By CRYPTOVERSE Legal Consultancy
A UK Crypto VARA licence does not passport a Dubai crypto business into the UK. A company planning UK expansion must assess its activities, customers, operating structure and marketing under the UK framework.
Existing regulatory experience can provide useful evidence. Governance arrangements, compliance systems and operational records developed for Dubai may support preparation. However, the UK application must explain how the proposed business satisfies the requirements applicable to its particular model.
For founders and management teams, the practical objective is to build a credible UK operating model while maintaining compliance in Dubai.
1. Start with your actual regulatory status
Identify precisely what the Dubai entity holds in terms of regulating Crypto in Dubai VARA:
- A VARA licence and its permitted activities.
- Any restrictions or conditions.
- An approval stage preceding operational licensing.
- A proprietary trading NOC or registration.
- Its commercial licence and corporate structure.
These statuses should be described accurately in the UK project documentation.
VARA distinguishes licensed virtual asset services from proprietary trading arrangements involving an NOC and, in specified circumstances, registration. Its remit covers Dubai’s mainland and free zones, excluding DIFC.
Prepare a regulatory status summary supported by the actual licences, approvals and correspondence. Avoid describing every Dubai crypto company as a licensed VASP.
2. Separate current UK obligations from the expanded regime
The expanded FCA cryptoasset regime is scheduled to commence on 25 October 2027. The application gateway opened on 30 September 2026, with the relevant application period ending on 28 February 2027.
UK crypto financial promotion requirements already apply to marketing directed at UK consumers, including by overseas firms.
A market entry assessment should therefore distinguish:
- What the company proposes to do now.
- What requirements already apply.
- What authorisation it will need under the expanded regime.
- When the proposed operating model can lawfully begin.
An application timetable should not be treated as permission to commence every planned activity.
3. Map services to UK activities
For UK Crypto Staking FCA Authorisation Begin with transaction workflows rather than the titles on the VARA licence.
The FCA assessment should address token classification and the activities performed by each entity. Its standards require applicants to explain their business model and demonstrate appropriate resources and controls.
A useful working table is:
| Proposed service | Questions for the UK assessment |
| Exchange services | Who operates the venue, matches interests and executes transactions? |
| Brokerage or OTC execution | Does the firm transact as principal, agent or arranger? |
| Custody | Who can control transfers, recovery or access to assets? |
| Lending or yield | What transactions and obligations underpin the product? |
| Staking | What role does the firm perform for customers? |
| Token issuance | What rights does the token confer, and how is it offered? |
This is a scoping tool, rather than a one-to-one conversion of VARA activities into FCA permissions.
For each service, document the customer contract, asset movement, execution process and responsible legal entity.
4. Determine whether overseas activity falls within UK scope
The FCA’s territorial analysis has two stages: ordinary UK territorial principles, followed where necessary by statutory deeming provisions.
For certain overseas platform, dealing and arranging activities, FSMA section 418(6C) addresses involvement with UK consumers. The statutory intermediary condition requires an appropriately authorised principal dealer or trading platform acting in that capacity; an agent or arranger alone does not satisfy it.
Map the full service chain, including customer-facing brokers, execution venues and custody providers for UK Crypto Lending yield FCA regulation.
A contract with a UK institution should not end the investigation. Establish whether that institution acts for itself or intermediates for underlying consumers.
Custody and staking have their own territorial provisions and require separate assessment.
5. Do not rely on reverse solicitation
The FCA expressly states that reverse solicitation is not, by itself, an exclusion or exemption from regulated cryptoasset activities.
A Dubai company should therefore assess requests from UK customers against its permitted operating boundaries.
Suggested controls include:
- Recording customer location and capacity.
- Escalating unexpected UK business.
- Identifying which services may be offered.
- Preventing unsupported exceptions by sales teams.
- Reviewing contractual and operational changes.
Illustrative example: A UK customer approaches a Dubai platform without seeing an advertisement. That fact should be recorded, but it does not replace the activity and territorial assessment.
6. Choose the UK structure before finalising the application
The FCA generally expects international firms undertaking its solo-regulated crypto activities to establish a UK legal entity. FG26/7 describes limited branch-based possibilities, particularly for qualifying trading platforms where global liquidity can support customer outcomes.
Branch applications are assessed individually. A home regulator’s letter of good standing alone is insufficient to establish comparable regulatory protection.
Compare potential structures against:
- The proposed permission scope.
- Contracting and customer asset arrangements.
- Management responsibilities.
- Access to global liquidity.
- Group service dependencies.
- Regulatory supervision and information access.
Avoid incorporating a UK subsidiary with a vague promise that its role will be decided later. The entity’s function should be clear enough to support the business plan, funding model and governance arrangements.
7. Convert Dubai documentation into UK evidence
Existing documentation can be a valuable starting point. Review it against the proposed UK entity and activities.
A practical adaptation matrix should identify:
| Existing material | UK preparation task |
| Regulatory business plan | Rewrite around the UK applicant, permissions and customers |
| Governance framework | Allocate UK decision-making and escalation responsibilities |
| AML procedures | Assess applicable UK obligations and operating evidence |
| Custody documentation | Analyse asset control, contractual rights and relevant requirements |
| Technology framework | Explain UK oversight, access and dependencies |
| Financial projections | Model the applicant’s resources and costs |
| Outsourcing agreements | Establish enforceable service and oversight arrangements |
This is suggested preparation practice, rather than a universal document list.
Remove references that assign UK responsibilities to Dubai personnel without explaining their authority, availability and reporting lines.
8. Design governance around the applicant’s responsibilities
For VARA Marketing Crypto Business UAE the expanded regime applies relevant FCA Handbook governance requirements, including the Senior Managers and Certification Regime, with activity-specific application and modifications. Reference: PS26/13.
Prepare a responsibility map showing:
- Decisions retained by the UK applicant.
- Group functions supporting those decisions.
- Compliance and financial crime oversight.
- Incident escalation.
- Board reporting.
- Authority to challenge or suspend services.
Shared teams need defined responsibilities and sufficient capacity.
For example, where Dubai personnel support transaction monitoring, explain who owns UK risk decisions, approves escalations and checks the quality of the service.
The application should describe arrangements that management can demonstrate in practice.
9. Fund the UK model properly
For cross border legal support the FCA’s crypto prudential framework addresses eligible own funds, capital requirements, liquidity and risk assessment. Requirements depend on the applicable framework and activities.
Prepare forecasts covering:
- Staffing and compliance costs.
- Technology and group service charges.
- Professional and regulatory fees.
- Customer asset arrangements.
- Operating losses during launch.
- Stress scenarios and wind-down needs.
A parent company’s financial strength should be translated into a documented funding arrangement for the applicant.
Identify the funding instrument, availability, conditions and evidence. Avoid relying on an unqualified statement that the group “will provide funds when needed”.
10. Establish a lawful UK marketing route
The FCA identifies four promotion routes: communication by an authorised person, approval by an appropriate authorised person, qualifying communication by an MLR-registered business, or an applicable Financial Promotion Order exemption for overseas crypto company UK FCA Authorisation.
Assess the Dubai company’s websites, applications, social accounts and partner campaigns before targeting UK consumers.
Suggested preparation includes:
- Identifying the communicating entity.
- Recording the route relied upon.
- Reviewing product claims and warnings.
- Assessing the customer investment journey.
- Controlling affiliate and influencer content.
- Keeping approved versions and publication evidence.
Describe VARA and FCA status separately. Customers should be able to identify the entity providing their service and its relevant regulatory position.
11. Plan submission, transition and launch as separate stages
Transitional provisions are conditional. Eligible existing firms applying within the relevant period may benefit from saving arrangements while awaiting determination; run-off arrangements serve a different purpose. Neither should be assumed to authorise a new UK launch automatically.
A useful project sequence is:
- Complete classification and perimeter analysis.
- Select the entity structure and permission scope.
- Assess gaps in resources and controls.
- Implement the operating arrangements.
- Prepare and submit the application.
- Manage regulator questions.
- Confirm the legal basis and conditions for launch.
Keep commercial announcements aligned with the firm’s actual status at each stage.
How CRYPTOVERSE can support your UK expansion
CRYPTOVERSE is a specialist legal and regulatory firm for UK FCA cryptoasset authorisation support.
For Dubai crypto companies, CRYPTOVERSE can support UK perimeter assessments, entity and permission planning, documentation adaptation, application preparation and regulatory correspondence.
Planning to expand from Dubai into the UK? Contact CRYPTOVERSE to assess your operating model and prepare a coordinated FCA authorisation strategy.
FAQs
1. Can a VARA-licensed company serve UK customers without FCA authorisation?
Assess its activities and UK connection. VARA licensing alone does not settle the UK position.
2. Does the company always need a UK subsidiary?
The FCA’s general expectations and limited branch possibilities require assessment against the specific model.
3. Can we reuse our VARA policy pack?
Use it as source material, then adapt and verify it against the UK applicant’s responsibilities and requirements.
4. Can the Dubai compliance team support the UK company?
Potentially, but document responsibilities, capacity, oversight and applicable role requirements.
5. Should UK marketing begin while the application is pending?
Only where the communication already has a lawful route and satisfies applicable requirements. A pending application is insufficient by itself.