MENA · Lead regulator: CBUAE
Which of the six core regulatory dimensions this jurisdiction's norms actually address. Coverage is detected from the source text — not a structural heuristic.
Breakdown of the confidence badge shown above. Each component is independent and they sum (weighted) to the overall score.
Green = triggered by at least one norm in this jurisdiction.
32 norms with regime, scope, gaps and verbatim evidence quotes. Scroll for more.
Scope: The provided text is a '404 Page Not Found' error from the UAE Central Bank website and contains no substantive regulatory information.
source ↗Scope: The provided text is a 404 'Page Not Found' error from the regulator's website. It does not contain the substantive text of the regulation.
Gap or ambiguity: The regulatory text is missing from the source document. Therefore, no gaps or ambiguities can be identified.
source ↗Scope: This decision establishes the framework for implementing terrorism lists and UN Security Council resolutions. It focuses on combating terrorist financing and proliferation financing.
Gap or ambiguity: The text provides a general AML/CFT framework but lacks specific guidance for the crypto-asset sector. The application of these rules to decentralized or unhosted environments remains ambiguous.
“Cabinet Resolution No. 74 of 2020 regarding the Terrorism Lists System and the Implementation of Security Council Resolutions”
Scope: The regulation extends the DFSA's financial services regime to Crypto Tokens. It establishes a list of 'Recognised Crypto Tokens' which are the only ones permitted for use within the DIFC.
Gap or ambiguity: The rule requires tokens to meet 'transparency' and 'security' criteria for recognition, but the specific technical standards are not detailed in the provided text. This creates an opportunity for certifiers to help define and attest to these standards.
Scope: The provided text is a '404 Not Found' error page from the regulator's website. It does not contain the substantive content of the regulation.
Gap or ambiguity: The substantive text of the regulation is missing, making any analysis of its content, gaps, or ambiguities impossible.
source ↗Scope: This law establishes a general corporate tax regime in the UAE, treating crypto companies like any other business. It applies a 9% tax on taxable profits exceeding AED 375,000.
Gap or ambiguity: The definition of 'qualifying income' for crypto-asset businesses in free zones is a key ambiguity. This creates an opportunity for advisory services to help firms meet the conditions for a 0% tax rate.
source ↗Scope: The provided text is a 404 error page from the regulator's website. The regulation's title, 'Dormant Accounts Regulation', suggests it does not pertain to crypto-assets.
source ↗Scope: The provided text is a '404 Page Not Found' error from the UAE Ministry of Justice website. It does not contain the content of the specified Penal Code.
Gap or ambiguity: The source text is a website error page and contains no regulatory information, so no gaps or ambiguities can be identified.
source ↗Scope: This rulebook establishes comprehensive compliance, risk management, and AML/CFT obligations for entities licensed by VARA. It includes specific rules for handling client money and client virtual assets.
Gap or ambiguity: The provided text is a table of contents and lacks specific technical standards for custody or IT security. The 'Client Virtual Assets Rules' section implies requirements that are not detailed, creating an opportunity for certifiers to help define and attest to best practices.
“B. Requirement to Obtain Prior Approval”
“(Effective From: 19 June 2025)”
“(Effective From: 19 June 2025)”
“(Effective From: 19 June 2025)”
Scope: This resolution concerns the organizational structure of the Ministry of Economy (MOEC), designating it as the competent regulator.
Gap or ambiguity: The text defines the responsible regulator but provides no specific technical or operational requirements for the crypto-asset sector.
source ↗Scope: The framework regulates Investment Tokens, defined as Security Tokens or Derivative Tokens on DLT. It applies to firms marketing, issuing, trading, or holding these tokens in or from the DIFC.
Gap or ambiguity: The framework explicitly excludes exchange tokens (cryptocurrencies), utility tokens, and stablecoins, which are subject to future consultation. The announcement lacks specific technical requirements for licensed firms.
“The Investment Tokens regulatory framework applies to persons interested to market, issue, trade or hold Investment Tokens in or from the Dubai International Financial Centre (DIFC) and Authorised Firms wishing to undertake Financial Services relating to Investment Tokens”
“The Dubai Financial Services Authority (DFSA) has today launched its regulatory framework for Investment Tokens.”
Scope: The provided text is a website error message ('Page not found') and does not contain the substantive content of the regulation. The regulation's title indicates it concerns Value Added Tax.
Gap or ambiguity: The substantive legal text is missing from the provided body. No regulatory analysis is possible.
source ↗Scope: This resolution establishes a list of violations and administrative penalties for non-compliance with Cabinet Resolution No. (111) of 2022, which regulates virtual assets and their service providers.
Gap or ambiguity: The provided text is a generic webpage and does not contain the actual articles of the resolution. It is impossible to determine specific technical requirements, standards, or ambiguities from the available information.
source ↗Scope: This consultation paper proposes enhancements to the regulation of crypto tokens in the Dubai International Financial Centre (DIFC).
Gap or ambiguity: The document is a high-level notice, not the full consultation paper. The specific technical requirements are not detailed, creating an opportunity to influence the final rules during the consultation period.
“The DFSA has released the following for consultation: Consultation Paper No 168 – Enhancements to the Regulation of Crypto Tokens”
“The DFSA has released the following for consultation: Consultation Paper No 168 – Enhancements to the Regulation of Crypto Tokens”
“The deadline for providing comments on this Consultation Paper is 31 October 2025.”
“The deadline for providing comments on this Consultation Paper is 31 October 2025.”
Scope: The provided text is a generic webpage from the ADGM website and does not contain the content of the specified regulatory guidance. The scope cannot be determined.
source ↗Scope: The provided text is a website error message, not the content of the specified law. No regulatory information could be extracted.
Gap or ambiguity: The legal text is missing from the provided body, which contains only a website error message.
source ↗Scope: This rulebook defines the requirements for the licensable activity of providing custody services for virtual assets in Dubai.
Gap or ambiguity: The provided text is a cover page and does not contain the substantive articles of the regulation. Specific technical, security, or operational requirements are not detailed.
“(Effective From: 19 June 2025)”
“(Effective From: 19 June 2025)”
“(Effective From: 19 June 2025)”
Scope: The law establishes the Dubai Virtual Assets Regulatory Authority (VARA) to license and regulate VASP activities in the Emirate of Dubai. Activities like exchange, transfer, and custody services require prior authorization from VARA.
Gap or ambiguity: This high-level text establishes the licensing requirement but does not specify the detailed technical or security standards for approval. This leaves an opportunity for certifiers to help firms demonstrate compliance with expected international standards.
“VARA will be responsible for licensing and regulating the sector across Dubai’s mainland and the free zone territories (excluding DIFC).”
“VARA will be responsible for licensing and regulating the sector across Dubai’s mainland and the free zone territories (excluding DIFC).”
Scope: The provided text is a general webpage from the UAE Ministry of Economy. It lists categories of legislation, including AML, but does not contain the substantive text of the regulation itself.
Gap or ambiguity: The full text of the regulation is not present in the provided content. The content is a general webpage, not the legal instrument.
Scope: This resolution defines the organizational structure of the UAE's Ministry of Economy. It does not establish any regulations for crypto-assets or other economic activities.
Gap or ambiguity: The provided text is administrative and does not contain any substantive rules regarding crypto-assets, virtual assets, or related services.
source ↗Scope: This resolution pertains to the service fees charged by the Ministry of Economy. The provided text does not contain any specific regulations for crypto-assets.
source ↗Scope: The provided text is a website error message (page not found) and does not contain the content of the referenced law.
source ↗Scope: This regulation establishes a licensing and registration framework for payment token (stablecoin) services in the UAE. It covers issuance, custody, and conversion, distinguishing between AED-backed tokens (licensed) and foreign currency-backed tokens (registered).
Gap or ambiguity: The regulation requires an independent assessment report from a 'competent and qualified assessor' (Art. 6.5-6) as a licensing prerequisite. However, it does not specify the standards or accreditation for these assessors, creating an opportunity for certifiers.
“No Person shall perform any Payment Token Service within the UAE or directed to Persons in the UAE, unless such Person is Licensed or Registered by the Central Bank to perform such Payment Token Service.”
“C 2/2024 Effective from 31/8/2024Status: In-Force”
“Effective from 31/8/2024”
“Effective from 31/8/2024”
“The Applicant is required to submit an independent assessment report not older than six (6) months assessing how it will comply with Article (6)3, covering at least the following key areas:”
Scope: The regulation governs the marketing, advertising, and promotion of Virtual Assets in Dubai. It applies to all entities, whether domestic or foreign, licensed or not.
Gap or ambiguity: Utility token issuers must register a white paper with VARA prior to promotion. The specific technical or disclosure standards for these white papers are not detailed, creating a potential role for independent review.
“All Entities must comply with the Regulations on the Marketing of Virtual Assets and Related Activities 2024, issued by VARA, and as may be amended from time to time (“Marketing Regulations”), at all times.”
Scope: This regulation amends the UAE's VAT Executive Regulation. It makes the transfer and conversion of virtual assets exempt from VAT, with retroactive effect.
Gap or ambiguity: The regulation states that NFTs and some utility tokens may not qualify for the VAT exemption. The specific criteria for this distinction are not defined.
source ↗Scope: The provided text is a '404 Page Not Found' error from the regulator's website and contains no substantive information about the regulation.
source ↗Scope: This is a general consumer protection law. The provided text contains no substantive articles and does not mention crypto-assets.
Gap or ambiguity: The provided text is only metadata and internal notes, not the actual content of the law. It is impossible to determine its applicability or specific requirements for crypto-assets.
source ↗Scope: This text concerns trademark law in the United Arab Emirates. It does not contain any provisions related to crypto-assets or virtual asset service providers.
source ↗Scope: This decree-law establishes the framework for Anti-Money Laundering and Combating the Financing of Terrorism in the UAE. It aligns with FATF recommendations, including the Travel Rule.
Gap or ambiguity: The provided text does not contain the full regulation, making it impossible to identify specific gaps or ambiguities in its requirements.
Scope: This law establishes the Virtual Assets Regulatory Authority (VARA) and a mandatory licensing regime for Virtual Asset Service Providers (VASPs) in Dubai, excluding the DIFC.
Gap or ambiguity: The law delegates specific technical requirements to various Rulebooks (e.g., Technology and Information, Custody Services). The detailed standards for IT security, audits, and custody are not in this text, creating an opportunity for certifiers to address the specific controls mandated in those documents.
“No Entity may carry out any VA Activity by way of business, or purport to do so, in the Emirate, unless it is— a. authorised and Licensed by VARA for the VA Activity;”
“The Dubai Virtual Assets Regulatory Authority (“VARA”) was established and authorised by Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai (“Dubai VA Law”) to regulate Virtual Assets and Virtual Asset Service Providers ("VASPs”).”
“VASPs must comply with all Federal AML-CFT Laws as well as all other legislation, regulatory requirements, these Regulations, Rules and Directives in respect of AML/CFT as may apply to its VA Activities, businesses or operations in any jurisdiction at all times”
Scope: The provided text is a 404 error page and does not contain the content of the regulation.
source ↗How this jurisdiction inherits, is inspired by, or cites other regulatory texts.
Binding transposition of a supranational anchor.
No edges.
Non-binding alignment with standards or foreign law.
Explicit citations in the body of norms.