The Virtual Assets Regulatory Authority (VARA) has transformed from a nascent regulator into a full‑scale supervisory authority overseeing one of the world’s most active virtual asset markets. Over the past 12 months, VARA has delivered two of the most consequential regulatory frameworks in the global digital asset space – the VA Issuance Rulebook and Exchange‑Traded Derivatives (ETD).
Whether you are a founder, launching a stablecoin, tokenizing real‑world assets, or building a crypto exchange, these rules are no longer optional guidance. They are enforceable law. This article breaks down exactly what has changed, where the rulebooks say so, and how this impacts your licensing journey.
TOKENIZATION
On 9 April 2026, VARA published detailed guidance interpreting the existing Virtual Asset Issuance Rulebook, which has been in its current legally binding version since 19 June 2025. The framework categorizes token issuances into three distinct risk‑based pathways, giving market participants the operational clarity that has been largely absent across competing financial hubs.
Category 1
What it covers:
Fiat‑Referenced Virtual Assets (FRVAs), Asset‑Referenced Virtual Assets (ARVAs) – stablecoins and tokenized RWAs – plus any other tokens VARA designates over time.
Key rules:
- Issuance requires a full Category 1 VA Issuance License and prior VARA approval for each token.
- Minimum paid‑up capital: AED 1.5 million or 2% of average reserve assets over the preceding 24 months, whichever is higher.
- ARVA issuers must also hold net liquid assets equal to at least 1.2 times monthly operating expenses.
- Reserve assets must be held by a licensed custodian, strictly segregated from the VASP’s own assets, with no re‑hypothecation or encumbrance.
- Direct right of ownership for token holders, supported by a legally recognized link between the token and its underlying asset.
Category 2
What it covers:
Virtual assets that are neither Category 1 nor exempt.
Key rules:
- No prior VARA approval is required for the issuance itself.
- However, all placement and distribution must be handled by a VARA‑licensed distributor – and that distributor is assigned responsibility for validating that the issuer complies with the issuance rulebook.
Exempt Virtual Assets
What it covers:
Non‑transferable tokens and redeemable closed‑loop assets (e.g., loyalty points redeemable for goods or services).
Key rules:
- Issuable without prior approval.
- Issuers remain subject to VARA’s supervision and enforcement powers.
For RWA and stablecoin projects: expect a full‑scope licensing process. VARA will examine your reserve management, custody arrangements, whitepaper disclosures, governance framework, and capital adequacy before any token can be distributed. Applicants should plan for a multi‑month application timeline.
HOW RISK DISCLOSURES MUST BE STRUCTURED
The Rulebook already required issuers to publish a Risk Disclosure Statement. The Guidance now introduces specific structural requirements that will change how these documents are drafted.
For the first time, VARA defines materiality: a risk is material if a prospective token holder would reasonably consider it important to their economic decision. Beyond this, the Guidance requires issuers to:
- Group risks into relevant categories;
- Rank risks in descending order of significance within each category; and
- Avoid including non‑material or generic risks.
WHITEPAPER ACCESS
The Rulebook required whitepapers to be published in an “easily accessible” location. The Guidance removes all remaining ambiguity: whitepapers must be freely available to anyone, with no registration walls, no paywalls, and no preconditions of any kind. If a current token issuance structure places a whitepaper behind a sign‑up form or an accredited-investor gate, that structure must change before launch.
Broker‑Dealers May Also Issue Category 2 Tokens
If an entity already holds a Broker‑Dealer Services license (which qualifies it as a Licensed Distributor), it may also issue Category 2 virtual assets. No separate issuance license is required.
The Rulebook described Licensed Distributors as entities that distribute tokens on behalf of others, but it did not address whether they could also serve as issuers. The Guidance now confirms they can.
CMA OVERLAP WARNING FOR FINANCIAL INSTRUMENT RWAS
The Rulebook’s definition of “real‑world asset” already included financial instruments as a sub‑category. The Guidance adds a commercially critical flag: if the underlying RWA qualifies as a financial instrument (e.g., equity, debt, fund units, or derivative exposure), it may also be classified as a “security” under the UAE Capital Markets Authority (CMA) laws – potentially creating a dual‑regulation scenario. This is the first time VARA has explicitly raised this overlap.
Every legal opinion prepared for an RWA financial instrument in Dubai needs to address the CMA overlap directly. This is precisely why the new legal opinion framework requires a scope section covering “compliance with applicable laws” and “jurisdictional risks.”
For RWA and stablecoin projects: expect a full‑scope licensing process. VARA will examine your reserve management, custody arrangements, whitepaper disclosures, governance framework, and capital adequacy before any token can be distributed. Applicants should plan for a multi‑month application timeline.
For other token projects, you can avoid the full license if you partner with a licensed distributor. However, the distributor’s due diligence obligation is not a rubber stamp – they must actively verify your compliance, and VARA will hold both parties accountable.
DERIVATIVES
On 31 March 2026, VARA introduced a purpose‑built regulatory framework for crypto Exchange‑Traded Derivatives (ETDs), codified in Version 2.1 of the Exchange Services Rulebook – effective immediately for all VARA‑licensed VASPs offering exchange services.
As VARA General Counsel Ruben Bombardi stated: “Exchange-traded derivatives are foundational infrastructure for any capital market. Their formal regulation signals that Dubai’s virtual asset ecosystem is advancing from early-stage experimentation to institutional-grade market structure.”
The Five Pillars of the ETD Framework
Pillar 1 – Client Suitability and Classification
Retail investors may be granted access only after strict suitability assessments that cover experience, financial position, net worth, risk tolerance, and capacity to absorb sudden losses. Products judged unsuitable for a client must be blocked immediately.
Pillar 2 – Margin, Leverage and Liquidation Controls
The headline rule: retail leverage is capped at a maximum of 5:1 (minimum 20% initial margin) . This is significantly lower than the 100x leverage offered on some offshore platforms, reflecting VARA’s conservative approach to retail risk protection.
Pillar 3 – Asset Segregation
ETD trading accounts must be segregated from a client’s other accounts. Providers cannot expose clients outside ETD services to loss mutualization arising from derivative activity.
Pillar 4 – Enhanced Disclosures
Websites must include clear risk disclosures and a disclaimer stating that VARA approval does not constitute endorsement of any specific product. Perpetual products require predictive funding rate charts so retail clients can gauge likely payment exposure before trading.
Pillar 5 – Regulatory Intervention Powers
VARA retains broad authority to intervene during market stress or disorderly trading. Measures include:
- Suspending products
- Requiring position liquidations
- Increasing margin requirements
- Strengthening risk controls (e.g., insurance funds)
- In urgent scenarios, taking immediate action without prior notice
MARGIN TRADING
Part IV of the Exchange Services Rulebook governs margin trading. Requirements include:
- Explicit VARA authorization for margin trading services.
- Minimum initial margin and maintenance margin levels
- Standardized margin trading agreements with mandatory risk disclosures.
Only firms already licensed for exchange services can apply to offer ETDs. Applicants must submit product terms, margin schedules, close‑out procedures, insurance fund arrangements, client communications and financial information before launch. VARA also requires venues to test price history, liquidity, market depth, ownership concentration and manipulation risk for each underlying asset before listing any derivative contract.
The 5:1 retail leverage cap is not a suggestion – it is a hard legal limit. Your risk management systems must enforce it automatically. And the segregation requirements are not merely accounting niceties; VARA will examine your operational infrastructure to ensure client assets are truly ring‑fenced.
THE ENFORCEMENT REALITY
The UAE received approximately $56 billion in crypto inflows between 2024 and 2025, with institutional transactions up 55% year‑on‑year. Dubai alone accounts for roughly 50% of the total UAE crypto market activity. Against that backdrop, regulatory tolerance for poorly governed or thinly capitalized crypto businesses is shrinking rapidly.
Licensing is no longer treated as an endpoint. It is an entry requirement to a regulated financial ecosystem. 2026 is the year these rulebooks will be enforced. Applicants are advised to embed compliance into their operational DNA from day one.
PRACTICAL CHECKLIST FOR APPLICANTS
| If you are… | Your immediate priorities |
| Issuing a stablecoin or RWA token | Obtain Category 1 VA Issuance License; prepare reserve management and custody arrangements; draft compliant whitepaper; meet AED 1.5m or 2% capital requirement |
| Issuing other tokens | Partner with a VARA‑licensed distributor; ensure the distributor conducts proper due diligence |
| Offering exchange services | Secure exchange services license first; then apply for explicit ETD authorization |
| Offering margin trading | Obtain explicit authorization under Part IV; implement automated margin and liquidation controls |
| Targeting retail clients | Build suitability assessment systems; enforce 5:1 leverage cap automatically; maintain segregated accounts |
FINAL WORD
Dubai has done what no other jurisdiction has yet achieved: a fully operational, legally enforceable, and globally replicable framework for both tokenization and virtual asset derivatives. The message for market participants is unambiguous – success in Dubai now requires not just innovation, but institutional‑grade governance, capital discipline, and compliance systems. Those who embrace this reality will find Dubai the most welcoming and well‑regulated jurisdiction for virtual asset activities in the world. Those who do not will find the regulatory environment increasingly unforgiving.
FAQS
Q: Do I need a full VARA license to issue a real‑world asset (RWA) token?
A: Yes. Under Category 1 of the VA Issuance Rulebook, any ARVA requires a full VARA license and prior approval for each token issuance. Reserve assets must be held with a licensed custodian, strictly segregated, and the minimum capital requirement (AED 1.5 million or 2% of average reserve assets) applies.
Q: Can I issue a stablecoin pegged to the US dollar in Dubai?
A: Yes, with stringent conditions. FRVAs referencing non‑AED currencies are Category 1 tokens. Issuers must maintain 100% reserve backing, full redeemability, and paid‑up capital of AED 1.5 million plus 2% of circulating supply. AED‑referenced stablecoins fall under the UAE Central Bank jurisdiction.
Q: What is the maximum leverage retail investors can use on crypto derivatives in Dubai?
A: 5:1 leverage (minimum 20% initial margin). This hard cap is set out in Part V.G of the Exchange Services Rulebook (Version 2.1). VARA‑licensed exchanges must automatically enforce this limit.
Q: I want to issue a utility token that is not a stablecoin or RWA. Do I still need a license?
A: Not directly, but you cannot distribute it yourself. Your token falls under Category 2. Issuance requires no prior VARA approval, but all distribution must be handled by a VARA‑licensed distributor, who bears legal responsibility for validating your compliance.
Q: What are the “exempt” virtual assets that need no approval?
A: Non‑transferable tokens and redeemable closed‑loop assets (e.g., loyalty points redeemable for goods/services but not tradable on secondary markets). Issuers remain subject to VARA’s supervision and enforcement powers.
Q: As an exchange, what do I need to offer futures or perpetual contracts?
A: Two‑step authorization. First, hold a VARA exchange services license. Second, obtain explicit authorization under Part V of the Exchange Services Rulebook. Your application must include product terms, margin schedules, close‑out procedures, insurance fund arrangements, and evidence of asset testing.
Q: Can retail clients trade perpetual swaps on a VARA‑licensed platform?
A: Yes, under strict safeguards. Perpetual ETDs are permitted under Part V.H, provided the platform offers predictive funding rate charts and retail clients pass a suitability assessment covering experience, net worth, and risk tolerance.
Q: What happens if a VARA‑licensed VASP breaches the 5:1 leverage cap?
A: VARA has immediate intervention powers. The Authority may suspend products, require position liquidations, increase margin requirements, or take action without prior notice in urgent scenarios. Non‑compliance can lead to fines, license suspension, or revocation.
Q: I am a foreign token project. Can I distribute my token in Dubai without setting up a local entity?
A: Only through a licensed distributor. Under Category 2, you do not need your own VARA license, but your distributor must be a VARA‑licensed entity established in Dubai. For Category 1 tokens, you must obtain your own full VARA license and incorporate in Dubai.
Q: What is the single most important change applicants must prepare for in 2026?
A: The shift from licensing as an endpoint to active, ongoing supervision. Over 80 VASPs are now licensed, but 2026 is the year of enforcement. VARA expects institutional‑grade governance, capital discipline, internal controls, and operational resilience. Prepare for a supervisory relationship, not a one‑time approval.
