Table of Contents
Frequently Asked Questions
What is a Virtual Assets Custody Services licence in Dubai and what activity does it cover
A Virtual Assets Custody Services licence in Dubai operates under activity code 6619.84 within the financial services classification. It authorises a business to safeguard private keys and digital assets on behalf of clients — holding, managing, and protecting access to those assets without trading, advising on, or brokering them.
The role is closer in function to a prime broker or depository than to an exchange or fund manager. The custody provider is responsible for security architecture, key management protocols, and operational continuity that underpin a client's digital asset holdings.
Typical clients include institutional investors, family offices, crypto-native funds, tokenised asset issuers, and DAOs requiring third-party custody arrangements. These clients require institutional-grade security, audit trails, insurance coverage, and regulatory accountability.
Which regulatory bodies oversee virtual asset custody businesses in Dubai
VARA (Virtual Assets Regulatory Authority) is the primary regulator for virtual asset activities conducted in or from Dubai, excluding the DIFC. Established under Law No. 4 of 2022, VARA supervises licensing, compliance, and market conduct for virtual asset service providers, including custody businesses.
The Central Bank of the UAE governs broader financial services compliance at the federal level. Even though VARA handles virtual asset-specific regulation in Dubai, the Central Bank's AML/CFT frameworks apply across the board, meaning custody providers must maintain compliance with both regulatory layers simultaneously.
The Securities and Commodities Authority (SCA) operates federally and becomes relevant if your business model extends to other Emirates or involves tokenised securities. Understanding how all three bodies interact is essential before incorporating.
What is VARA and why is it significant for virtual asset businesses
VARA — the Virtual Assets Regulatory Authority — was established in Dubai in 2022 under Law No. 4 of 2022. It holds the distinction of being the world's first standalone virtual asset regulator at a city level, making Dubai's regulatory environment uniquely mature compared to most global jurisdictions.
VARA supervises licensing, compliance, and market conduct for virtual asset service providers operating in or from Dubai (outside the DIFC). Custody is a regulated activity under VARA's framework, meaning any entity providing custody services to clients must engage with VARA's licensing process in addition to obtaining a free zone trade licence.
Since its inception, over 500 virtual asset service providers have engaged with UAE regulators, reflecting the authority's active role in shaping a credible institutional market for digital assets.
How does free zone licensing through Meydan relate to VARA authorisation
Free zone licensing and VARA authorisation are two separate but complementary processes that run in parallel. They serve different purposes and neither replaces the other.
A Meydan Free Zone trade licence establishes your legal entity, provides a commercial address, and grants visa entitlements needed to operate in Dubai. It is the foundational corporate structure for your business.
VARA authorisation, on the other hand, is what permits you to actually conduct regulated virtual asset custody activity with clients. Without it, holding a free zone licence alone does not authorise you to provide custody services commercially.
What compliance obligations should a virtual asset custody business expect in Dubai
Because virtual asset custody sits within the financial services classification, the compliance obligations are substantive. Businesses should expect AML/CFT (Anti-Money Laundering and Counter-Financing of Terrorism) requirements from both VARA and the Central Bank of the UAE's federal frameworks.
Fit-and-proper assessments are part of the licensing process, meaning key personnel and beneficial owners will be evaluated for suitability. Engagement with Dubai's virtual asset regulatory framework is expected from the outset of incorporation, not as an afterthought.
Custody providers must also maintain institutional-grade operational standards including security architecture, key management protocols, audit trails, and insurance coverage — requirements driven as much by client expectations as by regulatory mandates.
What is the tax position for a virtual asset custody business operating from a UAE free zone
Qualifying free zone businesses in the UAE benefit from a 0% corporate tax rate on eligible income under the UAE Corporate Tax Law. This applies to businesses that meet the conditions for qualifying free zone person status, making the UAE structurally attractive for financial services businesses including virtual asset custody providers.
It is important to note that tax eligibility depends on the specific nature of income and whether the business satisfies the qualifying criteria under the law. Professional tax advice should be sought to confirm how the corporate tax framework applies to a particular custody business structure and its client base.
Who are the typical clients of a virtual asset custody business and what do they require
Virtual asset custody clients are overwhelmingly institutional rather than retail. Typical clients include institutional investors, family offices, crypto-native funds, tokenised asset issuers, and DAOs (Decentralised Autonomous Organisations) that require third-party custody arrangements for governance or operational reasons.
These clients have demanding requirements. They expect institutional-grade security, comprehensive audit trails, insurance coverage, and clear regulatory accountability from their custody provider. The custody provider's regulatory status and compliance posture are often prerequisites for winning and retaining institutional mandates.
This client profile distinguishes custody from retail-facing virtual asset services and explains why the compliance and operational bar for activity code 6619.84 is set at an infrastructure level rather than a consumer-facing one.
How large is the market opportunity for virtual asset custody and what is driving growth
The global digital asset custody market is projected to grow substantially through 2030, with institutional adoption identified as the primary driver. As more traditional financial institutions, family offices, and funds allocate to digital assets, the demand for regulated, insured, and auditable custody infrastructure increases proportionally.
The UAE's position is particularly strong. The country ranked among the top 10 globally for crypto adoption according to Statista, and Dubai's early regulatory clarity through VARA has attracted a concentration of virtual asset service providers — over 500 have engaged with UAE regulators since VARA's inception.
The combination of growing institutional demand, a mature regulatory framework, tax efficiency, and geographic positioning between European and Asian markets makes Dubai a commercially logical base for custody businesses targeting international institutional clients.
How to Start a Virtual Assets Custody Business in Dubai
Dubai has positioned itself as one of the few jurisdictions globally where virtual asset custody is a licensed, regulated commercial activity — not a grey area. The infrastructure is in place, the regulatory bodies exist, and the commercial demand is growing. This guide covers what a Virtual Assets Custody Services licence (activity code 6619.84) involves, who it suits, and how to set it up through Meydan Free Zone.
- The UAE ranked among the top 10 countries globally for crypto adoption, according to Statista
- Dubai's Virtual Assets Regulatory Authority (VARA) was established in 2022 — the world's first standalone virtual asset regulator at a city level
- The global digital asset custody market is projected to grow substantially through 2030, driven by institutional adoption
- Qualifying free zone businesses in the UAE benefit from 0% corporate tax on eligible income under the UAE Corporate Tax Law
- Over 500 virtual asset service providers have engaged with UAE regulators since VARA's inception
What Virtual Assets Custody Services Actually Covers
Virtual asset custody is the safeguarding of private keys and digital assets on behalf of clients. The custodian holds, manages, and protects access to those assets — it does not trade them, advise on them, or broker transactions. That distinction matters commercially and regulatorily.
Activity code 6619.84 sits within the financial services classification. It is infrastructure-layer work: the custody provider is responsible for the security architecture, key management protocols, and operational continuity that underpin a client's digital asset holdings. This is closer in function to a prime broker or depository than to an exchange or fund manager.
Typical clients include institutional investors, family offices, crypto-native funds, tokenised asset issuers, and increasingly, DAOs requiring third-party custody arrangements. These clients are not retail — they require institutional-grade security, audit trails, insurance coverage, and regulatory accountability from their custody provider.
Because the activity sits within financial services, the compliance obligations are substantive. Anyone setting up under this code should expect AML/CFT requirements, fit-and-proper assessments, and engagement with Dubai's virtual asset regulatory framework from the outset.
Business Activities List
Explore Over 2,500+Dubai's Virtual Asset Regulatory Landscape
Dubai operates a distinct regulatory layer for virtual assets. Understanding how the bodies interact is essential before you incorporate.
Key Regulatory Bodies to Know
VARA (Virtual Assets Regulatory Authority) is the primary regulator for virtual asset activities conducted in or from Dubai, excluding the DIFC. Established under Law No. 4 of 2022, VARA supervises licensing, compliance, and market conduct for virtual asset service providers. Custody is a regulated activity under VARA's framework, and any entity conducting custody services for clients will need to engage with VARA's licensing process in addition to obtaining a free zone trade licence.
The Central Bank of the UAE governs broader financial services compliance at the federal level. While VARA handles virtual asset-specific regulation in Dubai, the Central Bank's AML/CFT frameworks apply across the board, and custody providers must maintain compliance with both layers.
The Securities and Commodities Authority (SCA) operates at the federal level and has jurisdiction over virtual asset activities outside of Dubai's VARA perimeter. If your business model extends to other Emirates or involves tokenised securities, SCA oversight becomes relevant.
Free zone licensing through Meydan complements VARA registration by providing the legal entity, commercial address, and visa entitlements needed to operate. The two processes run in parallel — the free zone licence establishes your company; VARA authorisation permits you to conduct regulated virtual asset activity.
Free Business Setup Cost Calculator
Calculate NowMarket Opportunity and Business Model
Institutional appetite for digital asset exposure in the UAE is no longer speculative. Family offices, sovereign-adjacent funds, and regional asset managers are allocating to crypto and tokenised assets — and they require regulated custody solutions before they can do so at scale. That demand is the commercial case for this licence.
Revenue models in virtual asset custody typically run on AUM-based fees (a basis-point charge on assets held), flat monthly or annual custody fees per account, and ancillary services such as transaction reporting, staking facilitation, and portfolio analytics. The higher the client tier, the more layered the service offering tends to be.
Target segments in Dubai include HNWIs managing multi-asset portfolios, crypto-native funds requiring institutional-grade custody, and tokenised asset issuers who need a third-party custodian to satisfy investor due diligence requirements.
The UAE's tax environment reinforces the commercial case. Qualifying free zone entities benefit from 0% corporate tax on eligible income, as confirmed under the UAE Corporate Tax Law administered by the Federal Tax Authority. For a custody business generating fee income from international clients, this is a meaningful structural advantage.
How to Set Up via Meydan Free Zone: Step-by-Step
Step 1: Reserve your trade name and confirm activity code 6619.84. Your trade name must comply with UAE naming conventions. Confirm that Virtual Assets Custody Services (6619.84) is correctly listed as your primary activity before proceeding.
Step 2: Submit incorporation documents and shareholder details. This includes passport copies, proof of address, and a business plan or activity description. For financial services activities, additional due diligence documentation is standard.
Step 3: Obtain your Meydan Free Zone licence. Timelines are typically efficient — often within a few business days for straightforward applications. Costs vary based on share capital requirements, office package, and visa allocation. Use the cost calculator to model your setup.
Step 4: Open a corporate bank account. This is the most operationally demanding step for virtual asset businesses. UAE banks apply enhanced due diligence to VA-related entities. Having your VARA engagement underway, a clear business plan, and documented compliance procedures materially improves your chances of a successful account opening.
Step 5: Register with VARA. If you are conducting regulated virtual asset custody activities, VARA registration or licensing is required. VARA's process involves application submission, fit-and-proper assessments, and review of your operational and compliance framework. Engage a compliance adviser familiar with VARA's requirements early.
Meydan Free Zone offers flexi-desk and physical office options to satisfy both free zone and VARA requirements. Visa eligibility is linked to your licence package — plan your headcount requirements at the incorporation stage.
Dubai Trade License from AED 12,500
Get Your LicenseConclusion
Virtual asset custody is a high-compliance, high-opportunity sector. Dubai's regulatory clarity — through VARA, the Central Bank, and a mature free zone infrastructure — makes it one of the most viable places globally to build this business, provided you engage the right structure from day one. The licence exists, the regulator is functional, and the client base is here.
Speak to the Meydan Free Zone team to confirm activity eligibility, understand your VARA obligations, and get your licence in place without unnecessary delays.
References
- Statista (statista.com)
- Central Bank of the UAE (centralbank.ae)
- Securities and Commodities Authority (SCA) (sca.gov.ae)
- Federal Tax Authority (tax.gov.ae)
