SCA — Federal authority — virtual asset supervision across UAE including Free Zones (Cabinet Resolution 111/2022)

VARA — Dubai virtual asset regulation (excluding DIFC) — 7 activity categories. World's first standalone VA regulator.

ADGM FSRA — Abu Dhabi Global Market — institutional focus, common law jurisdiction, ex-FCA/MAS staff

DFSA — DIFC — investment/security tokens only, updated framework Jan 2026

CBUAE — Central bank — broader financial ecosystem, goAML reporting

Securities and Commodities Authority (SCA): This is the primary federal authority responsible for supervising and regulating virtual asset activities across the entire UAE, including in Free Zones. This mandate stems from Cabinet Resolution No. 111 of 2022. The federal framework has been updated by SCA Board of Directors Decision No. 4/R.M/2026.

Virtual Asset Regulatory Authority (VARA): Specific to Dubai (excluding the Dubai International Financial Centre, DIFC). VARA is central to Dubai's strategy to become a crypto hub, providing a clear and secure framework. Its rulebooks have been finalized since 2023, with active supervision and VASP licensing ongoing since at least 2026, attracting major platforms.

The DFSA brought into force updated regulatory frameworks for Crypto Tokens in the DIFC in November 2024 (not January 2026)

**Abu Dhabi Global Market / Financial Services Regulatory Authority (ADGM/FSRA):** Regulates the Abu Dhabi Global Market free zone.

**Central Bank of the UAE (CBUAE):** Also has a role in the broader financial ecosystem.

**Licensing and Capital Requirements:** The federal framework (SCA) is expected to establish eight licensed financial activities for virtual assets, with minimum capital requirements ranging from AED 500,000 to AED 4 million (neoslegal.co, 2026). VARA in Dubai also outlines key licensing requirements and compliance standards for crypto businesses (coinbro.pro, 2025).

Federal UAE regulations (Decision No. 4/R.M/2026) prohibit algorithmic stablecoins at the federal level. Privacy token prohibitions originate from DIFC/DFSA rules (effective January 2026), not federal regulations. The two restrictions operate under different jurisdictional frameworks.

**Market Integrity and AML:** Dubai's VARA framework is designed to enhance market integrity and ensure alignment with global Anti-Money Laundering (AML) standards (coinpedia.org, 2025).

Real-World Asset (RWA) Tokenization: Key developments including institutional adoption and regulatory advancements occurred in 2025.

**Taxation:** The UAE maintains a policy of zero capital gains tax and zero personal income tax on crypto assets. A corporate tax of 9% applies only when specific conditions are met (Source 8 - "UAE Crypto Regulation 2026: VARA Licensing and Dubai Framework ...").

The **Central Bank of the UAE (CBUAE)** is responsible for the licensing, governing, and supervision of financial institutions in the United Arab Emirates.Central Bank of the UAE

CBUAE issues licenses for various banking operations, including conventional banks, Islamic banks, finance companies, and moneychangers, with centralized oversight.UAE Banks by License Type

CBUAE regulates activities such as taking deposits, providing credit facilities, stored value facilities (including cryptocurrencies), and payment services.Baker McKenzie Resource Hub

Firms and individuals must apply to the CBUAE for authorization to carry out regulated financial activities, submitting official application forms and supporting documents to the Licensing Division.Central Bank of the UAE

For Restricted Licence Banks, applicants must obtain a specific licence from CBUAE, meeting requirements on minimum capital, ownership, trade name, and a three-year business plan, but the CBUAE now also offers alternative licence categories such as Stored Value Facilities (SVF) licences with different requirements.

Minimum capital for Restricted Licence Banks: AED 100 million fully paid-up at branch level plus AED 2 billion at entity level for foreign bank branches; AED 1 billion for all other cases.Tamimi Turtl

Retail Payment Service Providers (PSP) and card schemes require a CBUAE licence under the Retail Payment Services and Card Schemes (RPSCS) regulation, which has a tiered licensing framework distinct from the earlier Category I-IV structure with escalating capital requirements.

The New CBUAE Law expands 'Licensed Financial Activities' to include open finance services, virtual asset payment services, and technology platforms enabling financial services, but the evidence does not support a compliance deadline of 16 September 2026.

The UAE licensing process involves in-principle approval, incorporation of a mainland entity, share capital deposit, key appointments, and office space, but in many Emirates and free zones can be completed in weeks or even days, not necessarily taking around one year.