Tailored Compliance Solutions for Your Business
From AML/CFT frameworks to VARA, ADGM, DMCC and DIFC licensing support, we deliver personalized compliance services that help UAE businesses navigate complex regulatory requirements with confidence.
Trusted by leading partners
Compliance Solutions
Cutting-edge tools and services designed to simplify regulatory compliance for modern businesses.
UAE Crypto Licence Requirements
Exchange, broker-dealer, custody, advisory, lending, asset management, transfers or token issuance: whether you are setting up under VARA, in DMCC, ADGM or the DIFC, see what each licence requires and how we prepare your compliance framework.
Dubai: VARA & DMCC
Every virtual asset activity VARA licenses in Dubai, including DMCC and other free zones (outside the DIFC).
ADGM licences (Abu Dhabi)
Crypto and virtual asset permissions from the FSRA in Abu Dhabi Global Market.
DIFC, CMA (formerly SCA) & Central Bank
DFSA, CMA and CBUAE regimes for crypto, securities and stablecoins.
Web3 Compliance Expertise
Specialized compliance support for blockchain businesses, crypto traders, and decentralized projects in the UAE.
AML Compliance Audit for VASPs
Tailored AML audits for exchanges, stablecoin issuers & virtual asset service providers
- AML/CFT framework review & gap analysis
- Transaction monitoring & suspicious activity reporting
- KYC/CDD procedure assessment
- Sanctions screening & risk-based approach evaluation
Crypto Licensing Support
End-to-end virtual asset licensing from VARA, ADGM & CMA
- VARA Licensing (Dubai) — application prep & compliance
- ADGM Licensing (Abu Dhabi) — FSRA requirements & documentation
- CMA Licensing (formerly SCA) — federal virtual asset regulations
- Ongoing regulatory engagement & alignment
Smart Contract Compliance Review
Technical and compliance review of smart contracts
- Smart contract development support
- Review of contract logic and risks
- Compliance controls such as allow-lists and transfer restrictions
- DeFi and tokenized asset support
ICO & Token Offering Guidance
Advisory for compliant token offerings
- Structuring ICOs, IDOs, private sales
- Regulatory risk assessment
- Offering documentation frameworks
- Investor protection considerations
Token Sale Compliance
AML/CFT controls for token pre-sales and private rounds
- Investor KYC and AML onboarding
- Sanctions and restricted-jurisdiction screening
- Risk disclosures and safeguards
- Coordination with your legal counsel on SAFT terms
Crypto Compliance Advisory
Full regulatory alignment for crypto businesses
- Activity licensing assessment
- Advisory vs promotion classification
- UAE regulatory requirements guidance
- Compliant operating model structuring
Comprehensive Compliance Support
Our experienced compliance team provides end-to-end support for your business's regulatory and AML/CFT obligations in the UAE.
Compliance Documentation
Regulator-ready policies, procedures and manuals for your business
- AML/CFT policies and procedures
- Business-wide and customer risk assessments
- KYC, CDD, EDD and sanctions screening procedures
- Compliance manuals for licence applications
Regulatory Compliance
Alignment with UAE regulatory requirements
- VARA, ADGM, DFSA, CMA and CBUAE requirements
- Sector-specific AML/CFT obligations
- Internal compliance policies and controls
- Risk assessment and regulatory readiness
Whitepaper Compliance Review
Compliance review of blockchain and crypto whitepapers
- Clear articulation of project scope
- Token utility and governance models
- Risk disclosures and regulatory positioning
- Regulatory alignment and best practices
Meet the Team
Our experienced team combines expertise in regulation, compliance, and finance to deliver exceptional results.
Gilson Costa
CEO
With a background in investment banking at J.P. Morgan and Citibank, Gilson leads VAF with purpose and big-picture thinking. He's passionate about building meaningful partnerships and shaping a culture where people and ideas can thrive.
Manisha Mehta
Head of KYC
With over a decade of experience in the UK, Manisha transitioned from legal practice into senior KYC and compliance roles at J.P. Morgan and Shard Capital. At VAF, she leads KYC with sharp insight and proven expertise.
Ramal Bilal
Compliance Manager
With more than 6 years of experience in global compliance, Ramal brings cross-border expertise from roles at Lex Bridge and Shufti Pro. At VAF, she ensures alignment with both local and international regulatory frameworks.
Abbiyha Rafi
Regulatory Affairs Associate
Abbiyha Rafi is a legal and compliance professional with a law degree, experienced in legal drafting, contract development, and regulatory advisory. She specializes in AML/CFT frameworks, client due diligence, and risk assessments, and has hands-on experience in onboarding, compliance monitoring, and case management.
Akshay Thamban
Operations Analyst
With 7+ years of experience in the crypto industry, Akshay brings deep expertise in RWA tokenization and digital asset operations. A Chainalysis Certified Investigator, he combines analytical precision with blockchain knowledge to optimize processes and support VAF's delivery of cutting-edge compliance services.
Farzaad Gaibie
Head of Switzerland Operations
With a background in trust management, succession planning, and international business, Farzaad brings decades of experience advising HNWIs. At VAF, he leads our Swiss branch, driving growth and smart compliance for cross-border clients.
Pedro Cardoso
Business Development
With a background in hospitality and sales, Pedro brings a people-first approach to client relationships. At VAF, he represents our mission with clarity, warmth, and a commitment to building trust and long-term partnerships across industries, supporting clients with tailored solutions and day-to-day collaboration.
Latest from our compliance team
Frequently Asked Questions
Which regulator do I need for a crypto licence in the UAE?
+
It depends on where you operate. VARA regulates virtual assets in Dubai, including DMCC and other free zones (excluding the DIFC). The DFSA regulates the DIFC. The FSRA regulates ADGM in Abu Dhabi. The Capital Market Authority (CMA, formerly the SCA) covers virtual assets for investment at federal level outside Dubai. The Central Bank of the UAE regulates payment tokens (stablecoins) onshore, while ADGM's FSRA and the DFSA have their own stablecoin regimes.
What does a VASP need besides a licence?
+
Regulators expect a working AML/CFT framework: risk assessments, KYC and due diligence, transaction monitoring (KYT), sanctions screening, Travel Rule compliance, suspicious transaction reporting via goAML, a qualified MLRO and regular training and audits.
Do I need a licence to trade crypto with my own money in Dubai?
+
Not a full licence. Proprietary trading with your own funds needs a VARA No Objection Certificate, usually applied for through your commercial licensor, and VARA registration is mandatory before, or within three working days of, investing USD 250 million or more in any rolling 30-day period. Trading for anyone else requires a VARA licence.
How long does a crypto licence take in the UAE?
+
It depends on the regulator, the activities and how complete the application is. Most applicants should plan for several months. Having a complete compliance framework ready before applying is the most effective way to avoid delays.
How does VAF Global help with licensing?
+
We map your business to the right regulator and activities, prepare the compliance framework the regulator expects (AML/CFT policies, risk assessments, KYC, sanctions and Travel Rule procedures), and support you through the application and after launch with outsourced MLRO and KYT monitoring.
Can VAF Global act as our outsourced MLRO?
+
Yes, where your regulator permits it. We act as outsourced MLRO for VASPs and DNFBPs and support your in-house Compliance Officer. Some regulators require the Compliance Officer to be your own employee; under VARA, for example, it must be a full-time, UAE-resident employee.
What is KYT and do I need it?
+
Know Your Transaction (KYT) is the monitoring of blockchain transactions and wallet addresses for risk such as sanctions exposure, scams or illicit funds. UAE regulators expect VASPs to monitor transactions; our KYT tool at wallet.vaf.global helps you do this.
Let's Discuss Your Compliance Needs
Whether you need AML/CFT policies, licensing support, or blockchain compliance advisory, our team is ready to help your business succeed in the UAE market.
info@vaf.global
Phone
+971 50 906 7550
Location
Uptown Tower, Dubai
Send us a message
Tell us about your business and our compliance team will get back to you.