Last reviewed: July 2026. Checked quarterly against VARA’s Company Rulebook and activity-specific rulebooks. This page explains the general regulatory framework and is not a substitute for licensed legal advice on your specific application.
Most crypto license Dubai guides collapse VARA’s entire framework into “one license, apply here.” That is not how it works, and treating it that way is how founders under-budget by hundreds of thousands of dirhams. VARA regulates seven distinct virtual asset activities, each with its own capital requirement, application fee, and annual supervision cost, and getting your activity classification wrong at the start is the single most common reason applications stall. This guide lays out the actual categories, the real 2026 figures, and where VARA fits against DMCC and the free zone landscape.
What Is a Crypto License in Dubai and Who Needs One?
A crypto license in Dubai, more precisely a Virtual Asset Service Provider (VASP) license, is a regulatory authorisation issued by the Virtual Assets Regulatory Authority (VARA), the dedicated regulator for virtual asset activity across Dubai’s mainland and free zones.
Regulatory Scope
- VARA covers all of Dubai except the Dubai International Financial Centre (DIFC), which runs its own separate regime under the DFSA
- Abu Dhabi Global Market (ADGM) similarly operates its own crypto framework under the FSRA, entirely separate from VARA
- Legal basis: Dubai Law No. 4 of 2022 established VARA, with the Virtual Assets and Related Activities Regulations 2023 and the accompanying activity-specific rulebooks forming the operative framework
Who Actually Needs a License
- Not every crypto-adjacent business needs a VARA license. The requirement is triggered by specific regulated activities, exchange, custody, broker-dealing, lending, advisory, management, transfer and settlement, or token issuance
- A blockchain infrastructure company, an NFT platform that never custodies client assets, or a Web3 development studio may only need a standard trade license, not a VASP license
- If your business genuinely conducts a regulated virtual asset activity for or from Dubai, a VASP license is mandatory before you begin operating, not a formality to arrange afterward
How to Get a Cryptocurrency License in Dubai
At a high level, obtaining a VARA license runs through your chosen company jurisdiction first, then the VARA activity approval itself:
- Establish a UAE legal entity in Dubai mainland or an eligible free zone, since VARA requires the applicant to be a registered legal person with a physical office and registered address in Dubai
- Classify your activity correctly against VARA’s seven core VA activities before anything else, since capital and compliance requirements scale entirely around this classification
- Submit an Initial Disclosure Questionnaire (IDQ) through your company’s licensing authority (a free zone such as DMCC, or DET for mainland)
- Progress to Initial Approval, where VARA reviews your business model, ownership structure and governance framework
- Finalise operational readiness: lease agreement, compliance policies, technology and information security controls, and the required paid-up capital
- Receive your full VASP license, activity-specific and renewable annually alongside ongoing supervision obligations
For founders coming from outside the UAE, our guide on how foreign investors can open a business in Dubai covers the underlying company formation and ownership basics that sit beneath this VARA-specific process.
VARA vs DMCC Crypto Centre: Choosing Your Route
This is a common point of confusion. DMCC and VARA are not competing options, they solve different problems.
- DMCC Crypto Centre is a free zone hub within DMCC purpose-built for crypto, blockchain and Web3 companies, offering company formation, office space, and a dense community of digital asset businesses
- VARA is the regulator, not a jurisdiction. A company formed in DMCC that conducts a regulated VA activity still needs a separate VASP license from VARA; DMCC company formation does not itself grant licensed VASP status
- Choosing DMCC makes sense for the ecosystem, banking relationships familiar with crypto clients, and community, while mainland DET formation suits businesses prioritising direct UAE market access
- Our guide to the best free zones in Dubai for startups covers the broader free zone landscape if DMCC is not the only option you are weighing
For hands-on structuring and application support specific to crypto licensing, firms such as DIAC’s cryptocurrency licensing service work through the practical mechanics of pairing your company formation route with the correct VARA activity classification.
VASP Activity Categories: Exchange, Custody, Broker-Dealer, Advisory
VARA licenses seven core virtual asset activities, each governed by its own dedicated rulebook:
- Advisory Services: offering advice on virtual asset transactions or holdings
- Broker-Dealer Services: arranging, soliciting or executing client orders, market making, or dealing in virtual assets
- Custody Services: safekeeping virtual assets on behalf of clients and acting only on verified instructions
- Exchange Services: operating exchange, trading or conversion services between virtual assets and fiat, or between virtual assets themselves
- Lending and Borrowing Services: facilitating virtual asset lending or borrowing arrangements
- Virtual Asset Management and Investment Services: managing portfolios or investment products involving virtual assets
- Virtual Asset Transfer and Settlement Services: facilitating the transfer or settlement of virtual assets between parties
A separate VA Issuance approval applies to token issuers, split into Category 1 (individual approval per issuance) and Category 2 (distribution through an already-licensed intermediary). A business needing more than one activity, for example an exchange that also offers custody, must meet the capital and compliance requirements for each activity separately, not just the higher of the two.
Capital Requirements and Application Fees by Activity
VARA’s Company Rulebook sets paid-up capital as the higher of a fixed AED amount or a percentage of the firm’s fixed annual overheads, so the figures below are minimums, not ceilings. Actual required capital can exceed these fixed amounts once the overheads-based calculation is applied.
| Activity | Indicative minimum paid-up capital | Application fee |
|---|---|---|
| Advisory Services | AED 100,000 | AED 40,000 |
| Broker-Dealer Services | Higher of AED 400,000 or 15% of overheads | AED 100,000 |
| Custody Services | Higher of AED 800,000 to 1,500,000 or a percentage of overheads | AED 100,000 |
| Exchange Services | Higher of AED 800,000 to 1,500,000 or a percentage of overheads | AED 100,000 |
| Lending and Borrowing Services | Higher of AED 500,000 or 25% of overheads | AED 100,000 |
| VA Management and Investment Services | Higher of AED 280,000 to 500,000 or a percentage of overheads | AED 100,000 |
| VA Transfer and Settlement Services | Activity-dependent, lower tier | AED 40,000 |
A distinct, much higher threshold applies to firms seeking a Dealer designation specifically, institutional-grade proprietary dealing and market-making, reported at AED 30,000,000, reflecting VARA’s intent to reserve that specific activity for well-capitalised institutional players. Paid-up capital must be held at all times in a UAE trust account with VARA as beneficiary, or via an approved surety bond, and firms must separately maintain Net Liquid Assets of at least 1.2 times monthly operating expenses. Given how activity-specific and formula-driven these figures are, confirming your exact capital obligation with a licensed advisor before budgeting is not optional due diligence, it is close to mandatory.
Benefits of Obtaining a Cryptocurrency License in Dubai
Dubai’s push to build a genuinely regulated, institutional-grade digital asset hub sits within its broader competitive knowledge economy ambitions, and a licensed VASP status delivers concrete advantages beyond regulatory compliance alone:
- Regulatory credibility with banks, institutional counterparties and international partners, in a sector where an unlicensed operator struggles to open even a basic corporate account
- Access to a genuinely deep market, with VARA’s public register listing more than 50 active licensed VASPs as of mid-2026, including major global exchanges that chose Dubai specifically for its regulatory clarity
- 100% foreign ownership, consistent with the UAE’s broader company ownership reforms, with no requirement for a local majority shareholder
- 0% personal income tax for founders and employees, and a defined, predictable corporate tax framework rather than regulatory ambiguity
- A single-emirate, purpose-built regulator, avoiding the fragmented, multi-agency oversight that crypto businesses face in many other jurisdictions
- VAT exemption on core virtual asset transactions, covered in detail below, which materially changes unit economics for exchange and trading-heavy business models
Application Process and Realistic Timeline
- Stage one, Initial Disclosure Questionnaire (IDQ): submitted through your licensing authority, covering business model, ownership, and proposed activities; a first instalment of roughly 50% of the application fee is typically invoiced at this stage
- Stage two, Initial Approval: VARA reviews governance structure, compliance framework, and Responsible Individuals proposed for key roles
- Operational readiness: finalising your Dubai office lease, technology and information security controls, AML/CFT policies, and confirming paid-up capital is in place
- Full VASP license issuance: granted once all conditions are satisfied and remaining fees are settled
Realistic end-to-end timelines commonly cited across licensing advisors run from 3 to 6 months for a straightforward single-activity application, longer for multi-activity applications or business models requiring additional regulatory coordination with the Central Bank or Securities and Commodities Authority.
Documents Required for a Cryptocurrency License in Dubai
- Corporate documents for the UAE legal entity: trade license, Memorandum of Association, and shareholder registry
- Passport copies and background checks for all shareholders, directors, and proposed Responsible Individuals
- A detailed Regulatory Business Plan covering the proposed activity, target market, and revenue model
- AML/CFT policy documentation and a named compliance officer
- Technology and information security policy documentation, including custody arrangements and cybersecurity controls where applicable
- Proof of office lease in Dubai and evidence of paid-up capital held in the required trust structure or surety bond
- Financial statements or projections demonstrating ongoing capital adequacy
Costs of a Cryptocurrency License in Dubai
Beyond the application fee and paid-up capital already covered, budget for these recurring and setup costs:
Recurring Annual Costs
- Annual supervision fee, commonly AED 80,000 for Advisory Services rising to AED 200,000 or more for Broker-Dealer, Exchange and Custody activities, payable per licensed activity every year
- Compliance infrastructure, including AML transaction monitoring systems, a qualified compliance officer, and annual cybersecurity audits, frequently running into tens of thousands of dirhams annually on an ongoing basis
One-Time Setup Costs
- Legal and advisory fees for structuring, documentation and the application process itself, often a significant multiple of the direct VARA fees
- Office and company formation costs, on top of VARA-specific fees, tied to whichever free zone or mainland structure you choose
Taken together, total realistic first-year cost for a single-activity VASP, including legal support and setup, commonly runs from the low hundreds of thousands of dirhams upward, with multi-activity licenses and higher-capital categories such as Exchange or Dealer status pushing well beyond that. For the broader cost baseline of forming the underlying company before VARA fees are added, our guide to the best free zones in Dubai for startups is a useful starting reference.
Tax Treatment of Virtual Assets in the UAE
- VAT exemption: under Cabinet Decision No. 100 of 2024, effective 15 November 2024, the transfer and conversion of virtual assets is exempt from VAT, applied retroactively to 1 January 2018
- Custody and management services are VAT-exempt only where provided without a separate fee, commission or charge; fee-based custody or management can still attract standard VAT, a nuance worth confirming with a tax advisor for your specific service structure
- Cryptocurrency mining falls outside the scope of VAT entirely and is not treated as a taxable supply, per FTA Public Clarification VATP039
- Corporate tax applies under the standard UAE framework: 0% on the first AED 375,000 of taxable income and 9% above that, with free zone VASPs potentially eligible for Qualifying Free Zone Person treatment on qualifying income, subject to meeting substance and activity conditions
- Historical VAT positions matter: businesses that charged 5% VAT on virtual asset transactions before this exemption should review whether credit notes or voluntary disclosures are needed, with the window for related historic claims closing 31 December 2026
Frequently Asked Questions
Do I need a VARA license to run any crypto business in Dubai?
No. Only businesses conducting VARA’s specifically regulated activities, exchange, custody, broker-dealing, lending, advisory, management, transfer and settlement, or token issuance, require a VASP license. Blockchain technology providers or platforms that never touch client assets may only need a standard trade license.
What is the cheapest VARA license category to obtain?
Advisory Services carries the lowest headline application fee (AED 40,000) and paid-up capital requirement (AED 100,000), making it the most accessible entry point, though it also permits the narrowest scope of activity.
Is DMCC the same as VARA?
No. DMCC is a free zone offering company formation and a crypto-focused business community; VARA is the separate regulator that issues the actual VASP license required to conduct regulated virtual asset activities anywhere in Dubai.
How long does it take to get a VARA license?
Realistic timelines run 3 to 6 months for a single-activity application, longer for multi-activity licenses or business models requiring coordination with additional regulators like the Central Bank or SCA.
Is crypto trading subject to VAT in the UAE?
No. Transfer and conversion of virtual assets has been VAT-exempt since 1 January 2018 under Cabinet Decision No. 100 of 2024, applied retroactively, though fee-based custody or management services can still attract VAT in some cases.
Can a foreign founder own 100% of a VARA-licensed company?
Yes. VARA-licensed entities follow the UAE’s standard company ownership rules, which permit 100% foreign ownership across both mainland and free zone structures for this activity.
