Dubai DIFC Transfers Crypto Token Assessment to Licensed Companies
Significant Updates in Crypto Token Regulation
The Dubai Financial Services Authority (DFSA) has made a major update to its Regulatory Framework for Crypto Tokens, transferring the responsibility for assessing the suitability of crypto tokens from the regulator to licensed companies operating within the Dubai International Financial Centre (DIFC), Dubai's free economic zone. According to the new rules that took effect on Monday, companies providing financial services related to crypto tokens must determine whether the tokens they interact with meet the DFSA's suitability criteria.
The DFSA will no longer maintain or publish a list of recognized crypto tokens. This update follows a consultation process that began in October 2025 and reflects a shift in the regulator's approach from the introduction of the crypto token regime in 2022. Charlotte Robins, Executive Director of Policy and Legality at DFSA, stated that the changes represent a deliberate move towards a more flexible, principle-based model.
A More Stringent Framework for Privacy Tokens
The DFSA's updates do not introduce an explicit ban on any specific category of digital assets. However, the responsibility for assessing the suitability of tokens is now shifted from the regulator to licensed companies in the DIFC. Even without an explicit ban, privacy-focused tokens, such as Monero (XMR) and Zcash (ZEC), may face greater scrutiny from the DFSA. Certain privacy tokens could be seen by internal compliance teams as higher risk, leading companies to apply stricter due diligence standards or to completely avoid supporting them.
This amendment also highlights a key legal distinction; the DFSA regulates financial services in the DIFC, which operates under common law legislation, separate from the regulatory regime in Dubai. Other jurisdictions within Dubai and the United Arab Emirates are under different crypto regulations with their own rules.
Looking at UAE Crypto Regulation
The DFSA's principle-based approach contrasts sharply with that of other authorities in Dubai. In February 2023, the Dubai Virtual Assets Regulatory Authority (VARA) introduced an explicit ban on privacy coins under its regulations. VARA prohibits the issuance of “privacy cryptocurrencies” and all related virtual asset activities in its jurisdiction, which covers most of Dubai outside the DIFC. In the UAE, crypto regulation remains fragmented, and the treatment of privacy-focused crypto assets varies significantly depending on jurisdiction.
