UAE Virtual Assets and Crypto Legal Terms Explained:
The 2026 Glossary for Founders
UAE Virtual Assets and Crypto Legal Terms Explained:
The 2026 Glossary for Founders
Every term explained in UAE regulatory context. VARA. ADGM. DIFC. CBUAE.
Written by NeosLegal — UAE’s No.1 Crypto Law Firm Since 2016
Last updated: 27/03/2026
This glossary covers the key legal, regulatory, and technical terms that crypto and Web3 founders encounter when building, licensing, and structuring in the UAE. Every definition is explained in the context of UAE law, specifically VARA, ADGM, DIFC, CBUAE, and CMA, rather than in generic global terms. It is maintained by NeosLegal, the UAE’s first crypto-native law firm since 2016, and updated as UAE virtual asset regulation evolves.
Dedicated
to Crypto since
Structured Web3
& Crypto Projects
Deals
Closed
Law Firm
Understanding UAE crypto law starts with understanding the terminology.
The UAE operates five distinct regulatory frameworks for virtual assets: VARA, ADGM, DIFC, CBUAE, and CMA. Each uses specific legal and regulatory terms that have precise meanings within those frameworks. Using the wrong term, misunderstanding a definition, or assuming a global definition applies to the UAE context are among the most common and most costly mistakes founders make during structuring, licensing, and fundraising.
This glossary exists to fix that. Every term below is defined in plain language and then explained specifically in the UAE regulatory context. Where a term has different meanings across different UAE frameworks, for example “custody” under VARA versus “custody” under ADGM, both are covered.
The glossary is organized into six categories reflecting the key areas of UAE crypto legal practice.
How to use this glossary
Each term has its own dedicated page, approximately 800 words, covering:
-
-
- Plain language definition
- UAE regulatory context (VARA, ADGM, DIFC, CBUAE, or CMA)
- Why the term matters for founders
- Common misunderstandings
- Related terms
- Link to the relevant NeosLegal service
-
If you need legal advice specific to your situation rather than a general definition, the strategy call is free.
Book a free strategy call at neoslegal.co/strategy-call/
Use the category navigation below or search for the specific term you need.
Category 1: Licensing and Regulation
Category 2: Token Issuance and Classification
Category 3: Company Structuring and Incorporation
Last updated: 27/03/2026
Based on:
– VARA Rulebook Version 2.0 (May 2025)
– ADGM VA Guidance VER07.100625
– Federal Decree-Law No. 6 of 2025
Category 1: Licensing and Regulation
The regulatory frameworks, licensing mechanisms, and key concepts every UAE crypto founder needs to understand before choosing a regulator or filing an application.
VASP — Virtual Asset Service Provider
A business that conducts one or more regulated virtual asset activities. In the UAE, VASPs must be licensed by VARA, ADGM, DIFC, or CMA depending on their jurisdiction and activities. Operating as an unlicensed VASP is an active enforcement risk. VARA fined 19 firms in 2025.
Read the full definition
VARA — Virtual Assets Regulatory Authority
The world’s first dedicated virtual asset regulator, established under Dubai Law No. 4 of 2022. VARA governs virtual asset activities in Dubai and most UAE free zones outside DIFC. VARA Rulebook Version 2.0, published May 2025, governs all current licensing applications.
Read the full definition
ADGM FSRA — Abu Dhabi Global Market Financial Services Regulatory Authority
The financial services regulator within Abu Dhabi Global Market. The FSRA has been licensing virtual asset businesses since 2018 under English common law. Preferred for institutional operations, fund management, and RWA platforms targeting sophisticated international investors.
Read the full definition
DIFC DFSA — Dubai International Financial Centre Dubai Financial Services Authority
The regulator within the Dubai International Financial Centre. The DFSA brought enhanced crypto governance reforms into force on 12/01/2026. Preferred for financial-services-adjacent businesses requiring common law comfort.
Read the full definition
CBUAE — Central Bank of the UAE
The federal central bank. Federal Decree-Law No. 6 of 2025 brought DeFi protocols and payment platforms into CBUAE regulatory scope. September 2026 compliance deadline. Penalties up to AED 1 billion.
Read the full definition
CMA — Capital Markets Authority (formerly SCA)
The federal securities regulator governing security tokens, commodity contracts, and federal-level VASP activity outside VARA and ADGM jurisdictions.
Read the full definition
VASP License
The authorization issued by VARA, ADGM, DIFC, or CMA permitting a business to conduct specified regulated virtual asset activities. There is no single UAE crypto license. The correct license depends on the specific activities and the governing regulator.
Read the full definition
Financial Services Permission (FSP)
The ADGM FSRA equivalent of a VASP license. An FSP authorizes the holder to conduct one or more specified regulated activities within ADGM. The activity-based approach requires precise mapping of the business model to the correct regulated activities.
Read the full definition
In-Principle Approval (IPA)
Conditional regulatory authorization issued by VARA or ADGM indicating that the regulator is prepared to grant a full license subject to the applicant satisfying specific remaining conditions, typically capital injection, office establishment, and Approved Persons completion.
Read the full definition
Sponsored VASP Regime
A VARA mechanism allowing an unlicensed virtual asset service provider to operate in Dubai under the regulatory sponsorship of a VARA-licensed entity. The sponsor takes on regulatory responsibility for the sponsored entity’s compliance. Designed as a transitional pathway toward full licensing.
Read the full definition
Approved Person
An individual who holds a specific controlled function within a VARA or ADGM-licensed firm and must be individually approved by the relevant regulator. Common Approved Persons include the Senior Executive Officer, Compliance Officer, MLRO, and Finance Officer.
Read the full definition
Regulatory Perimeter
The boundary that defines which activities require regulatory authorization and which do not. Determining whether a specific business activity falls within VARA’s or ADGM’s regulatory perimeter is the first and most important step in UAE crypto market entry.
Read the full definition
VA Regulated Activity
A specific category of virtual asset service that requires VARA or ADGM authorization. VARA defines eight VA Regulated Activity categories: exchange, broker-dealer, custody, investment management, advisory, transfer and settlement, lending and borrowing, and virtual asset issuance.
Read the full definition
Category 2: Token Issuance and Classification
How tokens are classified under UAE law, what each classification means for licensing and exchange listing, and the legal documents required for compliant token launches.
Utility Token
A token that provides holders with access to a product or service rather than representing an investment or ownership right. Under VARA’s framework, utility tokens are subject to specific issuance and marketing requirements. Misclassifying an investment token as a utility token is one of the most common and costly token legal mistakes.
Read the full definition
Investment Token
A token that represents an ownership interest, profit entitlement, or investment return. Investment tokens are subject to stricter VARA and CMA regulatory requirements than utility tokens. Classification as an investment token triggers securities-adjacent regulatory obligations.
Read the full definition
Exchange Token
A token issued by a virtual asset exchange for use within its own platform, for example as a fee discount mechanism or governance instrument. Exchange tokens have their own classification and regulatory treatment under VARA’s framework.
Read the full definition
ARVA — Asset-Referenced Virtual Asset
A token that purports to maintain stable value by referencing one or more real-world assets, such as commodities, real estate, or financial instruments. VARA introduced the world’s first dedicated ARVA regulatory framework in Rulebook Version 2.0, May 2025. RWA tokenization projects in Dubai issuing ARVA tokens require VARA licensing.
Read the full definition
FRVA — Fiat-Referenced Virtual Asset
A token that purports to maintain stable value by referencing one or more fiat currencies. Broadly equivalent to what other jurisdictions call stablecoins. Both VARA and ADGM have dedicated frameworks for FRVA issuance. ADGM’s FRT framework came into force 01/01/2026.
Read the full definition
Token Legal Opinion
A formal legal analysis confirming the regulatory classification of a token, typically required by Tier-1 exchanges before listing. NeosLegal holds a 100% acceptance rate on Tier-1 exchange legal opinions across all submissions. Token legal opinions must reflect the specific token structure, not a generic analysis.
Read the full definition
Token Classification
The process of determining which regulatory category a token falls into under UAE law: utility, investment, exchange, ARVA, or FRVA. Wrong classification creates enforcement risk, blocks exchange listing, and may require expensive legal restructuring at the worst possible time, during a fundraising round or exchange application.
Read the full definition
SAFT — Simple Agreement for Future Tokens
A contractual instrument used in pre-launch token fundraising. A SAFT gives investors the right to receive tokens at a future date upon the occurrence of a specified event, typically a token launch. SAFTs must be drafted in compliance with UAE and applicable offshore securities laws.
Read the full definition
Token Purchase Agreement (TPA)
A contract governing the sale of tokens to investors or purchasers. Used for both pre-launch and post-launch token sales. Must comply with VARA’s token issuance framework and applicable investor protection requirements.
Read the full definition
Whitepaper
A document published by a token issuer describing the project, the token mechanics, the rights and obligations of token holders, risk factors, and the regulatory position of the token. VARA requires whitepaper review and approval for certain token issuance categories. A legally compliant whitepaper is distinct from a marketing document.
Read the full definition
Category 3: Company Structuring and Incorporation
The entity types, jurisdictions, and structural mechanisms available to crypto and Web3 founders establishing businesses in the UAE.
Free Zone Company
A UAE company incorporated within a designated free zone such as DMCC, IFZA, ADGM, or DIFC. Free zone companies benefit from 100% foreign ownership, tax advantages, and streamlined incorporation. The correct free zone depends on the regulatory pathway required. Not all free zones support VARA licensing.
Read the full definition
SPV — Special Purpose Vehicle
A legally separate entity created for a specific, limited purpose, typically to hold a specific asset or conduct a specific transaction. SPVs are the standard structure for RWA tokenization projects, separating the underlying asset from the platform and the token issuer. Wrong SPV design creates investor rights gaps that are expensive to fix post-issuance.
Read the full definition
Foundation
A legal entity without shareholders, established to pursue specific purposes rather than to generate profit for owners. Foundations are commonly used as token governance vehicles, holding treasury assets, managing protocol development funds, and providing legal personality for decentralized projects. Common foundation jurisdictions include Cayman Islands, Panama, and Liechtenstein.
Read the full definition
DAO — Decentralised Autonomous Organisation
An organization governed by smart contracts and token holder votes rather than traditional corporate hierarchy. DAOs operating without a legal wrapper face unlimited personal liability for members. UAE legal wrappers for DAOs include the ADGM DLT Foundation and the RAK DARe framework.
Read the full definition
ADGM DLT Foundation
A legal entity specifically designed for decentralised blockchain-based organizations within ADGM. Provides DAOs with legal personality, limited liability, and governance recognition under English common law. Preferred for DAOs targeting institutional counterparties and sophisticated investors.
Read the full definition
RAK DARe — Ras Al Khaimah Decentralised Autonomous Regulation
The UAE’s DAO registration framework in Ras Al Khaimah, allowing DAOs to incorporate as recognized legal entities. Lower cost than ADGM’s DLT Foundation. Preferred for cost-conscious founders who need legal personality without full institutional-grade credibility requirements.
Read the full definition
Beneficial Ownership
The natural person who ultimately owns or controls a legal entity, regardless of the formal ownership structure. UAE regulators including VARA, ADGM, and DIFC require full beneficial ownership disclosure as part of all licensing applications. Incomplete or inaccurate beneficial ownership disclosure is a common cause of application delays.
Read the full definition
UBO — Ultimate Beneficial Owner
The natural person who is the ultimate beneficial owner of a legal entity, typically defined as any person who directly or indirectly owns more than 25% of the entity or exercises ultimate effective control. UBO identification and verification is a core AML requirement for all UAE-licensed virtual asset businesses.
Read the full definition
Holding Company
A parent entity that holds ownership interests in one or more subsidiary operating entities. UAE holding companies, particularly qualifying free zone entities, can provide tax-efficient structures for crypto businesses with international operations. The holding company structure must be designed before incorporation to avoid costly restructuring.
Read the full definition
Offshore Foundation
A foundation incorporated in an offshore jurisdiction, typically Cayman Islands, Panama, or Liechtenstein, used as a token governance or treasury vehicle. Most serious token projects use a UAE operating entity combined with an offshore foundation for token governance. The specific configuration depends on the token structure, investor geography, and regulatory pathway.
Read the full definition
Category 4: RWA Tokenization
The concepts, structures, and regulatory frameworks relevant to real-world asset tokenization in the UAE.
RWA — Real World Asset
A physical or financial asset represented on a blockchain as a digital token. RWA tokenization converts ownership rights in real-world assets, including real estate, commodities, private credit, and financial instruments, into on-chain tokens that can be traded, fractionalized, and settled digitally.
Read the full definition
Tokenization
The process of representing ownership rights in a real-world or digital asset as a blockchain-based token. Tokenization creates programmable, divisible, and transferable representations of assets that can be accessed by a global investor base. In the UAE, tokenization of real-world assets is regulated under VARA’s ARVA framework and ADGM’s digital securities rules.
Read the full definition
Fractional Ownership
The division of ownership in an asset into smaller units that can be held by multiple investors. Tokenization enables fractional ownership of assets such as real estate or commodities that were previously accessible only to buyers with sufficient capital to acquire the whole asset.
Read the full definition
Digital Security
A financial instrument, such as equity, debt, or a fund interest, issued in digital form on a distributed ledger. Digital securities are regulated as securities under UAE law, with ADGM’s FSRA having the most developed framework for digital securities issuance and trading.
Read the full definition
Custody (in the context of RWA)
The legal and operational arrangement for holding the underlying real-world asset in an RWA tokenization structure. Custody design determines investor rights, regulatory classification, and the enforceability of token holder claims against the underlying asset. Wrong custody design is one of the most common structural errors in UAE RWA tokenization projects.
Read the full definition
Category 5: Compliance and AML
The anti-money laundering, counter-terrorism financing, and broader compliance obligations that apply to UAE-licensed virtual asset businesses.
AML — Anti-Money Laundering
The legal and regulatory framework designed to prevent the use of financial systems for money laundering. All UAE-licensed virtual asset businesses must implement a full AML program, including KYC, transaction monitoring, suspicious activity reporting, and MLRO appointment, before licensing approval.
Read the full definition
CTF — Counter-Terrorism Financing
The legal and regulatory framework designed to prevent the financing of terrorist activities through financial systems. CTF obligations apply alongside AML requirements for all UAE-licensed virtual asset businesses and are supervised actively by VARA, ADGM, and DIFC.
Read the full definition
KYC — Know Your Customer
The process of verifying the identity of clients before onboarding them and on an ongoing basis. KYC for virtual asset businesses involves identity verification, address verification, source of funds assessment, and for higher-risk clients, enhanced due diligence.
Read the full definition
EDD — Enhanced Due Diligence
A more intensive level of customer due diligence applied to higher-risk clients, including politically exposed persons, clients from FATF high-risk jurisdictions, and clients with unusual transaction patterns. EDD requires senior management approval and more frequent ongoing monitoring.
Read the full definition
MLRO — Money Laundering Reporting Officer
The individual within a licensed virtual asset business who is responsible for receiving internal suspicious activity reports, determining whether to make external reports to the relevant financial intelligence unit, and overseeing the firm’s AML/CTF program. The MLRO must be approved by the relevant regulator and physically present in the UAE.
Read the full definition
SAR — Suspicious Activity Report
A report filed by a licensed virtual asset business with the UAE Financial Intelligence Unit when the firm suspects that a client or transaction involves money laundering or terrorist financing. Filing obligations apply regardless of the transaction value and regardless of whether the suspicion is later confirmed.
Read the full definition
FATF — Financial Action Task Force
The global standard-setting body for AML/CTF regulation. FATF publishes recommendations that UAE regulatory frameworks including VARA and ADGM implement. FATF also maintains lists of high-risk jurisdictions requiring enhanced due diligence. The UAE’s clean FATF status is a significant commercial advantage for UAE-licensed virtual asset businesses operating internationally.
Read the full definition
PEP — Politically Exposed Person
An individual who holds or has held a prominent public position, such as a head of state, government minister, senior military official, or senior executive of a state-owned enterprise, and their immediate family members and close associates. PEPs require mandatory enhanced due diligence under UAE AML rules.
Read the full definition
Category 6: Tax and Structuring
The UAE tax framework, qualifying structures, and international reporting obligations relevant to crypto founders and investors.
Qualifying Free Zone Person (QFZP)
A free zone entity that meets specific conditions entitling it to a 0% corporate tax rate on qualifying income under the UAE Corporate Tax Law. Conditions include substance requirements, qualifying activities, and compliance with transfer pricing rules. Proper QFZP structuring is one of the most valuable tax planning tools available to UAE crypto businesses.
Read the full definition
Corporate Tax UAE
The UAE introduced corporate tax at 9% on taxable income above AED 375,000 from June 2023. Free zone entities conducting qualifying activities may benefit from a 0% rate as Qualifying Free Zone Persons. VARA was formally recognized as a competent authority under UAE Corporate Tax Law in February 2026 via Ministerial Decision No. 336 of 2025.
Read the full definition
CARF — Crypto Asset Reporting Framework
An OECD-developed international standard for the automatic exchange of tax information relating to crypto assets between tax authorities. CARF is expected to be adopted by the UAE and will require UAE-based virtual asset service providers to collect and report information on crypto asset transactions by their clients.
Read the full definition
CRS — Common Reporting Standard
The existing OECD framework for automatic exchange of financial account information between tax authorities. UAE financial institutions, including certain virtual asset businesses, must collect and report CRS information on non-UAE-resident clients. CARF will supplement CRS specifically for crypto assets.
Read the full definition
Substance Requirements
The conditions that a UAE entity must satisfy to benefit from the UAE’s tax-advantaged status, including having genuine economic activity, qualified employees, and adequate physical presence in the UAE. Substance requirements apply to qualifying free zone entities, holding companies, and entities claiming UAE tax treaty benefits.
Read the full definition
Tax Residency Certificate (TRC)
A certificate issued by the UAE Ministry of Finance confirming that an individual or entity is a tax resident of the UAE. Relevant for founders seeking to establish UAE tax residency for personal income or capital gains purposes, and for entities claiming UAE double tax treaty benefits.
Read the full definition
Using this glossary
Every definition page in this glossary is written in UAE regulatory context, not in generic global crypto terms.
If a term means something different under VARA than under ADGM, both are covered.
If a term has changed meaning following VARA Rulebook Version 2.0 (May 2025) or Federal Decree-Law No. 6 of 2025, the current position is reflected.
If a term is commonly misunderstood in a way that creates legal risk for founders, that misunderstanding is explicitly addressed.
This glossary is maintained by NeosLegal and updated as UAE virtual asset regulation evolves.
About NeosLegal
NeosLegal is the UAE’s No.1 crypto law firm, crypto-native since 2016 and dedicated exclusively to digital assets, blockchain, and Web3 law.
The firm was selected by Chambers and Partners to author the UAE chapter of their Virtual Assets 2026 Global Practice Guide, the world’s most authoritative international legal reference across 30 jurisdictions.
NeosLegal was named Middle East Technology Legal Team of the Year at The Oath Middle East Legal Awards 2025.
300+ Web3 and crypto projects structured. 100% acceptance rate on Tier-1 exchange legal opinions.
If you have questions about any term in this glossary as it applies to your specific project, book a free strategy call at neoslegal.co/strategy-call/
Glossary index: A to Z
Quick alphabetical reference for all terms.
AVA — Accepted Virtual Asset ADGM FSRA
AML — Anti-Money Laundering Approved Person
ARVA — Asset-Referenced Virtual Asset Beneficial Ownership
CARF — Crypto Asset Reporting Framework
CBUAE — Central Bank of the UAE
CMA — Capital Markets Authority Corporate Tax
UAE CRS — Common Reporting Standard
CTF — Counter-Terrorism Financing Custody
DAO — Decentralised Autonomous Organisation ADGM DLT Foundation Digital Security
EDD — Enhanced Due Diligence Exchange Token
FATF — Financial Action Task Force Financial Services Permission Foundation Fractional Ownership
FRVA — Fiat-Referenced Virtual Asset Free Zone Company Holding Company In-Principle Approval Investment Token
KYC — Know Your Customer
MLRO — Money Laundering Reporting Officer Offshore Foundation
PEP — Politically Exposed Person Qualifying Free Zone Person RAK DARe Regulatory Perimeter
RWA — Real World Asset
SAFT — Simple Agreement for Future Tokens
SAR — Suspicious Activity Report
SPV — Special Purpose Vehicle Sponsored VASP Regime Substance Requirements Tax Residency Certificate Token Classification Token Legal Opinion Token Purchase Agreement Tokenization
UBO — Ultimate Beneficial Owner Utility Token VA Regulated Activity
VARA — Virtual Assets Regulatory Authority
VASP — Virtual Asset Service Provider VASP License Whitepaper
Legal Disclaimer: This glossary provides general information about legal and regulatory terminology. It does not constitute legal advice. For legal guidance specific to your project, contact NeosLegal at [email protected]. Current as of 27/03/2026
Key Contact
Use the category navigation below or search for the specific term you need.
Category 1: Licensing and Regulation
Category 2: Token Issuance and Classification
Category 3: Company Structuring and Incorporation
Last updated: 27/03/2026
Based on:
– VARA Rulebook Version 2.0 (May 2025)
– ADGM VA Guidance VER07.100625
– Federal Decree-Law No. 6 of 2025
