ecox.pro logo ecox.pro Independent guide
Menu

Is crypto legal in Dubai?

Crypto is regulated in Dubai, not banned outright. Dubai has its own virtual assets law and regulator, VARA, and firms that offer crypto services need a licence before they start.[1][2] Some token types are prohibited, and paying for goods with crypto is restricted. This page sets out what the official texts say, who regulates which part of the UAE, and what the rules leave open.

  • Published
  • Updated
  • Sources last checked

Independent publication about EcoX and related public activity. Not operated by or affiliated with EcoX Network, Jorge Sebastiao or Franco Fiore. Advertisements are separate from editorial coverage. About this site

Short answer

  • Businesses need a licence. Running a crypto exchange, broker, wallet, custody or transfer service in Dubai requires a VARA licence, and federal rules require a licence for the same kind of activity elsewhere in the UAE.[3][4]
  • Some tokens are prohibited. VARA prohibits anonymity-enhanced cryptocurrencies, and the Central Bank prohibits algorithmic stablecoins and privacy tokens.[5][6]
  • Paying with crypto is limited. Shops and other businesses may accept only the two kinds of payment token that the Central Bank rules list.[7] See Can you pay with crypto in Dubai?
  • Individuals. The texts we reviewed regulate the firms that provide crypto services and the use of tokens for payments. We found no provision that bans a person from holding crypto, and none that gives a general permission covering every kind of token. The practical rule from the regulator is to deal only with licensed firms.[8]

Who regulates crypto where

The UAE has more than one crypto regime. Which one applies depends on where a firm operates and what it does. Dubai's law covers the whole emirate, including its free zones, except the DIFC financial centre.[9] The federal framework covers the other emirates and the ordinary free zones, but not the financial free zones (DIFC and ADGM).[10]

Which authority regulates crypto activity in each part of the UAE
WhereRegulatorMain rules
Dubai, including its free zones, except DIFC Virtual Assets Regulatory Authority (VARA)[11] Dubai Law No. 4 of 2022 and VARA's Regulations 2023, current version in effect from 19 June 2025[12]
Other emirates and ordinary free zones Capital Market Authority (CMA), known as the SCA until 2026[13] Cabinet Resolution No. 111 of 2022[10]
DIFC (Dubai International Financial Centre) Dubai Financial Services Authority (DFSA) DFSA Crypto Token rules, updated with effect from 12 January 2026[14]
ADGM (Abu Dhabi Global Market) Financial Services Regulatory Authority (FSRA) Financial Services Permission for virtual asset activities[15]
Payment tokens, UAE outside DIFC and ADGM Central Bank of the UAE (CBUAE) Payment Token Services Regulation, in force since 31 August 2024[16]

A 2024 agreement between the federal securities regulator and VARA splits the work: firms operating in or from Dubai, or seeking to serve Dubai, need a VARA licence, and firms operating from the other emirates need a federal licence.[11]

What needs a licence

Under Dubai Law No. 4 of 2022, nobody may carry on a virtual asset activity in Dubai without a VARA permit. The law lists, among others, operating a platform, exchanging, transferring, holding in custody, wallet services and offering or trading tokens.[2][3] VARA says it has identified eight licensable activities, and a firm needs a licence for each activity it carries on.[17][18]

An in-principle approval from VARA is a step in the licensing process, not a licence: its holder may not start operations or serve clients until it has a full licence.[19] At federal level, Cabinet Resolution No. 111 of 2022 lists platform operation, crypto-to-crypto exchange, transfers, brokerage and custody as licensed activities,[20] and the 2025 anti-money-laundering law also prohibits any person from providing virtual asset services without a licence or registration.[21]

In the DIFC, a new firm that wants to provide financial services involving crypto tokens must be authorised by the DFSA,[22] and since January 2026 each firm must assess whether a token is suitable, as the DFSA no longer keeps a list of recognised tokens.[23] In ADGM, firms apply to the FSRA, and regulated firms may use only fiat-referenced tokens that the FSRA has accepted.[24]

To check a particular firm, see How to check a VARA licence.

Buying, holding and trading as an individual

Questions such as "is bitcoin legal in Dubai" or "is crypto trading legal in Dubai" usually mean: may I buy, hold and sell it? The official texts we reviewed answer a narrower question. They require the firms you buy from, sell to or store crypto with to be licensed, and they restrict which tokens may be used for payments. They do not contain a general rule for individuals.

  • VARA says only VARA-licensed firms may provide virtual asset services in or from Dubai, and warns that dealing with unlicensed operators carries financial, legal and reputational risk.[8]
  • Licensed providers must check who their customers are, monitor transactions, keep records and report suspicious transactions.[25] When you send crypto from one provider to another, the sending provider must collect and pass on information about the sender and the recipient (the "travel rule").[26][27]
  • Converting crypto to dirhams goes through the same licensed services. For payment tokens, conversion is a Central Bank licensed service, and crypto exchanges can apply to the Central Bank for a registration to offer it.[28][29]

Crypto ATMs and mining. In the official sources we reviewed, we found no VARA or Central Bank list of licensed crypto ATM operators, and no rule that deals specifically with crypto mining. This page therefore does not answer those questions. A machine or a mining offer is still a service provider, so the licensing rules above may apply to the business behind it.

Prohibited and restricted tokens

  • VARA prohibits issuing anonymity-enhanced cryptocurrencies, and all activities related to them, in Dubai.[5]
  • The Central Bank prohibits issuing algorithmic stablecoins and privacy tokens, and services relating to them, in the UAE outside the financial free zones. The ban applies even to firms licensed by other crypto regulators.[6]

Paying with crypto

Under the Central Bank rules, a business in the UAE outside the financial free zones may accept a virtual asset as payment only if it is a dirham payment token from a licensed issuer, or a registered foreign payment token used to buy other virtual assets.[7] Providing payment services with virtual assets is a licensed financial activity under the 2025 Central Bank law.[30] Details, including AED stablecoins, the Digital Dirham and property, are in our payments guide.

Fines and enforcement

  • Cabinet Resolution No. 111 of 2022 allows the authorities to stop unlicensed activity, impose fines of up to AED 10 million and refer cases to the Public Prosecution.[31] A separate 2024 resolution lists the specific violations and penalties.[32]
  • Carrying on a licensed financial activity without a licence, which includes payment services using virtual assets, can be punished by imprisonment, a fine of AED 50,000 to AED 500 million, or both.[33][34]
  • VARA publishes enforcement actions.[35] In October 2024 it reported fines of AED 50,000 to AED 100,000 for seven entities,[36] and in October 2025 fines of AED 100,000 to AED 600,000 for 19 firms, for unlicensed activity and marketing breaches.[37]
  • VARA's marketing rules apply to anyone marketing virtual assets in or to the UAE, whether licensed by VARA or not.[38]

The UAE government portal also points to joint official guidance warning the public about financial crime risks from unlicensed crypto providers.[39]

Tax

The UAE does not levy income tax on individuals,[40] but Corporate Tax, VAT and new reporting rules can still matter. See Crypto tax in Dubai and the UAE.

Recent changes to watch

  • The federal Securities and Commodities Authority is called the Capital Market Authority from 1 January 2026.[13]
  • A 2025 anti-money-laundering law replaced the 2018 law.[41]
  • The DFSA's updated crypto token rules took effect on 12 January 2026.[14]
  • The UAE plans to start crypto reporting under the OECD's CARF framework in 2027.[42]

Older articles that cite the SCA, the 2018 money-laundering law or the DFSA's former list of recognised tokens may be out of date.

Sources

Each note shows the source, its publisher, the date we last checked it and the status of the statement it supports. Status labels are explained in the editorial policy.

  1. Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai, Dubai Legislation Portal, published 28 February 2022. Checked 13 October 2026. Confirmed Supports: Dubai Law No. 4 of 2022 establishes the Dubai Virtual Assets Regulatory Authority, or VARA, as a public corporation affiliated with the Dubai World Trade Centre Authority.
  2. Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai, Dubai Legislation Portal, published 28 February 2022. Checked 13 October 2026. Confirmed Supports: A person may not conduct a Dubai virtual asset activity without a VARA permit under Dubai Law No. 4 of 2022.
  3. Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai, Dubai Legislation Portal, published 28 February 2022. Checked 13 October 2026. Confirmed Supports: Dubai Law No. 4 lists platform operation, exchange, transfer, safekeeping or control, wallets, and token offering or trading among activities requiring VARA permits.
  4. Cabinet Resolution No. (111) of 2022 Regulating Virtual Assets and the Related Service Providers, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Cabinet Resolution No. 111 of 2022 prohibits a person from engaging in VA activities in the UAE without approval and a licence from the SCA (now the Capital Market Authority) or the applicable local licensing authority.
  5. C. Prohibited Virtual Assets, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: VARA prohibits the issuance of anonymity-enhanced cryptocurrencies and all virtual asset activities related to them in the Emirate.
  6. Payment Token Services Regulation, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: The CBUAE Payment Token Services Regulation prohibits issuance of algorithmic stablecoins and privacy tokens, and services relating to them, in the UAE.
  7. Payment Token Services Regulation, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: Article 2(7) of the CBUAE Payment Token Services Regulation says no merchant or other person in the UAE selling goods or services may accept a virtual asset as payment unless it is a Dirham Payment Token issued by a Licensed Payment Token Issuer, or a Foreign Payment Token from a Registered Foreign Payment Token Issuer used to buy a virtual asset or virtual asset derivative. Article 2 excludes the Financial Free Zones.
  8. VARA Steps Up Enforcement to Safeguard Dubai's Virtual Asset Market: 19 Unlicensed Firms Penalised and Public Warning Issued, Virtual Assets Regulatory Authority, published 6 October 2025. Checked 13 October 2026. Confirmed Supports: VARA's 2025 enforcement notice warns that only VARA-licensed entities are authorised to provide VA services in or from Dubai and says engagement with unlicensed operators carries financial, legal and reputational risk.
  9. Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai, Dubai Legislation Portal, published 28 February 2022. Checked 13 October 2026. Confirmed Supports: Dubai Law No. 4 of 2022 applies to virtual asset services across Dubai, including special development zones and free zones, but excludes DIFC.
  10. Cabinet Resolution No. (111) of 2022 Regulating Virtual Assets and the Related Service Providers, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Cabinet Resolution No. 111 of 2022 covers the UAE VA sector, VA activities and VASPs, including ordinary free zones, but excludes financial free zones.
  11. SCA and VARA set regulatory framework for the UAE's virtual assets sector in boost to the country's global position in the field, Securities and Commodities Authority, published 5 September 2024. Checked 13 October 2026. Confirmed Supports: Under the SCA-VARA agreement, VASPs operating in, from, or seeking to serve Dubai need a VARA licence; VASPs operating from other emirates need an SCA licence.
  12. Virtual Assets and Related Activities Regulations 2023, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: The current VARA Virtual Assets and Related Activities Regulations 2023 version is marked effective from 19 June 2025.
  13. Federal Decree by Law No. (32) of 2025 Regarding the Capital Market Authority, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Federal Decree by Law No. 32 of 2025 replaces the designation Securities and Commodities Authority with Capital Market Authority wherever it appears in legislation.
  14. DFSA's Crypto Token Framework, Dubai Financial Services Authority. Checked 13 October 2026. Confirmed Supports: The DFSA's updated Crypto Token rules in DIFC took effect on 12 January 2026.
  15. Digital Assets, Abu Dhabi Global Market. Checked 13 October 2026. Confirmed Supports: Financial-services entities wishing to conduct virtual asset, fiat-referenced token, digital securities, digital-asset derivative or fund activities in ADGM must apply to the FSRA for a Financial Services Permission.
  16. Article (1): Definitions, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: The CBUAE Payment Token Services Regulation, C 2/2024, is marked in force from 31 August 2024.
  17. Licensed Activities, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: VARA says it has identified eight distinct virtual asset activities for its regulatory perimeter and that a VASP must obtain a VARA licence before undertaking them in Dubai.
  18. A. Licensing Requirements, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: VARA's current licensing rule requires entities to seek authorisation and obtain and maintain a licence for each virtual asset activity they conduct in the Emirate.
  19. Public Register, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: A VARA in-principle approval holder may not initiate operations, conduct virtual asset activities or service clients before obtaining a full VASP licence.
  20. Cabinet Resolution No. (111) of 2022 Regulating Virtual Assets and the Related Service Providers, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Cabinet Resolution No. 111 lists VA platform operation, VA-to-VA exchange, transfers, brokerage, and custody or management as activities licensed and overseen under the federal framework.
  21. Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Federal Decree by Law No. 10 of 2025 prohibits any natural or legal person from engaging in VASP activities without a licence, registration or enrolment from the competent or supervisory authority.
  22. DFSA's Crypto Token Framework, Dubai Financial Services Authority. Checked 13 October 2026. Confirmed Supports: A firm new to DIFC that seeks to carry out financial services involving Crypto Tokens must be authorised by the DFSA.
  23. DFSA's Crypto Token Framework, Dubai Financial Services Authority. Checked 13 October 2026. Confirmed Supports: Under the DFSA's 2026 changes, firms, not the DFSA, assess crypto-token suitability, and the DFSA no longer maintains a prescribed list of Recognised Crypto Tokens.
  24. Digital Assets, Abu Dhabi Global Market. Checked 13 October 2026. Confirmed Supports: An ADGM authorised person conducting a regulated activity involving a fiat-referenced token may use only FSRA Accepted FRTs.
  25. Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Federal Decree by Law No. 10 of 2025 requires VASPs to report suspected transactions without delay and to apply risk assessment, customer due diligence, ongoing monitoring and record-keeping controls.
  26. Cabinet Resolution No. (134) of 2025 Regarding the Executive Regulations of Federal Decree by Law No. (10) of 2025, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Cabinet Resolution No. 134 of 2025 requires an originating VASP to obtain, retain and securely transmit specified accurate originator and beneficiary information for VA transfers.
  27. A. General Requirements, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: VARA transfer and settlement VASPs must comply with applicable AML/CFT requirements, including FATF-specific requirements such as the Travel Rule.
  28. Payment Token Services Regulation, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: No person may perform a Payment Token Service in the UAE or directed to persons in the UAE unless licensed or registered by the CBUAE under the Payment Token Services Regulation.
  29. Article (8): Application for a Non-Objection to perform Payment Token Conversion or Foreign Payment Token Custody and Transfer, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: A virtual-asset exchange platform operator may apply to CBUAE for a Non-Objection Registration to perform Payment Token Conversion.
  30. Article (61) Licensed Financial Activities, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: Federal Decree-Law No. 6 of 2025 lists providing payment services using virtual assets as a financial activity subject to CBUAE licensing.
  31. Cabinet Resolution No. (111) of 2022 Regulating Virtual Assets and the Related Service Providers, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Cabinet Resolution No. 111 permits administrative measures including stopping unlicensed activity, fines up to AED 10 million, a profits or avoided-loss fine, and referral to the Public Prosecution.
  32. Cabinet Resolution No. (99) of 2024 Concerning the List of Violations and Administrative Penalties for Acts Violating the Provisions of Cabinet Resolution No. (111) of 2022, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Cabinet Resolution No. 99 of 2024 is the federal resolution that lists violations and administrative penalties for breaches of Cabinet Resolution No. 111 of 2022.
  33. Federal Decree-Law No. (6) of 2025 Regarding the Central Bank, Regulation of Financial Institutions and Activities, and Insurance Business, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: Under Article 170 of Federal Decree-Law No. 6 of 2025, unlicensed licensed-financial activity can be punished by imprisonment and a fine of AED 50,000 to AED 500 million, or either penalty.
  34. Federal Decree-Law No. (6) of 2025 Regarding the Central Bank, Regulation of Financial Institutions and Activities, and Insurance Business, Central Bank of the UAE. Checked 13 October 2026. Confirmed Supports: Federal Decree-Law No. 6 of 2025 prohibits carrying on licensed financial activities without the required licence and restricts promotion of those activities to the legal and regulatory framework.
  35. Enforcement, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: VARA publishes enforcement entries that identify entities, dates, violation categories and measures such as cease-and-desist orders and financial penalties.
  36. VARA Continues to Strengthen Enforcement Programme, Issues Fines and Public Warnings Against Engaging with Unlicensed Virtual Asset Firms, Virtual Assets Regulatory Authority, published 8 October 2024. Checked 13 October 2026. Confirmed Supports: VARA's 8 October 2024 notice reports cease-and-desist orders and AED 50,000 to AED 100,000 fines for seven entities operating without required licences or breaching marketing rules.
  37. VARA Steps Up Enforcement to Safeguard Dubai's Virtual Asset Market: 19 Unlicensed Firms Penalised and Public Warning Issued, Virtual Assets Regulatory Authority, published 6 October 2025. Checked 13 October 2026. Confirmed Supports: VARA's 6 October 2025 notice says 19 firms were penalised for unlicensed VA activities and marketing breaches, with fines ranging from AED 100,000 to AED 600,000.
  38. Regulations on the Marketing of Virtual Assets and Related Activities 2024, Virtual Assets Regulatory Authority. Checked 13 October 2026. Confirmed Supports: VARA's Regulations on the Marketing of Virtual Assets and Related Activities 2024 apply to marketing in or targeting the UAE by domestic or foreign entities, whether VARA-licensed or not.
  39. Regulation of Virtual Assets in The UAE, The Official Platform of the UAE Government, published 24 November 2025. Checked 13 October 2026. Confirmed Supports: The UAE Government portal says joint guidance warns the public, licensed financial institutions, DNFBPs and licensed VASPs about financial-crime risks from unlicensed VA providers and fraudulent dealings.
  40. Taxation | The Official Portal of the UAE Government, UAE Government. Checked 13 October 2026. Confirmed Supports: The UAE Government portal states that the UAE does not levy income tax on individuals.
  41. Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing, UAE Legislation. Checked 13 October 2026. Confirmed Supports: Federal Decree by Law No. 10 of 2025 repeals Federal Decree-Law No. 20 of 2018 on AML, while prior implementing measures remain effective only insofar as they do not conflict until superseded.
  42. UAE signs Multilateral Competent Authority Agreement under Crypto-Asset Reporting Framework, Emirates News Agency, published 20 September 2025. Checked 13 October 2026. Confirmed Supports: The UAE's CARF implementation was scheduled to go live in 2027, with first exchanges of information expected in 2028.