📊 New: MENA Crypto Regulation Index Q3 2026 — our quarterly scored ranking of 10 Gulf & MENA markets. The UAE leads at 92/100.
As of 2026, the UAE has the Gulf’s most complete crypto framework: Dubai’s VARA, Abu Dhabi’s ADGM/FSRA, and the DIFC’s DFSA all issue full virtual-asset licences, while the federal SCA and central bank cover national rules and stablecoins. Saudi Arabia, Qatar, Bahrain and Oman are each at different stages of building their own regimes. This tracker maps who regulates what across MENA — and is updated as rules change.
Living document — last reviewed July 2026. This is general information, not legal advice; always confirm current requirements with the regulator directly.
MENA crypto regulation at a glance
| Jurisdiction | Primary regulator(s) | Licensing regime | Stance | Notes |
|---|---|---|---|---|
| UAE — Dubai | VARA (Virtual Assets Regulatory Authority) | Full VA activity licences (advisory, broker-dealer, custody, exchange, lending, management) | Live | World-first dedicated crypto regulator. Mandatory licence to serve the Dubai market (ex-DIFC). |
| UAE — Abu Dhabi | ADGM / FSRA | Virtual-asset framework since 2018; spot exchanges, custody, stablecoins | Live | One of the earliest comprehensive frameworks globally; strong institutional focus. |
| UAE — DIFC | DFSA | Crypto Token & investment-token regime | Live | Recognised-token list; regulates funds and firms operating from the DIFC. |
| UAE — Federal | SCA & CBUAE | National VA rules (SCA) + Payment Token / stablecoin regulation (CBUAE) | Live | CBUAE stablecoin regime shapes AED-backed and payment tokens nationwide. |
| Saudi Arabia | SAMA & CMA | Sandbox / exploratory; no full retail regime yet | Building | SAMA runs central-bank pilots; broad framework still developing. Large market to watch. |
| Bahrain | CBB | Crypto-asset module (licensed VASPs) | Live | Early mover — CBB crypto-asset rules since 2019; active licensees. |
| Qatar | QFC / QFCRA | Digital Assets Framework (tokenisation focus) | Building | 2024 framework emphasises tokenised real-world assets; retail crypto restricted. |
| Oman | CMA / FSA | Virtual Asset regulatory framework | Building | Framework rolled out to license VASPs and service providers. |
| Kuwait | CBK / CMA | Ban on most crypto payments/mining | Cautious | Restrictive stance; limited legal pathways for VA activity. |
| Egypt | CBE | Prohibited without CBE licence | Cautious | Trading/promotion restricted; watch for future fintech openings. |
| Israel | ISA & regulators | AML-registered VASPs; securities case-by-case | Building | Active market with AML rules; token classification assessed individually. |
| Turkey | CMB / MASAK | Licensing law for crypto service providers | Building | 2024–25 law brought exchanges under CMB supervision and AML rules. |
| Jordan | CBJ | No formal licensing; official caution | Cautious | No dedicated regime; central bank has warned against crypto use. |
How to use this tracker
If you are a firm choosing where to license, the UAE offers three distinct front doors — VARA (Dubai), ADGM/FSRA (Abu Dhabi), and DFSA (DIFC) — each with its own rulebook and market scope. Pick the one that matches where your customers and operations sit. Elsewhere in the region, treat “Building” jurisdictions as opportunities to engage early with sandboxes, and “Cautious” ones as markets to avoid offering regulated activity until rules change.
Frequently asked questions
Is crypto legal in the UAE?
Yes. Providing virtual-asset services in the UAE is legal but requires a licence from the relevant authority — VARA in Dubai, FSRA in ADGM, DFSA in the DIFC, or the SCA federally. Operating without the right licence is not permitted.
Which UAE regulator should a crypto exchange apply to?
It depends on where you operate. VARA covers Dubai outside the DIFC, ADGM/FSRA covers Abu Dhabi’s financial free zone, and the DFSA covers the DIFC. Federal activity falls under the SCA. Many firms hold more than one licence to reach the whole market.
Does Saudi Arabia allow crypto trading?
Saudi Arabia has not yet issued a comprehensive retail crypto framework. SAMA runs central-bank digital-currency pilots and the CMA is studying tokenisation, so the regime is still being built. Confirm current status before offering services.
How often is this tracker updated?
It is a living page reviewed regularly and revised whenever a MENA regulator changes its rules. The review date is shown near the top.
Sources: official regulator publications (VARA, ADGM FSRA, DFSA, SCA, CBUAE, SAMA, CBB, QFCRA, CMA Oman). Verify current requirements with each regulator.