Dubai has a formal licensing system for crypto exchanges, brokers, custodians, investment platforms and other virtual asset businesses. If your company plans to provide regulated services in or from Dubai, a standard trade licence is not enough. You need approval from the Virtual Assets Regulatory Authority, known as VARA, before operations begin.
This guide covers the regulated activities, application process, costs, capital and compliance requirements.
Key Takeaways
VARA regulates virtual asset businesses across Dubai mainland and Dubai free zones, except the Dubai International Financial Centre.
New applicants complete two stages: Approval to Incorporate and the full Virtual Asset Service Provider licence.
VARA currently regulates eight virtual asset activity categories.
Application fees range from AED 40,000 to AED 100,000 for the first activity. Annual supervision fees range from AED 80,000 to AED 200,000 per activity.
The regulatory fee is only one part of the budget. You must also plan for paid-up capital, office space, staff, systems, insurance and commercial licensing costs.
In a 30-minute call we map your situation against jurisdiction, activity and cost — no commitment required.
What Is a VARA License in Dubai?
A VARA licence authorises a legal entity to conduct one or more regulated virtual asset activities in or from Dubai. VARA is responsible for virtual asset regulation across Dubai mainland and its free zones. DIFC sits outside VARA’s jurisdiction and follows its own regulatory framework.
A blockchain, software, consultancy or general trading licence does not replace regulatory approval when the actual service falls within VARA’s perimeter. Check the official VARA licence application framework before selecting your structure or activity.
Who Needs a VARA Licence?
You may need a Virtual Asset Service Provider, or VASP, licence if your Dubai business serves clients, handles their assets, arranges transactions or operates a virtual asset platform, including services delivered overseas from Dubai.
Common examples include:
Cryptocurrency exchanges and trading platforms
Virtual asset brokers and dealers
Institutional or retail custody providers
Crypto lending and borrowing platforms
Portfolio managers and virtual asset investment firms
Payment, transfer or settlement providers using virtual assets
Businesses issuing certain regulated virtual assets
NFT marketplaces where the operating model includes exchange or broker-dealer services
Proprietary trading is treated differently. A company trading only its own funds may need a VARA No Objection Certificate rather than a full VASP licence. Registration also applies above the relevant rolling-volume threshold. The outcome depends on the actual activity and whether third-party clients are involved.
Virtual Asset Activities Regulated by VARA
VARA lists eight regulated activities. Your application must identify every category your business intends to conduct.
Regulated activity | Typical business model |
Advisory Services | Giving personalised advice on virtual assets |
Broker-Dealer Services | Arranging, executing or facilitating client transactions |
Custody Services | Safeguarding client virtual assets or wallet access |
Exchange Services | Operating a virtual asset exchange or trading venue |
Lending and Borrowing Services | Facilitating virtual asset loans or borrowing arrangements |
Management and Investment Services | Managing virtual asset portfolios or investments |
Transfer and Settlement Services | Transferring virtual assets or settling transactions |
Category 1 VA Issuance | Issuing virtual assets covered by the Category 1 framework |
A VASP can apply for multiple activities, but it must meet the rules for each one. Custody usually requires a separate legal entity and standalone licence. The regulated entity also cannot conduct proprietary trading for the group’s portfolio.
Review the official VARA licensed activities before incorporation. Choosing the wrong category can lead to restructuring, added fees and a longer review.
Dubai Mainland or Free Zone Setup?
A VARA application can be submitted through the Dubai Department of Economy and Tourism for a mainland company or through a Dubai free zone other than DIFC. The commercial licensor receives the initial documents and coordinates the application with VARA.
Your choice should reflect the operating model, office needs and intended market. Nexture’s Dubai mainland vs free zone guide compares the two structures.
Applicants establish their legal entity through DET for mainland structures or through an eligible Dubai free zone, excluding DIFC. Sole proprietorship applications are not accepted. Most regulated activities require a private office and all VASPs must maintain a physical presence in Dubai. VARA does not prescribe a minimum office size, but the commercial licensing authority may set space requirements based on headcount and activity.
VARA Licence Requirements
An applicant must show that the business can operate safely, remain financially sound and meet regulatory duties.
Corporate and Management Requirements
You will need a clear ownership structure, verified ultimate beneficial owners and evidence showing the source of funds. VARA also examines directors, senior managers and key control functions under its fit-and-proper standards.
The company must appoint two Responsible Individuals. Each must be a full-time employee, approved as fit and proper and either a UAE resident or UAE passport holder.
Capital and Financial Requirements
Paid-up capital depends on the activity and operating structure. Examples include AED 100,000 for Advisory Services, at least AED 600,000 for Custody Services and up to the higher of AED 1.5 million or 25% of fixed annual overheads for certain Exchange Services models. A VASP must also maintain net liquid assets equal to at least 1.2 times its monthly operating expenses.
Capital can increase when the company holds multiple activities. Prepare a detailed financial model before filing. Nexture’s Dubai company setup guide helps separate incorporation costs from regulatory charges.
Compliance and Technology Requirements
Applicants need practical policies for AML/CFT, sanctions screening, customer due diligence, transaction monitoring, suspicious activity reporting and record-keeping. VARA also expects business-wide and client-level risk assessments under its Compliance and Risk Management Rulebook.
The licensing file should cover cybersecurity governance, wallet security, access controls, incident response, data protection and business continuity. A cybersecurity policy must be submitted and reviewed at least annually by the CISO.
Step-by-Step VARA Licence Process
- Define the Regulated Activity
Map each product and revenue stream against VARA’s activity categories. Do this before reserving the trade name or choosing a free zone.
- Select the Jurisdiction and Legal Entity
Choose DET mainland or an eligible Dubai free zone. An LLC or free zone company is generally the appropriate structure. You can also review the LLC setup requirements in Dubai before finalising shareholders and governance.
- Submit the Initial Disclosure Questionnaire
File the Initial Disclosure Questionnaire through DET or the selected free zone. Submit the business plan, ownership details, senior management information and any supporting documents requested.
- Pay the Initial Fee and Obtain ATI
The initial payment is typically 50% of the VARA licence application fee. If VARA accepts the proposed model, it issues an Approval to Incorporate.
The ATI allows you to complete incorporation, rent an office, hire staff and build the operating setup. It does not permit virtual asset operations.
- Complete the Full VASP Application
Submit the detailed licensing pack. VARA may hold interviews, request demonstrations or require more evidence.
- Pay the Balance and Annual Supervision Fee
After the assessment, pay the remaining application fee and the first annual supervision fee. VARA may grant the licence with operational conditions or restrictions.
The licence is valid for 12 months and requires annual renewal.
Documents Required for a VARA Licence
The exact list depends on the activity. Common documents include:
Incorporation certificate and constitutional documents
UBO, shareholder and group structure details
CVs and identity documents for key personnel
Fit-and-proper confirmations
Source of funds and source of wealth evidence
Regulatory business plan and financial projections
Governance and organisational frameworks
Proof of paid-up capital and available capital
Financial statements and reserve account reports
AML/CFT, sanctions, cybersecurity and data policies
Insurance certificates
Business continuity, succession and wind-down plans
VARA describes its published document list as non-exhaustive, so additional evidence may be requested during review.
VARA Licence Cost in Dubai
Activity | Application fee | Annual supervision fee |
Advisory Services | AED 40,000 | AED 80,000 |
Transfer and Settlement Services | AED 40,000 | AED 80,000 |
Broker-Dealer Services | AED 100,000 | AED 200,000 |
Custody Services | AED 100,000 | AED 200,000 |
Exchange Services | AED 100,000 | AED 200,000 |
Lending and Borrowing Services | AED 100,000 | AED 200,000 |
Management and Investment Services | AED 100,000 | AED 200,000 |
Category 1 VA Issuance | AED 100,000 | AED 200,000 |
Each additional activity carries an extension fee equal to 50% of the lower applicable application fee. VARA fees are separate from DET or free zone charges and may vary with the VASP’s risk profile.
Check the current supervision and authorisation fee schedule before budgeting.
Your first-year budget must also cover incorporation, office rent, visas, compliance staff, technology, audits, insurance and required capital.
We’ll model the requirements and send back a single-page breakdown within 24 hours.
Ongoing Compliance After Licensing
A licensed VASP must follow four compulsory rulebooks covering the company, compliance and risk management, technology and information and market conduct. It must also follow each activity-specific rulebook.
Marketing requires care as well. Dubai’s virtual asset marketing regulations apply to promotions aimed at the UAE and prohibit businesses from offering regulated services without the required approval or no-objection confirmation.
Verify any provider on the official VARA public register, which lists fully licensed firms and entities holding in-principle approval.
Common Mistakes to Avoid
Incorporating before confirming the correct regulated activity
Treating a trade licence or ATI as permission to serve clients
Underestimating paid-up capital and liquidity requirements
Using generic AML or cybersecurity templates that do not match the product
Hiring key compliance staff too late
Mixing custody with other activities without the required legal separation
Advertising services before receiving the necessary regulatory approval
Budgeting only for VARA fees and ignoring office, staff, systems and insurance
How Nexture Can Support Your Setup
Nexture can help compare mainland and free zone routes, form the legal entity and coordinate commercial licensing, office, visa and government procedures. VARA makes the final regulatory decision and may request specialist legal, compliance, cybersecurity or audit work. A good setup plan identifies these needs before submission and assigns each workstream to a qualified advisor.
Conclusion
A VARA licence in Dubai requires far more than incorporation paperwork. The activity, owners, management team, capital, compliance programme and technology controls must all fit the proposed service.
Define the model first, then choose the jurisdiction, prepare the two-stage application and budget for the full operating structure.
Frequently Asked Questions
How long does it take to get a VARA licence in Dubai?
VARA does not publish one guaranteed approval period for every applicant. Timing depends on the activity, complexity, quality of documents, readiness of key staff and speed of responses to regulatory questions.
Can a foreign investor own a VARA-licensed company?
Yes. VARA states that there are no nationality restrictions for applicants, but the application must be made through a Dubai legal entity established with DET or an eligible free zone.
Can I operate after receiving Approval to Incorporate?
No. The ATI allows you to incorporate and complete the operational setup. You cannot conduct regulated virtual asset activities until VARA grants the full VASP licence.
Does a crypto consultancy need a VARA licence?
It may. Personalised virtual asset advice can fall under Advisory Services. The exact answer depends on the service, client relationship and how the company is paid.
Is a VARA licence required in DIFC?
No. VARA’s jurisdiction excludes DIFC. A business established in DIFC must follow the regulatory framework applicable within that financial centre.
