United Arab Emirates -- 2026 Regulatory Updates Regulatory Overview

Overview of UAE Cryptocurrency Regulation as of April 2026

As of April 2026, UAE cryptocurrency regulation has centralized under the federal Capital Market Authority (CMA) framework, integrating local regulators like VARA (Dubai), ADGM/FSRA, SCA (now transitioning to CMA), and CBUAE, with expanded rules for virtual assets (VAs) emphasizing AML/CFT, market integrity, and investor protection.[1][3] This includes mutual recognition of licenses and nationwide authorization via CMA-VARA agreements.[1]

VARA (Dubai) Licensing Framework Updates

VARA, established under Dubai Law No. 4 of 2022, regulates virtual asset service providers (VASPs) in Dubai mainland and free zones (excluding DIFC), covering issuance, exchange, custody, advisory, lending, broker-dealer, and management services.[1][2][4] Key updates include VARA Rulebook V2.0 (May 2025) and a two-stage licensing process: initial approval (after fees and office setup in Dubai), followed by detailed submissions (policies, AML officers, etc.) within 12 months.[1][4] Capital requirements vary, e.g., higher of US$136,300 or 25% of fixed overheads for lending/borrowing; US$76,300 or 15% for custody-linked management.[4] VARA's role is shifting to a delegated authority under CMA per Ministerial Decision No. 336 of 2025 and August 2025 CMA-VARA agreement, enabling VARA licenses to confer nationwide validity without separate CMA applications.[1] Recent guidance includes first rules on VA issuance for creation, disclosure, and distribution (date unspecified in sources).[6] VASPs must maintain physical presence, AML/CFT compliance (risk-based CDD, transaction monitoring, sanctions screening), and ongoing supervision.[2][4]

ADGM/FSRA Virtual Asset Rules

FSRA (ADGM) operates under the DFSA Rulebook with Crypto Token amendments (January 2026), focusing on institutional-grade crypto tokens, governance, and a regime distinct from VARA/DFC.[1] ADGM rules align with federal frameworks but maintain free-zone specificity; CMA provides national oversight for multi-emirate operations.[1][3]

SCA Federal Regulations (Transition to CMA)

The Securities and Commodities Authority (SCA) has transitioned to the Capital Market Authority (CMA), issuing a Virtual Assets Framework with five core modules (general requirements, conduct, trading systems, AML, prudential standards) and eight regulated activities (expanded from three), covering trading, custody, advisory, and more.[1][3] This integrates VARA, free zones, and mainland via the August 2025 CMA-VARA cooperation (building on SCA-VARA), including mutual license recognition, joint reviews, and shared enforcement; CMA has nationwide reach, applying extraterritorially to UAE-targeted operations.[1][3] Framework draws from IOSCO/FATF standards.[3]

CBUAE Stablecoin Payment Token Rules

Sources lack specific details on CBUAE stablecoin or payment token rules as of April 2026; CBUAE is recognized alongside CMA/VARA/DFSA/FSRA for federal corporate tax purposes under Ministerial Decision No. 336 of 2025, but no dedicated stablecoin framework is detailed.[1]

Recent VARA Enforcement Actions or License Grants

Relm secured a full VARA VASP license, expanding regulated digital asset broker-dealer services (recent as of framework rollout).[3] No specific recent enforcement actions detailed; VARA emphasizes swift breaches response and risk-based supervision, but examples are absent from sources.[2] VARA's jurisdiction remains Dubai-limited (excluding DIFC), subordinate to CMA nationally.[1]

Limitations: Search results provide strong coverage of VARA/CMA/DFSA but limited ADGM/FSRA depth, no CBUAE stablecoin specifics, and few enforcement examples; regulations evolve rapidly per VARA's discretion.[5] Multi-emirate firms default to CMA.[1]