Folio 05 Insights Article

VASP/CASP Crypto Assets

Buying a VARA-licensed company: no licence-transfer shortcut

There is no licence-transfer mechanism at VARA. Under the Virtual Assets and Related Activities Regulations 2023, an entity must obtain and maintain its own licence for each VA Activity it carries out, so what changes hands in an acquisition is never a licence - it is a licensed company, together with its two UAE-resident Responsible Individuals, its paid-up capital held in a UAE trust account with VARA as beneficiary, and whatever operational conditions the licence carries. VARA has published no standalone change-of-control regime; the anchors are the licence's own conditions and the licensing chapter of the Regulations (Regulation IV.A, including IV.A.3), so treat prior engagement with VARA as the working assumption for any change of ownership - and note that no adviser can guarantee what VARA will decide. The full perimeter, fees and capital live on our Dubai VARA licence overview; everything here is stated as of July 2026.

What is actually for sale in this market

When we reviewed what ranked for these searches in July 2026, nothing listed an actual VARA-licensed entity for acquisition - only licensing-services pages dressed as inventory. The scarcity is structural. VARA's public register returned 51 entries across its Licensed and In-Principle Approval categories on 10 July 2026: a small population, and the licensed names on it - Binance FZE, OKX Middle East Fintech, Foris DAX Middle East and their peers - are operating businesses, not shelf companies waiting for an exit.

We will say plainly what that search page will not: SKY7 does not hold a VARA-licensed company in stock either. What we run is a buy-side mandate against the real register population, with the diligence below as the working checklist. The perimeter itself - VARA regulates virtual-asset activity across mainland Dubai and its free zones, excluding the DIFC - is mapped on our Dubai (VARA) jurisdiction overview.

What a VARA licence attaches to

A VASP Licence is issued to a specific Dubai entity for named VA Activities from Schedule 1 of the Regulations - eight of them, from Advisory Services at the light end to Exchange Services and Category 1 VA Issuance at the heavy end - and, in the official wording, it "may be subject to operational conditions". Three attachments make the licence inseparable from the company that holds it.

People. Every VASP must maintain two full-time Responsible Individuals of sufficient seniority who are UAE residents or UAE passport holders, approved by VARA as fit and proper. The Company Rulebook requires prior VARA approval before any change of Responsible Individual - so if the founders' RIs exit with the founders, the replacements need VARA's sign-off first, not afterwards.

Capital. Paid-up capital under Part VI.B of the Company Rulebook - from AED 100,000 for Advisory Services to AED 1,500,000 for Exchange Services run without a VARA-licensed custodian, or a percentage of fixed annual overheads where that is higher - must sit in a trust account with a UAE-licensed bank naming VARA as beneficiary, or in a surety bond on the same terms. It stays with the entity, and a buyer verifies it is funded and unencumbered.

Federal footprint. Under the SCA-VARA agreement of 5 September 2024, a VARA licence carries default registration with the federal SCA to serve the wider UAE. That is a precise mechanic, not a UAE-wide licence - and it reaches into neither the DIFC nor ADGM.

No published change-of-control regime - and what that means for a deal

The neighbouring UAE perimeters publish their acquisition mechanics. In ADGM, FSMR section 105 and GEN 8.8 make anyone at 10% or more a controller needing prior written approval, with fresh approvals at 20, 30 and 50% - we walk the whole process in our ADGM change-in-control guide. In the DIFC, DFSA GEN 11.8 runs a comparable prior-approval regime on a 90-day statutory window. VARA, as of July 2026, has published no equivalent chapter.

Do not read that absence as permission. The licence was granted to an entity whose beneficial owners and senior management were assessed during licensing, on conditions VARA set - and an acquisition replaces much of what was assessed. The defensible posture is to treat VARA engagement as a pre-completion step under the licence's conditions and the licensing chapter of the Regulations. The transaction documents should make completion conditional on whatever written confirmation or approval VARA says applies after reviewing the proposed owner. Because VARA publishes no outcome taxonomy or processing clock, the heads of terms should predict neither. "Licence transfer" has no place in the heads of terms; what is actually being negotiated is regulatory acceptance of a new owner.

Register status vs what it permits (as of 10 July 2026)

Status What it is What it permits
Status AAN What it is Application Acknowledgement Notice, issued once the Initial Disclosure Questionnaire has been screened by the commercial licensing authority and passed to VARA What it permits Nothing client-facing - it acknowledges an eligible application, no more
Status ATI What it is Stage 1 Approval to Incorporate, granted against roughly half the application fee so the applicant can complete incorporation and operational setup What it permits None - official wording: "At this point, the firm is not permitted to carry on Virtual Asset activities"
Status IPA What it is In-Principle Approval, "a conditional step in the licensing process", listed separately from Licensed VASPs on the public register What it permits None - holders are "strictly prohibited from initiating operations, conducting any virtual asset activities, or servicing clients"
Status VASP Licence What it is The operating licence for the VA Activities named on it, which "may be subject to operational conditions" What it permits Operations within the licensed activities, on the licence's conditions and against annual supervision fees

What a buyer actually diligences

  • The register entry, not the seller's deck

    Pull the target's entry on VARA's public register: exact legal name, reference number, category - Licensed VASP or IPA holder - and the named VA Activities. Paper from the 2022-23 MVP programme era belongs to a superseded predecessor regime; only the current register entry counts.

  • IPA is approval-stage paper

    An IPA-stage target may legally run no operations, conduct no virtual-asset activity and service no clients until the full VASP Licence is granted. It can be a head start worth paying for - at approval-stage value, never at licensed-business value.

  • Conditions and activity names

    Read the licence itself and every operational condition on it, and map the activities to the current Schedule 1. "VA Transfer and Settlement Services" replaced "Payments and Remittances Services"; a seller document still using the retired name is describing a stale position.

  • The Responsible Individuals plan

    Identify both RIs and establish whether they stay. If not, the replacements - full-time, UAE-resident or UAE passport holders, fit and proper - need prior VARA approval before the change. No RI plan, no closing plan.

  • Capital and fee status

    Confirm the Part VI.B paid-up capital sits intact in the trust account or surety naming VARA as beneficiary, and that supervision fees are current: AED 200,000 a year per heavier VA Activity under "Schedule 2 - Supervision and Authorisation Fees", AED 80,000 for the two lighter ones, with risk-based uplifts possible.

  • Compliance with the current rulebooks

    Version 2.0 of the activity rulebooks (issued 19 May 2025) required full compliance by 19 June 2025; UAE Travel Rule requirements took effect on 24 February 2026 and the AML/CFT implementation circular on 4 March 2026. VARA publishes notices of fines - the compliance record is part of what you are buying.

The honest bridge: when the calendar will not wait

VARA publishes no processing timeline - not for a fresh application, and not for the engagement an acquisition needs. Consultancy estimates for fresh licensing run from roughly four months to a year; VARA itself ties processing only to the completeness of submissions, so treat every number you are quoted as market colour. And an acquisition does not take the regulator off the critical path - it changes the questions.

If the calendar is the binding constraint, the one alternative in our own inventory sits in a different perimeter, and we say so plainly: a ready-made ADGM Category 3A licensed entity, available now. It holds an FSRA Financial Services Permission in Abu Dhabi Global Market - investment business under a published prudential framework - not a VARA licence, and it authorises nothing in VARA's Dubai perimeter. No UAE perimeter passports into another: VARA covers Dubai outside the DIFC, the DFSA acts in or from the DIFC only, the FSRA acts in ADGM only, the SCA holds the federal virtual-asset layer, and mainland banking and payments sit with the CBUAE. What ADGM does offer is a published change-in-control regime, so a buyer knows the thresholds and the disclosure list before starting. Market commentary tends to map retail-facing crypto to VARA and institutional models to ADGM or the DIFC - a fit question we test on each mandate rather than assume.

51
entries on VARA's public register, Licensed and IPA combined, 10 July 2026
2
full-time UAE-resident Responsible Individuals every VASP must maintain
AED 200,000
annual supervision fee per heavier VA Activity under Schedule 2
0
published VARA change-of-control regimes or processing timelines, as of July 2026

FAQ

Frequently asked questions

01 Can a VARA licence be transferred to a new owner?

No. The Regulations require each entity to obtain and maintain its own licence for each VA Activity, and no transfer mechanism exists. A buyer acquires the licensed company, and the change of ownership is a matter for engagement with VARA under the licence's conditions - which can end in comfort, conditions or refusal. No adviser can promise the outcome.

02 How do I verify a seller's claims about a VARA licence?

On VARA's public register at vara.ae, which lists Licensed VASPs separately from IPA holders, with reference numbers and named activities; it returned 51 entries across both categories on 10 July 2026. Cross-check the activity names against the current Schedule 1 and ask for the licence conditions themselves.

03 Can we replace the founders' Responsible Individuals after closing?

Only with prior VARA approval. The Company Rulebook requires approval before any change of Responsible Individual, and each replacement must be a full-time employee, a UAE resident or UAE passport holder, and fit and proper. Sequence the people plan before signing, not after completion.

Tell us what you need

Test the acquisition before you commit to it

Tell us what you need to operate in the UAE - the activity, the clients, the calendar - and we will scope what VARA engagement would involve for a target you have in view, run the register diligence, and put the ready-made ADGM alternative beside it so the comparison is honest. Pricing on request.

Editorial note

Editorial disclaimer

Reviewed by Rashid Al Mansouri. Last reviewed: 10 July 2026. This article is general information only, not legal, regulatory, tax, investment or financial advice. Register counts, rulebook versions, fee schedules and the absence of a published change-of-control regime are stated as of July 2026 from official pages (vara.ae, rulebooks.vara.ae); VARA's framework moves through rulebook versions and circulars, so verify the current position on those pages before relying on any dated claim.