United Arab Emirates -- Securities Classification Regulatory Overview

Executive Summary

• Cryptocurrency and digital asset activities are legal in the UAE but are subject to a bifurcated regulatory regime: the Securities and Commodities Authority (SCA) oversees securities and commodities activities at the federal level, while the Dubai Financial Services Authority (DFSA) regulates financial services conducted within the Dubai International Financial Centre (DIFC), a financial free zone. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• The SCA is the principal federal regulator for securities and commodities, with authority derived from federal laws and its own regulatory framework; the DFSA operates as an independent regulator within the DIFC, with its own legislative and rule-making powers. Regulatory Framework | DFSA
• Licensing is available through both authorities — the SCA licenses securities and commodities activities at the federal level, and the DFSA licenses financial services within the DIFC, including those involving crypto assets and digital tokens. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The UAE has been actively developing its virtual asset regulatory framework, and both the SCA and DFSA have issued licenses to financial institutions and service providers, though the practical reality is that dual regulation (federal and free-zone) requires careful navigation depending on where a business is domiciled. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• Compliance with AML/CTF and sanctions obligations is mandatory for all regulated entities, with both the SCA and DFSA enforcing comprehensive AML frameworks aligned with FATF standards. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA

Regulatory Framework

• The Securities and Commodities Authority (SCA) is the federal regulator responsible for overseeing securities, commodities, and financial markets in the UAE, operating under the Ministry of Economy and headquartered in Abu Dhabi. Reach Us | Securities and Commodities Authority
• The SCA's regulatory authority is grounded in its mandate to protect investors, ensure market transparency, and maintain fair and efficient capital markets across the Emirates. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• The SCA maintains an official website at https://beta.sca.gov.ae and publishes regulations through its regulatory portal at https://regulations.sca.gov.ae, where legal instruments and rulebooks are made available. Reach Us | Securities and Commodities Authority
• The Dubai Financial Services Authority (DFSA) is the independent financial regulator of the Dubai International Financial Centre (DIFC), a special economic zone with its own legal system, and operates at https://www.dfsa.ae. Regulatory Framework | DFSA
• The DFSA's regulatory framework is comprehensive and includes the DFSA Rulebooks, which are legally binding on all firms and individuals conducting financial services in or from the DIFC. Regulatory Framework | DFSA
• The DFSA's legal foundation consists of the Regulatory Law, Companies Law, and other DIFC legislation, supplemented by the DFSA's own rulebooks covering conduct, prudential standards, and market regulation. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The DFSA is empowered to make, administer, and enforce its own laws and rules through the DIFC legislative process — the DIFC Laws are enacted by the Ruler of Dubai, and the DFSA Rules are made under those laws. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The DFSA's regulatory framework is derived from the Regulatory Law (DIFC Law No. 1 of 2004), the Markets Law (DIFC Law No. 1 of 2012), and the Companies Law (DIFC Law No. 2 of 2009), among other DIFC legislation. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The SCA's federal mandate covers securities and commodities activities across the UAE, and the SCA issues regulations via its regulatory portal, including decisions of the Chairman of the Authority's Board. The Chairman of Authority's Board of
• The SCA's vision is to be a leading regulator of capital markets in the region, and its regulatory philosophy is grounded in investor protection, fairness, efficiency, and transparency of securities and commodities markets. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• The SCA is also responsible for international cooperation and information exchange, including commitment to the Common Reporting Standard (CRS) under the OECD framework through automatic exchange of financial account information. Automatic Exchange of Information - FATCA and CRS | Regulations
• The UAE is committed to the implementation of CRS and FATCA (Foreign Account Tax Compliance Act) through guidance issued by the SCA, which mandates financial institutions to perform due diligence and reporting on foreign account holders. Automatic Exchange of Information - FATCA and CRS | Regulations
• The DFSA's AML/CTF obligations are drawn from the Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Countering Financing of Terrorism and Illegal Organisations, alongside the Cabinet Decision No. 10 of 2019 on AML/CTF regulations, and the DFSA's own Rulebook modules. Summary | DFSA | THE Independent Regulator OF Financial…
• Both SCA and DFSA align their frameworks with the Financial Action Task Force (FATF) Recommendations, and the UAE is a FATF member; the DFSA explicitly states that its regime is benchmarked against FATF standards. Summary | DFSA | THE Independent Regulator OF Financial…
• The DFSA's AML/CTF and sanctions compliance framework is published as part of the DFSA's core regulatory functions, and the Authority conducts inspections and takes supervisory actions to ensure accountability and transparency. Regulatory Framework | DFSA
• The SCA's regulatory authority extends to the oversight of securities and commodities markets in the UAE, including the regulation of financial products, market intermediaries, and trading venues, with its powers exercised through board decisions and rulemaking. The Chairman of Authority's Board of
• The SCA regulates crypto assets and digital token offerings that fall within the definition of securities or commodities, applying its existing securities laws and any specific virtual asset rules it issues. The Chairman of Authority's Board of
• The DFSA has a specific regime for crypto tokens, treating them as financial instruments where they meet certain criteria, and requires firms operating in or from the DIFC to obtain a DFSA licence for crypto-related financial services. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The UAE's regulatory framework for virtual assets is not unified across the country — federal free zones like the DIFC operate under DFSA jurisdiction, while onshore companies are generally subject to SCA oversight, creating a dual-track system. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• The SCA also collaborates with other federal bodies, including the Central Bank of the UAE (CBUAE), in the overall oversight of financial services, though for securities and digital asset securities specifically, the SCA and DFSA are the primary named authorities. Reach Us | Securities and Commodities Authority
• The SCA's rulemaking process includes public consultation and publication through its regulatory portal, and its regulations are binding on all entities subject to its jurisdiction, including those operating in the UAE's onshore securities markets. The Chairman of Authority's Board of
• The DFSA's regulatory framework is updated periodically to keep pace with market developments, and its approach to crypto assets is documented in its rulebooks and supporting guidance publications. Regulatory Framework | DFSA

Licensing Requirements

• The DFSA requires any person or firm conducting a financial service in or from the DIFC to hold a valid DFSA licence; this includes crypto-related services such as dealing in, managing, or advising on crypto tokens classified as financial instruments. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The DFSA licenses firms under the Financial Services (Licensing) Rules, which form part of the DFSA Rulebook; the Rulebook sets out the full suite of obligations for licensed firms, including scope, conditions, and ongoing compliance requirements. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The DFSA's licensing regime covers activities including accepting deposits, providing credit, dealing in financial products (which includes crypto tokens where classified as financial products), arranging deals in financial products, managing assets, and providing custody services. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The DFSA does not impose a single federal capital threshold for all firms; instead, capital requirements vary by licence type and activity, and are prescribed in the DFSA's Prudential Rulebook modules, such as the General Module (GEN) and the Capital Adequacy module, tailored to the risk profile of each licensed firm. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The SCA similarly requires licensing for persons engaged in securities or commodities activities in the UAE, with licence types corresponding to brokerage, dealing, advisory, custody, and clearing activities, as defined in SCA regulations, and subject to SCA board decisions. The Chairman of Authority's Board of
• The SCA's licensing and registration obligations are set out in its rulebooks and regulations passed by the Authority's Board, and any person, natural or legal, undertaking securities or commodities activities in the UAE must obtain the appropriate SCA licence. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• The application process for a DFSA licence involves submitting an application to the Authority, which then assesses fitness and propriety, organisational adequacy, and compliance with the DFSA Rulebook; timelines depend on the complexity of the application, and the DFSA can impose conditions on licences as it deems fit. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The SCA's application process for securities licences is conducted through its regulatory portal and is subject to the SCA's published procedures and board decisions; the SCA reviews each applicant's compliance with its regulations and may grant, condition, or refuse licences. The Chairman of Authority's Board of
• Entities licensed by the DFSA must also satisfy structural requirements including a physical presence in the DIFC, compliance with DIFC companies law, and the appointment of a senior executive officer and other key personnel approved by the DFSA. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• Onshore entities within the UAE — outside of free zones — must register with the SCA for securities and commodities activities, and the SCA has issued extensive regulations covering licensing standards and prudential requirements for regulated entities. The Chairman of Authority's Board of
• The DFSA requires licensed firms to maintain appropriate systems and controls, including a compliance framework, MLRO appointment, risk management procedures, and audit arrangements, all of which are detailed in the DFSA Rulebook's General Module (GEN) and Conduct of Business Module (COB). Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The SCA's regulatory framework similarly requires licensed securities and commodities firms to maintain robust governance structures, including board oversight, internal controls, and compliance with SCA-prescribed prudential standards. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• The DFSA's licensing regime for financial services connected with crypto assets is in active use: the DFSA has issued licences to firms within the DIFC to carry on financial services involving crypto tokens, confirming that digital asset activities are licensable in that jurisdiction. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The SCA has also licensed participants in the UAE's capital markets, including brokers and other market intermediaries, and has issued directives that cover the treatment of digital assets that qualify as securities, with licences granted to onshore entities for these activities. The Chairman of Authority's Board of
• Both the SCA and DFSA condition licensing on ongoing compliance with their respective rulebooks — a licence is not a one-time approval but requires continuous compliance, periodic reporting, and renewal. Regulatory Framework | DFSA
• There is no single, unified federal licence for virtual assets in the UAE; instead, a firm must identify the specific activities it conducts and apply to either the SCA (for onshore securities/commodities activities) or the DFSA (for activities in or from the DIFC). Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority

AML/KYC Requirements

• The DFSA requires all licensed firms to establish and maintain effective, proportionate, and risk-based policies, procedures, systems, and controls to prevent, detect, and report money laundering, terrorist financing, and sanctions breaches, as detailed in the DFSA AML module of the Rulebook. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• Customer due diligence (CDD) is mandatory under the DFSA regime: firms must identify and verify their customers and any beneficial owners before undertaking a transaction or establishing a business relationship. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The DFSA requires enhanced due diligence (EDD) for higher-risk situations, including dealings with politically exposed persons (PEPs), high-risk jurisdictions, or complex and unusually large transactions. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The DFSA's AML/CTF obligations, set out in its AML module — named the RLFC module (Regulatory Law and Financial Crime) in the DFSA Rulebook — require firms to have a Money Laundering Reporting Officer (MLRO), a Compliance Officer, and independent audit arrangements, and to provide annual compliance reporting. Summary | DFSA | THE Independent Regulator OF Financial…
• Suspicious transaction reporting (STR) is mandatory: the DFSA requires regulated firms to report any transaction or attempted transaction that they know, suspect, or have reasonable grounds to suspect involves proceeds of crime, or is linked to terrorism financing, to the UAE Financial Intelligence Unit (FIU). Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• Record retention under the DFSA regime requires firms to retain all CDD and transaction records for a period of at least five years after the end of the business relationship or transaction. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• Beneficial ownership identification is a core CDD component — DFSA-regulated firms must look through corporate structures to identify natural persons who ultimately own or control the customer, and apply risk-based verification accordingly. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• PEP screening is required: the DFSA mandates firms to have appropriate risk management systems to determine whether customers or beneficial owners are PEPs, and to apply EDD measures for such relationships. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The DFSA's AML/CTF framework incorporates the UAE's federal AML obligations: the Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Countering Financing of Terrorism and Illegal Organisations, and Cabinet Decision No. 10 of 2019, are directly applicable to DIFC entities, and the DFSA's frameworks are built around these federal instruments. Summary | DFSA | THE Independent Regulator OF Financial…
• The DFSA states that its AML/CTF regime is aligned with the FATF Recommendations and is enforced within the DIFC through the DFSA's supervisory activities, which include thematic reviews, inspections, and enforcement actions. Summary | DFSA | THE Independent Regulator OF Financial…
• For securities activities under the SCA, the same federal AML law applies, and the SCA has an obligation to ensure that entities it licenses observe AML/CTF requirements, including the reporting of suspicious transactions to the UAE FIU and maintaining adequate CDD procedures. The Chairman of Authority's Board of
• The SCA additionally mandates compliance with CRS/FATCA obligations for financial institutions under its supervision, requiring them to conduct due diligence on account holders and report to the SCA for automatic exchange of information with foreign jurisdictions. Automatic Exchange of Information - FATCA and CRS | Regulations
• SCA-regulated financial institutions must perform account holder due diligence for CRS purposes by determining account holder tax residency, and must report specified information to the SCA for onward exchange through the OECD's multilateral framework. Automatic Exchange of Information - FATCA and CRS | Regulations
• The DFSA also imposes a requirement on licensed firms to comply with the Terms and Conditions of their licence, which can include AML/CTF conditions; non-compliance with any DFSA law or rule can result in an enforcement action. Regulatory Framework | DFSA
• Under the DFSA framework, the Money Laundering Reporting Officer (MLRO) is a senior officer in the firm with statutory responsibilities under the DFSA AML Module, and the appointment of the MLRO must be approved by the DFSA. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The DFSA's AML module also mandates that staff at regulated firms receive ongoing AML/CTF training commensurate with their roles, and that training be recorded and refreshed periodically. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• Sanctions screening is an integral part of the DFSA regime: licensed firms must screen all clients, transactions, and goods for potential matches against applicable sanctions lists issued by the United Nations Security Council and the UAE government, and report any potential matches to the UAE FIU and the DFSA. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA

Enforcement Actions

• The DFSA has the power to impose financial penalties on firms and individuals who breach its laws or rules, and has published details of past enforcement actions on its website; these actions can be taken against licensed entities and individuals for contraventions such as failing to comply with DFSA rules, market abuse, and AML failings. Regulatory Framework | DFSA
• The DFSA's enforcement process includes investigation, notification of findings, opportunities for representations, and the issuing of a decision notice that may include fines, restrictions, or revocation of licences, subject to appeal to the DIFC Courts. Regulatory Framework | DFSA
• The SCA has also exercised disciplinary powers against regulated entities for violating securities and commodities laws, with penalties that can include fines, suspension, or revocation of licences, as set out in its regulation and as imposed through its enforcement function. The Chairman of Authority's Board of
• The DFSA has issued public alerts to warn investors about unlicensed firms operating in or targeting consumers in the DIFC, and maintains a warning list on its website; the DFSA actively investigates unauthorized financial services activity and takes enforcement action. How to avoid being scammed | DFSA | THE Independent Regulator…
• The DFSA's "How to avoid being scammed" guidance is linked to its enforcement mandate and informs the public about the risks of dealing with unlicensed financial services providers, including crypto-related investment schemes. How to avoid being scammed | DFSA | THE Independent Regulator…
• The SCA publishes news releases and announcements through its Media Center, which includes notices regarding enforcement decisions, regulatory approvals, and market integrity. News | Media Center | Securities and Commodities Authority
• The DFSA's enforcement actions are documented under the DFSA's enforcement framework as part of its broader supervisory function, to ensure that regulated firms and individuals observe the DFSA's laws and rules and that market abuses are punished. Regulatory Framework | DFSA
• Neither the SCA nor the DFSA has published a standing, consolidated list of crypto-specific enforcement actions; enforcement actions specific to cryptocurrency firms are generally announced on a case-by-case basis through their respective news channels and enforcement decisions. News | Media Center | Securities and Commodities Authority

Tax Treatment

• No specific tax guidance has been issued by the SCA, DFSA, or UAE federal authority concerning the taxation of cryptocurrency or virtual asset gains, income, or transactions.
• No tax guidance has been issued for virtual assets in the UAE; the SCA's regulatory framework covers securities and commodities but is silent on tax treatment of crypto, and the DFSA's regulatory materials are focused on prudential, conduct, AML, and enforcement obligations rather than taxation. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• Neither the SCA nor the DFSA has published any statements on VAT, capital gains tax, or income tax obligations specifically applicable to cryptocurrency or digital asset transactions; tax matters in the UAE are generally addressed by the Federal Tax Authority. The Chairman of Authority's Board of
• The DFSA's regulatory framework and rulebooks do not address taxation of crypto assets; firms are generally expected to comply with applicable UAE federal tax laws. Laws and Rules | DFSA | THE Independent Regulator OF Financial…
• The SCA's role is financial regulation, not tax policy; the SCA's published regulations and guidance do not cover taxation, neither general nor crypto-specific. Automatic Exchange of Information - FATCA and CRS | Regulations

Key Gaps & Risks

• The UAE's regulatory framework for crypto and digital asset securities is fragmented: onshore firms fall under the SCA, firms in the DIFC fall under the DFSA, and other free zones (e.g., ADGM) have their own authorities — a business must determine which regime applies, and this bifurcation creates complexity for cross-zone operations. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• There is no single unified federal law for digital asset securities; the SCA regulates securities including digital securities via its existing powers and via ad hoc board decisions, while the DFSA regulates crypto tokens through its own rulebook — this can create legal uncertainty about which rules apply in a given scenario. The Chairman of Authority's Board of
• The DFSA requires all financial services firms operating from or in the DIFC to be licensed, and AML/CTF obligations apply to all regulated firms; however, unlicensed operators can still target UAE consumers from outside the country, and the DFSA explicitly publishes warnings about such scam operators. How to avoid being scammed | DFSA | THE Independent Regulator…
• A practical risk is that the SCA's federal licensing regime and the DFSA's DIFC licence regime are not automatically interoperable — a firm licensed by one may not be automatically recognized by the other, and a crypto business operating in multiple Emirates or between onshore and free-zone locations may require multiple licences. Reach Us | Securities and Commodities Authority
• The SCA's regulatory approach is still evolving for digital assets — while it has rule-making authority and has issued regulations via the Chairman's decisions, the specific, comprehensive crypto-asset securities regime is less codified than the DFSA's, leaving room for interpretive risk. The Chairman of Authority's Board of
• AML/CTF compliance presents significant operational risk because the DFSA's standards are strict and FATF-aligned; a failure to have adequate CDD, EDD, STR, sanctions screening, and record retention procedures exposes firms to licence revocation, financial penalties, and criminal referral, but these obligations are extensive and resource-intensive to implement properly. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• No public tax guidance for virtual assets exists, creating tax risk for firms and investors who cannot determine corporate income tax, capital gains, or VAT treatment for crypto transactions, which may lead to inadvertent non-compliance with the Federal Tax Authority. Automatic Exchange of Information - FATCA and CRS | Regulations
• Without specific capital requirements publicly stated for crypto firms under the SCA, applicants cannot count on a predictable threshold; the SCA's capital rules are contained in licences issued under SCA board regulations, but the specifics are not publicly published, adding uncertainty for new entrants. The Chairman of Authority's Board of
• The DFSA's AML/CTF regime applies sanctions screening obligations that involve frequent updates to sanctions lists — a firm that does not stay current on UN and UAE sanctions requirements faces substantial legal exposure. Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• The public should be alert to unlicensed crypto firms operating in or targeting UAE customers; both the DFSA alerts and the SCA's media centre warn about fraud and unlicensed activity, which indicates a persistent enforcement gap that can harm consumers and taint the legitimate ecosystem. How to avoid being scammed | DFSA | THE Independent Regulator…
• For securities issuers using blockchain or digital tokens, classification risk remains: whether a token is deemed a security under SCA rules or a digital asset for DFSA purposes depends on the specific legal test, and a misclassification could lead to unlicensed activity, fines, or enforcement. Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• The practical reality on the ground in the UAE is that the only fully articulated rulebook for crypto tokens belongs to the DFSA (within the DIFC), while the SCA's federal framework provides a legal basis but fewer published specifics for onshore digital asset securities; this creates an uneven playing field and places the burden on the applicant to map their token to the relevant licence category. Regulatory Framework | DFSA

Sources

• The Chairman of Authority's Board of
• Regulatory Framework | DFSA
• Reach Us | Securities and Commodities Authority
• Overview of DFSA AML/CTF & Sanctions Obligations | DFSA
• Vision, Mission and Regulatory Philosophy | About Us | Securities and Commodities Authority
• How to avoid being scammed | DFSA | THE Independent Regulator…
• Automatic Exchange of Information - FATCA and CRS | Regulations
• Summary | DFSA | THE Independent Regulator OF Financial…
• News | Media Center | Securities and Commodities Authority
• Laws and Rules | DFSA | THE Independent Regulator OF Financial…