UAE — DIFC (DFSA)
A recognition-based Crypto Token regime retrofitted onto an established financial-services rulebook. Updated rules took effect 12 January 2026.
Who regulates this
Dubai Financial Services AuthorityDFSA
Financial services conducted in or from the Dubai International Financial Centre. Geographically inside Dubai, but outside VARA's remit.
Licences and permissions
Crypto Token / Investment Token permissions
Dealing, arranging, advising, managing and custody where the instrument is a recognised Crypto Token or a security-like Investment Token.
Permissions are added to a conventional DFSA financial-services licence rather than issued as a standalone crypto licence.
What it takes
Capital
Follows the DFSA prudential categories that apply to the underlying financial service, not a separate crypto-specific schedule.
Timeline
Six to twelve months in practice. The DFSA is a mature regulator and the file is expected to look like a financial-services application, because it is one.
Substance
DIFC premises and DFSA-approved Licensed Functions. The bar for the Senior Executive Officer is set at genuine sector experience.
Where a software vendor sits
Identical in shape to ADGM: the licensed firm owns the regulatory relationship, and its technology providers are governed through the DFSA's outsourcing and operational-resilience rules. Build for the client's audit, not just their launch.
What catches people out
The 2026 rules shift more classification work onto firms via self-assessment. That is a lighter process, not a lighter obligation — a wrong call on a token's status is the firm's to own.
Verify this yourself
We would rather you checked. These are the primary and authoritative secondary sources behind the summary above.