Original | Odaily Planet Daily (@OdailyChina)
Author | Fu Ruhe (@vincent 31515173)
2024 is a year when the crypto industry takes a big step towards the mainstream. Bit and Ethereum spot ETFs in the US have been approved and started trading, and traditional asset management giants like BlackRock and Fidelity have started to get involved in crypto business. With the rapid development of the cryptocurrency market, governments and regulators in various countries have gradually become aware of the potential risks, such as money laundering, fraud and market manipulation. More and more countries are strengthening regulations, introducing relevant laws and regulations to protect investors and maintain market stability.
In terms of crypto asset regulation in different regions, unique approaches have been adopted. The US, with its strong financial foundation, has been calling the shots in the crypto industry, and the US SEC has been increasing its regulatory efforts on the crypto industry; Hong Kong, as an established financial center, has been rolling out new policies to embrace Web3, with rigorous licensing and stablecoin sandbox testing demonstrating its determination; Southeast Asian countries such as Singapore, Thailand and Vietnam have also actively embraced Web3, with a series of industry summits and the influx of emerging crypto companies injecting new vitality into the development of the Asian crypto industry.
Odaily Planet Daily has launched a series of reports on "The New Landscape of Global Crypto Regulation", dedicated to providing Web3 builders with the latest regulatory information. By clarifying the regulatory landscape from a global perspective, Web3 builders can accurately grasp the policy orientation of different regions and innovate within the framework of legality and compliance, fully leveraging their technological advantages to help Web3 develop in a healthier, more orderly and innovative direction.
In this issue, our perspective focuses on a new gathering place for Web3 builders - the United Arab Emirates.As a financial center in the Middle East, the UAE has been actively adjusting its cryptocurrency regulatory policies to enhance its competitiveness in the global financial market. The UAE government is committed to building a secure and transparent virtual asset ecosystem to attract international investors and innovative companies. In this process, Dubai has rapidly emerged as a hub for crypto companies, attracting a large number of global crypto talents and capital.
The UAE is a federal country composed of seven emirates: Abu Dhabi, Dubai, Sharjah, Ajman, Umm Al Quwain, Ras Al Khaimah and Fujairah. Each emirate enjoys independent autonomy, which has led to the formulation of unique policies on cryptocurrencies, especially in Abu Dhabi and Dubai. This situation has made the overall cryptocurrency regulatory policy in the UAE complex and diverse.
Odaily Planet Daily will gradually analyze the UAE's regulatory policies on cryptocurrencies and reveal why Dubai has become one of the most welcoming regions for the crypto industry.
The Complex Crypto Regulatory Strategy in the UAE: Three Major, Two Special
In the UAE, the GDP of the two major emirates of Abu Dhabi and Dubai accounts for 80% of the country, which gives them significant say in the national economy, leading to relatively independent cryptocurrency policies. In addition, these two emirates have set up multiple free economic zones, with Abu Dhabi establishing the Abu Dhabi Global Market (ADGM) and Dubai establishing the Dubai International Financial Center (DIFC), Dubai Multi Commodities Center (DMCC), Dubai World Trade Center (DWTC) and Dubai Airport Free Zone Authority (DAFZA). The emirate of Ras Al Khaimah has also set up the Ras Al Khaimah Digital Assets Oasis (RAK).
When studying the UAE's cryptocurrency policies, they can be summarized as "Three Major, Two Special". The "Three Major" refers to:
The Central Bank of the UAE: responsible for the regulation of cryptocurrency payments.
The Securities and Commodities Authority (SCA) of the UAE: responsible for the regulation of cryptocurrency investments.
The Virtual Assets Regulatory Authority (VARA) of Dubai: the world's first specialized virtual asset regulatory authority.
The "Two Special" refers to:
The Abu Dhabi Global Market (ADGM): independent of other regulatory authorities, with its own cryptocurrency regulatory policies.
The Dubai International Financial Center (DIFC): also has independent cryptocurrency regulatory policies.
The basis for this division is that the Central Bank of the UAE focuses on the regulation of cryptocurrency payments, while the SCA and VARA represent the main licensing authorities. ADGM and DIFC are not directly governed by the above policies and formulate their own cryptocurrency regulatory policies independently.
In addition, the Dubai Multi Commodities Center (DMCC) also has an independent license, but the relevant laws have not excluded DMCC, so this free zone should be regulated by the Dubai Virtual Assets Regulatory Authority (VARA), and the rest should be governed by the "Three Major" according to their physical location.
The Central Bank of the UAE
The Central Bank of the UAE (CBUAE) has adopted multiple strategies in cryptocurrency regulation to ensure market compliance and security. First, the UAE has implemented anti-money laundering (AML) and counter-terrorist financing (CFT) regulations based on international standards, particularly the recommendations of the Financial Action Task Force (FATF), to combat money laundering and terrorist financing. Financial institutions must conduct customer due diligence, monitor transactions, and report suspicious activities in a timely manner to fulfill their legal responsibilities.
In addition, in February 2023, the Central Bank of the UAE also issued the Guidance for Licensed Financial Institutions on Risks Related to Virtual Assets and Virtual Assets Providers, to help regulated financial institutions understand and effectively implement these regulations, ensuring they can adapt to the changing compliance environment.
Meanwhile, in June 2023, the CBUAE issued the Payment Token Services Regulation (PTSR), specifically regulating stablecoins and related services. The regulation applies to the entire UAE, excluding the Dubai International Financial Center (DIFC) and the Abu Dhabi Global Market (ADGM). In the PTSR, payment tokens are defined as stablecoins denominated in fiat currency, and the regulation requires entities registered in the UAE to apply for a payment token service license, and prohibits the provision of payment token services or the use of virtual assets for payments without a license. To ease the transition, the PTSR has set a one-year adaptation period, allowing existing participants to gradually comply with the new regulations.
Overall, the CBUAE is mainly formulating anti-money laundering (AML) and counter-terrorist financing (CFT) regulations, and requiring crypto companies to fulfill these requirements. The Payment Token Services Regulation is more focused on the regulatory direction of stablecoin payments, and Tether, the issuer of USDT, also stated last August that it would collaborate with the crypto group Phoenix Group (PHX) to be listed in Abu Dhabi and launch a token pegged to the UAE Dirham.
The Securities and Commodities Authority (SCA) of the UAE
The Securities and Commodities Authority (SCA) of the UAE's regulatory strategy for the crypto industry aims to establish a comprehensive regulatory framework for Virtual Assets (VAs) and Virtual Asset Service Providers (VASPs) to promote market stability, protect investors, and maintain financial integrity. The SCA recognizes the diversity of virtual assets, including cryptocurrencies and Non-Fungible Tokens (NFTs), and their unique characteristics that pose challenges to the traditional financial system. Therefore, in 2023, the SCA issued the Guidelines for the Regulation of Virtual Assets and Virtual Assets Services Providers to regulate the use of virtual assets and the activities of service providers.
According to the regulatory guidelines, the SCA will classify virtual assets into two categories: virtual assets for investment purposes and virtual assets for payment purposes. Investment-type assets are regulated by the SCA, while payment-type assets are regulated by the Central Bank of the UAE, unless the Central Bank specifically approves their use for investment. In addition, certain digital assets, such as digital securities and NFTs not used for investment, are also outside the scope of SCA regulation. The regulatory objectives of the SCA include ensuring investor protection, maintaining market integrity, and reducing risks associated with virtual assets. These objectives form a strict licensing framework to ensure that only qualified and financially sound entities can operate in the virtual asset market. The SCA stipulates that the following activities involving virtual assets must be licensed: - Operating and managing virtual asset platforms: Any entity providing services for the operation or management of virtual asset trading platforms. - Providing virtual asset exchange services: Facilitating the exchange between different types of virtual assets or between virtual assets and fiat currencies. - Providing virtual asset transfer services: Enabling the transfer of virtual assets between users or platforms. - Brokerage services for virtual asset transactions: Acting as an intermediary between buyers and sellers of virtual assets. - Custody and management of virtual assets: Providing secure custody and management of virtual assets, including exercising control over them. - Financial services related to virtual asset issuance: Participating in financial services related to the issuance or sale of virtual assets, such as token issuance. To regulate these activities, the SCA provides specific licenses and related capital requirements for the following: - Virtual asset platform operators: AED 1 million paid-up capital for operating only a virtual asset platform; AED 50 million paid-up capital for also providing other virtual asset services. Both require maintaining 6 months of operating funds. - Virtual asset custodians: AED 40 million paid-up capital, with a requirement to maintain 6 months of operating funds. - Virtual asset financial advisors: AED 500,000 paid-up capital, with a requirement to maintain 6 months of operating funds. - Virtual asset portfolio managers: AED 30 million paid-up capital. - Virtual asset brokers: AED 20 million paid-up capital. - Virtual asset dealers: AED 300 million paid-up capital. In addition, virtual assistant trading platforms are considered equivalent to traditional financial market multilateral trading facilities ("MTFs"), meaning they are subject to similar regulatory standards. Regarding licensing requirements, applicants must meet all regulatory standards set by the SCA, including capital adequacy and anti-money laundering (AML) and counter-terrorist financing (CFT) compliance requirements. The SCA requires qualified entities to maintain sufficient capital to support their operations and implement effective compliance frameworks to detect and report suspicious activities. The SCA also specifies particular standards for virtual asset platform operators to ensure the transparency and fairness of their operations. In terms of technological safeguards, VASPs must implement advanced security measures, including encryption and data protection. The SCA also encourages VASPs to adhere to international AML and CFT standards to ensure the traceability of virtual asset transactions. Furthermore, the SCA emphasizes consumer protection, requiring VASPs to fully disclose the risks associated with virtual assets and ensure the secure management of client assets. Overall, the Securities and Commodities Authority (SCA) of the UAE is one of the primary regulatory authorities for the crypto industry in the UAE. The "Regulation of Virtual Assets and Virtual Asset Service Providers" issued in 2023 clearly defines the roles and responsibilities of the Central Bank of the UAE and the SCA. Additionally, in September 2024, the SCA signed a cooperation framework with VARA, clarifying their respective regulatory scopes. VASPs operating in Dubai will need to obtain a VARA license and can default to SCA registration to serve the broader UAE market.Dubai Virtual Assets Regulatory Authority (VARA)
Dubai's virtual asset regulatory framework is based on the "Dubai Emirate Law No. (4) of 2022 Regulating Virtual Assets". Enacted in March 2022, this law established a dedicated regulatory authority - the Dubai Virtual Assets Regulatory Authority (VARA) - to oversee virtual asset activities in all of Dubai's regions, including free zones and special development areas, but excluding the Dubai International Financial Centre (DIFC). VARA aims to establish global best practices while protecting investor interests and promoting the development of a borderless economy. VARA's regulatory framework consists of a comprehensive set of top-down laws and rules. The "2023 Virtual Assets and Related Activities Regulations" provide specific regulatory details covering licensing applications, anti-money laundering, counter-terrorist financing, and marketing, among other aspects. This framework emphasizes economic sustainability and cross-border financial security, addressing global money laundering (ML) and terrorist financing (TF) risks arising from the misuse of new technologies. VARA has clearly defined eight categories of regulated virtual asset activities, and any VASP wishing to provide these services must apply for and obtain the relevant license before commencing operations. These include: - Virtual asset advisory services: Providing clients with advice and strategies on the virtual asset market, helping them understand its complexities. - Virtual asset brokerage services: Arranging virtual asset transactions, accepting orders, and facilitating trades to provide clients with convenient trading channels. - Virtual asset custody services: Responsible for the secure safekeeping of clients' virtual assets, acting only on client instructions to ensure asset safety. - Virtual asset exchange services: Involving the exchange of virtual assets with fiat currencies or other virtual assets, enhancing market liquidity. - Virtual asset lending services: Providing flexible funding management options, allowing users to borrow and lend as needed. - Virtual asset management and investment services: Managing virtual assets on behalf of clients and implementing investment strategies to achieve asset appreciation. - Virtual asset transfer and settlement services: Ensuring the secure and efficient transfer of virtual assets between different entities or wallets. - Virtual asset issuance category 1: Primarily involving the issuance of fiat-linked stablecoins, providing a stable medium of exchange for the market. Each license has detailed compliance requirements to ensure VASPs operate in accordance with relevant regulations and protect client interests. In Dubai, all companies wishing to engage in virtual asset activities must obtain a license from VARA before commencing operations. The application process has two main stages: Stage 1: - Submit an Initial Disclosure Questionnaire (IDQ) to the Department of Economy and Tourism (DET) or the relevant free zone. - Provide a business plan and detailed information on the company's owners and management. - Pay the initial application review fee (typically 50% of the license application fee). - Receive preliminary approval to complete the company's legal establishment and operational preparations, such as office space rental and employee onboarding. It is important to note that even with preliminary approval, the applicant company is still not permitted to engage in virtual asset activities at this stage. Stage 2: - Prepare and submit the required documents as per VARA's guidance. - Engage in feedback interactions with VARA, which may include meetings, interviews, and the submission of supplementary documents. - Pay the remaining application fee and the first year's regulatory fee.Eventually obtain a VASP license, but may be subject to operating conditions.
VARA reserves the right not to issue licenses, especially in cases where company activities exceed the scope of regulation or do not meet regulatory standards.
For companies that have been engaged in virtual asset business before February 2023, VARA has established a grandfathering scheme, allowing these existing operators to register by completing an Initial Disclosure Questionnaire (IDQ) and obtain a Temporary Operating Permit (LOP) to transition to the full regulatory regime within a limited timeframe. This mechanism not only provides a 50% discount on licensing fees, but also reduces capital requirements, giving VASPs sufficient time to adjust to comply with the new regulations.
On September 30, 2024, VARA amended multiple regulations. The new VARA regulations will officially come into effect on October 1, 2024, marking a significant transformation of the Dubai virtual asset regulatory framework. The new regulations expand the scope of regulation, covering not only the marketing and promotion of virtual assets, but also advisory services, decentralized finance (DeFi) and custody services. The definition of virtual assets has also been updated, particularly with regard to payment tokens, stablecoins and Non-Fungible Tokens (NFTs).
The new regulations require companies engaged in virtual asset marketing to obtain a dedicated license and disclose all material risks in their promotional materials, ensuring information is fair, clear and not misleading. Regulation of aggressive marketing strategies is also more stringent, with exaggerated claims of potential returns explicitly prohibited.
Furthermore, the new regulations introduce a tiered penalty system, imposing different punishments based on the severity of the violation, with minor infractions potentially resulting in administrative fines and serious violations potentially leading to the revocation of business licenses. Existing entities can continue certain activities prior to the new regulations coming into effect, but new marketing and promotion must comply with the new standards.
According to the VARA Public Register, there are currently 19 companies that have successfully applied for a VARA license, including Binance, OKX, and Crypto.com; and three companies awaiting approval, namely Bybit, WadzPay, and Deribit.
Overall, VARA plays a crucial role in the virtual asset regulatory framework in Dubai, not only setting detailed compliance requirements, but also stipulating a two-stage application process for companies to obtain licenses. From October 2024, the newly promulgated regulations will expand the scope of regulation to cover areas such as marketing, advisory services, decentralized finance (DeFi) and custody services, while introducing a tiered penalty system to address inappropriate marketing and exaggerated claims.
Abu Dhabi Global Market (ADGM)
The Abu Dhabi Global Market (ADGM) is an international financial center established in Abu Dhabi, United Arab Emirates, in 2013. ADGM aims to promote the development of financial services in the local and Middle Eastern region, attracting international investors and businesses. As an independent economic zone, ADGM adopts a common law system, providing a transparent and efficient regulatory environment covering banking, asset management, insurance and financial technology. In recent years, ADGM has started to focus on cryptocurrencies and digital assets, seeking to establish a robust regulatory framework in this emerging field.
The regulatory authority of ADGM, the Financial Services Regulatory Authority (FSRA), is responsible for formulating and implementing regulatory policies regarding crypto assets. FSRA issued a document in 2020 to coordinate the operation of digital securities within ADGM, and in 2022 released "Guidance on Regulation of Virtual Asset Activities". These guidelines clearly define the regulatory requirements for virtual asset providers, including capital pre-conditions, personnel control, anti-money laundering (AML) and know-your-customer (KYC) compliance measures.
Furthermore, ADGM introduced a formal regulatory framework for decentralized autonomous organizations (DAOs) and other digital asset entities in 2023, allowing DAOs to operate legally and issue tokens to members. These policies not only provide clear guidance for market participants, but also position Abu Dhabi as a regional leader in digital asset innovation.
Companies engaged in crypto-asset related business in ADGM need to apply for the relevant licenses. The application process typically includes the following steps:
Submission of application: The company needs to provide detailed information on its background, business plan and compliance measures.
Due diligence: FSRA will conduct due diligence on the applicant to ensure it meets regulatory requirements.
Approval: Upon successful review, the company will be granted the corresponding license, allowing it to operate legally within ADGM.
Licensed entities are also subject to strict compliance requirements, including regular reporting and auditing, to ensure continuous adherence to regulatory standards.
In addition, ADGM has established a financial technology sandbox, allowing companies to test their crypto-related products and services in a controlled environment. The main functions of the sandbox include:
Promoting innovation: Companies can develop and test new technologies in a relatively low-risk environment, driving financial technology innovation.
Lowering entry barriers: Startups can explore market opportunities without bearing a heavy regulatory burden.
Real-time feedback: Companies can receive real-time feedback from FSRA during the testing process, helping them adjust and optimize their products.
This mechanism not only supports the rapid development of innovation, but also ensures that new products comply with regulatory requirements, thereby protecting the interests of market participants.
In summary, the ability of the Abu Dhabi Global Market to regulate independently from other regions of the United Arab Emirates is primarily due to its established legal framework and regulatory authority. As an independent economic zone, ADGM has a flexible regulatory mechanism that can quickly adapt to changes in the global financial market, particularly in the field of cryptocurrencies and digital assets. Currently, Binance has obtained a Financial Services Permission (FSP) issued by FSRA, allowing it to conduct virtual asset-related custody and regulated activities.
Dubai International Financial Centre (DIFC)
The Dubai International Financial Centre (DIFC) is a free zone established in Dubai, United Arab Emirates, in 2004, with the aim of becoming one of the world's leading financial centers. DIFC provides a favorable business environment for financial institutions, attracting a large number of banks, insurance companies, asset management firms and other financial service providers. Its unique legal framework and tax policies have made it a popular destination for international investors and businesses.
The Dubai Financial Services Authority (DFSA) regulates the crypto industry through two key policies:
In October 2021, DFSA's Investment Tokens Regime provided a preliminary regulatory framework for investment tokens (such as security tokens or derivative tokens). Investment tokens are defined as digital representations of rights and ownership, ensuring that institutions participating in the marketing, issuance, trading or holding of investment tokens in DIFC comply with necessary compliance requirements.
In November 2022, DFSA subsequently introduced a comprehensive Crypto Tokens Regime to regulate the cryptocurrency industry and market. The goal of this regime is to promote innovation while ensuring that businesses adhere to best anti-money laundering (AML) and counter-terrorist financing (CTF) practices. It covers areas such as financial crime, technology, fraud, governance and risk, providing consumer protection and market transparency.
Companies operating in DIFC need to obtain a license from DFSA to provide crypto services. The application process includes the following steps:
Eligibility assessment: Submitting the application, DFSA will evaluate the applicant's business model and compliance capabilities.
Documentation requirements: Providing detailed business plan, technical architecture and risk management strategy.
Checklist of modules: The company must meet DFSA's comprehensive standards, including business model, corporate governance, qualifications of senior management, financial resources and anti-money laundering measures.
