The Architecture of VARA Licensing
VARA’s licensing framework operates through a distinctive two-step process that requires all applicants to demonstrate progressive readiness for regulated operations. Unlike many traditional financial licensing regimes that operate as a single-stage approval, VARA’s approach — built around the concept of a “Minimum Viable Product” (MVP) — allows entities to establish operations in stages while maintaining regulatory oversight throughout the maturation process.
This structure reflects a pragmatic recognition that the virtual asset industry’s rapid evolution requires a licensing framework flexible enough to accommodate emerging business models while maintaining the compliance standards necessary to protect consumers and preserve market integrity.
Step 1: MVP Preparatory Licence
The MVP Preparatory Licence represents the first formal regulatory approval. It authorizes an entity to establish its Dubai presence and build operational infrastructure, but does not permit the entity to serve customers or conduct virtual asset activities with the public.
Pre-Application Requirements
Before submitting a formal application, entities must:
Determine applicable activities: Identify which of the seven regulated virtual asset activity categories the entity intends to conduct. Each activity — advisory services, broker-dealer services, custody services, exchange services, lending and borrowing, payment and remittance, or VA management and investment — requires specific licensing authorization.
Establish Dubai presence: VARA requires applicants to have a genuine physical presence in Dubai. This typically involves incorporation in Dubai through the DWTCA free zone or other Dubai free zones or mainland, and establishing office facilities.
Engage with VARA: Initial engagement with VARA — typically through the contact channels published on VARA’s website — to understand the application process and requirements specific to the entity’s proposed activities.
Application Documentation
The MVP Preparatory Licence application requires comprehensive documentation covering:
Corporate Structure: Detailed organizational charts showing ownership structures, beneficial owners, and group relationships. VARA scrutinizes corporate structures for clarity, transparency, and alignment with regulatory expectations.
Business Plan: A detailed business plan outlining the entity’s proposed virtual asset activities, target market, revenue model, risk profile, and growth projections. The business plan must demonstrate a viable and sustainable business model.
Governance Framework: Documentation of the entity’s governance structure, including board composition, committee structures, reporting lines, and decision-making authorities. VARA expects governance structures consistent with institutional-grade financial services operations.
Compliance Framework: Detailed description of the entity’s AML/CFT programme, compliance monitoring procedures, regulatory reporting capabilities, and staff training programmes. This must address VARA-specific requirements and UAE federal obligations.
Technology Infrastructure: Documentation of the entity’s technology architecture, including security measures, key management procedures (for custody applicants), trading system architecture (for exchange applicants), and business continuity arrangements.
Financial Resources: Evidence of adequate financial resources to support the proposed operations, including capital adequacy, liquidity management, and insurance arrangements.
Key Personnel: Detailed profiles of proposed senior management, including compliance officers, Chief Executive, Chief Technology Officer, and other key function holders. VARA assesses fitness and propriety of all senior personnel.
Assessment and Approval
VARA’s assessment of MVP Preparatory applications is substantive and may involve:
- Detailed review of all submitted documentation
- Requests for additional information or clarification
- Interviews with proposed senior management
- Assessment of the entity’s compliance readiness
- Review of technology infrastructure and security arrangements
The assessment period varies depending on the complexity of the application and the responsiveness of the applicant. VARA does not publish fixed processing timelines, reflecting the iterative nature of the assessment process.
Entities That Have Received MVP Preparatory Licences
Public announcements confirm several major entities that received MVP Preparatory Licences:
- Crypto.com Dubai — March 2023, described as “trusted by more than 80 million customers worldwide”
- OKX Middle East — June 2023, with “UAE to serve as strategic global and regional business hub”
- GCEX MENA — February 2023, described as a “Digital Prime Brokerage”
Step 2: MVP Operational Licence
The MVP Operational Licence represents the second and final stage of the licensing process, authorizing the entity to conduct virtual asset activities and serve customers.
Preparatory Phase Requirements
During the preparatory phase (between Step 1 and Step 2), entities must demonstrate:
Operational Readiness: Full deployment and testing of operational systems, including trading platforms, custody infrastructure, customer onboarding systems, and monitoring tools.
Compliance Programme Activation: Full implementation of the compliance framework described in the application, including active AML/CFT controls, transaction monitoring systems, and regulatory reporting capabilities.
Staff Recruitment and Training: Recruitment and training of staff necessary to operate the licensed activities, including compliance personnel, technology staff, and customer-facing teams.
Technology Go-Live Readiness: Completion of security audits, penetration testing, and operational readiness assessments for all customer-facing technology systems.
Operational Licence Assessment
The assessment for the MVP Operational Licence focuses on verifying that the entity has successfully implemented everything described in its Preparatory Licence application. This may include:
- On-site assessments of operational facilities
- Testing of compliance systems and controls
- Verification of customer protection mechanisms
- Assessment of technology infrastructure security
- Review of launch readiness documentation
Notable Operational Licence Grants
BitOasis became “the first Broker-Dealer to secure MVP Operational Licence from Dubai’s Virtual Asset Regulatory Authority” in May 2023. Binance Dubai received its MVP licence in September 2022. These milestones demonstrate the progression from preparatory to operational status that all VARA-licensed entities must navigate.
Fee Structure
VARA published a “Clarification and Further Information on Fees” in June 2023, establishing fee schedules covering:
- NOC (No Objection Certificate) issuance: Fees for the initial regulatory clearance
- Licence application fees: Fees payable upon submission of licensing applications at each stage
- Licence amendment fees: Fees for modifications to existing licences
- Application withdrawal fees: Fees applicable when applications are withdrawn
- Whitepaper submission fees: Fees for virtual asset issuance whitepaper review
The specific fee amounts are published by VARA and should be confirmed directly through official channels, as fee schedules may be updated periodically.
Activity-Specific Licensing Codes
VARA has established specific licence codes for different virtual asset activities. Notable developments include:
- VA Issuance (Category 1): A new licence code created in November 2023 for virtual asset issuance activities
- VA Proprietary Trading: A dedicated licence code created in May 2023, with a July 2025 reminder circular emphasizing the requirement to use the correct licence code
Integration with Free Zone Registration
The licensing process integrates with Dubai’s free zone registration framework. An April 2023 announcement confirmed that Dubai’s Department of Economy and Tourism (DET) and the Free Zone Council had “activated applications for legacy virtual asset operators to become fully regulated under VARA.” This integration ensures that VARA licensing operates alongside, rather than in isolation from, the broader corporate registration framework.
From May 2023, regulated virtual asset activities were made available at DET branches, streamlining the administrative process for entities establishing their Dubai presence as part of the licensing journey.
Legacy Entity Transition
VARA established a transition framework for entities that were operating virtual asset activities in Dubai before the full licensing framework came into effect. Key milestones include:
- March 2023: Application Acknowledgment Notice (AAN) deadline for VASPs and transition of legacy firms, with a deadline of March 31, 2023
- November 2023: Final deadline extension for VASPs to file for VARA registration or licence
- November 2023: Market notice that “Market-wide enforcements pick-up pace as final VARA deadline for Virtual Asset Service Provider licensing engagement lapses”
This transition framework explains the large number of enforcement actions taken in 2024 and 2025 against entities that failed to engage with the licensing process by the applicable deadlines.
For information on specific compliance obligations that apply once licensed, see our compliance requirements analysis. For a practical guide to preparing a licence application, see our how-to guide. For profiles of entities that have completed the licensing process, see our entity profiles.
For comparison with licensing processes in ADGM and DIFC, see our comparisons section. For federal-level licensing context, visit UAE Tokenization Regulations.
Why a Two-Step Process
VARA’s MVP licensing concept reflects a deliberate design choice: allowing entities to establish and build their Dubai operations under regulatory supervision before authorising customer-facing activities. This staged approach serves several regulatory objectives:
Risk Mitigation: By assessing entity readiness at two separate stages, VARA reduces the risk of authorising entities that are not operationally prepared to serve customers safely. The preparatory phase allows identification and remediation of deficiencies before customers are exposed.
Operational Substance: The preparatory phase requires entities to demonstrate genuine operational presence in Dubai — hiring staff, establishing offices, implementing technology systems — before VARA assesses readiness for operational authorisation. This prevents entities from obtaining licences without building real operational capabilities.
Compliance Verification: The progression from preparatory to operational status provides VARA with an opportunity to verify that the AML/CFT programme, technology infrastructure, and governance arrangements described in the application are actually implemented and functional.
Preparatory Stage Requirements
The MVP Preparatory Licence application requires comprehensive documentation:
- Corporate governance structure showing board composition, committees, and reporting lines
- Beneficial ownership disclosure and verification
- Business plan including target market, product offering, and financial projections
- AML/CFT programme design documentation
- Technology architecture and cybersecurity framework
- Risk management framework covering operational, market, credit, and compliance risks
- Financial resource statements demonstrating adequacy for proposed activities
- Fitness-and-propriety declarations for directors, senior managers, and compliance officers
- Staffing plan including compliance team composition
Operational Stage Requirements
Progression to the MVP Operational Licence requires demonstration of:
- Full implementation of compliance systems and processes
- Completion of staff hiring and training
- Technology systems tested and operational
- Banking relationships established
- Office infrastructure operational
- Completion of any conditions attached to the preparatory licence
- Satisfactory VARA assessment of operational readiness
Timeline Benchmarks
Based on publicly available licensing announcements:
- Binance Dubai: Preparatory to operational in 2022
- BitOasis: First broker-dealer MVP Operational Licence, May 2023
- OKX Middle East: MVP Preparatory, June 2023
- Crypto.com Dubai: MVP Preparatory, March 2023
These timelines suggest that the preparatory phase lasts several months, though the exact duration depends on entity readiness and VARA’s assessment schedule.
The Legacy Operator Pathway
The April 2023 coordination between DET and the Free Zone Council created a specific pathway for entities that were operating in Dubai’s virtual asset market before the 2023 regulations. The March 2023 circular set a deadline of March 31, 2023, for existing operators to file for VARA registration or licensing. Entities that failed to engage by this deadline faced enforcement action, as confirmed by the November 2023 market notice warning that enforcement would intensify.
Licence Conditions and Ongoing Requirements
Conditions Attached to Licences
VARA may attach specific conditions to MVP licences, requiring entities to:
- Complete specified actions within defined timeframes
- Submit additional documentation or evidence
- Implement specific compliance measures before progressing to the next stage
- Maintain minimum staffing levels or financial resources
- Report specific metrics to VARA on a periodic basis
Post-Licensing Regulatory Engagement
Once licensed, entities enter an ongoing regulatory relationship with VARA that includes:
Periodic Reporting: Regular submissions covering financial position, trading activity, compliance metrics, and operational data. The frequency and scope of reporting may be specified in licence conditions or VARA’s general requirements.
Supervisory Reviews: VARA may conduct desk-based or on-site supervisory reviews to assess ongoing compliance with licensing conditions and regulatory requirements. The FUZE enforcement case demonstrates that VARA assesses compliance programme substance during these reviews.
Regulatory Change Management: With 41 circulars issued through early 2026 — including the March 2026 AML circular, February 2026 Travel Rule circular, and January 2026 qualified investor classification circular — licensed entities must continuously adapt their compliance programmes to meet evolving requirements.
Licence Amendments: Changes to business activities, corporate structure, key personnel, or other material aspects of the licensed operation require VARA notification and potentially licence amendment applications, with associated fees.