- Dubai — Regulator Profile
VARA — The Dubai Virtual Assets Regulator
VARA is Dubai’s specialist virtual assets regulator across the Emirate (excluding DIFC) — what requires a VARA licence, how the Rulebooks fit together, activity-specific prudential expectations, Transfer & Settlement controls, and how firms secure authorisation in Dubai.
⚖️
Governed by Dubai Law No. 4 of 2022 and Regulations 2023
🗺️
Jurisdiction: all Dubai zones including Free Zones — excluding DIFC
💰
Activity-specific capital — from AED 100K (Advisory) to AED 1.5M+ (Exchange)
💧
Net Liquid Assets must be at least 1.2x monthly operating expenses
🔒
Reserve Assets equal to 100% of client liabilities — held 1:1 in the same VA
We translate VARA's virtual asset framework into board-grade artefacts — including licensing scope analysis, Regulatory Business Plans, prudential capital planning, AML/Travel Rule controls, custody and wallet governance, Transfer & Settlement operating models, and regulator-facing submission packs through to go-live. Confidential. By appointment only.
Who VARA Is
The Dubai Virtual Assets Regulatory Authority
The Dubai Virtual Assets Regulatory Authority (VARA) was established under Dubai Law No. 4 of 2022 to regulate Virtual Asset Service Providers (VASPs) and authorise regulated VA Activities in the Emirate of Dubai. VARA's jurisdiction extends across all zones in Dubai — including Free Zones and Special Development Zones — excluding the DIFC.
A person may not carry on a regulated VA Activity in or from Dubai without the relevant VARA authorisation. VARA's framework is activity-based — the licence scope must match what the business actually does in substance, not merely how the model is marketed.
Carrying on any regulated VA Activity in or from Dubai without a VARA licence is a regulatory offence. The framework is activity-based and substance-driven — structure and labelling alone do not determine regulatory scope.
🏛️
For models involving payment, remittance, or transfer functionality, firms must also align with CBUAE requirements and broader UAE AML/CFT obligations in addition to VARA’s Rulebook framework.
Legislative & Regulatory Instruments
- Dubai Law No. 4 of 2022 — the primary legislation regulating virtual assets and VASPs in Dubai
- Virtual Assets and Related Activities Regulations 2023 — the operational regulatory framework
- Activity-Specific Rulebooks — governing each licensed VA Activity category in detail
- Company Rulebook — cross-cutting governance and corporate standards for all VASPs
- Compliance and Risk Management Rulebook — AML/CFT, Travel Rule, and risk management standards
- Technology and Information Rulebook — cybersecurity, systems, and technology risk standards
- Market Conduct Rulebook — client treatment, disclosure, and conduct standards
📋
Scope & Coverage
What VARA Regulates — VA Activities
To carry on a regulated VA Activity in Dubai, firms must obtain a VARA licence specifying the authorised activity and the prudential and operating conditions attached to it. VARA regulates a comprehensive range of virtual asset activities under its activity-based framework.
📋 Advisory Services
🪙 VA Issuance — FRVAs & ARVAs (Category 1)
📋
Activity-Based
Licence scope must match the substance of what the business does — not how it is marketed
🗺️
All Dubai
Jurisdiction covers all Dubai zones including Free Zones and SDZs — excluding DIFC
📚
4 + Rulebooks
Four cross-cutting Rulebooks apply to all VASPs, plus activity-specific Rulebooks for each licensed activity
Prudential Capital Framework
Activity-Specific Capital Requirements
VARA's prudential framework is activity-specific and risk-based. Paid-up capital is not one-size-fits-all — it reflects the risk profile of each licensed activity. Capital, liquidity, insurance, and reserve backing are part of the licensing case, not afterthoughts.
VA Activity
Minimum Paid-Up Capital
Advisory Services
AED 100,000
VA Transfer and Settlement Services
Higher of AED 500,000 or 25% of FAOs
Custody Services
Higher of AED 600,000 or 25% of FAOs
Exchange Services (with VARA-approved custody arrangement)
Higher of AED 800,000 or 15% of FAOs
Exchange Services (without approved custody arrangement)
Higher of AED 1,500,000 or 25% of FAOs
💡
Additional Prudential Requirements
In addition to paid-up capital, VARA requires three distinct prudential obligations that must be maintained on an ongoing basis — not just at the point of licensing:
- Net Liquid Assets (NLA)
- Reserve Assets
- Regulated Insurance
⚠️
How Firms Get Authorised
The VARA Licensing Pathway — 8 Stages
Success depends on how credible the operating model looks when tested against the Rulebooks — not just whether the application form is complete. The pathway requires both structural preparation and substantive compliance readiness before submission.
01
Regulatory Classification & Licence Scope
02
Capital, Prudential & Governance Assessment
03
Regulatory Business Plan (RBP) Preparation
04
AML, Travel Rule & Technology Controls
05
Application Dossier Assembly & Submission
06
VARA Clarification Rounds
07
Capital, Readiness & Control Finalisation
08
Final Approval & Licence Issuance
What "Good" Looks Like
VARA Standards — Prudential, Conduct & Technology
A VARA-ready VASP demonstrates institutional-grade standards across three dimensions — not just at application, but on an ongoing basis throughout the supervisory lifecycle. All three must be evidenced at submission.
🏦
Prudential Standards
- Fully maintained paid-up capital in approved form
- Daily liquidity tracking and monthly NLA reporting
- Reserve asset reconciliations — 1:1 in the same VA
- Breach escalation procedures documented and tested
- Board-level oversight of prudential adequacy at all times
⚖️
Conduct Expectations
- Clear and fair client communications
- Transparent fee disclosure and pricing
- Conflict-of-interest identification and management
- Robust client agreement architecture
- Complaints handling and public disclosures
📤
Technology, Settlement & Client Protection
- Explicit client authorisation controls for all transfers
- Transfer tracing and rectification procedures
- Initiation and finalisation receipts issued to clients
- Wallet and routing readiness — tested Default Rules
- Daily reconciliations and incident response playbooks
💡
AML, Travel Rule & Financial Crime
VARA AML/CFT — Operationally Central, Not Peripheral
VARA-supervised VASPs must operate robust AML/CFT controls aligned to the UAE framework and FATF-style expectations. For Transfer & Settlement models, Travel Rule readiness is operationally central — not an add-on.
Mandatory AML/CFT Requirements
- Risk-based AML framework — documented, implemented, and aligned to the UAE national AML/CFT framework
- Sanctions screening — comprehensive and ongoing against UAE and international sanctions lists
- Blockchain analytics and transaction monitoring — technology-enabled, calibrated to VARA-supervised activity types
- Suspicious transaction escalation — documented procedures and timely reporting to goAML
- Travel Rule implementation — originator and beneficiary data collection, transmission, and retention
- Counterparty due diligence — enhanced controls for cross-VASP transfers and institutional counterparties
- Enhanced controls for cross-border flows — additional scrutiny for transfers involving overseas VASPs and high-risk jurisdictions
Travel Rule — VARA Specifics
VARA's Compliance and Risk Management Rulebook requires Travel Rule compliance for all applicable VA transfers. For Transfer & Settlement licensees, Travel Rule readiness is an operational prerequisite — not a future-state compliance item.
⚠️
🏛️
✔
Restrictions & Prohibitions
What VARA Restricts or Prohibits
VARA's rule architecture restricts or prohibits a specific set of activities and failures. These restrictions apply from the date of licensing and are monitored actively through VARA's ongoing supervisory framework.
✕
Unlicensed VA Activity
Carrying on any regulated VA Activity in or from Dubai without the relevant VARA authorisation — a direct regulatory offence under Dubai Law No. 4 of 2022.
✕
Operating Outside Licence Scope
Conducting VA Activities that fall outside the specific scope of the VARA licence granted — even where the firm holds a VARA licence for other activities.
✕
Weak or Untested Default Management
Failure to maintain and regularly test Default Management Arrangements — particularly relevant for Transfer & Settlement and Exchange licensees.
✕
Failure to Maintain Prudential Resources
Allowing paid-up capital, NLA, insurance, or reserve assets to fall below required levels without immediate VARA notification and daily updates until rectified.
✕
Misalignment Between Activity and Licence
Conducting activities in a manner that does not match the conditions of the licence granted — including changes to the operating model that affect the substance of the licensed activity without prior VARA approval.
✕
DIFC Operations Without Separate Authorisation
VARA's jurisdiction explicitly excludes the DIFC. Firms operating from DIFC require separate authorisation from the DFSA — VARA's licence does not extend across the DIFC perimeter.
Supervision & Inspections
How VARA Supervises Licensed VASPs
VARA supervises through an ongoing prudential and conduct lens. Supervision is active, thematic, and risk-responsive — with heightened focus on business models that create elevated risk across prudential, AML, or technology dimensions
💰
Capital and Liquidity Reporting — ongoing NLA monitoring and reporting obligations
🔒
Reserve Asset Monitoring — reconciliation of 100% client liability backing in real-time
🛡️
AML and Compliance Reviews — assessment of AML programme effectiveness
📋
Document and Policy Testing — Rulebook alignment reviews and policy inspections
💻
Technology and Incident Response Scrutiny — TIR Rulebook compliance assessment
🔍
Thematic Supervisory Follow-Up — heightened review where business model creates elevated risk
⚠️
How We Help
VARA Authorisation — What We Deliver
We carry the full VARA licensing file from regulatory classification through to go-live — building board-grade artefacts that reflect how VARA reviewers test operating models against the Rulebooks, not just whether applications are complete.
⚖️
Regulatory Perimeter Analysis & Licence Scope
We determine which VA Activities your business requires a VARA licence for — and map the precise activity scope that must be reflected in the licence — before any application preparation begins. Misclassification at this stage compounds through every subsequent phase.
🗺️
VARA Activity Mapping & Prudential Planning
We map your operating model to VARA's activity-specific Rulebooks — identifying every applicable capital requirement, NLA obligation, reserve asset commitment, and insurance arrangement — and build the prudential financial model for your licensing dossier.
📊
Regulatory Business Plan Drafting
We draft the Regulatory Business Plan — the core document in any VARA application — covering services, fund flows, operating model, revenue framework, risk assessment, and Rulebook alignment, written to meet VARA's supervisory expectations at every level.
🛡️
AML / Travel Rule Framework Implementation
We design and implement the full AML/CFT programme — including blockchain analytics integration, Travel Rule compliance architecture, transaction monitoring, counterparty due diligence, and goAML reporting procedures — aligned to VARA's Compliance and Risk Management Rulebook.
💰
Prudential Capital, NLA, Reserve & Insurance Positioning
We structure the prudential framework — paid-up capital in approved form, NLA daily tracking systems, reserve asset reconciliation procedures, and insurance arrangements — ensuring all VARA prudential requirements are met and evidenced at application stage and maintained throughout supervision.
👥
Board Governance & Compliance Framework Design
We design the board composition, governance architecture, compliance function setup, and fit-and-proper framework — aligned with VARA's Company Rulebook and Compliance and Risk Management Rulebook requirements.
📤
Transfer & Settlement Operating Model
For Transfer & Settlement licensees, we design the complete operating model — client authorisation controls, initiation and finalisation receipts, wallet and routing infrastructure, Default Rules architecture, and daily reconciliation procedures — to meet the dedicated Transfer & Settlement Rulebook requirements.
🌐
Full VARA File Management Through Authorisation
We manage the complete VARA application — from dossier assembly and submission through clarification rounds, capital and readiness confirmation, and final licence grant — including post-authorisation compliance infrastructure and ongoing supervisory support.
Board-Grade Artefacts. Full File Management. Through to Go-Live.
- We determine your VARA regulatory perimeter and licence scope before any application or fee expenditure begins
- We build the complete application dossier — RBP, prudential framework, AML, governance, and technology controls — aligned to the Rulebooks
- We manage all VARA clarification rounds and engagement throughout the review process
- We carry the file through final approval and post-authorisation go-live — including ongoing supervisory compliance infrastructure
FAQs
Frequently Asked Questions — VARA Dubai
Yes, if the business is carrying on a regulated VA Activity in or from Dubai — including from Free Zones and Special Development Zones (excluding DIFC). VARA’s framework is activity-based and substance-driven. A firm cannot avoid licensing through structural or labelling arrangements if it is substantively carrying on a regulated VA Activity. The specific licence required depends on which VA Activities the business performs.
No. VARA regulates Dubai — including Free Zones and Special Development Zones — but explicitly excluding the DIFC. The DIFC is regulated by the DFSA under a separate framework. Firms operating across both DIFC and non-DIFC Dubai may require both DFSA and VARA authorisation depending on where regulated activities are conducted from.
No. Transfer and Settlement Services carries significant operational requirements beyond the four cross-cutting Rulebooks. In addition to the general framework, firms require dedicated written procedures, explicit client authorisation controls, public disclosures aligned to the Transfer and Settlement Rulebook, initiation and finalisation receipts for every transfer, tested Default Rules, and Travel Rule readiness as an operational prerequisite — not a future-state commitment.
The higher of AED 500,000 or 25% of Fixed Annual Overheads (FAOs). Where FAOs exceed AED 2,000,000 annually, the 25% calculation will produce a capital requirement above the AED 500,000 floor — meaning the operational scale of the business directly determines the required capital level. This links prudential requirements to actual operational cost structure.
Yes. In addition to paid-up capital, VARA requires all licensed VASPs to maintain Net Liquid Assets of at least 1.2x monthly operating expenses — tracked daily and reported monthly. Reserve Assets equal to 100% of liabilities owed to clients must be maintained 1:1 in the same virtual asset on an ongoing basis. Regulated insurance appropriate to the size and complexity of the business is also required. These are not one-time requirements — they must be maintained continuously throughout the supervisory lifecycle.
Ready to Pursue VARA Authorisation in Dubai?
Book a VARA Strategy Call
Whether you are assessing your regulatory scope, preparing an application, or building the Rulebook-aligned compliance framework required for VARA authorisation, the right strategy starts with the right classification. Let us map your VARA licensing pathway today.