What controls has the UAE put in place for virtual asset service providers?
The UAE has implemented regulatory frameworks for VASPs through cabinet resolutions and supervisory authority mandates, with enhanced KYC and AML processes, stringent compliance with international sanctions, and robust information-sharing mechanisms built in collaboration with law enforcement agencies.
Those mechanisms include a systematic dashboard and unified portal for sharing information, developed for enforcement, joint investigations and supervisory actions. There is also a focus on investor protection through awareness programmes and on strengthening technology and cybersecurity infrastructure.
The NRA names the improvements it expects next: enhancing regulation and compliance to address emerging risks, strengthening KYC and AML procedures, fostering international cooperation to combat cross-border threats, and enforcing stringent data protection standards to safeguard customer information.
Legal Reference (source document and governing law):
· UAE Money Laundering and Terrorist Financing National Risk Assessment, 2nd NRA (2024)
· Federal Decree-Law No. 10 of 2025 on AML/CFT and Financing of Illegal Organisations
· Cabinet Resolution No. 134 of 2025, Executive Regulations
Scope note: VASP licensing was introduced through the 2021 amendment to the UAE AML/CFT law, which subjected VASPs to CDD and record-keeping obligations.
Further reading: AML compliance obligations for VASPs in the UAE
Related questions on amlfaqs.com:
· How many licensed virtual asset service providers were there in the UAE at the time of the NRA?
· What is the residual money laundering risk rating for the UAE virtual asset sector?
· What does the UAE NRA mean for a virtual asset service provider?