Cryptocurrency in UAE & Dubai (2026): Laws, VARA Licences, Tax, and Market Reality Explained

Last Updated on September 3, 2026 by Shitiz Srivastava

Cryptocurrencies and broader “Virtual Assets” are permitted in the United Arab Emirates (“UAE”) under a multi-regulatory system that divides regulatory responsibility by

(i) geographic area (Mainland vs. Financial Free Zones); and

(ii) type of use (Investment-type Activity vs. Payment/ Stable Coin Activity).

At the Federal Level, Cabinet Resolution No. 111 of 2022, is a foundational piece of legislation that establishes Federal Wide oversight of the industry (including coordination with Local Licensing Authorities); and links the industry to Anti-Money Laundering (“AML”), Counter-Financing Terrorism (“CFT”), Investor Protection obligations; and Investor Facing Requirements.

Regulation in Dubai is Bifurcated. Most of Dubai (including many Free Zones) is Regulated by Dubai Virtual Asset Regulatory Authority (“DVARA”); While, The Dubai International Financial Centre (“DIFC”) is Regulated by the Dubai Financial Services Authority (“DFSA”).

Independently, ADGM is Located in Abu Dhabi (Not Dubai); and is Regulated by the Financial Services Regulatory Authority (“FSRA”) Pursuant to a Detailed Virtual Asset Framework which (Among Other Things) Historically Relyed Upon an Accepted Virtual Assets Concept; and Controlled Permissions for Trading Facilities, Intermediaries and Custodians.

Download the complete ADGM Virtual Asset Regulation Guidance to understand licensing, compliance, and operational requirements for crypto businesses in Abu Dhabi Global Market.

Recent Trend (2023-2026): The UAE Has Moved Toward More Granular Licensing, Stricter Marketing/Consumer Controls; Explicit Payment-Token/Stablecoin Oversight; and Greater Cross-Border Tax Transparency Obligations (CARF); All While Actively Recruiting Institutional Market Infrastructure and Tokenization Projects.

Download the complete UAE Virtual Assets Regulation (Cabinet Resolution No. 111 of 2022) to understand licensing, compliance, and legal requirements for crypto and digital asset businesses in the UAE.

Legal and regulatory framework

The UAE’s legal and regulatory approach to regulating digital currencies can be viewed in three distinct yet interconnected areas.

First, the Federal “Baseline” layer. In July 2022, the UAE Ministry of Economy issued Cabinet Resolution No. 111 of 2022 to establish a federal regulatory structure applicable to all of the UAE for the regulation of virtual assets and virtual asset service providers (“VASPs”).

This resolution creates a minimum set of requirements for VASPs which include

(i) governance requirements and technological control requirements;

(ii) disclosure of risks to customers/investors; and

(iii) compliance with the UAE Anti-Money Laundering/Combating the Financing of Terrorism (“AML/CFT”) Law and FATF Recommendations.

This resolution also provides for the Securities & Commodities Authority (“SCA”) to act as a national coordinator/supervisor over the various local licensing authorities and requires each local authority to report to the SCA on the VASPs they license, and the transactions associated with these VASPs, when requested by the SCA.

Second, the Dubai layer. Within Dubai, the Virtual Asset Regulatory Authority (“VARA”) operates under two primary mechanisms:

VARA’s Rule Book System: This system includes an array of topics relevant to the regulation of virtual assets. These topics include regulated activities, licensing, AML/CFT Obligations, Market Offences, Marketing Rules, etc.

VARA has published multiple versions of its Virtual Assets and Related Activities Regulations 2023, with the most recent version being published on 19 June 2025. This demonstrates that VARA has continually revised its rule book.

VARA Public Register: VARA maintains a public register of fully licensed VASPs and firms holding in-principle approval (“IPA”).

VARA has specifically warned that firms holding IPA status are prohibited from engaging in operations until they have obtained full licensure.

Third, Financial Free Zones. There are two primary financial free zones in the UAE:

Abu Dhabi Global Markets (“ADGM”) and

Dubai International Financial Centre (“DIFC”).

ADGM: Within the ADGM, the FSRA regulates virtual assets through a combination of regulations and detailed guidance. Examples of specific guidance include custodial expectations and market infrastructure obligations.

DIFC: Within the DIFC, the DFSA regulates crypto tokens through a Crypto Tokens regime.

The DFSA has continued to update investor protection and client asset safeguard provisions, including significant updates effective 12 January 2026.

Also Read : The Dubai Tax Illusion: You’re Still Paying, Just Differently

Comparison table: ADGM vs DIFC vs mainland UAE

Dimension	Mainland UAE (federal baseline + emirate authorities)	ADGM (Abu Dhabi)	DIFC (Dubai)
Primary regulator(s)	SCA (investment‑type VA activities) + national payment regulator for payment tokens/stablecoins (see below) + local licensing authorities under Cabinet framework	FSRA (ADGM) under FSMR + FSRA rulebooks and guidance	DFSA (DIFC) under DFSA Rulebook modules (Crypto Token + Client Assets regime)
Geographic scope	UAE mainland + relevant emirate jurisdictions (distinct from financial free zones)	ADGM free zone jurisdiction (Abu Dhabi)	DIFC free zone jurisdiction (Dubai)
Token classification / perimeter	Distinguishes investment‑purpose vs payment‑purpose treatment at the system level; Cabinet framework explicitly links sector obligations to AML/CFT and investor disclosure	Structured framework for regulated activities; historically limited to “Accepted Virtual Assets” used in regulated services	Crypto Tokens used in regulated services; Jan 2026 reforms shift more token suitability responsibility to firms (see below)
Licensing style	Licensing/approvals via SCA and/or competent local authority; minimum requirements and ongoing supervision duties set federally	Financial Services Permission (FSP) model + exchange/MTF recognition constructs; strong custody and market‑infrastructure focus.	DFSA authorisation/variation of permissions; enhanced client‑asset safeguarding and reporting obligations
Retail investor posture (high level)	Risk disclosure and consumer protection framed as minimum requirements; detailed requirements vary by licence/activity	Often more institution‑style framing (permissions, custody, market infrastructure); product/asset acceptance controls	Explicit client asset rules and conduct requirements; reforms emphasize safeguards and documented suitability assessments

Licensing frameworks and regulations, and anti-money laundering and combating financing of terrorism (AML/CFT) requirements for VASPs.

Dubai VARA licensing categories and consumer-facing guardrails

VARA defines and regulates specific “VA Activities.”

VARA’s Schedule of VA Activities includes various types of activities (among other things) such as advisory, broker-dealer, custodian, exchange, lending/borrowing, VA management/investment, and VA transfer/settlement.

VARA also incorporates a number of suitability-type characteristics into the provision of personal recommendations (knowledge/experience, objectives, and financial situation).

The public register maintained by VARA provides additional protection to consumers: customers will be able to confirm whether a provider is licensed to provide services in full, or only licensed as an IPA holder; VARA states that IPA holders are prohibited from operating or servicing clients.

DIFC: DFSA’s transition towards firm-led suitability assessments for crypto tokens and stronger protections for client assets.

In respect of the DFSA’s proposed 2026 changes to how it approaches regulation of crypto assets, this represents a significant change in model.

Rather than a “list of approved crypto assets” being relied upon as the main control mechanism for regulating suitability assessments, the DFSA has indicated that firms will be responsible for assessing the suitability of each crypto token to meet suitability criteria on a reasoned and documented basis, coupled with enhanced investor safeguards and reporting.

DFSA has also emphasized that protecting client money, client investments, and client crypto tokens is a key area of focus for the regulator and has strengthened existing client assets regime through new rules.

ADGM: virtual asset market structure and virtual asset custody expectations.

ADGM’s FSRA virtual asset guidance clearly outlines the scope of the guidance framework and covers the areas of trading platforms (eg. MTF-type activities), intermediaries, and custodians.

Additionally, ADGM has publicly communicated its ongoing commitment to continue enhancing its digital assets framework, including proposals/rules regarding staking-related activities and fiat-referenced tokens.

Furthermore, ADGM has confirmed that over 20 regulated firms are currently licensed by FSRA to conduct activities involving Virtual Assets or Fiat-Referenced Tokens.

National-level AML/CFT obligations and FATF alignment.

At a systems level, AML/CFT is viewed as a fundamental requirement for all VASPs within the UAE.

As part of the national-level regulatory framework, UAE authorities have outlined the need for VASPs to comply with the UAE AML/CFT laws and regulations.

Additionally, the central bank’s risk guidance has reinforced that VASPs are required to submit suspicious transaction reports and that the provision of VASP services without obtaining the necessary license/registration under the AML/CFT framework is strictly prohibited.

International-level, the UAE’s AML posture has been strengthened: the Financial Action Task Force (FATF) removed the UAE from the ‘increased monitoring’ list in February 2024; this has been frequently referred to in UAE official and institutional documentation as part of the broader compliance environment.

Major regulatory changes in the since 2023

Regulatory developments have been at a rapid pace for the UAE across 2023 – 2026. These were primarily responsible for what was referred to as the “load-bearing” regulatory work:

• Consolidation and minimum requirements of Federal laws – Resolution number 111 of 2022 of the UAE’s Council of Ministers and which took effect in 2023 set forth national minimum standards for all Virtual Asset Service Providers (“VASPs”) in the UAE, including the expected level of risk disclosure to consumers, and the expected coordination between regulatory and licensing bodies.
• Dubai: continuous iteration of VARA’s Rulebook for VASPs, and marketing regulations. VARA has iteratively developed their core regulations for VASPs with updates provided in October 2024 and as of June 2025, VARA established a Marketing Obligations framework for VASPs.
• DIFC: Modernization efforts of the DFSA (2024-2026). In 2024 and 2025, the DFSA updated their approach to tokenization and crypto tokens and implemented a new Crypto Token regime as of January 2026, which moved primary suitability assessments to firms and emphasized enhanced protections for customers.
• National Stablecoin/Payment Tokens Framework (2024): National Payment-Token Services Regulations. As stated on the website of the Central Bank of the UAE,[33] they implemented a comprehensive Payment Token Services Regulation in June 2024 that covers issuance, custody & transfer, and conversion of such products with robust AML, consumer protection and conduct standards.
• Clarification of VAT Treatment for Virtual Assets (2024-2025): Executive Regulation of Value Added Tax. The UAE’s Executive Regulation of Value Added Tax now clearly defines “Virtual Assets” and establishes certain Virtual Asset transactions as being part of the Financial Services Article – this will be material for the VAT position and Input Tax Recovery for crypto businesses.
• UAE’s tax transparency trajectory: CARF Commitment (2024), Guidance (2025). The UAE (via the UAE Ministry of Finance), published guidance explaining the OECD Crypto-Asset Reporting Framework (CARF) and stated that they would start exchanging data using CARF by 2028 for the 2027 tax year.

Reporting Implications of the UAE’s Tax Stance

Although many general readers and individual investors are attracted to the UAE’s tax structure (the UAE Government Portal indicates that there is no income tax levied on individuals), the fact that there is no individual income tax does not necessarily mean that there is no tax or no obligation to comply with tax laws and regulations.
That said, “no individual income tax” does not mean “no tax or no compliance obligations.”

Corporate tax

As of 1st June 2023, the UAE introduced a broad-based federal corporate tax regime with the following rates:

• 0% Corporate Tax on profits up to AED 375,000.
• 9% Corporate Tax on profits exceeding AED 375,000.
• Subject to the rules and exemptions contained in the Corporate Tax Law and Guidance.

Therefore, in order to determine whether to model corporate tax liabilities, crypto businesses acting as corporations (exchanges, broker-dealers, custodians, token issuers, advisory firms etc.) should follow the same procedures as other regulated financial/fintech businesses (including transfer pricing and maintaining records wherever applicable).

VAT

In addition to defining “Virtual Assets”, the VAT Executive Regulation classifies certain Virtual Asset transactions under the “Financial Services” Article, notably including Transfer of Ownership and Conversion.

Moreover, as noted previously, VA activities falling within this category may affect the eligibility of VASPs for a VAT exemption and thereby change input VAT recoveries and reportability.

For example, the UAE Tax Authority has issued a Public Clarification on the VAT treatment of crypto mining.

Also Read : Natural Person Corporate Tax in UAE: What Indian Freelancers & Sole Proprietors Need to Know

Cross-border tax transparency (CARF)

According to the UAE’s CARF Guidance, the UAE views crypto-assets as digital representations of value secured via cryptography/distributed ledger technologies and outlines a timeline for future automated exchanges of information about crypto-assets between tax authorities (commencing by 2028 for 2027 data).

Market structure, licensed businesses, indicators of adoption and major hub cities

Listed exchanges and custodian banks that are registered in Dubai (a list driven by VARA’s register for VASPs)

As of early 2026, VARA maintains a publicly available register showing dozens of licensed VASPs and the specific licensed activities for which they are authorized.

Examples of notable registrants include Binance,Crypto.com, OKX, Deribit, BitOasis, CoinMENA, Komainu, Hex Trust, and BitGo.

Each of these registrants have been granted licenses by VARA for specific licensed activities and license dates.

For end-users, the operational takeaway from this information is straightforward: use the register to determine if the entity you plan to onboard is licensed to conduct the specific activities you wish them to perform.

Indicators of institutional and market infrastructure development

Abu Dhabi’s ADGM has been successful in attracting significant institutional players and market participants.

In 2022, Kraken, was granted a full financial services license by ADGM allowing it to offer regulated access to virtual assets in the region.

Additionally, there is evidence of large-scale institutional participation in Dubai and across the UAE.

An example of such activity includes a Reuters-reported partnership between DAMAC and MANTRA to tokenize at least $1 billion worth of physical assets.

The partnership illustrates a growing trend towards tokenizing real-world assets in the region.

Adoption indicators: inflows, ownership estimates, ATMs, and payments

There are several indicators of adoption evident in the UAE, including on-chain and transaction-value metrics. Chainalysis estimates that the UAE received in excess of $30 billion in cryptocurrency between July 2023 and June 2024, and nearly $56 billion in cryptocurrency between July 2024 and June 2025.

These estimates suggest that there is growing adoption of cryptocurrencies in the UAE.

Estimates of cryptocurrency ownership in the UAE vary depending upon the methodology employed.

However, many industry datasets estimate a significantly higher percentage of citizens own or have owned cryptocurrencies compared to global averages.

The number of physical “crypto ATM” locations appears to be relatively low.

An industry directory tracking “Bitcoin ATMs” in the UAE reported zero listed “bitcoin ATMs” at the time of access.

While this may be a single data point, it is consistent with the notion that adoption of cryptocurrencies in the UAE is largely being facilitated through mobile applications and online exchanges rather than through physical ATM locations.

Integration of cryptocurrencies into mainstream merchant/payments platforms is becoming increasingly prevalent.

For example, Emirates entered into an MOU with Crypto.com to potentially implement Crypto.com Pay.

Significant Crypto Business Hubs

Dubai and the UAE have developed “ecosystems,” not merely laws.

One of the most well-known ecosystems is the Dubai Multi Commodities Centre (DMCC) which has cultivated a community of hundreds of businesses within its Crypto Centre.

Download the DMCC Crypto Centre 2025 fact sheet to explore Dubai’s fastest-growing Web3 ecosystem, licensing options, and funding opportunities for crypto businesses.

Similarly, ecosystem building is also being pursued in Abu Dhabi. ADGM continues to grow its jurisdiction and report increases in both entities and assets under management.

This creates an environment conducive to the development of licensed digital asset businesses.

The UAE also reports on broader fintech capabilities, including data and regtech capacity building.

Central bank reporting also indicates plans for additional regulatory tools related to payment tokens and the supervisory framework supporting those tokens.

Risks, investor protections, and near-term trends

While the UAE is open to innovation in the development of digital asset technologies, it still maintains significant risk tolerance boundaries and investor protections.

Key Risks to Users and Investors.

Digital asset markets continue to be highly volatile.

Sudden and unexpected retail investment losses are possible.

Although regulatory licensing provides some assurance, it does not eliminate the risk associated with digital asset market volatility.

Additionally, there are a variety of operational risks (custody loss, smart contract errors, cross-border counterparty risk) and fraud/market-abuse risks (market manipulation, misleading advertisements) present in digital asset transactions.

VARA and DFSA recognize the importance of protecting consumers through regulatory oversight and both regimes have established rules designed to minimize mismanagement and misrepresentation risk within their respective jurisdictions.

Protective measures for investors are beginning to take shape in UAE regulatory frameworks.

Some common themes among various regulatory regimes include:

(i) gateways for licensure and scope of licensed activities;

(ii) governance and system controls;

(iii) clear disclosure obligations;

(iv) client-asset safeguards and custody standards (particularly in the DIFC and ADGM); and

(v) AML/CFT compliance and suspicious transaction reporting.

Trends to Watch.

It is likely that there will be a growing trend towards convergence and “professionalization” in the UAE. As part of this trend, DIFC has begun to move towards a firm-led suitability assessment with documentation requirements, while ADGM continues to refine its processes for approved assets and regulation of staking and fiat-referenced tokens. VARA similarly continues to refine its rule books and market-conduct regulations.

It is likely that another trend to emerge in the UAE will be around the payments and stablecoin space.

The central bank has indicated that it seeks to balance innovation with regulatory protection and has emphasized the need for strict AML and consumer standards for “crypto used as money”.

Another trend that is emerging in the UAE is the tokenization of physical assets (real estate, etc.). This trend is gaining momentum due to reported global commercial initiatives.

Lastly, tax transparency will begin to have an impact on operations. Implementation timelines for CARF indicate that reporting pipelines and compliance tooling will become increasingly important over the next few years.

Timeline of key regulatory milestones

🔹 January 2023 — Federal Framework Begins
Cabinet Resolution 111/2022 comes into force, establishing a UAE-wide baseline for virtual assets and VASP regulation, with coordinated oversight across authorities.

---

🔹 February 2023 — Dubai VARA Rulebooks Introduced
VARA releases its core regulatory rulebooks, defining virtual asset activities, licensing categories, and compliance structure for Dubai (excluding DIFC).

---

🔹 December 2023 — ADGM Framework Updated
The FSRA updates its virtual asset guidance, refining the regulatory framework for digital assets within ADGM.

---

🔹 February 2024 — FATF Grey List Exit
The UAE is removed from FATF’s “increased monitoring” list, strengthening global confidence in its AML and financial compliance systems.

---

🔹 October 2024 — VAT Rules Clarified for Crypto
UAE amends VAT executive regulations to explicitly define virtual assets and align certain transactions under financial services treatment.

---

🔹 February 2025 — VARA Rulebook Version 2.0
Dubai’s VARA introduces a major update to its rulebooks, signaling continuous regulatory evolution and tightening of compliance standards.

---

🔹 June 2025 — ADGM Framework Enhancements
FSRA implements amendments including accepted virtual asset processes, capital requirements, and operational controls.

---

🔹 January 2026 — DIFC (DFSA) Regime Shift
DFSA updates its crypto token regime, moving toward firm-led token assessment with enhanced investor protection safeguards.

Also Read : What is Fed Decree-Law No. 47 of 2022 in UAE corporaTe LAW

FAQ