The UAE does not have a single tokenisation regulator. It has at least five, sitting across two emirates and the federal centre, and the choice of which one supervises a given product is part of the product design rather than a downstream compliance question. vara runs Dubai mainland, dfsa runs the DIFC free zone, adgm fsra runs the ADGM free zone, sca uae is the federal securities regulator, and cbuae owns the central-bank perimeter including the Digital Dirham and the dirham-stablecoin regime under its Payment Token Services Regulation. None of the five is a federal regulator of virtual assets. Compared with Singapore (single MAS perimeter) or Hong Kong (clean HKMA / SFC split), the UAE is the APAC-adjacent jurisdiction where issuers can pick venue, and many stack registrations across DIFC and ADGM rather than choosing one.

Regulatory posture

The five-regulator landscape is best read as four overlapping rulebooks plus a federal layer. VARA covers Dubai mainland (excluding DIFC) under a structured set of rulebooks for virtual asset service providers, issuance, custody, broker-dealer, and exchange activity, and is the comprehensive virtual-asset regulator in the country by perimeter. DFSA, in DIFC, runs a financial services regime that has incorporated tokenised securities, investment tokenisation, asset-backed tokens, and fund tokenisation into its existing licensing categories, with a recently expanded crypto-token framework. ADGM-FSRA, in Abu Dhabi, has been regulating crypto-asset activity since 2018, runs a Virtual Asset Framework, and added the DLT Foundations regime in 2023, which has become a common Tier-1 vehicle structure for tokenised funds and DLT-native protocols in the region.

SCA sits federally and supervises securities and commodities across the UAE, coordinating with VARA on Dubai-mainland VASPs handling securities-style instruments. CBUAE is the central bank for payment-token activity and the Digital Dirham; its Payment Token Services Regulation is the perimeter for dirham-denominated fiat-referenced stablecoins. An issuer in the UAE typically lands on one of three patterns: VARA-licensed for Dubai-facing services, DIFC or ADGM structures for institutional issuance, or CBUAE-permitted for AED stablecoin work.

Active pilots

• cbuae Digital Dirham. Wholesale and retail legs in development, with the UAE as a founding mBridge participant alongside HKMA, BoT, and PBoC. As of late 2025 the wholesale leg has been the more active in cross-border settlement experimentation, with retail Digital Dirham positioned for domestic payment integration.
• AED-pegged regulated stablecoins. CBUAE Payment Token Services Regulation governs dirham-pegged issuance; first licensed AED stablecoins are coming to market under that perimeter, against an installed base where USD stablecoins still dominate regional flows.
• Tokenised RWA traction. UAE has emerged as one of the busier MENA venues for real-estate tokenisation and private-credit issuance, with structures running through ADGM and DIFC vehicles. The wedge is asset class scope: real estate and private credit are the live institutional categories, ahead of tokenised deposits or money-market funds.
• ADGM DLT Foundation regime. Operational since 2023 as a vehicle structure for tokenised funds and protocol-level entities, often paired with FSRA Virtual Asset licensing for the operating arm.

Key institutions

• vara. Dubai-mainland virtual asset regulator.
• dfsa. DIFC financial services authority, tokenised securities and fund regime.
• adgm fsra. ADGM financial services regulator, DLT Foundations and Virtual Asset frameworks.
• sca uae. Federal Securities and Commodities Authority.
• cbuae. Central Bank of the UAE, Digital Dirham and Payment Token Services Regulation.

Open questions

• How regulator-shopping plays out among VARA, DFSA, and ADGM-FSRA as issuers pick venues. Current pattern looks like complementary stacking (DIFC or ADGM for issuance vehicle, VARA for Dubai-facing distribution), but the line between arbitrage and complementarity is not yet documented in raw/.
• Whether AED-denominated regulated stablecoins gain meaningful float against USD-denominated incumbents in regional flows, or whether the dirham perimeter ends up oriented mainly to domestic payments and Digital Dirham interoperability.
• Whether mBridge post-graduation governance puts CBUAE in a leading or follower role relative to HKMA and PBoC, particularly on cross-border AED-CNY corridors.
• Substantive content of the CBUAE Payment Token Services Regulation as it operates in practice: redemption rights, reserve composition, and whether it converges with HK Stablecoins Ordinance, MiCA EMT, or GENIUS-style requirements.
• How agentic commerce surfaces in the UAE stack. None of the five regulators has published explicit guidance on AI agents holding tokenised money or executing tokenised-asset transactions; whether VARA or DFSA reaches that question first is an open call.

Related

• Stablecoin types for the Payment Token Services Regulation perimeter against MiCA EMT, HK Stablecoins Ordinance, and GENIUS.
• Tokenisation, defined for the legal-control plumbing across DIFC (English-law-derived) and ADGM (English common law) compared with VARA.
• hong kong, japan for the comparable APAC perimeters.
• mBridge for cross-border governance post-graduation.