Key Takeaways
- VARA (Virtual Assets Regulatory Authority) was established in March 2022 as the world’s first dedicated virtual assets regulator, based in Dubai
- VARA licence categories include VA Broker-Dealer, VA Exchange, VA Transfer and Settlement, and VA Lending/Borrowing
- Minimum capital requirements range from AED 1 million to AED 10 million depending on licence category
- VARA licence initial fees are AED 50,000–200,000 plus annual fees; FATF Travel Rule AML/CFT compliance is mandatory
- SCA (Securities and Commodities Authority) regulates crypto in all other UAE Emirates; ADGM FSRA covers Abu Dhabi
- UAE imposes no capital gains tax on crypto — a major competitive advantage over most global jurisdictions
Updated August 2026. The United Arab Emirates has emerged as one of the world’s most active jurisdictions for blockchain business formation and cryptocurrency exchange licensing. The establishment of VARA in Dubai, combined with ADGM’s progressive FSRA framework in Abu Dhabi and the SCA’s evolving approach to digital assets across the other emirates, means that operators have a genuine choice of regulatory homes — each with distinct capital requirements, licensing timelines, and operational permissions. This guide covers the full landscape as of August 2026.
The UAE Crypto Regulatory Landscape
The UAE crypto market processed over USD 25 billion in transaction volume in 2025, making it one of the largest digital asset markets in the Middle East and Africa region. Three primary regulatory regimes govern virtual asset businesses depending on where they choose to incorporate and operate:
- VARA (Virtual Assets Regulatory Authority), Dubai: The world’s first standalone virtual assets regulator, with jurisdiction over the Emirate of Dubai (excluding the DIFC financial centre). Established by Dubai Law No. 4 of 2022.
- ADGM FSRA (Abu Dhabi Global Market Financial Services Regulatory Authority): Governs digital asset businesses incorporated within the ADGM free zone on Al Maryah Island. One of the earliest progressive crypto frameworks in the region.
- SCA (Securities and Commodities Authority): Federal regulator that oversees crypto asset service providers in the remaining UAE emirates (Sharjah, Ajman, Fujairah, Ras Al Khaimah, Umm Al Quwain) and for federally classified crypto securities.
In practice, most international crypto exchanges and blockchain businesses targeting UAE and MENA market access choose either VARA Dubai or ADGM FSRA for their primary UAE licence, as both offer clear frameworks, international credibility, and a defined pathway from provisional to full licence.
VARA Licence Categories Explained
VARA issues activity-specific licences under its Virtual Assets and Related Activities Regulations. Each licence category covers a defined set of virtual asset services. Businesses may apply for multiple categories simultaneously. The core categories are:
| VARA Licence Category | Permitted Activities | Min. Capital (AED) |
|---|---|---|
| VA Broker-Dealer | Buying/selling virtual assets on behalf of clients (agency and principal) | 1,000,000 |
| VA Exchange | Operating a spot exchange for crypto-to-crypto or fiat-to-crypto trading | 4,000,000 |
| VA Transfer and Settlement | Providing transfer, transmission, and settlement of virtual assets | 2,000,000 |
| VA Lending and Borrowing | Facilitating crypto lending, borrowing, and collateralised loan products | 4,000,000 |
| VA Management and Investment | Managing virtual asset portfolios and investment vehicles (funds) | 4,000,000 |
| VA Custody | Safekeeping and custody of virtual assets on behalf of clients | 2,000,000 |
The VARA Licensing Process: Step by Step
VARA operates a two-stage licensing process: a Provisional Approval followed by a Full Licence. The full sequence typically takes 9–18 months for a well-prepared applicant:
- Minimum Viable Product (MVP) Declaration: VARA requires applicants to demonstrate a working product or platform concept — pure paper applications are not accepted. The MVP can be a test environment, beta platform, or demonstrable prototype.
- Preparatory Licence Application: Submit entity documents (company incorporation in Dubai mainland or DMCC/other approved free zone), business plan, technology architecture, AML/CFT compliance manual, and key personnel CVs with proof of fitness and propriety.
- VARA Preparatory Review: VARA staff review the application (4–8 weeks). May request additional documentation or management interviews.
- Provisional Approval Issuance: Allows limited live testing with real users under VARA supervision. Capital must be held in a UAE-based bank account.
- Full Operational Licence: After demonstrating compliance and operational readiness in the provisional phase (typically 6–12 months), VARA issues the full Virtual Asset Service Provider (VASP) licence.
AML/CFT: The FATF Travel Rule and VARA Compliance
VARA mandates that all licensed VASPs comply with the FATF Travel Rule (FATF Recommendation 16), which requires the originating VASP to pass beneficiary information to the receiving VASP for transactions above USD 1,000 (equivalent). Additionally, VASPs must:
- Implement a VARA-approved AML/CFT compliance programme with a designated MLRO (Money Laundering Reporting Officer) residing in the UAE
- Conduct Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) for high-risk customers
- Screen all transactions against UAE Central Bank and UNODC sanctions lists
- File Suspicious Transaction Reports (STRs) to UAE Financial Intelligence Unit (FIU) via the goAML platform
- Maintain transaction records for a minimum of 8 years
ADGM FSRA vs. VARA: Which to Choose?
| Factor | VARA Dubai | ADGM FSRA Abu Dhabi |
|---|---|---|
| Jurisdiction | Dubai (exc. DIFC) | ADGM free zone, Al Maryah Island |
| Regulator established | March 2022 | 2018 (DLT framework) |
| Min. capital (exchange) | AED 4M | USD 250,000–10M (varies) |
| Licence fee range | AED 50,000–200,000 | USD 10,000–125,000 |
| Common law courts | No (Dubai courts + DIAC) | Yes (ADGM Courts, English common law) |
| 100% foreign ownership | Yes (via approved free zones or mainland) | Yes |
Tax Position: UAE Crypto and Capital Gains
The UAE levies no personal income tax and no capital gains tax, meaning individual profits from crypto trading are not taxed. At the corporate level, the UAE’s 9% Corporate Tax (effective June 2023) applies to UAE-resident businesses, but virtual asset businesses operating as qualifying free zone persons may benefit from 0% Corporate Tax on qualifying income — subject to VARA/ADGM-licensed status and substance requirements. VAT (5%) does not apply to the exchange of virtual currencies per FTA guidelines. This tax environment remains one of the UAE’s most compelling advantages for crypto business formation compared to the UK, EU, Singapore, or Australia.
Frequently Asked Questions
Can a crypto exchange operate across all UAE emirates with a single VARA licence?
No. VARA’s jurisdiction covers the Emirate of Dubai only (excluding the DIFC). To serve customers in Abu Dhabi, businesses need either an ADGM FSRA licence or an SCA licence. In practice, many platforms hold VARA as their primary UAE licence and rely on federal-level SCA clearance for UAE-wide services, or maintain ADGM and VARA licences for dual-emirate coverage. Businesses should obtain legal advice on their specific distribution model before assuming UAE-wide reach from a single VARA licence.
Does VARA regulate NFTs and DeFi protocols?
VARA’s current regulations cover transferable virtual assets, including utility tokens and security tokens, under its Virtual Assets and Related Activities Regulations. VARA has issued specific guidance clarifying that non-fungible tokens (NFTs) used purely as digital art or collectibles without fractionalization features are generally outside VARA’s scope. DeFi protocols are subject to VARA’s Anti-Money Laundering obligations if they have identifiable UAE nexus or serve UAE persons, but VARA has not yet issued a DeFi-specific licensing framework as of August 2026. Operators in this space should seek VARA pre-application guidance.
What happens if a crypto business operates in Dubai without a VARA licence?
Operating a virtual asset service without a VARA licence in Dubai is a criminal offence under Dubai Law No. 4 of 2022. Penalties include fines up to AED 50,000,000 (AED 50 million), business closure orders, and imprisonment for individuals involved in unlicensed virtual asset activities. VARA actively monitors exchange activity, social media promotion, and OTC trading desks targeting UAE residents and has the authority to refer cases to Dubai Public Prosecution.
How long does VARA licensing take from start to finish?
From company formation to full VASP licence issuance, most applicants should plan for 12–18 months. The Preparatory Licence application review takes 2–4 months; the provisional operating phase typically runs 6–12 months under VARA supervision before full licence issuance. Applicants with a demonstrable MVP, experienced compliance team, and complete documentation from day one can sometimes complete the process in 9–12 months. VARA offers pre-application consultation sessions that can significantly clarify expectations and reduce revision cycles.
Is stablecoin issuance permitted under VARA?
VARA introduced a dedicated Stablecoin Regulation framework in 2024 (updated in 2025) that permits the issuance of AED-pegged and USD-pegged stablecoins by VARA-licensed entities meeting specific reserve requirements. Issuers must hold 100% backing in UAE bank deposits or UAE government securities and are subject to monthly reserve attestation by a VARA-approved auditor. Foreign currency-pegged stablecoin issuers must also obtain clearance from the UAE Central Bank (CBUAE) given the intersection with monetary policy. USDT and USDC, as foreign-issued stablecoins, are permitted for use on VARA-licensed exchange platforms subject to VARA whitelist approval of the token.