Dubai VARA tightens crypto AML rules with real-time risk focus

Dubai’s VARA has imposed stricter anti-money laundering rules on crypto firms, requiring real-time risk assessments, frequent reviews, and explicit FATF blacklist monitoring to strengthen compliance.

Dubai’s Virtual Assets Regulatory Authority (VARA) has rolled out stricter anti-money laundering and risk management guidelines for licensed crypto firms. Announced on June 12, 2026, the new framework mandates that virtual asset service providers adopt data-driven, real-time risk assessment models, moving away from static compliance lists. Firms are now required to continuously evaluate customer profiles, transaction types, products, services, distribution channels, and geographical risks. Special attention must be given to high-risk and blacklisted countries identified by the Financial Action Task Force (FATF). Risk assessments must be reviewed at least every three months and updated immediately after significant business changes. The updated rules also address emerging threats, including artificial intelligence and anonymous transactions, by demanding enhanced transaction monitoring and greater management oversight. These measures aim to align Dubai’s crypto sector with international anti-money laundering standards and ensure risk controls reflect current business realities.