause you can read. Your bank will ask the same question later.

What VARA and financial-centre permissions change

Virtual asset work in Dubai sits under VARA on top of a commercial licence. VARA’s public materials describe application stages, fit-and-proper disclosures, and fee categories on vara.ae. The VASP register lists entities that hold permissions. Before you pay a consultant for “VARA licensing,” ask which commercial licence path they use (DET, DWTC Free Zone, or another Dubai free zone), who will be named as the applicant’s compliance officer in the filing, and whether their firm appears on any regulator register or only as a corporate-services provider.

ADGM and DIFC files run through the Registration Authority and DFSA respectively. FSRA and DFSA permissions are searchable on public registers. A consultant who claims “DFSA approval” for your group should be able to show you whether your entity is the regulated person, or whether you are buying a non-regulated holding company while someone else holds the permission. Financial-centre work fails when founders discover they are not the regulated person on the certificate.

‍

Should you pay everything upfront, or stage the cash?

Formation mills advertise low entry packages because they front-load cash before scope is fixed. Staged payment is not a sign of weakness. It is how you keep leverage while documents are still moving. The right pattern depends on how much of the work is official (paid to authorities) versus professional (paid to the adviser).

Three payment models appear in almost every market: full prepayment of a bundled quote, milestone invoices tied to deliverables, and direct payment of official categories with a separate service fee. None is automatically safer. Full prepayment can work when the letter is precise and the adviser is verified. Milestones fail when the milestones are vague (“processing started”). Direct pay fails when you do not know which categories belong on the authority’s schedule. Your job is to match the model to the verified scope, not to the sales deadline.

Milestone billing and escrow patterns

A defensible structure ties payments to defined milestones: signed engagement letter and data room opened; draft application pack approved by you; authority submission confirmed with receipt; licence issued; visa or bank-support phase begun. Each milestone should name deliverables you can inspect: draft memorandum, AML policy with your business name on it, portal screenshot with application reference, stamped receipt from the authority payment channel.

Escrow is rare in UAE formation work but appears in larger cross-border mandates. A neutral escrow agent holds professional fees until a filing receipt is produced. More common is direct pay: you pay official categories yourself through the authority’s portal or designated bank, and the consultant invoices only the service lines. That split is the strongest anti-fraud control for “government fee” disputes because you see the same schedule the authority publishes.

Full prepayment of both service and official lines is sometimes demanded for speed. If you accept it, the engagement letter must list refund rules if the authority rejects the activity or the consultant fails to file within a stated window. Without that clause, prepayment is a gift.

Official fees paid direct to authorities

Professional advisers should welcome direct official payment. It proves they are not inflating regulator lines. Ask for a category map before you pay: licence issuance, name reservation, establishment card, visa allocation, knowledge fee, supervision levy, registered agent annual fee, share capital lodged with the authority where applicable. Each category should point to a live schedule URL: DMCC’s setup and cost pages, Meydan’s published packages, IFZA’s quotation workflow, VARA Schedule 2, ADGM or DFSA fee guidance, FTA registration channels for tax numbers.

If the consultant insists all funds pass through their account “for convenience,” you may still agree. You then verify that their invoice separates reimbursable official categories from service fees and that they commit to producing authority receipts within a fixed number of days. Convenience is not a reason to merge opaque lines.

‍

What should a licensing engagement letter actually say?

A scope email is not an engagement letter. Before payment, you want a document that a bank or investor could read later and understand who did what. Most disputes we see in the market are not about exotic law. They are about letters that never specified deliverables, timelines, or what happens when the client changes activity mid-file.

Treat the letter as the control document for everything that happened on the sales call. If the call promised VARA support, the letter names VARA stages and who drafts the compliance manual. If the call mentioned banking introductions, the letter states whether that is a warm intro or document preparation only. If the call quoted a timeline, the letter ties dates to client document delivery and authority queues, not to guaranteed approval. Founders who skip this step because the adviser is “a referral from a friend” often discover the friend’s experience was a different licence category entirely.

Scope, deliverables, and change orders

The letter should name jurisdiction, entity type, licence or registration category, and included activities in the words the authority will use. It should list deliverables: corporate documents, application forms, business plan, compliance policies, PRO services, visa count, bank-introducer letters if any. It should state exclusions: banking guarantee, audit, tax registration, ongoing MLRO retainer, third-party attestations.

Change orders matter because founders pivot. If you add a payment activity or a second shareholder after the letter is signed, the consultant should not silently absorb or silently bill. The letter should describe how scope changes are priced and approved. Silence here produces the “surprise invoice” that arrives after your passport scan is already on someone’s server.

Liability, confidentiality, and data handling

Read the liability cap and indemnity clauses without embarrassment. Licensing advisers cannot promise approval; the letter should not imply they did. Check confidentiality: where client KYC is stored, how long, which subprocessors see it, and whether data leaves the UAE or EU if that matters to your policy.

Confirm professional indemnity or equivalent coverage if your internal procurement requires it. Many boutiques carry it; many mills do not. Absence is not fatal for a small formation job. It is fatal for a misrepresentation claim after a six-figure regulatory application.

‍

How do you test a government fee line against the regulator's schedule?

Untested fee quotes are where margin hides. A brochure “from” price often blends the cheapest licence SKU, zero visas, and a service fee, while your activity needs extra approvals, a higher visa quota, or a supervision levy the deck never mentioned. You test quotes by rebuilding the same categories on the authority’s own materials, not by negotiating harder on the first number.

The test is the same in Dubai, ADGM, Cayman, or Vilnius: open the schedule, find the heading that matches the product you were sold, and ask the consultant to map each quoted line to that heading. You are not auditing arithmetic in a blog post. You are checking that every “official” label on the invoice corresponds to a published category and that nothing material was left out. When schedules are quotation-only, the consultant should say so and show the written authority quote, not a rounded lump sum.

Free zone and DET tariff categories

For Dubai free zones, open the authority’s public fee or package page and match line by line. DMCC publishes setup cost components and visa ratios on its site. Meydan publishes package tiers with visa bands. IFZA typically issues a written quote tied to activity groups. For mainland Dubai work, Invest in Dubai and DET channels describe licensing routes; Executive Council Resolution 11 of 2025 added mainland-branch categories for some free-zone establishments with fees published in the resolution text.

When a consultant’s quote says “government fees included,” your job is to ask which government and which category. Licence fee and establishment card are not interchangeable. Immigration medical and Emirates ID are not licence fees. VAT registration with the FTA is a different portal again. If they cannot map their bundle to categories, the bundle is marketing.

VARA, DFSA, and offshore register schedules

VARA publishes application and supervision fee categories in its rulebook materials on vara.ae. DFSA and ADGM FSRA publish fee schedules for registration and permission applications. Offshore registries (Cayman General Registry, BVI Registry, Seychelles FSA) publish incorporation and annual return categories on their sites. Match the consultant’s lines to those headings.

Relative checks work without printing numbers in your own spreadsheet: if their “authority line” for a standard consultancy licence exceeds the authority’s published top package tier for the same SKU, ask what extra approvals they bundled. If their line is below the published minimum category, ask what was omitted. Schedules change; the consultant should say “confirm live on the URL dated” rather than defending a screenshot from last year.

‍

What does a serious consultant show you before you sign?

Beyond registries and fee maps, behaviour separates firms that expect diligence from firms that punish it. A serious licensing adviser welcomes written questions, sends a redacted sample of an application pack or engagement letter from a prior matter type (not your competitor’s secrets), and names the delivery lead who will own your file.

They explain timeline bands as ranges tied to document completeness and authority queues, not as guaranteed dates. They tell you what they do not do: most do not guarantee bank approval; none can guarantee regulator discretion. They separate their service lines from third-party costs clearly on the proposal.

They should answer reference checks at the matter-type level: “We filed a VARA-adjacent commercial licence for a custody-adjacent model” is useful; name-dropping a celebrity founder is not. Ask for one referenceable matter shape similar to yours, then call that client if they agree.

Ask how compliance handoff works after the licence. Formation without an AML manual that matches the licensed activity is a common stall point. Firms that do compliance and risk work as well as formation should describe that bridge in the proposal. Firms that stop at the certificate should say so plainly so you can budget policy work elsewhere.

‍

Which red flags should stop payment on the spot?

Some signals are not gray. They are stop rules.

Unpublished “government fee.” If the authority publishes the category and the consultant will not point to it, you are funding opacity. Walk away or pay official lines yourself.

Pressure to pay before scope. Full card payment before you receive an engagement letter with entity name, deliverables, and refund logic is a stop rule. Urgency belongs to regulators’ deadlines, not to a sales rep’s month-end target.

Regulator name-dropping without a register path. “We work with VARA” is not the same as a filing receipt. Verify permissions on public registers.

Activity mismatch. They propose a general trading licence for a regulated payment or virtual-asset model because it is faster. That is a compliance debt, not a shortcut.

Single WhatsApp thread, no contract party. Consumer chat apps are fine for logistics. They are not a substitute for knowing the legal obligor.

Refusal of direct official payment without a written reconciliation commitment on receipts.

Guaranteed approval language in the proposal or voice note. No adviser controls a regulator’s decision.

KYC collected before letter. Passports should follow a signed mandate and data clause, not precede it.

None of these flags means the firm is criminal. They mean you have not finished verification.

‍

How do you run the same checks on Medici Expert?

This article is published by a licensing consultancy. Ignoring that would be dishonest. You should verify us with the same steps, not a lighter set.

Contracting entity. Medici Expert Consultancy FZ LLC is the UAE operating company stated on medici.expert. Confirm our free-zone registration and activity list on the relevant Fujairah authority register and cross-check the address published on our About page.

Role map. We act as applicant-side advisers on defined mandates: jurisdiction roadmap, entity formation, licence application packs, regulator correspondence support, and banking-readiness documentation described on licensing and company formation. We are not a government authority. We do not issue licences. Where local counsel or a registered agent must act, our engagement letter names them.

Fees. We do not publish an all-in price list on the blog. Proposals separate professional service categories from official categories and point you to live regulator schedules for the latter. We do not ask you to accept unpublished “government” lines without a URL.

Payment staging. Engagements are milestone-based. Official charges are preferably paid direct to authorities or reimbursed with receipts. We do not require full prepayment of an undefined bundle before a signed letter.

Promises. We do not guarantee licence approval, bank accounts, or visa outcomes. Nataly Medici states publicly that a licence rejected for sloppy documentation is harder to recover from than one never filed. That constraint applies to our files too.

References. Ask us for matter-type references on the first call. Speak to a client with a similar regulatory perimeter if we can introduce one. Read third-party reviews skeptically; verify the entity name matches Medici Expert Consultancy, not unrelated “Medici” brands in other industries.

If we fail the checks above, choose another adviser. Good fit matters more than brand.

‍

What sequence can you run in one afternoon?

Block half a day while memories from the sales calls are fresh. Work in this order so each step produces a document you can paste into an email if something fails.

Morning: identity and role. Collect full legal names from each finalist. Run registry searches for the invoicing entity and any named filing partner. Draft a one-page role map and email it to each firm asking them to confirm or correct in writing.

Midday: fee reconstruction. For your chosen jurisdiction sketch, open the authority fee or package page. Label categories on a blank sheet: licence, establishment, visa, levy, agent. Mark which lines each consultant quoted as official versus service. Flag any line that does not map.

Early afternoon: letter review. Request a draft engagement letter or a redacted sample. Highlight scope, milestones, change-order language, refund terms, data handling, and liability cap. Do not pay until those headings contain words, not “to be agreed.”

Late afternoon: reference and register. For regulated paths, search VARA, DFSA, ADGM, or other public registers for names the consultant cited. Call one reference. If two firms pass, price is rarely the tie-breaker; accountability is.

Keep the email trail. Founders who document verification get faster answers from serious firms and faster exits from bad ones.

‍

FAQ

When should I verify a licensing consultant versus just comparing proposals?

Verify after you have a shortlist of one to three firms that plausibly fit your activity and jurisdiction, and before you transfer professional fees or hand over passport copies. Comparing pitch decks is selection work. Registry checks, fee-category mapping, and engagement-letter review are payment gate work. Doing both in one call usually means you paid while still selecting.

Can I pay official fees myself even if the consultant prefers a bundle?

Yes, and you often should. Direct payment to the authority’s designated channel is the cleanest test of an official-fee quote. Most reputable firms support it. If a bundle is mandatory, the invoice must still separate reimbursable official categories and commit to receipts within a stated period.

What is the difference between a business setup agent and a licensing consultant?

Setup agents optimise company registration SKUs, visas, and PRO logistics. Licensing consultants design permission strategy: which regulator, which activity codes, which compliance pack, and how the entity will survive bank review. Many firms do both. Verification asks which hat they wear on your file and whether the trade licence of the entity you pay matches that work.

How do I confirm someone is authorised to file with a UAE free zone?

Ask for the free zone’s channel partner or authorised consultancy confirmation if such a list exists, and independently search the consultant’s own company on that zone’s registry. Then confirm who holds portal access for your application: you, the consultant under power of attorney, or a third filing house named in the engagement letter.

What should I do if the consultant’s fee is lower than the authority’s published minimum?

Ask them to map each quoted line to the schedule category. A lower total usually means omitted visas, wrong activity tier, or service fee subsidised to win the sale with upsells later. If the mapping does not reconcile after one clear ask, treat the quote as incomplete, not as a bargain.

Does a LinkedIn profile or Google reviews prove legitimacy?

No. Reviews may refer to the wrong company name. Profiles do not show signatory authority. Use reviews as a prompt to ask for references, not as verification. Registries, engagement letters, and receipt trails matter more.

Should I hire a lawyer instead of a licensing consultant?

For complex regulated work, you may need both. A law firm gives legal advice and privilege on specific questions. A licensing consultancy often owns the project: roadmap, document pack, regulator narrative, and logistics. Verify whichever entity you hire with the same registry, scope, and fee-category discipline. If someone blurs “legal advice” and “company formation” without a clear letter, clarify before paying.

‍

Sources

• UAE Ministry of Economy, National Economic Register / business search: https://www.economy.ae/
• Invest in Dubai, company setup options: https://www.investindubai.gov.ae/en/business-setup/company-set-up-options-in-dubai
• DMCC, set up a new business (fee categories and process): https://dmcc.ae/business/set-up-a-new-business
• Meydan Free Zone, company setup cost breakdown: https://www.meydanfz.ae/blog/meydan-free-zone-company-setup-cost-breakdown
• VARA, licence applications and public register: https://www.vara.ae/en/licenses-and-register/licence-applications/
• ADGM, public register: https://www.adgm.com/public-registers
• DFSA public register: https://www.dfsa.ae/public-register
• Federal Tax Authority, e-services and guides: https://tax.gov.ae/en/default.aspx
• Medici Expert, About: https://medici.expert/about
• Medici Expert, Licensing and company formation: https://medici.expert/service/licensing-and-company-formation