Virtual Assets Regulatory Authority Dubai (VARA)

Are You Planning to Start a Virtual Asset Business in Dubai? If you're venturing into the virtual asset industry in Dubai, you have likely heard of VARA - the Virtual Assets Regulatory Authority. Established to regulate and oversee virtual asset activities, VARA ensures a secure, transparent, and innovative environment for businesses. Whether you're dealing in cryptocurrencies, managing blockchain projects, or offering virtual asset services, obtaining a license from VARA is not just a formality; it is a legal requirement. If you are unfamiliar with VARA or unsure of the steps to get started, we have got you covered. In this guide, we will walk you through everything you need to know about VARA, its licensing process, and how it supports businesses in Dubai's booming digital economy and more.

What is VARA?

The Virtual Assets Regulatory Authority (VARA) is a specialised regulatory body established in Dubai under Law No. 4 of 2022. VARA operates under the Dubai World Trade Centre Authority (DWTCA) and is mandated to regulate the issuance, trading, and use of virtual assets across Dubai, including special development zones and free zones, but excluding the Dubai International Financial Centre (DIFC), which has its own regulatory framework.

VARA is committed to positioning Dubai as a global hub for virtual assets while ensuring market integrity, consumer protection, and anti-money laundering (AML) compliance.

Objectives of VARA

VARA's key objectives include:

• Market Regulation: Establish a clear regulatory framework for virtual assets to prevent fraudulent practices and market manipulation.
• Consumer Protection: Safeguard investors and consumers by implementing stringent security measures and transparency in transactions.
• Economic Growth: Foster innovation in the virtual asset space to attract global businesses and investors.
• AML and Counter-Terrorism: Enforce anti-money laundering (AML) and counter-financing of terrorism (CFT) regulations in the virtual asset ecosystem.
• Global Benchmarking: Position Dubai as a leader in virtual asset governance, making it a preferred destination for blockchain and crypto companies.

Regulatory Framework of VARA

VARA's regulatory scope encompasses a wide range of virtual assets and related activities. Key areas include:

• Issuance and Listing of Virtual Assets: VARA oversees the issuance of tokens and digital assets, ensuring that they comply with strict guidelines to protect investors and the market.
• Virtual Asset Service Providers (VASPs): VARA defines and regulates Virtual Asset Service Providers (VASPs), which include businesses involved in:
•    Cryptocurrency exchanges
•     Wallet services
•     Crypto asset custody
•     Virtual asset brokerage and trading platforms
• Compliance and Licensing: All businesses offering virtual asset-related services in Dubai must obtain a license from VARA and adhere to its regulations.
• Market Monitoring: VARA actively monitors virtual asset markets to detect and mitigate risks associated with fraud, market manipulation, and illegal transactions.
• Public Awareness: Through education initiatives, VARA aims to enhance public understanding of virtual assets, their benefits, and associated risks.

Key Regulations Under VARA

The Virtual Assets Regulatory Authority (VARA) has established a comprehensive regulatory framework to govern Dubai's virtual assets and related activities.  Key components of VARA's regulations include:

Licensing Requirements

Entities intending to offer virtual asset services in Dubai must obtain a license from VARA. The licensing process involves submitting detailed business plans, demonstrating compliance with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) measures, and showcasing robust risk management strategies. This ensures that only qualified and compliant entities operate within the virtual asset ecosystem.

Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) Compliance

VARA enforces stringent AML and CFT regulations to prevent the misuse of virtual assets for illicit activities. Licensed entities are required to implement customer due diligence procedures, monitor transactions for suspicious activities, and report any such activities to the relevant authorities. These measures align with international standards to combat financial crimes.

Data Protection and Privacy

Protecting user data is a critical aspect of VARA's regulatory framework. Entities must adhere to data protection laws, ensuring that sensitive information is securely stored and processed. This includes implementing cybersecurity measures to safeguard against data breaches and unauthorised access.

Advertising and Promotions

To maintain market integrity and protect consumers, VARA requires pre-approved promotional materials related to virtual assets. This prevents misleading information and ensures that advertisements accurately represent the services offered. Entities must comply with these guidelines to avoid penalties and maintain their licenses.

Penalties for Non-Compliance

VARA has established a system of penalties for entities that fail to comply with its regulations. Non-compliance can result in substantial fines, suspension of licenses, or permanent bans from operating within Dubai. This strict enforcement underscores VARA's commitment to maintaining a secure and trustworthy virtual asset market.

By implementing these regulations, VARA aims to create a robust and secure environment for virtual asset activities, balancing promoting innovation with the necessity of protecting investors and maintaining market stability.

Benefits of VARA for Businesses

The Virtual Assets Regulatory Authority (VARA) offers numerous advantages for businesses operating in the virtual asset space in Dubai. Below are the key benefits VARA provides to businesses:

Enhanced Credibility and Trust

Operating under VARA's regulatory framework significantly enhances businesses' credibility. The robust licensing process and compliance requirements demonstrate a commitment to transparency and ethical practices, building trust among investors, consumers, and stakeholders.

Access to Dubai's Digital Ecosystem

VARA-licensed businesses gain access to Dubai's thriving digital economy. The emirate's position as a global hub for innovation and technology provides opportunities to collaborate with other forward-thinking companies, access cutting-edge infrastructure, and attract top talent.

Global Expansion Opportunities

VARA's framework is aligned with international regulatory standards, making it easier for businesses to expand operations across borders. By adhering to VARA's stringent guidelines, businesses can demonstrate their compliance and readiness to operate in global markets.

Innovation-Friendly Environment

VARA encourages innovation by providing a structured yet flexible regulatory environment. Businesses can explore emerging technologies like blockchain, DeFi (Decentralized Finance), and tokenisation while ensuring compliance with VARA's regulations.

Legal and Regulatory Support

VARA offers businesses clarity on legal and regulatory requirements, reducing ambiguities that often deter companies from entering the virtual asset space. This support enables businesses to focus on growth and innovation rather than navigating complex regulatory landscapes.

Investor Confidence

VARA's emphasis on market integrity and consumer protection reassures investors about the safety of their investments. This confidence attracts venture capital, institutional investors, and other funding sources essential for business growth.

Protection Against Illicit Activities

By enforcing Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) regulations, VARA helps businesses avoid being unwittingly involved in fraudulent or illegal activities. This protection strengthens the reputation of businesses operating within the virtual asset ecosystem.

Competitive Advantage

Being VARA-licensed sets businesses apart from unregulated entities. This competitive edge helps attract clients and investors and ensures long-term sustainability in a rapidly evolving industry.

Educational and Awareness Initiatives

VARA promotes public awareness of virtual assets and their potential benefits, fostering a knowledgeable consumer base. This indirectly supports businesses by creating a receptive market for virtual asset products and services.

Market Stability

VARA's active market monitoring and risk management measures help create a stable environment for businesses to operate. Reduced market volatility and the mitigation of fraudulent activities make the ecosystem safer and more predictable.

VARA License -  Virtual Asset Service Provider (VASP) License

VARA's regulatory framework is built on the principles of fostering responsible and proactive market participation through clear and comprehensive guidelines. Firms, whether based in the UAE or internationally, that align with VARA's principles are encouraged to apply for a Virtual Asset Service Provider (VASP) License.

Any entity intending to engage in virtual asset activities in or from Dubai (excluding DIFC) is legally required to obtain a VARA license before commencing operations.

Applications for licensing can be submitted through:

• Dubai Economy and Tourism (DET) for mainland-based firms.
• Dubai Free Zones (FZ) for firms operating within free zones in Dubai, excluding DIFC.

Types of VARA Licenses

The Virtual Assets Regulatory Authority (VARA) offers a range of licenses tailored to specific virtual asset activities.

• Virtual Asset Advisory Services License
• Virtual Asset Broker-Dealer Services License
• Virtual Asset Custody Services License
• Virtual Asset Exchange Services License
• Virtual Asset Lending and Borrowing Services License
• Virtual Asset Management and Investment Services License
• Virtual Asset Transfer and Settlement Services License
• Virtual Asset Issuance License (Category 1)

Activities Requiring a VARA License in Dubai

Entities intending to undertake virtual asset activities in or from Dubai (excluding DIFC) must apply for and receive a license from the Virtual Assets Regulatory Authority (VARA). This applies to activities offered to residents of Dubai or global customers. Below is a comprehensive list of activities that require a VARA license:

Virtual Assets Advisory Services

Providing personal recommendations to clients, either upon their request or initiated by the entity, regarding actions or transactions involving virtual assets.

Virtual Assets Broker-Dealer Services

Activities include:

• Arranging orders for the purchase or sale of virtual assets between two entities.
• Soliciting or accepting orders for virtual assets in exchange for currency or other virtual assets.
• Facilitating transactions between buyers and sellers.
• Acting as a dealer for virtual assets on behalf of the entity's account.
• Making a market using client assets or providing issuance-related services to clients.

Virtual Assets Custody Services

Safekeeping virtual assets on behalf of another entity, acting only on verified instructions. Specific requirements include:

• Segregating each client's assets into separate virtual asset wallets..
• Setting up a standalone entity with a separate license for custody services.

Virtual Assets  Exchange Services

Activities include:

• Exchanging, trading, or converting virtual assets with currency or other virtual assets.
• Matching orders between buyers and sellers for transactions involving virtual assets.
• Maintaining an order book to facilitate exchanges.

Virtual Assets  Lending and Borrowing Services

Executing contracts where virtual assets are lent or transferred by one or more parties (lenders) to borrowers, who commit to returning the assets upon request or at the end of an agreed period.

Virtual Assets Management and Investment Services

Acting as an agent or fiduciary for managing, administering, or disposing of an entity's virtual assets. Examples include:

• Investment management services for virtual assets.
• Staking virtual assets to earn fees or rewards in proof-of-stake systems.

Other Virtual Asset activities   

Proprietary Trading

Proprietary trading requires a No Objection Certificate (NOC) from VARA. Specific details include:

• Certain volumes of trading above must be registered with VARA.
• Proprietary trading must be conducted through a separate company and not under a regulated activity license.

Virtual Asset Issuance (Category 2)

Issuance of virtual assets that do not fall under Category 1 as defined in the VARA Virtual Assets Issuance Rulebook. Requirements include:

• Submitting a VARA Issuance Approval Form with details on the purpose, use, and business nature of the virtual asset.
• Providing a whitepaper and issuer information.
• Compliance with AML/CFT and technical standards, including data privacy and cryptographic controls.
• Prohibition of anonymity-enhanced tokens.

Special Conditions for Licensing

• Segregation of Custody Services: Virtual Asset Custody Services must operate as a distinct legal entity with a standalone license.
• Multiple Activities: Entities licensed for multiple activities must meet the requirements for each activity in full and maintain compliance.
• Prohibition of Proprietary Trading: Licensed VASPs are not permitted to engage in proprietary trading under their regulated activities license. 

Compliance Requirements

VASPs must demonstrate compliance with:

• AML/CFT policies.
• Technical, information security, and cryptographic standards.
• Data privacy regulations.

Entities must continuously meet these standards and maintain compliance across all licensed activities.

By obtaining a VARA license, entities can ensure regulatory compliance, foster stakeholder trust, and operate within Dubai's thriving virtual asset ecosystem. For assistance with licensing, contact Filings.ae for expert guidance.

Documents Requirements for VASP License Application

Applying for a Virtual Asset Service Provider (VASP) License from the Virtual Assets Regulatory Authority (VARA) requires comprehensive documentation. Below is a non-exhaustive list of the documents typically required for the application. Additional documentation may be requested during the licensing process, depending on the nature of the virtual asset activities.

General Business and Compliance Documentation

• Virtual Asset White Paper (if applicable)
• Enterprise Risk Management Framework and Methodology
• Latest Enterprise Risk Assessment
• Compliance Manual
• Compliance Monitoring Program
• Group Compliance Breaches
• AML/CFT Policy and Procedures
• Current AML/CFT Program Status
• Anti-Bribery and Corruption (ABC) Policy and Procedures
• Outsourcing Policy
• Outsourcing Agreements
• Conflicts of Interest Policy
• Insider Lists
• Customer Journey Workflows

Terms and Conditions (Client Agreements)

• Privacy Policy
• Marketing Policy and Plan
• Sample Marketing Materials
• New Product Policy
• Market Conduct Policy
• VA Listing Policy (if applicable)
• VA Assets Analysis
• Records Management Policy

For Asset Managers (if applicable)

• Fund(s) Managed
• Assets Exposure

Technology and Security Documentation

• Technology Infrastructure Design
• Technology Risk Assessment Framework and Methodology
• Business Continuity Management and IT Disaster Recovery Plan
• Key and Wallet Management Policy (if applicable)
• UAE Public Keys and Wallet Addresses (if applicable)
• Information Security Policy
• Penetration Testing Results

Activity-Specific Documentation

• Proprietary Trading Supporting Information (if applicable)
• DeFi Activities Supporting Information (if applicable)
• VA Payment Supporting Information (if applicable) 

How to Apply for a VARA License for Virtual Businesses

The process of obtaining a Virtual Asset Service Provider (VASP) License from the Virtual Assets Regulatory Authority (VARA) involves distinct steps for both new and existing firms. This guide provides an overview of the application process for new entities and the transition process for legacy operators.

Applying for a VARA License [New Firms]

The application process for new firms consists of two stages:

Stage 1: Initial Approval

This stage involves setting up the firm's legal and operational structure.

• Submit Initial Disclosure Questionnaire (IDQ): File the IDQ with either the Dubai Economy & Tourism (DET) or the relevant Free Zone (FZ) authority.
• Provide Additional Documentation: Submit supporting documents such as a business plan, details of beneficial owners, and senior management profiles.
• Pay Initial Fees: Remit 50% of the license application fee to initiate the application review process.
• Receive Initial Approval: Once granted, the firm can proceed with legal incorporation and operational setup, including office space rental and employee onboarding.

Important Note: Firms cannot conduct Virtual Asset activities during this stage. VARA reserves the right to deny Initial Approval if the firm's activities fall outside its regulatory scope or fail to meet required standards.

Stage 2: VASP License Application

Upon receiving Initial Approval, firms can proceed to apply for the full VASP License:

• Prepare and Submit Documentation: Follow the guidelines provided by VARA after receiving Initial Approval.
• Engage with VARA: VARA may request additional information, hold meetings, or conduct interviews during the review process.
• Pay Remaining Fees: Complete payment of the remaining license application fees and the first year's supervision fees.
• Obtain VASP License: The license may include operational conditions as outlined by VARA.

Applying for a VARA License [Existing Firms]

In 2023, the Virtual Assets Regulatory Authority (VARA) provided a structured pathway for existing firms engaged in Virtual Asset (VA) activities prior to February 7, 2023, to transition to its regulatory framework through the Dubai Legacy Programme.

As part of this process:

• Registration with VARA: Firms were required to submit an Initial Disclosure Questionnaire (IDQ) to VARA.
• Application Acknowledgment Notice (AAN): Upon acknowledgement, firms could proceed to apply for the Legacy Operating Permit (LOP) or a No Objection Certificate (NOC).
• Legacy Operating Permit (LOP): The LOP allowed firms to comply with VARA's full regulatory regime over a 12-month period, provided they met baseline requirements. Benefits included:
•     Up to a 50% reduction in licensing fees.
•     Reduced capital requirements.

Conclusion

The Virtual Assets Regulatory Authority (VARA) positions Dubai as a global leader in the virtual asset space by fostering innovation, ensuring compliance, and maintaining market integrity. Whether you're a new business entering the market or transitioning to VARA's framework, obtaining a VARA license is essential for secure and transparent operations. With benefits like enhanced credibility, access to Dubai's digital economy, and global expansion opportunities, VARA provides the foundation for businesses to thrive in the rapidly evolving virtual asset ecosystem.

For expert guidance, Filings.ae is here to help you navigate the licensing process and succeed in this dynamic sector.