Telephone Numbers
Telephone Numbers
For detailed information +90 542 381 3868'Call.
Dubai was the first city to create a standalone regulator dedicated to virtual assets. That decision settled the question crypto founders struggle with most — which permission covers which activity. What follows sets out the VARA licence categories, the official fee and capital thresholds, the two application stages, the tax position and the mistakes that most often stall an application.
Table of Contents
What draws crypto businesses to Dubai is not the tax rate on its own. The decisive factor is knowing in advance which rules apply to your activity. A team running a virtual asset exchange and a team offering custody face different capital thresholds and different supervisory obligations — and both can see those thresholds before they apply.
Mapping an activity to an official category does more than smooth the relationship with the regulator. Licence category has become a standard question in investor meetings, enterprise client contracts and, above all, corporate bank account opening. The banking difficulties faced by unlicensed structures are among the most frequently reported operational obstacles in the region.
No personal income tax, zero corporate tax on profits up to AED 375,000, and the concentration created by exchanges, funds and infrastructure providers moving regional headquarters to Dubai combine into a strong pull. DMCC's crypto and blockchain ecosystem hosts more than 650 companies by its own count; add mainland structures outside the free zones and the fund vehicles on the DIFC side, and finding vendors, counsel and technical staff is markedly easier than in competing hubs.
VARA (Virtual Assets Regulatory Authority) was established in 2022 to regulate virtual asset activity in Dubai. Its remit covers the whole of Dubai except the DIFC, where the DFSA has authority. Any company carrying out commercial crypto activity in Dubai must hold the VARA licence matching that activity, or document that it falls outside scope.
This is where confusion arises most often: a free zone commercial licence and a VARA licence are not the same thing. A trade licence from DMCC, DWTC or a similar zone establishes the legal entity; it does not confer authority to carry out regulated virtual asset activity. That authority comes from a separate VARA application. Treating the two layers as a single cost line is one of the most common budgeting errors.
On 19 May 2025 VARA issued updated rulebooks covering all eight activities, with a 30-day transition period. Controls on margin trading were tightened, definitions around collateral wallet arrangements were clarified, and compliance standards were harmonised across activities. Through 2026 the regulator's emphasis has shifted from new legislation to supervision of existing rules: AML/CFT business risk assessment guidance, a Travel Rule implementation circular and qualified investor classification guidance were all published in this period.
| Activity Category | Scope |
|---|---|
| Advisory | Advice on virtual asset investments |
| Broker-Dealer | Brokerage and order transmission |
| Custody | Safekeeping and control of client assets |
| Exchange | Operating a virtual asset trading platform |
| Lending and Borrowing | Virtual asset lending and borrowing services |
| Management and Investment | Portfolio management and investment services |
| Transfer and Settlement | Virtual asset transfer and payment settlement |
| Issuance (Category 1) | Virtual asset issuance falling within Category 1 |
The distinction matters. Category 1 issuance appears in the fee schedule as a licensable activity in its own right. Category 2 issuance is not licensed — it runs through a separate approval process. Whitepaper submission is charged separately in both cases: AED 5,000 to submit and up to AED 50,000 for review. Asset-referenced virtual assets are not a ninth category; they sit in an annex to the Virtual Asset Issuance Rulebook.
Structures trading only their own assets and holding no client funds obtain a No Objection Certificate from VARA rather than a full licence, at AED 1,000 per year. One threshold is easy to miss: proprietary trading operations exceeding a cumulative 30-day rolling volume of USD 250 million must register with VARA and come under regulatory oversight. VARA issued a reminder circular on licence code requirements on 31 July 2025, making clear that this area is actively supervised.
Crypto Company Setup in Dubai — 5 Steps
The first stage is a preliminary approval permitting the company to be formed. Roughly half the application fee is paid up front here. The critical point: holding an ATI does not authorise virtual asset activity. No clients may be onboarded, no platform launched and no service marketed at this stage.
The second stage documents compliance with four mandatory rulebooks: Company, Compliance and Risk Management, Technology and Information, and Market Conduct. Key personnel appointments — compliance officer, MLRO and managing director — are completed here, and each appointee goes through a fit and proper assessment.
The answer to the cost question is not a single figure but the sum of three independent components. Regulator fees, minimum paid-up capital and the liquidity test are calculated separately.
The Three Layers of Total Cost
| Activity | Application Fee | Annual Supervision Fee |
|---|---|---|
| Advisory | AED 40,000 | AED 80,000 |
| Transfer and Settlement | AED 40,000 | AED 80,000 |
| Broker-Dealer | AED 100,000 | AED 200,000 |
| Custody | AED 100,000 | AED 200,000 |
| Exchange | AED 100,000 | AED 200,000 |
| Lending and Borrowing | AED 100,000 | AED 200,000 |
| Management and Investment | AED 100,000 | AED 200,000 |
| Issuance (Category 1) | AED 100,000 | AED 200,000 |
Other published items: proprietary trading NOC at AED 1,000 per year, licence update requests at AED 500, licence withdrawal at AED 10,000 and legal opinions up to AED 4,000. Where more than one activity is carried out, an extension fee applies to each category beyond the first. The annual supervision fee is a floor rather than a ceiling — VARA may levy risk-based additional supervision fees.
The capital requirement is not a flat amount. It is a threshold compared against a percentage of fixed annual overheads, with the higher of the two applying. Whether custody forms part of the structure changes the percentage directly.
| Activity | Minimum Paid-Up Capital |
|---|---|
| Advisory | AED 100,000 |
| Management and Investment | AED 280,000 or 15% of fixed annual overheads (AED 500,000 / 25% with custody) |
| Broker-Dealer | AED 400,000 or 15% (AED 600,000 / 25% with custody) |
| Transfer and Settlement | AED 500,000 or 25% of fixed annual overheads |
| Lending and Borrowing | AED 500,000 or 25% of fixed annual overheads |
| Custody | AED 600,000 or 25% of fixed annual overheads |
| Exchange | AED 800,000 or 15% (AED 1,500,000 / 25% with custody) |
Separate from capital sits a liquidity test: net liquid assets must be at least 1.2 times monthly operating expenses. The two requirements do not substitute for one another; both must be met. Structures offering custody must also hold reserve assets covering client liabilities in full.
Regulator fees are only part of the total. Free zone or mainland trade licensing, physical office rent, compliance officer and MLRO salaries, professional indemnity insurance premiums, independent audit and legal advisory costs make up a significant share of the first-year budget. Underwriting the insurance policy is itself a process that needs to be completed before application.
Note: VARA fees and capital requirements vary by activity category and may be updated. Figures should be verified against the official VARA schedules before applying.
VARA publishes no official duration for the two-stage process. Figures in circulation — three months, twelve months — come from advisers and law firms rather than the regulator, and vary considerably by business model. The real determinants are the complexity of the activity category, the quality of the Regulatory Business Plan, how quickly key personnel clear fit and proper assessment, and how well the technology architecture is documented. The only officially fixed periods are the 12-month validity of a Legacy Operating Permit and the 90-day advance notice for licence renewal.
| Item | Rate / Status |
|---|---|
| Corporate tax (profit up to AED 375,000) | 0% |
| Corporate tax (above AED 375,000) | 9% |
| Domestic Minimum Top-up Tax | 15% — multinational groups with consolidated revenue of EUR 750m or more |
| Small Business Relief | Revenue up to AED 3,000,000, extended to 31 December 2029 |
| Personal income tax | None |
| VAT | 5% — transfer and conversion of virtual assets are exempt |
An amendment to the VAT Executive Regulations effective 15 November 2024 brought the transfer of ownership and the conversion of virtual assets within the exemption. For transfer and conversion the exemption applies retroactively to 1 January 2018; whether custody and management services carry the same retroactive treatment remains open, and fee-bearing custody warrants separate assessment. The tax authority has also set the method for converting digital currency values into dirhams: the average across three platforms chosen from an approved list at the transaction date, with the same three retained for the calendar year.
Care is needed here. Qualifying Free Zone Person status gives eligible companies a 0% rate on qualifying income. The current ministerial decision defining qualifying activities does not list virtual asset activity among them. The assumption that a free zone crypto company automatically benefits from the 0% rate is therefore unsafe; assessment must be made income stream by income stream and on the facts. The de minimis rule also applies: non-qualifying revenue must not exceed the lower of 5% of total revenue or AED 5,000,000.
VARA applies across Dubai mainland and the free zones; the DFSA regime applies within the DIFC financial centre. Operational crypto businesses — exchange, custody, brokerage — largely run under a VARA licence, while institutional fund structures and derivatives concentrate on the DIFC side.
A significant change arrived on the DIFC side in early 2026: the DFSA's previously published list of recognised crypto tokens was abolished. Firms now assess each token themselves against DFSA criteria, on a reasoned and documented basis. In Abu Dhabi, ADGM and the FSRA retain the accepted virtual asset model, with privacy tokens and algorithmic stablecoins explicitly prohibited.
RAK Digital Assets Oasis, frequently cited for Web3 and digital asset ventures, has operated under the name Innovation City since September 2025. The point often missed: Innovation City is a commercial free zone, not a financial regulator. Activities falling within a regulatory mandate require separate approval from the relevant authority. Structure selection therefore turns not on setup fees alone but on target client base, activity definition and banking access. For the detail of the mainland and free zone choice, see the mainland versus free zone comparison.
An obligation most competing content overlooks. VARA's regulation on marketing virtual assets took effect on 1 October 2024 and applies across Dubai except the DIFC. Unlicensed entities may not market virtual assets, and marketing anonymity-enhancing crypto assets is separately prohibited. Every item of material must carry a clear risk warning and present benefit and risk in balance.
Promotion directed at Dubai from abroad is also in scope. Pricing in AED, using UAE imagery or working with local content creators can all cause a campaign to be treated as targeting the UAE. Records must be retained for eight years, and administrative fines for breaches can reach AED 10,000,000. Content creators do not benefit from the exemption available to journalists.
The main driver of both cost and duration is choosing the licence category correctly. Once the category is settled, fees, capital, staffing and the document list settle with it; while it remains vague, every line becomes an estimate. Writing the activity definition in regulatory language before the file is assembled shortens every step that follows.
For the detail of the licence application, see the Dubai crypto licence application steps; to compare jurisdictions, the best countries to start a crypto company analysis is a useful starting point. For post-incorporation accounting and tax obligations see Dubai accounting services, and for corporate banking see opening a bank account in Dubai. For end-to-end setup, request a free quote.
Yes. Dubai regulates virtual-asset activities through VARA with a clear licence regime; operating under the right category licence is fully legal.
Advisory, broker-dealer, custody, exchange, lending and borrowing, management and investment, transfer and settlement, and Category 1 issuance all require a VARA licence.
The application fee is AED 40,000 for advisory and for transfer and settlement, and AED 100,000 for the other six activities. Annual supervision fees are AED 80,000 and AED 200,000 respectively.
Advisory requires AED 100,000. Other activities apply the higher of a fixed amount or a percentage of fixed annual overheads; for exchange with custody the threshold reaches AED 1,500,000.
VARA publishes no official duration for the two-stage process. Timing depends on the complexity of the activity category, the quality of the Regulatory Business Plan and fit and proper assessment of key personnel.
There is no personal income tax. Corporate profit is taxed at 0% up to AED 375,000 and 9% above. Transfer and conversion of virtual assets are exempt from VAT.
No. A free zone trade licence establishes the legal entity; authority to carry out regulated virtual asset activity comes from a separate VARA application.
Memorandum and articles with UBO declarations, trade licence, office lease, Regulatory Business Plan, AML/CFT policies, cybersecurity policy, key personnel appointments and source of funds declaration.
Operational crypto services such as exchange, custody and brokerage sit largely under VARA, while institutional fund and derivative structures concentrate on the DIFC-DFSA side. The choice follows your business model.
Structures trading only their own assets obtain a No Objection Certificate from VARA instead of a full licence. Registration with VARA becomes mandatory above a cumulative 30-day volume of USD 250 million.
+90 542 381 3868
+971 58 5204103