3
UAE VASP regulators
7
VARA activity categories
6–12m
Typical VARA licence timeline
AI
Pathway advisory for your VASP
The UAE is one of the most active jurisdictions globally for virtual asset regulation — and one of the most complex to navigate. Three regulators issue VASP licences across different jurisdictions, each with its own framework, capital requirements, and timeline. Choosing the wrong regulator costs money, time, and sometimes requires a complete restructure. Scout's virtual asset advisory maps your specific activities, target market, and operating model to the right regulatory pathway — VARA, ADGM FSRA, or DIFC DFSA — and produces a scored recommendation with cost, capital, and milestone breakdown.
The three UAE VASP regulators are not interchangeable. Each has a distinct jurisdiction, cost profile, and activity framework. The right choice depends on where you want to operate, who your clients are, and what activities you need licensed.
VARA (Dubai, excl. DIFC) — mandatory for VASPs operating in Dubai; covers exchange, custody, broker-dealer, advisory, lending, payments, and investment management
ADGM FSRA — best for institutional crypto businesses, fund managers holding crypto, and FinTech firms wanting Abu Dhabi positioning; longer track record for crypto regulation
DIFC DFSA — for VASPs wanting Dubai IFC brand positioning; newer crypto framework; often chosen by firms already in DIFC for other financial services
CBUAE — for payment-related virtual asset services on the UAE mainland (remittance, payment tokens)
CMA (Capital Market Authority, federal) — replaced the SCA on 1 January 2026; licenses VA activity outside Dubai, DIFC and ADGM, one licence per activity
Innovation City, Ras Al Khaimah (formerly RAK DAO) — company base for non-regulated Web3 businesses and DAO Associations; not a VASP licence
VARA's framework covers seven activities, each requiring its own licence. Most VASPs require multiple activity licences — an exchange that also offers custody and advisory needs three separate authorisations.
Exchange Services — operating a virtual asset trading platform; highest capital requirement (USD 2M+)
Custody Services — safekeeping virtual assets for clients; USD 500K minimum capital
Broker-Dealer Services — buying and selling virtual assets as principal or agent; USD 200K minimum capital
Advisory Services — investment advice on virtual assets; USD 100K minimum capital
Lending and Borrowing — crypto lending products; capital varies by book size
Payment and Remittance — VA payment services; subject to CBUAE coordination
Management and Investment Services — VA portfolio and fund management; USD 500K+ minimum capital
The VARA licence application is a multi-stage process. VARA offers an MVP (Minimum Viable Product) licence for firms in earlier operational stages before granting a full licence. Scout's advisory includes a milestone-by-milestone VARA setup timeline.
Stage 1: Initial notification and activity registration with VARA
Stage 2: MVP licence application — business plan, product description, control framework
Stage 3: Full licence application — AML/CFT programme, technology audit, capital evidence
Stage 4: VARA review and queries — typically 3–6 months
Stage 5: Licence grant and operational conditions
Ongoing: Annual supervisory fees, regulatory reporting, technology audit refresh
Estimated total first-year cost: USD 250,000–1,000,000+ depending on activity scope
How Scout works
Brief entry
Describe your business in plain English. Scout's classifier identifies the engagement type and any missing critical information.
Structured intake
AI-driven Q&A across 14–18 pillars tailored to your engagement type — jurisdiction, activity, ownership, capital, timeline.
Zone scoring
All 25 UAE zones scored deterministically across 8 dimensions. Top 3 ranked with cost, speed, and suitability breakdown.
Advisory report
Downloadable advisory report with recommended zone, regulatory approvals required, compliance checklist, and setup timeline.
Which regulator issues crypto licences in the UAE?
Three regulators issue VASP licences: VARA (Dubai, excl. DIFC), ADGM FSRA (Abu Dhabi Global Market), and DIFC DFSA. Mainland UAE activities involving payment or investment in virtual assets may also involve CBUAE or SCA.
How much does a VARA licence cost?
VARA application fees range from AED 5,000–50,000 by activity. Annual supervisory fees add AED 5,000–100,000+. Minimum capital ranges from USD 100,000 (Advisory) to USD 2M+ (Exchange). Total first-year cost including legal, compliance, and tech setup typically runs USD 250,000–1,000,000+.
How long does it take to get a crypto licence in the UAE?
VARA: 6–12 months from application to full licence (MVP licence available earlier). ADGM FSRA: 4–8 months. DIFC DFSA: 4–6 months. All timelines assume complete documentation.
What is a VARA MVP licence?
VARA's MVP (Minimum Viable Product) licence is an intermediate authorisation for VASPs that are operationally ready but not yet fully compliant with all VARA requirements. It allows limited operations while the full licence application is reviewed — reducing time to revenue.
Can a VARA-licensed firm serve international clients?
Yes — VARA-licensed firms can serve both UAE and international clients, subject to the target jurisdiction's own regulatory requirements. A VARA licence does not provide a passport into other jurisdictions. Serving clients in the EU, UK, or US requires compliance with those jurisdictions' own rules.
Leave your details and a UAE setup adviser will call you back about a crypto / VASP licence. There's no charge to ask.