If you run a crypto business, or you are thinking about moving one here, the short answer is this. Dubai is not a loophole. It is a licensed market with a written rulebook, a named regulator, capital requirements and annual supervision fees. That is exactly why serious money moved in.
Almost every virtual asset activity carried out in or from Dubai needs a licence from the Virtual Assets Regulatory Authority, better known as VARA. The one big exception is the Dubai International Financial Centre, which has its own regulator. Individuals still pay no personal income tax on crypto gains. Companies pay corporate tax at 9 percent on profits above AED 375,000, with a possible 0 percent rate inside free zones if they meet strict conditions.
So the honest summary is that Dubai swapped ambiguity for paperwork. You know the rules, you know the cost, and you can plan around both. This guide walks through who regulates what, what a licence really costs, how tax works, and the practical problems people only find out about after they arrive.
The story did not start with a press release in 2024. Dubai published a blockchain strategy back in 2017, when most governments were still deciding whether crypto was a fad or a fraud. That early work mattered less for the technology and more for the habit it built inside government departments of treating digital assets as something to organise rather than something to ban.
The real turning point came in 2022. Dubai passed Law No. 4 of 2022 on the regulation of virtual assets and created VARA, the first regulator anywhere set up purely for this sector. Before that, crypto firms in the UAE were operating under general trade licences and hoping nobody asked difficult questions.
Then came February 2024, when the UAE was removed from the Financial Action Task Force grey list. That single decision did more for institutional confidence than any conference. Compliance teams at large banks and funds treat grey list status as a hard stop, so being off the list opened doors that marketing never could.
That momentum is also visible at major industry gatherings. Every year, founders, regulators, investors and exchanges meet at Crypto Expo Dubai to discuss licensing, institutional adoption and the future of digital assets, making it one of the clearest indicators of where Dubai’s crypto ecosystem is heading.
By 2025 the rulebooks were largely finished. In 2026 the focus shifted again, this time to supervision. More than 80 virtual asset service providers are now licensed across the UAE’s five regulators. Getting a licence is no longer the interesting question. Keeping it is.
This is the part most articles skip, and it is the part that costs people money. The UAE does not have one crypto regulator. It has several, and the one that applies to you depends on the exact square of land your office sits on.
VARA is the sole authority for virtual assets across Dubai’s mainland and its free zones, with the DIFC carved out. If your company is registered in DMCC, Dubai World Trade Centre, Dubai Silicon Oasis or on the mainland through the Department of Economy and Tourism, VARA is your regulator.
Because the federal government delegated this authority to VARA, a VARA licence lets you operate inside the emirate without a separate federal permission. That is a genuine convenience and one of the reasons Dubai pulled ahead.
The Dubai International Financial Centre is a separate legal jurisdiction with its own common law courts. Crypto activity there is supervised by the Dubai Financial Services Authority, not VARA. The DFSA runs a recognised token regime, meaning it publishes which tokens firms are allowed to deal in.
Firms that want to sit close to traditional finance, private banks and fund structures often prefer the DIFC. It is generally slower and more expensive to enter, but the brand carries weight with institutional counterparties.
Abu Dhabi Global Market on Al Maryah Island runs one of the oldest digital asset frameworks in the region, supervised by the Financial Services Regulatory Authority. It has been particularly popular with custodians, exchanges and tokenisation businesses that want a common law setting.
Do not assume Dubai is automatically the better choice. Plenty of firms compare VARA and ADGM side by side and pick Abu Dhabi on the basis of fund structures, staff costs or a specific activity permission.
If your token is designed to be used for payments, especially a dirham backed stablecoin, the Central Bank of the UAE sits in the picture through its payment token services regime. Issuing or facilitating payment tokens is treated as a payments matter first and a crypto matter second.
The Capital Market Authority took over from the Securities and Commodities Authority on 1 January 2026 and issued a new virtual assets framework in April 2026. That framework expanded regulated activities from three categories to eight and applies to onshore activity across the country.
It runs in parallel with VARA rather than replacing it. VARA continues to regulate Dubai, while the CMA provides broader onshore oversight for the rest of the UAE.
VARA does not issue a generic crypto licence. You apply for one or more activity permissions, all sitting under a single VASP licence. The activities are:
Each one has its own rulebook covering capital, governance, technology and anti money laundering duties. Custody usually has to sit in its own separate entity, which surprises founders who expected to run trading and custody under one roof.
Pick your activities carefully at the start. Adding a permission later is a fresh regulatory conversation, not a form update, and your capital requirement can jump the moment you take custody of client assets.
New firms go through Approval to Incorporate first, then the full VASP licence application. The first stage tests whether the shareholders, business model and source of funds are acceptable. The second stage tests whether the actual operation is ready to run.
Plan for months, not weeks. The delay is rarely VARA. It is usually the applicant, still drafting policies or waiting on documents from a home jurisdiction.
Published figures move, and the exact number depends on your activity mix, so always check the current VARA fee schedule before you budget. As an indicative range, application fees sit roughly between AED 40,000 and AED 100,000, with annual supervision fees running from around AED 80,000 to AED 200,000 depending on the activity.
Paid up capital is the bigger number, and it is where most business plans get rewritten. VARA sets it as the higher of a fixed amount or a percentage of your fixed annual overheads, which means a firm with a large office and a big team needs more capital than a lean one doing the same activity.
Indicative Paid up Capital Requirements
| Activity | Requirement | Note |
| Exchange services | Higher of AED 800,000 or 15 percent of fixed annual overheads with approved custody arrangements. Otherwise the higher of AED 1,500,000 or 25 percent | The heaviest technology and governance burden of any category |
| Custody services | Higher of AED 600,000 or 25 percent of fixed annual overheads | Normally requires a standalone entity |
| Broker dealer services | Higher of AED 400,000 or 15 percent with approved custody arrangements. Otherwise the higher of AED 600,000 or 25 percent | Your structure changes the number, not just the label |
| Lending and borrowing | Higher of AED 500,000 or 25 percent of fixed annual overheads | Close attention paid to collateral policies |
| Management and investment | Higher of AED 280,000 or 15 percent with approved custody arrangements. Otherwise the higher of AED 500,000 or 25 percent | Often paired with a fund structure |
| Category 1 virtual asset issuance | As set out in the VA Issuance Rulebook and its annexes | Do not assume the general fee schedule covers you |
Figures above are indicative and drawn from published guidance. Treat them as a planning starting point and confirm with a licensed adviser before you commit capital.
The regulatory business plan is the centre of the application. It needs to explain your revenue model, your client segments, your risk appetite and how the technology actually works, in language a supervisor can test later.
Alongside that you need anti money laundering and counter terrorist financing policies, governance documents, fit and proper evidence for senior people, and a wind down plan. That last one catches people out. Every VASP has to maintain a wind down plan whether or not they have any intention of closing.
VARA issued version 2.0 of its full rulebook framework in May 2025, and it took effect on 19 June 2025 after a 30 day transition period. That update introduced tighter governance expectations, the wind down plan duty and a technology governance and risk framework.
It also created the sponsored VASP concept. A licensed firm can sponsor a related entity to carry out activities in Dubai, but the sponsor stays responsible for the sponsored firm’s compliance. It is a route to market, not a shortcut.
Version 2.1 of the Exchange Services Rulebook took effect on 31 March 2026 and brought derivatives properly inside the regime. After running a pilot programme, VARA built a dedicated framework for exchange traded derivatives instead of supervising them through general principles. Very few jurisdictions have done that.
April 2026 brought guidance on virtual asset issuance, which shifted regulatory attention upstream to how tokens are created rather than only how they trade. Issuers of fiat referenced and asset referenced tokens need a Category 1 licence. Category 2 issuance can proceed without one, but only through an already licensed distributor, and that distributor carries the due diligence duty.
One clear prohibition is worth memorising. Anonymity enhancing cryptocurrencies, meaning privacy coins, cannot be issued and related activities cannot be carried out in Dubai.
There is no personal income tax in the UAE and no separate federal capital gains tax for individuals. Buying, holding and selling crypto in a personal capacity is not taxed, and personal investment income is specifically outside the scope of corporate tax for natural persons.
The catch is the line between investing and trading as a business. If you trade frequently, systematically and at volume, the Federal Tax Authority may treat that as a business activity regardless of whether you set up a company.
Corporate tax is 9 percent on taxable income above AED 375,000. Below that threshold the rate is 0 percent. This applies to exchanges, brokers, commercial mining operations, NFT studios and anyone else earning business income from digital assets.
Free zone companies can keep a 0 percent rate, but only on qualifying income and only if they meet substance requirements. That means a real office, real staff and real operating spend in the UAE. A desk you rent and never visit will not survive scrutiny.
Transfers and conversions of virtual assets are exempt from the 5 percent VAT, and that exemption was applied retroactively to January 2018 under Cabinet Decision No. 100 of 2024. Good news, and widely reported.
What gets reported less is the carve out. Custody fees, wallet management and most other service charges still attract VAT in the normal way. Exchanges often treat the whole platform as one exempt service, when in reality trading fees, listing fees, lending income and premium account charges each need to be looked at on their own.
Mining is a separate case. The Federal Tax Authority clarified in guidance issued in January 2025 that crypto mining does not qualify for the VAT exemption. Commercial mining income is subject to VAT and to corporate tax on profits above the threshold.
The UAE signed up to the Crypto Asset Reporting Framework in July 2025, with cross border exchange of information expected to begin in 2028. This does not introduce a new tax. It does mean that tax free has never meant invisible, and the visibility gap is closing.
If you are a UAE resident with obligations elsewhere, remember that holding a residence visa does not automatically end your tax residency in your home country. That is a separate test, run by a separate authority, and it is worth paying a professional to get right.
People often ask what really separates Dubai from Singapore, Switzerland or the European Union. The honest difference is less about generosity and more about design.
| Location | Regulator | The practical difference |
| Dubai | VARA | A regulator built only for virtual assets, with activity specific rulebooks and no personal income tax. Fast by regional standards, but capital and supervision costs are real |
| Abu Dhabi | FSRA at ADGM | Common law setting, strong with custodians and funds, longer established framework |
| Singapore | MAS | High reputation and strong banking access, but licences are granted sparingly and retail access is deliberately restricted |
| European Union | MiCA regime | One licence passports across member states, which is powerful, though the compliance load and local corporate taxes are heavier |
| Hong Kong | SFC | Clear licensing for exchanges and growing tokenisation activity, with tight rules on what retail investors can touch |
| Switzerland | FINMA | Deep expertise and a mature banking relationship for crypto firms, at a notably higher operating cost |
Even with stronger regulation, businesses should remember that market sentiment still changes quickly. Large financial institutions continue to revise their outlooks as conditions evolve, as seen when Citi lowered its Bitcoin and Ether price forecasts, highlighting that regulation and market performance are two very different things.
Banking is the real bottleneck. Getting a UAE corporate bank account for a virtual asset business takes longer than most founders expect, even with a licence in hand. Start those conversations in parallel with the licence application, not after it.
Marketing rules apply even without a licence. VARA’s marketing regulations reach all market participants promoting into the UAE, whether or not they hold a VARA licence. That includes influencer campaigns and paid social. Firms with no local presence have still been caught by this.
Supervision is ongoing and it has teeth. That reflects a broader global trend. Regulators and investors are increasingly demanding stronger compliance from digital asset firms, with cases such as the Binance UK investor lawsuit showing how legal and regulatory scrutiny continues to shape the industry beyond the UAE.
Retail and qualified investors are treated differently. VARA distinguishes between retail investors and qualified investors, with the qualified category requiring proven expertise and net assets of at least AED 3,500,000. What you can offer, and how you market it, depends on which group you serve.
The cost of living moved. Office rent in DIFC and Business Bay, and residential rent across Dubai, has risen sharply over recent years. A compliance officer, an MLRO and an auditor are not cheap here either. Budget for people, not just for the licence.
There is no universally correct answer, but there are patterns worth knowing.
If you are an exchange, broker or custodian serving the region, VARA in Dubai is usually the default, often through Dubai World Trade Centre or DMCC as the commercial licensor. DMCC’s crypto cluster is one of the larger concentrations of blockchain firms in the world, with more than 650 companies reported in its crypto centre, and the network effect of being surrounded by similar businesses is genuinely useful.
If your business is closer to asset management, fund structures or private banking, look hard at the DIFC and at ADGM in Abu Dhabi. Common law jurisdiction, familiar documentation and institutional comfort often outweigh a faster setup.
If you are building software rather than handling client assets, you may not need a virtual asset licence at all. A technology licence in a free zone such as Dubai Internet City or Dubai Silicon Oasis can be enough. Confirm this properly, because the difference between building a wallet and operating one is a regulatory line, not a technical one.
Dubai did not win attention by making crypto easy. It won by making it predictable. You can read the rules, price the licence, budget the capital and know which regulator will call you. In an industry where jurisdictions have changed their minds mid quarter, that predictability is the actual product.
The trade is straightforward. You give up the informality of the early years and take on real compliance costs, real capital and real supervision. For a hobby project that is a bad deal. For a business planning to still exist in five years, it is usually the right one.
Start by working out which regulator applies to you and which activities you genuinely need. Almost every expensive mistake made here traces back to getting one of those two things wrong.
Is crypto legal in Dubai?
Yes. Crypto is legal and regulated in Dubai. Businesses providing virtual asset services in or from the emirate must hold a licence from VARA, unless they operate inside the DIFC, which is regulated by the DFSA.
Do I pay tax on crypto profits in the UAE?
Individuals pay no personal income tax or capital gains tax on crypto held in a personal capacity. Companies pay 9 percent corporate tax on profits above AED 375,000, with a possible 0 percent rate for qualifying free zone income that meets substance requirements.
How much does a VARA licence cost?
Application fees generally fall between roughly AED 40,000 and AED 100,000, with annual supervision fees around AED 80,000 to AED 200,000 depending on activity. Paid up capital is separate and usually the larger number, starting in the hundreds of thousands of dirhams.
How long does it take to get licensed?
Expect several months. The process runs in two stages, Approval to Incorporate and then the full VASP licence. Delays usually come from incomplete policy documents or missing shareholder information rather than from the regulator.
Which is better, VARA or ADGM?
It depends on your activity. VARA suits exchanges, brokers and retail facing businesses in Dubai. ADGM in Abu Dhabi is often preferred for custody, funds and structures that benefit from a common law setting. Compare both on activity permissions and capital before deciding.
Can I trade crypto in Dubai without a licence?
Trading your own money as an individual does not require a licence. Providing services to others, such as broking, custody, exchange or management, does. Frequent and systematic trading at scale can also be treated as a business for tax purposes.
Is VAT charged on crypto in the UAE?
Transfers and conversions of virtual assets are VAT exempt, applied retroactively to January 2018. Custody fees, wallet management and many other service charges still attract 5 percent VAT, and crypto mining does not qualify for the exemption.
Are privacy coins allowed in Dubai?
No. Issuing anonymity enhancing cryptocurrencies, and carrying out related virtual asset activities, is prohibited in the emirate of Dubai.
Do I need a UAE residence visa to open a crypto company?
You do not need one to incorporate, but you will need residency to be a practical operator, to open certain bank accounts and to claim UAE tax residency. Most free zone licences come with visa allocations.
What happens if I operate without a licence?
Unlicensed activity can lead to enforcement action, financial penalties and difficulty obtaining a licence later. The regulators moved into a supervision led phase, so enforcement is now an active part of the regime rather than a theoretical risk.
Disclaimer: This article is general information, not legal, tax or financial advice. Rules, fees and capital requirements change. Confirm current requirements with VARA, the Federal Tax Authority or a licensed adviser before acting.
The journal of record for technology decisions in the UAE. Trusted reporting, in-depth analysis, and expert insights connecting business leaders, innovators, and technology professionals with the trends shaping digital transformation.
© 2026 Eyes On Solution. All rights reserved.
