Crypto Licensing Last updated:

ADGM FSRA Crypto License in Abu Dhabi

Abu Dhabi licenses virtual-asset firms through the ADGM FSRA, the regulator of the Abu Dhabi Global Market free zone, which published the world’s first comprehensive crypto framework in 2018. An FSRA crypto authorisation is a Financial Services Permission granted under the Financial Services and Markets Regulations 2015 (FSMR), inside an English common-law jurisdiction with its own courts. It is built for professional and institutional clients, which is the clearest line between ADGM and Dubai’s retail-permissive VARA regime. Following the UAE’s removal from the FATF grey list on and the EU AML list in 2025, Abu Dhabi is among the most reputationally durable non-EU options for institutional crypto.

This guide covers the FSRA Financial Services Permission, the regulated activities it spans, base capital of USD 250,000–500,000 plus the EBCM, the Approval-in-Principle to FSP process, taxation, banking, FATF standing, and how the ADGM regime differs from VARA and the DFSA. For Dubai’s VARA framework, DFSA in DIFC, and the federal CBUAE payment-token regime, see the Dubai and UAE crypto-licensing guide. Jagelski & Partners coordinates ADGM applications end to end, with company formation, banking, and post-licensing compliance handled as one engagement.

ADGM FSRA Crypto Licence: Quick Overview
Licence TypeFinancial Services Permission (FSMR) with virtual-asset add-on permissions, granted by ADGM FSRA
RegulatorADGM FSRA (Financial Services Regulatory Authority of the Abu Dhabi Global Market)
Client BaseProfessional and institutional clients (retail offering tightly constrained; for retail, see Dubai / VARA)
Timeline6–18 months (Approval-in-Principle to Financial Services Permission)
Min. CapitalUSD 250,000–500,000 base + EBCM (PRU Category 3A/3B; higher for an MTF)
Total Year 1 CostUSD 1.1–3.0 million, activity-dependent (institutional premium)
Corporate Tax9% federal corporate tax on profits above AED 375,000; 0% Qualifying Free Zone Person rate on Qualifying Income (conditions apply; VA activities not auto-qualifying)
Local PresenceUAE-resident SEO, MLRO, and Compliance Officer; real office in ADGM; board oversight with an independent director expected
Legal SystemEnglish common law, with ADGM’s own independent courts and arbitration centre
EU PassportingNo, requires separate EU CASP authorisation or narrow reverse solicitation exemption (MiCA Art. 61)
FATF StatusUAE off all FATF lists; removed from grey list and EU AML high-risk list in 2025
Best ForInstitutional operators, custodians, broker-dealers, and asset managers serving professional clients who value English common law and a credible regulator brand

Why Choose Abu Dhabi (ADGM) for Crypto Licensing?

The Abu Dhabi Global Market is the institutional end of the UAE’s crypto market. Its regulator, the FSRA, published the world’s first comprehensive virtual-asset framework in 2018 and now sits inside an English common-law jurisdiction with its own courts, a Financial Services Permission regime modelled on mature international standards, and a professional-client orientation that sets it apart from Dubai’s retail-permissive VARA. FSRA regulated over 20 virtual-asset firms as of , and in 2025 received 47 virtual-asset applications and approved 31, with roughly 40% of applicants headquartered outside the UAE.[1][2]

In short: ADGM is the right choice for institutional operators, custodians, broker-dealers, and asset managers serving professional clients who value English common law and a credible regulator brand. If your core market is retail, or you want the broadest single-licence activity reach, Dubai’s VARA is usually the better fit; see the Dubai and UAE guide. No ADGM licence carries EU passporting rights.

A Distinct Institutional Regime, Not a VARA Substitute

The UAE has multiple crypto regulators, and the common error is treating them as interchangeable. ADGM FSRA runs a Financial Services Permission regime under the Financial Services and Markets Regulations 2015 (FSMR) for the Abu Dhabi Global Market free zone, oriented to professional and institutional clients.[3] Dubai’s VARA runs a separate, retail-permissive regime across seven activity categories with a public register of around 49 fully-licensed VASPs.[4] The DFSA regulates DIFC, and the federal CBUAE regulates payment tokens.

This matters because the regimes are not portable. An FSRA authorisation is not recognised by VARA or the DFSA, the rulebooks and terminology differ, and substance must be built inside ADGM specifically. The full VARA, DFSA, and CBUAE picture is mapped in the Dubai and UAE crypto-licensing guide, and Jagelski & Partners scopes the right regulator before any entity is formed.

English Common Law and a Credible Regulator Brand

ADGM operates its own independent English common-law courts, applying English law directly, with their own judges and a dedicated arbitration centre. For institutional operators whose investors, counterparties, and custodial clients require a familiar legal framework, this is frequently decisive: contracts, security interests, and dispute resolution follow English common-law principles rather than a civil-law transposition. FSRA’s status as the first-mover crypto regulator and its membership of the wider Abu Dhabi Global Market international-financial-centre brand carry weight with banks, auditors, and prime brokers that a younger regime cannot match, a reach reflected in the roughly 40% of its virtual-asset applicants headquartered outside the UAE.[2]

Tax Position Is Exceptional Within a Tightening International Framework

The UAE corporate tax rate of 9% on profits above AED 375,000, introduced by Federal Decree-Law No. 47 of 2022 for tax periods starting on or after ,[7] remains among the lowest in any jurisdiction with a credible crypto regulatory framework. Qualifying Free Zone Persons in ADGM retain a 0% rate on Qualifying Income subject to substance, de minimis, transfer-pricing, and audited-accounts conditions, though virtual-asset activities are not on the published Qualifying Activities list and the position must be advised case-by-case.[8] The UAE Federal Tax Authority’s Public Clarification VATP040 confirmed that transfer, conversion, and custody of virtual assets are VAT-exempt financial services retroactively from .[9] Compare with Cyprus, where the headline corporate tax rate is 15% from ; or Hong Kong, where the standard rate is 16.5%.

The real constraint is the DMTT of 15%, in force for fiscal years starting on or after under Cabinet Decision No. 142 of 2024. It applies only to multinational groups with consolidated revenue above EUR 750 million, leaving standalone ADGM-domiciled operators below the threshold unaffected.[10]

Reputational Uplift from FATF and EU Delisting Is Now Banked

The UAE’s removal from the FATF grey list and the EU AML high-risk third-country list means EU-based correspondent banks and counterparties no longer apply blanket enhanced due diligence to UAE counterparties, which has materially reduced onboarding friction and settlement timelines for ADGM-licensed firms. The full delisting chronology and Recommendation scoring are set out under International Standing below.

Strategic Geography and Institutional Depth

Abu Dhabi sits at the intersection of European business hours and Asian markets, with daily flight connections to London, Frankfurt, Singapore, and Hong Kong, and a deep professional-services ecosystem of tier-1 law firms, Big-Four accounting practices, and specialist compliance providers concentrated within ADGM and the wider capital. Combined with the dispute resolution its English common-law courts provide, comparable to London, Singapore, or Hong Kong, this timezone reach and professional depth is the institutional case for Abu Dhabi.

Regulatory Framework

The ADGM crypto framework rests on the Financial Services and Markets Regulations 2015 (FSMR), the Abu Dhabi Global Market’s primary financial-services statute, supplemented by FSRA’s rulebooks and its Guidance on the Regulation of Virtual Asset Activities. FSRA authorises virtual-asset activity as Regulated Activities under FSMR with virtual-asset add-on permissions, granted in the form of a Financial Services Permission. ADGM is a federal financial free zone established under Federal Law No. 8 of 2004, which places it outside both Dubai’s VARA and the federal SCA perimeter.[3]

In short: One regulator (FSRA), one statute (FSMR), one authorisation (the Financial Services Permission), inside an English common-law free zone for professional clients. This is structurally distinct from VARA’s seven-category retail regime in Dubai and the DFSA’s Crypto Token endorsement in DIFC.

Definition: Financial Services Permission (ADGM FSRA)

A Financial Services Permission (FSP) is the authorisation FSRA grants to an Authorised Person to carry on one or more Regulated Activities in or from the Abu Dhabi Global Market under FSMR. For crypto firms, the FSP carries virtual-asset add-on permissions covering activities such as Dealing in Investments as Principal or Agent, Arranging Deals, Managing Assets, Providing Custody, and Operating a Multilateral Trading Facility (MTF) for Accepted Virtual Assets.[3] The FSP is the operating licence; it is preceded by an Approval-in-Principle and is granted only after the firm satisfies operational-readiness conditions. Virtual-asset trading, conversion, and custody services are VAT-exempt financial services under UAE Federal Tax Authority Public Clarification VATP040.[9]

Regulatory History

ADGM was the first-mover. FSRA published the world’s first comprehensive Operating a Crypto Asset Business framework in 2018, years ahead of the federal regime and Dubai’s VARA.[3] The framework has been refined through successive consultations, with the latest substantive Digital Asset Updates implemented on following Consultation Paper No. 11 of 2024.[5] The June 2025 amendments moved from a closed Accepted Virtual Asset list to a self-assessed notification regime against pre-defined FSRA criteria, and enshrined the existing prohibition on privacy tokens and algorithmic stablecoins within ADGM regulated financial services.[5] FSRA subsequently consulted on a Virtual Asset staking framework via Consultation Paper No. 10 of 2025.[6]

The other UAE regulators sit in separate perimeters. Dubai’s VARA regulates the Emirate of Dubai (excluding DIFC) under Dubai Law No. 4 of 2022 with seven activity categories, the federal SCA delegates mainland authority, the DFSA regulates DIFC under its Crypto Token regime (overhauled ), and the CBUAE regulates payment tokens under the Payment Token Services Regulation. Those regimes, and how they interact, are covered in detail in the Dubai and UAE crypto-licensing guide.[4]

How ADGM Differs from VARA and the DFSA

  • Client base. ADGM is built around professional and institutional clients; VARA is retail-permissive.
  • Authorisation shape. ADGM grants one Financial Services Permission with virtual-asset add-on permissions under FSMR; VARA issues activity-specific licences across seven categories, each with its own rulebook.
  • Legal system. ADGM (like DIFC) applies English common law through its own independent courts; VARA operates within the wider Dubai and federal legal framework.
  • Asset perimeter. FSRA expressly prohibits privacy tokens and algorithmic stablecoins and operates a self-assessed Accepted Virtual Asset notification regime; VARA runs its own activity rulebooks and an Asset-Referenced Token issuance regime.
  • Versus the DFSA. Both ADGM and the DFSA are institutional, common-law free-zone regulators, but the DFSA layers a Crypto Token endorsement on top of standard DFSA authorisation in DIFC, whereas FSRA grants the virtual-asset permission within the FSP itself in ADGM.

Recent Regulatory Developments

  • . FSRA reports over 20 regulated virtual-asset firms and, for 2025, 47 virtual-asset applications received and 31 approved, around 40% from outside the UAE.[1][2]
  • . FSRA consultation on a Virtual Asset staking framework (Consultation Paper No. 10 of 2025) closes.[6]
  • 2025. The UAE is removed from the EU AML high-risk third-country list via Commission Delegated Regulation (EU) 2025/1184, aligning the EU list with FATF.[12]
  • . FSRA Digital Asset Updates take effect: the closed Accepted Virtual Asset list is replaced by a self-assessed notification regime, and the prohibition on privacy tokens and algorithmic stablecoins is enshrined (Consultation Paper No. 11 of 2024).[5]
  • . FATF removes the UAE from “Jurisdictions under Increased Monitoring”.[11]
  • 2018. FSRA publishes the world’s first comprehensive Operating a Crypto Asset Business framework.[3]

Regulatory Sandbox

ADGM operates the RegLab, a regulatory sandbox running in themed cohorts that lets firms test a novel product under FSRA oversight before committing to full authorisation. Participants operate within a restricted scope, customer caps, and transaction limits for a defined testing period, typically up to two years, before transitioning to a full Financial Services Permission.[3] The RegLab is a testing environment, not a market-entry shortcut: scaling commercially requires a full FSP, and FSRA assesses sandbox participants against the same fit-and-proper and substance standards before any transition. Experienced applicants use the RegLab to de-risk a genuinely novel product, not to defer the licensing decision.

Licence Types and Activities Covered

FSRA authorises virtual-asset activity through standard FSMR Regulated Activities carrying virtual-asset add-on permissions, all consolidated into a single Financial Services Permission. There is no separate “crypto licence” product: the firm is an Authorised Person whose FSP scope names the Regulated Activities it may perform in relation to Accepted Virtual Assets. Capital follows the FSRA Prudential (PRU) module’s Category 1–5 system, calibrated to activity risk.

FSRA Virtual-Asset Regulated Activities

Following the Digital Asset Updates, the virtual-asset Regulated Activities an FSP can cover include:[5]

  • Dealing in Investments as Principal or as Agent. Buying, selling, or subscribing for Accepted Virtual Assets on the firm’s own account or on behalf of clients (the broker-dealer perimeter).
  • Arranging Deals in Investments. Bringing about, or arranging, transactions in Accepted Virtual Assets for clients.
  • Managing Assets. Discretionary portfolio management of Accepted Virtual Assets for professional clients.
  • Advising on Investments. Providing investment advice on Accepted Virtual Assets.
  • Providing Custody. Safeguarding and administering Accepted Virtual Assets, including private-key control, subject to FSRA custody and wallet-management rules.
  • Operating a Multilateral Trading Facility (MTF). Running a venue that brings together multiple buying and selling interests in Accepted Virtual Assets, the highest-prudential-requirement activity.
  • Operating a Clearing House. Providing clearing or settlement infrastructure for virtual-asset transactions.

Application and annual supervisory fees are structured as add-on amounts on top of the base Regulated Activity fees. Capital requirements scale with the activity: virtual-asset broker-dealers and arrangers typically sit in PRU Category 3A or 3B, while an MTF operator faces higher requirements expressed as multiple months of operational expenditure (see the Requirements and Costs sections below).

Accepted Virtual Assets and Prohibited Tokens

The June 2025 amendments replaced FSRA’s previous closed Accepted Virtual Asset list with a self-assessed notification regime: a firm assesses each virtual asset it intends to deal with against pre-defined FSRA criteria and notifies the regulator, rather than waiting for the asset to be added to a prescribed list.[5] The same amendments enshrined an express prohibition: privacy tokens and algorithmic stablecoins (and any asset using similar technology) may not be used within ADGM regulated financial services.[5] FSRA assesses Accepted Virtual Assets against criteria covering maturity, security, traceability, and exchange connectivity, and a firm bears responsibility for its own assessment.

Tokenised Securities and RWA

An FSRA virtual-asset permission does not settle what a token legally is. In ADGM, a token with the features of a security is a “Digital Security” regulated under FSMR, with FSRA guidance live since 2019, and sits separately from the Accepted Virtual Asset framework rather than inside it. A virtual-asset permission does not turn a token into a security, and it does not exempt a token that already is one: a security token is dealt with under the FSMR securities regime, with its own conduct and prospectus obligations.

The same instrument is classified differently elsewhere in the UAE (an Investment Token in DIFC under the DFSA, a regulated security federally under the SCA), which is covered in the Dubai and UAE guide. Jagelski & Partners scopes the regulator and the instrument together before any application, and a fund vehicle is routed through fund licensing where the structure is a fund rather than a standalone security token.

What Does NOT Require an FSRA Permission

  • Software development and infrastructure provision where the developer does not exercise control over client assets or act as a counterparty.
  • Mining of virtual assets where the miner does not provide brokerage, exchange, custody, or other Regulated Activity.
  • Personal use of virtual assets by individuals not carrying on a business activity in or from ADGM.
  • Activity wholly conducted from outside the UAE, by entities not established in ADGM, and not carried on in or from the Abu Dhabi Global Market.
  • DAOs, DeFi protocols, and DEXs are not subject to a dedicated bespoke framework. However, any activity that meets the definition of an FSMR Regulated Activity in relation to a virtual asset requires an FSP regardless of decentralisation framing. The common mistake is assuming a foundation structure or token vesting schedule removes the licensing trigger when the underlying activity is in scope.

Requirements

An FSRA Financial Services Permission requires an ADGM-incorporated entity, UAE-resident senior officers (Senior Executive Officer, MLRO, Compliance Officer), a real office inside ADGM, base capital plus the EBCM evidenced before grant, a comprehensive policy framework (AML/CFT, technology, conduct), and a pre-authorisation fit-and-proper assessment of all controllers, directors, and approved persons. The regime is built for professional and institutional clients.

In short: The two make-or-break elements are (a) genuinely UAE-resident, industry-qualified senior officers physically located in ADGM, and (b) base capital plus the EBCM evidenced before the FSP is granted. Both are non-negotiable, and FSRA tests substance at supervisory visits.
RequirementADGM FSRA
EntityADGM-incorporated entity (federal financial free zone, English common law)
Min. directorsBoard with composition rules by activity; an independent director is expected, especially for Custody and MTF
Foreign ownership100% (ADGM free zone)
Senior Executive Officer (SEO)Required, UAE-resident, full-time
MLRORequired, UAE-resident, full-time, industry-qualified
Compliance OfficerRequired, UAE-resident (may be combined or separate depending on scale and activity)
Physical officeReal office in ADGM, lease before Approval-in-Principle conditions are cleared
Base capitalUSD 250,000–500,000 base (PRU Category 3A/3B); higher for an MTF
Prudential minimumHigher of base capital, the EBCM (broadly 13 weeks of audited expenditure), and Risk-Based Capital
Capital deposit formHeld by the authorised entity; evidenced to FSRA before grant, not deployable as operating cash
Professional indemnity insuranceRequired, scaled to activity scope and AUM/AUC
Reserve / client-asset protection (Custody, MTF)Per FSRA custody and client-asset rules, with independent reserve / client-asset audit
AML/CFT frameworkPer FSRA AML Rulebook + Federal AML law (Federal Decree-Law No. 20 of 2018)
Travel RuleApplies to virtual-asset transfers with no de minimis threshold
Wind-down planMandatory

Fit-and-Proper Assessment

All Controllers (10% or more shareholding), directors, the SEO, the MLRO, and the Compliance Officer require FSRA pre-approval. The fit-and-proper assessment covers integrity (criminal record, regulatory history, civil litigation), competence (qualifications, experience in regulated financial services or virtual-asset activity), and financial soundness (personal credit history, bankruptcy record). An approval from another UAE regulator (VARA or the DFSA) is not automatically recognised by FSRA; the assessment is regulator-specific. Experienced applicants begin the fit-and-proper process 8 to 12 weeks before the formal application, because rectifying gaps after submission delays the timeline materially. The common mistake is appointing an MLRO on cost rather than qualification: FSRA specifically tests whether the MLRO has the seniority and industry knowledge to challenge the business, and rejects candidates who do not.

Local Presence and Substance

ADGM substance operates at two layers. At the regulator layer, FSRA requires a real office inside the Abu Dhabi Global Market with physical seating capacity for the licensed activity’s headcount, a signed lease, named senior officers genuinely resident in the UAE, and demonstrable operating activity (board meetings held in-country, key decisions taken locally, books and records held in ADGM). At the tax layer, QFZP status under Cabinet Decision No. 55 of 2023 requires adequate substance, qualifying-income predominance, transfer-pricing compliance, audited accounts, and continuous monitoring against the AED 5 million / 5% de minimis test.[8] In practice, the regulator-level substance bar is easier to clear than the QFZP tax bar; an operator that passes authorisation but fails QFZP attracts the 9% federal rate on all profits rather than the 0% Free Zone rate on Qualifying Income.

AML/CFT and Travel Rule

Federal Decree-Law No. 20 of 2018 (as amended) and Cabinet Decision No. 10 of 2019 govern the UAE’s AML/CFT regime, supplemented by FSRA’s AML Rulebook for ADGM Authorised Persons. FSRA applies the FATF Travel Rule to virtual-asset transfers with no de minimis threshold, and expects IVMS101 as the data model for originator and beneficiary information exchange. Sanctions screening must cover the UN Consolidated list, the UAE Local Terrorist List, and OFAC SDN. Suspicious-activity reporting is filed via the goAML platform operated by the UAE Financial Intelligence Unit. Privacy tokens are prohibited within ADGM regulated activity, which removes an entire category of higher-risk transfer from the AML perimeter rather than attempting to monitor it.

Application Process (AIP to FSP)

FSRA authorisation follows a structured two-gate process: pre-application engagement, then a formal application that leads to an Approval-in-Principle (AIP), then operational readiness, then the Financial Services Permission (FSP) grant. The AIP is the regulator’s conditional sign-off; the FSP is the operating licence. Pre-application engagement is available and used by every serious applicant.

In short: Most applicants underestimate the operational-readiness phase. Receiving the AIP is not the licence: several months of ADGM office buildout, senior-officer onboarding, systems testing, and policy finalisation still stand between AIP and the FSP.

All applications, supporting documents, and FSRA correspondence are in English, and ADGM applies English common law directly, which removes a translation and legal-transposition layer that civil-law jurisdictions impose. Forming the ADGM entity is the first step; it is covered in full on the Abu Dhabi (ADGM) company formation page.

Stage 1 4–8 weeks

ADGM Entity Formation and Pre-Application Planning

Incorporate the ADGM entity. Confirm the Regulated Activities the FSP will cover and the corresponding PRU capital category. Engage tier-1 legal and compliance advisers. Begin senior-officer recruitment (SEO, MLRO, Compliance Officer). See Abu Dhabi (ADGM) company formation for entity-setup detail.

Stage 2 4–8 weeks

FSRA Pre-Engagement

Hold informal pre-application meetings with FSRA. Confirm activity classification, Accepted Virtual Asset notifications, and any threshold or perimeter issues. Agree the proposed regulatory business model with the regulator before formal filing.

Stage 3 8–16 weeks

Full Application Preparation

Compile the Regulatory Business Plan, three-year financial projections, AML/CFT policy framework, technology and cybersecurity governance documentation, fit-and-proper packs for all approved persons and Controllers, board governance documentation, outsourcing register, wind-down plan, and insurance attestations to the FSRA standard.

Stage 4 12–24 weeks

Formal Submission and FSRA Review

FSRA’s authorisation team reviews the application. Multiple rounds of questions and clarifications are typical, alongside senior-officer interviews. The compliance documentation phase is where most timelines slip; Jagelski & Partners’ compliance team prepares the documentation pack to FSRA’s expectation in parallel with application drafting, which compresses Stages 3 and 4 by 4 to 8 weeks.

Stage 5 End of Stage 4

Approval-in-Principle (AIP)

FSRA issues the AIP, naming the operational-readiness conditions to satisfy before the FSP is granted. The AIP is not a licence and does not authorise live virtual-asset activity.

Stage 6 12–24 weeks

Operational Readiness

ADGM office fit-out, technology deployment and penetration testing, senior-officer onboarding, AML/CFT and reporting systems operational, banking arrangements in place, professional indemnity and crime/hot-wallet insurance bound, board appointed and first meeting minuted, base capital evidenced, books and records system live. FSRA verifies operational readiness before grant.

Stage 7 1–2 weeks for grant; ongoing thereafter

FSP Grant and Post-Authorisation Supervision

Final fee paid, the Financial Services Permission issued. Day-one supervision begins: first regulatory returns, ongoing prudential and capital monitoring, and client-asset / reserve audits for Custody and MTF operators.

Required Documents

An FSRA application requires a document pack covering corporate structure, beneficial ownership, approved-person fit-and-proper, the Regulatory Business Plan and financials, comprehensive AML/CFT and technology-governance frameworks, capital evidence, and a signed ADGM office lease. Constitutional documents must be in ADGM form, reflecting the free zone’s English common-law company law.

DocumentADGM FSRA
Certificate of incorporation + articles (ADGM form)Required
Corporate structure chart with all entities to ultimate beneficial ownerRequired
Ultimate Beneficial Owner identification + source-of-funds attestationRequired for all 10%+ holders
Fit-and-proper questionnaire + CV for each director, SEO, MLRO, Compliance OfficerRequired
Regulatory Business Plan (operating model, governance, risk)Required
Three-year financial projections (P&L, balance sheet, cash flow)Required
Audited group financial statements (latest 2 years)Required if group exists
AML/CFT policy + Business Risk Assessment + KYC/CDD proceduresRequired
Technology and cybersecurity governance framework + pen-test evidenceRequired
Accepted Virtual Asset self-assessment / notification(s)Required for each VA dealt with
Outsourcing register + critical-third-party contractsRequired
Wind-down plan + business continuity / disaster recovery planRequired
Professional indemnity insurance + D&O + crime/hot-wallet attestationsRequired (binders pre-grant)
Signed ADGM office leaseRequired before FSP grant
Base capital evidence (PRU category)Required before grant
Board governance documentation (terms of reference, charters)Required
Compliance Manual + Regulatory Reporting Manual + Treasury ManualRequired

Professional indemnity insurance for virtual-asset activity in ADGM is typically priced between USD 25,000 and USD 150,000 per year depending on activity scope, AUM/AUC, and history; D&O scales by board size. Hot-wallet crime cover is the most expensive line: for custodians and MTF operators in 2026 it is regularly the largest single insurance cost.

Costs and Pricing

Year-1 all-in cost for an ADGM FSRA crypto authorisation runs approximately USD 1.1–3.0 million depending on activity tier, covering FSRA fees, base capital, ADGM entity formation, legal advisory, compliance and ICT documentation, senior-officer payroll, office, and insurance. This is an institutional premium, roughly 2–3 times a comparable EU MiCA build, and it buys English common law and a first-mover regulator brand. FSRA fees are published and refreshed periodically; capital figures are matrix-derived against the PRU framework.

FSRA Fees and Capital by Activity

ActivityPRU CategoryApplication FeeAnnual Supervision FeeBase Capital + Prudential Minimum
Advising / Arranging3C / 4Base fee + VA add-onBase + VA add-on (tiered)USD 250,000 base, higher of base / EBCM / RBC
Dealing in Investments (broker-dealer)3A / 3BBase fee + VA add-onBase + VA add-on (tiered)USD 250,000–500,000 base + EBCM
Managing Assets3CBase fee + VA add-onBase + VA add-on (tiered)USD 250,000 base + EBCM
Providing Custody3BBase fee + VA add-onBase + VA add-on (tiered)USD 500,000 base + EBCM (client-asset rules apply)
Operating a Multilateral Trading Facility (MTF)Higher tierBase fee + VA add-onBase + VA add-on (tiered)Multiple months of operational expenditure (higher than base)

FSRA application and annual supervisory fees are structured as add-ons on top of the base Regulated Activity fees and are payable in USD or AED equivalent. The prudential minimum is the higher of the base capital, the Expenditure-Based Capital Minimum (the EBCM, broadly 13 weeks of audited expenditure), and Risk-Based Capital. PRU category mapping is indicative; FSRA confirms the category for each application.

Total Cost Summary (Year 1)

Cost ItemFSP: Advising / ArrangingFSP: Broker-Dealer / CustodyFSP: MTF Operator
FSRA fees (application + Year 1 supervision)USD 50,000–100,000USD 80,000–150,000USD 120,000–250,000
Base capital (held, evidenced pre-grant)USD 250,000USD 250,000–500,000Multiple months of opex
ADGM entity formation (entity + setup)USD 15,000–30,000USD 15,000–30,000USD 20,000–40,000
Legal advisory (application drafting + FSRA engagement)USD 150,000–300,000USD 200,000–400,000USD 300,000–500,000
Compliance documentation (AML manual, risk assessment, sanctions, Travel Rule, ICT governance)USD 80,000–160,000USD 100,000–200,000USD 150,000–300,000
Technology / ICT documentation (cybersecurity, BCP/DR, pen testing)USD 60,000–120,000USD 100,000–200,000USD 150,000–300,000
Senior personnel (SEO + MLRO + Compliance, Year 1 salaries)USD 350,000–600,000USD 400,000–700,000USD 500,000–900,000
ADGM office lease + fit-out + utilitiesUSD 60,000–150,000USD 80,000–200,000USD 120,000–300,000
Insurance (PI + D&O + crime/hot-wallet)USD 60,000–150,000USD 80,000–250,000USD 120,000–350,000
Total Year 1USD 1.1–1.8mUSD 1.2–2.5mUSD 1.8–3.0m
Annual ongoing (Year 2+)USD 600k–1.1mUSD 700k–1.3mUSD 1.0–1.8m

The real constraint on cost is not the FSRA fees; it is senior-officer payroll and insurance, both non-negotiable and both scaling with activity scope. Cost optimisation comes from tightening the FSP activity scope at application, not from cutting on people or insurance, both of which FSRA inspects at supervisory visits.

Timeline

A realistic ADGM FSRA timeline runs 6 to 18 months from first FSRA engagement to a granted Financial Services Permission. The variance is driven by application quality, activity complexity (an MTF or Custody mandate takes longer than advising or arranging), and how fast the firm executes operational readiness after the Approval-in-Principle.

StageADGM FSRA DurationCumulative (mid-range)
ADGM entity formation + pre-application planning4–8 weeks6 weeks
FSRA pre-engagement (pre-AIP meetings)4–8 weeks12 weeks
Full application preparation8–16 weeks24 weeks
Formal review + Q&A rounds + officer interviews12–24 weeks40 weeks
Approval-in-Principle (AIP)Issued at end of reviewweek 40
Operational readiness (post-AIP)12–24 weeks56 weeks
Financial Services Permission granted1–2 weeks58 weeks
Total realistic (mid-range)6–18 monthsn/a

Advising and arranging mandates sit at the faster end; Custody and MTF operation sit at the slower end because of additional rulebook scope and prudential requirements. FSRA timelines lengthened modestly after the June 2025 amendments as the regulator processed a wave of applications (47 received in 2025, 31 approved).[1] The bottleneck is rarely FSRA’s substantive review; it is the operational-readiness phase after the AIP, where ADGM office fit-out, senior-officer onboarding, systems testing, and policy finalisation routinely add several months. The Q&A cycle adds 6 to 12 weeks per round and is best compressed by submitting an application that anticipates every reasonable supervisory question on first filing.

Taxation

The UAE is a low-tax jurisdiction, and an ADGM entity sits within the same federal regime: 9% corporate tax above an AED 375,000 threshold, with a 0% Qualifying Free Zone Person rate available to ADGM free-zone entities that meet the substance, de minimis, and audit conditions. Virtual-asset transfer, conversion, and custody services are VAT-exempt financial services retroactively from . No personal income tax; no withholding tax.

Tax TypeRateCrypto Application
Corporate Income Tax (federal)9% above AED 375,000; 0% belowApplies to all UAE entities. Threshold per tax period.[7]
Corporate Income Tax (Qualifying Free Zone Person)0% on Qualifying IncomeFree-zone VASPs meeting QFZP conditions retain 0% on Qualifying Income; non-qualifying income subject to 9%.[8]
Domestic Minimum Top-up Tax (Pillar Two)15%Multinational groups with consolidated revenue ≥ EUR 750 million, fiscal years from .[10]
VAT (standard)5%Standard rate, applies to most goods and services.
VAT on virtual-asset transfer, conversion, custody (no fee)0% (Exempt)Per UAE FTA Public Clarification VATP040, retroactively from .[9]
VAT on crypto-asset services charged for explicit fee5%Brokerage, management, custody services charged for an explicit fee or commission.
Withholding tax (dividends, interest, royalties)0%No WHT under federal law (except certain bank-related cases).
Personal Income Tax0%No personal income tax.
Capital Gains Tax0%No CGT for individuals; corporate gains taxed at 9% CIT rate.
Stamp DutyNoneNo federal stamp duty. As of .

Qualifying Free Zone Person (QFZP) Status

QFZP status under Cabinet Decision No. 55 of 2023 and Ministerial Decision No. 139 of 2023 (as subsequently updated) preserves the 0% corporate-tax rate for free-zone entities, including those in ADGM, on Qualifying Income, provided five conditions are continuously met: adequate substance in the free zone, Qualifying Income predominance, the de minimis test (non-qualifying income below AED 5 million or 5% of total revenue, whichever is lower), no election to mainland taxation, and arm’s-length transfer pricing with audited accounts.[8] Virtual-asset trading and custody activities are not on the published list of Qualifying Activities. ADGM firms serving non-UAE clients can typically structure to fall within transactions-with-other-free-zone-persons or foreign-source streams, but the technical position must be advised case-by-case; the Federal Tax Authority has not published a virtual-asset-specific Qualifying Activities clarification as of . The common mistake is assuming ADGM incorporation alone secures the 0% rate. It does not.

CRS / CARF Reporting

The UAE is a participating CRS jurisdiction. CARF implementation is on the UAE legislative pipeline but has not yet been enacted as of ; firms should expect reporting obligations from 2027, on the CRS basis. CRS reporting applies to financial accounts maintained for non-UAE residents, including accounts held by crypto businesses.

Pillar Two (Global Minimum Tax)

Cabinet Decision No. 142 of 2024 introduces a 15% DMTT for in-scope multinational groups with consolidated revenue at or above EUR 750 million in two of four preceding years, applying to fiscal years starting on or after .[10] The DMTT is closely aligned with the OECD GloBE Model Rules. Standalone ADGM crypto firms below the EUR 750 million threshold remain outside DMTT scope; for in-scope groups, the DMTT applies first against UAE-sourced profits before any foreign Income Inclusion Rule top-up.

Ongoing Compliance & Post-Registration

An FSRA Financial Services Permission is indefinite but generates continuous obligations: annual audited financials, regulatory returns, prudential and capital monitoring, AML/CFT operations, technology-resilience attestations, FSRA inspections, and ongoing fit-and-proper maintenance for approved persons. Annual ongoing compliance cost for a mid-size ADGM-authorised firm runs roughly USD 600,000 to USD 1.3 million depending on activity scope.

In short: The FSP is the start of compliance, not the end. Plan to spend 25 to 35% of operating budget on ongoing regulatory and AML/CFT operations in steady state.

Annual Reporting Obligations

ADGM Authorised Persons file annual audited financial statements, an annual Compliance Officer report, an annual MLRO report to the UAE Financial Intelligence Unit, and periodic prudential returns (capital adequacy, the EBCM and Risk-Based Capital position, and client-asset reconciliation) under the FSRA prudential framework, alongside a real-time incident-reporting obligation for material operational events. For Custody and MTF operators, client-asset and reserve positions are subject to independent audit and ongoing reconciliation. Reporting follows the FSRA Recognised Reporting Schedule plus virtual-asset-specific returns.

Renewal and Supervision Fees

ADGM operates a supervision-fee model rather than a renewal model. The FSP is indefinite once granted; annual supervisory fees apply, structured as base plus virtual-asset add-on (see the FSRA fee table above). Supervision fees are typically payable annually. Late payment triggers escalating penalties and, if unpaid, suspension of activity. Recurring operating costs (ADGM office, technology, audit, advisers) typically equal or exceed annual supervision fees and should be planned for accordingly.

Regulatory Inspections

FSRA conducts routine supervisory engagement (typically annual desk-based reviews with periodic on-site inspections), thematic reviews on emerging risks (custody resilience, sanctions compliance, market conduct), and event-driven examinations following material incidents or complaints. Inspections require production of board minutes, governance records, AML/CFT files, technology audit reports, customer records, and client-asset documentation. Inspection notice periods range from a short routine notice to zero notice for event-driven examinations. In practice, FSRA’s expectations on board-minute granularity and documented challenge exceed what most non-UAE founders are accustomed to, and the institutional client base raises the conduct bar.

Enforcement

Carrying on a Regulated Activity in or from ADGM without a Financial Services Permission is an offence under FSMR, with FSRA empowered to impose financial penalties, public censure, restrictions, and withdrawal of permissions, and to pursue criminal referral.[3] Compliance breaches by Authorised Persons attract administrative penalties under FSRA’s enforcement powers, and FSRA publishes enforcement actions. Across the wider UAE, supervisory tempo is high: enforcement is real and active, not nominal, which is part of what banked the post-FATF reputational reset.

Advertising and Promotion Rules

FSRA’s Conduct of Business rules regulate financial promotions of virtual-asset products in or from ADGM, including the content, fair-presentation, and risk-warning requirements applicable to communications with clients. Because the regime is professional- and institutional-facing, retail-style marketing of high-risk virtual-asset products is tightly constrained, and promotions must not include misleading performance claims. Breach penalties range from administrative fines to public censure and, in serious cases, suspension of activity. Operators with retail ambitions typically route retail marketing through Dubai’s VARA regime instead; see the Dubai and UAE guide.

ICT Risk Management & Operational Resilience

FSRA imposes comprehensive ICT and operational-resilience requirements on virtual-asset firms through its General and Conduct of Business modules and its virtual-asset guidance, requiring governance, risk identification, incident reporting, testing, wallet management, and third-party risk management proportionate to activity scope.

In short: FSRA expects operational-resilience documentation that matches or exceeds DORA in scope. Penetration testing, BCP/DR, and hot/cold wallet segregation are not optional add-ons. They are conditions of the FSP.

FSRA requires every virtual-asset firm to maintain a governance framework with named accountabilities for cybersecurity, business continuity, change management, and third-party ICT risk. Identification and classification of critical information assets is mandatory. Incident reporting is event-driven: material ICT incidents must be reported to FSRA within the timelines specified in the rules, calibrated to severity. Penetration testing is required at least annually and must cover all client-facing systems and key custody infrastructure. Business continuity and disaster-recovery planning must be documented, tested, and reviewed at least annually.

For Custody providers specifically, wallet management requires segregation of hot, warm, and cold wallets, key-management procedures meeting industry standards (typically multi-signature or MPC with hardware-security-module backing), and explicit handling of key-compromise scenarios in the wind-down plan. Third-party ICT risk is governed by the outsourcing register, which must list all material providers, the services they perform, and the fallback arrangements in the event of provider failure or termination. The real constraint for most operators is not designing the framework but evidencing its operation: FSRA inspects minutes, test results, and incident logs at supervisory visits.

Banking

Banking access for an ADGM-licensed virtual-asset firm is materially better in 2026 than in 2024, but it remains a structured process rather than a default outcome. The combination of FSRA regulatory clarity, the UAE’s FATF and EU delisting, and ADGM’s institutional brand has expanded bank risk appetite, and most UAE national banks now operate dedicated VASP onboarding desks.

In short: An FSP does not equal banking. Plan for a 3 to 6-month parallel banking process and budget for multi-provider redundancy.

For an FSRA-authorised firm, banking accessibility sits between the friction of pre-2024 offshore licences and the relative ease of MiCA-licensed EU entities, with ADGM’s institutional positioning helping at the margin. National banks (the largest commercial banks domiciled in the UAE) operate VASP onboarding desks with bespoke documentation requirements and processing teams familiar with the licence-and-Travel-Rule combination. International banks with UAE branches and subsidiaries follow group-level policies, which range from broadly supportive to selective depending on the parent institution. Specialist digital banks and EMIs that accept crypto businesses, licensed in the GCC, the EU, and Switzerland, are increasingly active for operational accounts and client-asset segregation.

Onboarding for an FSRA-authorised firm typically takes 3 to 6 months and requires the FSP itself, audited financial statements (or projections for newcos), full beneficial-ownership transparency, AML/CFT policy manuals, blockchain-analytics contract evidence, wallet-disclosure schedules, and source-of-wealth evidence. The Travel Rule compliance pack is increasingly requested at onboarding. In ADGM, custodial money-services-provider arrangements provide additional fiat options for institutional operators alongside conventional bank accounts.

Jagelski & Partners Banking Partner Network
90+Institutions
3–6Month onboarding
Pre-qualifiedBefore submission

The partner network spans UAE national banks, international banks with UAE branches, GCC EMIs, and EU and Swiss correspondent rails. Configured for the multi-provider structure most ADGM-authorised firms need, with placement coordinated in parallel to the FSRA application so banking is in place at operational readiness rather than after the FSP is granted.

Explore Banking Solutions

A licence without banking access is a certificate on the wall: see the Banking service for the placement methodology and the high-risk-merchant pathway for adjacent operational accounts.

FATF Status & International Standing

The UAE was removed from the FATF “Jurisdictions under Increased Monitoring” list on and from the EU AML high-risk third-country list in 2025. As of , the UAE is off all FATF lists, FATF-compliant, and under standard follow-up, which underpins ADGM’s standing as a credible institutional jurisdiction.

Status as of June 2026: The UAE is off all FATF lists, removed from the grey list on and from the EU AML high-risk list in 2025 via Commission Delegated Regulation (EU) 2025/1184. The UAE is assessed compliant or largely compliant with 39 of 40 FATF Recommendations.[11]

The UAE was added to the FATF increased-monitoring list on due to strategic AML/CFT deficiencies, and removed on following reforms including a specialist financial-crimes court, enhanced beneficial-ownership transparency, the updated Federal Penal Code under Federal Decree-Law No. 36 of 2022, and intensified enforcement.[11] The European Commission then removed the UAE from the EU AML high-risk third-country list in 2025 by Commission Delegated Regulation (EU) 2025/1184, aligning the EU list with FATF.[12]

In practice, EU-based correspondent banks and counterparties no longer apply blanket enhanced due diligence to UAE counterparties, materially reducing onboarding friction and settlement timelines. The delisting reset is now banked rather than pending, which is what makes the reputational profile durable and distinguishes Abu Dhabi from younger or grey-listed alternatives.

EU Market Access

In short: An ADGM licence does not grant access to the EU market. Operators seeking to provide crypto-asset services to EU residents must either obtain a separate CASP authorisation in an EU member state or fall within the narrow reverse solicitation exemption under MiCA Article 61, which ESMA has deliberately restricted to isolated, genuinely unsolicited contacts.

An ADGM FSP confers no EU passporting rights. MiCA contains no third-country equivalence regime, and no UAE-MiCA Memorandum of Understanding currently exists. ESMA’s Guidelines on Reverse Solicitation under MiCA (ESMA35-1872330276-2030, published , applicable from 60 days after publication) interpret solicitation broadly and technology-neutrally.[13] Any EU-targeted marketing, EU-language content, geo-targeted advertising, EU influencer engagements, or use of EU country-code domains constitutes solicitation that voids the exemption. The exemption applies only to crypto-assets and services of the same type the client initially requested, and is policed by national competent authorities monitoring online activity. Operators with a material EU client base should obtain a parallel CASP authorisation; Cyprus is a common choice. For full detail, see Reverse Solicitation Under MiCA →.

Advantages and Limitations

ADGM offers a distinctive combination of English common law, a first-mover regulator brand, tax efficiency, and post-delisting reputational durability, calibrated to professional and institutional clients. The trade-offs are premium cost relative to MiCA jurisdictions, real substance and physical-presence requirements, a professional-only client perimeter, and the absence of EU passporting.

  • English common law with ADGM’s own independent courts. Contracts, security interests, and disputes follow English-law principles directly, which institutional investors and counterparties value.
  • First-mover regulator brand. FSRA published the world’s first comprehensive crypto framework in 2018; roughly 40% of its virtual-asset applicants are headquartered outside the UAE, reflecting international credibility.
  • 0% Qualifying Free Zone Person rate on Qualifying Income. Lower effective tax than most credible crypto jurisdictions when the conditions are met.
  • 100% foreign ownership in ADGM as a federal financial free zone.
  • Post-FATF, post-EU AML delisting removed enhanced-due-diligence overhead for international banking and counterparty relationships.
  • Single consolidated FSP. Multiple Regulated Activities sit within one Financial Services Permission, rather than a stack of activity-specific licences.
  • × Premium cost relative to MiCA jurisdictions. Year-1 totals run 2–3× a comparable Cyprus or Estonia MiCA build. Mitigation: tighten the FSP activity scope at application to reduce capital, supervision-fee, and senior-officer overhead; add activities by variation rather than all at launch.
  • × Professional and institutional clients only. ADGM is not built for retail virtual-asset distribution. Mitigation: operators with a retail market route the retail product through Dubai’s VARA regime and reserve ADGM for the institutional book; see the Dubai and UAE guide.
  • × Physical-presence and substance requirements are real and enforced. Registered addresses without operations fail at both authorisation and QFZP tax assessment. Mitigation: budget for a full ADGM office and senior-team buildout from day one; do not attempt a virtual presence.
  • × No EU passporting. An ADGM FSP does not authorise active marketing or solicitation to EU clients post-MiCA. Mitigation: operators targeting EU clients obtain a separate CASP authorisation in an EU member state (full market access via passporting) or, for isolated genuinely unsolicited contacts only, may fall within the narrow reverse solicitation exemption under MiCA Article 61.
  • × Prohibited asset categories. Privacy tokens and algorithmic stablecoins may not be used within ADGM regulated activity. Mitigation: confirm the Accepted Virtual Asset perimeter and complete the self-assessment notifications before building the product, not after.

How ADGM Compares

The first comparison is within the UAE itself, against Dubai’s VARA, which is settled by client base (see the Dubai and UAE guide). Beyond the UAE, ADGM competes with Hong Kong and Singapore as Asia-Pacific institutional hubs and with Cyprus as the EU alternative for operators that need passporting. Hong Kong runs a stricter, exchange-led regime under the SFC; Singapore prioritises payment-services-led authorisation under the MAS; Cyprus offers MiCA passporting at a fraction of the cost.

FactorAbu Dhabi (ADGM FSRA)Hong Kong (SFC)Singapore (MAS)Cyprus (CySEC)
Licence TypeFinancial Services Permission (FSMR)VATP Licence (Type 1+7)Major Payment Institution + DPT serviceMiCA CASP
RegulatorADGM FSRASFCMASCySEC
Client BaseProfessional / institutionalProfessional + vetted retailProfessional + retail (capped)Retail + professional
Timeline6–18 months (AIP to FSP)12 months+6–12 months8–14 months
Min. CapitalUSD 250k–500k base + EBCMHKD 8m (5m paid-up + 3m liquid)≈ $1.02MSGD 250k≈ $192KEUR 50k–150k
Total Year 1 CostUSD 1.1–3.0mUSD 1.5–3mUSD 1m–2mEUR 350k–700k
Corporate Tax9% federal / 0% QFZP16.5%17%15% (from 1 Jan 2026)
Legal SystemEnglish common law (ADGM courts)Common lawCommon lawEU civil law
Local PresenceUAE-resident SEO + MLRO + CO + ADGM officeHK-resident ROs + officeSG-resident officers + officeEU-resident MLRO + office
EU PassportingNoNoNoYes (via MiCA passport)
FATF StatusUAE off all listsCompliantCompliantCompliant (MONEYVAL)
Best ForInstitutional / professional, common-lawAPAC exchanges + institutionalAPAC payments + DPT servicesEU market access via passport

Compare every crypto jurisdiction side by side →

When ADGM Is the Right Choice

Choose ADGM if: (a) your clients are professional or institutional, not retail; (b) your investors, counterparties, or custodial clients value English-common-law structures and an independent court; (c) you need a 0% effective tax rate on qualifying income with a credible substance story; (d) you can absorb the institutional premium because FSRA’s first-mover brand matters to your distribution and banking relationships.

Consider alternatives if: (a) your core market is UAE or MENA retail (Dubai’s VARA is the better fit); (b) more than 30% of revenue is or will be EU-sourced (consider Cyprus for MiCA passporting at a fraction of the cost); (c) APAC institutional positioning is the priority and Hong Kong’s SFC or Singapore’s MAS brand carries more weight with your investors than FSRA’s; (d) cost is the binding constraint and a lower-total-cost MiCA build serves the same market.

Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.

Common Mistakes in ADGM Applications

FSRA publishes supervisory expectations and routinely sees the same recurring mistakes. Most failures originate before the formal submission, in the planning and personnel decisions taken in the first 90 days of the project. The errors below appear in roughly two-thirds of refusals or extended-review cases.

  • Choosing ADGM when the market is retail. An operator whose core market is retail will hit the conduct perimeter and is usually better served routing retail product through Dubai’s VARA. Settle the regulator choice by client base before any entity is formed.
  • Treating the AIP as the licence. Founders who plan to go live on the AIP find several months of operational-readiness conditions, and capital and staffing commitments, still standing between AIP and the FSP grant.
  • Underestimating substance and physical-presence requirements. A registered ADGM address without genuine operations fails at both authorisation and QFZP tax assessment. FSRA inspects office occupancy and resident-officer attendance at supervisory visits.
  • Appointing the SEO, MLRO, or Compliance Officer for cost reasons. FSRA specifically tests whether senior officers have the seniority and industry knowledge to challenge the business; junior or part-time candidates are routinely rejected at fit-and-proper stage, delaying the timeline by months.
  • Treating the RegLab as a shortcut to a full FSP. The sandbox is a restricted-scope testing environment with customer and transaction caps, appropriate for de-risking a novel product, not a substitute for full authorisation when scaling commercially.
  • Ignoring the prohibited-asset perimeter. Building a product around privacy tokens or an algorithmic stablecoin will not survive the FSRA Accepted Virtual Asset assessment; both are expressly prohibited within ADGM regulated activity. Confirm the asset perimeter and complete the self-assessment notifications before building.

Frequently Asked Questions

Eligibility & Choosing the Regulator

ADGM FSRA suits institutional-only and common-law-preferred firms: broker-dealers, custodians, multilateral trading facilities, and asset managers serving professional clients and seeking a regime aligned with English law and an established international-financial-centre brand. FSRA published the world’s first comprehensive crypto framework in 2018 and regulated over 20 virtual-asset firms as of . Dubai’s VARA suits operators targeting retail and the broadest single-licence activity reach across seven categories, with a public register of around 49 fully-licensed VASPs. For the full VARA, DFSA, and CBUAE picture, see the Dubai and UAE crypto-licensing guide. The choice depends on client base (professional versus retail), activity profile, and whether English common law matters to your investors and counterparties.

No. The ADGM virtual-asset regime is built around professional and institutional clients; FSRA does not position the framework for retail-facing virtual-asset distribution in the way Dubai’s VARA does. Firms classify clients under FSMR conduct rules, and retail virtual-asset offerings are tightly constrained. Operators whose core market is retail typically route the retail product through VARA in Dubai and reserve ADGM for the institutional book. This professional-client orientation is the single clearest line between the ADGM and VARA regimes.

Only within the RegLab’s restricted scope, customer caps, and transaction limits, for the duration of the cohort or testing period. RegLab is a regulatory sandbox for testing a novel product under FSRA oversight, not a substitute for a full Financial Services Permission; scaling commercially requires transition to full authorisation. Treating the sandbox as a shortcut to a full FSP is a recurring application error, and FSRA assesses sandbox participants for the same fit-and-proper and substance standards before any transition to full licensing.

Not automatically: classification turns on the features of the token. In ADGM, a token with the features of a security is a “Digital Security” regulated under FSMR, with guidance live since 2019, and sits separately from the Accepted Virtual Asset framework. A virtual-asset permission does not turn a token into a security, nor exempt one that already is. The same instrument is classified differently in DIFC (an Investment Token under the DFSA) and federally (under SCA rules), which is covered in the Dubai and UAE guide. Where the structure is a fund, it is routed through fund licensing instead. Jagelski & Partners scopes the regulator and the instrument together before any application.

Process & Timeline

Approval-in-Principle (AIP) is FSRA’s conditional sign-off: the regulator is satisfied with the business case and senior-officer fitness in principle, and names the operational-readiness conditions the firm must satisfy before it can be authorised. The Financial Services Permission (FSP) is the operating authorisation itself, granted once those conditions (office, capital deposit, staffing, systems, insurance) are met and verified. The AIP is not a licence and does not authorise live virtual-asset activity. Most timeline slippage happens between AIP and FSP, in the operational-readiness phase, not during the regulator’s substantive review.

Realistically 6 to 18 months from first FSRA engagement to a granted Financial Services Permission, depending on activity complexity and application quality. Arranging and advising mandates sit at the faster end; operating a Multilateral Trading Facility or providing Custody sits at the slower end because of additional rulebook scope and prudential requirements. The bottleneck is typically the operational-readiness phase after Approval-in-Principle, not the substantive review: office fit-out, senior-officer onboarding, systems testing, and policy finalisation routinely add several months. FSRA timelines lengthened modestly after the June 2025 amendments as the regulator processed a wave of applications.

Following the 10 June 2025 amendments, FSRA expressly prohibits privacy tokens and algorithmic stablecoins (and any asset using similar technology) within ADGM regulated financial services. The closed Accepted Virtual Asset list was replaced by a self-assessed notification regime against pre-defined FSRA criteria: firms assess and notify each virtual asset they intend to deal with, rather than waiting for the asset to be added to a prescribed list. AED-pegged or other fiat-referenced payment tokens used for in-country UAE payments fall under the federal CBUAE Payment Token Services regime, which is covered in the Dubai and UAE guide, not under ADGM’s FSP.

Costs, Capital & Substance

Capital follows the FSRA PRU module’s Category 1–5 system, calibrated to activity risk. Virtual-asset broker-dealers and arrangers typically sit in PRU Category 3A or 3B, with base capital of USD 250,000 to USD 500,000, plus the higher of the Expenditure-Based Capital Minimum (the EBCM, broadly 13 weeks of audited expenditure) and Risk-Based Capital. Firms operating a Multilateral Trading Facility face higher requirements expressed as multiple months of operational expenditure. Capital must be in place and evidenced before the FSP is granted, not deployed for operating expenses afterwards.

Approximately USD 1.1 to 3.0 million for Year 1 depending on activity tier, covering FSRA application and supervisory fees, base capital of USD 250,000 to 500,000 plus EBCM, ADGM entity formation, legal advisory, compliance and ICT documentation, senior-officer payroll, an ADGM office, and insurance. The dominant cost lines are senior-officer payroll and insurance (with hot-wallet crime cover the largest single insurance item for custodians), not the regulator fees themselves. The premium relative to an EU MiCA build buys institutional credibility and English common law; it is not where cost can be trimmed without weakening the application.

No. ADGM permits 100% foreign ownership by default as a federal financial free zone. UAE-resident senior officers (the Senior Executive Officer, the Money Laundering Reporting Officer, and the Compliance Officer) are required and must hold UAE residence visas, typically sponsored by the licensed entity. Foreign ownership at the corporate level and residency at the personnel level are separate considerations: full foreign ownership does not remove the need for genuinely UAE-resident senior officers, and both must be planned for from incorporation.

Tax & Cross-Border

Not automatically. The UAE levies 9% federal corporate tax on profits above AED 375,000. Qualifying Free Zone Person status preserves a 0% rate on Qualifying Income, but it requires continuous compliance with five conditions: adequate substance, Qualifying Income predominance, the de minimis test (non-qualifying income below AED 5 million or 5% of total revenue, whichever is lower), no election to mainland taxation, and arm’s-length transfer pricing with audited accounts. Virtual-asset activities are not on the published list of Qualifying Activities, so the position must be advised case-by-case. The Federal Tax Authority has not published virtual-asset-specific QFZP guidance as of . Engage a tier-1 tax adviser before incorporation, not after.

No. An ADGM FSP confers no EU passporting rights, and MiCA contains no third-country equivalence regime. The only EU route for a UAE entity is the MiCA Article 61 reverse solicitation exemption, which ESMA Guidelines ESMA35-1872330276-2030 (published ) interpret extremely narrowly: geo-blocking, no EU-language marketing, no EU sponsorships or influencer engagements, no EU country-code domains, and documented evidence the EU client initiated contact. Operators with a material EU client base should obtain a separate CASP authorisation in an EU member state; Cyprus is a common choice. ADGM’s strength is institutional credibility and English common law, not single-market access.

Start your ADGM FSRA crypto licence application

We run the whole process end-to-end, from FSRA scoping and the AIP to the FSP grant and banking. Book a free assessment and we'll map your route to approval.

Not ready to book? Ask Emma first. She answers now, and if it needs a human she takes your details so the consultation starts ahead.

References

Show all references
  1. ADGM, ADGM FSRA Presents Key Enhancements to its Digital Assets Framework at Abu Dhabi Finance Week 2025 (FSRA reports over 20 regulated virtual-asset firms), adgm.com, accessed .
  2. ADGM FSRA, 2025 virtual-asset application statistics: 47 applications received, 31 approved, approximately 40% from outside the UAE, adgm.com, accessed .
  3. ADGM FSRA, Financial Services and Markets Regulations 2015 (FSMR) and Guidance – Regulation of Virtual Asset Activities in ADGM, adgm.thomsonreuters.com, accessed .
  4. VARA (Virtual Assets Regulatory Authority), VASP Public Register (Dubai regime, cross-reference), vara.ae, accessed .
  5. ADGM FSRA, ADGM FSRA implements amendments to its Digital Asset Regulatory Framework (Digital Asset Updates effective 10 June 2025, Consultation Paper No. 11 of 2024; self-assessed Accepted Virtual Asset regime; prohibition of privacy tokens and algorithmic stablecoins), adgm.com, accessed .
  6. ADGM FSRA, Consultation Paper No. 10 of 2025: Proposed Regulatory Framework for the Staking of Virtual Assets, adgm.com, accessed .
  7. UAE Ministry of Finance, Federal Decree-Law No. 47 of 2022 on the Taxation of Corporations and Businesses, mof.gov.ae, accessed .
  8. UAE Ministry of Finance, Cabinet Decision No. 55 of 2023 on Determining Qualifying Income for Qualifying Free Zone Persons, mof.gov.ae, accessed .
  9. UAE Federal Tax Authority, VAT Public Clarification VATP040: Virtual Assets Industry, tax.gov.ae, accessed .
  10. UAE Ministry of Finance, Cabinet Decision No. 142 of 2024 on the Implementation of a Domestic Minimum Top-up Tax, mof.gov.ae, accessed .
  11. FATF, Jurisdictions under Increased Monitoring, 23 February 2024 (United Arab Emirates removed), fatf-gafi.org, accessed .
  12. European Commission, Commission Delegated Regulation (EU) 2025/1184 amending the EU AML high-risk third-country list (United Arab Emirates removed), eur-lex.europa.eu, accessed .
  13. ESMA, Guidelines on Reverse Solicitation under MiCA (ESMA35-1872330276-2030), esma.europa.eu, accessed .