VASP Licence in the United Arab Emirates
The UAE SCA VASP route is a high-reputation option for crypto businesses targeting UAE and MENA operations with local substance, PSP access and activity-specific controls. It is not an EU passporting route or a low-budget offshore setup.
Content is based on CSV values only and requires UAE legal review before being used as definitive regulatory advice.
Regulatory status should be confirmed by local counsel before relying on this route.
What is the UAE SCA VASP route?
The UAE VASP route is positioned around the Securities and Commodities Authority for virtual asset service provider licensing or registration at UAE level. It should be assessed separately from a Dubai-only VARA route because the regulator, operating perimeter and local setup assumptions can differ.
- Jurisdiction
- United Arab Emirates
- Regulator
- Securities and Commodities Authority (SCA)
- Regime
- VASP
- Legal basis
- Regulator in the CSV snapshot: Securities and Commodities Authority (SCA).
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Activity scope for UAE VASP planning
The application should start with a precise activity map, not with the assumption that one generic VASP permission covers every crypto model. Exchange, custody, brokerage, wallet, advisory, transfer and payment-adjacent flows can create different control and approval requirements.
Exchange
LicensedExchange operations fit within the permitted activities of this route.
Exchange
Exchange operations fit within the permitted activities of this route.
LicensedCustody
LicensedCustody is within scope; review controls requirements.
Custody
Custody is within scope; review controls requirements.
LicensedBrokerage
LicensedBrokerage or OTC activity typically fits within scope.
Brokerage
Brokerage or OTC activity typically fits within scope.
LicensedWallet provider
LicensedExchange operations fit within the permitted activities of this route.
Wallet provider
Exchange operations fit within the permitted activities of this route.
LicensedEU market
Not coveredEU passporting not available from this route.
EU market
EU passporting not available from this route.
Not coveredStartups
Not coveredHigh setup complexity means significant budget is needed.
Startups
High setup complexity means significant budget is needed.
Not covered
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
UAE VASP operating model
A credible UAE file should connect the local entity, SCA-facing activity scope, accountable staff, physical office, audit plan, AML framework, technology controls and PSP package into one operating model.
Plan for local staff and a physical office from the start, because both are marked as required in the CSV snapshot.
Operational control area that should be covered in the applicant's governance and compliance model.
Plan for local staff and a physical office from the start, because both are marked as required in the CSV snapshot.Operational control area that should be covered in the applicant's governance and compliance model.
Budget for application work, state fees, annual supervision fees, audit and ongoing compliance, not only incorporation.
Operational control area that should be covered in the applicant's governance and compliance model.
Budget for application work, state fees, annual supervision fees, audit and ongoing compliance, not only incorporation.Operational control area that should be covered in the applicant's governance and compliance model.
Prepare governance, AML, sanctions, custody, complaints, outsourcing and cybersecurity documentation around the selected activities.
Operational control area that should be covered in the applicant's governance and compliance model.
Prepare governance, AML, sanctions, custody, complaints, outsourcing and cybersecurity documentation around the selected activities.Operational control area that should be covered in the applicant's governance and compliance model.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
UAE route vs Dubai VARA and offshore alternatives
The UAE SCA route can be attractive when the business needs UAE and MENA positioning, strong payment provider availability and a reputable local setup. It is less suitable when the main goal is EU passporting, the lowest possible budget or a fast offshore launch with minimal substance.
Regulatory reputation
Onshore (this jurisdiction)
High
Offshore comparison
Lower recognition
Regulatory reputationHighLower recognitionBanking access
Onshore (this jurisdiction)
Challenging
Offshore comparison
Often restricted
Banking accessChallengingOften restrictedCompliance burden
Onshore (this jurisdiction)
High
Offshore comparison
Variable
Compliance burdenHighVariable
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
When the UAE VASP route is not suitable
The UAE SCA route is not the right answer for every crypto business. It is a high-complexity and high-maintenance option, so the commercial case should justify the substance and compliance burden.
The business needs EU/EEA passporting rather than UAE or MENA access.
The budget cannot support local staff, office, audit, state fees and annual supervision.
The model is still an early MVP without mature AML, custody, technology or PSP documentation.
The objective is a very low-budget offshore setup rather than a regulated UAE operating presence.
Consider instead
- Dubai VASP — Dubai-only VARA route with strong market recognition
- Malta (MiCA) MICA — EU/EEA passporting for European client acquisition
- Canada (MSB) MSB — Faster registration route for selected models
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Activity fit for this route
Review which crypto activities fit within the scope of this route.
Exchange operations fit within the permitted activities of this route.
Custody is within scope; review controls requirements.
Brokerage or OTC activity typically fits within scope.
Exchange operations fit within the permitted activities of this route.
EU passporting not available from this route.
High setup complexity means significant budget is needed.
Not sure if your model fits? Request a licensing assessment
Business model fit — United Arab Emirates
Assess how well this route covers your planned activities.
Fit score
- Good fit
- 4/6
- Partial fit
- 2/6
- Poor fit
- 0/6
United Arab Emirates is a strong fit for your activity profile
This route covers your key activities. Proceed with detailed legal review.
Is United Arab Emirates VASP authorisation right for your project?
Best for
- UAE and MENA crypto operations
Not suitable for
- Very low-budget setup
Core requirements
Use this section to check the main regulatory and operational requirements before committing to a jurisdiction.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Local staff, office and audit
The UAE route should be treated as a substance-heavy VASP project. Local staff, a physical office and audit are all required in the CSV snapshot, which makes the jurisdiction stronger for serious operations but poor for very low-budget setups.
Local staff
RequiredRequired
At least one locally-accountable staff member or director is expected.
Physical office
RequiredRequired
A genuine office presence is expected, not a nominal registered address.
Audit
RequiredRequired
External audit is required for ongoing supervision compliance.
Planning notes
- Define who will be locally accountable for compliance, operations and regulator interaction.
- Match office and staffing assumptions to the activity scope, expected client base and outsourcing model.
- Include audit readiness and ongoing reporting in the launch budget.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Cost breakdown
Budget for service price, regulatory fees, share capital and ongoing costs separately.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Cost breakdown — United Arab Emirates
Budget for service price, regulatory fees, share capital and ongoing costs separately.
| Cost item | Amount |
|---|---|
| Service priceApplication preparation and professional services. | €21,700 |
| State fee | €10,000 |
| Required share capitalMust be held, not an expenditure. | €50,000 |
Summary
- One-off costs
- €81,700
- Annual (year 1)
- €0
- Total year 1
- €81,700
Adjust to convert to your base currency.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Application process
The sequence below shows the usual project flow. Exact steps depend on the regulator, business model and application scope. United Arab Emirates — From 3 months.
Pre-assessment and scope review
1–3 weeksDefine the activity scope, governance model and target markets before formal preparation.
Company setup in United Arab Emirates
2–6 weeksEstablish legal entity, appoint local staff and set up local operating structure.
Documentation and compliance packBottleneck risk
3–8 weeksPrepare AML/CFT policies, governance documents, controls framework and application materials.
Application submission to Securities and Commodities Authority
1–2 weeksSubmit complete application with all required documentation.
Regulator reviewBottleneck risk
From 3 monthsRegulator reviews the application. May request clarifications. Incomplete files extend this phase.
Depends on: File quality and completeness
Authorisation or registration confirmation
1–4 weeksRegulator confirms authorisation or registration. Commence operations.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
What can delay or increase cost
These factors are most likely to affect timelines and budgets for this route.
Setup complexity is rated high for United Arab Emirates. Company setup, governance and documentation take longer than average.
Ongoing supervision, audit and compliance costs are above average. Budget for these separately from the application fee.
Incomplete files are the most common cause of delay. Regulator queries extend review by weeks or months.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Banking and PSP feasibility
Banking difficulty is medium and PSP availability is high in the provided data, which supports the UAE/MENA use case. That does not make bank or PSP onboarding automatic: providers will still examine ownership, activity scope, fiat flows, token policy, AML controls and regulatory status.
Reflects how challenging it is to open and maintain business bank accounts in this jurisdiction.
Reflects availability of payment service providers willing to onboard crypto-licensed entities.
A licence or registration does not guarantee bank account or payment provider approval. Banking feasibility should be reviewed before the application strategy is finalized.
Preparation checklist
- Prepare a banking and PSP pack alongside the regulatory file.
- Explain source of funds, transaction monitoring, sanctions controls and fiat settlement flows.
- Avoid promising account opening before a provider has reviewed the specific model.
Compliance documentation
Most crypto licensing routes require a documented compliance framework before submission, not only after approval.
- RequiredAML/CFT policy and risk assessmentDocument your customer risk model and control framework.
- RequiredCustomer due diligence (CDD) procedures
- RequiredEnhanced due diligence (EDD) proceduresFor high-risk clients and jurisdictions.
- RequiredTransaction monitoring system and rules
- RequiredSanctions screening procedures
- RequiredSuspicious activity reporting (SAR) process
- RequiredMLRO / Compliance officer appointmentLocal accountability may be required.
- RecommendedBoard-approved governance charter
- ConditionalOutsourcing policy and monitoringRequired if functions are outsourced.
- RecommendedICT / cybersecurity policy
- RequiredComplaints handling procedure
- RequiredAnnual external audit engagementRequired for ongoing supervision compliance.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Documents to prepare
Preparing these materials before filing reduces regulator questions and helps with banking or payment provider onboarding.
Corporate documents
AML and compliance
Operational
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Regulator profile
Securities and Commodities Authority (SCA)
Strong international recognition and established supervision track record.
Reflects documentation depth, governance requirements and expected review friction.
Reflects likelihood of delays, additional information requests or policy uncertainty.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Risk assessment
Main risk dimensions for the United Arab Emirates route.
Route risk rating — setup complexity: High.
Route risk rating — maintenance cost: High. Budget for ongoing compliance, fees and supervision separately.
Route risk rating — regulatory reputation: High.
Route risk rating — regulatory risk: Medium. Weak compliance, vague scope or insufficient controls increase review risk.
Mitigation: Prepare an evidence-based compliance file before submission.
Route risk rating — banking difficulty: Medium. Authorisation does not guarantee bank account opening.
Mitigation: Start banking outreach and compliance preparation before the application.
This content is for general orientation only. Crypto regulation changes quickly and the final scope should be confirmed through a jurisdiction-specific legal review before filing or incorporation.
UAE VASP alternatives
Compare UAE/SCA with Dubai VARA for a Dubai-specific operating perimeter, MiCA for EU passporting, and registration routes such as Canada MSB where speed and cost matter more than a UAE-regulated presence.
United Arab Emirates
VASP
- Price
- 21 700 EUR
- Timeline
- From 3 months
- Passporting
- No passporting
- Banking
- Medium
- Reputation
- High
Dubai
VASP
- Price
- 22 300 EUR
- Timeline
- From 6 months
- Passporting
- No passporting
- Banking
- Medium
- Reputation
- High
+ Dubai-only VARA route with strong market recognition
− Separate Dubai scope and higher supervision budget
View routeMalta (MiCA)
MICA
- Price
- 20 700 EUR
- Timeline
- From 6 months
- Passporting
- EU/EEA
- Banking
- Medium
- Reputation
- High
+ EU/EEA passporting for European client acquisition
− Requires EU substance and MiCA operating controls
View routeCanada (MSB)
MSB
- Price
- 20 600 EUR
- Timeline
- From 2 months
- Passporting
- No passporting
- Banking
- Medium
- Reputation
- High
+ Faster registration route for selected models
− Registration only, not a full VASP licence
View routeFees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
United Arab Emirates vs other VASP jurisdictions
Compare key parameters across VASP-regulated jurisdictions.
Check your readiness for United Arab Emirates VASP authorisation
Documented AML/CFT policies, risk assessment, compliance officer.
50 000 AED minimum capital required.
Documented AML/CFT policies, risk assessment, compliance officer.
Board, management, accountability chain defined.
Banking strategy and identified partners.
Local staff and office in United Arab Emirates.
Readiness status
Answer the criteria on the left to see your readiness status.
Frequently asked questions
No. The activity scope should be mapped before filing. Exchange, custody, brokerage, wallet, advisory, transfer, staking and payment-adjacent features may require different evidence, limitations or permissions.
No. This page is for the UAE/SCA route. Dubai VARA is a Dubai-only route and should be assessed separately when the business will operate specifically in or from Dubai.
No. The CSV snapshot states no passporting. If EU/EEA market access is required, compare MiCA or CASP routes instead.
Usually no. The route has high setup complexity and high maintenance cost, with required local staff, physical office and audit.
Prepare the activity map, local entity plan, staffing and office assumptions, AML and sanctions framework, custody and technology controls, audit plan, banking and PSP package, and budget for state and annual supervision fees.
The page is not legal advice and should not be relied on as a substitute for advice from qualified counsel in the relevant jurisdiction.
Your dedicated specialists
Enrico
Rein
Jurata
Andrej
Marta
Katrin
Inga
Request a United Arab Emirates VASP assessment
Share your planned activities, target markets and timeline. We will review which crypto licensing route is likely to fit.