What founders need to know
Key Takeaways
- The CBUAE’s Payment Token Services Regulation (Circular No. 2/2024) licenses three activities: Dirham Payment Token issuing, payment token conversion, and payment token custody and transfer. It applies across the UAE except ADGM and the DIFC.
- A Dirham issuer must be incorporated in the UAE outside the financial free zones. It needs AED 15 million in capital plus 0.5% of tokens in issue, a bank guarantee equal to its paid-up capital, and a 100% cash reserve in a separate escrow account.
- Onshore, merchants can accept only Dirham Payment Tokens for goods and services. Registered Foreign Payment Tokens can only be used to buy virtual assets or their derivatives.
- USD stablecoins are issued in Dubai under a VARA Category 1 VA Issuance licence, with AED 1,500,000 capital plus 2% of supply, or in ADGM by a single-purpose FRT issuer with USD 2,000,000 base capital.
- The DIFC has no issuance regime. The DFSA accepts stablecoins issued elsewhere and allows their use in payments.
- Algorithmic stablecoins and privacy tokens are banned outright onshore, in ADGM and in the DIFC.
- Federal Decree-Law No. 6 of 2025 brought payment services using virtual assets inside the CBUAE perimeter. The one-year transition period ended in September 2026.
“A stablecoin is only as good as its redemption on a bad day. The UAE regulators all ask the same thing in different language: where the reserve sits, who can touch it, and how fast a holder gets paid if the issuer fails. If you can answer those three questions on one page, the rest of the application is paperwork.”
Regulatory Framework
The UAE Stablecoin Regulatory Framework
The UAE regulates stablecoins through four regimes. The Central Bank of the UAE (CBUAE) licenses payment tokens across the UAE outside the financial free zones under the Payment Token Services Regulation (Circular No. 2/2024), and Federal Decree-Law No. 6 of 2025 brought payment services using virtual assets inside its perimeter. VARA licenses fiat-referenced virtual asset issuance in Dubai. The FSRA licenses Fiat-Referenced Token issuance in ADGM. The DFSA accepts stablecoins for use in the DIFC but licenses no issuer.
For which firms currently hold licences under each regulator, see the live UAE VASP Licence Tracker, updated monthly.
There is no single “stablecoin licence”. Each activity around the token is licensed on its own. The core permissions in stablecoin mandates include:
- Dirham Payment Token Issuer (CBUAE). Issuing AED-denominated payment tokens to UAE residents.
- Foreign Payment Token Issuer registration (CBUAE). Distributing a non-AED token into the UAE for virtual asset purchases.
- Payment Token Conversion (CBUAE). Exchanging payment tokens and fiat.
- Payment Token Custodian and Transferor (CBUAE). Holding and moving payment tokens for customers.
- Category 1 VA Issuance (VARA). Issuing an FRVA in Dubai outside the DIFC.
- Issuing a Fiat-Referenced Token (FSRA). Issuing a single-currency stablecoin in ADGM.
- Fiat-Referenced Token Intermediation (FSRA). Distributing an issuer’s FRT in ADGM.
- Providing Money Services (DFSA). Payments with DFSA-accepted stablecoins in the DIFC.
Choose your route by: the currency the token references, who will hold it, what they will use it for, and where the issuer sits. The next section maps those answers to a regulator.
Routing
Which Regulator Licenses Your Stablecoin?
Two facts decide the route: the currency your token tracks and where the issuer sits. Then check where the token will be used, because onshore payment use brings in the CBUAE even when another regulator licensed the issuer.
- Dirham token, any use. CBUAE Dirham Payment Token Issuer licence. VARA and ADGM both bar AED-referenced tokens and leave them to the CBUAE.
- USD or other fiat token, issuer in Dubai outside the DIFC. VARA licence for Category 1 VA Issuance, plus VARA approval of each token and its whitepaper.
- USD or other fiat token, issuer in Abu Dhabi. FSRA permission for Issuing a Fiat-Referenced Token in ADGM.
- Issuer in the DIFC. No issuance route. The DFSA accepts stablecoins for use only. See the DIFC crypto licence page: DFSA permissions, the January 2026 token suitability rules, stablecoin acceptance and payments in the DIFC.
- Foreign token distributed into the UAE. CBUAE Foreign Payment Token Issuer registration, open to issuers outside the UAE and in ADGM or the DIFC. It needs a non-objection from the CMA or local regulator, a legal opinion on the tokens, and a same-currency reserve with regular external audits.
- Gold or commodity-backed token. Not a fiat stablecoin. In Dubai it is an ARVA under VARA’s Category 1 rules; ADGM’s FRT regime does not cover it; a token structured as a commodity contract is a CMA matter. See UAE RWA tokenization.
One token, two regulators
A USD token issued in ADGM and used to buy virtual assets onshore needs both the FSRA permission and CBUAE registration. Plan the second step from day one, because the reserve and disclosure set-up has to satisfy both.
Stablecoins and Payment Tokens
Who Needs a UAE Stablecoin Licence?
Every business that issues, converts, holds or moves stablecoins for others in or into the UAE needs a permission for that activity. The primary use-cases:
Licence required
- Dirham stablecoin issuers CBUAE Dirham Payment Token Issuer licence.
- USD and other fiat stablecoin issuers VARA Category 1 VA Issuance in Dubai or Issuing a Fiat-Referenced Token in ADGM, plus CBUAE registration for onshore use.
- Exchanges and on-off ramps converting stablecoins and fiat CBUAE Payment Token Conversion, alongside the VASP licence.
- Wallet and custody providers holding payment tokens CBUAE Payment Token Custodian and Transferor.
- Payment firms settling in stablecoins CBUAE licensing onshore, or Providing Money Services in the DIFC.
- Distributors of an ADGM issuer’s token FRT Intermediation permission.
Likely outside the perimeter
- Reward and loyalty schemes Reward tokens usable only for the issuer’s or a partner merchant’s goods, and loyalty points that cannot be redeemed for cash, are exempt.
- Closed-loop tokens Tokens usable only to pay for the issuer’s own non-financial goods or services.
- Small schemes The CBUAE may exempt an issuer with a reserve of no more than AED 500,000 and no more than 100 holders.
- Tokenised bank deposits for interbank settlement Outside VARA’s FRVA definition.
- Gold or commodity-backed tokens Not stablecoins under these rules; they follow the asset-referenced and RWA token regimes.
If you are unsure whether the CBUAE, VARA, ADGM or the DIFC is the right route for your token, a strategy call resolves it in 30 minutes.
Choosing Your Regulator
When Should You Choose the CBUAE, VARA, ADGM or the DIFC?
The currency, the holders and the use case drive the decision more than headline cost. The framework below applies to most stablecoin projects.
-
CBUAE (Federal)
- The token references the dirham.
- Holders will pay for goods and services onshore.
- The group can fund AED 15 million in capital, a matching bank guarantee and a full cash reserve.
- A bank-backed issuer can act through a bank subsidiary.
-
ADGM (FSRA)
- A USD or other single-currency token is planned.
- Institutional settlement and cross-border use are the focus.
- A single-purpose issuer entity suits the group.
-
VARA (Dubai)
- A Dubai base is preferred.
- The token will trade on Dubai virtual asset platforms.
- The group also plans asset-referenced tokens under the same issuance rulebook.
-
DIFC (DFSA)
- You use an established stablecoin and do not issue one.
- Payments run through a DIFC money services firm.
Most USD stablecoin projects need two regulators: the issuer’s home regulator, and the CBUAE for onshore use. The VASP licence UAE hub sets out cross-regulator decision logic for combined structures.
Regulator Comparison
CBUAE vs VARA vs ADGM vs DIFC for Stablecoins
| CBUAE Dirham issuer | VARA FRVA | ADGM FRT | DIFC | |
|---|---|---|---|---|
| Instrument | Payment Token Services Regulation, Circular No. 2/2024 | VA Issuance Rulebook, Annex 1 | FSMR and COBS Chapter 19A | DFSA Rulebook and Fiat Crypto Token policy statement |
| Who can issue | UAE-incorporated company outside ADGM and the DIFC | VARA-licensed Category 1 issuer, Dubai outside the DIFC | Single-purpose FSRA-authorised firm in ADGM | No issuance regime |
| Currency | AED only | VARA-approved fiat currency, not AED | Single fiat currency, not AED | Single-currency tokens accepted for use |
| Capital | AED 15 million plus 0.5% of tokens in issue, matching bank guarantee | AED 1,500,000 plus 2% of supply | USD 2,000,000 base | None for the issuer |
| Reserve | 100% cash, separate escrow, audited monthly | 100% cash, short government debt or MMFs, audited monthly | Client money or short government debt, valued daily, attested monthly | No DFSA reserve rules |
| Redemption | Par, next business day | Par, one working day, no fee | Par, T+2 | Not regulated by the DFSA |
| Token approval | CBUAE accepts the whitepaper | VARA approves each FRVA | Whitepaper filed; Accepted FRT status | DFSA assesses each token |
| Typical timeline | 12 to 18 months | 9 to 12 months | 9 to 12 months | No issuer licence |
| Live examples | AE Coin, Zand AED, DDSC | None yet | USDU (Universal Digital) | USDC, EURC, RLUSD |
| Best suited for | Dirham payments onshore | Dubai-based USD issuers | Institutional USD issuers | Firms using established stablecoins |
Central Bank of the UAE
What Does the CBUAE Payment Token Services Regulation Require?
The regulation, in force since August 2024, sets the rules for payment tokens across the UAE outside ADGM and the DIFC. No one may provide a payment token service in the UAE, or directed at people in the UAE, without a CBUAE licence or registration. The prohibition binds VARA and CMA licensees too, and the CBUAE can designate a token as a payment token whatever its issuer calls it.
The three licences
- Dirham Payment Token Issuer for issuing AED tokens
- Payment Token Conversion for exchanging payment tokens and fiat
- Payment Token Custodian and Transferor for holding and moving tokens for customers
Only companies incorporated in the UAE, including the free zones but not ADGM or the DIFC, can be licensed. A bank cannot issue directly but may use a subsidiary. Issuers outside that perimeter, including ADGM and DIFC entities, apply for Foreign Payment Token Issuer registration instead. The CBUAE may exempt a scheme with a reserve of no more than AED 500,000 and no more than 100 holders.
What a Dirham issuer must hold
- Capital: AED 15 million initial and ongoing, plus at least 0.5% of the face value of tokens in issue. The CBUAE can require more.
- Bank guarantee: unconditional and irrevocable, equal to the paid-up capital, filed with the application.
- Reserve: 100% of tokens in issue at all times, held as cash in a separate escrow account in the same currency, with a UAE bank outside the issuer’s group. Reconciled and reported daily, audited monthly by an external auditor.
- Bank subsidiaries: may hold up to half the reserve in UAE government bonds and Central Bank M-bills, at 2% additional capital instead of 0.5%.
- Redemption: at par, by the same time on the next business day, with no time limit on requests. Fees only where proportionate to actual cost.
- No interest: an issuer may not pay interest or any other reward for holding the token.
- Customers: Dirham tokens may be issued only to UAE residents.
- Whitepaper: externally audited, accepted by the CBUAE and published at least 7 days before sale, in Arabic and English. The issuer must compensate customers for any material misstatement.
- Exclusive business: issuing must be the issuer’s only business.
The CBUAE can also cap the volume of tokens, the value of transfers and the number of customers an issuer onboards.
Who has been approved
AE Coin received the first Dirham issuer licence in December 2024. Zand’s AED token, RAKBANK’s AED token and the IHC-led DDSC have received CBUAE approvals at different stages.
USD Stablecoins Onshore
Can a USD Stablecoin Be Used for Payments in the UAE?
Not for goods and services onshore. Merchants on the mainland can accept only Dirham Payment Tokens from licensed issuers.
A Foreign Payment Token from a registered issuer can be used for one purpose onshore: paying for virtual assets or their derivatives. As of October 2026 only one token holds that registration, USDU, issued by ADGM-licensed Universal Digital. No global issuer, including Tether and Circle, holds one.
Inside the free zones the rules differ. ADGM firms use Accepted FRTs. DIFC firms use the stablecoins the DFSA has recognised, currently USDC, EURC and RLUSD.
VARA and ADGM Issuance
What Do VARA and ADGM Require From a USD Stablecoin Issuer?
VARA in Dubai
Issuing a fiat-referenced virtual asset (FRVA) is a Category 1 VA Issuance and needs a VARA licence. The issuer becomes a VASP and follows all of VARA’s compulsory rulebooks, plus the FRVA rules in Annex 1 of the VA Issuance Rulebook.
- VARA approval of each FRVA and its whitepaper before issue
- a reference currency VARA has approved; AED tokens stay with the CBUAE
- FRVAs may be used to buy and sell virtual assets, not to pay for goods and services in the UAE
- reserves of at least 100% at all times, in the reference currency, held as cash and cash equivalents, government debt of 90 days or less, repos of 7 days or less, or government money market funds
- redemption at par within one working day, with no fee
- monthly independent reserve audit and monthly public disclosure
- capital of AED 1,500,000 plus 2% of the FRVA’s available supply
- fees of AED 100,000 on application and AED 200,000 a year in supervision
- possible designation as a Significant FRVA Issuer, with heavier obligations
ADGM in Abu Dhabi
The FSRA introduced Issuing a Fiat-Referenced Token as a regulated activity in December 2024. Rules in force from 1 January 2026 added FRT intermediation, custody and payment rules, and the Accepted FRT regime.
- a single-purpose issuer, with no regulated activities beyond the issuance
- Category 3C, with base capital of USD 2,000,000 or the expenditure-based minimum if higher
- fees of USD 70,000 on application and USD 70,000 a year, plus a USD 20,000 and USD 15,000 virtual asset add-on
- reserves in the referenced currency, held as client money or in government debt of three months or less, government money market funds or overnight reverse repos, valued daily
- a whitepaper filed 20 days before issue; the FSRA does not approve it
- redemption at par by T+2
- a monthly independent attestation, an annual audit and an annual stress test
- no AED-denominated FRTs
- Accepted FRT status before other ADGM firms can use the token
- a separate FRT intermediation permission for distributors, Category 4 at USD 50,000
Services Around the Token
Do Conversion, Custody and Wallet Services Need Their Own Licence?
Yes. Each payment token service is licensed separately, and a VASP licence does not cover them by default.
- Conversion between payment tokens and fiat needs a CBUAE licence or non-objection registration.
- Custody and transfer of Dirham tokens needs a CBUAE licence. Foreign-token custody and transfer uses registration.
- VARA and CMA licensees are bound by the CBUAE’s payment token rules too. A VASP licence does not answer a CBUAE prohibition.
Federal Decree-Law No. 6 of 2025 made payment services using virtual assets licensable by the CBUAE, regardless of the technology used. Existing businesses had a one-year transition to comply, which ended in September 2026; no general extension had been announced by late August 2026. If you move stablecoins for payments and have not applied, take advice now.
Cost and Timeline
How Much Does a UAE Stablecoin Licence Cost?
Capital and reserves drive the cost, well ahead of fees.
- CBUAE Dirham issuer: AED 15 million capital plus 0.5% of tokens in issue, a matching bank guarantee, and a cash reserve funded 1:1 with tokens in issue
- ADGM FRT issuer: USD 2,000,000 base capital, USD 70,000 application fee and USD 70,000 a year
- VARA FRVA issuer: AED 1,500,000 capital plus 2% of supply, AED 100,000 application fee and AED 200,000 a year
- Every route: a resident compliance team, reserve audits, the whitepaper and token-level approvals
Timeline is within your control. A well-prepared application with substantive pre-application engagement runs significantly faster than one filed without specialist preparation.
Why timeline and cost are connected
A 12-month process and an 18-month process do not cost the same. The difference in legal fees is typically smaller than the cumulative cost of extra months of operational delay, capital and reserves tied up before launch, query responses requiring specialist input, and reworking a reserve or custody set-up that was not ready at submission.
Key figures
- CBUAE Dirham issuer, well-prepared: 12 to 18 months.
- VARA FRVA or ADGM FRT issuer, well-prepared: 9 to 12 months.
- CBUAE Foreign Payment Token registration runs alongside the home licence; plan it from day one.
- Files without a finished reserve, custody and whitepaper design typically run several months longer.
Entity set-up costs
Entity costs follow the route: a UAE company outside the financial free zones for a CBUAE issuer, a Dubai mainland or free zone entity for a VARA issuer, and a single-purpose ADGM entity for an FRT issuer. See the ADGM and VARA pages for registration fees. All regulatory capital must be maintained at all times, alongside the reserve, which is a separate pool.
Legal fees
NeosLegal works on fixed-fee, milestone-based engagements. Fees depend on the regimes involved, the number of tokens, business model complexity, application readiness at engagement start, and the scope of ongoing post-authorisation support.
Common Pitfalls
Where Do Stablecoin Projects Go Wrong?
- Choosing the regulator before the use case. A payments token and a trading token need different licences.
- Planning onshore retail payments with a USD token. The regulation does not allow it.
- Treating the reserve as a treasury line. It must be segregated, in the token’s currency, and beyond the reach of the issuer’s creditors.
- Forgetting conversion and custody. The issuer licence does not cover the services around the token.
- Building an algorithmic design. It is banned outright onshore, in ADGM and in the DIFC.
“The first thing I ask a stablecoin founder is who will hold the token and what they will do with it. If the answer is paying for things in the UAE, you are building a Dirham token, you are in the Central Bank’s world, and the capital and escrow follow from that. If the answer is settlement and trading, a USD token out of ADGM or Dubai is usually the faster road, with the CBUAE registration planned as step two. The expensive mistakes come from picking a regulator before answering that question.”
Engagement Model
How Does NeosLegal Structure a Stablecoin Engagement?
The NeosLegal engagement model below is what we do before and around each regulator process to make sure your application reaches the authorisation team in the right shape. Most stablecoin delays start with missing or weak steps before the first regulator meeting: work that should already be done by the time you sit across from the authorisation team.
NeosLegal advises on stablecoin and payment token mandates across the CBUAE, VARA, ADGM and DIFC regimes.
- 01
Token and use-case mapping
Currency, holders, use and distribution, mapped to every regulator that touches the token. This is the decision the whole structure rests on: map it wrong and the token lands in a regime whose capital and reserve rules do not fit. Output: written memo with the licence sequence, capital and timeline.
- 02
Reserve, custody and redemption design
Reserve bank or escrow, reserve composition, custody, daily reconciliation, audit and redemption mechanics, built to the rules of each regime the token touches.
- 03
Pre-application engagement
Introductory meetings with the CBUAE, VARA or the FSRA before a formal application opens. NeosLegal prepares and attends with the token map and reserve model in hand, so the meeting confirms scope.
- 04
Entity structuring and incorporation
The issuer formed in the right place: a UAE company outside the financial free zones for the CBUAE, a Dubai entity for VARA, or a single-purpose ADGM entity for an FRT issuer.
- 05
Whitepaper and application pack
Business plan, financial model, policies, technology and AML programme, plus the whitepaper: externally audited and accepted by the CBUAE, approved by VARA, or filed with the FSRA 20 days before issue.
- 06
Regulator review to approval
Submission, every regulator query handled by NeosLegal, then capital, reserve accounts and final conditions through to licence or permission.
- 07
Cross-regime registrations and go-live
CBUAE Foreign Payment Token registration, Accepted FRT status and DFSA acceptance where the token needs them, then an ongoing retainer for reserve attestations, whitepaper updates and rulebook changes.
Critical note
Every service around the token needs its own permission. An issuer licence does not cover conversion, custody or onshore distribution, and a VASP licence does not answer a CBUAE prohibition. Map the full chain of services before the first application goes in.
WHY CHOOSE NEOSLEGAL
Why Founders and Institutions Choose NeosLegal
NeosLegal has worked only on crypto and Web3 since 2016, before VARA existed, before ADGM had a crypto framework, and before most UAE firms understood what Bitcoin was. That head start shows in the track record, the recognition, and the way engagements run.
Track Record
- 350+ UAE Web3 and crypto projects structured and 750+ founders advised since 2016, with zero client enforcement actions in ten years.
- USD 500 billion in transactions advised and deals closed.
- 20+ VASP licence applications advised across the UAE regulators.
- 250+ Tier-1 exchange legal opinions at a 100% acceptance rate, a commercially verifiable outcome across hundreds of submissions.
Independent Recognition
- Best UAE Crypto Law Firm 2026, UAE Business Awards Middle East.
- Middle East Technology Legal Team of the Year, The Oath Middle East, November 2025.
- Authors the UAE chapters of the Chambers Blockchain and Crypto Assets guide, 2025 and 2026.
- Irina Heaver ranked as Recommended Blockchain Lawyer in the UAE 2025 and 2026, Lexology.
Regulatory Coverage
- All five UAE regulatory pathways, VARA, ADGM (FSRA), DIFC (DFSA), the federal CMA and CBUAE, handled within a single firm, with no coordination overhead between separate advisers.
- 60+ jurisdictions covered in total for cross-border structuring since 2016.
- Federal CMA Category RWA Tokenization Exchange, broker-dealer and OTC dealing desk licences delivered end to end, including the full policy suite, AML risk and controls register, and Approved Persons submissions the regulator requires.
Every engagement is fixed-fee with defined milestones confirmed before work begins. Direct access to Irina Heaver and senior associates throughout, not associates managing the relationship.
Founder differentiator
Founded by Irina Heaver, a former co-founder of a UAE crypto exchange (later exited), NeosLegal operates with founders’ commercial realities in mind. Irina has also drafted crypto laws and advised on virtual asset policy for multiple regulators and governments, including UAE regulators, helping shape the frameworks her clients are now licensed under.
Track record
Representative Stablecoin Cases
-
VASP Licensing & Regulatory
Stablecoin Issuer – CBUAE
Advised a banking and technology consortium on CBUAE Payment Token Services licensing for an AED-backed stablecoin, designing the issuance, redemption and reserve/risk-management framework to meet the Central Bank's regulations.
-
VASP Licensing & Regulatory
Global Payment Network – All Five UAE Regimes
Advised a leading global payment network across all five UAE VASP regimes (VARA, ADGM, DIFC, CMA/SCA and CBUAE), benchmarking each against the client's activities and delivering a jurisdiction-selection matrix that anchored a multi-entity licensing strategy.
-
Crypto Custody
Custody Licence – Regulator Selection
Advised an institutional custodian comparing VARA, ADGM/FSRA and DIFC/DFSA custody permissions, mapping capital, asset-segregation and reporting requirements across the four UAE routes to select the optimal licensing path.
Browse 100+ Representative Case Studies
View All Case Studies