UAE regulation — VARA

Virtual assets,VARA supervised.

Dubai's Virtual Assets Regulatory Authority expects licensed VASPs to screen customers and counterparties, monitor for sanctions exposure, and keep files a regulator can inspect. We deliver exactly that.

Who this covers

  • Exchanges and broker-dealers licensed by VARA
  • Custody, lending and transfer service providers
  • Advisory and management VASPs in Dubai
  • Web3 businesses preparing a VARA licence application

What we deliver

Practical support against each requirement.

Customer & counterparty screening

Screen retail and institutional customers at onboarding and continuously thereafter against sanctions, PEP and adverse-media sources.

Sanctions & adverse-media monitoring

Ongoing monitoring with alert workflows, so a change in a counterparty's status surfaces the day it happens.

Institutional due diligence

Enhanced reports on institutional counterparties, market makers and corporate clients — ownership, reputation, litigation.

Fraud & identity signals

Digital identity risk scoring through Emailage and related tools to catch synthetic and stolen identities at onboarding.

Regulator-ready case files

Every search, alert and disposition recorded in a structured case file you can hand to VARA on request.

Policy & training support

Help shaping screening procedures and training compliance staff on investigation and escalation.

FAQs

Common questions.

What does VARA expect around customer screening?

VARA-licensed firms are expected to know who they are dealing with — customers, counterparties and beneficial owners — and to screen them against sanctions and other risk sources. We supply the data and workflows; your compliance officers set the risk appetite.

Do you screen wallets or blockchain addresses?

Our focus is the legal-entity and identity side — who owns and controls the parties you deal with. Blockchain analytics tools cover on-chain wallet risk, and we can work alongside whichever chain-screening provider you use.

Can you help during the licence application stage?

Yes. Many applicants need to show credible screening and due-diligence arrangements as part of their application pack. We can stand those up before your licence is granted.

How quickly can screening be live?

Standard list screening can typically be operational within days once scope is agreed. More complex institutional due-diligence programmes are scoped individually.

This page describes the services ICG MECOS provides to regulated businesses. It is not legal advice, and it does not reproduce or summarise UAE law — always refer to the published requirements of your supervisor.

All regulators