Licensing Pathways

Licensing Pathways for FinTechs: CBUAE, SCA, VARA, or ADGM?

The UAE’s regulatory landscape is among the most sophisticated in the world, offering multiple licensing pathways for fintech and crypto firms. Choosing the right regulator is critical and depends on your business model, target market, and operational scope. Here’s a high-level guide to help you navigate the options across the Central Bank of the UAE (CBUAE), Securities & Commodities Authority (SCA), Dubai Virtual Assets Regulatory Authority (VARA), and Abu Dhabi Global Market (ADGM).

CBUAE: For Payments, Money Services, and Retail Finance

Who should apply:
Fintechs focused on payments, digital wallets, stored value, remittance, and large-scale payment systems operating across the UAE mainland.

Key license types:

• Retail Payment Service Provider (RPSP): For companies processing retail payments (POS, gateways, mobile payments).
• Stored Value Facility (SVF): For digital wallets and prepaid card providers.
• Large Payment Systems: For operators of significant payment networks or clearinghouses.
• Exchange Houses: For currency exchange and remittance.

Considerations:
CBUAE licenses offer broad UAE market access but require substantial capital (often AED 20 million or more) and robust compliance frameworks. These licenses are best suited for well-capitalized firms aiming for scale and retail reach.

SCA: For Securities, Investment, and Non-Dubai Virtual Asset Activities

Who should apply:
Fintechs and crypto firms dealing with securities, investment management, or virtual asset activities outside Dubai (excluding DIFC and ADGM).

Key license types:

• VASPs (Virtual Asset Service Providers): For crypto exchanges, custodians, and related services outside Dubai.
• Investment and Securities Licenses: For brokers, advisers, fund managers, and related activities.

Considerations:
With the new SCA-VARA cooperation agreement, VASPs operating in Dubai license with VARA and are automatically registered with SCA to serve the wider UAE. For activity in other Emirates, direct SCA licensing is required. SCA’s framework is broad, covering both securities and many crypto assets, but excludes payment tokens and stablecoins, which fall under CBUAE.

VARA: For Virtual Asset Service Providers in Dubai

Who should apply:
Crypto exchanges, custodians, and other VASPs aiming to operate in or from Dubai (excluding DIFC).

Key license types:

• VARA VASP License: Covers exchange, brokerage, custody, advisory, and related crypto activities.

Considerations:
VARA’s regime is purpose-built for digital assets, with strong compliance and technical standards. Under the SCA-VARA agreement, a VARA license enables automatic SCA registration, streamlining UAE-wide operations for Dubai-based VASPs. VARA is ideal for innovation-driven firms with a strong compliance culture.

ADGM: For Institutional FinTech, Crypto, and Global Expansion

Who should apply:
Fintechs and VASPs targeting institutional clients, complex fund structures, or global investors, especially those seeking an English common law environment.

Key license types:

• FSRA Financial Services Permission: For multilateral trading facilities (MTFs), custody, crypto derivatives, asset management, and advisory.
• Sandbox/RegLab: For startups testing new fintech or crypto models.

Considerations:
ADGM is recognized for its rigorous standards, particularly for trading, custody, and derivatives. It is favored by firms seeking institutional credibility, cross-border operations, and access to Abu Dhabi’s investor ecosystem.