Key takeaways
- The UAE has not banned crypto. Its rules license and supervise the firms that sell, hold or move virtual assets for customers.
- Dubai's Law No. (4) of 2022, issued on 28 February 2022, created VARA and covers the whole emirate, free zones included, except the DIFC.
- VARA names eight licensed activities. A firm must be licensed for each activity it offers, and its entry on the public register lists them.
- Five regulators cover most of what a retail customer will meet: VARA in Dubai, the FSRA in ADGM, the DFSA in the DIFC, and at federal level the Central Bank and the Capital Market Authority.
- A licence is supervision of the firm, not protection of your money. VARA's own marketing rules require firms to say so.
The short answer
Yes. Buying, holding and selling crypto through a licensed firm is legal in the UAE. What the law restricts is providing crypto services to others without a licence.
The clearest statement is in Dubai. Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai was issued on . Article 15 says that no person may carry on a regulated activity in the emirate without a permit from VARA, and Article 16 lists the activities: running a platform, exchanging virtual assets for currency or for each other, transferring them, keeping them in custody, providing wallet services, and offering and trading tokens. Each is a service provided to someone else. We read all 28 articles and found none that requires a customer to hold a permit to buy or own a virtual asset.
So “is crypto allowed in the UAE” and “is cryptocurrency legal in Dubai” have the same answer: yes, and the practical question is which firm you use and who supervises it. This guide is part of the Fasset Learn hub. A second guide there looks at whether crypto is halal, which is a separate question.
Terms used in this guide
- Virtual asset. The legal term for crypto. Dubai's law defines it as “a digital representation of value” that can be traded, transferred, used for payment or held for investment.
- VASP. A virtual asset service provider: a firm authorised to carry on a regulated activity.
- Licence. The authorisation a VASP holds. Dubai's law calls it a permit; VARA's register calls it a VASP Licence.
- In-Principle Approval (IPA). A conditional step before a licence. VARA says a firm with an IPA may not start operations or serve clients.
- Financial free zone. ADGM in Abu Dhabi and the DIFC in Dubai, each with its own financial regulator.
- Payment token. The Central Bank's term for what most people call a stablecoin.
Who regulates crypto in the UAE
Five regulators share the map, and the one that matters to you depends on where the firm serving you is established. There is no single UAE crypto law: crypto regulation in the UAE is a federal layer plus the rulebooks of Dubai and of the two financial free zones.
| Regulator | Where it applies | What it covers | Where to check |
|---|---|---|---|
| VARA, the Virtual Assets Regulatory Authority | The Emirate of Dubai, including free zones and Special Development Zones, excluding the DIFC | Virtual asset services under Law No. (4) of 2022, in eight licensed activities | VARA public register |
| FSRA, the Financial Services Regulatory Authority | Abu Dhabi Global Market (ADGM) | Virtual assets, fiat-referenced tokens and digital securities. A firm needs a Financial Services Permission | FSRA public register |
| DFSA, the Dubai Financial Services Authority | Dubai International Financial Centre (DIFC) | Financial services relating to crypto tokens carried on in or from the DIFC | DFSA public register. Rules: DFSA Rulebook, GEN chapter 3A |
| CBUAE, the Central Bank of the UAE | The UAE; the regulation's Article 2 prohibitions exclude the financial free zones | Payment tokens (stablecoins): issuance, conversion, custody and transfer | Payment Token Services Regulation |
| CMA, the Capital Market Authority | Federal level; exact perimeter to be confirmed | A Virtual Assets Framework with eight regulated activities of its own | CMA list of licensed companies |
| Each row was written from the regulator's own pages, read on 12 October 2026. See Sources. | |||
Dubai: VARA
VARA regulates virtual asset services everywhere in Dubai except the DIFC. Article 3 of Law No. (4) of 2022 sets that scope. VARA's website adds a point that matters to customers elsewhere: a firm needs the licence before it operates “in or from the Emirate of Dubai”, wherever its customers live. On 12 October 2026 the register listed 57 licensed firms.
Abu Dhabi Global Market: FSRA
In ADGM the regulator is the FSRA. ADGM's digital assets page says a firm that carries on virtual asset, fiat-referenced token or digital securities activities there must apply to the FSRA for a Financial Services Permission. The FSRA calls its register the official public record of the firms and individuals it approves or has approved.
Dubai International Financial Centre: DFSA
The DIFC is outside VARA's remit, so a firm based there answers to the DFSA. Rule GEN 3A.2.1 of the DFSA Rulebook bars a financial service relating to a crypto token in or from the DIFC unless a condition is met. For most tokens the firm must first assess the token and conclude, on reasonable grounds, that it is suitable. For what the Rulebook calls Fiat Crypto Tokens, the DFSA must be satisfied. The rule was last amended in December 2025.
Onshore federal level: the central bank and the capital markets regulator
Two federal bodies sit above the emirate level. The Central Bank of the UAE regulates stablecoins through its Payment Token Services Regulation, which its rulebook shows as in force and effective from 31 August 2024. The federal securities regulator is the Capital Market Authority, the name given to the Securities and Commodities Authority by two federal decree-laws that took effect on 1 January 2026. On 13 April 2026 it announced a Virtual Assets Framework with five modules and eight regulated activities. Those eight are its own list and differ from VARA's.
Every entry on VARA's register also shows a “CMA Registration Number”, written as CMA-VASP followed by digits. We read that field as a registration with the Capital Market Authority, but neither register page says so in words.
VARA's licensed activities, in brief
VARA names eight licensed activities, and a firm must be licensed for each one it offers. They are Advisory Services, Broker-Dealer Services, Custody Services, Exchange Services, Lending and Borrowing Services, Management and Investment Services, Transfer and Settlement Services, and VA Issuance Category 1. A firm can combine several under one licence, with one exception: VARA says custody is the only activity that must sit in a separate legal entity with its own licence. Each register entry also carries a licence condition that names the investor classes the firm may serve. The walkthrough below reads one entry field by field.
How to check whether a firm is licensed
Checking a Dubai licence takes four steps and a few minutes, and it uses one page: the firm's entry on VARA's public register. We ran the check on Fasset FZE on 12 October 2026. The figure shows the fields we read, and the steps explain what each one tells you.
Open the VARA public register
Go to the public register on vara.ae. Type the address yourself and do not follow a link from an advert or a message. The register has two tabs. “Licensed VASPs” lists the firms that may serve clients. “In-Principle Approval” lists applicants that may not yet do so.
Match the legal name and reference
Search for the legal entity named in the firm's footer or terms, not the brand. Fasset's Dubai entity is Fasset FZE. Its entry shows the VASP Name “Fasset FZE” and the Reference VL/23/07/002. The firm's own site should print the same reference. A brand that names no legal entity fails this step.
Read the activities and licence condition
The entry shows Licence Type “VASP Licence” and Licensed Activities “Broker-Dealer Services”. The Licence Condition says the firm is permitted to serve institutional, qualified and retail investors. Read this as the limit of the licence: Fasset FZE is licensed as a broker-dealer, not for Exchange Services, Custody Services or lending. If a firm sells you a service that is missing from its entry, the licence does not cover it.
Check the status and the website
The Status field reads “Active” and Licence Issued reads 2023/11/30, that is . The entry also gives an office address at Dubai World Trade Center and the Website URL https://fasset.com/. Compare that URL with the address bar of the page you are using. A lookalike domain is a warning sign, and the security page explains how to spot impersonation of Fasset.
After four steps you know who the legal entity is, which activity it is licensed for, whom it may serve, and that the licence was active on the day you looked. The register does not tell you whether a price is fair or whether your money is protected. For a firm in ADGM or the DIFC, run the same check on the FSRA or DFSA register.
A licence is supervision of the firm. It is not protection of your money.
Is USDT legal in the UAE? Stablecoins and payment tokens
USDT is not banned in the UAE, and licensed firms in Dubai list it. Two layers of rules apply: the firm's own licence, and the Central Bank's regulation of stablecoins as payment tokens.
The first layer is the firm's licence. Fasset FZE's disclosure page on fasset.com listed 42 virtual assets on 6 October 2026, among them Tether USDT and Circle USDC.
The second layer is the Central Bank's Payment Token Services Regulation, Circular No. 2/2024. It defines a payment token as a virtual asset that “purports to maintain a stable value” by reference to a fiat currency, and it regulates three services: issuing payment tokens, converting them, and holding and transferring them. Under Article 2(1), nobody may perform those services in the UAE, or direct them at people in the UAE, without a Central Bank licence or registration.
For most readers the practical clause is Article 2(7), on paying with tokens. A merchant in the UAE may accept a virtual asset as payment for goods or services in two cases only: a dirham payment token from a licensed issuer, or a foreign payment token (one denominated in another currency) from a registered foreign issuer, used to buy a virtual asset or a virtual asset derivative. The article excludes the financial free zones from “the UAE”. Article 40 set a one-year transition period that the Central Bank may extend, so check the current position before you rely on this.
In plain terms, buying or selling USDT through a licensed firm is one thing and paying a shop in USDT is another, and the regulation restricts the second. How these rules apply to a particular token and a particular firm is a legal question that this guide does not answer. The product page shows how to buy USDT in the UAE with AED through Fasset FZE.
What a stablecoin is not
USDT is a stablecoin issued by Tether. It isn't a bank deposit and isn't covered by a deposit guarantee scheme.
The warning you should see on any crypto promotion
A promotion of a virtual asset in or targeting the UAE must carry a prominent risk disclaimer. That is a rule of VARA's Regulations on the Marketing of Virtual Assets and Related Activities 2024, effective from .
The regulations apply to every entity, local or foreign, whether VARA licenses it or not, with a few exemptions such as journalism. Their definition of marketing is wide: adverts, social media posts, sponsored content, events, airdrops and educational articles such as this one. Three requirements matter most to a reader:
- The promotion must say that virtual assets may lose their value in full or in part and are subject to extreme volatility.
- It must state clearly that an investor can lose all the money they invest and has no form of financial protection.
- It must not suggest that an investment is low risk or that a return is certain, and it must not create urgency or a fear of missing out.
A virtual asset service may be marketed only by a firm that VARA licenses for that service, or on that firm's behalf and with its approval. So a page, a post or a direct message that sells crypto without the warning, or that promises a return, has failed the regulator's test before you check anything else. Treat it as a red flag. This page carries the warning under the headline and again in the footer.
Is crypto taxed in the UAE?
We could not confirm a crypto-specific tax rule on the Ministry of Finance or Federal Tax Authority websites on the day of writing, so this guide does not cover tax. The Ministry's tax page describes three federal taxes: value added tax, introduced on 1 January 2018 at a standard rate of 5%, a corporate tax under a law issued on 9 December 2022, and a domestic top-up tax. Neither that page nor the Ministry's VAT page mentions virtual assets. Ask a qualified tax adviser how your own trades, income or business are treated.
What stays risky even when it is legal
Legal does not mean low risk. A licence governs how a firm behaves, not what happens to the price of what you buy. Five risks remain after the licence check.
- Unlicensed firms and cash deals. A seller who is on no register, or who asks for cash or a transfer to a personal account, leaves you with no supervised firm to complain to.
- Impersonation of licensed brands. A fake site can copy the name and licence number of a real firm. The Website URL field on the register is your reference. Fasset states that it never asks for your password, 2FA code or recovery codes.
- Volatility. The price of a virtual asset can fall far and fast. The example below shows the arithmetic.
- No protection scheme. VARA's required wording says an investor does not benefit from any form of financial protection. Dubai's law adds, in Article 24, that VARA is not liable for the obligations of the firms it licenses.
- Paused transactions. Licensed firms must apply anti-money-laundering controls. Expect identity checks and questions about where your funds came from, and expect that a firm can pause a transaction until it has the answers.
Worked example with illustrative numbers
Suppose you buy AED 10,000 of a volatile virtual asset through a licensed firm and its price falls by 40%. Your holding is worth AED 6,000. The firm's licence has not changed, the register still says Active, and no scheme pays you the AED 4,000 difference. A 40% rise from there takes you to AED 8,400, not to AED 10,000: after a 40% fall you need a rise of about 67% to get back to where you started. These figures are invented to show the arithmetic. They are not a forecast and not Fasset prices.
The full list of risks is in the virtual asset risk disclosure.
What this means for Fasset customers
One Fasset service is covered by the VARA licence: buying and selling virtual assets through Fasset FZE. Fasset FZE's VARA licence covers Broker-Dealer Services carried on in or from Dubai. Whether Fasset FZE can serve residents of the other emirates, and on what basis, has not been confirmed.
Two Fasset products are not covered by that licence. The Fasset Card is provided by Fasset Labuan Limited, and the USD account is provided through Fasset Labuan Limited with a third-party provider. Fasset is not a bank. Before you use any of them, read these pages:
- How to buy and sell USDT with AED through Fasset FZE, the service the VARA licence covers.
- Fasset licences and how to verify them, entity by entity.
- The legal entities behind Fasset and which one provides each product.
- What Fasset charges, with the figures that are published and the ones that are not.
- The guide to how a USD account works, for the product that sits outside the VARA licence.
Frequently asked questions
Is Bitcoin legal in Dubai?
Yes. Bitcoin is a virtual asset under Dubai's Law No. (4) of 2022, and that law regulates the firms that offer it and does not prohibit the asset. Buy and sell through a firm that appears on VARA's public register with the status Active, or on the DFSA's register if the firm is based in the DIFC. The price risk stays with you.
Is crypto banned in the UAE?
No. The UAE has not banned crypto. It licenses the businesses that provide crypto services. Dubai created VARA by a law issued on 28 February 2022, ADGM and the DIFC have their own regulators, and the Central Bank and the Capital Market Authority set federal rules. Some things are prohibited, such as offering services without a licence, and services or promotions for privacy tokens and algorithmic stablecoins.
Do individuals need a licence to buy crypto?
We found no such requirement in Dubai's Law No. (4) of 2022. Its permit requirement applies to whoever carries on a regulated virtual asset activity, such as running a platform or exchanging assets for clients. A licensed firm will still ask you to prove your identity and the source of your funds. Take legal advice if you trade on behalf of other people.
Which crypto platforms are licensed in the UAE?
The current list is on the regulators' public registers, not in any article. VARA's register listed 57 licensed virtual asset service providers in Dubai when we read it on 12 October 2026, each with its reference, activities and status. The FSRA publishes a register for ADGM, and the DFSA one for the DIFC. Check the entry yourself on the day you open an account.
Does a licence mean my money is protected?
No. A licence means the firm is supervised. It does not insure your holdings. VARA's marketing regulations require firms to tell you that you can lose all the money you invest and that you do not benefit from any form of financial protection. Dubai's law also states that VARA is not liable for the obligations of the firms it licenses.
Sources
All eight sources were opened on 12 October 2026. Statements about Fasset come from fasset.com, read on 6 October 2026, and from the VARA register.
- Government of Dubai, Supreme Legislation Committee, Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai (English version; the Arabic text prevails): dlp.dubai.gov.ae, Law No. (4) of 2022.
- Virtual Assets Regulatory Authority, Licensed Activities: vara.ae/en/licenses-and-register/licensed-activities/.
- Virtual Assets Regulatory Authority, public register entry for Fasset FZE: vara.ae/en/licenses-and-register/public-register/fasset-fze/.
- Virtual Assets Regulatory Authority, Regulations on the Marketing of Virtual Assets and Related Activities 2024: rulebooks.vara.ae, Marketing Regulations 2024.
- Central Bank of the UAE, Payment Token Services Regulation (Circular No. 2/2024): rulebook.centralbank.ae/en/rulebook/payment-token-services-regulation.
- Abu Dhabi Global Market, FSRA Public Register: adgm.com/public-registers/fsra.
- Dubai Financial Services Authority, DFSA Rulebook, General Module, Rule GEN 3A.2.1: dfsaen.thomsonreuters.com/rulebook/gen-3a21.
- Capital Market Authority, notice of Federal Decree-Laws No. (32) and No. (33) of 2025: uaecma.gov.ae/en/new-cma-law.
Not legal or investment advice
For information only. Not investment, legal, tax or religious advice. Rules change, and the registers are the record that counts: check them on the day you act.