VARA licence in Dubai: categories, requirements and realistic timelines

Activity categories

VARA licenses by activity: advisory, broker-dealer, custody, exchange, payments and transfers, management and investment services, and lending. Each category carries its own capital and staffing requirements; combining categories adds those requirements together.

The two-stage procedure

1. Initial Disclosure and approval in principle. Disclosure of beneficial owners, the business plan and sources of funding. At this stage the company can already incorporate and build infrastructure, but not operate.
2. Full application → operating licence. AML/CFT policies, a resident compliance officer, audit, insurance, and a technology audit of custody systems. After authorisation come supervisory reporting and annual fees.

What applicants most often underestimate

• Local presence: an office and resident staff are not a formality — they are checked.
• The bank account: a licence does not guarantee that an account will be opened; the banking strategy has to be built in parallel with the application.
• Staffing cost: a qualified compliance officer in Dubai costs about as much as all the regulatory fees put together.

The order of magnitude for capital and VARA licence cost in your category is in the calculator below; for comparisons with the EU and Singapore see the MiCA and MAS pages.

What the VARA framework actually consists of

VARA regulates through a set of published rulebooks: four cross-cutting ones every licensee must satisfy — the Company Rulebook, the Compliance and Risk Management Rulebook, the Technology and Information Rulebook and the Market Conduct Rulebook — plus an activity-specific rulebook for each licensed activity (exchange, broker-dealer, custody, advisory, transfer and settlement, lending). Paid-up capital is set per activity in those rulebooks: as an order of magnitude, advisory sits at the lowest tier (around AED 100,000), while exchange and custody activities require substantially more (up to roughly AED 1.5 million, depending on configuration) — treat these as indicative and verify against the current rulebook for your activity. Beneficial owners and senior officers pass a fit-and-proper assessment, and many applicants go through an intermediate Minimum Viable Product (MVP) stage with operating restrictions before a full licence.

One disambiguation saves applicants weeks: VARA covers mainland Dubai and its free zones except the DIFC — the financial free zones (DIFC, and ADGM in Abu Dhabi) run their own regulators with separate crypto frameworks. Which regime fits depends on your target clients, banking strategy and staffing plan, not on which application form looks shorter.

The mistake we see founders make with VARA isn’t in the application itself — it’s assuming the licence and the bank account are the same project. They’re not. We tell every VARA client to open banking conversations the same week they start the Initial Disclosure, because by the time the operating licence is issued, a bank that’s been evaluating you for eight months is in a completely different position than one seeing your file for the first time.

Mark Eichorn · Managing Partner