Crypto regulation in the UAE

The rules in detail

The United Arab Emirates is a federation, so its crypto framework is assembled from federal rules, emirate level rules such as Dubai's, and separate common law based regimes inside the financial free zones. The effect is that the licence a business needs depends on where and how it operates. For an individual, the position is simpler: holding, buying, and selling virtual assets is lawful, and there is no prohibition on owning digital assets, as of 2026. What the country regulates closely is the business of providing virtual asset services, meaning exchange, custody, broker dealer, lending, and advisory activity.

At federal level, the Securities and Commodities Authority (SCA) regulates securities and commodities markets and virtual asset activity within its remit across the wider UAE outside the dedicated zones, as of 2026. The federal framework has continued to evolve, with the regulation of virtual assets having been delegated in part to Dubai's VARA and the allocation of responsibilities at federal level subject to restructuring over time. The UAE has also moved its broader virtual asset framework onto a firmer statutory footing through federal law, so confirm the current federal arrangements with the SCA or VARA before relying on them.

VARA, the SCA, and the free zones

Dubai created the Virtual Assets Regulatory Authority (VARA) in 2022 as a dedicated regulator for virtual assets in the Emirate of Dubai, excluding the DIFC financial free zone. VARA licenses and supervises virtual asset service providers across activities such as exchange, broker dealer, custody, lending, and advisory, and it publishes detailed rulebooks that it updates over time, as of 2026. Public reporting in early 2026 indicated that VARA had licensed several hundred virtual asset service providers, including major international exchanges, which makes Dubai one of the most active licensed markets in the world.

The two financial free zones run their own regimes under their own regulators. In the Abu Dhabi Global Market (ADGM), the Financial Services Regulatory Authority (FSRA) was an early mover with a virtual asset framework, while in the Dubai International Financial Centre (DIFC), the Dubai Financial Services Authority (DFSA) operates a crypto token regime. A business chooses the jurisdiction that fits its model and is then bound by that regulator's rules. The Central Bank of the UAE (CBUAE) sits across all of this for payment tokens, regulating stablecoins used for payments through its Payment Token Services Regulation. See the UAE stablecoins page for that detail.

Tax

The United Arab Emirates has no personal income tax, so an individual who holds crypto as a personal investment generally does not pay tax on gains, as of 2026. A federal corporate tax applies at 9 percent on business profits above a threshold of AED 375,000, administered by the Federal Tax Authority (FTA), so crypto activity carried on as a business can be within corporate tax, while qualifying free zone persons may benefit from a 0 percent rate on qualifying income. Value added tax can apply to some services, although Cabinet Decision No. 100 of 2024 exempted the transfer and conversion of virtual assets from VAT. This is general information and not tax advice. See the UAE crypto tax page and confirm your position with the FTA before filing.

Availability and how to act

Because the UAE regulates service providers, the practical step for a resident is to use a platform that holds the appropriate licence for the jurisdiction it serves and that applies the required know your customer checks. Several major exchanges hold VARA licences in Dubai alongside international platforms that serve UAE users, as of 2026. Compare the exchanges that are genuinely available to UAE residents, and confirm a platform's current licence directly with the regulator before signing up.

Regulator and sources

• Virtual Assets Regulatory Authority (VARA), vara.ae, the dedicated regulator for virtual assets in the Emirate of Dubai outside the DIFC
• Securities and Commodities Authority (SCA), sca.gov.ae, the federal securities and commodities regulator
• Central Bank of the UAE (CBUAE), centralbank.ae, for the Payment Token Services Regulation
• Financial Services Regulatory Authority (FSRA) of the Abu Dhabi Global Market (ADGM), adgm.com
• Dubai Financial Services Authority (DFSA) of the Dubai International Financial Centre (DIFC), dfsa.ae
• Federal Tax Authority (FTA), tax.gov.ae, for corporate tax and VAT treatment of crypto activity

Frequently asked questions

Related pages