VARA Advisory Services Licence: When Crypto Advice Becomes Regulated in Dubai

One of the easiest ways for a crypto business in Dubai to underestimate its regulatory exposure is to assume that “advice” is too soft, too high-level, or too informal to trigger licensing.

A lot of founders think:

• “We only provide strategy.”
• “We just guide clients.”
• “We publish research.”
• “We help people understand tokens.”
• “We are not an exchange, custodian, or broker, so advisory should be outside the hard perimeter.”

Under the VARA framework, that can be a dangerous assumption.

Because once crypto advice moves from general commentary into client-specific or recommendation-style services, the question is no longer simply commercial. It becomes regulatory. VARA’s public Licensed Activities page identifies Virtual Assets Advisory Services as a regulated activity, and says that any VASP or traditional-economy entity seeking to offer the listed VA activities must apply for and receive a licence before it can begin operations in or from the Emirate of Dubai.

That means the real question is not:

“Do we call ourselves advisers?”

It is:

“Has our crypto advice become the kind of regulated advisory service that VARA expects to be licensed in Dubai?”

That is the threshold this article is designed to explain.

If you are searching for:

• VARA Advisory Services licence
• crypto advisory licence Dubai
• when crypto advice becomes regulated
• VARA advisory services
• do I need a VARA licence for crypto advisory
• virtual asset advisory Dubai
• crypto consultant licence Dubai

then this guide is built for you.

The most important thing to understand at the start is this:

Advisory is a standalone regulated activity under VARA. It is not just a soft, unregulated edge case sitting outside the real licensing framework. VARA’s Rulebook portal lists an Advisory Services Rulebook as one of the dedicated activity rulebooks, and VARA’s public materials say firms seeking to offer Advisory Services must apply for and receive a licence before beginning those activities in or from Dubai.

1) What is the VARA Advisory Services Licence?

At the highest level, the VARA Advisory Services Licence is the licence required to carry on Virtual Assets Advisory Services in or from Dubai outside DIFC. VARA’s public licensing page says any firm seeking to carry on Virtual Asset activities in or from Dubai, excluding DIFC, has a legal obligation to be licensed before commencing operations, and the public licensed-activities page lists Virtual Assets Advisory Services as one of the regulated activities in the perimeter.

The Advisory Services Rulebook confirms that it:

• is issued pursuant to, and forms part of, the Virtual Assets and Related Activities Regulations 2023, and
• applies to all VASPs licensed by VARA to carry out Advisory Services in the Emirate.

That means the licence is not a general consulting licence in the loose commercial sense. It is the regulatory permission to provide a specific category of virtual-asset-related advisory activity inside the Dubai framework.

And that point matters.

Because many crypto businesses use the word “advisory” casually:

• strategic advisory,
• token advisory,
• market advisory,
• investment advisory,
• treasury advisory,
• Web3 advisory.

But the legal question is whether the activity has crossed into the kind of regulated advice that VARA expects to supervise.

2) Why founders underestimate advisory risk

There are a few reasons why this category gets misunderstood so often.

First, advice sounds less operationally risky than:

• custody,
• exchange,
• lending,
• or transfer and settlement.

Second, many advisory businesses are small at the beginning, so founders assume regulation will focus elsewhere.

Third, a lot of crypto advisory models evolve gradually:

• general research becomes tailored guidance,
• token commentary becomes recommendation,
• strategic consulting becomes client-specific action planning,
• portfolio insight becomes direct direction.

That gradual shift is exactly why the category matters.

VARA treats Advisory Services as a regulated activity in its own right, not as a casual side function. And the fact that it has a dedicated activity rulebook tells you something important: Dubai does not assume that “advice” is harmless simply because assets are not physically moving through the adviser’s hands.

A lot of regulated risk in markets starts before execution. It starts at the recommendation stage.

That is the regulatory logic behind this licence class.

3) The threshold question: when does advice become regulated?

This is the most important practical issue.

Because not all crypto-related speech or content is regulated advisory activity. Businesses can still:

• publish general educational content,
• write market commentary,
• discuss broad ecosystem trends,
• and produce non-personalised analysis.

The regulatory issue becomes serious when the business moves from general content into client-specific or recommendation-style advisory.

VARA’s public activity page makes clear that Advisory Services is one of the listed licensable activities. While the public summary is concise, the existence of a dedicated activity rulebook, plus the fact that the activity must be licensed before being carried on in or from Dubai, tells you that the perimeter is focused on actual advisory service provision rather than neutral public speech.

So the most useful practical distinction is this:

General, non-personalised content

This is more likely to include:

• articles,
• podcasts,
• public education,
• non-client-specific market commentary,
• broad thought leadership,
• general overviews of regulation or technology.

Regulated-style advisory

This is more likely to include:

• tailored client recommendations,
• advice directed to a particular client’s circumstances,
• recommendation on whether to buy, sell, hold, structure, issue, or allocate virtual assets,
• portfolio or token strategy delivered as client-specific guidance,
• advisory tied closely to a client decision or transaction path.

That is where founders should become cautious.

The more the service starts to sound like:

“Based on your circumstances, here is what you should do with virtual assets,”

the more serious the licensing analysis becomes.

4) Advisory is not “safe” just because no transaction is executed

One of the biggest misconceptions in crypto is that regulation only becomes serious once:

• assets move,
• trades execute,
• wallets are controlled,
• or money changes hands.

That is not how VARA structures its perimeter.

VARA publicly separates Advisory Services from:

• Broker-Dealer Services
• Custody Services
• Exchange Services
• Lending and Borrowing Services
• VA Management and Investment Services
• VA Transfer and Settlement Services
• and Category 1 VA Issuance.

That separation is important.

It means advisory is not merely an unimportant lead-in to “real” regulated activity. It is itself one of the activities for which VARA expects licensing where the threshold is crossed.

This is especially relevant for businesses that:

• do not execute transactions,
• do not hold client assets,
• do not operate an exchange,
  but still give materially important guidance that influences VA decisions.

If your crypto business is shaping what clients do with virtual assets, the fact that you are not physically executing those decisions may not be enough to keep you outside the perimeter.

5) What kinds of businesses may trigger the Advisory Services Licence?

In practical terms, the following kinds of businesses may need to examine the VARA Advisory Services threshold carefully if they operate in or from Dubai:

Crypto consulting boutiques

Firms offering personalised strategic or transactional guidance on virtual assets, token exposure, or VA-related business decisions.

Token advisory firms

Businesses help clients decide whether, how, or when to structure, issue, or position a token, especially where that advice is client-specific and decision-oriented.

Portfolio or allocation advisers

Firms giving recommendations on virtual-asset allocation, portfolio construction, treasury exposure, or asset-selection decisions.

Institutional Web3 advisers

Businesses advising family offices, funds, corporates, or founders on specific VA investments, acquisitions, or strategic moves.

Embedded recommendation platforms

Apps or tools that appear software-led, but in practice deliver tailored or recommendation-like guidance to specific users.

Founder-led informal advisory models

A common early-stage pattern where a founder says they are “just consulting,” but the actual service has become repeated, structured, and client-specific in a way that looks licensable.

The common thread is not the business label. It is that the firm is no longer merely discussing crypto in general terms. It is helping a client decide what to do in a way that starts looking like regulated advisory service provision.

6) The Dubai nexus still matters: “in or from Dubai”

Like the rest of the VARA framework, the advisory threshold is not just about activity type. It is also about location and operating nexus.

VARA says it is responsible for regulating and overseeing virtual assets in and from the emirate of Dubai, and its licensing page says any firm seeking to carry on VA activities in or from Dubai, excluding DIFC, must be licensed prior to commencing operations.

This matters for advisory businesses because many think:

• “We only advise foreign clients.”
• “Our parents are offshore.”
• “We are just using Dubai as a base.”
• “We are not serving Dubai residents specifically.”

Those facts may not be enough to avoid VARA.

The more important question is:
Is the regulated advisory activity being carried on in or from Dubai?

If yes, the licensing threshold can still become relevant even if:

• the clients are international,
• the legal entity sits in a broader offshore group,
• or the business sees itself as globally oriented rather than locally focused. VARA’s public licensed-activities page expressly says licensable VA activities may be offered in or from Dubai to global customers where the activity is permissible.

That is why offshore structure is not a substitute for proper activity and nexus analysis.

7) The Advisory Services Rulebook does not sit alone

One of the biggest mistakes first-time applicants make is reading only the activity-specific rulebook.

The Advisory Services Rulebook itself says that where a VASP is licensed by VARA to carry out other VA Activities in addition to Advisory Services, it must comply with all rulebooks that apply to those other VA Activities, and that activity-specific rules apply cumulatively for each VA Activity a VASP carries out.

Just as importantly, all VASPs licensed by VARA also sit inside the four Compulsory Rulebooks:

• Company Rulebook
• Compliance and Risk Management Rulebook
• Technology and Information Rulebook
• Market Conduct Rulebook. The Rulebook portal groups these as compulsory baseline rulebooks across the regime.

That means an Advisory Services applicant is not just being licensed to give advice. It is also stepping into the broader regulated environment around:

• company governance,
• compliance and AML/CFT,
• technology and information controls where relevant,
• and market / client conduct.

This is why a serious advisory business under VARA should not think only in terms of:

• “what we say to clients,”
  but also:
• how the business is structured,
• how advice is governed,
• how records are kept,
• how conflicts are managed,
• and how client-facing disclosures and agreements are handled.

8) Cost and fee profile: Advisory is the lighter fee band, but not “unregulated-light”

From a fee perspective, Advisory Services sits in the lower fee band under VARA’s Schedule 2 – Supervision and Authorisation Fees.

The schedule sets:

• AED 40,000 application fee
• AED 80,000 annual supervision fee
  for Advisory Services.

That makes Advisory cheaper than:

• Broker-Dealer,
• Custody,
• Exchange,
• Lending and Borrowing,
• VA Management and Investment Services,
• and Category 1 VA Issuance,
  which sit at AED 100,000 application fee and AED 200,000 annual supervision fee.

But founders should not misread that.

Lower fee does not mean negligible regulatory burden. It simply reflects that the activity sits in a lighter supervisory tier relative to more transaction- and asset-heavy functions.

Advisory is still:

• a regulated activity,
• requiring a licence,
• carrying ongoing supervision cost,
• and sitting within the wider compulsory rulebook environment.

So the right mindset is not:

“Advisory is cheap, therefore simple.”

It is:

“Advisory is comparatively lighter than some other activities, but still fully inside the VARA regime.”

9) Capital requirements: when advice still needs prudential support

Another common misconception is that advisory businesses do not face any meaningful prudential burden.

That is incorrect.

Under Rule VI.B – Paid-Up Capital in the Company Rulebook, the paid-up capital requirement for Advisory Services is AED 100,000.

That is the lightest headline paid-up capital threshold among the main VA Activities, but it is still a prudential requirement. And like the rest of the VARA framework, it sits within a broader prudential structure that also includes:

• Net Liquid Assets
• Insurance
• Reserve Assets
• and related notification obligations under Part VI of the Company Rulebook. The fact that Part VI is the wider capital and prudential framework matters here, even where the activity-specific paid-up capital threshold is lower.

So even for advisory firms, the real budgeting question is not just:

“Can we pay the application fee?”

It is also:

“Can we support the prudential baseline of being a regulated VASP?”

That distinction matters for small advisory businesses that want to professionalise under VARA.

10) Market conduct is one of the biggest legal issues for advisers

If there is one area where advisory firms should be especially careful, it is market conduct.

That is because advice is fundamentally a client-facing activity. And under VARA, the Market Conduct Rulebook forms part of the compulsory baseline for all VASPs.

In practice, that means Advisory Services firms should think carefully about:

• what is said to clients,
• how advice is framed,
• how client agreements are structured,
• how risks are disclosed,
• whether conflicts are managed properly,
• and whether the business is describing its services accurately and fairly.

This is one of the most important legal points in the advisory context.

A crypto advisory firm may never touch client assets, and may never execute trades. But if its advice is:

• misleading,
• conflicted,
• poorly documented,
• or badly disclosed,

that still creates regulatory risk.

So one of the core questions for advisory applicants is not only:

“Do we need a licence?”

It is:

“Can we operate the advisory function with the level of discipline a licensed VASP is expected to maintain?”

That is where many founder-led advisory models need to mature significantly before they are truly regulator-ready.

11) Best execution, dealing as principal, and adjacent conduct issues

The Rulebook portal reveals something else important: the Broker-Dealer Services Rulebook contains sections on Best Execution, Dealing as Principal, and even an activity-specific subsection on Advisory Services within its trading and execution rules.

That is a useful signal because it shows how closely advisory can sit beside:

• brokerage,
• dealing,
• and transaction-linked conduct issues.

For founders, this highlights a practical risk:

An advisory model may begin as pure advice, but then evolve into something broader:

• introducing clients to transactions,
• routing clients toward execution venues,
• taking principal exposure,
• or combining advisory with execution support.

That is where the legal classification can widen from pure advisory into:

• Broker-Dealer Services,
• or other activity classes,
  depending on the actual function.

So one of the most important questions to ask before launch is:

Are we really staying within advisory, or is the business model drifting into transaction intermediation?

If it is the latter, the licensing strategy may need to change.

12) Marketing crypto advice can also create regulatory exposure

A lot of advisory businesses assume:

• “We are only promoting our expertise”
  or
• “We are only marketing thought leadership.”

That may be true. But if the business is marketing a regulated advisory service in or targeting the UAE, the Marketing Regulations may still matter.

The Marketing Regulations say they apply to all marketing of or relating to any Virtual Asset or VA Activity in or targeting the UAE, and they apply to domestic and foreign entities, whether licensed by VARA or not.

That means a crypto advisory firm should not assume:

• it can freely promote regulated advisory services into Dubai/UAE before the licensing issue is settled,
• or that “it’s only advice” makes the marketing risk disappear.

The safer question is:
Are we already promoting a regulated advisory proposition in or targeting the UAE before we have the right VARA footing?

If yes, there may be exposure before the full licence is even in place.

13) When does general crypto content stay outside the regulated perimeter?

It is also important not to overstate the perimeter.

Not all crypto-related communication is licensed advisory activity. Businesses can still:

• publish general content,
• speak publicly about regulation,
• write articles,
• host broad educational materials,
• and comment on markets at a general level.

The real advisory issue begins when the service becomes sufficiently:

• client-specific,
• recommendation-driven,
• and decision-oriented.

That is why the most useful practical distinction is this:

More likely outside the regulated advisory threshold

• General public education
• Broad, non-tailored market commentary
• High-level regulatory or industry thought leadership
• Generic educational explainers

More likely inside or close to the threshold

• Tailored client recommendations
• Client-specific token or portfolio advice
• Advice tied to a specific person’s objectives or circumstances
• Direction on whether, how, or when to take VA-related action

That is the distinction founders should use before launch.

14) The practical founder checklist

Before launching an advisory-led crypto business in Dubai, ask these questions:

1. Are we operating in or from Dubai outside DIFC? VARA regulates in and from Dubai, excluding DIFC.
2. Are we providing general content or client-specific recommendations? Advisory risk rises sharply when the service becomes tailored and decision-oriented.
3. Are we merely researching, or are we telling a client what to do with virtual assets? That is often the practical dividing line.
4. Are we combining advisory with execution, introductions, or brokerage-style services? If yes, the activity map may widen.
5. Can the business support the obligations of being a licensed VASP — not just the content of the advice? The compulsory rulebooks still apply.
6. Are we already marketing a regulated advisory proposition in or targeting the UAE? If yes, marketing exposure may arise before licensing is resolved.

If several of those questions raise concern, a proper perimeter and licensing analysis is the prudent next step.

Final takeaway

If you want the cleanest practical answer to:
“When does crypto advice become regulated in Dubai?”

it is this:

Crypto advice becomes a serious VARA issue when it moves from general, non-personalised commentary into client-specific or recommendation-style advisory services carried on in or from Dubai outside DIFC. VARA treats Advisory Services as a standalone regulated activity, with its own activity rulebook, licensing requirement, fee class, and prudential baseline.

That means the right founder question is not:

“Are we only advising?”

It is:

“Has our advisory model become the kind of regulated service VARA expects to be licensed?”

That is the threshold that matters.

How CRYPTOVERSE Legal Can Help

At CRYPTOVERSE Legal Consultancy, we help founders, research businesses, strategy boutiques, token advisers, portfolio-adjacent businesses, and Web3 consulting firms assess whether their crypto-advisory model falls inside VARA Advisory Services. Our support includes regulatory perimeter analysis, activity classification, advisory-versus-brokerage boundary review, client-service and disclosure review, marketing-risk assessment, and broader VARA licensing strategy.

CTA: If you want tailored guidance on whether your business needs a VARA Advisory Services Licence in Dubai, and where general crypto commentary ends and regulated advisory begins, contact CRYPTOVERSE Legal Consultancy to discuss your regulatory strategy.

FAQs