Skip to content

Guide

Setting Up a Stablecoin or Payment-Token Company in the UAE

The short answer

For a Dirham-referenced payment token, the Central Bank of the UAE (CBUAE) decides under its Payment Token Services Regulation. For a stablecoin referenced to a foreign currency and issued from Dubai mainland or a non-DIFC free zone, the Virtual Assets Regulatory Authority (VARA) decides under its Virtual Asset Issuance Rulebook, which treats a stablecoin as a Fiat-Referenced Virtual Asset. Either route calls for a payment-token or virtual-asset issuance licence, not an ordinary trade licence, and a trade licence never converts into one. The factor that decides which route applies, and how heavy it is, is what the token references and which function the entity performs: issuing, holding reserves, distributing or administering technology.

Which regulator decides, and on what basis

Two authorities can claim this activity, and which one applies turns on the token and the location of the activity, not on how the business describes itself. The CBUAE's Payment Token Services Regulation governs Dirham-referenced payment tokens: issuance, conversion, custody and transfer of a token pegged to the dirham sits with the Central Bank. VARA is the sole authority regulating virtual assets across Dubai's free zones and mainland, outside the DIFC; its Virtual Asset Issuance Rulebook gives a stablecoin referenced to a foreign currency its own category (a Fiat-Referenced Virtual Asset) alongside a separate category for assets referenced to other assets. A business issuing from Dubai mainland or a non-DIFC free zone, referencing a currency other than the dirham, sits with VARA rather than the Central Bank.

A business that only distributes or converts an already-issued token, without becoming the issuer, may fit a crypto broker or OTC desk structure instead. Getting the CBUAE-or-VARA split right, confirmed directly with the regulator before filing, is the starting point for any VARA and virtual asset setup work.

What the regulator actually requires

Under VARA, a Fiat-Referenced Virtual Asset issuer must satisfy the Issuance Rulebook's licensing requirements before launch, then publish a whitepaper and risk disclosure statement under its public-disclosure requirements: what holders are told is a licensing condition, not a marketing choice. An FRVA issuer must also maintain Paid-Up Capital equal to AED 1,500,000 plus two percent of the value of the FRVA's available supply. Four compulsory rulebooks sit underneath every VARA activity, including issuance: Company, Compliance and Risk Management, Technology and Information, and Market Conduct. Together they hold the resident-management, compliance, MLRO and technology-control requirements, rather than the issuance rulebook alone.

The CBUAE sets its own capital, governance and reserve conditions for a Dirham-referenced token under the Payment Token Services Regulation; no capital or reserve figure is confirmed here, so any figure quoted elsewhere should be checked directly with the Central Bank before it is relied on.

The whitepaper, business plan and policy suite a regulator reviews are regulator-facing documents, not marketing collateral. Building business plans and documentation to that standard from the outset survives review better than adapting material written for a different token.

How money moves: reserves, redemption and banking

A stablecoin's reserve is the asset that makes redemption credible, so banks and the regulator both start there. VARA's Fiat-Referenced Virtual Asset rules require an issuer to hold reserve assets worth at all times at least 100% of the FRVA in circulation, held only as cash, cash equivalents or short-dated, highly liquid instruments denominated in the reference currency, and audited monthly. Holders must have a legally enforceable right to redeem at par, with requests completed within one working day and no redemption fee charged. Reserve cash is not operating cash, and a bank account that mixes the two is a finding waiting to happen.

Banks treat a token issuer as an enhanced-due-diligence client by default, so a clean separation between the reserve account, the operating account and working capital, documented before onboarding starts, does more for banking readiness than any pitch deck. Where reserve funding comes from investors or a parent group, expect the bank and the regulator to ask about source of funds as closely as they ask about the token's mechanics.

Ownership, substance and the roles you must fill

VARA's Company Rulebook is compulsory for every licensed activity, issuance included, and is where the substance test lives: resident senior management, a compliance function and an MLRO are licensing conditions, not best practice. An IP holding company, an offshore parent or an SPV can sit above the licensed entity, but the entity holding the licence needs people in the country, not just a registered address.

Where reserve administration, technology and distribution are split across more than one company, each entity's ownership and the group's overall structure come under the same scrutiny, because the regulator assesses the group's ability to deliver the function, not just the entity named on the application. This is where regulated and complex ownership structures earns its name: a structure built to look cheap on a formation invoice is the one a VARA or CBUAE reviewer, and every bank afterwards, reads most sceptically.

What commonly goes wrong in this sector

  • Calling a token stable without a legally enforceable redemption mechanism
  • Treating reserve assets as operating cash, or running both through one bank account
  • Assuming a foreign-issued stablecoin can be distributed in the UAE without a separate authorisation
  • Combining issuance, custody and conversion in one entity without mapping each function against its licence
  • Comparing formation fees across routes instead of held capital, mandatory hires and renewal cost

Cost here is built in layers, not one headline number: held capital, mandatory hires and recurring supervision sit above the formation fee, and the firm's own fee is set out in the engagement letter; see how Velarozone works.

Downtown Dubai skyline with the Burj Khalifa at golden hour

General guidance here; the detail that matters depends on your activity and markets.

Questions

Frequently asked

Is a stablecoin automatically a CBUAE payment token, or could it fall under VARA instead?
It depends on the reference asset and where the issuing activity sits, not on the word stablecoin. A dirham-referenced token sits with the CBUAE's Payment Token Services Regulation. A token referenced to a foreign currency, issued from Dubai mainland or a non-DIFC free zone, falls under VARA's Virtual Asset Issuance Rulebook as a Fiat-Referenced Virtual Asset. Confirm both facts before assuming either regulator applies.
Who can mint, burn or freeze tokens, and does that function need its own licence?
Minting, burning and freezing are custody-adjacent functions, and both regulators treat them as part of the issuer's licensed activity, not a side process. Whoever holds those keys needs to be named, resourced and governed inside the licensed entity, or covered by a separate licence if another company performs the function.
Can a technology or reserve-administration provider avoid holding its own licence?
Sometimes, if it performs no custody, minting or redemption function and contracts purely as a vendor to a licensed issuer. The regulator looks at the function performed, not the invoice description. A contract that in practice touches signing keys or reserve assets stays inside the perimeter whatever it is titled.
What happens if a VARA-licensed issuer later wants to reference the dirham?
That is a change of regulated activity, not a product update. Referencing the dirham moves the token toward the CBUAE's Payment Token Services Regulation, and the business should expect to re-open the authorisation question with both regulators rather than treat it as a technical adjustment.
Does a foreign stablecoin issuer need a UAE entity to be distributed here?
Distribution inside the UAE is a function the regulator assesses separately from issuance. A token being compliant in its home market does not give a right to distribute it here. The distributor needs its own assessment against the CBUAE and VARA perimeters before any marketing starts.

Get your UAE setup plan

Velarozone maps the token and each function the entity will perform against the CBUAE and VARA perimeters, confirms which licence applies, and sets out the held capital and compliance stack before anything is filed.

Apply this to your own situation

Guides describe the general position. Send us your facts and an adviser will tell you which parts actually apply to you.

Message us on WhatsApp

Free assessment: current figures are confirmed within your adviser-reviewed route comparison. Your details are not shared with third parties.

Start with a structure assessment

In an initial consultation you receive a plain-language decision summary, a document-preparation list, and the next actions for your situation. Current figures are confirmed within your adviser-reviewed route comparison.

This guide provides general information, not legal, regulatory, tax, investment or financial advice. It does not guarantee a licence, authorisation, visa, bank account, funding or tax outcome.

General information drawn from the CBUAE Rulebook, including the Retail Payment Services and Card Schemes Regulation (C 15/2021), and Cabinet Resolution No. (134) of 2025 as published, not legal or tax advice. Rules and guidance change, so confirm the current text and each institution's own requirements before you submit.