Introduction
The United Arab Emirates continues to position itself as a global leader in financial innovation and digital transformation. In line with this vision, the issuance of Decision No. (04/Chairman) of 2026 introduces a comprehensive regulatory framework governing Virtual Asset Service Providers (VASPs) and operators of alternative trading systems. This regulatory development reflects a sophisticated approach to balancing innovation with investor protection, market integrity, and systemic stability.
The decision, issued by the competent regulatory authority, builds upon prior legislation including Federal Decree Laws and Cabinet Decisions regulating financial markets and virtual assets. It establishes a structured legal regime that governs licensing, operations, compliance, and enforcement for entities dealing with virtual assets.
Legislative Background and Regulatory Authority
The regulation is rooted in a broader legislative ecosystem, including:
- Federal laws governing financial markets and securities,
- Cabinet Decision No. (111) of 2022 concerning virtual asset regulation,
- Cabinet Decision No. (99) of 2024 on administrative penalties,
- Prior regulatory decisions relating to financial activities and licensing frameworks.
The decision was formally adopted following approval by the Board of the regulatory authority and came into force upon its publication in the Official Gazette in February 2026.
This layered legislative approach demonstrates the UAE’s commitment to ensuring regulatory coherence across financial and digital asset sectors.
Structure of the Regulatory Framework
The regulation introduces a modular framework, dividing the legal regime into three primary components:
- General Framework Unit
- Business Conduct Unit
- Alternative Trading System Unit
Each module governs specific aspects of VASP operations, ensuring both flexibility and comprehensive oversight.
Scope of Application and Regulatory Coverage
The regulation applies to:
- All entities licensed to provide virtual asset services,
- Individuals and employees working within such licensed entities,
- Approved persons operating within the regulatory framework.
Importantly, the scope extends to activities conducted both within and outside the UAE, where such activities impact the UAE market or involve UAE-based operations. However, the regulation excludes the use of virtual assets strictly for investment purposes unless conducted through licensed service providers.
Licensing and Regulatory Approval
A central pillar of the framework is the requirement for prior regulatory approval before conducting any virtual asset activity.
Entities must:
- Obtain a license from the competent authority,
- Comply with detailed application requirements,
- Demonstrate operational, financial, and technical capability.
Applications submitted prior to the implementation of the decision but not yet approved must be reassessed under the new regulatory framework, ensuring uniform compliance standards.
Transitional Compliance and Grace Period
The regulation provides a transitional period (up to one year) for existing licensed entities to align with the new requirements.
During this period, entities must:
- Update internal policies and procedures,
- Ensure compliance with business conduct and operational rules,
- Maintain adherence to previously applicable licensing conditions until full compliance is achieved.
Failure to regularize status within the prescribed period exposes entities to enforcement action.
Key Obligations of Virtual Asset Service Providers
The framework imposes extensive obligations on VASPs, including:
- Regulatory Compliance
Entities must strictly comply with all licensing conditions, regulatory directives, and applicable laws.
- Operational Integrity
VASPs are required to implement robust governance structures, ensuring transparency, accountability, and proper oversight of activities.
- Risk Management
Entities must establish comprehensive systems to manage:
- Financial risks,
- Operational risks,
- Cybersecurity risks.
- Client Protection
The framework emphasizes safeguarding client assets, including:
- Segregation of client funds,
- Transparent reporting,
- Prevention of misuse of client assets.
- Technology and Security
VASPs must maintain secure IT infrastructure, including:
- Protection of data and systems,
- Cybersecurity measures,
- Incident response mechanisms.
These obligations reflect international best practices in digital asset regulation.
Definition and Classification of Virtual Assets
The regulation provides a detailed definition of virtual assets, describing them as:
- Digital representations of value,
- Capable of transfer, trading, or investment,
- Not including fiat currency or traditional securities.
The framework further distinguishes between different types of tokens, including:
- Utility Tokens, providing access to services or platforms,
- Non-Fungible Tokens (NFTs), representing unique digital assets.
This classification is crucial for determining the regulatory treatment of various digital asset activities.
Control, Ownership, and Market Influence
The regulation introduces clear criteria for determining control and ownership, particularly where a person:
- Holds 10% or more of shares or voting rights,
- Exercises significant influence over management decisions,
- Has the ability to appoint board members.
This ensures transparency in ownership structures and prevents hidden control over regulated entities.
Prohibited Activities and Restrictions
The framework explicitly prohibits:
- Conducting virtual asset activities without a license,
- Engaging in misleading or deceptive practices,
- Operating in a manner that compromises market integrity.
Entities must also avoid unauthorized use of technology or systems that may jeopardize financial stability or investor confidence.
Supervisory Powers and Enforcement
The regulatory authority is empowered to:
- Monitor and supervise VASP activities,
- Conduct inspections and audits,
- Impose administrative penalties.
Sanctions may be imposed in cases of:
- Non-compliance with licensing conditions,
- Failure to meet regulatory requirements,
- Engaging in unauthorized activities.
Penalties are aligned with Cabinet Decision No. (99) of 2024, ensuring a structured enforcement regime.
Administrative Penalties and Legal Consequences
The authority may impose sanctions where entities:
- Fail to meet licensing conditions,
- Do not comply within the grace period,
- Breach operational or compliance requirements.
Penalties may include:
- Fines,
- Suspension of activities,
- Revocation of licenses.
This enforcement mechanism ensures accountability and deterrence.
Revocation and Cancellation of Previous Decisions
The regulation expressly repeals earlier conflicting provisions, including:
- Previous decisions regulating virtual asset platforms,
- Earlier licensing and operational rules inconsistent with the new framework.
However, certain conditions related to licensing and approvals remain valid during the transitional period until compliance is achieved.
Conclusion
The 2026 regulatory framework for Virtual Asset Service Providers represents a significant milestone in the UAE’s financial regulatory landscape. By introducing a structured, modular, and comprehensive regime, the UAE has reinforced its commitment to fostering innovation while maintaining strict regulatory oversight.
For market participants, the regulation imposes a clear mandate: compliance is no longer optional but foundational. Entities operating in the virtual asset space must align their operations with regulatory expectations, invest in governance and compliance infrastructure, and adopt best practices in risk management and client protection.
Ultimately, this framework positions the UAE as a secure, transparent, and forward-looking jurisdiction for digital asset activities, enhancing investor confidence and supporting sustainable growth in the virtual asset ecosystem.
If you require further clarification or legal assistance concerning the matters discussed in this article, please do not hesitate to contact Khairallah Advocates & Legal Consultants LLC. Our lawyers would be happy to assist you.
Authors:
