United Arab Emirates — License Map

Last Updated: June 2026

The UAE is the only jurisdiction globally where three distinct crypto activity types — custody, stablecoin issuance, and mining — can each be licensed through multiple competing regulators operating under different legal systems. This page consolidates the licensing requirements, costs, timelines, and strategic considerations across all three activities.

1. Regulatory Architecture

The UAE operates a five-authority model with no single unified framework. Each regulator governs a distinct geographic or functional perimeter:

Key structural features:

• No passporting between regulators — a VARA license does not extend to ADGM or DIFC, and vice versa
• SCA replaced by the CMA (1 Jan 2026): the federal Securities and Commodities Authority (SCA) was replaced in full by the independent Capital Market Authority (CMA) under Federal Decree-Laws No. 32 and No. 33 of 2025, effective 1 January 2026; the CMA assumed all SCA rights and obligations and its mandate now expressly covers virtual assets
• CMA federal VASP framework (Decision No. 4/R.M/2026, effective 13 Feb 2026) replaced the prior SCA virtual-asset regime in full with an activity-based model of 8 licensed activities (incl. a dedicated Custody Services licence), materially higher capital (AED 500,000–4,000,000 by activity) plus a 6-month operating-expense buffer, and a one-year transition window to 13 February 2027; it operates alongside VARA (Dubai) and ADGM/DIFC and expressly excludes the financial free zones
• CMA-VARA mutual recognition (Aug 2025, now carried over to the CMA) provides federal visibility but does not grant cross-emirate operating rights for free zones
• Federal Decree-Law No. 6 of 2025 (effective 16 Sep 2025) sweeps DeFi, wallets, bridges, and blockchain infrastructure under CBUAE authority, with a compliance deadline of 15 September 2026
• DIFC and ADGM are explicitly excluded from Federal Decree-Law No. 6, preserving their regulatory independence

Additional licensing zones for mining:

2. Activity Comparison Table

Thirteen licensing dimensions compared across all three activity types. Where VARA and ADGM offer parallel pathways, both are shown.

3. Multi-Activity Licensing

VARA: Dedicated Entity Requirement

VARA's Custody Services Rulebook mandates that custody must be operated through a separately licensed entity. Custody cannot be combined with other virtual asset activities under a single license. This means:

• A single corporate group can hold multiple VARA licenses (custody, exchange, issuance), but each requires a distinct legal entity
• Each entity needs its own capital, office, key personnel, and compliance infrastructure
• Application fee structure: AED 100,000 for the first activity + AED 50,000 per additional category (per entity)

Can one VARA entity do custody + stablecoin issuance? No. Custody requires a dedicated entity. Stablecoin issuance (FRVA) also requires ring-fencing. A group would need at minimum two VARA-licensed entities, each with its own capital base (AED 4M for custody + AED 10M for FRVA issuance = AED 14M minimum combined capital).

ADGM: Activity Restrictions for FRT Issuers

Under the ADGM framework:

• FRT issuers cannot carry on other regulated activities or hold ownership stakes in other entities
• However, group members may conduct separate regulated activities under their own FSRA authorizations
• Custody (non-public funds) requires only USD 250,000 in capital, making a group structure with separate custody and issuance entities more feasible
• Combined group capital for custody + FRT issuance: USD 250,000 + USD 2,000,000 = USD 2.25M minimum

VARA vs ADGM for Multi-Service Operations

Mining + Other Activities

Pure mining does not fit neatly into any VARA activity category. However:

• Mining operations that sell mined assets may trigger VARA Exchange or Broker-Dealer licensing
• Mining pools accepting third-party hashrate may trigger VA Management requirements
• A DMCC Crypto Centre license is the most direct route for mining-focused businesses and can coexist with a VARA or ADGM license held by an affiliated entity
• Mining operations with institutional trading or custody trigger ADGM FSRA licensing separately

4. The Speed Advantage

The UAE markets itself as a fast-licensing jurisdiction. Here is how marketed timelines compare with actual practitioner-reported timelines:

Marketed vs Actual Timelines

What Actually Determines Speed

Practitioner reports consistently identify these as the real delay drivers:

1. AML/KYC framework quality — 38% of VARA initial submissions in 2025 required material amendments due to AML policy deficiencies
2. Capital documentation — proving source of funds and satisfying capital adequacy takes longer than expected
3. Office verification — regulators physically inspect premises; flexi-desks fail
4. Key personnel availability — finding UAE-resident, Fit and Proper individuals with 10+ years relevant experience is a bottleneck
5. Banking onboarding — even after license issuance, bank account opening takes 2-4 months, delaying operational launch

Firm Precedents

5. Consolidated Banking Access

Banking access remains one of the most significant practical challenges across all three activity types. Licensed status from a recognised regulator is a prerequisite before any bank will engage.

Banks Serving Crypto Entities (as of June 2026)

Banking Onboarding Realities

• Timeline: 2-4 months after licensing is secured — often an underestimated bottleneck
• Requirements: Blockchain analytics integration (Chainalysis or Elliptic), Enhanced Due Diligence, verified UBO information, clear transaction flow documentation
• Stablecoin issuers face additional scrutiny: S&P Global has noted that stablecoin reserve requirements could exacerbate deposit concentration risk at reserve banks
• Mining operations face energy-cost banking considerations: DEWA commercial rate ~AED 0.38/kWh (~USD 0.10/kWh); Abu Dhabi ADDC may offer lower industrial rates

6. Total Cost: Multi-Activity Operation

An entity (or corporate group) seeking to operate across all three activities in the UAE faces the following cost structure:

Scenario: Custody + Stablecoin Issuance + Mining (Year 1)

Option A: VARA-centred (Dubai)

Option B: ADGM-centred (Abu Dhabi)

Option C: Hybrid (ADGM custody + VARA issuance + DMCC mining)

Annual Ongoing Costs (Post-Year 1)

Note: These estimates exclude energy costs for mining operations, which depend entirely on scale. MARA Holdings operates at 1.2 EH/s in Abu Dhabi using immersion-cooled facilities with negotiated grid-interruptible arrangements.

Comparative Cost Context

7. Regulatory Direction

Hub Ambition

The UAE has an explicit national strategy to become the world's preeminent crypto hub:

• Dubai Economic Agenda D33: Aims to make Dubai a top-3 global financial hub; crypto/digital assets are a key pillar
• UAE Digital Economy Strategy (Apr 2022): Target to double digital economy GDP contribution from 9.7% to 19.4% by 2031
• Market indicators: USD 30+ billion in crypto inflows (Jul 2023 - Jun 2024); institutional transfers (USD 1M-10M) up ~55% year-on-year; ~30% of UAE population owns cryptocurrency

CBUAE Digital Dirham

The Central Bank Digital Currency program is advancing in parallel with private stablecoin licensing:

• mBridge platform: Multi-central-bank CBDC platform (BIS Innovation Hub, Bank of Thailand, HKMA, CBUAE) — world's first operational multi-CBDC platform
• First cross-border transfer: AED 50 million via mBridge (Jan 2024)
• Retail CBDC: Retail Digital Dirham rollout reported from late 2025 into early 2026 (secondary sources cite a March 2026 retail launch); first phase free for users; offers instant peer-to-peer transfers. No primary CBUAE confirmation of a completed retail launch has been located (re-checked 2026-06-06) — see Verification Notes. The CBUAE's own progress report (published 31 Jul 2025, reported via Zawya) describes a completed real-value retail pilot and states the central bank is moving "towards officially launching" the CBDC "in the near term" — i.e. as of mid-2025 the retail launch was still prospective, not live; the official strategy had cited an expected Q4 2025 rollout.
• Coexistence question: Relationship between private dirham stablecoins (AE Coin, Zand AED, DDSC) and the Digital Dirham remains evolving — the CBUAE has positioned the retail CBDC as complementary to licensed private payment tokens, with design provisions anticipating future interoperability

AED Stablecoin Ecosystem

Multiple competing AED stablecoins are now licensed or in progress:

Tightening with Maturation

The regulatory trajectory is best described as "tightening within a growth-friendly frame":

Enforcement Escalation

• VARA: 38 sanctioned entities by late 2025; 31 sanctions in 2025 alone; fines up to AED 10 million (potentially doubled for repeat offences)
• ADGM: USD 12.45 million Hayvn Group enforcement (Apr 2025) — one of the largest VA enforcement actions in the Middle East
• DFSA: 8 enforcement actions in 2024; ~USD 2.5 million in fines
• Criminal: Dubai Public Prosecution referred 30 individuals and 3 companies to Money Laundering Court for AED 180 million in crypto-based money laundering (Dec 2024)
• CBUAE: Fines up to AED 1 billion (~USD 272M) for unlicensed operations under the new law

8. Tax Reporting Obligations

The UAE offers one of the most favourable tax environments globally for individual crypto investors, with zero personal income tax. However, corporate tax obligations, VAT considerations, and free zone conditions create a more nuanced picture for crypto businesses.

Key tax characteristics for crypto activities:

• No personal income tax on crypto gains -- the UAE imposes no personal income tax of any kind. All individual crypto gains (trading, staking, airdrops, capital appreciation) are entirely untaxed
• Corporate tax (9%) may apply to crypto business activities -- under Federal Decree-Law No. 47 of 2022, all businesses (including crypto businesses) are subject to 0% on the first AED 375,000 of taxable income and 9% on income exceeding that threshold. Individuals whose crypto activity generates more than AED 1,000,000 in annual revenue may be reclassified as conducting a business
• Free zone considerations -- Qualifying Free Zone Persons (QFZPs) in ADGM, DIFC, DMCC, and other designated free zones are eligible for a 0% corporate tax rate on Qualifying Income for a guaranteed period (typically 50 years for ADGM and DIFC). Loss of QFZP status triggers retroactive taxation at 9% for the current period and the subsequent four tax periods
• VAT exempt for crypto transactions -- Cabinet Decision No. 100 of 2024 exempted the transfer, conversion, and custody of virtual assets from VAT, retroactive to 1 January 2018. However, cryptocurrency mining does not qualify for this exemption and is subject to 5% VAT (per FTA Guidance VATP039, January 2025)
• VARA (Dubai) and ADGM FSRA (Abu Dhabi) license service providers -- Ministerial Decision No. 336 of 2025 formally recognised VARA as a "competent authority" under the Corporate Tax Law, integrating Dubai's virtual asset regulation into the federal tax framework

Reporting obligations:

• All taxable businesses must register with the Federal Tax Authority (FTA) and file annual corporate tax returns
• VARA-licensed entities must comply with periodic financial statements, transaction monitoring reports, and suspicious activity reports under VARA's Rulebooks
• ADGM/DIFC-licensed entities must comply with respective regulatory reporting obligations including prudential reporting and AML returns
• Transfer pricing documentation required for related party transactions exceeding AED 40 million (per Ministerial Decision No. 97 of 2023)

CARF reporting (from 2028):

• The UAE signed the OECD CARF Multilateral Competent Authority Agreement (MCAA) in September 2025
• September-November 2025: public consultation on CARF implementing regulations
• 2026: final CARF regulations expected to be issued
• 1 January 2027: CARF go-live date for UAE reporting and data capture
• 2028: first automatic exchange of UAE CARF data with partner jurisdictions, covering the 2027 reporting year

9. RWA / Security Token Platform Licensing

The UAE offers multiple pathways for RWA tokenization across its multi-regulator framework. VARA (Dubai), ADGM FSRA (Abu Dhabi), DFSA (DIFC), and the federal CMA (the ex-SCA capital-markets regulator) each provide licensing for tokenized asset activities. The UAE's multi-zone structure allows firms to choose the regulatory environment best suited to their activities.

9.1 License Details

9.2 Requirements

9.3 Ongoing Obligations

• Periodic financial statements and transaction monitoring reports
• Suspicious activity reports under respective regulatory frameworks
• AML/CFT compliance (Federal Decree-Law No. 20 of 2018); FATF Travel Rule
• VARA Version 2.0 Rulebook compliance (full compliance required by 19 June 2025)
• ADGM/DIFC-licensed entities: prudential reporting and AML returns per respective authorities

9.4 Passporting

No cross-regulator passporting within the UAE. Each regulatory zone operates independently. ADGM and DIFC entities may serve clients globally but must comply with local regulations in each target jurisdiction.

9.5 Banking Access

Licensed status is a prerequisite for banking access across all UAE regulators. ADGM and DIFC entities benefit from established financial centre banking infrastructure. VARA-licensed entities require 2--4 months for banking onboarding after licensing. Emirates NBD, Mashreq, Wio, RAKBANK, and FAB serve licensed VASPs.

9.6 Tax Advantages

0% personal income tax. 9% corporate tax (0% for qualifying free zone persons in ADGM/DIFC). VA transactions VAT-exempt under Cabinet Decision No. 100 of 2024 (retroactive to 1 January 2018).

9.7 Transition

The UAE's tokenized real estate market is growing rapidly, raising questions around VAT treatment of fractional property interests. VARA's Version 2.0 Rulebooks (effective 2025) updated compliance requirements. The DFSA Tokenisation Regulatory Sandbox provides a pathway for firms to test tokenised investment products under modified conditions. Ministerial Decision No. 336 of 2025 formally recognised VARA as a "competent authority" under the Corporate Tax Law.

See

UAE RWA Regulation for full details on VARA, ADGM, DFSA, and CMA (ex-SCA) licensing for tokenized assets, capital requirements, and the multi-regulator framework.

DeFi Protocol Licensing

Regulatory Approach

The UAE is the global leader in purpose-built DeFi licensing. VARA issued the world's first dedicated DeFi license to MANTRA in February 2025, and ADGM introduced a DeFi Protocol Operator framework in September 2025. Federal Decree-Law No. 6 of 2025 (effective 16 September 2025) sweeps DeFi, wallets, bridges, and blockchain infrastructure under CBUAE authority, with a compliance deadline of 15 September 2026.

Available License Types

DeFi-Specific Requirements

• Smart contract audits: VARA requires mandatory third-party smart contract audits for all DeFi licensees. ADGM's DeFi Protocol Operator framework includes smart contract governance and security assessment requirements.
• Governance framework: VARA requires identifiable Responsible Individuals (UAE-resident, Fit and Proper) for DeFi license holders. ADGM requires traditional corporate governance mapped to DeFi protocol operations. RAK DAO provides a lighter-touch wrapper but with limited regulatory recognition.
• Federal Decree-Law No. 6 of 2025: Sweeps DeFi, wallets, bridges, and blockchain infrastructure under CBUAE authority. All existing DeFi operators must comply by 15 September 2026. DIFC and ADGM are explicitly excluded from this federal law.
• Multi-regulator complexity: A DeFi protocol operating across Dubai mainland, ADGM, and DIFC may need separate licenses from VARA, ADGM FSRA, and DFSA respectively. No passporting between regulators.

Key Licensed Operators

Application Timeline

• VARA: 3--6 months
• ADGM: 4--8 months (DeFi Protocol Operator framework)
• CBUAE Federal Decree-Law: Compliance deadline 15 September 2026
• RAK DAO: ~4 weeks

Cross-Reference

See

UAE DeFi Regulation for full details on VARA DeFi licensing, ADGM DeFi Protocol Operator framework, Federal Decree-Law No. 6 of 2025, CBUAE authority expansion, MANTRA first DeFi license, and multi-regulator complexity.

Sources: VARA Virtual Assets and Related Activities Regulations (2023, updated 2025); ADGM FSRA DeFi Protocol Operator Framework (September 2025); Federal Decree-Law No. 6 of 2025

Insurance / Risk Transfer Licensing

Overview

The UAE is the only major jurisdiction with explicit mandatory insurance requirements for crypto businesses across multiple regulatory categories. VARA mandates insurance for four categories of VASP activities, ADGM requires professional indemnity insurance (PII) for regulated firms, and DIFC imposes insurance requirements through its regulatory framework. This makes the UAE the most prescriptive jurisdiction globally for digital asset insurance obligations.

Regulatory Authority

VARA Mandatory Insurance (4 Categories)

VARA's Rulebook specifies four mandatory insurance categories for licensed VASPs:

VARA does not publish specific minimum coverage amounts in its public Rulebooks -- these are determined as part of the licensing process based on the VASP's activity scope, asset volumes, and risk profile.

ADGM PII Requirements

DIFC Insurance Requirements

The DFSA requires licensed firms to maintain adequate insurance, including PII, as part of its prudential framework. Specific requirements are determined during the authorisation process.

Insurance Provider Licensing

Entities seeking to underwrite digital asset insurance in the UAE:

• Onshore UAE: Must be licensed by the CBUAE (which absorbed the Insurance Authority); both conventional and Takaful (Islamic insurance) insurers are regulated
• ADGM: ADGM has its own insurance regulatory framework; firms can operate under ADGM FSRA authorisation
• DIFC: The DFSA regulates insurance within the DIFC free zone
• International reinsurers: Major global reinsurers (Swiss Re, Munich Re) provide capacity to UAE-domiciled insurers for digital asset risks

Insurance Requirements for Crypto Businesses (Comparison)

Named Insurance Providers Active in the UAE

Estimated Insurance Costs for UAE VASPs

Regulatory Direction

• VARA's mandatory four-category insurance framework is the most prescriptive globally and may serve as a model for other jurisdictions
• Federal Decree-Law No. 6 of 2025 (effective September 2025) may introduce additional insurance expectations for entities newly brought under CBUAE authority (DeFi, wallets, bridges)
• The Takaful (Islamic insurance) option for Sharia-compliant crypto businesses is a unique UAE feature
• Insurance costs represent a meaningful component of the total cost of VARA licensing (estimated 10-15% of annual ongoing compliance cost)

Cross-Reference

See

UAE Digital Asset Insurance for full details on VARA mandatory insurance categories, ADGM PII requirements, DIFC insurance framework, Takaful options, and the UAE's position as the most prescriptive jurisdiction for crypto business insurance.

---

NFT & Digital Collectibles

Payment / Transfer Service Licensing

Overview

The UAE regulates crypto payment and transfer services through a multi-regulator model spanning VARA (Dubai mainland), ADGM FSRA (Abu Dhabi), DFSA (DIFC), and CBUAE (federal stablecoin oversight). VARA's Transfer & Settlement Services licence covers crypto-to-fiat and crypto-to-crypto transfers. The CBUAE's Payment Token Services Regulation (PTSR) governs stablecoin issuance and AED-pegged payment tokens, requiring a dedicated DPT Facility Licence.

Stablecoin-specific: The CBUAE PTSR requires AED-pegged stablecoin issuers to hold a DPT Facility Licence with AED 15M minimum capital, 100% reserve backing in UAE-domiciled assets, and CBB-grade audit obligations. Non-AED stablecoins (e.g., USDT, USDC) may circulate but cannot be marketed as "payment tokens" without CBUAE approval.

See

UAE Crypto Payment Regulation for full details on VARA Transfer & Settlement licensing, CBUAE PTSR stablecoin framework, ADGM FSP authorisation, and multi-regulator coordination.

10. For Full Details

• Custody:
  UAE Custody Regulations — VARA Custody Services Rulebook, ADGM FSRA custody authorization, DFSA crypto token framework, capital requirements (VARA AED 4M / ADGM USD 250K-4M), key management standards, asset segregation, proof-of-reserves, and enforcement actions
• Stablecoin Issuance:
  UAE Stablecoin Regulations — CBUAE Payment Token Services Regulation, VARA FRVA framework, ADGM FRT framework, reserve requirements (100% backing across all regulators), AED stablecoin projects (AE Coin, Zand AED, DDSC, USDU), Digital Dirham CBDC, and Islamic finance considerations
• Mining:
  UAE Mining Regulations — DMCC Crypto Centre licensing, VARA applicability for commercial mining, free zone comparison (DMCC / RAK / ADGM), tax treatment (9% corporate / 5% VAT on mining), energy costs (DEWA ~USD 0.10/kWh), and MARA Holdings 1.2 EH/s Abu Dhabi operation
• Digital Asset Taxation:
  UAE Digital Asset Taxation — 0% personal income tax, 9% corporate tax, free zone QFZP benefits, VAT exemptions under Cabinet Decision 100/2024, mining VAT exclusion, CARF adoption timeline, transfer pricing requirements
• RWA Regulation:
  UAE RWA Regulation — VARA/ADGM/DFSA/CMA (ex-SCA) multi-regulator framework, licensing categories, capital requirements, DFSA Tokenisation Sandbox, tokenized real estate market
• DeFi Regulation:
  UAE DeFi Regulation — VARA DeFi license, ADGM DeFi Protocol Operator, Federal Decree-Law No. 6, CBUAE expansion, MANTRA first license, multi-regulator framework
• Digital Asset Insurance:
  UAE Digital Asset Insurance — VARA mandatory 4-category insurance, ADGM PII, DIFC requirements, Takaful options, insurance cost estimates
• NFT & Digital Collectibles:
  UAE — NFT & Digital Collectibles — VARA multi-category licensing, ADGM/DFSA frameworks, AED 100K-5M capital, Takaful options, multi-regulator framework
• Crypto Payment Regulation:
  UAE Crypto Payment Regulation — VARA Transfer & Settlement licensing, CBUAE PTSR stablecoin framework, ADGM FSP authorisation, multi-regulator coordination

11. Recent Licensing Developments (since 2026-03-20)

---

<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->

Related coverage

United Arab Emirates — License Map in other research domains:

• Crypto Mining Regulations
• DeFi Regulation & Liability Frameworks
• Digital Asset Insurance & Risk Transfer
• Digital Asset Taxation
• Institutional Crypto Custody Regulations
• NFT & Digital Collectibles Regulations
• Payment Services & Crypto Payment Regulation
• Stablecoin Regulations & License Regimes
• Tokenized Real-World Assets (RWA) Regulation

<!-- related-coverage:END -->

Verification Notes

Targeted gap-closure pass (2026-06-06):

• CORRECTION — CMA custody capital "AED 3M vs AED 4M" conflict resolved (mis-attribution, not a genuine conflict). WAS: §2 and §9.2 flagged the CMA federal custody minimum as "AED 3,000,000 vs upwards of AED 4,000,000 — figures conflict". NOW: under CMA Decision No. 4/R.M/2026 the Safe Custody of Virtual Assets (Custodian) licence carries AED 4,000,000 paid-up capital + a 6-month operating-expense buffer; the AED 3,000,000 figure is the discretionary Portfolio-Management activity, not custody. The two figures were never in conflict — they are two different activities; the source-domain files had cross-mapped the portfolio-management figure onto custody. Updated §2 capital cell and §9.2 CMA row. SOURCE (secondary/law-firm, priority 6): Cryptoverse Lawyers — CMA Prudential Rules — "Safe Custody of Virtual Assets (Custodian): AED 4,000,000 paid-up capital plus … 6 months' operating expenses … AED 3,000,000 [is] Managing Portfolios of Virtual Assets (Discretionary management)". PRIMARY-KNOWN-BUT-UNFETCHABLE: the primary CMA Decision No. 4/R.M/2026 text / Business Regulation Module on sca.gov.ae could not be fetched (the regulations-listing page renders only the search interface, not the document body; no direct decision PDF located). Gap therefore remains technically OPEN per the verification standard (no fetched primary), but the substantive conflict is resolved and the file no longer asserts a false conflict.
• GAP STILL OPEN — CMA federal VASP application/processing timeline NOT VERIFIED. No published or practitioner processing-timeline figure for the new federal CMA regime was located this pass; only the one-year transition window for existing licensees (to 13 Feb 2027) is sourced. §9.2 timeline cell refined to make this explicit ("Processing timeline NOT VERIFIED; only the one-year transition window … is sourced").
• GAP STILL OPEN — Retail Digital Dirham completed launch NOT primary-verified; refined with corroborating CBUAE-report date. Re-checked 2026-06-06: no primary CBUAE press release confirming a completed retail launch was located. The CBUAE's own progress report (published 31 Jul 2025) — reported via Zawya — describes a completed real-value retail pilot and states the bank is moving "towards officially launching" the CBDC "in the near term", i.e. as of mid-2025 the retail launch was still prospective. The March-2026 retail-launch claim remains sourced only to secondary outlets (digitaldubai.ai and similar). §7 wording updated to reflect the 31 Jul 2025 CBUAE-report status. The official centralbank.ae homepage returned HTTP 403 to automated fetch; the centralbank.ae CBDC primer PDF returned unparseable/encoded content.

This refresh reconciled every licence type, regulator, fee, capital, and effective-date figure against the nine refreshed source-domain UAE files (custody, stablecoin, mining, taxation, payment, insurance, RWA, NFT, DeFi — all modified 2026-06-04). Corrections applied (Correction Protocol):

• CORRECTION (2026-06-04): The federal securities regulator throughout this file was the Securities and Commodities Authority (SCA). The SCA was replaced in full by the Capital Market Authority (CMA) effective 1 January 2026 under Federal Decree-Laws No. 32 and No. 33 of 2025. Updated §1 (architecture table + key structural features), §2 (activity comparison: primary regulator / licence name / capital / key personnel cells), §9 (RWA licence details, requirements table), the §7 Tightening table, and §10 cross-reference descriptions. Source: Clyde & Co; CMS — From the SCA to the CMA.
• CORRECTION (2026-06-04): The prior file referenced the federal regime as "SCA Decision on Virtual Assets (2024)" / "SCA accreditation". The federal VASP regime was replaced in full by CMA Decision No. 4/R.M/2026 (effective 13 February 2026) — an activity-based model of 8 licensed activities (incl. a dedicated Custody Services licence), capital AED 500,000–4,000,000 by activity plus a 6-month operating-expense buffer, with a one-year transition window to 13 February 2027. Added the federal CMA layer to §1, §2, §9.1/§9.2 and the Recent Developments table.
• CONFLICT FLAGGED (2026-06-04) — SUPERSEDED by the 2026-06-06 gap-closure entry above. The earlier note flagged CMA custody capital as "AED 3,000,000 vs upwards of AED 4,000,000 — figures conflict". This was a mis-attribution: AED 4,000,000 is the custody figure and AED 3,000,000 is the discretionary Portfolio-Management figure (see the 2026-06-06 entry). The conflict has been removed from §2 and §9.2.
• CORRECTION (2026-06-04): §7 CBUAE Digital Dirham — the prior "Retail CBDC: Planned for 2026 (delayed from late 2025)" was updated. Retail Digital Dirham rollout is reported (secondary sources, e.g. digitaldubai.ai) as a March 2026 retail launch following an official Q4 2025 target; the CBUAE has positioned it as complementary to private payment tokens. No primary CBUAE confirmation of a completed retail launch was located as of 2026-06-04 — flagged as NOT primary-verified, consistent with the cautious framing in the crypto-payment source-domain file.
• Self-reported / estimated figures: All Year-1 total-cost, annual-ongoing-cost, application-timeline, and insurance-premium figures in §2, §4, §6 and §5 are practitioner/industry estimates (not statutory schedules) and are flagged as estimates throughout; VARA does not publicly publish a full fee schedule. The CBUAE 60-day statutory licensing target vs 4–10-month actual (early data) gap is statutory aspiration, not confirmed practice.
• Cross-domain consistency confirmed: VARA custody capital AED 4,000,000; ADGM custody USD 250,000 (non-public) / USD 4,000,000 (public); CBUAE DPT AED 15,000,000 + 0.5%; VARA FRVA AED 10,000,000; ADGM FRT USD 2,000,000; DMCC ~AED 31,000 / ~4 weeks; mining 5% VAT (FTA VATP039); VAT exemption Cabinet Decision 100/2024 (retroactive 1 Jan 2018); CARF 2027 go-live / 2028 first exchange; DDSC final CBUAE approval Feb 2026 (IHC/Sirius/FAB) — all reconcile with the refreshed source-domain files.

---

This page synthesizes data from the UAE source-domain research files (custody, stablecoin, mining, taxation, payment, insurance, RWA, NFT, DeFi), all refreshed to 2026-06-04. Figures are reconciled against those files and primary regulator sources; practitioner cost/timeline estimates are flagged as such. Items marked "NOT VERIFIED" or "NO DATA FOUND" are noted where they affect cross-activity comparisons.