Legal Insights
Last updated: April 10, 2026
Quick answer: VARA published detailed guidance in April 2026 interpreting its existing Virtual Asset Issuance Rulebook in relation to token issuance in Dubai. Key changes: Risk Disclosure Statements must rank material risks in descending order, generic boilerplate is prohibited. Whitepapers must be freely accessible with no registration walls. Direct-ownership ARVAs do not require Reserve Assets. ARVA legal opinions must follow a new five-part framework. Broker-Dealer licence holders can issue Category 2 tokens without a separate licence. VARA has flagged for the first time that financial instrument RWAs may also fall under UAE Capital Markets Authority regulation.
NeosLegal advises on Dubai token issuance and VARA licensing.
Key Takeaways
-
-
- VARA published its Guidance on Virtual Asset Issuance on 9 April 2026, a non-binding companion to the May 2025 Rulebook that carries significant practical weight during licensing review.
- Direct-ownership ARVA tokens, where ownership of the underlying asset transfers with the token, do not require Reserve Assets; the full reserve regime applies only to stable-value ARVAs.
- VARA has introduced a mandatory five-part legal opinion framework for ARVA issuers, creating a new compliance workstream that every issuer must address before launch.
- The Guidance explicitly warns for the first time that tokenised real-world assets qualifying as financial instruments may also be regulated as securities under the UAE Capital Markets Authority.
- Risk disclosures must now contain only material, ranked risks, generic boilerplate disclaimers are explicitly prohibited.
- NeosLegal has structured 300+ crypto and Web3 projects globally and across VARA, ADGM, DIFC, and CMA frameworks since 2016.
-
Table of Contents:
- How Risk Disclosures Should Be Written
- Whitepaper Access
- Broker-Dealers Can Also Issue Category 2 Tokens
- Reserve Assets: When They Apply and When They Do Not
- Legal Opinion Framework for ARVAs
- Concrete Examples of Exempt Tokens
- ARVA Disclosure Terms Defined
- Notification Channels
- Governance Disclosure for Category 1 Issuers
- CMA Overlap Warning for Financial Instrument RWAs
- Templates and Worked Examples
- Key Takeaway
- FAQ
Why This Guidance Matters for Dubai Token Issuance in 2026
Dubai’s Virtual Assets Regulatory Authority published its Guidance on Virtual Asset Issuance in April 2026, and for any founder, issuer, or legal team working on a Dubai token issuance right now, it does something the Rulebook alone could not: it tells you exactly how to structure the documents, who qualifies to issue which category, and where the commercially significant edge cases sit.
The Guidance interprets VARA’s existing Virtual Asset Issuance Rulebook rather than introducing new legislation. It draws clear distinctions across three separate issuance pathways, Category 1, Category 2, and Exempt Virtual Assets, and adds practical direction that was missing from the Rulebook’s more abstract language.
Much of the Guidance explains what was already in the Rulebook. This article focuses on the points that are genuinely new, and what they mean in practice.
How Risk Disclosures Should Be Written
The Rulebook already required issuers to publish a Risk Disclosure Statement. The Guidance now introduces specific structural requirements that will change how these documents look in practice.
For the first time, VARA defines materiality: a risk is material if a prospective token owner would reasonably consider it important to their economic decision. Beyond this, the Guidance requires issuers to group risks into relevant categories, rank them in descending order of significance within each category, and avoid including non-material or generic risks. Boilerplate disclaimers that could apply to any token are explicitly discouraged.
The shift here is from “disclose everything” to “disclose what matters, clearly and in the right order.”
Whitepaper Access
Whitepapers must now be unconditionally freely available, any access gate, however minimal, no longer meets VARA’s standard.
The Rulebook required Whitepapers to be published in an “easily accessible” location. The Guidance removes all remaining ambiguity: Whitepapers must be freely available to anyone, with no registration walls, no paywalls, and no preconditions of any kind.
If your current token issuance structure puts a Whitepaper behind a sign-up form or an accredited investor gate, that structure needs to change before launch.
Broker-Dealers Can Also Issue Category 2 Tokens
If an entity already holds a Broker-Dealer Services licence (which qualifies it as a Licensed Distributor), it can also issue Category 2 virtual assets. No separate issuance licence is needed. The Rulebook described Licensed Distributors as entities that distribute tokens on behalf of others, but did not address whether they could also be issuers themselves. The Guidance confirms they can.
Reserve Assets: When They Apply and When They Do Not
This is one of the most commercially significant points in the Guidance.
The Rulebook’s ARVA rules require issuers to hold and maintain Reserve Assets, but the language was already limited to ARVAs that maintain a stable value relative to an underlying asset. The Guidance makes the practical consequence of this fully explicit by distinguishing between two types of asset-referenced tokens:
-
-
- Stable-value ARVAs (tokens that maintain a peg or stable price relative to a real-world asset, such as a gold-backed token tracking the gold price): Reserve Asset requirements apply in full.
- Direct-ownership ARVAs (tokens that represent actual ownership of the underlying asset, where ownership transfers with the token): Reserve Asset requirements do not apply. The holder already owns the asset itself.
-
For anyone building tokenised real estate, commodity, or art products, this distinction determines whether the compliance programme needs to include a full reserve management operation.
Legal Opinion Framework for ARVAs
The Rulebook required ARVA issuers to provide a legal opinion from a registered lawyer but said nothing about format or content.
The Guidance introduces a structured five-part framework:
|
Authorship and Qualification |
The opinion must come from a duly registered practising lawyer (not internal counsel) with relevant expertise in financial, securities, or virtual asset law. |
|
Independence and Objectivity |
Any interest in the issuer or the token must be disclosed, along with a confirmation that it does not compromise the lawyer’s professional duties. |
|
Scope |
Must cover the issuer’s capacity and authority, the token’s regulatory classification, rights granted to holders, compliance with applicable laws, and jurisdictional risks. |
|
Assumptions and Limitations |
All assumptions and sources relied upon must be clearly stated. |
|
Ongoing Validity |
The opinion must be dated, signed, and kept current. If the token’s structure or relevant law changes materially, a revised opinion is required. |
This creates a new compliance workstream for every ARVA issuer.
Concrete Examples of Exempt Tokens
The Rulebook defined two categories of Exempt VAs (Non-Transferable Virtual Assets and Redeemable Closed-Loop Virtual Assets) through technical criteria, but gave no examples. The Guidance fills this gap:
-
-
- Non-Transferable VAs include things like commemorative tokens, achievement badges, or game rewards that cannot be transferred between people.
- Redeemable Closed-Loop VAs include loyalty points, discount schemes, and store credit that can only be redeemed with the issuer or designated merchants and cannot be traded on open markets.
-
The Guidance also clarifies that if an Exempt VA is later modified to add features such as transferability, the issuer must comply with the requirements of whichever higher category it now falls into before those changes take effect.
ARVA Disclosure Terms Defined
VARA has resolved the definitional ambiguity around two terms every ARVA issuer must disclose monthly, and the definition of “value” has a specific data aggregation implication for issuers listed across multiple venues.
ARVA issuers are required to disclose the number and value of tokens in circulation on a monthly basis. The Guidance now defines both terms precisely.
“Number” means total units in circulation. “Value” means a reasonably accurate total market valuation, calculated using the average unit price across all venues where the token is available, not the issue price, not a single exchange price, but an average across all distribution venues.
For issuers listed on multiple trading venues, this creates a data aggregation requirement that must be built into the monthly reporting infrastructure from day one.
Notification Channels
The Rulebook required issuers to take reasonable steps to notify token holders of changes. The Guidance specifies the expected channels: notifications should go through the same channels used for the original announcement, as well as through alerts on any trading venues where the token is listed.
Governance Disclosure for Category 1 Issuers
The Rulebook required a detailed description of governance arrangements in the Whitepaper. The Guidance sets out what VARA expects this to include for Category 1 issuers:
-
-
- Organisational structure showing hierarchy, business units, risk functions, and reporting lines.
- Composition, responsibilities, and meeting frequency of all relevant boards and committees.
- Processes for amendments relating to the virtual asset, and where applicable, reserve assets and redemption.
- A compliance and risk management framework covering structures, processes, and controls for identifying and mitigating material risks.
-
CMA Overlap Warning for Financial Instrument RWAs
The Rulebook’s definition of “real-world asset” already included financial instruments as a sub-category. The Guidance adds a commercially important flag: if the underlying RWA qualifies as a financial instrument, it may also be classified as a “security” under the UAE Capital Markets Authority’s laws, potentially creating a dual-regulation scenario. This is the first time VARA has raised this overlap explicitly.
The practical consequence: if you are tokenising an asset that could be characterised as a financial instrument, equity, debt, fund units, or derivative exposure, the regulatory analysis cannot stop at VARA.
The CMA layer must be assessed before the token structure is finalised. Missing this overlap at the structuring stage does not just create a compliance problem, it can invalidate the token’s legal basis entirely and require a full restructure after launch.
Every legal opinion prepared for a financial instrument RWA in Dubai needs to address the CMA overlap directly, which is precisely why the new legal opinion framework requires a scope section covering “compliance with applicable laws” and “jurisdictional risks.”
Templates and Worked Examples
The Guidance includes an entire Part II of illustrative examples that has no equivalent in the Rulebook. These cover classification scenarios for Category 1, Category 2, and Exempt VAs, as well as a Licensed Distributor operational walkthrough. Most notably, it includes a full Whitepaper template and a Risk Disclosure Statement template showing exactly how to structure these documents in line with Schedule 1. For practitioners preparing their first filings, this section is likely the most immediately useful part of the Guidance.
Key Takeaway
The 2026 Guidance turns abstract Rulebook rules into practical direction. While much of it explains and clarifies what the Rulebook already said, three additions stand out for their commercial impact in the Dubai token issuance market.
First: the explicit confirmation that direct-ownership ARVA tokens do not require Reserve Assets. For RWA issuers building direct-ownership structures, this eliminates an entire compliance workstream.
Second: the new five-part legal opinion framework. Every ARVA issuer now has a defined standard to meet, and every legal opinion prepared before this Guidance needs to be assessed against the new framework.
Third: the CMA dual-regulation warning for financial instrument RWAs. The VARA framework and the CMA securities framework can overlap, and VARA has now said so explicitly for the first time.
If you are building or advising on tokenised real-world asset products in Dubai, these three points deserve close attention before your token architecture is finalised.
Frequently Asked Questions:
1. What is VARA's new Guidance on Virtual Asset Issuance and when does it apply?
VARA published its Guidance on Virtual Asset Issuance on 9 April 2026. It is a non-binding companion document to the VA Issuance Rulebook (in effect since May 2025) that clarifies how VARA interprets its own rules and what it expects from market participants in practice. While technically indicative, it carries significant practical weight during licensing review.
2. Do all ARVA tokens require reserve assets under the new VARA guidance?
No. Reserve asset requirements apply only to stable-value ARVAs, tokens that maintain a peg or stable price relative to a real-world asset. Direct-ownership ARVAs, where the token represents actual ownership of the underlying asset and ownership transfers with the token, do not require reserve assets. For real estate tokenisation projects where the token represents the title, this distinction removes an entire compliance layer.
3. What must a VARA-compliant legal opinion for an ARVA now include?
Under the new five-part framework, a VARA-compliant ARVA legal opinion must address: authorship and qualification (a duly registered practising lawyer with relevant expertise); independence and objectivity (disclosure of any interest in the issuer); scope (issuer authority, token classification, holder rights, legal compliance, and jurisdictional risks); assumptions and limitations (clearly stated); and ongoing validity (dated, signed, and updated when the token structure or applicable law changes materially).
4. What is the CMA overlap risk for financial instrument RWAs?
If the underlying real-world asset qualifies as a financial instrument, such as a bond, sukuk, equity interest, or fund unit, it may also be classified as a security under UAE Capital Markets Authority laws in addition to VARA regulation, creating a dual-regulation scenario. This is the first time VARA has raised this overlap explicitly. A VARA licence alone does not satisfy CMA requirements for the underlying instrument.
5. Can a VARA-licensed broker-dealer issue its own tokens in Dubai?
Yes. Under the Guidance, an entity holding a VARA Broker-Dealer Services licence can also issue Category 2 virtual assets without a separate issuance licence. This is a meaningful efficiency for broker-dealer licensed entities that want to bring their own token products to market alongside their distribution activities.
6. How can NeosLegal help with VARA compliance and tokenisation in the UAE?
NeosLegal supports crypto and Web3 companies with VARA compliance, token structuring, ARVA classification, Whitepaper and risk disclosure preparation, and licensing strategy across VARA, ADGM, DIFC, and CMA federal frameworks. NeosLegal has structured 300+ projects since 2016.
VARA’s Guidance changes how crypto and RWA projects must be structured in practice.
NeosLegal helps founders design compliant token models, prepare Whitepapers and disclosures, and navigate licensing and regulatory strategy in the UAE. Schedule a strategy call with our team today to build with confidence.
About the Author
Irina Heaver is the UAE Crypto Lawyer and Founder of NeosLegal. She has structured over 300 crypto and Web3 projects and advised governments and regulators on crypto asset frameworks.
Legal Disclaimer: This briefing is published by NeosLegal for informational purposes only and does not constitute legal advice. The regulatory landscape for virtual assets in the UAE is evolving. Institutions should obtain qualified legal counsel before structuring any tokenisation activity. Current as of April 2026. Contact NeosLegal at neoslegal.co/strategy-call.
