VARA Issues Cease-and-Desist Against KuCoin for Unlicensed Crypto Services in Dubai

{getToc} $title={Table of Contents}

Cease-and-desist for KuCoin in Dubai underscores rising crypto enforcement risk in the UAE.

Dubai's Virtual Assets Regulatory Authority has issued a formal cease-and-desist against four KuCoin-linked entities for operating without a licence in the emirate.
VARA confirmed that KuCoin holds no licence to provide virtual asset services in or from Dubai, making any related activity a direct regulatory breach.
The named entities - Phoenixfin Pte Ltd, MEK Global Limited, Peken Global Limited, and KuCoin Exchange EU GmbH - have been ordered to halt all unlicensed activities immediately.
VARA's Marketing Regulations, in force since October 2024, require all firms targeting UAE consumers with virtual asset products to be licensed or to act through a licensed provider.
UAE residents and investors have been urged by VARA to verify any crypto platform's status on its public register before engaging with it.
Financial advisors with clients using KuCoin face immediate compliance obligations, including reviewing exposure and updating risk disclosures.

Dubai's Virtual Asset Licensing Framework Enters an Assertive Enforcement Phase

Dubai's regulation of cryptocurrency activity - anchored in the Dubai Virtual Asset Law (Law No. 4 of 2022) - is moving beyond framework-building into active enforcement. The Virtual Assets Regulatory Authority (VARA), the body responsible for licensing and supervising virtual asset activities in the emirate, has escalated its action against KuCoin, one of the world's largest crypto exchanges, by issuing a formal cease-and-desist order. The action demonstrates that offshore incorporation and passive-access arguments are unlikely to protect platforms where there is evidence of active marketing, promotion, or onboarding of Dubai residents.

For financial advisors and wealth managers in the UAE, the KuCoin case raises immediate compliance and client-communication obligations. VARA's order named four entities associated with the KuCoin platform and directed them to halt all unlicensed virtual asset activities. Firms whose clients hold positions on KuCoin - or on similar non-authorised exchanges - now face a clear review trigger under their own Virtual Asset Service Provider (VASP) regulatory obligations, including suitability, best-interest duties, and product governance requirements.

What VARA's Order Covers

On 6 March 2026, VARA issued a cease-and-desist instruction targeting Phoenixfin Pte Ltd, MEK Global Limited, Peken Global Limited, and KuCoin Exchange EU GmbH - entities the regulator linked to the kucoin.com domain and commercial activity conducted under the KuCoin brand. According to VARA's notice, these firms may have provided virtual asset services to Dubai residents without required approvals and may have misled clients about their regulatory status while actively soliciting business.

VARA's statement was unambiguous: KuCoin holds no licence to provide virtual asset services in or from Dubai, and any activities advertised or conducted by these entities are therefore in breach of VARA regulations. The authority has ordered the immediate termination of all unlicensed business activity within the emirate and directed KuCoin to cease onboarding Dubai-based users. VARA has also indicated it will maintain ongoing surveillance of virtual asset activities involving Dubai residents and continue taking enforcement action where it identifies non-compliant services targeting the market.

How VARA's Marketing Rules Widen the Enforcement Net

A central element of this case is VARA's Marketing Regulations, which came into force on 1 October 2024. These rules apply to all businesses wishing to market virtual assets or related activities in or targeting the UAE - regardless of whether the firm holds a VARA licence for other purposes. Under the regulations, any firm marketing virtual assets to UAE consumers must either be a VARA-licensed VASP, or act on behalf of one and hold specific approval for the relevant activity.

VARA's guidance states that any marketing campaign "in or targeting the UAE" is deemed to include Dubai by default, unless a firm can explicitly and consistently demonstrate that its campaign excludes Dubai. Factors the regulator may assess include the campaign's location, the currency used, and the language of marketing materials - and the authority has stressed that this list is non-exhaustive. According to Linklaters' coverage of the regulations, platforms and app stores facilitating virtual-asset-related marketing must also implement geo-blocking and location-based filtering to prevent UAE users from accessing non-compliant applications or services.

Global Pressure Mounts on Unlicensed Exchanges

The KuCoin action is part of a broader global trend of tightening oversight of crypto trading platforms. As Finance Magnates reported, KuCoin is already confronting regulatory challenges in several European markets, and the Dubai order adds to mounting pressure on exchanges that have historically served users across multiple jurisdictions without aligning with local licensing regimes. VARA has framed unlicensed platforms as posing serious risks to investors, citing potential issues around asset safety, dispute resolution, and recourse in cases of hacks or operational failures.

Dubai's regulator has been clear that the KuCoin case should be read as a signal to all offshore exchanges serving UAE clients without local approvals. The authority's explicit confirmation that KuCoin holds no licence - combined with its insistence that any platform activity directed toward Dubai residents constitutes a regulatory infraction - makes it harder for non-compliant platforms to rely on reverse-solicitation or passive-access defences.

What Advisors Must Do Now

For regulated financial advisors in the UAE, VARA's notice creates a clear compliance trigger. Firms must review existing client portfolios for exposure to KuCoin, assess whether to recommend migrating assets to a VARA-licensed exchange, and update risk disclosures to reflect the regulator's warning. Internal policies should be reviewed to address dealings with unlicensed platforms, and any technology stack or digital channels used in client interactions should be checked for alignment with VARA's virtual asset and marketing rules.

Service providers and intermediaries using third-party tools or white-label solutions also face scrutiny. Those that fail to prevent UAE residents from accessing non-compliant exchanges or products risk being assessed as facilitating in-scope marketing or access to unlicensed services. VARA's public register of licensed VASPs at vara.ae remains the definitive reference point for advisors tracking which platforms clients can lawfully use.

What Clients are Asking their Advisors

What does it mean that KuCoin is unlicensed in Dubai?

VARA has confirmed that KuCoin holds no licence to provide virtual asset services in or from Dubai. This means UAE residents using the platform have no regulatory protection, and KuCoin cannot legally advertise, market, or onboard clients in the emirate.

How do I check if a crypto exchange is VARA-licensed before using it?

VARA maintains a public register of licensed virtual asset service providers on its website at vara.ae. Checking this register before using any crypto platform is the most reliable way to confirm whether a service is authorised to operate in Dubai.

Does VARA's KuCoin order apply across the whole UAE or only Dubai?

VARA's jurisdiction covers Dubai specifically, including the DIFC. However, its Marketing Regulations apply to any campaign in or targeting the UAE, meaning the practical reach of the order extends well beyond Dubai's borders. Other UAE emirates fall under the Central Bank of the UAE's oversight.

What should I do if I already have funds on KuCoin in the UAE?

VARA has not directed residents to withdraw funds immediately, but it has ordered KuCoin to cease onboarding Dubai-based users and halt all unlicensed activity. If you hold assets on an unlicensed exchange, you should seek guidance from a VARA-regulated crypto advisor, as there is no regulatory recourse in Dubai for disputes involving non-authorised platforms.