← Back to United Arab Emirates Regulations

United Arab Emirates Compliance Report

Generated 2026-09-22

Comprehensive Framework

Regulatory Overview

Regulatory Status
Dedicated crypto/VA legislation, licensing regime, active enforcement
Key Regulator(s)
Financial Services Regulatory Authority, Virtual Assets Regulatory Authority
Risk Level
low
Primary Legislation
Dubai Law No. 4 of 2022, SCA Decision No. 4/R.M/2026 (2026), UAE Crypto Regulation 2026: VARA Licensing and Dubai Framework ..., The DFSA's comprehensive explainer on crypto token regulation (available through, CBUAE Payment Token Services Regulation (post-2021): Permits only dirham-backed, Entities newly in scope under the New CBUAE Law have until 16 September 2026 to
Travel Rule
Adopted — Threshold: Implemented
Tax Reporting
Zero capital gains tax; zero personal income tax on crypto. 9% corporate tax (introduced 2023) when conditions met. RWA tokenization clarified 2025.. Federal Tax Authority (FTA) VAT revisions (October 2, 2024): Published exemptions for virtual asset transfers/exchanges retroactive to 2018. No direct FTA URL in results; see PwC analysis via .. Corporate Tax Law (Federal, effective 2023): 9% on business profits > AED 375,000; FTA registration required. Details at FTA site (not specified in results).. VARA (Dubai Virtual Assets Regulatory Authority): Oversees VASP licensing for VAT/corporate tax benefits.. November 15, 2024 VAT Public Clarification: Zero-rate for qualifying digital assets retroactive to 2018.

Key Facts

  • aml Post-FATF grey list exit (Feb 2024), CBUAE escalated fines totaling hundreds of millions AED in 2024–2025, targeting crypto-linked high-risk sectors like exchange houses. General penalties for unlicensed crypto activities include up to 5 years imprisonment and AED 250,000–1 million fines; money laundering via crypto carries up to AED 50 million fines, license revocation, or 10 years imprisonment. Regulatory bans (not enforcement actions): DFSA prohibited privacy tokens (e.g., Monero) in Jan 2026; federal law (Feb 2026) bans privacy/algorithmic tokens with fines up to AED 50,000 and 3 months imprisonment. No sources detail VARA/ADGM/FSRA fines against specific crypto firms; general unlicensed trading risks criminal prosecution. Limitations: Entities often unnamed; focus is AML enforcement rather than pure crypto violations; 2026 actions sparse in results. Federal Decree-Law No. 26 of 2021 is the current and operative AML/CFT law in the UAE, superseding Federal Decree No. 20/2018. VARA's licensing rules include evolving AML/CFT/sanctions requirements as updated in the Virtual Assets and Related Activities Regulations 2023 and subsequent clarifications (e.g., token issuance rules for RWAs and stablecoins), but the specific source link (securevisanow.com) is a third-party site that may not reflect the latest official regulatory framework. The 2022 joint guidance banning banks from using WhatsApp for customer services has been superseded or replaced by the New CBUAE Law of 2023, and no evidence confirms the referenced guidance remains current under the new regulatory framework.
  • custody Enhanced custody requirements for regulated firms handling crypto tokens Client asset segregation and protection standards Strengthened governance and disclosure requirements for crypto-related activities within the DIFC
  • enforcement Engaging in Licensed Financial Activities without a licence is a criminal offence, punishable by imprisonment and/or fines from AED 50,000 to AED 500 million under the UAE Central Bank's consolidated 2023/2025 regulatory framework. Maximum administrative fines increased to AED 1 billion under the New CBUAE Law, with higher sanctions for unlicensed activity and authorised individuals.White & Case CBUAE conducts regular supervision and examinations covering capital adequacy, risk management, and compliance.UAE Banks by License Type
  • general Supervised Learning: Training models with labeled data (e.g., "This image is a cat," "This text is spam"). Unsupervised Learning: Finding hidden patterns or structures in unlabeled data (e.g., clustering customer segments). Reinforcement Learning (RL): Training agents to make decisions through trial and error within an environment to maximize a reward (e.g., training a bot to play Chess or Go). Convolutional Neural Networks (CNNs): The standard for image processing and computer vision. Recurrent Neural Networks (RNNs) / Transformers: Critical for sequence data, especially language and time series. (Transformers are the architecture behind modern Large Language Models like ChatGPT). Key Focus: Sentiment analysis, machine translation, text summarization, and dialogue generation. Dominant Tool: Large Language Models (LLMs). Key Focus: Image recognition, object detection (identifying cars, people, etc., in a frame), image segmentation (pixel-by-pixel labeling), and facial recognition.
  • licensing SCA — Federal authority — virtual asset supervision across UAE including Free Zones (Cabinet Resolution 111/2022) VARA — Dubai virtual asset regulation (excluding DIFC) — 7 activity categories. World's first standalone VA regulator. ADGM FSRA — Abu Dhabi Global Market — institutional focus, common law jurisdiction, ex-FCA/MAS staff DFSA — DIFC — investment/security tokens only, updated framework Jan 2026 CBUAE — Central bank — broader financial ecosystem, goAML reporting VARA Regulations (Dubai Law No. 4 of 2022) (2023) — 7-category VASP licensing: advisory, broker-dealer, custody, exchange, lending, transfer, VA management ADGM FSMR / Virtual Asset Framework (2018) — Financial services permission for crypto asset business — amended 2023 SCA Decision No. 4/R.M/2026 (2026) — Federal crypto law update — 8 licensed activities, prohibitions on privacy/algorithmic tokens
  • securities Cryptocurrency and digital asset activities are legal in the UAE but are subject to a bifurcated regulatory regime: the Securities and Commodities Authority (SCA) oversees securities and commodities activities at the federal level, while the Dubai Financial Services Authority (DFSA) regulates financial services conducted within the Dubai International Financial Centre (DIFC), a financial free zone. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority The SCA is the principal federal regulator for securities and commodities, with authority derived from federal laws and its own regulatory framework; the DFSA operates as an independent regulator within the DIFC, with its own legislative and rule-making powers. Regulatory Framework | DFSA Licensing is available through both authorities — the SCA licenses securities and commodities activities at the federal level, and the DFSA licenses financial services within the DIFC, including those involving crypto assets and digital tokens. Laws and Rules | DFSA | THE Independent Regulator OF Financial… The UAE has been actively developing its virtual asset regulatory framework, and both the SCA and DFSA have issued licenses to financial institutions and service providers, though the practical reality is that dual regulation (federal and free-zone) requires careful navigation depending on where a business is domiciled. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority Compliance with AML/CTF and sanctions obligations is mandatory for all regulated entities, with both the SCA and DFSA enforcing comprehensive AML frameworks aligned with FATF standards. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA The Securities and Commodities Authority (SCA) is the federal regulator responsible for overseeing securities, commodities, and financial markets in the UAE, operating under the Ministry of Economy and headquartered in Abu Dhabi. Reach Us | Securities and Commodities Authority The SCA's regulatory authority is grounded in its mandate to protect investors, ensure market transparency, and maintain fair and efficient capital markets across the Emirates. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority The SCA maintains an official website at https://beta.sca.gov.ae and publishes regulations through its regulatory portal at https://regulations.sca.gov.ae, where legal instruments and rulebooks are made available. Reach Us | Securities and Commodities Authority
  • stablecoin CBUAE: Oversees AED-backed stablecoin arrangements. VARA (Dubai): Approval per FRVA; min. capital AED 1.5M + 2% of supply; restricted to virtual asset ecosystem. FSRA (ADGM): Approved issuance by licensed entities (e.g., Paxos). DFSA (DIFC): Firms self-assess tokens; fiat crypto tokens must meet strict standards. Cryptocurrency and stablecoin activity is legal in the UAE, but the regulatory landscape has been unified under the Virtual Assets Regulatory Authority (VARA) rather than remaining fragmented across multiple free zones and mainland authorities. The UAE now employs a unified regulatory framework under VARA for mainland Dubai virtual asset activities, with DFSA retaining authority within the DIFC. The Financial Services Regulatory Authority (FSRA) is the financial regulator within Abu Dhabi Global Market (ADGM), established as an independent jurisdiction with its own legal framework based on English common law. Digital Assets ADGM | Financial Services Regulatory Authority The Dubai Financial Services Authority (DFSA) is the independent regulator of financial services conducted in the Dubai International Financial Centre (DIFC), a financial free zone with its own legal system. DFSA | The independent regulator of financial services of DIFC
  • status United Arab Emirates regulatory status: comprehensive Regulated licenses in the UAE mainland are generally valid for one year and must be renewed annually, but free zone licenses often have variable validity periods and may offer multi-year options, governed independently by each free zone authority rather than solely by CBUAE.HLB HAMT. Entities newly in scope under the New CBUAE Law have until 16 September 2026 to obtain necessary licences.White & Case
  • tax Zero capital gains tax; zero personal income tax on crypto. 9% corporate tax (introduced 2023) when conditions met. RWA tokenization clarified 2025. Federal Tax Authority (FTA) VAT revisions (October 2, 2024): Published exemptions for virtual asset transfers/exchanges retroactive to 2018. No direct FTA URL in results; see PwC analysis via . Corporate Tax Law (Federal, effective 2023): 9% on business profits > AED 375,000; FTA registration required. Details at FTA site (not specified in results). VARA (Dubai Virtual Assets Regulatory Authority): Oversees VASP licensing for VAT/corporate tax benefits. November 15, 2024 VAT Public Clarification: Zero-rate for qualifying digital assets retroactive to 2018.
  • travel rule Travel Rule adopted — threshold: AED 3,500

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-06. View full profile