Crypto Law Profile

DFSA Crypto Token Regime

DFSA regime for Crypto Token activities in or from DIFC. Effective Nov. 1, 2022 and updated Jan. 12, 2026, it relies on firm-led token suitability, DFSA-reviewed fiat stablecoins, authorisation, disclosure, custody and conduct safeguards.

United Arab Emirates Effective Regulation Nov 1, 2022

At a glance

Jurisdiction DIFC-specific DFSA framework, mapped to United Arab Emirates for jurisdiction taxonomy.
Status In force; original regime effective Nov. 1, 2022, with major updates effective Jan. 12, 2026.
Token model Non-fiat Crypto Tokens use firm-led suitability; Fiat Crypto Tokens remain DFSA-assessed.
Coverage Covers permissions, offers, promotions, funds, derivatives, conduct, custody and AML/CFT controls.

Overview

DFSA Crypto Token Regime refers to the Dubai Financial Services Authority’s regulatory framework for financial services activities involving Crypto Tokens in or from the Dubai International Financial Centre. As of June 16, 2026, the regime is in force. It originally came into force on Nov. 1, 2022, and the most recent major update took effect on Jan. 12, 2026.

The regime is not a standalone crypto statute. It is implemented through amendments to DIFC administered laws and DFSA Rulebook modules, especially the General Module, Conduct of Business Module, Collective Investment Rules, Markets Rules, Authorised Market Institutions rules, Fees Module and Glossary. The DFSA describes the framework as applying existing prudential, conduct and financial crime requirements to Crypto Token activities where appropriate.

DFSA Crypto Token regime scope

The DFSA’s framework applies to relevant financial services, offers, promotions, funds, derivatives or instruments involving Crypto Tokens in or from the DIFC. A token is treated as a Crypto Token where it is used, or intended to be used, as a medium of exchange or for payment or investment purposes, unless it is an Investment Token, another type of investment, or an excluded token.

The regime sits inside the DIFC’s financial-services perimeter. The DFSA states that new firms seeking to conduct financial services activities involving Crypto Tokens in DIFC must be authorised, while existing authorised firms may need a licence variation before adding Crypto Token permissions.

Key provisions of the DFSA Crypto Token framework

Firm-led suitability model

The January 2026 update replaced the DFSA’s earlier prescribed list of Recognised Crypto Tokens with a firm-led assessment model for non-fiat Crypto Tokens. Under GEN Rule 3A.2.1, a person must not carry on specified activities involving a Crypto Token unless the rule’s suitability conditions are met. For non-fiat Crypto Tokens, the person must assess the token and conclude on reasonable grounds that it is suitable for the relevant activity.

The criteria include the token’s characteristics, governance arrangements and founders; regulatory status in other jurisdictions; market size, liquidity and trading history; technology; and whether use of the token could prevent compliance with DFSA-administered legislation. The updated rules also require disclosure of assessed tokens, ongoing monitoring, demonstrable assessment grounds and monthly information returns for authorised persons.

Fiat Crypto Tokens and stablecoins

Fiat Crypto Tokens remain subject to DFSA assessment. The DFSA’s policy statement describes factors it considers for fiat-referenced tokens, including reserve quality, daily valuation, segregation, monthly publication of reserve information and independent verification. The current policy statement lists Circle Euro Coin, Circle USD Coin and Ripple USD as fiat Crypto Tokens assessed by the DFSA as suitable.

Prohibited and restricted token categories

GEN 3A also includes prohibitions or restrictions for certain token categories. The Rulebook prohibits specified activities involving Privacy Tokens or Privacy Devices and addresses Algorithmic Tokens, which the DFSA describes as tokens using algorithms to stabilise price. Separate rules restrict authorised persons from providing services or carrying on activities relating to Utility Tokens or NFTs, subject to a custody-related carve-out.

Disclosure, custody, AML/CFT and market integrity

The original 2022 launch notice said the regime covers AML/CFT risks around trading, clearing, holding or transferring Crypto Tokens, and also addresses consumer protection, market integrity, custody and financial resources for service providers. Conduct rules require authorised firms to display prominent Crypto Token risk warnings covering volatility, loss risk, liquidity, complexity, cyber theft and the distinction between Crypto Tokens and traditional investments.

The 2026 update also emphasises governance, custody, disclosure, conduct and reporting safeguards. The DFSA’s implementation material says supervisory focus includes governance and accountability, financial-crime controls, safeguarding, technology resilience and market conduct.

Status and timeline

The regime is currently in force in the DIFC. The original Crypto Token regime became effective on Nov. 1, 2022. Rulebook derivations identify the initial 2022 rule-making instruments and later amendments, including 2024 amendments and 2025 instruments that came into force on Jan. 12, 2026. Editors should treat the profile as DIFC-specific, not as a full United Arab Emirates virtual asset licensing summary outside the DFSA’s jurisdiction.

Key provisions

Firm-led suitability assessment

GEN 3A.2.1 bars specified activities with a Crypto Token unless suitability conditions are met; non-fiat tokens require a documented firm assessment.

Licensing & Registration Jan 12, 2026 Source

Fiat Crypto Token treatment

Fiat Crypto Tokens are assessed by DFSA for suitability; the current policy statement lists EURC, USDC and RLUSD.

Stablecoins Jan 12, 2026 Source

Authorisation and permissions

New firms and authorised firms seeking Crypto Token financial services permissions in DIFC must apply for authorisation or a licence variation.

Licensing & Registration Nov 1, 2022 Source

Disclosures and risk warnings

COB rules require prominent risk warnings covering volatility, loss risk, liquidity, complexity, cyber theft and differences from traditional investments.

Disclosure & Marketing Nov 1, 2022 Source

Prohibited token categories

GEN 3A prohibits or restricts specified activities involving Privacy Tokens, Privacy Devices, Algorithmic Tokens, Utility Tokens and NFTs.

Privacy coins Nov 1, 2022 Source

Ongoing monitoring and reporting

Updated rules require current token lists, ongoing reviews, demonstrable suitability grounds and monthly Crypto Token information returns for authorised persons.

Market conduct Jan 12, 2026 Source

Timeline

  1. Initial rule-making instruments made

    Rulebook derivations identify initial Crypto Token rules, including GEN RMI328/2022 and COB RMI329/2022, made on this date.

    Enacted Source
  2. DIFC Laws Amendment Law No. 4 of 2022

    DIFC Law No. 4 of 2022 amended DIFC administered laws, including Markets Law references relevant to Crypto Tokens.

    Enacted Source
  3. Crypto Token regime came into force

    DFSA announced that its Crypto Token regime came into force as the second phase of its token-regulation work.

    In force Source
  4. 2024 Rulebook amendments effective

    Rulebook version history shows amendments to core Crypto Token prohibitions taking effect from Jun. 3, 2024.

    In force Source
  5. CP168 amendments notice issued

    DFSA notice listed RMIs 423-429/2025 for CP168 updates to come into force on Jan. 12, 2026.

    Enacted Source
  6. Updated framework in force

    DFSA brought the updated Crypto Token framework into force and moved to a firm-led suitability model.

    In force Source
  7. Crypto Token FAQs published

    DFSA published FAQs to support implementation of the updated Crypto Token regulatory framework.

    Enacted Source

Who it affects

Actors

Dubai Financial Services Authority, Dubai International Financial Centre

Asset classes

Crypto-tokens, Fiat Crypto Tokens, Privacy tokens, Stablecoins

Official sources

Editorial note

Profile maps a DIFC-specific DFSA framework to the United Arab Emirates jurisdiction taxonomy. It is not a UAE-wide VARA, SCA or central bank virtual-asset profile. The Jan. 12, 2026 update shifted non-fiat Crypto Tokens from DFSA-recognised tokens to firm-led suitability assessments.