---
title: "UAE VARA Licence Guide: Application, Capital, Timeline (2026)"
slug: uae-vara-licence-guide
publishedAt: 2026-05-06T09:00:00Z
author: Finconduit Editorial Team
tags: VARA, FSRA, FATF
canonicalUrl: https://finconduit.com/resources/uae-vara-licence-guide
---
# UAE VARA Licence Guide: Application, Capital, Timeline (2026)
Dubai VARA licence playbook for crypto firms — the seven VA classes, capital floors, in-principle approval process, substance expectations, costs, and how VARA compares to ADGM FSRA and MiCA CASP.
**Dubai**'s **Virtual Asset Regulatory Authority** is the **fastest** serious crypto regulator in the world. From application to **operational permit**, **VARA** can grant a fully\-scoped **VASP licence** in **3–9 months** — materially faster than any EEA NCA, the UK **FCA**, or Singapore **MAS**. The trade\-off is a more demanding application file at the front end and substance expectations that have hardened since 2024.
**VARA** was established under [Dubai Law No. 4 of 2022](https://www.vara.ae/en/) and operationalised through the [VARA Virtual Assets and Related Activities Regulations](https://www.vara.ae/en/) 2023. The regime authorises seven **VA activity class**es \(Advisory, Broker\-Dealer, Custody, Exchange, **Lending and Borrowing**, Management and Investment, **VA Issuance**\) on a class\-by\-class basis. The [Abu Dhabi Global Market](https://www.adgm.com/operating-in-adgm/financial-services-regulatory-authority) **FSRA** operates a parallel regime in the **ADGM** **free zone** for institutional firms; the two are independent rather than competing.¹[^1]²[^2]³[^3]
This guide covers the practical mechanics: the seven VA classes, the capital floors and timeline by class, the **in\-principle approval** process, the operational\-permit milestone, the substance expectations **VARA** tests at inspection, the costs of a full programme, the **UAE** corporate tax position \(0% in qualifying **free zone**s, 9% mainland above **AED 375,000**\), and how **VARA** compares to **MiCA** **CASP** authorisation for firms choosing between a **UAE** base and an EEA base. The headline: **VARA** is fast and credible, but not light\-touch.
## What **VARA** Authorises
The **VARA** Virtual Assets and Related Activities Regulations 2023 split crypto activities into seven classes. A **VARA licence** is granted on a per\-class basis; firms operating across multiple classes hold multi\-class authorisations rather than a single global **VASP licence**. This contrasts with the **MiCA** **CASP** model where authorisation covers all eight services in a tiered class structure.
*Table: VARA VA activity classes — what each covers \(2026\).*
| Class | Authorises | Comparable MiCA service |
| --- | --- | --- |
| Advisory Services | Provision of personal recommendations on VAs | Advice on crypto\-assets |
| Broker\-Dealer Services | Reception, transmission, execution of VA orders | Reception/transmission \+ execution of orders |
| Custody Services | Safekeeping, administration, key management for VAs | Custody and administration of crypto\-assets |
| Exchange Services | Operating a venue for VA\-VA or VA\-fiat exchange | Operation of a trading platform \+ exchange of crypto\-assets |
| Lending and Borrowing Services | Lending VAs to clients, accepting borrowed VAs | \(No direct MiCA equivalent; restricted in EEA\) |
| Management and Investment Services | Discretionary management of client VA portfolios | Portfolio management on crypto\-assets |
| VA Issuance | Issuance, distribution, public offerings of VAs | \(MiCA EMT/ART issuer regime — separate authorisation track\) |
## Capital and Timeline by Class
Capital floors are set per class and per risk profile. **VARA** tests the higher of the class minimum and a risk\-weighted variable that considers customer base, asset under custody, and transaction volume — analogous to the **MiCA** fixed overhead requirement but explicitly volume\-driven. Indicative figures below.
*Table: VARA capital requirements and indicative timeline by VA activity class \(2026\).*
| Class | Minimum capital \(AED\) | Variable cap consideration | Typical timeline \(in\-principle to permit\) |
| --- | --- | --- | --- |
| Advisory Services | AED 300,000 \(\~US$80,000\) | n/a — fixed | 3–6 months |
| Broker\-Dealer Services | AED 500,000 \(\~US$140,000\) | Plus risk\-based add\-on | 4–7 months |
| Custody Services | AED 2,000,000 \(\~US$540,000\) | Higher for high AUC; additional capital for self\-custody architecture | 6–9 months |
| Exchange Services | AED 2,000,000 \(\~US$540,000\) | Volume\-based add\-on | 6–9 months |
| Lending and Borrowing | AED 1,000,000 \(\~US$270,000\) | Risk\-weighted by loan book | 5–8 months |
| Management and Investment Services | AED 1,000,000 \(\~US$270,000\) | Plus AUM\-linked add\-on | 5–8 months |
| VA Issuance | AED 3,000,000\+ \(\~US$810,000\+\) | Higher for fiat\-referenced or asset\-referenced tokens | 9–12 months |
| Multi\-class licence | Sum of class minimums | Aggregate risk weighting | Longest single\-class timeline \+ 1–2 months |
> **Note:** VARA's capital floors are above the MiCA Class 3 minimum \(€150,000\) but below the equivalent Singapore MAS or Hong Kong SFC requirements. The 0% corporate tax in qualifying free zones offsets the higher capital lock\-up materially in present\-value terms — compared to a 12.5% Cyprus or 15% Lithuania CIT, the VARA capital cost is recovered in 3–4 years through tax savings on retained earnings.
## The Application Process — Two Phases
**VARA** authorisation runs in two phases: **in\-principle approval** \(IPA\) and **operational permit**. The IPA confirms **VARA** is willing to license the entity subject to outstanding conditions \(capital deposited, premises secured, **MLRO** appointed, technology audited\). The **operational permit** is the live licence enabling actual provision of services to clients.
- Phase 1 — Pre\-application \(4–8 weeks\). Entity incorporation in **Dubai** mainland or qualifying **free zone** \(DMCC, DWTC\). Initial scoping with **VARA**'s licensing team. Programme of Operations drafting. Initial fee deposits.
- Phase 2 — IPA submission \(file lodged\). Complete authorisation file: governance, capital, **AML/CTF programme**, **ICT** controls, business plan, **fit\-and\-proper** for all key function holders.
- Phase 3 — Substantive review \(**3–6 months**\). **VARA**'s licensing committee reviews and iterates with the applicant. Typically 2–4 rounds of written questions; deeper engagement than EEA NCAs.
- Phase 4 — IPA grant \(1–2 weeks\). **VARA** issues the **in\-principle approval** listing remaining conditions for the **operational permit**.
- Phase 5 — Conditions discharge \(1–4 months\). Capital deposited and segregated; **MLRO** and Compliance Officer appointed and pre\-approved; office secured and staffed; **ICT** environment audited; **AML** systems live with named vendors \(**Travel Rule** provider, **blockchain analytics**\).
- Phase 6 — Operational permit. **VARA** issues the live **VA licence**; the firm may begin providing services to clients.
## Substance Expectations
**VARA**'s reputation for speed should not be confused with light\-touch substance. The Authority has tightened substance requirements progressively since the first cohort of licences in 2023 and now expects:
- Local executive presence. CEO and at least one executive director ordinarily resident in **Dubai** with documented physical presence. Flying\-in executives do not satisfy the test.
- Local **MLRO** and Compliance Officer. Both pre\-approved by **VARA**, both ordinarily resident, both with crypto\-specific experience.
- Real office premises. Not a virtual office or PO box. **VARA** inspectors visit during the IPA review and post\-licence.
- Material local employment. Generally interpreted as 5\+ FTEs based in **Dubai** for a serious operational firm; smaller for advisory\-only Class 1.
- Local technology operations. Servers either in **UAE** or with documented data\-residency carve\-outs; **ICT** third\-party register populated.
> **Warning:** Pre\-2024 VARA grants where substance was nominal are now under enhanced supervisory review. Several licensees have been required to remediate substance gaps as a condition of permit renewal. Do not assume legacy permissive interpretation continues — VARA's posture has converged toward EEA NCA expectations.
## Cost of Programme — Application \+ Year One
Total programme cost from decision to first year operational typically falls between US$700,000 and US$2.5 million depending on class, with the breakdown below for a mid\-sized Custody \+ Exchange \(multi\-class\) applicant.
*Table: Indicative VARA programme cost — multi\-class custody \+ exchange applicant, application \+ Year 1 operations.*
| Cost line | Range | Notes |
| --- | --- | --- |
| VARA application \+ supervisory fees Year 1 | US$50,000–US$120,000 | Per\-class fees; multi\-class sum |
| Legal counsel \(Dubai \+ group\) | US$150,000–US$400,000 | Programme of Operations, AML programme, IPA filing |
| Capital — segregated own funds | US$540,000\+ | Locked but recoverable; not opex |
| Local executive recruitment \+ Year 1 comp | US$300,000–US$700,000 | CEO \+ MLRO \+ Compliance \+ Director |
| Office \+ setup \(Dubai mainland or DMCC\) | US$80,000–US$200,000 | Lease, fit\-out, residency permits |
| AML / Travel Rule / blockchain analytics stack Year 1 | US$120,000–US$300,000 | Notabene, Sumsub, Chainalysis, Elliptic, TRM Labs |
| ICT environment \+ audit | US$50,000–US$150,000 | DORA\-aligned even though not formally required |
| Total programme cost \(excluding capital\) | US$750,000–US$1.9M | 0.5–1.5% of expected Year 1 revenue for a typical applicant |
## **VARA** vs **ADGM** **FSRA** — Choosing Between **Dubai** and **Abu Dhabi**
**VARA** covers all of **Dubai** except the **DIFC** financial **free zone**. The **Abu Dhabi Global Market** **FSRA** covers the **ADGM** **free zone** only. The two regimes are independent; a firm authorised by **VARA** cannot operate from **ADGM** without a separate **FSRA** permission, and vice versa. The choice depends on customer base, sponsor preferences, and target counterparties.
*Table: VARA vs ADGM FSRA — comparison for choosing between Dubai and Abu Dhabi as the UAE base.*
| Dimension | VARA \(Dubai\) | ADGM FSRA \(Abu Dhabi\) |
| --- | --- | --- |
| Geographic scope | All Dubai except DIFC | ADGM free zone only |
| Established | 2022 | 2018 \(crypto framework\) |
| Asset perimeter | Broad — all VAs including utility tokens | FSRA Recognised Crypto Asset list \(narrower\) |
| Capital starting point | AED 300,000–AED 3M\+ | US$250,000–US$500,000 |
| Tax | 0% in qualifying free zone; 9% mainland above AED 375k | 0% \(ADGM free zone\) |
| Audience profile | Retail\-friendly \+ institutional | Institutional / sovereign\-wealth\-adjacent |
| Typical timeline | 3–9 months | 3–9 months |
| Best for | Speed to market, MENA retail \+ institutional | Institutional, tokenised securities, sovereign\-adjacent |
## **VARA** vs **MiCA** — When **UAE** Wins, When EEA Wins
Founders choosing between a **UAE** base and an EEA base often frame the decision on cost and tax. The right framing is on customer geography, banking access, and access to institutional counterparties.
- Choose **VARA** if your customer base is **MENA**, **GCC**, South Asia \(**India**, Pakistan\), or Africa; if speed to authorisation matters; if 0% **free zone** tax materially affects unit economics; or if your founders prefer to live in **Dubai**.
- Choose **MiCA** **CASP** if your customer base is EEA\-resident; if EEA **passporting** matters commercially; if institutional counterparty diligence will happen via a European correspondent bank; or if eventual EEA bank\-grade credibility matters more than tax efficiency.
- Run both if you have material customer demand in both regions. Many large **CASP**s hold a **VARA licence** \(**UAE** entity\) and a **MiCA** **CASP** authorisation \(typically Lithuania, Cyprus, or Malta\) in parallel.
## Common **VARA** Application Pitfalls
- Treating **VARA** as a fast\-track **CASP**. The capital, governance, **AML**, and **ICT** bar is at full EEA\-equivalent depth. Speed comes from process, not from substance.
- Generic Programme of Operations. Lifted templates are flagged on first review and downgrade the file to high\-scrutiny.
- Underestimating substance. Pre\-2024 nominal\-substance grants are now under remediation review; new applicants should plan from day one for 5\+ FTEs based in **Dubai**.
- Confusing **free zone** with mainland tax. Only qualifying **free zone** income is 0%\-taxed; mainland operations or non\-qualifying **free zone** income is subject to 9% federal CIT above **AED 375,000**.
- Assuming **VARA** authorisation enables **MENA** **passporting**. It does not. **Saudi Arabia**, **Bahrain**, Kuwait operate independent crypto regimes. Bilateral MoUs exist but no formal **passport**.
## Frequently Asked Questions
### How long does a **VARA licence** actually take in 2026?
From decision to **operational permit**: **3–6 months** for Class 1 Advisory; 4–7 months for Class 2 Broker\-Dealer; **6–9 months** for Class 3 Custody and Exchange; **9–12 months** for **VA Issuance**. Multi\-class applications add 1–2 months. The clock is dominated by **VARA** review iterations and conditions discharge — not by drafting speed.
### Can a **VARA licence** **passport** into the EEA?
No. A **VARA licence** authorises VA activities from a **Dubai**\-domiciled entity to **MENA**, **GCC**, and other non\-EEA customers. Serving EEA\-resident customers from a **VARA**\-licensed entity requires either **MiCA** reverse solicitation \(narrowly available\) or a parallel **MiCA** **CASP** authorisation in an EEA member state. Many large operators hold both licences.
### What is the actual **UAE** corporate tax rate on a **VARA**\-licensed firm?
0% on qualifying **free zone** income; 9% federal corporate tax on mainland income or non\-qualifying **free zone** income above **AED 375,000** \(\~US$100,000\) per [UAE Federal Decree\-Law No. 47 of 2022](https://mof.gov.ae/). Most **VARA**\-licensed firms structure operations to maximise qualifying **free zone** income — typically by basing the **VARA**\-licensed entity in DMCC or DWTC. Detailed structuring requires **UAE** tax counsel.⁵[^4]
### Do I need separate **VARA** \+ **ADGM** licences to serve **UAE** customers across both Emirates?
Strictly, yes. **VARA**'s writ runs to **Dubai**; **ADGM** **FSRA**'s runs to the **ADGM** **free zone**. In practice, **VARA**\-licensed firms typically serve **UAE**\-wide customers through cross\-Emirate marketing protocols, while **ADGM** **FSRA** firms typically serve institutional clients globally. Dual authorisation is unusual but exists for very large multi\-product groups.
### How does **VARA**'s **AML programme** expectation compare to EEA NCAs?
Substantively similar. **VARA** applies [UAE Federal Decree\-Law No. 20 of 2018](https://mof.gov.ae/) on **AML**/**CTF** plus the [FATF Updated Guidance](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Updated-guidance-rba-virtual-assets.html) baseline. Expected programme components \(risk assessment, CDD/**EDD**, sanctions screening, **Travel Rule**, transaction monitoring, **MLRO**, training, audit\) are equivalent to **EBA Guidelines** expectations. Vendors deployed are largely the same — Notabene, Sumsub, Chainalysis, Elliptic, TRM Labs.⁴[^5]⁶[^6]
### What banks onboard **VARA**\-licensed **CASP**s?
Wio Bank, Emirates NBD, First **Abu Dhabi** Bank, and Mashreq Bank actively onboard **VARA**\-licensed firms with documented **AML programme**s. Banking timelines are **3–9 months** end\-to\-end. International correspondent **USD** access typically routes through BCB Group's **UAE**\-side relationships or directly via Mashreq's **USD** correspondents. The banking landscape is materially friendlier than most EEA jurisdictions.
> **Call to action:** Considering a VARA licence for your crypto business? Finconduit scopes the right class structure, makes vetted introductions to Dubai\-based legal counsel, executive recruiters, banks and AML vendors, and supports the IPA filing. Get a free VARA authorisation scope.
## Related Guides
- [EEA vs UK vs Offshore: Where to Incorporate Your Crypto Business](/resources/eea-uk-offshore-crypto-incorporation): Which jurisdiction maximises regulatory access and tax efficiency
- [MiCA Compliance Guide for CASPs](/resources/mica-compliance-guide-casps): Authorisation walkthrough — capital, governance, supplier stack
- [How to Get a Bank Account for a VASP or CASP](/resources/bank-account-vasp-casp): The 2026 banking playbook for regulated crypto firms
- [AML Compliance for Crypto Firms](/resources/aml-compliance-crypto-6amld): What the 6**AML**D requires from **CASP**s and **VASP**s
**VARA** is the rare regulator that combines speed, credibility, and a tax structure that materially improves crypto\-business unit economics. The bar is real — substance expectations, capital, governance, **AML**, **ICT** — and the bar has tightened. But the firms that work with **VARA**'s process get to a fully **operational permit** in **3–9 months**, with 0% tax on qualifying **free zone** income and one of the friendliest banking landscapes in regulated crypto. For any operator with a meaningful **MENA**, **GCC**, South Asia, or Africa customer base — or simply a preference for **Dubai** over Vilnius — **VARA** is the right answer.
- [Abu Dhabi ADGM Crypto Licence: The FSRA Framework](/resources/adgm-fsra-crypto-licence) — the Abu Dhabi alternative to Dubai's VARA regime for crypto firms licensing in the UAE.
## Footnotes
[^1]: Dubai Law No. 4 of 2022 Regulating Virtual Assets in the Emirate of Dubai — establishes VARA as the Emirate\-level regulator for virtual asset activities outside DIFC.
[^2]: VARA Virtual Assets and Related Activities Regulations 2023 — full rulebook covering authorisation, capital, conduct, AML/CTF and market integrity.
[^3]: ADGM FSRA Guidance on Regulation of Virtual Asset Activities in ADGM, as amended 2023.
[^4]: UAE Federal Decree\-Law No. 47 of 2022 on the Taxation of Corporations and Businesses — 9% federal corporate tax on income above AED 375,000; 0% on qualifying free zone income.
[^5]: FATF, Updated Guidance for a Risk\-Based Approach to Virtual Assets and VASPs, October 2021.
[^6]: UAE Federal Decree\-Law No. 20 of 2018 on Anti\-Money Laundering and Combating the Financing of Terrorism — applicable to all VASPs licensed by VARA.
---
Source: https://finconduit.com/resources/uae-vara-licence-guide