VARA (Virtual Assets Regulatory Authority)
VARA is the world's first purpose-built virtual asset regulatory authority, established in Dubai under Law No. 4 of 2022 with mandate to license, regulate, and supervise all virtual asset activities and service providers operating in or from Dubai.
The Virtual Assets Regulatory Authority (VARA) is the independent regulatory body established by Dubai Law No. 4 of 2022 to oversee virtual assets and virtual asset service providers (VASPs) in the Emirate of Dubai. VARA is globally significant as the first purpose-built governmental authority dedicated exclusively to virtual asset regulation — as distinct from the extension of existing financial services regulators’ mandates to cover digital assets. VARA became operational during 2022 and began issuing licences in 2023.
Legal Basis and Mandate
Dubai Law No. 4 of 2022 on the Regulation of Virtual Assets in the Emirate of Dubai established VARA as an independent regulatory body reporting to the Dubai World Trade Centre Authority (DWTCA). The law confers on VARA authority to:
- License and regulate all virtual asset service providers in Dubai (excluding the Dubai International Financial Centre, which maintains its own regulatory framework through the DFSA)
- Establish the regulatory framework applicable to virtual assets
- Supervise compliance with anti-money laundering and counter-terrorist financing requirements
- Coordinate with federal UAE authorities, including the Securities and Commodities Authority (SCA) and the UAE Central Bank, on matters of overlapping jurisdiction
- Take enforcement action, including suspension and revocation of licences, imposition of fines, and referral for criminal prosecution
Seven Regulated Activity Categories
VARA licenses VASPs to conduct up to seven categories of virtual asset activity:
- Advisory Services: Providing investment advice or guidance relating to virtual assets
- Broker-Dealer Services: Acting as principal or agent in virtual asset transactions
- Custody Services: Safeguarding and administering virtual assets on behalf of clients
- Exchange Services: Operating a platform for exchange of virtual assets for fiat or other virtual assets
- Lending and Borrowing Services: Providing credit facilities denominated in or collateralised by virtual assets
- Payments and Remittance Services: Processing virtual asset payments or remittances
- VA Management and Investment Services: Managing portfolios of virtual assets on a discretionary basis
VASPs must hold a VARA licence for each activity category they wish to conduct. Some entities hold multiple licences across categories.
Licensing Statistics and Major Licencees
By early 2026, VARA had issued licences to more than 80 entities, including exchanges (Binance, Bybit, OKX, Crypto.com), custody providers, brokers, and virtual asset fund managers. VARA has also granted Minimum Viable Product (MVP) licences — a provisional authorisation allowing newly established entities to commence limited operations while completing the full licence process — and Provisional Approval designations.
Notable VARA-licensed entities include: Binance FZE (exchange and broker-dealer), Bybit Fintech Ltd, OKX (through a DWTCA entity), Crypto.com, and numerous smaller brokers, custodians, and fund managers.
Capital Requirements
VARA’s capital requirements vary by activity category and entity type. As a guide:
- Exchange licensees: minimum paid-up capital of AED 10 million (approximately USD 2.7 million)
- Broker-dealer licensees: AED 2 million minimum
- Custody licensees: AED 4 million minimum
- Advisory licensees: AED 500,000 minimum
Requirements scale with the complexity and systemic risk of the activity. VARA also imposes professional indemnity insurance requirements, minimum liquid capital buffers, and restrictions on the allocation of own-account capital to speculative virtual assets.
Eight Rulebooks
VARA’s regulatory framework is codified across eight Rulebooks, published progressively during 2023:
- Company Rulebook (general conduct, governance, and organisational requirements)
- Compliance and Risk Management Rulebook
- Technology and Information Rulebook
- Market Conduct Rulebook
- Advisory Services Rulebook
- Broker-Dealer Services Rulebook
- Custody Services Rulebook
- Exchange Services Rulebook
Additional Rulebooks covering Lending and Borrowing, Payments, and VA Management are either in effect or in consultation. The Rulebooks are granular, prescribing requirements on board composition, conflict-of-interest management, client asset segregation, cybersecurity standards, AML/CFT programme requirements, and virtual asset custody cold/hot storage splits.
Comparison to ADGM/FSRA
The Abu Dhabi Global Market (ADGM) Financial Services Regulatory Authority (FSRA) operates a parallel framework for virtual assets within the ADGM free zone. Key distinctions:
- Jurisdiction: VARA covers mainland Dubai and all Dubai free zones except DIFC. ADGM/FSRA covers the ADGM free zone on Al Maryah Island (Abu Dhabi). Entities wishing to operate across the UAE federal jurisdiction may also require registration with the SCA.
- Regulatory approach: ADGM/FSRA integrates virtual asset regulation within its broader FSRA framework (modelled on the UK FCA regime). VARA is a standalone authority with bespoke rules.
- Timeline: ADGM’s virtual asset framework predates VARA, with initial framework established in 2018.
- Target market: VARA has attracted a higher volume of exchange and retail-facing licensees; ADGM has focused on institutional asset managers and fintech infrastructure.
Related entries: Travel Rule, KYC/AML in Tokenization
See also: VARA Regulations, UAE Jurisdiction
Primary source: VARA Official Website and Rulebooks