UAE Crypto & Virtual Asset Service Provider (VASP): VARA + ADGM License 2026

Updated August 2026.

The UAE has emerged as the world’s leading jurisdiction for regulated cryptocurrency and virtual asset businesses, combining the VARA framework in Dubai with the ADGM FSRA’s pioneering digital asset regime in Abu Dhabi. Following the global crypto industry’s reorientation after the FTX collapse in 2022, the UAE attracted dozens of major exchanges, custodians, and asset managers seeking credible regulatory frameworks. This guide covers every licensing pathway for Virtual Asset Service Providers (VASPs) in the UAE in 2026.

1. VARA (Virtual Assets Regulatory Authority): Dubai’s Dedicated Crypto Regulator

VARA was established by the Ruler of Dubai under Law 4/2022 Regulating Virtual Assets in the Emirate of Dubai as the world’s first purpose-built virtual assets regulatory authority within a national government structure. VARA is jointly supervised by the Dubai Government and the Dubai Financial Services Authority (DFSA). VARA’s jurisdiction covers all virtual asset activities in Dubai — including within the DIFC for VASP activities (though DFSA continues to regulate financial instruments; there is a VARA-DFSA coordination mechanism).

VARA published its comprehensive Virtual Assets and Related Activities Regulations 2023 (VARA Rulebook) — a multi-book regulatory framework covering entity governance, compliance and risk management, technology and information security, market conduct, and activity-specific requirements. The VARA Rulebook is the most comprehensive domestic VASP regulatory framework globally, running to over 400 pages across its component books.

VARA licenses 7 distinct virtual asset activities under the 2023 Rulebook:

• VA Exchange Services: Operating a virtual asset exchange (buying/selling VA for fiat or other VA). Minimum capital: AED 10,000,000 (AED 10M). Examples: Binance UAE, OKX, Bybit, Crypto.com.
• VA Transfer Services: Facilitating transfers of virtual assets between wallets/accounts. Minimum capital: AED 2,000,000 (AED 2M). Applies to VASP-to-VASP transfer services.
• VA Lending/Borrowing Services: Facilitating crypto lending and borrowing. Minimum capital: AED 4,000,000 (AED 4M). VARA has placed additional risk requirements on lending services post-Celsius/BlockFi collapses.
• VA Broker-Dealer Services: Acting as agent or principal in VA transactions for clients. Minimum capital: AED 4,000,000. Similar to a traditional securities broker-dealer.
• VA Management and Investment Services: Managing virtual asset portfolios on behalf of clients (crypto fund management, discretionary VA management). Minimum capital: AED 4,000,000.
• VA Advisory Services: Providing investment advice on virtual assets. Minimum capital: AED 2,000,000. Lightest license for crypto advisory businesses.
• VA Custody Services: Safekeeping of client virtual assets (crypto custodians, cold-storage operators). Minimum capital: AED 4,000,000. Growing sector post-FTX given institutional demand for segregated custody.

Application fees range from AED 100,000 to AED 500,000 per activity license. VARA requires all licensees to maintain professional indemnity insurance and cyber risk insurance commensurate with their operations.

2. VARA-Licensed Companies: Dubai as Global Crypto Hub

The following major virtual asset companies hold VARA licenses as of 2026, reflecting Dubai’s successful positioning as the world’s premier regulated crypto jurisdiction:

• Binance UAE: The world’s largest crypto exchange by volume holds a VARA Exchange Services license, enabling full retail and institutional crypto trading from Dubai. Binance moved its Middle East headquarters to VARA-regulated Dubai in 2022.
• OKX: The world’s 2nd largest crypto exchange (by derivatives volume) holds VARA Exchange Services + Transfer Services licenses. OKX’s MENA headquarters are in Dubai.
• Bybit: Top-5 global crypto exchange; VARA Exchange Services license. Bybit relocated from Singapore to Dubai post-Singapore MAS restrictions in 2022.
• Crypto.com: VARA Exchange Services + Custody Services licenses. Crypto.com’s naming rights deal for the Crypto.com Arena (formerly Staples Center, Los Angeles) is headquartered via its Dubai VARA entity.
• BitOasis: UAE’s homegrown crypto exchange (founded 2015); among the first VARA licensees. Operates the UAE’s largest retail crypto platform for AED-denominated crypto purchases.
• Komainu: Digital asset custody joint venture (Nomura, CoinShares, Ledger); VARA Custody Services license. Provides institutional-grade cold custody for UAE sovereign wealth funds and family offices.

3. ADGM FSRA: Middle East’s Pioneer Digital Asset Framework

The Abu Dhabi Global Market Financial Services Regulatory Authority (FSRA) published the Middle East’s first regulated crypto framework in 2018 — four years before VARA. The ADGM FSRA Digital Asset Framework covers:

• Multilateral Trading Facility (MTF) for Digital Assets: A regulated exchange for spot and derivatives trading of digital assets. The ADGM FSRA MTF framework attracted institutional participants seeking MENA digital asset exchange infrastructure.
• Digital Asset Broker-Dealer License: For firms trading digital assets as principal or agent. Minimum capital: AED 3,000,000–AED 10,000,000 depending on activities.
• Digital Asset Custody: For firms holding digital assets on behalf of clients. Minimum capital: AED 5,000,000.
• Digital Asset Fund Management: For crypto fund managers. Must comply with FSRA Fund Rules with digital asset-specific overlays.

Major ADGM FSRA-licensed digital asset companies include:

• Kraken: Major US crypto exchange; ADGM FSRA-licensed for UAE institutional and retail operations.
• Coinbase Institutional: ADGM FSRA license for institutional crypto brokerage and custody services targeting UAE family offices and sovereign funds.
• M2 Exchange: Abu Dhabi-founded regulated digital asset exchange; among ADGM’s largest VASP licensees.

ADGM’s advantages over VARA include: longer track record (since 2018), proximity to Abu Dhabi sovereign wealth capital, and ADGM’s strong reputation in Islamic finance (enabling Islamic digital assets / digital sukuk innovation).

4. SCA and CBUAE Overlapping VASP Jurisdiction

While VARA and ADGM FSRA are the primary VASP licensing authorities in the UAE, two other federal regulators have jurisdiction over specific types of virtual asset activities:

SCA (Securities and Commodities Authority): When a crypto token is classified as an “investment contract” or “security” under UAE Federal Law 4/2000 (as amended) — meaning it represents an ownership stake in a project or has profit-sharing features — the SCA has regulatory jurisdiction. SCA-classified security tokens require SCA approval for issuance and trading. ICO (Initial Coin Offering) issuers offering tokens with securities characteristics must comply with SCA prospectus and offering rules.

CBUAE (Central Bank of UAE): Stablecoins (tokens pegged to fiat currencies, e.g., AED-pegged stablecoin, USD-pegged USDC when used for UAE payment purposes) and payment tokens fall under the CBUAE’s authority under its Payment Token Service Provider Regulation (2023). Stablecoin issuers targeting UAE consumers require CBUAE approval under this regulation — not VARA or ADGM FSRA approval. Major implications: Tether (USDT) issuance within UAE requires CBUAE coordination; CBUAE is evaluating its own CBDC (central bank digital currency) — the Digital Dirham — alongside the VARA/ADGM private sector frameworks.

5. UAE Tax Treatment of Virtual Assets

The UAE’s favorable tax regime extends to virtual assets, making it one of the world’s most attractive jurisdictions for crypto businesses and investors:

• Personal crypto gains — 0% tax: Individual UAE residents are not subject to any tax on capital gains from personal crypto trading, holding, or disposal. There is no personal income tax in the UAE.
• Business crypto trading — 9% CIT: Under the UAE Corporate Income Tax Law (Federal Decree-Law 47/2022), businesses engaged in virtual asset trading as a commercial activity are subject to 9% CIT on taxable profits above AED 375,000 per year. This includes VARA-licensed exchanges and brokers.
• Free zone VASP — 0% CIT (during holiday): VARA and ADGM-licensed entities operating in the respective free zones may benefit from the 0% CIT rate for qualified free zone persons during their applicable tax holiday period (typically 50 years from incorporation), provided they meet the “qualifying activities” test and do not conduct business with UAE mainland entities at rates that erode the 0% qualification.
• VAT on crypto: The UAE Federal Tax Authority (FTA) has not issued definitive VAT guidance on all crypto asset types. Generally, exchange of cryptocurrencies for goods/services may trigger VAT implications. VARA-licensed entities are advised to obtain FTA private rulings on their specific business models.

6. AML/CFT Compliance: FATF Travel Rule for VASPs

All VARA-licensed VASPs must comply with the FATF Travel Rule for virtual asset transfers, implemented in the UAE through VARA’s Anti-Money Laundering, Countering the Financing of Terrorism and Targeted Financial Sanctions Rulebook (the “AML/CFT Rulebook” within the VARA 2023 framework). Key Travel Rule requirements:

• Threshold: For VASP-to-VASP transfers of AED 3,500 or more (equivalent in virtual assets), the originating VASP must transmit beneficiary information (name, wallet address, account number) to the receiving VASP before or simultaneously with the transfer.
• Technical implementation: VASPs must use a FATF Travel Rule-compliant messaging protocol (such as OpenVASP, SYGNA Bridge, or Notabene) to transmit the required data.
• Unhosted wallet transfers: When transferring to an unhosted (self-custody) wallet above AED 3,500, VASPs must conduct enhanced due diligence and document the customer’s ownership of the receiving wallet.
• STR reporting: Suspicious virtual asset transactions must be reported to the UAE FIU via goAML within 35 days. VARA has coordinated with the UAE FIU to create VA-specific STR templates on the goAML platform.

7. UAE Virtual Asset Licensing: Cost Comparison Table

Regulator	License Type	Min. Capital	App. Fee	Timeline
VARA (Dubai)	VA Exchange Services	AED 10M	AED 300,000–500,000	12–24 months
VARA (Dubai)	VA Advisory Services	AED 2M	AED 100,000	6–12 months
ADGM FSRA	Digital Asset Broker	AED 3M–10M	USD 10,000	12–18 months
ADGM FSRA	Digital Asset Custody	AED 5M	USD 10,000	12–18 months
CBUAE	Payment Token Service Provider	AED 1M+	AED 50,000–100,000	12–24 months

8. How to Apply for a VARA License in Dubai

1. Pre-Application Consultation: Schedule a pre-application meeting with VARA’s Business Development team to discuss proposed activity scope, business model, technology stack, and compliance framework.
2. Minimum Viable Product (MVP) Registration: VARA requires new applicants to register as a Minimum Viable Product (MVP) entity before applying for a full VASP license. During MVP registration (typically 3–6 months), the company can operate in a restricted mode with a limited client base to demonstrate product viability.
3. Full VASP License Application: Submit the full application through the VARA Portal, including: company incorporation documents, capital proof, comprehensive business plan, AML/CFT framework, technology security audit, cyber insurance, and qualified management team CVs.
4. VARA Due Diligence and Approval: VARA reviews the application, conducts background checks, and may request on-site technical inspections. Approval of the full VASP license takes 6–18 months from the MVP stage.
5. Operational Launch: Upon receiving the VASP license, begin compliant operations with monthly regulatory reporting, quarterly AML returns, and annual VARA independent audit.

What is VARA and which companies are VARA-licensed?

VARA (Virtual Assets Regulatory Authority) is Dubai’s dedicated crypto regulator, established under Law 4/2022. Major VARA-licensed companies include Binance UAE, OKX, Bybit, Crypto.com, BitOasis, and Komainu. As of 2026, over 70 companies hold VARA VASP licenses across the 7 activity categories.

What is the difference between VARA and ADGM FSRA for crypto?

VARA is Dubai-based and covers the broadest range of retail and institutional VASP activities with the most comprehensive rulebook. ADGM FSRA (Abu Dhabi) pioneered the region’s first crypto framework in 2018 and attracts institutional-focused businesses (Kraken, Coinbase Institutional). VARA suits retail exchange businesses; ADGM suits institutional trading and custody with Abu Dhabi client relationships.

Is crypto trading taxed in UAE?

Personal crypto trading gains are not taxed in the UAE — there is no capital gains tax or personal income tax. Business crypto trading (as a VARA-licensed or commercial entity) is subject to 9% Corporate Income Tax on profits above AED 375,000 annually. Free zone VASP entities may qualify for 0% CIT during their applicable tax holiday period.

What capital is required to launch a crypto exchange in UAE?

A VARA VA Exchange Services license requires AED 10,000,000 (AED 10M) minimum capital. An ADGM FSRA digital asset exchange (MTF) requires AED 5M–AED 10M. Total launch costs for a full-service UAE crypto exchange including technology, compliance, insurance, and office: AED 10M–AED 30M over the first two years.

Do UAE crypto companies need to comply with the FATF Travel Rule?

Yes. All VARA-licensed VASPs must implement FATF Travel Rule compliance for transfers above AED 3,500, sharing beneficiary data between originating and receiving VASPs using compliant messaging protocols. The UAE FIU also requires STR reporting for suspicious virtual asset transactions through the goAML platform.