Stablecoins in the UAE: Which Regulator Governs Which Activity? (2026)

Are stablecoins legal in the UAE?

Yes — stablecoins are legal and explicitly regulated in the UAE, not banned. The defining nuance is not whether they are legal but which authority governs a given activity: the UAE runs parallel regimes, so the answer depends on what you are doing (issuing, trading, custody or payments) and where (mainland Dubai, the DIFC, ADGM, or onshore federal territory). As at June 2026, only a Central Bank-licensed dirham-backed token may be used as a general means of payment for goods and services.

Rather than a single law, the UAE operates a layered framework across its mainland, its federal regulator and its two financial free zones. Each has its own statute and its own regulator, and each treats fiat-backed stablecoins — variously called Fiat-Referenced Virtual Assets, Fiat Crypto Tokens, Fiat-Referenced Tokens or Payment Tokens — as a defined, licensable category.

The practical effect for a business: holding, trading and being paid in a stablecoin through a licensed provider is lawful, but the rules that apply, and the token you may use, depend entirely on the activity and the zone. The rest of this page maps that out, because the multi-regulator question is the one that matters most in the UAE.

This is a description of the regulatory framework as at 22 June 2026, not legal advice; regimes here are changing quickly, so confirm the current position with the relevant authority or a licensed UAE professional before acting.

Who regulates stablecoins in the UAE — VARA, DFSA, FSRA, CBUAE or the CMA?

Five authorities share the field, split by activity and jurisdiction. The Virtual Assets Regulatory Authority (VARA) governs virtual assets in Dubai outside the DIFC; the Dubai Financial Services Authority (DFSA) governs the DIFC; the Financial Services Regulatory Authority (FSRA) governs Abu Dhabi Global Market (ADGM); the Central Bank of the UAE (CBUAE) governs payment tokens used for payments under the Payment Token Services Regulation; and the federal Capital Market Authority (CMA) — which succeeded the Securities and Commodities Authority on 1 January 2026 — governs virtual-asset trading onshore.

The two free zones (DIFC and ADGM) are common-law financial jurisdictions with their own regulators, which is why a Dubai address alone does not tell you who your regulator is — a firm inside the DIFC answers to the DFSA, not VARA. At the federal level, two decree-laws took effect on 1 January 2026: Federal Decree-Law No. 32 of 2025 reconstituted the SCA as the Capital Market Authority, and Federal Decree-Law No. 33 of 2025 brought virtual assets explicitly within the federal capital-markets perimeter as a regulated financial product.

VARA's position on local-currency tokens draws the line cleanly. Under VARA's published guidance, a Fiat-Referenced Virtual Asset may not be used as a means of payment for goods or services within the UAE — its use is confined to buying and selling assets inside the virtual-asset ecosystem — and dirham-referenced stablecoins fall outside VARA's remit because they require the approval of the Central Bank of the UAE, pushing that question to the CBUAE.

What licence do you need to run a stablecoin business in the UAE?

There is no single UAE stablecoin licence — you apply to the regulator for your activity and zone. An issuer or exchange in mainland Dubai licenses with VARA; in the DIFC, with the DFSA; in ADGM, with the FSRA. To issue a dirham-backed payment token, or to provide payment-token services to the public, you need CBUAE authorisation under the Payment Token Services Regulation. Each regime sets reserve, redemption, white-paper, governance and AML requirements.

The CBUAE regime is the gating one for anything payment-facing. Under the Payment Token Services Regulation — issued 7 June 2024 and in effect from 6 July 2024 after publication in the Official Gazette — it distinguishes Dirham Payment Tokens, which require a full CBUAE licence to issue, from Foreign Payment Tokens such as USDC, which require registration with the CBUAE for permitted uses. Algorithmic stablecoins and privacy tokens are excluded.

In the free zones the bar is set by activity. The DFSA, as it stated when its updated rules came into force on 12 January 2026, retains responsibility for assessing and accepting Fiat Crypto Tokens and recognises a short list — reported as USDC, EURC and Ripple USD (RLUSD) as at that date — that may be used in DFSA-regulated activities. The FSRA, effective 1 January 2026, automatically accepts FRTs issued by ADGM-based issuers and will consider foreign FRTs that meet reserve-adequacy, AML-traceability and home-jurisdiction-oversight criteria.

For most operating businesses the practical path is to integrate with an already-licensed provider in the relevant zone rather than to self-license — the provider holds the permission and runs the compliance machinery. Confirm a venue's current licence directly with the regulator; being based in the UAE is not the same as holding the specific authorisation for the activity.

How do you buy and convert stablecoins and dirhams in the UAE?

Stablecoins are bought and sold through licensed exchanges and brokers after identity verification (KYC), with the licence depending on the zone — VARA-licensed venues serve Dubai mainland, DFSA-authorised firms serve the DIFC, and FSRA-authorised firms serve ADGM. Because the dirham is pegged to the dollar, converting between AED and a USD stablecoin is near-par, less fees and spread, with no parallel-market gap to navigate.

A typical business flow is to complete KYC with a licensed exchange or OTC desk, fund in AED or USD through a UAE bank, and buy a USD stablecoin (USDC and USDT are widely used; the DFSA also accepts RLUSD and EURC in the DIFC). Settlement and custody must sit with a provider licensed for that activity in the relevant jurisdiction.

Before relying on any single venue, verify its current registration with the applicable regulator — VARA, the DFSA, the FSRA or the CBUAE — since permissions are activity-specific and can change.

How can a business hold and send USD via stablecoin from the UAE?

Businesses use USD stablecoins as a working treasury layer routed through a UAE-licensed provider: holding dollar value, netting receivables and payables, and settling cross-border in minutes rather than waiting on correspondent-bank timelines. With the dirham fixed to the dollar, the UAE's role is as a regulated settlement hub between regions, not a hedge against local-currency depreciation.

In practice a treasury can hold and price in a USD stablecoin, then convert to or from AED at the near-fixed peg only when needed. The value the UAE adds is licensed infrastructure and corridor reach — connecting Gulf trade to Asia, Africa and Latin America — rather than currency arbitrage.

Can a UAE business pay overseas suppliers with stablecoins?

Yes — a common use case is converting AED or USD into a USD stablecoin and settling with an overseas supplier or their payment partner through licensed rails, with the UAE acting as the regulated hub for corridors into Asia, Africa and Latin America. The activity must run through providers licensed for it in the relevant UAE jurisdiction and within applicable AML and sanctions rules.

The economics depend on the corridor: the all-in cost combines the on-ramp spread, any OTC spread, the off-ramp spread on the supplier side, and network fees — and the UAE's strength is that this can be done through fully licensed infrastructure rather than informal channels.

For corridors that touch sanctioned jurisdictions or parties, screening counterparties and transactions against UAE and applicable international sanctions lists is a legal obligation carried by the licensed provider. This page describes that obligation; it does not describe any means of avoiding it.

AE Coin vs USDC/USDT: which stablecoin should a UAE business use?

Use a CBUAE-licensed dirham token such as AE Coin when you need to pay or be paid in dirhams for goods and services inside the UAE — under the Payment Token Services Regulation it is the approved means of payment. Use USDC, USDT or another accepted USD token for dollar exposure and cross-border settlement. Because the dirham is pegged to the dollar at 3.6725, the economic difference between holding AED and USD value is minimal; the choice is mainly about which token is permitted for the use.

AE Coin is a dirham-pegged token reported to be backed 1:1 by dirham reserves, described as the first AED stablecoin to clear the CBUAE regime (in-principle approval in 2024, with reporting placing its final licence and launch through late 2024 into 2025). It is in live use — payable through the AEC Wallet and integrated into merchant payment rails such as Network International's point-of-sale network, with further large rollouts announced (for example ADNOC Distribution fuel stations under a December 2025 agreement) — which makes the UAE one of the few markets with a regulated local-currency stablecoin actually circulating. Press accounts differ on the precise issuer and bank arrangements — AED Stablecoin LLC and Al Maryah Community Bank are both named across reports — so confirm current details with the issuer and the CBUAE.

This is distinct from a central bank digital currency: AE Coin is a privately issued, CBUAE-licensed token, whereas the CBUAE's Digital Dirham is the central bank's own digital currency programme.

What KYC, AML and sanctions requirements apply?

Licensed stablecoin providers in the UAE carry full anti-money-laundering and counter-terrorist-financing obligations — customer identification, transaction monitoring, reporting and Travel Rule compliance — under federal AML-CFT law and their regulator's rulebook. For sanctions-exposed corridors, screening counterparties and transactions against UAE and applicable international sanctions lists is a mandatory part of that duty.

The UAE's AML-CFT framework is federal and applies across the mainland, the CBUAE regime and the free zones, with each regulator layering its own conduct and prudential rules on top. The reserve, redemption and disclosure (white-paper) requirements that attach to licensed stablecoins are part of the same trust architecture.

For most businesses the practical path is to route through a licensed provider that already carries these permissions and controls, and to integrate against it, rather than to build and license the compliance stack in-house.

How large is stablecoin and crypto adoption in the UAE?

The UAE is one of the largest crypto markets in the Middle East and North Africa. Chainalysis reported the UAE as the region's second-largest market by value received in its 2025 analysis — on the order of tens of billions of dollars in the year to mid-2025, behind Turkey — with growth driven heavily by institutional activity and fast-rising merchant and retail use.

Adoption is being shaped deliberately by regulation rather than by currency stress: with a dollar-pegged dirham and licensed local and foreign stablecoins, the UAE is positioning as a settlement and payments hub. The live use of AE Coin at major merchants is an early signal of stablecoins moving into mainstream payments. Figures here are attributed to Chainalysis and move period to period; treat them as indicative and check the latest report.

What are the risks and what should businesses watch?

The main risks are using a token or venue that is not licensed for the specific activity and jurisdiction, de-pegging or reserve risk on a stablecoin, and the compliance exposure of sanctions- or AML-sensitive corridors. The UAE's framework is strict and enforced: trading or paying with a token outside the permitted regime, or operating without the right authorisation, carries regulatory risk.

Because the regimes are new and still converging — the CMA took over the federal role only in January 2026, and the DFSA and FSRA both updated their rules effective late 2025 / January 2026 — the specific list of accepted tokens and permitted activities can change. Confirm a token's accepted status and a provider's licence with the relevant authority at the time of use.

The clearest way to manage these risks is to work through providers licensed for the exact activity in the exact jurisdiction, and to keep counterparty screening current for any cross-border corridor.