Updated for Rulebook 2.0

VARA License in Dubai: The Definitive Guide to Virtual Asset Licensing

A VARA license is the authorisation Dubai's Virtual Assets Regulatory Authority grants to a Virtual Asset Service Provider (VASP) to carry out specific virtual asset activities in or from Dubai, excluding the DIFC. It is issued per activity, sits on top of your ordinary trade licence, and must be in place before you onboard a single client.

In short
Regulator
VARA, created by Dubai Law No. (4) of 2022
Who needs it
Any business offering regulated virtual asset services in or from Dubai, mainland or free zone (not DIFC)
VARA fees
AED 40,000–100,000 to apply, AED 80,000–200,000 a year in supervision, per activity
Paid-up capital
From AED 100,000 (Advisory) to AED 1.5 million or more (Exchange without a VARA-licensed custodian)
Process
IDQ → Approval to Incorporate (ATI) → full VASP licence
Typical timeline
3 to 7 months
The Regulator

What is VARA?

The Virtual Assets Regulatory Authority (VARA) is Dubai's dedicated virtual asset regulator, established under Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai. It licenses and supervises VASPs operating on the Dubai mainland and in Dubai's free zones. The Dubai International Financial Centre is outside its remit and has its own regulator, the DFSA.

VARA's framework rests on the Virtual Assets and Related Activities Regulations 2023 and a set of rulebooks: four that apply to every VASP plus one rulebook for each licensed activity. The current versions were issued as Rulebook 2.0 and took effect on 19 June 2025.

The Four Compulsory Rulebooks

Company

Governance, capital, people and corporate requirements.

Compliance and Risk Management

AML/CFT, Travel Rule and risk frameworks.

Technology and Information

Systems, cybersecurity and data.

Market Conduct

Client dealings, disclosures and marketing.

Plus one activity rulebook for each VARA activity you are licensed for.
Scope

Who Needs a VARA License?

Any business that carries out a regulated virtual asset activity by way of business in or from Dubai, or markets one to people in Dubai, needs a VARA licence for that activity. That includes exchanges, brokers and OTC desks, custodians and wallet providers, crypto fund managers, lenders, payment and settlement providers, token issuers and firms giving personalised crypto investment advice.

Not every crypto-related business needs a full licence. Proprietary trading with your own funds can require only a No Objection Certificate, with registration above certain volumes; some technology providers may only need to register.

Trade Licence vs VARA Licence

Trade (commercial) licence VARA licence
Issued byDET (mainland) or the Dubai free zone authorityVARA
What it doesCreates the legal entityAuthorises specific virtual asset activities
Enough to serve crypto clients?NoYes, for the licensed activities only
ScopeCompany-wideActivity by activity
Ongoing dutiesAnnual renewal, company filingsRulebook compliance, reporting, annual supervision fee, renewal
Licensed Activities

Types of VARA license (Licensed Activities)

VARA licenses seven VASP activities, plus Category 1 virtual asset issuance. You apply for each activity you will carry out.

Advisory Services

Personal recommendations to a client about virtual asset transactions, made at the client's request or on your own initiative.

Broker-Dealer Services

Arranging or matching orders, dealing on own account for clients, market-making, and placement or distribution of virtual assets.

Custody Services

Safeguarding client virtual assets and private keys, acting only on confirmed client instructions, with client assets segregated.

Exchange Services

Operating a venue that exchanges virtual assets for fiat or other virtual assets, including maintaining an order book.

Lending and Borrowing Services

Contracts under which virtual assets are lent by one party to another, with the borrower committing to return them.

VA Management and Investment Services

Managing client virtual assets as agent or fiduciary, including portfolio management and staking on clients' behalf.

VA Transfer and Settlement Services

Transferring virtual assets between parties and settling virtual asset transactions on behalf of others.

Category 1 VA Issuance

Issuing certain virtual assets, including fiat-referenced (FRVA) and asset-referenced (ARVA) tokens, requires a licence and VARA approval of the whitepaper. Category 2 issuances do not need a VARA licence but must be distributed through a licensed VASP.

One licence or several?

A single VASP can hold several activities, but it must meet the full requirements and capital of each one, with no blended standard. Custody is the exception: it must sit in a separate legal entity with its own VARA licence.

Eligibility

VARA License Requirements

  • A Dubai legal entity on the mainland or in an eligible Dubai free zone (not DIFC), with activity wording aligned to the planned VARA activities.
  • Fit and proper owners and management, with notarised and attested documents for foreign corporate shareholders.
  • Responsible Individuals: at least two, full-time, meeting VARA's UAE residency requirements.
  • Key officers: a Compliance Officer and an MLRO, plus technology and information security leadership.
  • Paid-up capital for each activity (table below), held in a UAE bank account in favour of VARA.
  • Net liquid assets of at least 1.2 times monthly operating expenses, maintained at all times.
  • Insurance appropriate to the business (e.g. professional indemnity, directors and officers, crime).
  • A physical office in Dubai.
  • Policies and systems that meet every applicable rulebook: governance, AML/CFT and Travel Rule, technology and cybersecurity, market conduct and the activity rulebooks.
Fees & Capital

VARA License Cost: Fees And Capital

The cost of a VARA licence has three layers: VARA's own fees, paid-up capital that stays in the business, and the cost of setting up and running a compliant firm.

VARA Fees by Activity

Activity Application fee Annual supervision fee
Advisory ServicesAED 40,000AED 80,000
VA Transfer and Settlement ServicesAED 40,000AED 80,000
Broker-Dealer ServicesAED 100,000AED 200,000
Custody ServicesAED 100,000AED 200,000
Exchange ServicesAED 100,000AED 200,000
Lending and Borrowing ServicesAED 100,000AED 200,000
VA Management and Investment ServicesAED 100,000AED 200,000
Each additional activity adds a licence extension fee of 50% of the lower application fee. Supervision fees are paid per activity, in advance, every year. Source: VARA fee schedule.

Minimum Paid-Up Capital by Activity

Activity Paid-up capital (higher of)
Advisory ServicesAED 100,000
Broker-Dealer — using a VARA-licensed custodianAED 400,000 or 15% of fixed annual overheads
Broker-Dealer — other casesAED 600,000 or 25% of fixed annual overheads
Custody ServicesAED 600,000 or 25% of fixed annual overheads
Exchange — using a VARA-licensed custodianAED 800,000 or 15% of fixed annual overheads
Exchange — other casesAED 1,500,000 or 25% of fixed annual overheads
Lending and Borrowing ServicesAED 500,000 or 25% of fixed annual overheads
VA Management and Investment — using a VARA-licensed custodianAED 280,000 or 15% of fixed annual overheads
VA Management and Investment — other casesAED 500,000 or 25% of fixed annual overheads
VA Transfer and Settlement ServicesAED 500,000 or 25% of fixed annual overheads
Category 1 VA IssuanceAs set in the VA Issuance Rulebook
Capital is calculated separately for each licensed activity and reconciled monthly. Source: VARA Company Rulebook, Rule VI.B.

Other Costs to Budget

Company formation and trade licence (DET or free zone)

Office lease in Dubai

Salaries for Responsible Individuals, Compliance Officer, MLRO and technology lead

Technology, custody, blockchain analytics and Travel Rule providers

Insurance, external audit and penetration testing

Legal and regulatory fees

Need help scoping the budget? Our VARA license consultants build it activity by activity.

The Process

How to Get a VARA License: The Process in Brief

Foreign founder, or want each stage broken down? Read the full VARA license process in Dubai.

Timeline

How Long Does a VARA License Take?

Expect roughly 3 to 7 months from IDQ to full licence for a well-prepared applicant. The longest delays come from appointing Responsible Individuals, attesting foreign documents, generic policies that trigger extra questions, and slow responses to gap lists.

Typical timeline
3–7months

From IDQ to full VASP licence, for a well-prepared applicant.

The longest delays

  • Appointing Responsible Individuals
  • Attesting foreign documents
  • Generic policies that trigger extra questions
  • Slow responses to gap lists
See the timeline stage by stage
Documents

Documents Required For a VARA License

The core file VARA expects across both stages. The process guide shows which documents go in at which step.

  • Regulatory Business Plan and Regulatory Financial Plan (projections)
  • Corporate documents: certificate of incorporation, MoA/AoA, shareholder register
  • Group structure chart and Ultimate Beneficial Owner details
  • Passports, CVs and fit-and-proper information for shareholders, directors and Responsible Individuals
  • Source of funds and evidence of paid-up capital
  • Policies: governance, compliance and risk management, AML/CFT and Travel Rule, technology and information security, market conduct, and activity-specific policies
  • Outsourcing and vendor agreements
  • Insurance certificates
  • Business continuity, succession and wind-down plans
  • Office lease
Other UAE Regulators

VARA vs DIFC, ADGM and Federal Regulation

Regulator Where it applies Use it when
VARADubai mainland and Dubai free zones, excluding DIFCYou operate in or serve clients from Dubai outside DIFC
DFSADubai International Financial CentreYou want a DIFC base and its common-law, financial-centre regime
FSRAAbu Dhabi Global Market (ADGM)You want an Abu Dhabi base under ADGM's virtual asset framework
CMA (federal; replaced the SCA on 1 Jan 2026)Onshore UAE outside emirate-level regimesYour activity falls within federal virtual asset or securities rules
For DIFC and ADGM routes, see our DIFC financial license and ADGM financial license pages. Compare all routes on our crypto license in Dubai and the UAE page.
Latest Updates

What Changed in 2025–26

May 2025 · effective 19 June 2025

Rulebook 2.0

VARA reissued its rulebooks in May 2025; they took effect on 19 June 2025.

31 March 2026

Activity rulebook updates

The Exchange Services Rulebook was updated again on 31 March 2026.

April 2026

VA Issuance guidance

VARA published guidance on applying the VA Issuance Rulebook in April 2026.

Ongoing

Enforcement

VARA has stepped up action against unlicensed firms, including fines and cease-and-desist orders.

Ongoing Obligations

After You Get Your VARA License

Renew the licence every year and pay each activity's supervision fee in advance

Maintain paid-up capital and net liquid assets at all times, reconciling capital monthly

File periodic reports and notify VARA of material changes

Clear marketing with VARA's marketing rules before campaigns go live

Keep policies current with new rulebooks and circulars, and train staff

Disclose your licensed activities and licence details to clients

For post-licence support, see VARA compliance implementation and VARA Stage 2 policy drafting.

What Happens if You Operate Without a VARA License?

Carrying out a regulated virtual asset activity in Dubai without a licence exposes the business and its managers to VARA enforcement, including fines, cease-and-desist orders and public warnings. A trade licence gives no protection if the activity needed VARA authorisation. You can check whether a firm is licensed on VARA's public register.

Frequently Asked Questions

VARA License FAQs

Have a question not covered here? Tell us what you plan to offer and we'll confirm what applies.

Ask our VARA team

VARA charges AED 40,000 to apply and AED 80,000 a year in supervision fees for Advisory and Transfer & Settlement, and AED 100,000 and AED 200,000 for every other activity. Paid-up capital adds AED 100,000 to AED 1.5 million or more, depending on the activity and your overheads.

No. A trade licence creates the company but does not authorise regulated virtual asset services. You need a VARA licence for each regulated activity before serving clients.

You apply for each activity separately, and each carries its own fees, capital and rulebook. A single VASP can hold several activities if it meets the full requirements of each.

No. ATI lets you incorporate and build the business. You may only carry out regulated activity once VARA issues the full VASP licence.

VARA reviews the file and usually sends clarification requests or a gap list. Fast, consistent answers are the biggest factor in how long this stage takes.

No. The DIFC has its own regulator, the DFSA. VARA covers the Dubai mainland and Dubai free zones outside DIFC.

Yes. Foreign founders can fully own a VARA-licensed entity, typically set up in a Dubai free zone. See our VARA license process for foreigners.

Some entities can obtain written confirmation from VARA that they are exempt from licensing before carrying out virtual asset activity, sometimes with conditions. Exemption must be confirmed by VARA in advance; it is never assumed.

Certain firms, such as those investing their own portfolio in virtual assets or providing distributed ledger technology services to other businesses, may register with VARA. Registration is not a licence and does not permit regulated activity.

Search VARA's public register, which lists fully licensed VASPs and those holding in-principle approval.
Free 30-Minute Scoping Call

Get Help With Your VARA License

Finjuris's lawyers take virtual asset businesses from structuring to full VASP licence and beyond. See how our VARA license consultants work, or book a free scoping call.

Confidential · NDA on request Structuring to full VASP licence Fixed-fee proposal

Book a Free Scoping Call

Tell us which activities you plan to offer. We'll confirm the VARA licences, fees and capital that apply and reply within one business day.