Stablecoins and DeFi in the UAE Sit on a Separate Regulatory Track
Stablecoins and decentralised finance in the UAE are regulated by the Central Bank on a statutory track of their own — the Payment Token Services Regulation for payment tokens, and Article 62 of Federal Decree-Law No. 6 of 2025 for licensed financial activity carried on through DeFi, dApps and protocols — separately from the virtual asset regimes run by VARA, the DFSA, the FSRA and the Capital Market Authority.
The commonest and most expensive mistake in UAE crypto structuring is treating a stablecoin as just another virtual asset. It is not. Payment tokens sit under the Central Bank and its Payment Token Services Regulation, and licensed financial activity carried on through DeFi, dApps and protocols sits under Article 62 of Federal Decree-Law No. 6 of 2025 — two Central Bank tracks with their own statutory bases, running alongside rather than inside the virtual asset frameworks operated by VARA, the DFSA, the FSRA and the Capital Market Authority. A business that obtains a virtual asset licence and assumes its stablecoin or its protocol is covered by it has not solved that problem; it has left it unaddressed. LEXNOVA is not a law firm. It is a lawyer-matching service, and this guide is informational rather than legal advice.
LAST REVIEWED 22 SEPTEMBER 2026
WHO THIS GUIDE IS FOR
Stablecoin and payment token issuers, payment and remittance businesses, exchanges and custodians that touch payment tokens, DeFi and protocol teams with any UAE connection, merchants considering accepting crypto at checkout, and the investors and boards behind them — anyone who needs to work out whether their activity sits with the Central Bank, with a virtual asset regulator, or with both at once.
Two Tracks That Are Routinely Conflated
The UAE virtual asset regulators — VARA in Dubai outside the DIFC, the DFSA in the DIFC, the FSRA in ADGM, and the federal Capital Market Authority onshore and in the ordinary free zones — license virtual asset activity. The Central Bank regulates payment tokens, and separately regulates licensed financial activity carried on through emerging technologies. These are different statutory bases, not different departments of one regime.
So a licence on one track does not answer the question on the other. A virtual asset service provider licence does not authorise the issuance of a payment token, and a payment token licence does not authorise virtual asset activity generally. Which regulator governs which territory is a separate question; this guide deals with the Central Bank track and the free-zone stablecoin regimes beside it.
The Payment Token Services Regulation: Three Licences and a Registration
The regime is the Payment Token Services Regulation, Circular No. 2024/2, cited as C 2/2024, issued on 7 June 2024 and effective from 31 August 2024. In its own words it lays down the rules and conditions established by the Central Bank for granting a Licence or Registration for the provision of Payment Token Services.
Article 5 creates three licences for persons incorporated and located in the UAE: Dirham Payment Token Issuer, Payment Token Custodian and Transferor, and Payment Token Conversion. For persons not incorporated in or located outside the UAE, Article 9 provides a Foreign Payment Token Issuer Registration instead. A further route appears at Article 8, a Non-Objection Registration, whose exact scope is not established on the sources checked — confirm it with a lawyer rather than assume it is a lighter alternative to a licence.
Why a DIFC or ADGM Entity Is Foreign Here
Article 5 expressly notes that a person outside the UAE includes a person located in a Financial Free Zone. For payment token purposes a DIFC or ADGM entity is therefore foreign, and takes the registration route rather than the licence route. That runs against the intuition of almost every group that structures through a financial free zone, because in nearly every other context such a company is a UAE company with a UAE regulator.
The point compounds with the denomination rule below. A foreign issuer is confined to foreign-currency tokens, so reading Article 5 together with Article 12(1) suggests the dirham-denominated route is not reachable through the foreign registration at all — exactly the kind of structural conclusion to have confirmed before a group is built around it.
The Denomination Split: Dirham Only, or Foreign Currency Only
Article 12(1) is short and absolute in both directions. All payment tokens issued by a Dirham Payment Token Issuer shall be denominated only in Dirham, and all payment tokens issued by a Foreign Payment Token Issuer shall be denominated only in a Foreign Currency.
There is no mixed or multi-currency issuer category on the face of that Article. An issuer choosing its route is therefore also choosing its denomination, and a product roadmap that assumes a dirham token and a dollar token coming out of the same entity needs legal review before any of it is built or promised to investors.
Article 22: The Reserve of Assets
The Reserve of Assets must equal the total fiat face value of the payment tokens in circulation. It is held as cash in a separate account wholly denominated in the same currency as the payment tokens, with another person not in the issuer’s group which is a bank licensed in the UAE, and designated so as to show that it is held for safeguarding.
The reserve may be used only for that issuer’s Reserve of Assets, reserves for different token types are segregated, and the issuer must ensure no other person has any claim on or interest in it. One limited carve-out exists: a Dirham Payment Token Issuer that is a wholly-owned subsidiary of a bank may hold 50% of the reserve as cash and invest the remainder in UAE government bonds and Central Bank M-Bills with an average duration of six months or less.
Article 21: Redemption at Par, by the Next Business Day
A tokenholder is entitled to redeem at par value in fiat by the same time on the next Business Day after the day on which the request was made. That is a hard operational commitment, and it drives treasury, banking and systems design long before it becomes a legal question in a dispute.
Article 21 also provides that a tokenholder may request redemption of a payment token without any limitation in time. There is no window that closes and no expiry on the right to ask, which is materially different from a product designed around a fixed redemption period.
Article 2(7): What a Foreign-Currency Stablecoin Can Actually Be Used For
This is the most practically important rule in the regulation and the one most often missed. A UAE merchant selling goods or services may accept a virtual asset as payment only where it is a Dirham Payment Token issued by a licensed issuer, or a Foreign Payment Token issued by a registered Foreign Payment Token Issuer being used as a Means of Payment for the purchase of a virtual asset or a virtual asset derivative.
In plain terms: a foreign-currency stablecoin cannot be used to pay for ordinary goods and services in the UAE. Its permitted use is confined to buying virtual assets and virtual asset derivatives, so a payments product built around dollar stablecoin checkout for UAE merchants runs straight into this Article. Article 2(10) and Article 2(11) apply the same limits to promotion, so the restriction bites on the marketing as well as on the transaction.
Article 2(3): Algorithmic Stablecoins and Privacy Tokens, Prohibited Federally
Article 2(3) is expressed universally: no person shall, within the UAE or directed to persons in the UAE, issue algorithmic stablecoins or privacy tokens, or perform services relating to algorithmic stablecoins or privacy tokens. It is expressed to apply including to persons otherwise licensed for virtual asset activities, and promotion of them is separately prohibited.
That is a federal prohibition sitting on top of, not instead of, whatever a virtual asset regulator says. ADGM prohibits both categories outright in its own rules as well, so a project in either category does not gain a route by moving into a free zone.
Article 62: DeFi, dApps and Protocols Come Under the Central Bank
Article 62 of Federal Decree-Law No. 6 of 2025, in force on 16 September 2025, is titled Carrying on Licensed Financial Activities through Emerging Technologies. It provides that any person carrying on, offering, issuing or facilitating, whether directly or indirectly, any Licensed Financial Activity — regardless of the medium, technology or form employed — is subject to the licensing, regulatory and oversight jurisdiction of the Central Bank.
Its enumerated limbs reach virtual assets payment tokens, decentralized finance, other emerging technology, and the offering or operation of platforms, decentralized applications, protocols or technological infrastructure that facilitate, intermediate or enable financial services such as payments, credit, deposits, money exchange, remittances or investment services. The drafting is activity-first and technology-neutral: it does not prohibit DeFi, it removes technology as a reason an activity would sit outside the perimeter. For a protocol team the question is not whether the code is decentralised, but whether what the code does amounts to a licensed financial activity.
The Boundary Nobody Has Published
Article 62 is a Central Bank track with its own statutory base. The Capital Market Authority virtual assets framework is a different track with a different base. Both can plausibly describe the same protocol — one as a licensed financial activity carried on through emerging technology, the other as a regulated virtual asset activity within the federal perimeter.
No primary source checked for this guide reconciles the two where a protocol falls within both. There is no published boundary rule, no allocation mechanism and no stated order of precedence. That is not a gap this guide will fill by inference: a project in this position may need to analyse its activity against both frameworks and document a position on each, early and in writing.
ADGM: Fiat-Referenced Tokens Are a Separate Asset Class
In ADGM a Fiat-Referenced Token is expressly excluded from the definition of a Virtual Asset. It is a separate asset class with its own rules, so the Accepted Virtual Asset machinery that governs other tokens does not govern an FRT, and a firm cannot reason from one to the other.
Phase 1 was announced on 5 December 2024 following Consultation Paper No. 7 of 2024, and made issuing an FRT a distinct Regulated Activity, with strict requirements on the constituents of reserve assets, minimised variability in FRT value, holder rights to redeem at par value within defined timeframes, capital adequacy requirements and business restrictions, and periodic independent attestation and stress testing. Phase 2 was finalised on 31 October 2025 following Consultation Paper No. 9 of 2025 and took effect on 1 January 2026, expanding the Regulated Activities that may be carried on in relation to FRTs, adding rules for Authorised Persons holding client FRTs, and setting the FSRA approach to accepting FRTs for use in ADGM.
The granular rule text — permitted reserve currencies, specific redemption timeframes, exact capital figures and custody-of-reserves requirements — is deliberately not reproduced here, because it could not be verified against a primary source. Those are precisely the numbers to take from a lawyer reading the current rules rather than from a summary.
The DIFC: Fiat Crypto Tokens Were Carved Out of the 2026 Reform
On 12 January 2026 the DFSA moved from a DFSA-led suitability assessment to a firm-led assessment and stopped prescribing a list of Recognised Crypto Tokens. That much is widely reported. What is widely omitted is the qualification the DFSA itself attached to it.
The DFSA consultation summary describes the change as applying to Crypto Tokens excluding Fiat Crypto Tokens, and its February 2026 FAQs confirm the DFSA has retained the power to assess Fiat Crypto Tokens as suitable. DIFC stablecoins are therefore still regulator-gated. A Fiat Crypto Token is described by reference to a Crypto Token whose value, in order to stabilise its price or reduce volatility, purports to be determined by reference to a single fiat currency, and additional suitability criteria sit in the DFSA Policy Statement on Fiat Crypto Tokens.
The current substantive requirements in that Policy Statement are not on the public record as checked for this guide, and no DFSA Financial Service equivalent to issuing a stablecoin was found either. Neither point is resolved here in either direction — a reader who finds a confident summary of DIFC stablecoin reserve or verification requirements should ask where it came from.
Where This Goes Wrong in Practice
The recurring error is the single-licence assumption: a business obtains a virtual asset licence in one perimeter and treats the stablecoin, the payment flow and the protocol as covered by it. Those are three separate questions with three possible answers, and the Central Bank track answers two of them on its own footing.
The second is the free-zone assumption — that a DIFC or ADGM address makes an entity domestic for every federal purpose. Article 5 says otherwise for payment tokens, and Article 12(1) then narrows what that entity can issue once it is on the foreign route.
The third is planning around a rule that has not been published. Whether there is a transitional period under the Payment Token Services Regulation, how Article 62 interacts with the Capital Market Authority framework, and what the current DIFC stablecoin requirements say in detail are all open on the sources checked here. The right response is to get the question answered by a lawyer against the current text, not to adopt the convenient answer and build on it.
FAQ
Overview & Eligibility
Fees & Timelines
LEXNOVA is not a law firm and does not provide legal advice, legal opinions, legal representation, or legal services. Any legal advice or representation is provided directly by the independent legal professional engaged by the client.
A connection or introduction does not constitute a guarantee, endorsement, or assurance of outcome. Users should independently confirm the professional's qualifications, authorization, fees, scope of engagement, and suitability.