United Arab Emirates compliance map
VARA issuance guidance, the federal payment-token regime, and deeper UAE money-rail execution.
Overview
The UAE splits digital-asset regulation across a federal money layer and venue-specific market layers. CBUAE governs payment tokens federally, while ADGM, the DFSA, and VARA each run venue-specific market regimes. The Regulatory authorities table below shows the full allocation.
What is live: CBUAE payment-token regime from August 2024 under the PTSR; ADGM FRT framework from January 2026; DFSA Crypto Token update from January 2026; VARA Issuance Rulebook from June 2025, now supplemented by April 2026 guidance that makes issuance and licensed-distributor workflow more explicit. See Current status table below.
The execution side of the stack is also getting deeper. Fresh CBUAE annual-report disclosures, the first government Digital Dirham transaction, and Aani scale metrics make the federal money rails look more executable, even though they do not by themselves prove a single end-to-end issuance route for private issuers.
AED-linked issuance is the clearest federal constraint. A free-zone or Dubai structure does not displace the CBUAE route for AED stablecoin issuance — VARA’s FRVA section explicitly excludes AED-linked tokens. The CBUAE register now shows multiple payment-token entries.
Institutional pilot routes are available through ADGM, DIFC, and VARA, but each is venue-bounded — see Activation paths below. No single UAE licence covers every money form: payment tokens are federal, market activity is venue-specific, and no venue can override the CBUAE AED-issuance gate.
The Islamic-finance overlay is separate from the venue map. Where a structure runs through an Islamic financial institution, the HSA and Governance Standard control the Shari’ah layer. AAOIFI standards are mandatory.
UAE regulatory architecture
Operations under UAE rules
| Operation | Route available now | Blocking item or boundary |
|---|---|---|
| Treasury conversion and AED payout | Live via CBUAE Art. 8 plus a named venue licence. | Licensed conversion route, sanctions checks, and VARA Travel Rule where applicable. |
| OTC custody and execution | Live in ADGM under FSRA guidance and DIFC under DFSA client-asset rules. | Venue authorisation required. Bank payout is a separate money-lane question under PTSR. |
| AED stablecoin issuance | Only through the CBUAE DPT route. | DPT issuer licence, Art. 12 restrictions, Art. 22 reserves, Art. 26 white paper. |
| Non-AED stablecoin issuance and use | Live in ADGM, DIFC, and Dubai under ADGM FRT, DFSA fiat crypto token, and VARA FRVA. | Venue-limited. Federal payment use may need Art. 8 non-objection. |
| Tokenized-asset operations | Live in ADGM under the digital-assets framework. Developing federally. | Federal security-token rules await CMA consultation final text. |
| Bank-money and tokenized deposits | Partial. Digital Dirham is separate. VARA FRVA excludes interbank-only tokenized deposits. | Standalone tokenized-deposit classification is not yet settled in a dedicated public rulebook. |
| Bank-money payout lanes | Bank + CBUAE + AML controls. | Live where beneficiary and counterparty checks clear CBUAE guidance. |
| Cross-border settlement | Live through named licensed routes. Market signals: CBUAE–HKMA cooperation, Emirates NBD digital bond. | Depends on whether the instrument is a payment token, FRT/FRVA, or security. |
Activation paths
| Path | Status and prerequisites | Unlocks or key block |
|---|---|---|
| ADGM institutional pilot | Live. FSRA authorisation plus five-stage process in the VA guidance. FRT rules from 2024 and 2026. | ADGM VA, FRT, and digital-security activity. ADGM-only scope. |
| DIFC institutional services | Live. DFSA authorisation under the Crypto Token framework with GEN 3A.2.1 since 2026-01-12. | Custody, treasury, broker-dealer, and fund use. DIFC-only scope. |
| Dubai VARA operating lane | Live. VARA licence plus Category 1 issuance. Marketing Regulations since 2024-10-01. | Dubai issuance, dealing, and marketing. AED-linked FRVAs pushed to CBUAE. |
| Federal CMA lane | Live from 2026-01-01 under Federal Decree-Law No. 32 of 2025. | VASP and capital-market routes outside Dubai. Security-token detail not yet final. |
| CBUAE DPT issuer lane | Live. DPT issuer licence under Art. 5 with Art. 22 reserves and Art. 26 white paper. | AED payment-token issuance and redemption. Federal licence required. |
| CBUAE foreign-token non-objection | Live. Art. 8 non-objection and Art. 9 foreign-issuer registration. | Named foreign payment-token conversion or use routes. No automatic nationwide access. |
Current status
| Area | Status | Since |
|---|---|---|
| VARA issuance guidance package | Published. Guidance on the Virtual Asset Issuance Rulebook plus Category 1, Category 2, whitepaper, and risk-disclosure examples. | 2026-04-09 |
| VARA AML/CFT/PF circular | Published. Circular. | 2026-03-04 |
| VARA Travel Rule circular | Published. Circular. | 2026-02-24 |
| CBUAE–HKMA cooperation | Published. CMU notice. | 2026-02-12 |
| DFSA crypto FAQs | Published. FAQ notice. | 2026-02-12 |
| Emirates NBD digital bond | Market event. Announcement. | 2026-01-19 |
| DFSA Crypto Token update | In force. Major update. | 2026-01-12 |
| VARA qualified-investor guidance | Published. Investor circular. | 2026-01-08 |
| CMA created | In force. Federal Decree-Law No. 32 of 2025. | 2026-01-01 |
| ADGM FRT activity amendments | In force. 2026 amendments. | 2026-01-01 |
| VARA issuance rulebook | In force. Issuance Rulebook. | 2025-06-19 |
| ADGM FRT issuance framework | Live. FSRA announcement. | 2024-12-05 |
| VARA marketing rules | In force. Marketing Regulations. | 2024-10-01 |
| CMA–VARA allocation | In effect. Cooperation agreement. | 2024-09-09 |
| CBUAE payment-token regime | In force. PTSR. First DPT issuer in 2024 Annual Report. | 2024-08-31 |
Items awaiting regulatory confirmation
| Item | Authority | What it would unlock or clarify |
|---|---|---|
| Federal security-token and commodity-token rules | CMA | Would harden federal tokenised-securities routes. Consultation opened 2025-01-22, final text not yet public. |
| Tokenized-deposit classification beyond interbank use | CBUAE, VARA, ADGM FSRA | Would clarify bank-money token design. VARA FRVA excludes interbank-only; no standalone public rulebook. |
| Foreign payment-token criteria for federal flows | CBUAE | Would expand non-AED stablecoin routes. Today case-specific under Art. 8. |
| Cross-venue reliance beyond Dubai-to-wider-UAE | CMA, ADGM, DFSA, VARA | Would simplify multi-venue activation. No general passport across venues. |
| Standing rulebook after real-estate tokenisation pilot | VARA | Would turn pilot into repeatable route. Current position: pilot notice from 2026-02-19. |
| Digital-asset Shari’ah templates | HSA and CBUAE | Would shorten Islamic route design. Public framework today is general HSA mandate with no digital-asset-specific template. |