Crypto and Digital Asset Business: 192 questions answered.

It is a Financial Services Permission granted by the Financial Services Regulatory Authority (FSRA), the regulator of Abu Dhabi Global Market, that authorises a firm to carry on regulated activities in relation to virtual assets in or from ADGM. There is no single licence called a crypto license: the permission lists the specific activities the firm may carry on, such as operating an exchange, custody, dealing, arranging, advising or managing assets.

A realistic timeline is 9 to 15 months from the first meeting with the FSRA to the final permission. Institutional applicants with an existing regulatory track record and a complete team can reach approval in about 6 months. Most delays come from late hiring of the senior team and from an incomplete regulatory business plan.

Capital depends on the activity. An exchange operating a Multilateral Trading Facility must hold at least six months of operating expenses plus a buffer of up to six more. A custodian holds the higher of its base capital and 26 weeks of annual expenditure. Advisory and arranging firms that hold no client assets fall into Category 4, with base capital of USD 50,000. The figure must be modelled against your own projected operating costs.

An exchange operating a Multilateral Trading Facility pays USD 135,000 on application, made up of USD 10,000 for the activity and a USD 125,000 virtual asset supplement, then USD 70,000 a year in supervision fees plus a trading levy. A broker or adviser without custody pays far less: USD 15,000 to USD 40,000 for the activity plus a USD 20,000 supplement. ADGM Registration Authority fees for incorporating and maintaining the company are charged separately.

Only Accepted Virtual Assets. Since June 2025 the firm itself assesses each asset against seven FSRA criteria, including traceability, security, market profile and exchange connectivity, and notifies the FSRA. Privacy tokens and algorithmic stablecoins are prohibited. Security tokens, derivatives and fiat-referenced tokens are regulated under separate parts of the FSRA framework.

Not for activity carried on inside ADGM, which is regulated by the FSRA and not by VARA. The analysis changes if an ADGM firm wants to market to or onboard clients in Dubai, because that can bring the firm within VARA's perimeter. Neo Legal advises on this case by case before the application is filed.

Yes. A foreign group normally incorporates an ADGM subsidiary, takes office space in ADGM, appoints a UAE-resident senior team and applies for a Financial Services Permission. The FSRA will look closely at the group's ownership, its regulatory history in other jurisdictions and how the ADGM entity will be run independently of the group.

Neither is better in general. ADGM suits institutional exchanges, custodians, asset managers and funds that value an English common law framework and proximity to Abu Dhabi sovereign capital. VARA suits businesses built around Dubai's retail and institutional crypto market. The right answer follows your client base, not the fee schedule.

The CMA crypto license is a federal authorisation issued by the UAE Capital Markets Authority under the CMA Virtual Assets Framework, issued 13 February 2026 and building on Decision No. 4/R.M/2026. It permits a regulated entity to carry on one or more of eight regulated virtual asset activities, spanning dealing, custody, arranging, investment advice, portfolio management and operating an MTF, at the federal level across the UAE (excluding Dubai which is governed by VARA, plus ADGM, DIFC, and CBUAE for payment tokens). It replaces SCA Decision No. 26/RM of 2023 in full.

Jurisdiction is the key difference. The CMA is a federal regulator with nationwide reach (excluding the four other regulator perimeters: VARA in Dubai, ADGM, DIFC, CBUAE for payment tokens). VARA's reach is limited to the Emirate of Dubai (excluding DIFC). For multi-emirate operators, only the CMA can authorise national operations. Many institutional models therefore prefer CMA over VARA despite VARA's earlier maturity.

Capital requirements vary by activity: operating an exchange or MTF typically requires AED 1.5-2M+ in minimum capital, Custody AED 2M+, Broker-Dealer activity (dealing as principal or agent) AED 500K+, Investment Advice AED 100-300K, Portfolio Management AED 500K-1M+. These figures are indicative; the operative requirements sit in the Prudential Requirements module. Total all-in cost (capital + fees + legal/compliance setup) for an exchange license is typically AED 2.5-5M+ in year one.

Realistically 6-12 months from pre-application engagement to licence grant, broken into four stages: pre-application engagement (2-4 weeks), Initial Disclosure Document review (4-8 weeks), full application and In-Principle Approval (8-16 weeks), and final licence grant after operational readiness clearance (4-8 weeks).

Generally no — operating from Dubai under a VARA licence covers your Dubai activity. The CMA framework specifically excludes activities authorised under VARA, ADGM, DIFC and CBUAE. The question only arises if you want to extend operations beyond Dubai into other emirates — in which case the CMA would authorise that broader reach.

Yes. The CMA framework permits foreign-owned entities provided they establish a UAE-incorporated subsidiary (or branch via the appropriate authorisation) that meets all capital, substance, key-personnel and AML/CFT requirements. Foreign groups typically establish a UAE subsidiary and apply for the relevant combination of the eight regulated activities under the CMA Virtual Assets Framework.

The CMA Virtual Assets Framework covers eight regulated activities: Dealing as Principal, Dealing as Agent, Providing Custody, Arranging Custody, Arranging Investment Deals, Providing Investment Advice, Portfolio Management, and Operating a Multilateral Trading Facility (MTF). Each requires separate authorisation, and an operator providing multiple services applies for the relevant combination.

Capital requirements are activity-dependent and set out in the Prudential Requirements module of the CMA Virtual Assets Framework. Indicative ranges: Exchange/MTF AED 1.5-2M+, Custody AED 2M+ (varies by AUC), Broker-Dealer AED 500K+, Advisory AED 100-300K, Portfolio Management AED 500K-1M+. Published summaries also point to a liquid-resources buffer of around six months' operating expenses. These figures are indicative, not exact minimums.

Stablecoins denominated in AED or with UAE-resident clients fall under the CBUAE Payment Token Services Regulation (PTSR), not the CMA. Stablecoins denominated in other fiat currencies or asset-referenced tokens that fall outside the PTSR scope may fall within the CMA's perimeter. We advise clients on the precise classification per token design.

The Capital Markets Authority is the rebranded successor to the Securities and Commodities Authority (SCA), reflecting an expanded mandate that explicitly includes virtual asset and digital securities regulation alongside traditional capital markets oversight. The transition was formalised through Federal Decree-Laws No. 32 and 33 of 2025, effective 1 January 2026, with the CMA Virtual Assets Framework following on 13 February 2026.

Neo Legal provides end-to-end CMA advisory: regulator-selection opinions (CMA vs VARA vs ADGM vs DIFC), UAE entity establishment, pre-application CMA engagement, Initial Disclosure Document drafting, full application drafting (policies, AML/CFT, governance, BCP/DR), approved-person sourcing and submission, ongoing regulator liaison through licence grant, and post-licence regulatory supervision retainers.

Yes. Offering, arranging or operating a venue for virtual-asset derivatives to UAE clients is regulated activity. In Dubai, VARA governs derivatives where the underlying is a virtual asset - licensed Exchanges and Broker-Dealers can extend to VA derivatives subject to additional rulebook conditions. Where the underlying is a security or the product is a conventional derivative, the federal securities regulator's perimeter applies instead, and ADGM (FSRA) and DIFC (DFSA) offer their own institutional routes. Neo Legal's first task on every derivatives mandate is putting the product on the right side of those perimeters.

There is no standalone 'derivatives licence' - VA derivatives are an extension of VARA's activity licences. An Exchange licence can cover operating a derivatives order book, and a Broker-Dealer licence can cover dealing in VA derivatives, in each case with supplementary conditions: client-classification limits (institutional and qualified clients rather than retail), margin and leverage controls, enhanced risk disclosure, and product-approval requirements. Neo Legal scopes which activity bundle and conditions a specific derivatives product actually triggers before the application is designed.

Within limits, yes - Dubai is one of the few jurisdictions with a written framework for virtual-asset derivatives rather than a ban or a grey zone. Successive VARA rulebook updates have defined and tightened the conditions: who may trade (client classification), how much leverage, what margin arrangements, and what disclosure. The workable answer for any specific product - perps, options, structured VA products - turns on current rulebook conditions, which is exactly the analysis Neo Legal runs and keeps current for licensed clients.

Retail access is heavily restricted - VARA's derivatives conditions are built around institutional and qualified investors, with leverage and suitability controls where any broader access is contemplated. Platforms designed around retail derivatives flow need that reality reflected in the business plan before it is filed, not discovered in the regulator's question rounds.

It depends on the client base and product set. VARA (Dubai) has the most developed virtual-asset-native derivatives framework. ADGM's FSRA regulates virtual-asset derivatives within a conventional markets framework attractive to institutional venues, and the DIFC's DFSA recognises crypto tokens with its own restrictions. Neo Legal advises across all three and runs the comparison against the actual product roadmap - the cheapest licence is rarely the right one if the product pipeline outgrows it in a year.

The mandate pairs the firm's VARA practice - led by founder Harly Zappino, advising virtual-asset businesses since 2015 - with partner David Kreltszheim on the financial-products and structured-finance side, and licensing execution under director Manpreet Kaur, who was directly involved at VARA in developing the UAE virtual-asset framework. Neo Legal currently advises major global exchanges on whether derivative and automated-trading products fit their existing UAE licences.

There is no single best regulator — the choice depends on your target market. VARA is best for Dubai-centric retail and institutional exchanges. ADGM FSRA suits institutional exchanges valuing English common-law jurisdiction and Abu Dhabi sovereign-adjacent capital. DIFC DFSA suits institutional and security-token venues with tier-1 banking needs. The CMA suits multi-emirate institutional venues. A perimeter analysis is the first step in any UAE crypto exchange engagement.

First-year total cost (excluding deployed capital) for an exchange license ranges from USD 180K (DIFC DFSA) to AED 1M+ (VARA), depending on regulator. Add capital (typically AED 1.5-15M+ across regulators), office, technology stack (AED 1-3M+), and a 4-8 person approved-persons team. All-in budget for a credible exchange build: AED 5-15M+ in year one.

Realistic timeline is 6-12 months for VARA and CMA, 9-15 months for ADGM FSRA, and 9-18 months for DIFC DFSA. The fastest route is VARA for an institutional applicant with prior regulator track record (4-month minimum). DIFC tends to be slowest due to its institutional-grade scrutiny.

Yes, provided it establishes a UAE-licensed subsidiary or branch under one of the four regulator frameworks (VARA, ADGM, DIFC, CMA). Operating in or marketing to UAE clients without a UAE licence breaches Dubai Law 4/2022 (Article 15), with administrative fines under VARA's penalty schedule and separate exposure under federal AML/CFT law. See our guide on <a href='/insights/vara-penalties-operating-without-licence'>VARA penalties for operating without a licence</a>.

Indicative minimum paid-up capital ranges: VARA AED 1.5M+, ADGM FSRA at least six months of operating expenses plus a buffer, DIFC DFSA USD 500K-1M+ (Category 4), CMA AED 1.5M+. All four regulators additionally require expense-based capital (typically 1.2-1.5x monthly operating expenses), so the operationally-relevant capital figure for a credible exchange is typically AED 5-15M+ on the balance sheet.

No — ADGM has its own regulator (FSRA) and crypto framework. Activity inside ADGM is regulated by FSRA, not VARA. The same is true of DIFC (DFSA). However, if your ADGM-licensed exchange wants to serve Dubai retail clients, the analysis is more nuanced — territorial marketing and client-onboarding may engage VARA's perimeter. We advise on this case by case.

An exchange license authorises operating a multilateral facility matching buyers and sellers — i.e. an order book or a marketplace. A broker-dealer license authorises receiving and transmitting client orders on a bilateral basis — i.e. an OTC desk or a route to liquidity. Both are typical for trading venues; large platforms often hold both.

Yes. VARA's framework explicitly contemplates virtual asset derivatives and several VARA-licensed entities offer perpetuals, futures or options on virtual assets. ADGM FSRA also authorises virtual asset derivatives. DIFC's framework focuses on spot and security-token products; derivative venues typically choose VARA or ADGM. See our insight on <a href='/insights/vara-derivatives-framework'>VARA's derivatives framework</a>.

Geography is the deciding factor. If your target client base is concentrated in Dubai (including DIFC) and you do not plan to serve clients in other emirates, VARA is the appropriate framework — it is more mature, has the deepest licensed-entity ecosystem, and benefits from Dubai's crypto-friendly business environment. If you need national reach (clients across Abu Dhabi, Sharjah, northern emirates), the CMA is the only federal-level option for non-payment-token activity.

Neo Legal has advised on virtual asset and exchange-related licensing matters since 2015 (when Harly Zappino started practising in crypto law in Melbourne), and on UAE-specific exchange matters since the firm launched its UAE practice in 2024. Our team includes Manpreet Kaur, formerly of VARA itself, and our practice covers all four UAE exchange regulators end-to-end.

Look for genuine regulator experience — Neo Legal's Director of Licensing, Manpreet Kaur, previously served at VARA itself, working on the framework applicants are licensed under — plus senior partner-led handling, fixed fees scoped upfront, and published depth (Neo Legal maintains 25+ public VARA guides and a live licensing tracker). Be wary of anyone guaranteeing approval: no legitimate firm can.

If you operate, market or invest in virtual assets in or from Dubai, yes. Most virtual-asset activities require a VARA licence, and conducting them without one breaches Dubai Law No. 4 of 2022. A crypto lawyer confirms whether your activity falls inside the regulated perimeter, secures the right licence, and keeps you compliant — before a problem becomes an enforcement matter.

Yes. Cryptocurrency and virtual-asset activity is legal and regulated in Dubai. The Virtual Assets Regulatory Authority (VARA) licenses and supervises virtual-asset service providers (VASPs) under Dubai Law No. 4 of 2022, and the ADGM, DIFC and federal CMA frameworks regulate it elsewhere in the UAE. The key requirement is operating under the correct licence.

A Dubai crypto lawyer advises on VARA (and ADGM, DIFC, CMA) licensing across activities such as exchange, custody, broker-dealer, lending, management and advisory; token issuance and real-world-asset tokenisation; AML/CFT and compliance frameworks; prudential requirements such as paid-up capital; corporate structuring and fundraising; and responding to regulatory enforcement.

It depends on scope. A perimeter or structuring opinion is a fixed, modest engagement; a full VARA licence application is a larger, milestone-based mandate. Neo Legal scopes fees up front and works on fixed or capped arrangements wherever the work allows, so you know the cost before you commit.

If your activity is one of VARA's regulated virtual-asset activities and is carried on in or from Dubai (outside the DIFC), then yes. Operating without the required licence breaches Article 15 of Dubai Law No. 4 of 2022, with significant fines and personal liability. A perimeter analysis is the first step to confirm whether you need a licence.

Yes. Neo Legal advises on the full lifecycle: choosing the right regulator and structure, the VARA licence application, paid-up capital and prudential requirements, AML/CFT and governance, token issuance and tokenisation documentation, and ongoing compliance once you are live.

In Dubai (outside the DIFC), the Virtual Assets Regulatory Authority (VARA). In the financial free zones, ADGM's FSRA and DIFC's DFSA. At federal level, the Capital Markets Authority (CMA). Which one applies depends on where you operate and who your clients are — a question a crypto lawyer resolves at the outset.

Yes, and the earlier the better. There is a remediation path: stop the unlicensed activity, obtain a perimeter opinion, and engage VARA voluntarily or restructure. Voluntary, early engagement is materially less costly than waiting for enforcement, which can bring fines and personal liability.

Yes. Neo Legal acts for exchanges and custodians, but also for funds, token projects, OTC desks, market makers, and individual founders and investors — on licensing, structuring, fundraising, tax and personal-exposure questions across Dubai, the UAE and offshore jurisdictions.

Neo Legal has advised in virtual assets since 2015, across more than 1,000 clients, including the world's first cryptocurrency IPO. The team includes a Director of Licensing who previously served inside VARA itself, covers all four UAE crypto regulators end to end, and is partner-led from day one. Neo Legal is the UAE practice of Cornwalls, established 1891.

Institutional Web3 counsel is senior legal advisory work for the institutional cryptocurrency and virtual asset industry — exchanges, custodians, fund managers, payment processors, lending platforms, banks entering crypto, and family offices. It is fundamentally different from retail crypto law in scale, complexity, regulatory expectations and counterparty diligence rigour. Institutional matters require senior-counsel attention from day one.

Neo Legal is one of the institutional Web3 advisory firms in the UAE, focusing exclusively on partner-led senior-counsel work for the institutional crypto industry. The firm covers all four UAE crypto regulators (VARA, ADGM FSRA, DIFC DFSA, CMA) and is the UAE arm of Cornwalls (Australia, established 1891). Other UAE firms in the institutional space include established international full-service firms with virtual asset practices.

Institutional crypto lawyers advise corporate venues (exchanges, custodians, fund managers) on regulatory licensing, prudential frameworks, cross-border structuring, and M&A. Retail crypto lawyers advise individual traders, small token projects, NFT creators or DAO members on consumer-facing matters. The two practices share regulatory knowledge but have very different work profiles, counterparty expectations, and engagement structures.

Yes. Fund manager licensing is a core institutional practice. We advise across ADGM FSRA Category 3C (Asset Management), DIFC DFSA Category 3C, and VARA Category 7 (VA Management and Investment Services). We structure funds across QIF, Exempt Fund, ELP, and Foundation-fund vehicles, and coordinate cross-border distribution arrangements.

Yes. Tokenisation is a major focus of our institutional practice. We have advised on VARA Category 1 ARVA token issuances across real estate, commodities (gold, silver, oil & gas), private credit, litigation finance, fine art, music and film IP, infrastructure income streams, luxury watches and wines, and pre-IPO equity. We also advise on DFSA Tokenisation Sandbox applications.

Yes. We advise traditional banks (UAE-licensed and foreign) on strategic entry into virtual asset capabilities — typically through dedicated digital-asset divisions or subsidiaries. The work spans regulator coordination (CBUAE, FSRA, DFSA, VARA), AML/CFT framework integration, custody-architecture review, and cross-border passporting where applicable.

Neo Legal's calibre of institutional engagement includes tier-1 global virtual asset exchanges, leading Latin American and Asian crypto exchanges, major global Web3 venture builders with portfolios of leading blockchain protocols, leading global online betting and entertainment platforms, multi-strategy investment firms with DeFi exposure, and Chinese / Malaysian / UAE-based billionaire family groups. Specific identities are held in confidence.

Founder Harly Zappino has practised in virtual assets since 2015 and personally advised over 1,000 clients across cryptocurrency, exchanges, tokenisation, NFTs, DeFi, custody and payment services — including the world's first cryptocurrency IPO. The firm has advised on transactions exceeding USD 1.4B in aggregate value across M&A, capital raisings and corporate matters.

We quote for outcomes where the scope permits — fixed fees or capped fees with defined deliverables. Where the scope is genuinely time-dependent (e.g. regulator-led timelines, dispute work), we use time-based billing with weekly burn reporting. We do not engage on success-only fees for regulated transactional work.

Initial scoping calls are typically available within 48 hours. Engagement letters and a kick-off can usually follow within a week. For urgent matters (e.g. live regulator inquiries, enforcement responses, deadline-driven applications) we can mobilise on a same-day basis where capacity permits.

RWA (real-world asset) tokenisation is issuing blockchain tokens that represent or reference off-chain assets - real estate, funds, credit, commodities, securities. The UAE is one of the few jurisdictions with live regulatory rails for it: VARA's regime for asset-referenced virtual assets in Dubai, the DFSA's investment-token framework in the DIFC, ADGM's digital-securities regime, and Dubai's pioneering title-deed tokenisation initiative for real estate. Neo Legal structures RWA issuances across all of these rails.

In Dubai, yes - where the token qualifies as a virtual asset, issuance and the venues that trade it fall inside VARA's regime, with asset-referenced tokens attracting their own issuance rules. But RWA structures routinely cross perimeters: a token that is legally a security belongs to the federal regime or DIFC/ADGM frameworks, and a fiat-referenced payment token engages the Central Bank. The classification analysis comes first on every Neo Legal RWA mandate, because it decides the licence, the venue and the investor base.

Yes - Dubai is the world's most advanced jurisdiction for it. The Dubai Land Department has run a title-deed tokenisation initiative in coordination with VARA, and fractional ownership of Dubai property through tokenised structures is live in the market. Doing it lawfully involves real-property law, the DLD's framework and the virtual-asset regime at once - precisely the intersection Neo Legal's property and VARA teams cover together.

It depends on what the token is. Broadly: asset-referenced virtual assets engage VARA issuance approval in Dubai; tokens that are securities need the federal or DIFC/ADGM securities rails; payment-type tokens engage the Central Bank's regime; and the venue trading any of them needs its own licence. Many issuances pair an offshore issuer SPV with UAE-licensed distribution and custody. Neo Legal designs the full stack - issuer, licence, venue, custody - as one structure.

Because everything follows from it: which regulator, which licence, who may invest, how it is marketed, where it trades and how it is custodied. The same economic idea can be built as a security token under the DFSA or FSRA, or as an asset-referenced virtual asset under VARA, with materially different costs, timelines and investor pools. Getting that call right at design stage is the highest-leverage decision in any RWA project - and re-papering it later is expensive.

Issuers and originators (real estate, funds, credit), exchanges and platforms listing RWA products, and family offices and institutions investing in them - led by founder Harly Zappino (virtual assets since 2015, including the world's first cryptocurrency IPO), with partner David Kreltszheim on the securities and structured-finance side, partner Michael Mammen on property, and Chinese-language execution through the China Desk under May Wong.

A virtual asset firm in Dubai is a business conducting a regulated activity in relation to virtual assets: exchange, broker-dealer, custody, lending, portfolio management, advisory, transfer and settlement, or token issuance. In Dubai (outside the DIFC) these firms are licensed by the Virtual Assets Regulatory Authority (VARA) as Virtual Asset Service Providers, or VASPs, under Dubai Law No. 4 of 2022.

Five steps: confirm which regulated activity your model falls under and which regulator applies (VARA for Dubai outside the DIFC); incorporate the entity in Dubai; file the Initial Disclosure Questionnaire and full VARA application with your business plan and compliance framework; satisfy approval conditions including paid-up capital, office space and approved persons; then go live under VARA supervision.

VARA, the Virtual Assets Regulatory Authority, licenses virtual asset firms in the Emirate of Dubai outside the DIFC. Inside the DIFC the DFSA regulates crypto token activity. Elsewhere in the UAE, the federal Capital Markets Authority (CMA) covers onshore activity, the FSRA covers the ADGM, and the CBUAE regulates dirham-pegged payment tokens.

VARA's fees under Schedule 2 of the Regulations are AED 40,000 application and AED 80,000 annual supervision for Advisory and for VA Transfer and Settlement, and AED 100,000 application and AED 200,000 annual supervision for every other activity, plus 50 percent of the lower application fee per additional activity. Paid-up capital runs from AED 100,000 for Advisory to AED 1.5 million at the top end, and you should budget separately for office space, staff and professional fees.

Under VARA's Company Rulebook, paid-up capital ranges by activity: AED 100,000 for Advisory, AED 400,000 to 600,000 for Broker-Dealer, AED 600,000 for Custody, AED 800,000 to 1.5 million for Exchange, AED 500,000 for Lending and for Transfer and Settlement, and AED 280,000 to 500,000 for VA Management, in each case or a percentage of fixed annual overheads if higher. Capital sits in a UAE bank trust account with VARA as beneficiary, and net liquid assets of at least 1.2 times monthly operating expenses apply on top.

In Neo Legal's experience a well-prepared VARA application typically runs eight to twelve months from Initial Disclosure Questionnaire to operational licence. The entity itself can be incorporated in weeks; the licence is the long pole. The biggest variables are the quality of the first submission, responsiveness to VARA queries, and capital and office readiness.

Yes, at corporate level. The UAE levies federal corporate tax at a headline rate of 9 percent on business profits, and a free zone entity that meets the qualifying free zone person conditions may access a 0 percent rate on qualifying income. There is no personal income tax and no tax on an individual's own crypto gains. VARA fees and supervision charges are regulatory costs, separate from tax.

Yes. Foreign founders and foreign parent companies can own 100 percent of a Dubai virtual asset firm, whether incorporated on the mainland or in a free zone, and no local partner or sponsor is required. What VARA does require is real presence: Dubai office space, resident approved persons including a UAE-resident Compliance Officer, and capital held in a UAE bank.

Yes. VARA requires licensed firms to maintain physical office space in Dubai, and office readiness is one of the conditions checked before the operational licence is released. A flexi-desk arranged purely for incorporation will generally not carry a firm through to licensing, so the office decision should be sequenced against the application timeline rather than left to the end.

Historically yes, in practice: under a September 2024 arrangement VARA licensees benefited from default registration with the federal securities regulator, allowing service beyond Dubai. Whether that arrangement continues unchanged under the CMA, which replaced the SCA from 1 January 2026, has not been publicly confirmed. Firms targeting onshore clients outside Dubai should confirm the current position before relying on it.

Conducting a regulated virtual asset activity in or from Dubai (outside the DIFC) without a licence breaches Article 15 of Dubai Law No. 4 of 2022, with penalties for entities reaching the higher of AED 50 million, 15 percent of revenue or 300 percent of gains, plus criminal exposure and director liability. Onshore, unlicensed activity under the CMA regime carries fines up to AED 250 million and imprisonment. Early voluntary engagement is materially cheaper than detection.

Judge on verifiable criteria: named public mandates (Neo Legal advised Animoca Brands on its VARA VASP licence, announced February 2026), regulator-side experience (Neo Legal's Director of Licensing previously served inside VARA), depth of published work, sector history (Neo Legal has practised in virtual assets since 2015, including the world's first cryptocurrency IPO), and partner-led handling. No legitimate firm can guarantee approval.

The CMA virtual asset license is the federal UAE authorisation for virtual asset service providers, issued by the Capital Markets Authority (the former SCA) under its Virtual Assets Framework issued on 13 February 2026, building on Decision No. 4/R.M/2026. It covers eight regulated activities, from dealing and custody to portfolio management and operating a multilateral trading facility, for business conducted onshore in the UAE outside the VARA, ADGM, DIFC and CBUAE perimeters.

Published summaries indicate capital of roughly AED 100,000 to 300,000 for investment advice, AED 500,000 and up for dealing, AED 500,000 to 1 million or more for portfolio management, AED 2 million or more for custody (varying by assets under custody) and AED 1.5 to 2 million or more for an MTF, plus a liquid-resources buffer of around six months' operating expenses. These figures are indicative only: the operative requirements sit in the framework's Prudential Requirements module and vary by sub-category.

It turns on geography and activity. VARA licenses virtual asset activity in or from the Emirate of Dubai outside the DIFC. The CMA is the federal regulator for onshore UAE activity outside the VARA, ADGM, DIFC and CBUAE perimeters, so multi-emirate and mainland-facing models generally point federally. Tokenised securities and mainland public offerings also sit with the CMA. Many structures end up engaging both regulators, which is why a written perimeter analysis comes first.

Published summaries suggest roughly six to twelve months from first engagement to licence for a well-prepared applicant, across pre-application scoping, initial disclosure, full application review and final conditions. Timelines are not guaranteed and depend heavily on the quality of the first submission, responsiveness to regulator queries, and capital and staffing readiness. Neo Legal's stage-by-stage walkthrough is in its CMA licence application process guide.

The CMA Virtual Assets Framework regulates eight activities: Dealing as Principal, Dealing as Agent, Providing Custody, Arranging Custody, Arranging Investment Deals, Providing Investment Advice, Portfolio Management, and Operating a Multilateral Trading Facility (MTF). Each activity carries its own authorisation and prudential treatment, and an applicant applies for the combination that matches its business model.

Yes, by succession. Federal Decree-Law No. 32 of 2025 reconstituted the Securities and Commodities Authority as the Capital Markets Authority with effect from 1 January 2026, and the substantive capital markets regime sits in Federal Decree-Law No. 33 of 2025. The CMA inherits the SCA's remit and enforcement history, and its Virtual Assets Framework of 13 February 2026 replaced SCA Decision No. 26/RM of 2023 in full.

Five regulators, by territory and product. The CMA regulates virtual asset activity federally, onshore, outside the other perimeters. VARA regulates the Emirate of Dubai outside the DIFC. The FSRA regulates the ADGM free zone and the DFSA regulates the DIFC free zone. The CBUAE regulates payment tokens and stablecoins under its own framework. Which regulator applies is the first structuring decision for any UAE virtual asset business.

Not for Dubai activity: a VARA licence covers virtual asset business in or from Dubai outside the DIFC. The question arises for clients in other emirates or mainland-facing activity. VARA licensees previously benefited from a default federal registration arrangement agreed with the SCA in September 2024; whether that arrangement continues in the same form under the CMA regime is not yet confirmed, so cross-emirate models should take specific advice before relying on it.

A route now exists in principle. Resolution No. 16 of 2026 permits Central Bank licensed institutions, meaning banks, finance companies, exchange houses and payment service providers, to undertake CMA-regulated virtual asset activities such as custody, dealing and operating an Alternative Trading System. Insurers are carved out. The authorisation mechanics are not yet defined, so the sensible posture is to scope and design now and move when the implementing rules land.

Yes. The Alternative Trading System module of the CMA's Virtual Assets Framework covers multilateral trading facilities for both conventional securities and tokenised securities, which gives tokenised securities an onshore federal venue for the first time rather than only the ADGM and DIFC free-zone routes. Token classification still comes first: an instrument with the economic substance of a security is regulated as one regardless of the technology used to issue it.

Carrying on a regulated financial activity in the UAE without a CMA licence, approval, registration or accreditation is an offence under Article 71 of Federal Decree-Law No. 33 of 2025, with fines of up to AED 250 million and imprisonment of not less than one year. In June 2026 the CMA fined a group of companies AED 5.5 million for unlicensed activity, closed their headquarters and blocked their websites. Early voluntary engagement is materially cheaper than detection.

Neo Legal runs the full lifecycle: written perimeter and regulator-selection analysis across the CMA, VARA, ADGM, DIFC and CBUAE, activity classification under the eight regulated activities, entity structuring, the application file (business plan, policies, prudential evidence, accredited-role documentation), regulator liaison through review rounds and conditions, and post-licence supervision. The firm has practised in virtual assets since 2015 and advised Animoca Brands on its VARA VASP licence.

Yes. Crypto mining in or from ADGM needs a Commercial Licence from the ADGM Registration Authority listing crypto mining, business activity code 7230. It is not a regulated financial service, so FSRA approval is not needed for mining on your own account.

Yes, for your own account. The guidance is technology neutral and treats solo validation under Proof-of-Stake the same as Proof-of-Work mining. Staking that involves holding, controlling, exercising discretion over or pooling other people's digital assets may be a regulated activity needing an FSRA permission as well.

When it holds or controls third party digital assets, manages validator keys or chooses staking protocols for clients, pools client assets, distributes rewards on clients' behalf, or offers a return on assets clients deposit. Those activities may amount to Providing Custody or Managing Assets. Neo Legal runs this perimeter assessment before any RA application is filed.

Crypto mining on its own is not a virtual asset service provider activity, so a pure mining business is currently outside the federal and ADGM AML regimes. A miner that also safeguards or administers digital assets for others is inside them. All mining entities still face the RA's transparency, disclosure and record keeping expectations.

Yes. Applicants are expected to disclose the wallet and smart contract addresses that receive or manage mining or validation rewards. The RA treats them as confidential, may monitor them on-chain, and needs to be told about material changes such as a new custody provider, not routine address rotation.

Yes. The guidance has a dedicated section for ADGM headquarters overseeing global mining. The RA may require disclosure of overseas locations, scale, structure and ownership, expects risk based due diligence on host countries and partners, and expects reasonable governance oversight of the overseas operations.

Not usually, if users run the bot on their own accounts with their own parameters and you never hold their assets or place orders for them. A licence becomes necessary if your system trades for users on strategies you control, holds keys that allow withdrawals, or is paid by a share of profits. The marketing rules apply either way.

Usually yes, in some form. Under VARA a broadcast signal is rarely a personal recommendation, so it is generally not Advisory Services. VARA's Marketing Regulations and market offence rules still apply, and the federal finfluencer licence, now administered by the CMA, is aimed at exactly this kind of content. In the DIFC a signal service is likely to be Advising on Financial Products.

Automatic copy-trading, where the platform opens and closes positions in the follower's account without consent for each trade, involves VA Management and Investment Services on our analysis. That is in addition to any Exchange or Broker-Dealer activity. Copy-trading where the follower confirms each trade sits much closer to execution.

Advice leaves the decision with the client: under VARA it is a personal recommendation that the client chooses whether to follow. Management means taking responsibility for the client's assets and deciding, within whatever mandate the client sets, what to buy, sell or close. Automation usually points to management.

It depends on the facts. A non-custodial interface where users sign their own orders is a good start. Earning a fee on every order routed, marketing to UAE users and adding copy or vault features all push the business towards arranging, and perpetuals bring in the derivatives rules. The venue itself also matters for marketing purposes.

Not VARA, whose perimeter is virtual assets only. FX, CFDs and securities run from the Dubai mainland or a non-DIFC free zone are a federal CMA matter. In the DIFC and ADGM, the DFSA and the FSRA regulate them under their own rulebooks.

CMA Chairman Resolution No. 16 of 2026 permits institutions licensed by the Central Bank of the UAE — banks, finance companies, exchange houses and payment service providers — to undertake virtual asset activities that are regulated by the Capital Markets Authority under CMA Resolution No. 04 of 2026. In effect it opens a route for prudentially-supervised, CBUAE-licensed institutions into custody, brokerage/dealing and the operation of an Alternative Trading System (ATS) for virtual assets. Insurance companies are carved out.

Yes — it is the successor. Effective 1 January 2026, the Securities & Commodities Authority (SCA) was reconstituted as the Capital Markets Authority (CMA) under Federal Law No. (32) of 2025. References to the SCA in earlier virtual asset instruments should now be read as the CMA.

Resolution No. 04/Chairman of 2026 is the Capital Markets Authority's framework for Virtual Asset Service Providers (VASPs) and Alternative Trading Systems on the UAE mainland. It replaced the previous SCA Decision No. 26/R.M of 2023. It is the set of activities that a CBUAE licensee may now, in principle, access under CMA Chairman Resolution 16 of 2026.

In principle, yes. Before Resolution 16, the CBUAE's virtual asset remit was narrow — essentially payment tokens and stablecoins under the Banking Law (Decree-Law No. 6 of 2025) — so a CBUAE-licensed bank, finance company, exchange house or PSP had no clean route into CMA-regulated activities such as custody, brokerage/dealing or operating an ATS. Resolution 16 opens that route. However, it is an in-principle opening: the application, capital and conduct mechanics are not yet defined.

No. Insurance companies are expressly carved out of Resolution 16, consistent with keeping insurers away from principal virtual asset and trading risk.

This is unresolved and material. Resolution 16 does not yet specify whether entry requires a separate CMA authorisation layered on the CBUAE licence, or a coordinated or passported approval — nor which regulator leads on supervision, capital, conduct and custody/segregation. Those mechanics await implementing rules or a joint CMA/CBUAE framework, so no operable application pathway exists yet.

VARA (Dubai), ADGM/FSRA and DIFC/DFSA are free-zone regimes that have, until now, dominated UAE virtual asset activity alongside standalone VASPs. Resolution 16 is about the federal onshore market: it lets incumbent CBUAE-licensed institutions compete in that space using their balance sheets and distribution. It does not change the free-zone regimes, which remain the established route for many virtual asset businesses today.

The DFSA launched the Tokenisation Regulatory Sandbox in March 2025. The inaugural cohort's EOI window ran 17 March to 24 April 2025 and received 96 expressions of interest from across the UAE, UK, EU, Canada, Singapore and Hong Kong.

Issuance, trading, holding and settlement of tokenised investments — equities, bonds, sukuk, fund units and real-world assets. Crypto tokens and stablecoins are excluded from the current scope.

The ITL is the general DFSA fintech sandbox. The Tokenisation Sandbox is a specific cohort programme focused on tokenisation business models. Both run under the broader ITL framework.

Firms successfully completing the testing period migrate to a full DFSA authorisation — typically DFSA Cat 3C for fund and asset managers, or other categories depending on the activity.

Common-law framework, DFSA willingness to engage with tokenisation business models, AED stablecoin availability under PTSR, and the parallel VARA Category 1 ARVA regime in Dubai for real-world asset tokens.

Yes — under a dedicated framework. The CBUAE's Payment Token Services Regulation governs stablecoins used for payments: on the UAE mainland, retail payments for goods and services may only be made with CBUAE-approved payment tokens, in practice Dirham Payment Tokens backed one-to-one by dirhams. Foreign-currency stablecoins such as USDT or USDC are not approved for general mainland retail payments — their permitted uses centre on virtual-asset purchases and activity within the financial free zones' own regimes.

AE Coin is the UAE's first fully licensed dirham-backed stablecoin, approved by the Central Bank in December 2024. Each token is backed one-to-one by dirhams held with regulated local banks under ongoing audit, accessed through the AEC Wallet powered by Al Maryah Community Bank with UAE Pass onboarding. Adoption has moved into the mainstream: telecoms group e& integrated AE Coin for bill payments and top-ups, and a regulated conversion rail now links it to the dollar-pegged USDU for near-instant AED–USD stablecoin settlement.

The Payment Token Services Regulation licenses three activities separately: payment token issuance (minting a dirham-backed token against segregated, audited reserves), payment token conversion (exchanging tokens and fiat), and payment token custody and transfer. Each carries its own capital, reserve, safeguarding and AML requirements, and banks require CBUAE engagement through their own channel — RAKBank's initial approval for a dirham stablecoin in January 2026 signalled the bank-issuer wave. Which licence (or combination) a model needs depends on exactly what it does with the token.

Increasingly yes — with the right token and the right rails. Merchants on the mainland can accept CBUAE-approved dirham payment tokens through licensed providers, and adoption is accelerating: the DDSC dirham stablecoin became more accessible for retail transactions in July 2026, and industry figures expect stablecoin rent payments within months. The compliance point for merchants and platforms is that acceptance must run through licensed conversion/custody providers — informal acceptance of unapproved tokens for goods and services remains outside the regime.

They divide the territory. Payment tokens — fiat-backed stablecoins used for payments — sit with the Central Bank under the Payment Token Services Regulation, even in Dubai. Other virtual-asset activity in Dubai outside the DIFC — exchanges, broker-dealers, custody of non-payment tokens, asset-referenced tokens — sits with VARA. A crypto payment gateway or an exchange listing dirham stablecoins can therefore engage both regulators, and sequencing the two authorisations is a core structuring task.

For most, no — accepting or integrating an approved token through licensed providers achieves the commercial goal without carrying issuer-grade obligations: full reserve backing, audits, capital and standing CBUAE supervision. Issuance makes sense for banks, large payment groups and platforms whose economics depend on owning the float and the rail. The honest first question is whether you need to be the issuer, the converter, the custodian — or simply a well-papered user.

Published summaries indicate paid-up capital of roughly AED 100,000 to 300,000 for advice-only models, AED 500,000 and above for dealing, AED 500,000 to 1 million and above for portfolio management, AED 1.5 to 2 million and above for an exchange or MTF, and AED 2 million and above for custody, plus liquid resources covering six months of operating expenses. These figures are indicative only: the operative requirements sit in the CMA's Prudential Requirements module and are confirmed with the CMA at application.

Published summaries put the indicative range at AED 1.5 to 2 million and above, varying by tier and operational risk profile. The binding figure is set in the Prudential Requirements module of the CMA Virtual Assets Framework by sub-category, so exchange applicants should treat the range as a planning number and confirm the exact requirement with the CMA before committing capital.

The CMA fee sheet publishes exact figures for its securities-side licence categories. The clearest example is Fifth Category (Arranging and Advice): Promotion plus Introducing together cost AED 8,000 in application fees and AED 20,000 in licence fees, a total of AED 28,000, against AED 500,000 in paid-up capital. Fees for the virtual asset framework's own activities are confirmed with the CMA at application.

Yes. Per published summaries of the framework, licensees must hold liquid resources covering at least six months of operating expenses in addition to the base capital requirement. That buffer, rather than the headline capital number, is often the larger constraint for staff-heavy business models, and it should be built into the financial projections from day one.

VARA's numbers are fully published: AED 40,000 application and AED 80,000 annual supervision for Advisory and Transfer and Settlement, AED 100,000 and AED 200,000 for other activities, with paid-up capital from AED 100,000 to AED 1.5 million. The CMA's indicative capital ranges are broadly comparable at the low end and higher for custody, but its virtual asset fee schedule is confirmed at application, so a true like-for-like comparison is only possible once the CMA confirms your figures.

No. The ranges circulating in the market are indicative figures drawn from published summaries. The operative requirements sit in the Prudential Requirements module of the CMA Virtual Assets Framework and vary by sub-category, projected assets under custody or management, and risk profile. Neo Legal confirms the operative capital, liquid resources and fee figures directly with the CMA as part of the pre-application stage, before clients commit to a budget.

In sequence: classify your activity and choose the regulator (VARA for Dubai outside the DIFC); incorporate the entity, keeping custody in a separate legal entity if you will hold client assets; file VARA's Initial Disclosure Questionnaire and full application; hire the approved persons (two Responsible Individuals, a UAE-resident Compliance Officer, an MLRO); inject the paid-up capital and take the office; then receive the operational licence and go live under supervision.

VARA's own fees are AED 40,000 application and AED 80,000 annual supervision for Advisory and for VA Transfer and Settlement, and AED 100,000 and AED 200,000 for every other activity, plus 50 percent of the lower application fee per additional activity. Paid-up capital ranges from AED 100,000 (Advisory) to AED 1.5 million (Exchange without a licensed custodian; FRVA issuance). Add entity formation, office, salaries for approved persons, and professional fees.

The company itself can be incorporated in a few weeks. The licence is the long pole: in Neo Legal's experience a well-prepared VARA application typically runs eight to twelve months from Initial Disclosure Questionnaire to operational licence. Founders should sequence hiring, office and capital against that timeline rather than paying for all three from day one.

No. A Dubai virtual asset company can be 100 percent foreign-owned, whether incorporated on the mainland or in a free zone, and VARA does not require an Emirati shareholder or sponsor. The regulator's local requirements are substance-based instead: physical office space in Dubai, a UAE-resident Compliance Officer, capital in a UAE bank trust account, and approved persons who are genuinely present and accountable.

Yes, and you generally must: the applicant for a VARA licence is the entity, so the company exists first and applies second. What the entity cannot do is conduct any regulated virtual asset activity, or market itself as licensed, before the operational licence is issued. Incorporation-stage activities are limited to setup: leasing, hiring, opening accounts and preparing the application.

VARA requires two full-time Responsible Individuals, a UAE-resident Compliance Officer with five years of compliance experience, and an MLRO with two years of AML/CFT experience. The MLRO, CISO and DPO roles may be outsourced; nothing else may be. Beyond the mandated seats, plan for finance, technology and operations hires appropriate to the activity, because VARA assesses the substance of the team, not just the org chart.

If the desk faces clients, buying from them, selling to them, or arranging their trades, yes: that is Broker-Dealer Services under VARA, and conducting it in or from Dubai (outside the DIFC) without a licence breaches Article 15 of Dubai Law No. 4 of 2022. Only a desk trading purely its own assets sits outside the licensed activities, and even then a No Objection Certificate is expected.

AED 400,000 or 15 percent of fixed annual overheads, whichever is higher, where client virtual assets are held with a VARA-licensed custodian; otherwise AED 600,000 or 25 percent. Net liquid assets of at least 1.2 times monthly operating expenses apply on top.

The client. Dealing with or for clients is licensed Broker-Dealer activity. Trading only your own balance sheet is proprietary trading: not licensable, but requiring a VARA No Objection Certificate, with mandatory registration once virtual asset investment reaches USD 250 million equivalent in any rolling 30-day period. Registration is not a licence and does not permit client business.

A licensed broker-dealer can, but retail brings materially heavier conduct obligations under VARA's Market Conduct Rulebook. Most desks restrict themselves to Qualified Investors (net assets AED 3.5 million with a 50 percent haircut on virtual asset holdings, or income of AED 700,000 plus) and institutions, and build onboarding to enforce that.

It depends on where the clients are and what settles. VARA suits Dubai-based regional flow and has historically carried default federal registration. ADGM offers FSRA authorisation in a common law financial free zone. The federal CMA framework covers onshore dealing, but its capital module should be checked directly before budgeting. Neo Legal advises across all of them.

Stop the client-facing activity, get a perimeter opinion, and approach the regulator on your own terms. Penalties for unlicensed activity reach the higher of AED 50 million, 15 percent of revenue or 300 percent of gains for entities, and in Neo Legal's experience voluntary engagement is consistently the cheaper path.

The CMA Virtual Assets Framework, issued 13 February 2026, regulates eight activities: Dealing as Principal, Dealing as Agent, Providing Custody, Arranging Custody, Arranging Investment Deals, Providing Investment Advice, Portfolio Management, and Operating an MTF (multilateral trading facility). Conducting any of them in or from the UAE outside the VARA, DFSA, FSRA and CBUAE perimeters requires CMA authorisation.

Dealing as Principal means trading against clients from your own balance sheet: the firm is the counterparty, as an OTC desk or market maker is. Dealing as Agent means executing or transmitting orders on a client's behalf against third parties, the classic brokerage model. The distinction matters because principal dealing carries balance-sheet risk and typically heavier prudential treatment, while both fall inside the CMA perimeter.

Arranging Custody captures firms that bring clients together with custodians without themselves holding client virtual assets or keys: platforms that route client assets to third-party custodians, introducers to custody providers, and technology-led models that sit in the custody chain commercially but not operationally. It is a distinct, lighter activity than Providing Custody, which is reserved for firms actually holding or controlling client assets.

Yes. The framework's Alternative Trading System module covers both conventional-securities MTFs and tokenised-securities MTFs, which gives tokenised securities an onshore federal venue home rather than confining them to the financial free zones such as ADGM. An operator wanting to run a regulated venue for tokenised bonds, funds or real-world assets onshore now applies to the CMA under Operating an MTF.

Roughly: Dealing as Principal and Dealing as Agent together correspond to VARA's Broker-Dealer Services; Providing Custody corresponds to Custody Services; Providing Investment Advice to Advisory Services; Portfolio Management to VA Management and Investment Services; and Operating an MTF to Exchange Services. The arranging activities have no standalone VARA category, and VARA separately regulates lending, transfer and settlement, and issuance, which the CMA framework treats differently.

Published summaries indicate roughly AED 100,000 to 300,000 for advice, AED 500,000 and above for dealing, AED 500,000 to 1 million and above for portfolio management, AED 1.5 to 2 million and above for an MTF, and AED 2 million and above for custody, plus liquid resources covering six months of operating expenses. These are indicative only: the operative figures sit in the Prudential Requirements module, vary by sub-category, and are confirmed with the CMA at application. Neo Legal confirms the operative numbers with the CMA before clients budget.

A reasoned conclusion from counsel qualified in the issuer's jurisdiction, addressed for the exchange's reliance, on what the token is: typically that it is not a security or investment under that jurisdiction's law and that its issuance does not trigger licensing, together with confirmation of the issuer's corporate power and authorisation.

Because listing a token that is legally a security exposes the exchange to operating an unlicensed securities venue in the markets it serves. The opinion is how the exchange prices and files that risk, and most major venues require one as a standing listing condition.

Classification under the Securities and Investment Business Act's investment definitions (modernised for digital assets in January 2025), the VASP Act perimeter as applied to the issuer's actual activities, and corporate validity: existence, power to issue under the constitution, and proper authorisation.

Marketed profit expectations, staking yields framed as investment returns, redemption rights against assets, revenue-sharing mechanics, and documents that contradict each other or the project's own marketing. Counsel opine on the whole factual record, including what the founders have said publicly.

At structure stage. The opinion is earned by the token's design and documents: a written classification analysis before drafting, consistent documents and disciplined marketing make the eventual opinion an assembly exercise rather than a remediation project.

Yes. The firm prepares issuers for the analysis and delivers listing opinions and supporting memoranda for BVI token issuers, alongside the UAE and VARA perimeter work exchanges increasingly ask about for Dubai-based teams. Where a token cannot support an opinion, the firm says so plainly and scopes the remediation.

Yes. The Issuer SPV (UAE, DMCC) holds the VARA Cat 1 ARVA licence; the aircraft itself is registered in a recognised flag jurisdiction (Cayman VP-C, Isle of Man M-, Bermuda VP-B, Marshall Islands V8-) through an Asset-Owning SPV; charter operation is run by a separate management company under a documented agreement. Token holders have indirect beneficial ownership.

Charter-income tokenisation (Model B) is structurally cleaner. The asset remains owned by the originator; token holders receive a share of net charter income; no operational complexity of fractional usage rights. Model A (fractional ownership) is more like the traditional NetJets / Flexjet structure and creates more legal complexity around usage scheduling and residual value.

Aircraft heavy maintenance (engine overhauls, airframe inspections) costs millions of dollars and occurs every 8-12 years. Yacht refits occur every 2 years (haul-out and bottom paint) plus major refurbishment every 5-10 years. The token structure must set aside 20-30% of net charter income into a segregated maintenance reserve fund. Without this, the asset deteriorates and token NAV collapses. This is the most common failure mode.

Aircraft: Bluebook (Aircraft Bluebook Price Digest) is the standard reference, supplemented by IBA (International Bureau of Aviation) and Ascend appraisals for newer or less-comparable assets. Yachts: Fraser Yachts, Burgess, Y.CO and Edmiston produce comparable-sale appraisals. Annual revaluation is the rulebook minimum; semi-annual for institutional structures.

The UAE has its own aircraft registry (A6-) but for institutional tokenisation, Cayman / IoM / Bermuda are the standard choices: they have full ICAO compliance, well-tested aircraft mortgage frameworks, recognised by all major bilateral aviation safety agreements (including BASA with the US), and accepted by international charter operators and insurance markets. The UAE registry is more commonly used for nationally-owned assets.

For aircraft and yachts operating internationally, war-risk insurance is a real concern, especially in the Middle East. The token structure must disclose the insurance coverage and any exclusions, plus the contingency arrangements if war-risk premiums spike (which they do during regional tensions). Most institutional charter operators carry comprehensive war-risk coverage as a baseline.

For colourless rounds: GIA (Gemological Institute of America) certification is the institutional standard. IGI (International Gemological Institute) is acceptable for many investment-grade stones. For fancy colour diamonds and coloured stones (rubies, sapphires, emeralds): Gübelin and SSEF (Swiss Gemmological Institute) plus GRS (GemResearch Swisslab) are the standard. Original certification must be provided at issuance and re-confirmed at the annual revaluation.

The DMCC Diamond Vault in Dubai is the primary custody option, providing institutional-grade vault custody with full insurance. Partner vaults in Antwerp, Geneva and New York are also available under documented sub-custody arrangements. The SPV is the legal owner; the custodian holds the stones on the SPV's behalf.

For colourless rounds, the Rapaport List Price and IDEX Online transaction data are the standard reference. For fancy and coloured stones, auction comparables from Christie's, Sotheby's and Bonhams plus independent appraisal. The whitepaper discloses the methodology and the annual revaluation cycle. Pricing is updated at minimum annually; quarterly for institutional structures.

Yes, in many structures — subject to a minimum redemption threshold (typically the appraised value of a single stone, so tokens representing fractional positions must aggregate to redemption-eligible amounts). Physical delivery is subject to KYC/AML, export documentation, and shipping insurance. Most token holders redeem for cash at NAV less the custody/admin/insurance spread.

Diamonds have wider bid-ask spreads than financial assets — typically 8-15% all-in (covering custody, insurance, administrative cost, and dealer margin on redemption). The whitepaper discloses this spread to investors at issuance.

Comprehensive all-risks insurance covering theft, loss, damage and transit. Coverage is typically 110% of appraised value, written by Lloyd's of London syndicates or equivalent specialist underwriters. The policy is held by the SPV (token holders are beneficiaries through their token interest).

Yes. The Issuer SPV (UAE, DMCC) holds the VARA Cat 1 licence and a beneficial interest in the existing Concession-Owning SPV that holds the concession contract. Token holders receive a pro-rata share of the net cash flow from the concession. Government consent for the change-of-economic-interest is typically required and must be obtained pre-issuance.

Airport slots are particularly well-suited to tokenisation — they have indefinite duration under IATA Worldwide Airport Slot Guidelines, established secondary-market trading (Heathrow slot pairs have traded for USD 60-80M+), and value driven by airport capacity scarcity. The airline holder assigns the economic interest in the slot to the Issuer SPV; slot is operated under a slot-operation agreement; token holders receive economic return through periodic distributions or capital appreciation.

Most concession contracts include change-of-control or transfer-of-economic-interest clauses requiring government consent. The pre-application work includes reviewing the concession for trigger conditions, engaging the government counterparty for consent or no-objection, and structuring the token as an indirect economic interest where possible. The whitepaper discloses the consent risk as a material risk factor.

PPAs are highly suitable — defined energy price × contracted offtake volume creates predictable 15-25 year cash flows, typically with sovereign or utility counterparty. Renewable energy PPAs additionally have green attribute revenue (RECs, GO certificates) which can be tokenised separately or aggregated. The PPA must be reviewed for assignability and change-of-control triggers.

Discounted cash flow valuation using the concession's contracted income, operating costs, maintenance reserve requirements, and remaining concession term. Standard infrastructure valuation methodology. Annual revaluation by an independent valuer (typically a Big Four or specialist infrastructure advisory firm).

Infrastructure tokenisation is typically marketed to qualified investors (institutional and HNW). The combination of long duration (15-30 years), moderate yield (6-10% typical), low correlation with public markets, and quasi-sovereign counterparty risk makes infrastructure tokens fit naturally into institutional alternative-asset allocations.

Yes. VARA Category 1 ARVA tokens are designed for exactly this kind of real-world asset backing. The catalogue owner assigns the songwriter share of publishing and writer royalties to a Dubai SPV (typically DMCC). The SPV holds the VARA Cat 1 issuance licence and is the recipient of royalties from PROs (ASCAP/BMI/SESAC), MLC and DSPs. Token holders receive a pro-rata share of the SPV's net royalty receipts on a quarterly or monthly distribution cycle.

Film and TV residual rights are tokenisable under the same VARA Cat 1 framework, with one caveat: Hollywood guild residuals (SAG-AFTRA, WGA, DGA) are not always freely assignable — the producer or rights-holder must structure the assignment carefully to remain compliant with guild collective bargaining agreements. International streaming residuals (Netflix, Amazon, Apple TV+, Disney+) are generally more flexible.

The standard cycle: PROs and MLC publish quarterly royalty statements (usually with a 90-day lag); SPV receives cash from PROs/MLC/DSPs in the following quarter; paying agent reconciles cash receipts to statements and deducts administrative costs; net distributable income is divided pro-rata across token holders of record on the distribution-date snapshot; cash distribution is then deployed via the DLT (typically in USD or AED stablecoin).

Patent licensing royalties (especially pharma, biotech and deep tech) are tokenisable under VARA Cat 1. The patent holder assigns or exclusively licences the patent to the issuer SPV; the SPV licences the patent to operators in exchange for royalty payments; token holders receive a share of the royalty stream. Pharma patents are particularly well-suited because of the predictable 20-year cycle.

Yes. The VARA Virtual Asset Issuance Rulebook requires independent valuation of the underlying IP at issuance and on an annual revaluation cycle. The valuation must be performed by a recognised IP valuation firm using standard methodologies (income approach for music/film catalogues, market multiples for comparable transactions, DCF for patent royalties).

Hipgnosis was a listed fund structure on the London Stock Exchange. Royalty Exchange runs unsecured online auctions for individual royalty streams. VARA Cat 1 ARVA tokens fall between the two — they offer the fractional ownership of an auction model with the regulatory wrapper of a fund-like structure, plus on-chain transferability and 24/7 secondary market access through VARA-licensed exchanges.

A well-prepared IP-backed VARA Cat 1 issuance typically takes 6-9 months from instruction to first token sale: 2-3 months for SPV establishment and IP assignment; 3-4 months for the VARA licence application and whitepaper approval; 1-2 months for issuance go-live and qualified investor onboarding.

Yes. The standard structure: UAE Issuer SPV (DMCC) holds the VARA Cat 1 licence; underlying loans held in a Cayman or DIFC lending vehicle; Issuer SPV subscribes to a participation interest in the lending vehicle; ARVA tokens represent pro-rata participation in the senior, mezzanine or equity tranche.

The whitepaper discloses the default trigger (typically 30/60/90-day interest payment failure or covenant breach), the recovery procedure, and the loss allocation waterfall. In a senior/mezz/equity structure, losses are absorbed equity first, then mezzanine, then senior. A default reserve fund (typically 2-5% of fund size) absorbs first losses.

Litigation finance tokenisation is structurally similar. A portfolio manager selects 15-30 cases (commercial litigation, patent disputes, international arbitration); the Issuer SPV commits capital; token holders share in the aggregate portfolio outcome. Returns are uncorrelated with broader markets — case outcomes don't depend on equity markets, which is a powerful diversification feature.

Mark-to-fair-value methodology with cases recategorised across four stages: Stage 1 (pre-trial — capital deployed but no outcome visibility) typically valued at cost; Stage 2 (trial verdict in favour, awaiting appeals) marked up; Stage 3 (final judgement / settlement reached) marked further up reflecting expected recovery; Stage 4 (recovery received) realised. NAV moves are recorded quarterly.

Typically restricted to qualified investors (institutional and HNW meeting professional client thresholds — typically USD 1M+ net financial assets or USD 200k+ annual income). The VARA Cat 1 marketing perimeter aligns with this. Retail marketing requires separate authorisation.

Key differences: (1) on-chain transferability — tokens can be transferred between qualified investors on VARA-licensed exchanges without the closed-end-fund lock-up; (2) lower minimum tickets — typically USD 5,000-50,000 vs the USD 1-5M typical for private credit funds; (3) transparent reporting through DLT; (4) regulated under VARA Cat 1 ARVA framework rather than under fund regulations.

Not yet. The Dubai Land Department's Real Estate Tokenisation Project, run through the PRYPCO Mint platform under DLD, VARA and CBUAE oversight, moved from its 2025 pilot to live secondary-market trading on 20 February 2026, but it remains a DLD-governed programme through an approved platform rather than a generally available route. An issuer outside that programme needs its own VARA Category 1 (ARVA) approval and DLD arrangements.

Three features: DLD title is well maintained, electronic and globally credible, so identification of the underlying asset is unambiguous; rental yields in Dubai are typically 5 to 8 percent gross, high enough to deliver meaningful token-level income distribution; and Dubai property attracts global investors, with tokenisation removing the friction of cross-border title transfer, currency and minimum-ticket constraints.

No. The VARA-licensed issuer must be Dubai-incorporated outside DIFC, and DMCC is the standard venue for tokenised real estate. DIFC and ADGM sit under the DFSA and FSRA respectively, outside VARA's regulatory perimeter, so neither can host the VARA Category 1 issuer.

In the worked example, a USD 50M completed residential tower in Dubai Marina with 100 units, fractionalised into 500,000 tokens at USD 100 each, gross rental yield is around 6 percent and net yield to token holders is around 4 to 4.5 percent after property management, maintenance reserve and regulator fees, distributed monthly. A realistic net yield on prime Dubai residential is 4 to 5 percent; lower on prime commercial and higher on yielding hospitality.

Legal segregation, so the property SPV and underlying DLD title survive issuer-SPV insolvency; independent reserve audits on VARA's six-monthly cycle with monthly disclosures, plus a recommended contractual monthly attestation of valuation and rental flow; service-provider redundancy including a backup property manager and backup transfer agent; token-holder voting rights on major asset decisions such as refinancing, sale or capital improvement; and a defined wind-down mechanism for property sale and token redemption.

The typical timeline is 4 to 7 months, covering pre-application engagement, formal submission, regulator dialogue and conditional approval; subsequent issuances are faster. The whitepaper must cover the asset description, a RICS-grade valuation methodology, rental projections, the fee schedule (issuance fee 1 to 2 percent, ongoing management fee 1 to 1.5 percent per annum) and risk disclosure.

An exchange is one type of VASP. The term covers the whole service stack — brokers, custodians, advisers, asset managers, lenders and transfer providers — each mapping to its own licence category and rulebook in regimes such as Dubai’s VARA framework.

Actively marketing or providing virtual-asset services in or from Dubai (outside DIFC) triggers VARA’s perimeter. Reverse solicitation is construed narrowly — foreign platforms courting Dubai users without a licence risk enforcement action.

From the FATF Recommendations, which define virtual-asset service providers so that exchange, transfer, custody and issuance-related services fall inside the global AML/CFT framework. National regimes — including the UAE’s — build their licensing categories on that definition.

A VASP, or Virtual Asset Service Provider, is any business that, for or on behalf of clients, exchanges virtual assets for fiat currency or for other virtual assets, transfers virtual assets, safekeeps or administers them, or provides financial services connected to a token issuer's offer or sale. The concept comes from the Financial Action Task Force (FATF) and is the foundation of every UAE virtual asset licensing regime.

VASP stands for Virtual Asset Service Provider. The term was introduced by the Financial Action Task Force in 2018 alongside its definition of virtual assets, so that crypto businesses could be brought inside the global anti-money-laundering framework. UAE regulators, including Dubai's VARA, use VASP as the formal label for licensed virtual asset firms.

Client-facing virtual asset activity: operating an exchange, dealing or broking for clients, holding or administering client virtual assets, transferring them, managing portfolios, advising on them, lending against them, or issuing tokens. VARA lists eight regulated activities for Dubai, and the federal CMA framework lists eight for onshore UAE. The label on your trade licence does not matter; the substance of what you do for clients does.

No. Buying, holding and selling virtual assets for yourself, whether as an individual or through your own investment vehicle, is not a virtual asset service, because there is no client. In Dubai, VARA still expects proprietary traders to hold a No Objection Certificate, and registration becomes mandatory once virtual asset investment reaches USD 250 million equivalent in any rolling 30-day period, but neither is a licence and neither permits serving clients.

Generally not. Under FATF guidance, building technology is not itself a virtual asset service: developers of software, providers of non-custodial wallets and makers of hardware do not become VASPs merely by writing code, provided they never hold or control client assets and do not conduct the regulated activity themselves. The perimeter question is control and client relationship, not technology, and hybrid models should be assessed case by case.

Severe on both tracks. In Dubai, unlicensed virtual asset activity breaches Article 15 of Dubai Law No. 4 of 2022, with penalties for entities reaching the higher of AED 50 million, 15 percent of revenue or 300 percent of gains, plus director liability. Onshore, Article 71 of Federal Decree-Law No. 33 of 2025 provides fines up to AED 250 million and imprisonment of not less than one year for unlicensed financial activity under the CMA.