Four PillarsFour PillarsAsia Digital Asset Policy Center

Featured: how ADGM regulates virtual assets, from its 2018 framework to stablecoins and staking

Middle East

UAE

Three layers, four regimes: federal rules from the CMA and the Central Bank, Dubai's VARA with 58 licensed firms, and the ADGM and DIFC free zones.

South KoreaJapanChinaHong KongTaiwanMongoliaSingaporeThailandVietnamMalaysiaIndonesiaPhilippinesCambodiaIndiaPakistanBhutanKazakhstanUzbekistanKyrgyzstanTurkmenistanUAEBahrainQatarOmanIsraelTurkeyJordanAustralia
58Firms holding a full VARA licence in Dubai
21ADGM authorised firms with virtual asset permissions on the FSRA register
3CBUAE-licensed dirham payment token issuers

The UAE regulates virtual assets in three layers.

At the federal level, the Capital Market Authority (CMA) licenses virtual asset activity on the mainland and in the non-financial free zones outside Dubai, and the Central Bank (CBUAE) licenses payment tokens.

In Dubai, the Virtual Assets Regulatory Authority (VARA) licenses firms across the emirate.

And the two financial free zones, Abu Dhabi Global Market (ADGM) and the Dubai International Financial Centre (DIFC), each have their own common-law-based legal system, courts and financial regulator: the Financial Services Regulatory Authority (FSRA) and the Dubai Financial Services Authority (DFSA).

Read the full story

ADGM moved first.

In June 2018 the FSRA introduced rules for spot crypto asset activities by exchanges, custodians and other intermediaries, which ADGM describes as the region's first comprehensive framework for virtual assets.

Dubai followed with Law No. 4 of 2022, which created VARA as a regulator for virtual assets alone, and the DFSA's crypto token regime took effect in the DIFC on 1 November 2022.

In 2024 the UAE left the FATF grey list, the Central Bank issued its Payment Token Services Regulation, which allows only licensed dirham payment tokens to be used for payments onshore, and VARA and the federal securities regulator agreed that VARA licensees can be registered by default to serve the rest of the UAE.

The regimes have since deepened.

ADGM created a separate regulated activity for issuing fiat-referenced tokens in December 2024, moved to firm-led assessment of accepted virtual assets in June 2025, finalised staking rules in April 2026, and recognised Binance's global exchange and clearing house between December 2025 and January 2026.

VARA's register listed 58 licensed firms in October 2026, from Binance, OKX and Crypto.com to Kraken, licensed on 6 October.

At the federal level the Securities and Commodities Authority became the CMA on 1 January 2026, and in April 2026 the CMA announced a framework of eight regulated virtual asset activities.

Federal Decree-Law No. 6 of 2025 brings financial activities carried out through any technology within the Central Bank's licensing, with a one-year transition that ran to 16 September 2026.

Firms therefore choose a regime by business model.

Retail-facing exchanges and brokers serving Dubai are usually licensed by VARA; institutional and wholesale firms often choose ADGM or the DIFC, where one financial regulator supervises virtual asset business alongside banking, securities and market infrastructure; and dirham payment tokens are licensed by the Central Bank, whose August 2026 register listed three issuers.

Individuals pay no personal income tax on crypto gains, while businesses pay 9% corporate tax and reporting under the OECD's Crypto-Asset Reporting Framework is due to begin in 2027.

Who regulates

UAE Federal (onshore) Federal

  • CMACapital Market Authority (formerly the Securities and Commodities Authority)

    In charge of

    The federal capital markets regulator, which replaced the Securities and Commodities Authority on 1 January 2026 under Federal Decree-Law No. 32 of 2025. It oversees listed companies, markets, funds and brokers onshore under the Capital Market Law, Federal Decree-Law No. 33 of 2025.

    On crypto

    Its virtual asset framework, CMA Resolution No. (04/Chairman) of 2026, announced on 13 April 2026, sets out five modules and eight regulated activities, including operating an alternative trading system. Under a September 2024 agreement, VARA licensees can be registered by default with the federal regulator to serve the rest of the UAE, while firms based in other emirates need a federal licence.

    CMA website
  • CBUAECentral Bank of the UAE

    In charge of

    The federal central bank: it sets monetary policy, manages the dirham, and licenses and supervises banks, finance companies, payment firms and insurers under Federal Decree-Law No. 6 of 2025.

    On crypto

    Its Payment Token Services Regulation, in force since 31 August 2024, allows only licensed dirham payment tokens to be used for payments onshore; three issuers, including AE Coin, were on its register in August 2026. Since 16 September 2025 its licensing has covered licensed financial activities carried out through any technology, while virtual assets held for investment remain outside it.

    CBUAE website
  • FTAFederal Tax Authority

    In charge of

    The federal body that administers and collects UAE taxes, including VAT, corporate tax and excise tax, handling registrations, returns and audits.

    On crypto

    Applies the VAT exemption for transferring and converting virtual assets, effective from 15 November 2024 with retroactive effect to 1 January 2018; paid custody and wallet services remain taxable. Businesses pay 9% corporate tax on taxable income above AED 375,000, while individuals' personal investment gains are not taxed.

    FTA website

Abu Dhabi Global Market (ADGM) Financial free zone

  • FSRAFinancial Services Regulatory Authority of ADGM

    In charge of

    Financial regulator of Abu Dhabi Global Market, Abu Dhabi's international financial centre on Al Maryah and Al Reem Islands, which applies English common law directly and has its own independent courts. It authorises and supervises banks, asset managers, market infrastructure and other financial firms in ADGM; companies are incorporated and licensed by ADGM's separate Registration Authority.

    On crypto

    Introduced a framework for spot crypto asset activities in June 2018, which ADGM describes as the region's first. Firms need a Financial Services Permission for Regulated Activities in relation to Virtual Assets and may use only Accepted Virtual Assets; 21 authorised firms held such permissions on the FSRA register in October 2026. Since December 2024 Issuing a Fiat-Referenced Token has been a separate Regulated Activity (three issuers), and since 1 January 2026 firms may use only Accepted Fiat-Referenced Tokens (nine on the September 2026 list). Staking rules were finalised on 29 April 2026. Binance's exchange and clearing house became Recognised Bodies, and its broker-dealer received a Financial Services Permission, between December 2025 and January 2026.

    FSRA website

Dubai (VARA) Emirate

  • VARAVirtual Assets Regulatory Authority

    In charge of

    Dubai's dedicated virtual asset regulator, created by Dubai Law No. 4 of 2022. Its remit covers all of Dubai, including special development zones and free zones, except the DIFC, and it regulates virtual asset activities only.

    On crypto

    Grants a single VASP licence listing each authorised activity, across seven service activities plus Category 1 token issuance, under its 2023 Regulations and rulebooks; 58 firms held full licences on 13 October 2026. It regulates virtual asset marketing in or targeting the UAE, fined 19 unlicensed firms AED 100,000 to 600,000 each in October 2025, and in June 2026 fined the operators of MEXC and KuCoin for serving Dubai customers without a licence and licensee CoinMENA for AML failures.

    VARA website

Dubai International Financial Centre (DIFC) Financial free zone

  • DFSADubai Financial Services Authority

    In charge of

    Independent regulator of financial services in the Dubai International Financial Centre, a financial free zone with its own common-law-based civil and commercial laws and courts. It licenses and supervises the banks, brokers, fund managers, exchanges and insurers there.

    On crypto

    Its crypto token regime took effect on 1 November 2022 and covers trading venues, dealing, arranging, advice, custody and fund management. Retail clients may be served after an appropriateness assessment, with no credit or trading incentives. Since 12 January 2026 firms have assessed each token's suitability themselves, but the DFSA still decides which fiat crypto tokens may be used (USDC, EURC and RLUSD). Privacy and algorithmic tokens are prohibited.

    DFSA website

Entities crypto firms use

The legal vehicles crypto projects and firms set up in the UAE, what each is for and why it's chosen. Forming one is not a licence: dealing in virtual assets for others still needs the licences above.

Abu Dhabi Global Market (ADGM) Financial free zone

  • DLT FoundationADGM Distributed Ledger Technology Foundations Regulations 2023 · ADGM Registration Authority

    Blockchain projects, DAOs and Web3 foundations use it to issue tokens and fund ecosystem development; the IOTA Ecosystem DLT Foundation, registered in November 2023, was the first.

    • An ownerless legal person run by a council of two to 16 members, with at least one founder and an optional guardian
    • May issue utility tokens and run governance through token voting and smart contracts; a white paper, and a tokenomics paper if it issues tokens, are filed on registration
    • Minimum initial assets of USD 50,000, which may be paid in fiat currency or FSRA-recognised stablecoins but in no other form
    • No physical presence is required, but it must have a registered ADGM company service provider unless the Registrar exempts it
    • May not carry on activities that need FSRA permission; regulated business is done through a separately licensed subsidiary
    Official source
  • FoundationADGM Foundations Regulations 2017 · ADGM Registration Authority

    Used to preserve and manage assets and plan succession, but not to conduct commercial activities; the DLT Foundation was created in 2023 for projects that issue tokens.

    • A separate legal person with no shareholders, at least one founder and a council of at least two members; a guardian becomes compulsory once the last founder has died
    • Minimum initial assets of USD 100
    • The names of councillors, beneficiaries and any guardian are held confidentially by the Registrar, subject to disclosure to public authorities
    • A non-exempt foundation must appoint an ADGM-licensed company service provider
    • Overseas foundations can migrate into ADGM
    Official source
  • Private company limited by sharesADGM Companies Regulations 2020 · ADGM Registration Authority

    The operating company of FSRA-authorised virtual asset firms and fiat-referenced token issuers such as Laser Digital (AD) Limited and Paxos Issuance MENA Ltd.

    • The Registration Authority incorporates it and issues its commercial licence only after the FSRA has given in-principle approval
    • At least one shareholder, individual or corporate, and at least one director who is a natural person
    • At least one authorised signatory who is a UAE or GCC national or holds a UAE residence visa
    • A registered office in ADGM under a lease valid for one year from the date of the commercial licence
    • A foreign company can instead register an ADGM branch, whose activities must match the parent's; AMINA Bank AG holds its virtual asset permissions through one
    Official source
  • Special purpose vehicle (SPV)ADGM Companies Regulations 2020 · ADGM Registration Authority

    A passive holding company used to ring-fence assets and liabilities, for example to hold a group's subsidiaries or to issue securities.

    • Formed as a private company limited by shares or a Restricted Scope Company, with a commercial licence for special purpose vehicle activities only
    • Cannot conduct operational business or hire staff
    • Must show a connection to the UAE or the GCC, such as regional ownership, assets in the region, or securities listed or traded in ADGM
    • A non-exempt SPV must appoint an ADGM company service provider; subsidiaries of FSRA-authorised firms are exempt
    • The FSRA generally expects an issuer making an offer of digital securities to be incorporated in ADGM
    Official source

Dubai (VARA) Emirate

  • Free zone company (FZE or FZCO)The free zone's own company regulations, such as the DMCCA Company Regulations 2024 · The free zone authority, such as the DMCC Authority or the Dubai World Trade Centre Authority

    Most firms on VARA's register are free zone companies, with names ending in FZE, FZCO or DMCC, among them Binance FZE, OKX Middle East Fintech FZE and Payward FZCO (Kraken).

    • Two licences: the free zone authority incorporates the company and issues its commercial licence, and VARA issues the VASP licence; a commercial licence alone does not permit virtual asset activity
    • The applicant files an Initial Disclosure Questionnaire through the free zone, and VARA's Approval to Incorporate, which does not permit operating, comes before the VASP licence
    • The DWTC Free Zone offers FZCO, FZE and branch forms, with a one-year non-operational virtual assets licence until VARA grants its licence, then an operational licence
    • The DMCC Crypto Centre had more than 800 member companies at the end of 2025
    Official source
  • Mainland limited liability company (LLC)Federal Decree-Law No. 32 of 2021 on Commercial Companies · Dubai Department of Economy and Tourism (DET)

    VASPs that want to operate on Dubai's mainland form a company licensed by the DET; licensees with LLC names include CoinCorner Virtual Assets Broker & Dealer Services L.L.C. and Daman Virtual Asset Brokerage LLC.

    • The DET issues the commercial licence and VARA the VASP licence; DET branches have accepted applications for VARA-regulated activities since May 2023
    • VARA says an LLC or free zone company is preferable and does not accept applications from sole proprietorships
    • Virtual asset proprietary trading is a DET commercial licence that needs a no objection certificate from VARA
    • As with free zone licensees, VARA licensees can be registered by default with the CMA to serve the rest of the UAE
    Official source

Dubai International Financial Centre (DIFC) Financial free zone

  • DIFC private companyCompanies Law, DIFC Law No. 5 of 2018 · DIFC Registrar of Companies

    Firms seeking a DFSA licence for crypto token services, such as trading venues, brokers, custodians and fund managers, set up a DIFC company or register a foreign company's branch.

    • The DFSA requires a body corporate or partnership, formed in the DIFC or as a branch of a foreign entity from a jurisdiction with internationally compliant standards
    • The DFSA's in-principle letter, generally valid for three months, comes first; the Registrar of Companies then incorporates the company and issues its licence, and DFSA authorisation follows
    • The firm must operate from a place of business in the DIFC, with its lease registered
    • A foreign company can instead register its branch as a Recognised Company
    Official source
  • Prescribed companyDIFC Prescribed Company Regulations 2026 · DIFC Registrar of Companies

    The DIFC's SPV: a passive holding company used to hold shares and other assets or for financing transactions, but not to run a business.

    • Open to any applicant since the updated regulations were enacted on 24 July 2026, which removed the earlier qualifying requirements
    • Cannot conduct commercial or operational activities or employ staff
    • Must appoint a corporate service provider as its interface with the Registrar, unless it is an Exempt Prescribed Company
    • May be used in connection with financial services only in compliance with DFSA-administered legislation
    • USD 100 application fee and USD 1,000 annual licence fee
    Official source

What to watch

  • ADGM FSRA Consultation Paper No. 5 of 2026 on DeFi risk management guidance, open for comment until 30 November 2026.
  • How the CBUAE applies Federal Decree-Law No. 6 of 2025 to virtual asset payment services and DeFi now that the one-year transition has ended on 16 September 2026.
  • Implementation of the CMA's virtual asset framework, including virtual asset registration with the CMA and the 1 January 2027 deadline for firms to adjust their status under the new capital market law.
  • The retail launch of the Digital Dirham, which is legal tender under the Central Bank law, and the first CARF reporting year from 1 January 2027.
Company map 76 companies that make up the UAE's crypto industry, by what they do

Quick answers

Who regulates crypto in UAE?

The UAE runs 4 parallel regimes (UAE Federal (onshore), Abu Dhabi Global Market (ADGM), Dubai (VARA) and Dubai International Financial Centre (DIFC)), each with its own regulator. Six authorities shape crypto rules in the UAE. FSRA (Financial Services Regulatory Authority of ADGM): authorises and supervises virtual asset trading facilities, custodians, brokers and fiat-referenced token issuers in Abu Dhabi Global Market. VARA (Virtual Assets Regulatory Authority): licenses and supervises virtual asset service providers across Dubai, including its free zones, except the DIFC. DFSA (Dubai Financial Services Authority): regulates crypto token services in the Dubai International Financial Centre and decides which fiat crypto tokens may be used there. CMA (Capital Market Authority (formerly the Securities and Commodities Authority)): federal regulator for virtual asset activities on the mainland and in non-financial free zones outside Dubai. CBUAE (Central Bank of the UAE): licenses payment token issuers and services, supervises banks and payment firms, and issues the Digital Dirham.

Do crypto exchanges need a licence in UAE?

Yes, under a dedicated regime. VARA, the ADGM FSRA, the DFSA and the CMA each license virtual asset service providers; VARA had 58 licensees in October 2026. The main licences are FSRA Financial Services Permission for virtual asset activities from FSRA, held by 21 as of 13 Oct 2026; FSRA permission for Issuing a Fiat-Referenced Token from FSRA, held by 3 as of 13 Oct 2026; and VARA Virtual Asset Service Provider (VASP) licence from VARA, held by 58 as of 13 Oct 2026. Four Pillars rates exchange licensing in the UAE as comprehensive (reviewed 13 Oct 2026).

Are stablecoins regulated in UAE?

Yes, under a dedicated regime. CBUAE licenses dirham payment tokens (3 issuers in August 2026); ADGM licenses fiat-referenced token issuers and VARA other fiat-referenced tokens. The most recent official text is FSRA Consolidated List of Accepted Fiat-Referenced Tokens (September 2026) (Financial Services Regulatory Authority of ADGM (FSRA), 1 Sep 2026, guidance). Four Pillars rates its stablecoin regime in the UAE as comprehensive (reviewed 13 Oct 2026).

How is crypto taxed in UAE?

No personal income tax; 9% corporate tax applies to businesses. Four Pillars rates tax clarity in the UAE as comprehensive (reviewed 13 Oct 2026).

Can real-world assets be tokenised in UAE?

Yes, under a dedicated regime. ADGM digital securities and VARA issuance rules; Dubai title-deed tokens can be resold in a controlled pilot since February 2026. Four Pillars rates tokenisation and real-world assets in the UAE as comprehensive (reviewed 13 Oct 2026).

What changed most recently in UAE's crypto rules?

16 Sep 2026: Transition under the new Central Bank law ends. Article 184 of Federal Decree-Law No. 6 of 2025 gave firms in scope one year to comply; the CBUAE Board may extend it. 29 Apr 2026: ADGM finalises staking rules. Firms permitted to provide custody or manage assets may stake clients' Accepted Virtual Assets after notifying the FSRA.

What should companies watch next in UAE?

ADGM FSRA Consultation Paper No. 5 of 2026 on DeFi risk management guidance, open for comment until 30 November 2026. How the CBUAE applies Federal Decree-Law No. 6 of 2025 to virtual asset payment services and DeFi now that the one-year transition has ended on 16 September 2026. Implementation of the CMA's virtual asset framework, including virtual asset registration with the CMA and the 1 January 2027 deadline for firms to adjust their status under the new capital market law.

Timeline

  1. Transition under the new Central Bank law ends

    Article 184 of Federal Decree-Law No. 6 of 2025 gave firms in scope one year to comply; the CBUAE Board may extend it.

  2. ADGM finalises staking rules

    Firms permitted to provide custody or manage assets may stake clients' Accepted Virtual Assets after notifying the FSRA.

  3. CMA announces a federal virtual asset framework

    It sets out five modules and eight regulated activities, up from three, including an alternative trading system module.

  4. The Capital Market Authority replaces the SCA

    Federal Decree-Laws No. 32 and No. 33 of 2025 reconstituted the federal regulator and introduced a new capital market law that covers virtual assets.

  5. ADGM recognises Binance's clearing house

    Nest Clearing and Custody Limited, formerly Binance (AD) Limited, became a Recognised Clearing House; Nest Exchange Limited followed as a Recognised Investment Exchange, and broker-dealer Nest Trading Limited received a Financial Services Permission, on 5 January 2026.

  6. New Central Bank law takes effect

    Federal Decree-Law No. 6 of 2025 brings licensed financial activities carried out through any technology within the Central Bank's licensing, with one year to comply.

  7. ADGM amends its digital asset framework

    Firms now assess which virtual assets they may use and notify the FSRA, capital is aligned with the same activity in traditional assets, and privacy tokens and algorithmic stablecoins are prohibited.

  8. ADGM creates a regulated activity for issuing fiat-referenced tokens

    Issuing a Fiat-Referenced Token became a separate Regulated Activity, following Consultation Paper No. 7 of 2024.

  9. SCA and VARA sign a cooperation agreement

    VARA licensees can be registered by default with the federal regulator to serve the rest of the UAE; firms based in other emirates need a federal licence.

  10. CBUAE issues the Payment Token Services Regulation

    In force from 31 August 2024, it allows only licensed dirham payment tokens to be used for payments onshore.

  11. FATF removes the UAE from its grey list

    The UAE had been under increased monitoring since March 2022.

  12. VARA issues its Virtual Assets and Related Activities Regulations

    They set up licences for advisory, broker-dealer, custody, exchange, lending and borrowing, management and investment, and transfer and settlement services, and for Category 1 token issuance.

  13. DFSA crypto token regime takes effect in the DIFC

    The DFSA began with an initial list of recognised tokens: Bitcoin, Ether and Litecoin.

  14. Dubai Law No. 4 of 2022 creates VARA

    In force on publication on 11 March 2022, it applies across Dubai, including special development zones and free zones, but not the DIFC.

  15. ADGM introduces its crypto asset framework

    The FSRA introduced rules for spot crypto asset activities by exchanges, custodians and other intermediaries under its Financial Services and Markets Regulations.

Cite this page: Four Pillars Asia Digital Asset Policy Center, “UAE crypto regulation”, reviewed 13 Oct 2026, https://policy.4pillars.io/uae. Free to reuse with attribution; also as markdown and JSON.

More in Middle East