Corporate Tax UAE

VARA License UAE 2026: How to Get Licensed for a Virtual Asset Business in Dubai

Business professional reviewing cryptocurrency and blockchain data on a laptop, representing VARA virtual asset licensing in Dubai

14 min read

Published: 11 August 2026

If you want to run an exchange, custody service, broker-dealer, lending platform, or advisory business dealing in crypto or virtual assets anywhere in Dubai, you cannot simply set up a company and start trading. You need a license from the Virtual Assets Regulatory Authority (VARA), Dubai’s dedicated crypto regulator, and that license is a completely separate process from forming your company. This guide walks through which activities actually require a VARA license, how the two-stage application works, what it costs, how long it takes, and where mainland versus DMCC licensing routes differ.

This article covers licensing only. If you are looking for how crypto profits and transactions are taxed in the UAE, see our separate guide at crypto-tax-uae-2026.

What Is VARA and Who Needs a License From It

VARA is the Dubai Government authority created in 2022 that regulates virtual asset service providers (VASPs) operating in and from Dubai, including its free zones, but excluding the Dubai International Financial Centre (DIFC), which has its own regulator under the DFSA. Any business offering a regulated virtual asset activity in Dubai, whether from the mainland or from a free zone like DMCC, needs a VARA license, not just a trade license.

VARA is explicit that no virtual asset activity is exempt from its oversight. That means a company cannot register a generic “IT consultancy” or “trading company” license and then quietly run a crypto exchange or custody wallet service. Regulators, banks, and payment partners check VARA’s public register before dealing with any virtual asset business, so operating without a license typically means you cannot open a corporate bank account, get payment rails, or work with any serious counterparty in Dubai.

Which Activities Actually Require a VARA License

Direct answer: VARA regulates eight categories of virtual asset activity, and if your business model touches any one of them, you need a license covering that specific activity before you can operate, market, or onboard clients.

The eight VARA-defined Virtual Asset (VA) activity categories are:

Advisory Services – giving advice on virtual assets or VA-related investments
Broker-Dealer Services – buying, selling, or dealing in virtual assets on behalf of clients or for the firm’s own account
Custody Services – holding or safeguarding virtual assets or the private keys that control them
Exchange Services – operating a platform that matches buyers and sellers of virtual assets
Lending and Borrowing Services – facilitating loans denominated in or secured by virtual assets
Management and Investment Services – managing portfolios or funds that include virtual assets
Transfer and Settlement Services – moving virtual assets between wallets or accounts on behalf of others
VA Issuance (Category 1) – launching new tokens, coins, or stablecoins, including ICOs and certain NFT projects

A single VASP can hold a license covering multiple activities under one overarching license, aggregated together, with the notable exception of certain custody services, which VARA treats separately due to the asset-safekeeping risk involved. Proprietary trading (a firm trading with its own money, not client funds) can, in some cases, be carried out under a No Objection Certificate from VARA rather than a full license, though high trading volumes can still trigger fuller licensing requirements. If you are unsure whether your specific model needs a license or a NOC, this is the kind of nuance VARA expects you to clarify with them directly, or with a licensed advisor, before launch.

Mainland vs DMCC/Free Zone: Which Route to Take

Direct answer: your company can be registered on the Dubai mainland through the Department of Economy and Tourism (DET), or in a Dubai free zone such as DMCC (which has an active virtual assets framework), but either way the actual VARA license approval sits with VARA itself, not the licensing authority.

The choice of mainland versus a free zone like DMCC affects your company formation costs, office requirements, and who you route your Initial Disclosure Questionnaire (IDQ) through, but it does not change VARA’s licensing requirements, activity categories, or the two-stage MVP process described below. DMCC has built out a specific Crypto Centre and virtual asset ecosystem, which many VASPs prefer for the community of custodians, exchanges, and compliance vendors already based there, alongside DMCC’s own free zone incentives. Mainland setup through DET can suit firms that need to serve UAE-wide clients without free zone restrictions, or that want a Dubai mainland address for banking relationships.

Factor	Mainland (via DET)	DMCC / Free Zone
Company registration authority	Dubai Department of Economy and Tourism	DMCC Authority (or relevant free zone)
VARA license authority	VARA (same in both cases)	VARA (same in both cases)
Typical business community	General UAE market access	Established crypto/Web3 ecosystem (DMCC Crypto Centre)
Office requirement	Physical office required for full license	Physical office required for full license
IDQ submission routed via	DET	DMCC or relevant free zone
Ownership structure	100% foreign ownership generally allowed	100% foreign ownership standard for free zones

Whichever route you choose, do not confuse getting a trade license (mainland or free zone) with getting a VARA license. They are two separate approvals, and you need both before you can legally operate a virtual asset business in Dubai.

The Two-Stage VARA Licensing Process

Direct answer: VARA licensing runs in two main stages, an initial approval stage that lets you legally set up the company but not yet operate, followed by a full VASP license stage that lets you actually go live with clients; some sources also describe an intermediate “MVP” (Minimum Viable Product) operating phase for certain activities.

Stage 1: Initial Disclosure Questionnaire (IDQ) and Approval to Incorporate (ATI)

You start by submitting an Initial Disclosure Questionnaire to DET (mainland) or your chosen free zone authority such as DMCC, covering your proposed business plan, beneficial ownership, and senior management. A portion of the application fee (commonly cited as around 50%) is paid upfront at this stage. If VARA is satisfied, you receive an Approval to Incorporate (ATI), which lets you legally form the company, lease an office, and build out your operational and compliance infrastructure. Crucially, an ATI does not let you conduct any virtual asset activity, market to clients, or take on business yet.

Stage 2: Preparatory and Operating MVP Phase

For many activity categories, VARA then moves qualifying applicants through a Minimum Viable Product (MVP) framework. In the Preparatory MVP phase, you submit detailed documentation proving your governance, risk management, technology, and compliance readiness. If that holds up, you can be elevated to an Operating MVP phase, where you are allowed to go live but under tight restrictions, typically limited to institutional and qualified retail clients, and under close ongoing supervision by VARA.

Stage 3: Full VASP License

To convert to a full, unrestricted VASP license, you need to finalize your physical Dubai office lease, complete all outstanding policy and compliance documentation, and pay the remaining license fees plus your first year of supervision fees. Once granted, your business appears on VARA’s public VASP register, which is what banks, payment processors, and institutional counterparties check before working with you.

Stage	What you can do	What you cannot do yet
Approval to Incorporate (ATI)	Form the legal entity, lease office, hire, build compliance infrastructure	Any virtual asset activity, marketing, or client onboarding
Preparatory MVP	Submit full regulatory documentation, undergo VARA review/interviews	Live trading or client transactions
Operating MVP	Live operations, restricted to institutional/qualified retail clients	Serving general retail clients without restriction
Full VASP License	Full operations, listed on VARA’s public register	N/A (fully licensed)

VARA License Costs and Timeline (Approximate)

Direct answer: total government fees for a VARA license commonly fall somewhere between roughly AED 40,000 and AED 100,000+ depending on the activity category and business complexity, and the realistic timeline from first submission to full license is typically 4 to 7 months for a well-prepared applicant; these figures are approximate and should always be verified directly with VARA or your licensing advisor before budgeting.

Reported cost ranges (not official VARA-published fee tables, so verify with VARA):
– Initial application fees for the ATI stage are commonly cited in the AED 40,000 to AED 100,000 range depending on the complexity of the proposed activities
– Certain activities, such as fund/portfolio management or token issuance, have been reported at around AED 100,000 in application fees, alongside minimum paid-up capital requirements (reported around AED 250,000 for management/investment activities)
– Broker-dealer activities have been reported as requiring higher paid-up capital, in the range of AED 400,000 to AED 600,000 or more
– On top of application fees, VARA charges annual supervision fees, and the first year’s supervision fee is typically due before the full license is issued

Reported timeline ranges (verify with VARA for your specific case):
– ATI stage: roughly 1 to 3 months, including background checks on shareholders and senior management
– MVP/preparatory stage: roughly 1 to 5 months depending on the source and activity complexity
– Full license stage: roughly 2 to 3 months once MVP requirements are satisfied
– Total elapsed time: most advisory sources converge on a realistic range of 4 to 7 months for prepared applicants, with some citing up to 6-12 months for more complex activity combinations

Beyond the license fees themselves, VARA also imposes ongoing prudential requirements once you are licensed: maintaining Net Liquid Assets of at least 1.2 times monthly operating expenses, holding Reserve Assets equal to 100% of client liabilities on a one-for-one basis with independent audits at least every six months, and carrying professional indemnity, directors and officers, and commercial crime insurance from a regulated insurer. These are not one-time costs, they are continuous compliance obligations that need to be budgeted into your operating model from day one.

Legacy Operators: The Dubai Legacy Programme

If your firm was already carrying out virtual asset activities in Dubai before February 2023, before VARA’s regulatory framework came into force, you are treated as a “Legacy VA Operator.” VARA has invited these firms to apply through the Dubai Legacy Programme, or in some cases a Legacy Operating Permit (LOP), which can offer up to a 50% discount on licensing fees and reduced capital requirements for a limited transition window (reported as around 12 months). If this applies to your business, the practical advice is to apply immediately rather than wait, since operating without any VARA authorization once the transition window closes exposes the business to enforcement action.

Why This Is Not the Same as Just Registering a Company

A trade license from DET or a free zone like DMCC tells the UAE government what kind of business activity you are licensed to carry out generally. A VARA license is a separate, activity-specific regulatory authorization that sits on top of your trade license, and it comes with its own governance, capital, insurance, and reporting obligations that a normal trade license never requires. Many founders underestimate this and assume that once their company is formed, they can simply start operating. In reality, forming the company (via mainland DET or a free zone such as DMCC) is only step one of the ATI stage described above, and you are still legally barred from conducting any virtual asset activity until VARA grants you either an Operating MVP status or the full VASP license.

This is also why banking is so difficult for unlicensed crypto businesses in Dubai: banks check the VARA public register before opening or maintaining accounts for anything that looks like a virtual asset business, regardless of what your trade license says.

Frequently Asked Questions

Do I need a VARA license if I only offer crypto advisory services, not trading?
Yes. Advisory Services is one of the eight regulated VA activity categories under VARA, so giving advice on virtual assets or VA-related investments in or from Dubai requires a VARA license covering that specific activity, even if you never custody or trade assets yourself.

Can I get a VARA license through a free zone other than DMCC?
Yes, in principle. VARA is the sole regulator for virtual asset activity across Dubai’s mainland and free zones (excluding DIFC), so your Initial Disclosure Questionnaire can be routed through DET for mainland, or through DMCC or another relevant Dubai free zone, but DMCC currently has the most developed crypto-specific ecosystem and is the most common choice.

How much does a VARA license cost in total?
Reported figures put initial application fees roughly between AED 40,000 and AED 100,000+ depending on activity type, plus capital requirements that can range from around AED 250,000 up to AED 600,000+ for higher-risk activities like broker-dealer services, plus ongoing annual supervision fees. These numbers vary by source and are not an official published VARA fee schedule, so confirm exact figures with VARA or a licensed advisor for your specific activity mix.

How long does the full VARA licensing process take?
Most current sources put the realistic total timeline at 4 to 7 months from your Initial Disclosure Questionnaire submission to a full VASP license, assuming your documentation is well prepared and you respond quickly to VARA’s feedback. Complex activity combinations or incomplete applications can push this closer to 12 months.

Is a VARA license the same as a crypto trading license or a normal trade license?
No. A trade license (from DET or a free zone) authorizes your general business activity, while a VARA license is a separate, activity-specific regulatory authorization required before you can legally conduct any of the eight regulated virtual asset activities. You typically need both.

Can I operate and take on clients while I only hold an Approval to Incorporate (ATI)?
No. An ATI only allows you to legally form the company, lease office space, and build your operational and compliance infrastructure. You are not permitted to conduct any virtual asset activity, market services, or onboard clients until you reach at least Operating MVP status or the full VASP license.

What happens if I operate a virtual asset business in Dubai without a VARA license?
VARA states no virtual asset activity is exempt from its oversight, meaning unlicensed operation is a regulatory breach that can trigger enforcement action, and in practice unlicensed businesses also cannot get UAE banking, payment processing, or institutional counterparties, since VARA’s public VASP register is the standard check used across the industry.

Does VARA cover stablecoins and NFT projects, or just crypto exchanges?
Yes. Launching new tokens, coins, or stablecoins, and certain NFT projects, fall under VARA’s “VA Issuance (Category 1)” activity, which carries its own higher scrutiny and reported fee levels (around AED 100,000) due to the investor protection risks involved in new token launches.

I was already running a crypto business in Dubai before VARA existed. What do I do?
You likely qualify as a Legacy VA Operator. VARA’s Dubai Legacy Programme (and the related Legacy Operating Permit) is designed for firms operating before February 2023, offering discounted fees and reduced capital requirements for a limited transition period, applied for through DET or your free zone. Apply as early as possible rather than waiting.

Can one VARA license cover multiple activities, like exchange and custody together?
Generally yes, a VASP can apply to be licensed for multiple activities and aggregate them under one overarching license, with the main exception being certain custody services, which VARA treats with separate requirements due to the asset-safekeeping risk involved.

Getting Licensed the Right Way

VARA licensing is a genuine regulatory process, not a formality layered on top of company registration. Getting the activity classification right from the start, choosing the correct route between mainland and DMCC, and preparing documentation that survives VARA’s review without repeated back-and-forth all directly affect how long your 4 to 7 month timeline actually stretches out to. If you are setting up a virtual asset business in Dubai and want to make sure your company structure, activity classification, and compliance documentation are aligned before you submit to VARA, reach out to Qaspro Global on WhatsApp at https://wa.me/971551539679 to talk through your specific setup.

If setting up this business also means moving your own employment visa or hiring staff under a new sponsor while you get licensed, Yalah Dubai’s guide on UAE Employment Visa Sponsor Transfer 2026 explains how to change employers and complete the GDRFA/ICP status amendment without leaving the country.