VASP Licence UAE: Which Crypto Licence Do You Need?

Quick Summary: VASP licence in the UAE

• What a VASP is: a Virtual Asset Service Provider – any business that deals in crypto for others: exchanges, brokers, custodians, managers, transfer and settlement services, and advisers. If you touch clients’ virtual assets, you need a VASP licence.
• Four regulators, not one: the UAE licenses virtual assets through VARA (the Emirate of Dubai), the ADGM FSRA (Abu Dhabi Global Market), the SCA (the rest of the onshore UAE), and the Central Bank (payment tokens / stablecoins). Choosing the right one is the first decision.
• Activities: the framework covers advisory, broker-dealer, custody, exchange, lending and borrowing, management and investment, and transfer and settlement – each with its own capital and rules.
• Two stages: you typically move from an initial or in-principle approval to a full licence once your controls, capital and team are in place.
• Tax: UAE Corporate Tax is 9% (0% below AED 375,000); a free-zone VASP can earn 0% on qualifying income. No personal income tax.

“Which crypto licence do I need in the UAE?” is the question every founder starts with, and the honest answer is: it depends on what you do and where. The UAE does not have one crypto licence – it has a map of regulators and activities. This guide is the navigator: what a VASP is, which regulator fits, which activity you fall under, and how the process works, with links to the deep-dive guides for each route.

“The first mistake is applying to the wrong regulator. A Dubai exchange goes to VARA; an Abu Dhabi Global Market venue goes to the FSRA; a mainland payment-token business touches the Central Bank. Get the map right before you spend a dirham on the application.”

— Reviewed by Jashvantkumar Prajapati, Business Structuring Specialist

What a VASP is

“Virtual Asset Service Provider” is the international (FATF) term the UAE adopted. Broadly, you are a VASP if, for someone else, you: exchange virtual assets for fiat or other crypto; transfer them; safeguard them (custody); or participate in and provide financial services around issuing or selling them. Trading your own treasury is different from running a service for clients – it is the client-facing service that triggers a licence.

The UAE’s four virtual-asset regulators

For the two most common routes, see our VARA crypto licence (Dubai) and ADGM crypto licence (Abu Dhabi) guides.

The activities under a VASP licence

Whichever regulator you choose, the licence is built from activity permissions. You apply for the ones you need:

• Exchange – running a trading venue (highest bar). See our crypto exchange licence guide.
• Broker-dealer – intermediating client orders.
• Custody – safeguarding client assets (often a standalone entity).
• Management and investment – managing virtual-asset portfolios or funds.
• Transfer and settlement, lending and borrowing, and advisory.

Capital and obligations scale with the activity – an exchange carries the most, advisory the least.

How the VASP process works

1. Map the activity and regulator. Define exactly what you do and where, and pick VARA, FSRA, SCA or CBUAE.
2. Pre-application engagement. Prepare a regulatory business plan and engage the regulator early.
3. Initial / in-principle approval. The regulator approves in principle, subject to conditions.
4. Build controls, capital and team. Stand up compliance, AML, technology and substance.
5. Full licence. Meet the conditions and receive the full VASP licence or authorisation.

What the regulator reviews

Whatever the activity, expect to submit a similar core pack, scaled to the risk:

• A regulatory business plan and financial model with the capital calculation.
• Ownership and governance details, with fit-and-proper checks on owners, directors and senior managers.
• The AML/CFT programme – KYC, monitoring, travel-rule and sanctions procedures, and the appointed compliance officer and MLRO.
• Technology, custody and cyber documentation appropriate to the activity.
• Evidence of substance – office and staffing in the UAE.

An exchange or custody applicant submits far more than an adviser; scope the pack to your permission.

What it costs

Cost depends entirely on the activity and regulator – an advisory permission is a fraction of an exchange. Regulator fees are set by VARA, the FSRA, the SCA and the CBUAE; confirm the current schedule. Budget also for capital, compliance staff, technology and a real office. Sketch the corporate side with our free UAE setup cost calculator.

Corporate Tax

UAE Corporate Tax is 9%, with 0% on the first AED 375,000. A VASP set up in a free zone (including ADGM) can earn 0% on qualifying income as a Qualifying Free Zone Person if it meets the substance and activity tests. No personal income tax. See our UAE Corporate Tax guide.

Who needs a VASP licence

You need a VASP licence if you provide a virtual-asset service to other people for a business purpose: running an exchange or brokerage, safeguarding client crypto, managing crypto portfolios or funds, moving assets on clients’ behalf, arranging lending, or issuing and marketing tokens. Payment and stablecoin businesses touch the Central Bank in addition.

You generally do not need one to invest your own company treasury in crypto, or to accept crypto as payment for unrelated goods and services – though tax, accounting and AML rules still apply. The trigger is providing a service around someone else’s virtual assets. If in doubt, treat it as in-scope and confirm before you launch; operating unlicensed is a serious offence.

Where VARA reaches

VARA regulates virtual assets across the Emirate of Dubai, including its commercial free zones such as DMCC and IFZA, but excluding the DIFC financial free zone, which sits under its own regulator. In practice a Dubai crypto business is licensed by VARA and separately holds a commercial licence from its free zone or the mainland DET. That two-part structure – the VARA activity permission plus the corporate licence – catches founders out, so plan both together. Our VARA crypto licence guide covers it in full.

AML, KYC and the travel rule

Anti-money-laundering is the backbone of every UAE crypto licence, and the regulators examine it hard. Whichever route you choose, expect to run:

• Customer due diligence (KYC) on every client, with enhanced checks for higher-risk customers and politically exposed persons.
• Transaction monitoring and sanctions screening in real time.
• The travel rule – passing originator and beneficiary information alongside virtual-asset transfers above the threshold.
• A dedicated compliance officer and MLRO, and suspicious-transaction reporting to the UAE Financial Intelligence Unit.
• Record-keeping for the required retention period.

A thin AML programme is the fastest way to fail an application, and the most common reason a licence is later suspended.

Ongoing obligations

A VASP licence is supervised for its life. Expect audited accounts, regular regulatory returns, maintained capital, kept-current AML controls, cybersecurity standards, and real economic substance in the UAE. Material changes – new activities, new senior managers, new products – need regulator notification or approval before you act.

How to choose your route

Start from three questions: what do you do (exchange, broker, custody, manage, advise), where is your market and team (Dubai, Abu Dhabi, onshore), and how capital-intensive can you be. An exchange in Dubai points to VARA; an institutional venue or manager often points to the ADGM FSRA; a payment-token business touches the Central Bank. Getting this map right before you apply saves months and a large chunk of cost.

Five mistakes when choosing a VASP route

• Applying to the wrong regulator for your location and activity.
• Over-scoping. Asking for exchange when you only broker adds cost and delay.
• Ignoring custody structure. Custody often must be a separate entity.
• Weak AML from the start. KYC, travel-rule and monitoring are examined hard.
• No real substance. A brass-plate will not pass any UAE crypto regulator.

Frequently asked questions

What is a VASP licence?

A licence to provide virtual-asset services to others - exchange, broker, custody, management, transfer or advisory. If you handle clients’ crypto, you need one.

Which regulator licenses crypto in the UAE?

Four: VARA for the Emirate of Dubai, the ADGM FSRA for the Abu Dhabi Global Market, the SCA for the onshore UAE, and the Central Bank for payment tokens and stablecoins.

Do I need a VASP licence to trade my own crypto?

Generally no - trading your own treasury is different from providing a service to clients. It is the client-facing activity that triggers a licence.

Which is the cheapest crypto activity to license?

Advisory and broker permissions carry far lower capital than an exchange or custody. Scope the licence to what you actually do.

VARA or ADGM?

VARA covers Dubai and is crypto-only; the ADGM FSRA sits inside a full financial centre and has run a virtual-asset regime since 2018. See our dedicated VARA and ADGM guides.

How long does a VASP licence take?

From a couple of months for a light activity to many months for an exchange, across pre-application, in-principle approval, build-out and final authorisation.

Do VASPs pay tax in the UAE?

UAE Corporate Tax is 9% (0% below AED 375,000); a free-zone VASP can earn 0% on qualifying income. No personal income tax. Confirm with the Federal Tax Authority.

Can one licence cover several activities?

Yes - in Dubai multiple activity permissions sit under a single VASP licence, though custody usually needs its own entity.

Sources and official references

Related guides

• Crypto exchange licence (VARA & ADGM)
• VARA crypto licence (Dubai)
• ADGM crypto licence (Abu Dhabi)
• Free UAE setup cost calculator
• Talk to an adviser

This guide is general information, not legal, tax or financial advice. Virtual-asset licensing rules, capital and fees are set by VARA, the FSRA, the SCA and the CBUAE and change frequently; figures are indicative and current at the time of writing. Confirm current requirements with the relevant regulator, or a licensed adviser, before you act.