Skip to content

Guide

Token Issuance and Launchpads in the UAE: A Structure Guide

The short answer

Outside the Dubai International Financial Centre (DIFC), the Virtual Assets Regulatory Authority (VARA) decides whether a token issuance or launchpad needs authorisation, and its answer turns on which functions the business performs โ€” not what the pitch deck calls it. Inside DIFC, the Dubai Financial Services Authority (DFSA) runs a separate process for recognising crypto tokens. The detail that most often decides the route is whether the model touches custody, subscription money or market-making, because each of those pulls in its own licence category and capital requirement.

A commercial trade licence is not virtual-asset authorisation and never becomes one by accident. Map who touches assets, keys and client money before choosing a jurisdiction or an entity type.

Which regulator decides, and where the line sits

VARA is the sole authority regulating virtual assets across Dubai's free zones and mainland, outside DIFC. Inside DIFC, DFSA decides whether a crypto token is recognised for regulated activities; its current test could not be re-confirmed for this update, so treat that as a question for DFSA directly rather than a rule to copy from any summary, including this one.

Neither regulator works from labels. An entity described as a "technology platform" is still inside the perimeter if its customer journey performs a controlled function โ€” custody, dealing, arranging, issuing or marketing an investment-like product. Velarozone's VARA and virtual-asset setup work starts by classifying the model against that perimeter before any entity or jurisdiction is chosen.

What VARA's Virtual Asset Issuance Rulebook actually asks for

VARA's Virtual Asset Issuance Rulebook, effective from 19 June 2025, splits issuance into two licence categories โ€” Category 1 and Category 2 โ€” set out in its Part I licence requirements, with different disclosure and supervisory obligations attached to each. It also names virtual assets it prohibits outright and issuances it exempts from the full licensing path; which bucket a given token falls into is a question of fact, not assumption.

Part III requires a whitepaper and public disclosures; the rulebook's own text sets the detailed content and timing, so confirm the current version rather than reusing a template from another jurisdiction. Tokens referencing fiat currency or other assets โ€” what VARA treats as Fiat-Referenced or Asset-Referenced Virtual Assets โ€” carry additional annexes on top of the general issuance rules, which is one reason a "utility token" built loosely around a peg needs its own legal review. Velarozone's business plans and documentation work turns that drafting into something a supervisor, not just a community, will accept.

Marketing and market conduct rules that apply once the token is live

A separate rulebook governs conduct after the token exists. VARA's Market Conduct Rulebook, also effective from 19 June 2025, applies to every VARA-regulated entity across Dubai's free zones and mainland. Part I sets rules on marketing, advertising and promotions โ€” the launch campaign is regulated activity, not a side project for the growth team. Part V requires public disclosure of licence details, authorised activities and a risk disclosure statement. Part VI requires insider lists and disclosure of board and staff positions. Part VII prohibits trading on own account, which rules out a launchpad quietly building a position in the tokens it lists. None of this is DIFC law; inside the centre, DFSA's regime applies instead.

How subscription money and custody have to work

Banks and payment partners treat a token issuance as an enhanced-due-diligence case by default, because subscription money moves from the public into the issuer before the token exists. Who holds that money, in which account, and under whose licence, is the first question a bank or acquirer asks โ€” and the answer has to match exactly what the business told VARA or DFSA it would do. Funds should sit in segregated client accounts with a licensed institution wherever the law requires one; an issuer or launchpad holding client money in its own operating account is a problem a bank will find quickly.

Velarozone's corporate banking readiness and source of funds work exists because this file, not the pitch deck, is what a compliance team actually reads.

Structure decisions that change the capital and governance bill

Four variables decide what the setup costs before a single formation fee is paid: which operating model the business runs; where the issuing entity sits relative to the operating company; whether distribution is public, private or restricted; and whether treasury, vesting and post-issuance governance create an ongoing authorised activity rather than a one-off event.

VARA's compulsory Company Rulebook and Compliance and Risk Management Rulebook apply on top of the Issuance Rulebook, which is why a structure built around the lowest formation price rarely matches what the authority โ€” and then the bank โ€” expects. Bundling custody, dealing and issuance into one company tends to multiply capital and governance requirements rather than average them, which is one reason a crypto exchange setup or crypto market-making licence is usually separate from the issuer, not an add-on. Multiple founders, an offshore treasury entity or outside investors need the same ownership structuring attention as the licence itself.

What commonly goes wrong

  • Calling a token "utility" without testing it against VARA's issuance categories.
  • Running the marketing campaign before the whitepaper and disclosures are settled.
  • Taking in subscription assets before custody and banking are resolved.
  • Making liquidity or price-support promises that create market-conduct exposure.
  • Treating a DIFC entity and a mainland or free-zone entity as interchangeable.

Comparing incorporation fees misses the point. What matters is capital held, mandatory hires, permitted functions and banking realities. Cost is built in layers, and Velarozone's own fee is itemised in the engagement letter; see how Velarozone works.

Downtown Dubai skyline with the Burj Khalifa at golden hour

General guidance here; the detail that matters depends on your activity and markets.

Questions

Frequently asked

What is the difference between Category 1 and Category 2 virtual asset issuance?
VARA's Virtual Asset Issuance Rulebook splits issuance into two licence categories with different disclosure and supervisory requirements. Which one applies depends on the facts of the issuance, not the label founders choose. Confirm the current category test against the rulebook itself before drafting a whitepaper around an assumption.
Does a launchpad need its own VARA licence, separate from the issuer's?
It depends on what the launchpad does. A platform that only provides technology and administration sits differently to one that selects buyers, receives subscription assets or arranges an exchange listing. Each is a function VARA's rulebooks test on its own terms, and bundling them into one entity tends to multiply the capital and governance load rather than average it.
Can a token sale be structured to avoid VARA entirely?
Not by relabelling it. VARA's perimeter is activity-based: marketing, distribution, custody and issuance are each tested against what the business does, and a commercial trade licence does not grant virtual-asset authorisation. Calling the business a technology platform does not remove it from the perimeter if the customer journey performs a regulated function.
What changes if the issuer is incorporated in DIFC rather than elsewhere in Dubai?
The regulator changes. Inside DIFC, DFSA decides whether a crypto token is recognised for regulated activities. Everywhere else in Dubai's free zones and mainland, VARA's rulebooks apply instead. Moving an entity between the two regimes later is a re-papering exercise, not a formality.
Does the Market Conduct Rulebook apply to a launchpad that only sells to professional investors?
Yes, where the launchpad is a VARA-regulated entity. The rulebook's marketing, disclosure and conduct rules attach to the entity's licence, not to the investor category of a particular sale. A private placement does not exempt the firm from the marketing rules or the restriction on trading own account.

Get your UAE setup plan

Token issuance and launchpad models carry more regulatory variables than almost any other activity Velarozone sets up: which VARA category or DFSA process applies, whether custody or market-making creates extra licensing load, and what a bank wants to see before money moves. Velarozone classifies the model against the virtual-asset perimeter, sequences the licensing and banking work together, and prices the result as part of how Velarozone works โ€” not as a single headline fee.

Apply this to your own situation

Guides describe the general position. Send us your facts and an adviser will tell you which parts actually apply to you.

Free assessment โ€” current figures are confirmed within your adviser-reviewed route comparison. Your details are not shared with third parties.

Start with a structure assessment

In an initial consultation you receive a plain-language decision summary, a document-preparation list, and the next actions for your situation. Current figures are confirmed within your adviser-reviewed route comparison.

Get my UAE setup planSend the details through the contact form

This guide provides general information, not legal, regulatory, tax, investment or financial advice. It does not guarantee a licence, authorisation, visa, bank account, funding or tax outcome.

This page is general information about UAE business setup, not legal, tax, immigration, or banking advice. Rules, fees, permitted activities, and bank policies can change. Final eligibility depends on your facts and the applicable rules at the time of application.