LIVE TRACKER · UPDATED MONTHLY
LAST UPDATED APRIL 2026
UAE VASP LICENSE
TRACKER 2026:
EVERY ACTIVE CRYPTO
LICENSE ACROSS VARA,
ADGM, DFSA, CBUAE & CMA
The most complete database of every company licensed to operate virtual asset services in the United Arab Emirates – across VARA, ADGM/FSRA, DFSA (DIFC), CBUAE, and the CMA federal regime. Sourced directly from multiple official public registers.
Curated and verified monthly by NeosLegal – the UAE’s first crypto-native law firm since 2016.
QUICK ANSWER
As of April 2026, over 100 virtual asset entities hold active licences across the UAE’s five regulatory regimes: VARA (Dubai mainland and m Economic Free Zones), ADGM/FSRA (Abu Dhabi’s financial free zone), DFSA/DIFC (Dubai International Financial Centre), CBUAE (payment token and stablecoin operators), and the federal CMA regime. The UAE is the only jurisdiction in the world operating five simultaneous, active virtual asset licensing frameworks in parallel – a regulatory architecture unmatched globally. The first UAE VASP licence was issued by ADGM/FSRA in 2019. Major global exchanges holding UAE licences include Binance, OKX, Crypto.com, Gate.io, and Deribit. This tracker is maintained monthly by NeosLegal, the UAE’s first crypto-native law firm, and sourced directly from official public registers.
ECOSYSTEM MAP
Where licensed VASPs operate across the UAE
Five regulators, five different licensing regimes. Each requires a distinct licensing pathway, timeline, and capital structure.
-
VARA - Regulates Dubai Mainland and Dubai Economic free zones
World's first dedicated virtual asset regulator, established under Dubai Law No. 4 of 2022. Covers all Dubai activity outside DIFC. Licensing takes 6–18 months.
-
ADGM/FSRA - Regulates activities within ADGM in Abu Dhabi
First in the world with a comprehensive VA framework (2018). Common law jurisdiction favoured by institutional players. 9–24 month licensing timeline.
-
DFSA - Regulates activities within DIFC in Dubai
Regulates the DIFC financial free zone under English common law. Crypto Token regime introduced 2022; updated to a firm-led suitability model in January 2026.
-
CBUAE
Federal oversight of payment tokens, stablecoins, and SVF licences under the Payment Token Services Regulation (PTSR). AED backed stable coins are regulated here.
-
CMA – UAE Federal Regulator
The federal CMA VASP licensing framework regulates security token and tokenized commodity contracts UAE-wide, and virtual asset activity at the Federal level (excluding Emirate of Dubai).
LICENSED VASPS
All licensed virtual asset entities
Sourced from VARA, ADGM/FSRA, DIFC/DFSA, CMA and CBUAE public registers. Updated monthly.
Showing 1–25 of 96 entities
No entities match your filters
Try clearing some filters or your search term.
VARA data sourced directly from vara.ae/public-register. FSRA, DFSA, CMA, CBUAE entries based on public disclosures. Updated April 2026.
"The UAE has built the world's most sophisticated multi-regulator virtual asset licensing architecture. Five active VASP frameworks, operating in parallel, with some jurisdictional overlap. I would not call this a bug. It is a feature. Smart founders who navigate this regime correctly become part of the most serious and vibrant crypto ecosystem in the world."
Frequently Asked Questions
From verifying any company’s UAE crypto license to understanding the full regulated landscape across VARA, ADGM, DFSA, CBUAE, and CMA – we’ve got it all in one place. In this FAQ you’ll find answers to the most asked questions about the UAE crypto license.
Let us help you stay compliant and confident while you focus on growing your virtual asset business.
Book a call with a crypto lawyer today →
-
As of April 2026, over 100 entities hold virtual asset licences across VARA (45), ADGM/FSRA (25+), DFSA/DIFC (10+), and CBUAE (3+). This has grown rapidly since the first ADGM licence in 2019.
-
VARA regulates Dubai mainland VA activity (outside DIFC). ADGM/FSRA is the regulator of Abu Dhabi Global Market — a common law free zone that was first globally with a VA framework in 2018. DFSA regulates the Dubai International Financial Centre (DIFC) under its own common law jurisdiction. CBUAE is the federal central bank, overseeing payment tokens and stablecoins nationally.
-
Typically 6–18 months from initial engagement to a full VASP licence, depending on the business model's complexity and the applicant's documentation readiness. The process has two stages: Approval to Incorporate (ATI) then the full VASP Licence application. NeosLegal has guided 300+ projects through this process since 2016.
-
VARA regulates eight activities: Advisory, Broker-Dealer, Custody, Exchange, Lending and Borrowing, Management and Investment, Transfer and Settlement, and VA Issuance (Category 1). Any entity conducting these activities in or from Dubai must be licenced before commencing operations.
-
Yes. The UAE actively welcomes applications. NeosLegal can advise on whether VARA, ADGM/FSRA, DFSA, or CBUAE is the right jurisdiction for your business model, and guide you through licensing end-to-end. Book a strategy call to discuss your specific situation.
GET STARTED
Your company not on this list yet?
NeosLegal has structured over 300 crypto ventures, exchanges, funds, and Web3 companies entering the UAE.
We handle VASP licensing end-to-end: jurisdiction selection, entity formation, regulator application, and post-licence compliance.
EXPERT COMMENTARY
What the UAE's VASP landscape reveals about where global crypto regulation is heading
Three structural trends stand out in this data.
First, Broker-Dealer is the most frequent VARA-licensed activity type, accounting for ~45% of recorded licensed activities and reflecting how global exchanges structure their UAE entry, trading facilitation first, full exchange infrastructure later.
Second, institutional custody is the next wave - BitGo, Ceffu, Hex Trust, Komainu and Fidelity holding custody licences signals institutional capital actively building infrastructure here.
Third, the CMA-VARA alignment of August 2025 is beginning to reduce jurisdictional fragmentation, SCA registration numbers now appear alongside VARA licences, a sign of the federal-to-emirate harmonisation that Web3 founders have long been waiting for.