How to Apply for a DFSA Crypto Licence in the DIFC
A DFSA crypto licence is not a distinct authorisation but a DFSA Licence for one or more Financial Services in GEN Rule 2.2.2, endorsed for Crypto Token business and subject to the Crypto Token requirements in GEN Chapter 3A, which since 12 January 2026 have required the firm itself — rather than the DFSA — to assess and document the suitability of each Crypto Token it uses, with Fiat Crypto Tokens expressly excluded from that shift.
Two things about DIFC crypto licensing are widely repeated and both are wrong. The first is that there is a crypto licence to apply for; there is not, and the application is for a Financial Service. The second is that on 12 January 2026 the DFSA abolished its token whitelist outright; it did not, because Fiat Crypto Tokens were carved out and remain regulator-gated. This guide follows what the DFSA actually did and where the public record stops — including a live but out-of-date DFSA explainer that leads a careful reader to the wrong answer. LEXNOVA is not a law firm. It is a lawyer-matching service, and it does not prepare, submit or assess licence applications or give legal advice.
LAST REVIEWED 22 SEPTEMBER 2026
WHO THIS GUIDE IS FOR
Firms considering or holding a DFSA Licence that touches Crypto Tokens — trading desks, brokers, arrangers, asset managers, advisers, custodians, clearing houses and trading venues — fund managers whose funds hold Crypto Tokens, compliance teams rebuilding token onboarding after the 12 January 2026 reform, and firms outside the DIFC assessing whether their promotions reach into it.
There Is No DFSA Crypto Licence — There Are Financial Services
The DFSA licenses by Financial Service, not by asset class. A firm needs a Licence authorising the relevant Financial Service under GEN Rule 2.2.2, endorsed for Crypto Token business, with the Crypto Token requirements sitting on top in GEN Chapter 3A, introduced with the regime in 2022.
So the first question is never which crypto licence to get. It is which Financial Service the business performs — dealing, arranging, managing, advising, custody, clearing or operating a venue — because that answer drives the authorisation, the conduct rules and the prudential position together.
What Actually Changed on 12 January 2026
The DFSA moved from a DFSA-led suitability assessment — the recognition, or prescribed-list, model — to a firm-led assessment. In its own words, this is the shift from a DFSA-led suitability assessment to a firm-led assessment, and the DFSA will no longer prescribe a list of Recognised Crypto Tokens.
For contrast, between 2 November 2022 and 11 January 2026 a Crypto Token could not be used in a DIFC financial service unless the DFSA had recognised it. The initial list of 1 November 2022 comprised Bitcoin, Ethereum and Litecoin, with Toncoin and Ripple added by notice of 2 November 2023.
What replaced it is not deregulation. It transfers the assessment burden onto the firm, with documentation, periodic re-assessment and regular reporting attached. A compliance function that read the headline and concluded it had less to do has the change backwards.
The Carve-Out Most Commentary Omits: Fiat Crypto Tokens
The DFSA’s own CP 168 summary says the change applies to Crypto Tokens excluding Fiat Crypto Tokens. The February 2026 FAQs confirm that the DFSA has retained the power to assess Fiat Crypto Tokens as suitable. Stablecoins in the DIFC are therefore still regulator-gated, and the firm-led model does not reach them.
A Fiat Crypto Token is, per FAQ Q17, a Crypto Token where, to stabilise its price or reduce volatility, its value purports to be determined by reference to a single fiat currency. Additional suitability criteria sit in the DFSA’s Policy Statement on Fiat Crypto Tokens, and Funds may hold Fiat Crypto Tokens the DFSA has assessed as suitable.
The current substantive requirements in that Policy Statement are not established on the sources checked, and no DFSA Financial Service equivalent to issuing a stablecoin was found either. This guide therefore publishes no reserve, segregation or verification requirements for Fiat Crypto Tokens.
The Instruments Behind the Reform
The reform was made by seven Rule-Making Instruments passed by the DFSA Board on 15 December 2025: GEN (No. 423), COB (424), CIR (425), FER (426), AMI (427), MKT (428) and GLO (429), all of 2025. The consultation was CP 168, Enhancements to the Regulation of Crypto Tokens, published 21 October 2025 with feedback closing 31 October 2025.
The DFSA confirmed commencement in its own words on the day: the new rules come into force today, on 12 January 2026. Any policy, onboarding procedure or fund document drafted against the pre-2026 module set describes a superseded regime.
The Suitability Assessment a Firm Must Now Run
A firm must conduct and document its own suitability assessment for every Crypto Token it engages with, on a reasoned and documented basis. The criteria sit at GEN Rule 3A.2.1(3), and a firm has to work through all of them rather than picking the ones that favour the token.
They are: the token’s characteristics, including purpose, governance arrangements and founders; its regulatory status in other jurisdictions, including whether any financial services regulator has assessed or approved it; the size, liquidity and trading history of its global market; the technology used; and whether using it could prevent the firm complying with DFSA-administered legislation.
Reasoned and documented is the operative standard. In practice that means a written assessment file per token, produced before use and capable of being shown to the DFSA — not a conclusion recorded in a committee minute.
Six-Monthly Re-Assessment and Continuous Monitoring
GEN Rule 3A.2.1A(b) requires the assessment to be revisited at minimum every six months, alongside continuous monitoring. The token that satisfied the criteria at onboarding is not permanently assessed, and market, technology or regulatory-status changes are meant to be picked up as they happen.
That converts token onboarding from a project into an operating process, with an owner, a calendar and an audit trail. For a firm carrying a long token list, the recurring workload is the real cost of the firm-led model.
Monthly ePortal Reporting Within 14 Days
Under GEN Rule 3A.2.1A(d) a firm reports monthly to the DFSA through the ePortal within 14 days, covering token names, client numbers, transaction counts and USD value. It is a recurring regulatory filing with a short deadline, not an annual return.
Fourteen days is tight enough that the data has to come out of production systems cleanly rather than be assembled by hand each month. Treating the reporting build as part of the licensing project tends to make the first quarter far less painful.
Custodians Report Quarterly on Unauthorised Transfers
COB Rule 15.4.6 requires custodians to report quarterly on unauthorised transfers. It is a separate obligation from the monthly GEN reporting and applies specifically to the custody side of the business.
Because it is framed around unauthorised transfers, it presupposes the firm can detect and classify them — a systems, key-management and incident-response question long before it is a reporting one.
Funds: The Gross-Asset-Value Thresholds No Longer Apply
The previous gross-asset-value thresholds for Funds investing in Crypto Tokens no longer apply. Suitability under GEN Rule 3A.2.1 and CIR Rule 8.2.6 applies instead. The old 20% gross-asset-value cap is now wrong, and repeating it in a prospectus or board paper describes a superseded rule.
Funds may hold Fiat Crypto Tokens that the DFSA has assessed as suitable, which is where the stablecoin carve-out bites on the funds side. A fund whose strategy depends on a particular stablecoin depends on the DFSA’s assessment of it, not its own.
Which Financial Services Cover Crypto Token Business
The Financial Services that may be carried on in relation to Crypto Tokens are: Dealing in Investments as Principal; Dealing in Investments as Agent; Arranging Deals in Investments; Managing Assets; Advising on Financial Products; Arranging Custody; Providing Custody; Operating a Clearing House; and Operating a Multilateral Trading Facility.
Two questions applicants ask constantly are deliberately left open. This guide publishes no DIFC prudential Category 1 to 5 mapping for crypto firms, and states no position on whether a crypto trading venue needs the Authorised Market Institution route rather than an MTF Licence. Neither is established on the sources checked, and both are structural enough that guessing has real consequences.
Article 41A: Promotions, and an Express Reverse-Solicitation Exemption
The marketing perimeter is the DIFC Financial Promotions Prohibition at Article 41A of the Regulatory Law 2004, with GEN Chapter 3. It is unlawful to make a Financial Promotion in or from the DIFC unless authorised or exempt, and it reaches outward where the promotion appears, on reasonable grounds, to be directed at or intended to be acted upon by a person in the DIFC.
The DIFC has an express reverse-solicitation exemption: a communication is exempt where made to a person as a result of an unsolicited request by that person — where the person expressly seeks out, or asks for, the promotion. That is a structural difference from Dubai outside the DIFC, where the VARA marketing regime contains no such safe harbour.
An express exemption is not a loose one. It turns on the request being genuinely unsolicited and on being able to show it was, which is a record-keeping discipline as much as a legal test.
Representative Offices, Branches, and an Out-of-Date Explainer
Two structural restrictions matter when choosing an establishment route. A Representative Office may not market Crypto Tokens, under GEN Rule 2.26.1(4)(a). Branches are restricted from carrying on Crypto Token-related services under GEN Rule 7.2.2(8), and the February 2026 FAQs describe branches as facing certain restrictions. The exact scope is not established, so treat branches as restricted rather than prohibited.
Now the trap. The DFSA’s own Crypto Token regime explainer PDF is still live on its website and is out of date. It describes the recognition process, a recognition fee and the 20% fund cap, all superseded on 12 January 2026. Because it sits on the regulator’s own domain, content drawn from it looks impeccably primary-sourced and is wrong.
What Is Not Established — and How LEXNOVA Helps
Several points a reader will want resolved are not on the public record as checked, and this page resolves none of them. Whether privacy tokens and algorithmic tokens remain prohibited in the DIFC after 12 January 2026 is not established. The transitional treatment of the five previously-recognised tokens is not established either way. The prudential category mapping and the Authorised Market Institution versus MTF question are likewise open.
LEXNOVA is a lawyer-matching service, not a law firm. It does not prepare, submit, review or assess a DFSA application, tell you which Financial Service you need, run or check a token suitability assessment, or represent anyone before the DFSA. It helps you frame the position clearly enough to be matched with a lawyer whose practice fits. Every match is reviewed by a person, the relationship is directly between you and the lawyer, and no outcome, scope or timeline is promised.
FAQ
LEXNOVA is not a law firm and does not provide legal advice, legal opinions, legal representation, or legal services. Any legal advice or representation is provided directly by the independent legal professional engaged by the client.
A connection or introduction does not constitute a guarantee, endorsement, or assurance of outcome. Users should independently confirm the professional's qualifications, authorization, fees, scope of engagement, and suitability.