VARA Asset Management and Investment Services Licence Explained

If there is one VARA licence category that many founders, allocators, treasury operators, and institutional crypto businesses underestimate, it is VA Management and Investment Services.

Why?

Because a lot of firms do not describe themselves using regulatory language. They say:

• portfolio platform,
• treasury manager,
• allocation engine,
• digital asset manager,
• institutional strategy desk,
• investment overlay,
• managed-account solution.

Under the VARA framework, those labels are not the legal answer. The real question is whether the business is carrying on VA Management and Investment Services in or from Dubai outside DIFC. VARA’s public licensing page says that any firm seeking to carry on Virtual Asset activities in or from Dubai, excluding DIFC, has a legal obligation to be licensed before commencing operations. VARA’s public Licensed Activities page separately lists VA Management and Investment Services as one of the regulated activity categories requiring licensing before operations begin in or from Dubai.

That matters because many businesses think they are “only advising” or “only managing treasury strategy” when, in substance, they may be:

• managing virtual assets for clients,
• administering client VA positions,
• making allocation decisions,
• or otherwise stepping into a regulated management function. VARA treats this as a standalone activity and has a dedicated VA Management and Investment Services Rulebook for it.

This guide explains:

• what the VARA Asset Management and Investment Services Licence is,
• when this activity is likely triggered,
• how it differs from advisory, broker-dealer, and custody,
• what capital and fee burdens apply,
• what compliance, conduct, and technology issues matter most,
• and what founders most often get wrong about this licence class.

1) What is the VARA Asset Management and Investment Services Licence?

At the highest level, this is the licence required to carry on VA Management and Investment Services in or from Dubai outside DIFC. VARA’s public licensed-activities page includes the activity in its list of regulated VA Activities, and the VA Management and Investment Services Rulebook confirms that it forms part of the VARA regulatory framework and applies to all VASPs licensed by VARA to carry out that activity in the Emirate.

That means the real legal question is not:

“Do we call ourselves an asset manager?”

It is:

“Are we, in substance, managing or administering virtual assets for or on behalf of others in a way that falls inside VARA’s regulated activity perimeter?”

This point matters because management businesses often evolve gradually. What starts as:

• advisory,
• portfolio tooling,
• treasury support,
• or investment strategy consulting

can become something much more regulatory once the firm begins to:

• exercise discretion,
• administer assets,
• take action on behalf of clients,
• or operate managed-account style arrangements. VARA’s choice to treat Management and Investment Services as a separate licensed activity is a clear signal that Dubai sees this as a distinct regulated function, not just a softer cousin of advisory.

2) Why founders get this category wrong

This activity class is commonly misunderstood for three reasons.

First, many businesses think that unless they are:

• an exchange,
• a custodian,
• or a broker,

they must be in a lighter category.

Second, a lot of crypto asset-management models grow out of products that begin as:

• dashboards,
• allocation tools,
• discretionary overlays,
• treasury analytics,
• or execution support.

Third, a lot of founders believe “investment services” sounds too traditional to map neatly onto crypto-native models.

But VARA’s public framework does not leave this ambiguous. VA Management and Investment Services is one of the listed regulated activities, and VARA says firms seeking to offer the listed activities must apply for and receive a licence before beginning operations in or from Dubai.

So the practical takeaway is simple:

If your business is doing more than informing client decisions, and is actually managing or administering VA exposures for clients, the licence question becomes real.

3) The Dubai nexus: “in or from Dubai” still controls the analysis

Like every other VARA licence category, the activity analysis is not only about the function. It is also about the place from which the function is carried on.

VARA says it is responsible for regulating and overseeing the provision, use, and exchange of virtual assets in and from the emirate of Dubai, and its licensing page says the legal obligation applies to firms carrying on VA activities in or from Dubai, excluding DIFC. VARA also states it is the sole authority regulating virtual assets across Dubai’s free zones and mainland, except DIFC.

This matters because many firms assume:

• “our clients are overseas,”
• “our parent is offshore,”
• “our investment team is global,”
• “We’re just using Dubai as a business base.”

Those facts do not necessarily remove VARA from the picture.

The more important question is:

Is the regulated management or investment activity being carried on in or from Dubai? VARA’s public licensed-activities page expressly says listed activities may be offered to customers resident in the Emirate or to global customers from Dubai where the activity is permissible.

That means offshore structure is not a substitute for proper perimeter analysis.

4) What kinds of businesses are most likely to trigger this licence?

In practical terms, the following kinds of businesses should examine this licence class very carefully:

• crypto asset managers,
• managed-account providers,
• discretionary portfolio managers,
• digital asset treasury managers,
• institutional allocation platforms,
• investment firms administering virtual assets for others,
• family-office support businesses that move beyond advice into management,
• portfolio-rebalancing businesses acting on behalf of clients,
• DAO or treasury service providers where the service becomes real management rather than pure tooling.

The common theme is that the business is doing more than:

• providing general education,
• publishing commentary,
• or offering neutral analytics.

Instead, it is managing or administering VA positions in a way that affects client assets or portfolio outcomes. That is exactly why VARA treats Management and Investment Services as a distinct activity class.

A useful practical question is: 

Are we merely helping clients make decisions, or are we actually making, implementing, or administering those decisions for them?

If it is the second, the licensing threshold becomes much more serious.

5) How this differs from Advisory Services

This is one of the most important legal distinctions.

VARA regulates Advisory Services and VA Management and Investment Services as separate activities. The rulebook portal lists them as distinct activity rulebooks, not as one combined concept.

That means the difference matters.

In practical terms:

• Advisory Services is more likely to focus on recommending or advising.
• Management and Investment Services is more likely to focus on administering, managing, or implementing investment exposure for others.

The line is not always simple, but the regulatory logic is clear:
advice influences decisions; management often goes further and sits closer to execution, administration, or discretion.

So the critical question is: 

Are we only advising what the client should do, or are we actually managing, administering, or implementing the client’s VA exposure?

That is often where the boundary between Advisory and Management becomes meaningful in practice. Because VARA has chosen to regulate both separately, founders should not assume that advisory-style branding avoids management-style reality.

6) How this differs from Broker-Dealer Services

Management and Investment Services also needs to be distinguished from Broker-Dealer Services.

VARA’s rulebook architecture lists both as separate activity rulebooks.

The practical difference is usually this:

• Broker-Dealer Services sits closer to transaction intermediation, arrangement, routing, or dealing.
• Management and Investment Services sits closer to portfolio or asset administration and discretionary or managed exposure.

A business can, of course, drift into both if the model is not structured cleanly. A managed strategy business may also route trades, introduce counterparties, or otherwise perform brokerage-type functions. But that is exactly why careful activity mapping matters before launch.

The right founder question is: 

Are we primarily managing and administering assets, or are we intermediating transactions?

In some models the answer may be “both,” which means the licensing strategy may widen accordingly. VARA’s public activity page says firms licensed for multiple activities must meet the requirements for each activity in full.

7) How this differs from Custody Services

Another important boundary is custody.

VARA has a separate Custody Services Rulebook, and the paid-up capital rule for Management and Investment Services explicitly distinguishes between firms using a VARA-licensed custodian and firms not doing so. That alone tells you that custody arrangements are a major structuring issue in this category.

For VA Management and Investment Services, the paid-up capital requirement is:

• the higher of AED 280,000 or 15% of fixed annual overheads where the firm uses a VASP licensed by VARA to provide Custody Services or is otherwise approved during the licensing process; or
• the higher of AED 500,000 or 25% of fixed annual overheads in all other instances.

This is hugely important because it shows that a management business’s prudential burden is directly affected by its custody architecture.

The key legal question becomes:

Are we merely managing/administering assets, or are we also safeguarding or controlling them?

If the model drifts into the second category, custody issues arise quickly, and the regulatory burden may widen substantially.

8) The public licensing process: how an applicant enters the system

Management and Investment applicants enter the same overall VARA licensing pathway as other VASPs.

VARA’s public licensing page says:

• firms from the UAE or overseas can apply for a VASP Licence,
• firms carrying on VA activities in or from Dubai must be licensed before operations begin,
• and for new firms, the process is completed in two stages:
  1. Approval to Incorporate (ATI)
  2. full VASP Licence application.

VARA also notes that ATI allows legal incorporation and operational setup but does not allow the firm to carry on Virtual Asset activities yet. The Stage 2 process may involve meetings, interviews, and requests for further documentation.

For management/investment applicants, that means the regulator is likely to want a clear explanation of:

• the business model,
• the client relationship,
• whether discretion is exercised,
• how mandates are structured,
• what assets are managed,
• whether any custody element exists,
• how investment decisions are made and controlled,
• and how the firm will operate within the wider prudential and conduct framework.

This is one reason why asset-management-style applications can feel heavier than founders initially expect. They are not just licensing a product. They are licensing a fiduciary- or stewardship-like operating model around virtual assets.

9) Rulebook layering: this licence does not sit alone

The VA Management and Investment Services Rulebook makes clear that it applies in addition to the broader VARA framework. Search results from the rulebook and PDF both state that where a VASP is licensed to carry out other VA Activities as well, it must comply with all rulebooks that apply to those other activities, and that activity-specific rules apply cumulatively.

Just as importantly, all VASPs must also comply with the four Compulsory Rulebooks:

• Company Rulebook
• Compliance and Risk Management Rulebook
• Technology and Information Rulebook
• Market Conduct Rulebook.

That means the regulatory environment for an asset-management-style business is layered:

Layer 1 — The Regulations

The overarching legal framework.

Layer 2 — The compulsory rulebooks

These create the baseline around company governance, compliance, technology, and conduct.

Layer 3 — The Management and Investment Services Rulebook

This adds the activity-specific obligations tied to asset management and administration.

This matters because many founders focus only on the activity-specific licence class and underestimate the baseline burden of being a VASP at all.

10) Capital requirements: what is the paid-up capital?

One of the most important practical questions is:
What is the paid-up capital requirement for a VARA Management and Investment Services Licence?

As noted above, the answer comes from Rule VI.B – Paid-Up Capital in the Company Rulebook:

• With a VARA-licensed custodian or otherwise approved custody arrangement: the higher of AED 280,000 or 15% of fixed annual overheads.
• In all other instances: the higher of AED 500,000 or 25% of fixed annual overheads.

This is one of the clearest examples of how structuring decisions affect prudential requirements under VARA.

If the management business uses a properly licensed or approved custody setup, the paid-up capital threshold can be lower. If not, the prudential burden increases. That means custody architecture is not just an operational detail. It is a core legal and capital-planning issue.

And because the rule uses a “higher of” formula, founders should not budget only around the AED 280,000 or AED 500,000 minimums. A higher fixed-overheads base can push the actual capital requirement above those flat figures.

11) Fees: where this activity sits in the fee schedule

Under VARA’s public fee schedule, VA Management and Investment Services sits in the higher fee tier.

That means the visible fee burden is:

• AED 100,000 application fee
• AED 200,000 annual supervision fee. This is the same fee band as Broker-Dealer, Custody, Exchange, Lending and Borrowing, and Category 1 Issuance.

That is another signal that VARA treats this category as a serious, institution-like supervised activity rather than a light advisory or consulting model.

And as with every other activity class, founders should remember that the visible fee line is not the whole cost story. The prudential and operating burden often matters more.

12) Prudential requirements go beyond paid-up capital

Paid-up capital is only one part of the prudential framework.

The Company Rulebook – Part VI covers:

• Paid-Up Capital
• Net Liquid Assets
• Insurance
• Reserve Assets
• and related notifications and prudential obligations. Search results from the Company Rulebook and Part VI summary make that clear.

That means a management/investment applicant should not ask only:

“Can we meet the paid-up capital threshold?”

It should also ask:

• Can we maintain the required liquid-resources cushion?
• Can we obtain the required insurance?
• Does our client-asset model trigger reserve-asset considerations?
• Can we maintain prudential resilience on an ongoing basis?

This matters because asset-management-style businesses can carry:

• client expectation risk,
• strategy risk,
• operational dependence on custodians and market infrastructure,
• and sometimes direct or indirect exposure to client asset administration.

Those realities make prudential discipline central to this licence class.

13) Compliance requirements: management businesses are control-heavy

All VASPs must comply with the Compliance and Risk Management Rulebook, and the current rulebook update page shows the relevant rules were revised in September 2025. That means applicants should work from the current, actively maintained framework.

For a management/investment business, the regulator is likely to focus heavily on:

• compliance governance,
• conflicts management,
• risk controls,
• AML/CFT,
• recordkeeping,
• reporting,
• and how client mandates, investment instructions, and operational authority are controlled.

This is especially important because a management model can sit close to:

• client decision-making,
• client-asset administration,
• and discretionary action.

That makes governance and oversight particularly important. A startup may think of itself as “just a digital asset manager,” but VARA will want to understand how that manager is supervised, controlled, documented, and held accountable.

14) Market conduct and client documentation are central legal issues

This activity class is intensely client-facing. That means the Market Conduct Rulebook becomes especially important.

Because all VASPs sit inside the compulsory conduct framework, management businesses should think carefully about:

• client agreements,
• disclosures,
• investor classification,
• complaints handling,
• public and private communications,
• and how the service is described to clients.

This creates several core legal issues:

• Is the mandate clearly described?
• Is the nature of the discretion or administration clearly documented?
• Are conflicts between the firm and client managed properly?
• Do clients understand where the manager’s role starts and ends?
• Are related-party arrangements disclosed and controlled?

These issues can be just as important as the capital threshold because they go to the heart of whether the business is operating fairly and transparently.

15) Technology and operations: not just legal drafting

A modern digital-asset management business is rarely just contracts and people.

It often involves:

• portfolio systems,
• execution pipelines,
• custodian integrations,
• reporting dashboards,
• API-based trading infrastructure,
• automated allocation or rebalancing tools,
• and data / security controls.

That is why the Technology and Information Rulebook also matters. It applies to all VASPs, and it covers topics such as technology governance, systems and controls, information security, testing, cyber security, and incident response. The current rulebook page shows the Technology and Information Rulebook is in force and current.

So for a management applicant, the practical question is not only:

“Do we have the right mandate documentation?”

It is also:

“Is the technology environment around the management function governable, secure, and explainable?”

That is especially important where the management model is tech-enabled, systematic, or highly integrated with execution and custody infrastructure.

16) Multi-activity risk: this licence often overlaps with others

One of the biggest practical issues in this category is that it often does not remain isolated.

A management/investment business may also drift toward:

• Advisory Services
• Broker-Dealer Services
• Custody Services
• or even Transfer and Settlement Services,

depending on what it really does in practice.

That is why the rulebook’s statement on cumulative application matters so much: where multiple VA Activities are carried on, the relevant rulebooks apply cumulatively.

Examples of overlap include:

• a management firm that also gives regulated advisory,
• a discretionary strategy business that also brokers execution,
• a management business with too much direct control over client assets,
• or a treasury-management model that also settles assets operationally.

This is one of the main reasons activity mapping is so important before launch. A founder may think they need one licence, but the real business architecture may point to two or three regulated activities.

Final takeaway

If you want the cleanest practical answer to:
“What does the VARA Asset Management and Investment Services Licence involve?”

it is this:

It is the licence required where a business is carrying on regulated virtual asset management or investment services in or from Dubai outside DIFC. It is a distinct activity class under the VARA framework, governed by its own VA Management and Investment Services Rulebook, and it sits on top of the compulsory Company, Compliance and Risk Management, Technology and Information, and Market Conduct Rulebooks.

Its paid-up capital requirement is:

• the higher of AED 280,000 or 15% of fixed annual overheads where a VARA-licensed or otherwise approved custody arrangement is used; or
• the higher of AED 500,000 or 25% of fixed annual overheads in all other instances.

Its visible fee burden is:

• AED 100,000 application fee
• AED 200,000 annual supervision fee.

But the real regulatory burden goes beyond that. Founders also need to think carefully about:

• the advisory / management boundary,
• the broker-dealer / management boundary,
• custody architecture,
• prudential planning,
• compliance and AML/CFT,
• client agreements and disclosures,
• and the technology environment around portfolio administration.

How CRYPTOVERSE Legal Can Help

At CRYPTOVERSE Legal Consultancy, we help founders, digital asset managers, treasury platforms, managed-account providers, institutional crypto businesses, and other investment-focused operators assess whether their model triggers VA Management and Investment Services under VARA and what that means for licensing, capital, compliance, and structuring. 

Our support includes activity classification, management-versus-advisory boundary analysis, custody-architecture review, prudential-planning guidance, conduct and disclosure review, Regulatory Business Plan support, and broader VARA licensing strategy.

If you want tailored guidance on whether your business needs a VARA Asset Management and Investment Services Licence, and what the real legal and regulatory burden looks like for your model in Dubai, contact CRYPTOVERSE Legal Consultancy to discuss your regulatory strategy.

FAQs