Summary
The UAE operates five concurrent crypto regulatory regimes: CMA (federal), VARA (Dubai), DFSA (DIFC), FSRA (ADGM), and CBUAE (payment tokens/DeFi). Standard Chartered's USDC minting launch in the DIFC was enabled by the DFSA's Crypto Token regime (updated January 2026) and the DIFC's status as a financial free zone. The CBUAE's September 2026 compliance deadline for DeFi and payment-token infrastructure under Federal Decree-Law No. 6 of 2025 is the next major milestone. Unlike MiCA's single rulebook, the UAE requires compliance with multiple regulators depending on jurisdiction.
Key Points
- Five concurrent regimes: CMA (federal, replaced SCA Jan 1 2026), VARA (Dubai), DFSA (DIFC), FSRA (ADGM), CBUAE (payment tokens)
- CMA Decision No. 4/R.M/2026 (Feb 13): 8 licensed activities, capital floors AED 500K-AED 4M, bans privacy/algorithmic tokens
- DIFC/DFSA: firm-led token suitability since Jan 12, 2026; recognizes EURC, USDC, RLUSD as fiat tokens
- VARA April 2026 Guidance: clarified ARVA treatment, banned boilerplate risk disclosures
- CBUAE PTSR: Dirham Payment Tokens require full license; Foreign Payment Tokens require registration
- CBUAE September 2026 deadline: DeFi, stablecoin, payment-token infrastructure must comply with Fed Decree-Law No. 6
- Standard Chartered's DIFC USDC launch uses DFSA framework + CBUAE non-objection registration
- Privacy tokens and algorithmic stablecoins prohibited across all regimes
- 100+ licensed entities active across all regimes
- Unlike MiCA's single passport, UAE requires separate authorisation per regulator