Guide
Setting Up a Stablecoin or Payment-Token Company in the UAE
The short answer
For a Dirham-referenced payment token, the Central Bank of the UAE (CBUAE) decides under its Payment Token Services Regulation. For a stablecoin referenced to a foreign currency and issued from Dubai mainland or a non-DIFC free zone, the Virtual Assets Regulatory Authority (VARA) decides under its Virtual Asset Issuance Rulebook, which treats a stablecoin as a Fiat-Referenced Virtual Asset. Either route calls for a payment-token or virtual-asset issuance licence, not an ordinary trade licence, and a trade licence never converts into one. The factor that decides which route applies, and how heavy it is, is what the token references and which function the entity performs — issuing, holding reserves, distributing or administering technology.
Which regulator decides, and on what basis
Two authorities can claim this activity, and which one applies turns on the token and the location of the activity, not on how the business describes itself. The CBUAE's Payment Token Services Regulation governs Dirham-referenced payment tokens: issuance, conversion, custody and transfer of a token pegged to the dirham sits with the Central Bank. VARA is the sole authority regulating virtual assets across Dubai's free zones and mainland, outside the DIFC; its Virtual Asset Issuance Rulebook gives a stablecoin referenced to a foreign currency its own category — a Fiat-Referenced Virtual Asset — alongside a separate category for assets referenced to other assets. A business issuing from Dubai mainland or a non-DIFC free zone, referencing a currency other than the dirham, sits with VARA rather than the Central Bank.
A business that only distributes or converts an already-issued token, without becoming the issuer, may fit a crypto broker or OTC desk structure instead. Getting the CBUAE-or-VARA split right, confirmed directly with the regulator before filing, is the starting point for any VARA and virtual asset setup work.
What the regulator actually requires
Under VARA, a Fiat-Referenced Virtual Asset issuer must satisfy the Issuance Rulebook's licensing requirements before launch, then publish a whitepaper and risk disclosure statement under its public-disclosure requirements — what holders are told is a licensing condition, not a marketing choice. Four compulsory rulebooks sit underneath every VARA activity, including issuance: Company, Compliance and Risk Management, Technology and Information, and Market Conduct. Together they hold the resident-management, compliance, MLRO and technology-control requirements, rather than the issuance rulebook alone.
The CBUAE's equivalent conditions for a Dirham-referenced token — capital, governance and reserve detail — are decided by the Central Bank case by case; its public rulebook page could not be re-read for this update, so no capital or reserve figure is stated here.
The whitepaper, business plan and policy suite a regulator reviews are regulator-facing documents, not marketing collateral. Building business plans and documentation to that standard from the outset survives review better than adapting material written for a different token.
How money moves: reserves, redemption and banking
A stablecoin's reserve is the asset that makes redemption credible, so banks and the regulator both start there. VARA's issuance rulebook requires a Fiat-Referenced Virtual Asset issuer to hold reserve assets and make redemption rights enforceable for holders; composition, custody and attestation detail sits inside the rulebook, and should be confirmed against the current text before it is relied on. Reserve cash is not operating cash, and a bank account that mixes the two is a finding waiting to happen.
Banks treat a token issuer as an enhanced-due-diligence client by default, so a clean separation between the reserve account, the operating account and working capital, documented before onboarding starts, does more for banking readiness than any pitch deck. Where reserve funding comes from investors or a parent group, expect the bank and the regulator to ask about source of funds as closely as they ask about the token's mechanics.
Ownership, substance and the roles you must fill
VARA's Company Rulebook is compulsory for every licensed activity, issuance included, and is where the substance test lives: resident senior management, a compliance function and an MLRO are licensing conditions, not best practice. An IP holding company, an offshore parent or an SPV can sit above the licensed entity, but the entity holding the licence needs people in the country, not just a registered address.
Where reserve administration, technology and distribution are split across more than one company, each entity's ownership and the group's overall structure come under the same scrutiny, because the regulator assesses the group's ability to deliver the function, not just the entity named on the application. This is where regulated and complex ownership structures earns its name: a structure built to look cheap on a formation invoice is the one a VARA or CBUAE reviewer, and every bank afterwards, reads most sceptically.
What commonly goes wrong in this sector
- Calling a token stable without a legally enforceable redemption mechanism
- Treating reserve assets as operating cash, or running both through one bank account
- Assuming a foreign-issued stablecoin can be distributed in the UAE without a separate authorisation
- Combining issuance, custody and conversion in one entity without mapping each function against its licence
- Comparing formation fees across routes instead of held capital, mandatory hires and renewal cost
Cost here is built in layers, not one headline number: held capital, mandatory hires and recurring supervision sit above the formation fee, and the firm's own fee is set out in the engagement letter — see how Velarozone works.
