VARA is Dubai's dedicated regulator for crypto and virtual assets, the world's first of its kind. What it does and how it fits the UAE picture.
- VARA is Dubai's dedicated regulator for virtual assets, established under Dubai Law No. 4 of 2022 as the world's first independent authority of its kind.
- Its remit covers Dubai mainland and every Dubai free zone except the DIFC, where the DFSA regulates crypto services instead.
- It licenses eight virtual asset activities, from exchanges and custody to stablecoin issuance, governed by four compulsory rulebooks and activity-specific rules.
- VARA does not regulate all UAE crypto. DIFC, ADGM, mainland investment tokens and AED-pegged stablecoins each sit with a different regulator.
Inside Dubai's Dedicated Virtual Assets Regulator
The Virtual Assets Regulatory Authority is Dubai's dedicated regulator for crypto. Established under Dubai Law No. 4 of 2022, it was the world's first independent authority focused exclusively on virtual assets. VARA licenses every Virtual Asset Service Provider operating in Dubai outside the DIFC, from exchanges to custodians to stablecoin issuers. Its rulebooks set capital, custody and conduct standards, govern Fiat-Referenced Virtual Asset issuance, require Travel Rule compliance, and require firms to pass an Approval to Incorporate stage before licensing.
This glossary entry explains what VARA does, how it differs from Dubai itself, and how its remit fits the wider UAE regulatory map for virtual assets.
VARA Explained in Plain English
VARA is the Virtual Assets Regulatory Authority of Dubai. It is an emirate-level regulator, not a federal one, and it focuses on crypto and other virtual assets rather than the broader financial system. It licenses and supervises exchanges, custodians, brokers, asset managers, advisors, lenders, transfer providers and token issuers operating in or from Dubai. Its remit covers Dubai mainland and every Dubai free zone except the DIFC, where the DFSA holds jurisdiction instead.
VARA was set up to give Dubai a single, dedicated voice on virtual assets. That means licensing, supervision and enforcement against unlicensed activity. It also means clear rules on capital, custody, market conduct, technology, AML and consumer protection, tailored to the way crypto businesses actually work.
How VARA Works in the UAE
VARA operates under Dubai Law No. 4 of 2022 and the 2023 Virtual Assets and Related Activities Regulations. Its framework rests on four compulsory rulebooks (Company; Compliance and Risk Management; Technology and Information; Market Conduct) plus activity-specific rulebooks for each of the eight licensed activities. Version 2.0 of these rulebooks rolled out in 2025.
In practical terms, VARA licenses eight virtual asset activities: advisory, broker-dealer, custody, exchange, lending and borrowing, management and investment, transfer and settlement, and Category 1 issuance. Custody must always sit in a separate legal entity. Capital requirements range from AED 100,000 for advisory firms up to AED 1.5 million for the largest exchanges, with extra capital tied to client balances and issued stablecoin supply.
VARA jurisdiction stops at the DIFC and at the Emirate of Dubai's borders. Other UAE virtual asset activity sits with the DFSA in DIFC, the FSRA in Abu Dhabi's ADGM, the CMA for investment tokens treated as securities onshore, and the CBUAE for payment tokens and AED-pegged stablecoins. The split is set out in more detail in the UAE crypto licensing 2026 framework.
Practical Example
Imagine an international crypto exchange wants to set up a Dubai operation outside the DIFC. It submits an Initial Disclosure Questionnaire to VARA, secures an Approval to Incorporate, leases a physical Dubai office and incorporates a legal entity. It then applies for full VASP licences for exchange services and broker-dealer services, with a separate sister entity for custody.
A second example: a Dubai issuer wants to launch a USD-pegged stablecoin. It applies under VARA's Fiat-Referenced Virtual Asset rules, holds reserves at 100% of supply, and meets the capital floor of AED 1.5 million plus 2% of the issued supply. An AED-pegged version would not be allowed under VARA. Dirham stablecoins sit exclusively with the CBUAE.
Common Misconceptions
The biggest misconception is that VARA regulates all crypto in the UAE. It does not. VARA is an emirate-level Dubai regulator. The DFSA, FSRA, CMA and CBUAE each have their own roles, and a VARA licence does not cover DIFC, ADGM, mainland onshore or AED-pegged stablecoins.
A second common error is treating an Approval to Incorporate or an In-Principle Approval as a licence. It is not. Firms holding either status are explicitly barred from offering services or onboarding clients until VARA issues the full VASP licence.
People Also Asked
What does VARA stand for?
VARA stands for the Virtual Assets Regulatory Authority of Dubai. It was established under Dubai Law No. 4 of 2022 as the world's first independent regulator dedicated solely to virtual assets. Its jurisdiction covers Dubai mainland and Dubai free zones, but not the DIFC.
Does VARA regulate all crypto in the UAE?
No. VARA is a Dubai emirate-level regulator. Crypto in the DIFC is regulated by the DFSA, in ADGM by the FSRA, onshore investment tokens by the CMA, and payment tokens and AED-pegged stablecoins by the CBUAE.
Can I list a Dubai-issued stablecoin pegged to the dirham under VARA?
No. VARA's Fiat-Referenced Virtual Asset rules explicitly carve out AED-pegged stablecoins, which sit under the Central Bank of the UAE's exclusive jurisdiction. VARA's FRVA regime applies to non-AED-pegged stablecoins issued from Dubai.
Related on UAE Advisor Guide
Who Regulates Your Money in the UAE? A Plain-English Guide to CBUAE, CMA, DFSA, FSRA and VARADubai's VARA Surpasses 85 Licences as UAE Unified VASP Register Goes Live
Kraken Gets VARA Licence for UAE Crypto Services