2025 Regulatory Roundup

2025 Regulatory Roundup: What’s New for UAE FinTechs & Crypto Firms?
The UAE continues to cement its reputation as a global leader in fintech and digital assets, with 2025 marking another year of dynamic regulatory evolution. For fintechs and crypto firms, keeping pace with these developments is essential for compliance, growth, and investor trust. Here’s a concise roundup of the most important regulatory changes and trends shaping the UAE’s financial innovation landscape this year.

CBUAE: Open Finance and Sandbox Innovation
In April 2024, the Central Bank of the UAE (CBUAE) issued two landmark regulations that set the tone for 2025:

• Open Finance Regulation: This new framework mandates CBUAE-licensed financial institutions to apply for licenses as open finance providers. These institutions can now access customer data and initiate transactions on customer accounts and products, fostering greater competition and innovation in financial services.
• Sandbox Conditions Regulation: The CBUAE’s updated sandbox regime allows fintechs to test innovative financial products and business models in a controlled environment, without needing a full regulatory license. This is a significant boost for startups and established firms piloting new solutions in payments, lending, and insurance.

These initiatives reflect the UAE’s commitment to digital transformation and reinforce its position as a regional innovation hub.

VARA: Strengthening Virtual Asset Regulation
Dubai’s Virtual Assets Regulatory Authority (VARA) continues to set global benchmarks with its comprehensive regulatory framework:

• Full Market Product (FMP) Regulations: VARA’s rulebook now covers a wide range of virtual asset activities, including licensing, market conduct, company operations, and cybersecurity.
• Licensing and Compliance: All Virtual Asset Service Providers (VASPs) operating in or from Dubai must obtain a VARA license and comply with rigorous AML/KYC standards. This includes appointing experienced Money Laundering Reporting Officers, conducting business risk assessments, and adhering to the FATF Travel Rule for transaction transparency.
• Ongoing Updates: VARA regularly updates its regulations to align with international best practices and address emerging risks, ensuring Dubai remains at the forefront of safe and transparent digital asset markets.

SCA: Expanded Oversight of Crypto and FinTech
The UAE Securities & Commodities Authority (SCA) has taken on a more prominent role in regulating virtual assets and fintech services:

• VASPs Licensing: As of 2024, SCA is the primary licensing authority for VASPs outside Dubai’s VARA jurisdiction. All crypto exchanges, custodians, and related service providers must secure SCA approval to operate legally in the UAE.
• Unified Standards: The SCA’s guidelines ensure that virtual asset activities are held to the same high compliance, risk management, and investor protection standards as traditional financial services.

ADGM & DIFC: Sandboxes and Sector-Specific Regulation
Both Abu Dhabi Global Market (ADGM) and Dubai International Financial Centre (DIFC) continue to drive sectoral innovation:

• ADGM RegLab: The RegLab regulatory sandbox enables fintechs to test new solutions under tailored supervision, supporting everything from digital banking to crypto asset management.
• DIFC Innovation Testing Licence: DIFC’s sandbox allows startups to pilot products in a controlled environment, with regulatory requirements adjusted to each business model.
• Specialization: ADGM and DIFC remain the go-to jurisdictions for firms seeking an English common law environment and direct access to global investors.

AML, KYC, and Risk Management: Heightened Standards
Across all UAE jurisdictions, anti-money laundering (AML) and know-your-customer (KYC) requirements have become even more robust:

• For FinTechs and VASPs: Firms must implement strict AML/CFT controls, including transaction monitoring, suspicious activity reporting, and comprehensive record-keeping.
• Travel Rule Compliance: The FATF Travel Rule is now fully enforced for virtual asset transfers above AED 3,500, requiring full sender and recipient identification to enhance transparency and security.

New Free Zones and Strategic Initiatives

• RAK Digital Assets Oasis: The launch of this free zone dedicated to digital and virtual asset companies signals the UAE’s ambition to attract global crypto talent and capital.‍
• Blockchain and AI: The UAE’s regulatory authorities are actively supporting the adoption of blockchain and generative AI, positioning the country as a testbed for next-generation fintech solutions.