Crypto Licensing

ADGM Crypto Licence in Abu Dhabi (FSRA)

The Financial Services Permission is built for professional clients, not the retail base VARA takes. Not a jurisdiction we file in.

Talk to us

Why Operators Choose Abu Dhabi (ADGM) for Crypto Licensing

The Abu Dhabi Global Market is the institutional end of the UAE’s crypto market. Its regulator, the FSRA, published the world’s first comprehensive virtual-asset framework in 2018 and sits inside an English common-law jurisdiction with its own courts and a Financial Services Permission regime built around professional and institutional clients. That orientation is the clearest line between ADGM and Dubai’s retail-permissive VARA.

Expert Comment

The QFZP tax qualification sits outside regulatory approval: a firm that passes FSRA authorisation but fails the five QFZP conditions attracts 9% federal tax on all profits, not 0%. Tax planning must precede incorporation, not follow it.

Daniel Tomberg CEO & Senior Partner, Tomberg & Partners
In short: ADGM suits institutional operators, custodians, broker-dealers, and asset managers serving professional clients who value English common law and a credible regulator brand. If your core market is retail, or you want the broadest single-licence activity reach, Dubai’s VARA is usually the better fit; see the Dubai and UAE guide. No ADGM licence carries EU passporting rights.

A Distinct Institutional Regime, Not a VARA Substitute

The UAE has several crypto regulators and the common error is treating them as interchangeable. The regimes are not portable: an FSRA authorisation is not recognised by VARA or the DFSA, the rulebooks differ, and substance must be built inside ADGM specifically. Client base drives the choice, ADGM for professional product and VARA for retail, and the full multi-regulator picture is mapped in the Dubai and UAE crypto-licensing guide.

English Common Law, Low Tax, and a Clean FATF Standing

ADGM operates its own independent courts applying English common law directly, so contracts, security interests, and disputes follow English-law principles rather than a civil-law transposition; for institutional operators whose investors require a familiar framework, this is frequently decisive. The tax position is strong (9% federal corporate tax above AED 375,000, with a 0% Qualifying Free Zone Person rate on Qualifying Income where conditions are met), and the UAE’s removal from the FATF and EU AML lists means correspondent banks no longer apply blanket enhanced due diligence to UAE counterparties.

Regulatory Framework

The ADGM crypto framework rests on the Financial Services and Markets Regulations 2015 (FSMR), supplemented by FSRA’s rulebooks and its Guidance on the Regulation of Virtual Asset Activities. FSRA authorises virtual-asset activity as Regulated Activities with virtual-asset add-on permissions, granted as a Financial Services Permission.

In short: One regulator (FSRA), one statute (FSMR), one authorisation (the Financial Services Permission), inside an English common-law free zone for professional clients. This is structurally distinct from VARA’s seven-category retail regime in Dubai and the DFSA’s Crypto Token endorsement in DIFC.

Definition: Financial Services Permission (ADGM FSRA)

A Financial Services Permission (FSP) is the authorisation FSRA grants to an Authorised Person to carry on one or more Regulated Activities in or from the Abu Dhabi Global Market under FSMR. For crypto firms, the FSP carries virtual-asset add-on permissions covering activities such as Dealing in Investments as Principal or Agent, Arranging Deals, Managing Assets, Providing Custody, and Operating a Multilateral Trading Facility (MTF) for Accepted Virtual Assets. The FSP is the operating licence; it is preceded by an Approval-in-Principle and is granted only after the firm satisfies operational-readiness conditions.

ADGM was the first mover. FSRA published the world’s first comprehensive crypto-asset framework in 2018, years ahead of the federal regime and Dubai’s VARA, and has refined it through successive consultations. The latest substantive Digital Asset Updates, effective 10 June 2025, moved from a closed Accepted Virtual Asset list to a self-assessed notification regime and enshrined the prohibition on privacy tokens and algorithmic stablecoins within ADGM regulated financial services. ADGM also runs the RegLab, a regulatory sandbox for testing a novel product under FSRA oversight within restricted scope and customer caps. It is a testing environment, not a market-entry shortcut: scaling commercially still requires a full FSP, assessed against the same fit-and-proper and substance standards.

Licence Types and Activities Covered

There is no separate “crypto licence” product. FSRA authorises virtual-asset activity through standard FSMR Regulated Activities carrying virtual-asset add-on permissions, all consolidated into a single Financial Services Permission whose scope names what the firm may do in relation to Accepted Virtual Assets. Capital follows the FSRA Prudential (PRU) module’s Category 1–5 system. The virtual-asset Regulated Activities an FSP can cover include:

  • Dealing as Principal or Agent: the broker-dealer perimeter.
  • Arranging Deals: arranging client transactions.
  • Managing Assets: discretionary portfolio management for professional clients.
  • Advising on Investments: investment advice on Accepted Virtual Assets.
  • Providing Custody: safeguarding assets and private keys under FSRA custody rules.
  • Operating a Multilateral Trading Facility (MTF): running a trading venue, the highest-prudential activity.
  • Operating a Clearing House: clearing or settlement infrastructure.

Capital scales with activity: broker-dealers and arrangers typically sit in PRU Category 3A or 3B, while an MTF operator faces higher requirements. The June 2025 amendments replaced the closed Accepted Virtual Asset list with a self-assessed notification regime, under which a firm assesses each asset it intends to deal with against FSRA criteria and notifies the regulator; privacy tokens and algorithmic stablecoins are expressly prohibited. A virtual-asset permission does not settle what a token legally is: a token with the features of a security is a “Digital Security” under FSMR with its own conduct and prospectus obligations, a fund vehicle is routed through fund licensing, and a DAO, DeFi, or DEX framing does not remove the licensing trigger where the underlying activity is in scope.

Requirements

An FSP requires an ADGM-incorporated entity, UAE-resident senior officers, a real office inside ADGM, base capital plus the EBCM evidenced before grant, a full policy framework, and a pre-authorisation fit-and-proper assessment of all controllers, directors, and approved persons.

In short: The two make-or-break elements are (a) genuinely UAE-resident, industry-qualified senior officers physically located in ADGM, and (b) base capital plus the EBCM evidenced before the FSP is granted. Both are non-negotiable, and FSRA tests substance at supervisory visits.
RequirementADGM FSRA
EntityADGM-incorporated entity (federal financial free zone, English common law)
Min. directorsBoard with composition rules by activity; an independent director is expected, especially for Custody and MTF
Foreign ownership100% (ADGM free zone)
Senior Executive Officer (SEO)Required, UAE-resident, full-time
MLRORequired, UAE-resident, full-time, industry-qualified
Compliance OfficerRequired, UAE-resident (may be combined or separate depending on scale and activity)
Physical officeReal office in ADGM, lease before Approval-in-Principle conditions are cleared
Base capitalUSD 250,000–500,000 base (PRU Category 3A/3B); higher for an MTF
Prudential minimumHigher of base capital, the EBCM (broadly 13 weeks of audited expenditure), and Risk-Based Capital
Capital deposit formHeld by the authorised entity; evidenced to FSRA before grant, not deployable as operating cash
Professional indemnity insuranceRequired, scaled to activity scope and AUM/AUC
Client-asset protection (Custody, MTF)Per FSRA custody rules, with independent client-asset audit
Wind-down planMandatory

Fit-and-Proper, Substance, and AML/CFT

All Controllers (10% or more shareholding), directors, the SEO, the MLRO, and the Compliance Officer require FSRA pre-approval covering integrity, competence, and financial soundness; an approval from another UAE regulator is not recognised, and FSRA rejects MLRO candidates who lack the seniority to challenge the business. Substance operates at two layers: the regulator layer (a real ADGM office, a signed lease, genuinely UAE-resident senior officers, and demonstrable in-country operation) and the tax layer (the QFZP conditions). The regulator bar is easier to clear than the QFZP bar, and a firm that passes authorisation but fails QFZP attracts the 9% federal rate on all profits.

On AML/CFT, FSRA’s AML Rulebook sits over the federal regime under Federal Decree-Law No. 20 of 2018, applies the FATF Travel Rule with no de minimis threshold, and requires sanctions screening against the UN Consolidated, UAE Local Terrorist, and OFAC SDN lists. Once granted, the FSP is indefinite but carries continuous obligations: audited financials, regulatory returns, an MLRO report to the UAE Financial Intelligence Unit, annual supervisory fees, and independent client-asset audits for Custody and MTF operators. For most operators the real constraint is not designing the framework but evidencing its operation at supervisory visits.

Application Process and Timeline (AIP to FSP)

FSRA authorisation follows a structured two-gate process: pre-application engagement, then a formal application that leads to an Approval-in-Principle (AIP), then operational readiness, then the Financial Services Permission (FSP) grant. The AIP is the regulator’s conditional sign-off; the FSP is the operating licence. Realistically the whole route runs 6 to 18 months from first FSRA engagement to a granted permission, with advising and arranging mandates at the faster end and Custody or MTF operation at the slower end.

In short: Most applicants underestimate the operational-readiness phase. Receiving the AIP is not the licence: several months of ADGM office buildout, senior-officer onboarding, systems testing, and policy finalisation still stand between AIP and the FSP.

Applications run in English under English common law, which removes the translation and legal-transposition layer civil-law jurisdictions impose. Forming the ADGM entity is the first step, covered alongside the wider UAE setup options on the Dubai and UAE company formation page. In outline:

Stage 1 4–8 weeks

Entity Formation and Planning

Incorporate the ADGM entity, confirm the Regulated Activities and PRU capital category, engage advisers, and begin senior-officer recruitment.

Stage 2 4–8 weeks

FSRA Pre-Engagement

Informal pre-application meetings to confirm activity classification, Accepted Virtual Asset notifications, and the regulatory business model before formal filing.

Stage 3 8–16 weeks

Application Preparation

Compile the Regulatory Business Plan, financial projections, AML/CFT and technology governance, fit-and-proper packs, the wind-down plan, and insurance attestations.

Stage 4 12–24 weeks

FSRA Review to Approval-in-Principle

FSRA reviews the application across several rounds of questions and senior-officer interviews, then issues the AIP naming the operational-readiness conditions. The AIP is not a licence.

Stage 5 12–24 weeks, then grant

Operational Readiness and FSP Grant

Office fit-out, systems and penetration testing, senior-officer onboarding, banking, insurance, board first meeting, and base capital evidenced. FSRA verifies readiness, then issues the FSP and supervision begins.

The bottleneck is rarely FSRA’s substantive review; it is the operational-readiness phase after the AIP, where office fit-out, onboarding, systems testing, and policy finalisation routinely add several months. The cycle is best compressed by submitting an application that anticipates every reasonable supervisory question on first filing. An ADGM build is institutional, with senior-officer payroll, insurance, and the ADGM office the dominant cost lines, and year-one totals run materially higher than a comparable EU MiCA build.

Taxation

An ADGM entity sits within the UAE’s low-tax federal regime: 9% corporate tax above an AED 375,000 threshold, a 0% Qualifying Free Zone Person rate where conditions are met, no personal income tax, and no withholding tax. Virtual-asset transfer, conversion, and custody are VAT-exempt financial services from 1 January 2018.

Tax TypeRateCrypto Application
Corporate Income Tax (federal)9% above AED 375,000; 0% belowApplies to all UAE entities. Threshold per tax period.
Corporate Income Tax (Qualifying Free Zone Person)0% on Qualifying IncomeFree-zone VASPs meeting QFZP conditions retain 0% on Qualifying Income; non-qualifying income subject to 9%.
Domestic Minimum Top-up Tax (Pillar Two)15%Multinational groups with consolidated revenue ≥ EUR 750 million, fiscal years from 1 January 2025.
VAT5% standard; 0% exempt on VA transfer, conversion, custodyVirtual-asset transfer, conversion, and custody are exempt financial services (retroactive to 1 January 2018); services charged for an explicit fee attract 5%.
Withholding tax0%No WHT under federal law (except certain bank-related cases).
Personal income / capital gains tax0%No personal income tax; no CGT for individuals (corporate gains taxed at 9%).

The QFZP 0% rate is not automatic. It requires five conditions to be met continuously (adequate substance, Qualifying Income predominance, the de minimis test, no election to mainland taxation, and arm’s-length transfer pricing with audited accounts), and virtual-asset trading and custody are not on the published list of Qualifying Activities, so the position must be advised case-by-case. The common mistake is assuming ADGM incorporation alone secures the 0% rate. It does not. The 15% Domestic Minimum Top-up Tax applies only to multinational groups with consolidated revenue at or above EUR 750 million, leaving standalone ADGM operators unaffected.

Banking

Banking access for an ADGM-licensed firm is materially better in 2026 than in 2024, helped by FSRA regulatory clarity, the UAE’s FATF and EU delisting, and ADGM’s institutional brand. It remains a structured process, not a default outcome: an FSP does not equal a bank account. The largest UAE commercial banks now run virtual-asset onboarding desks, while a licensed EU or Swiss EMI is often used for operational accounts. Onboarding typically takes three to six months, so arrange more than one provider in parallel.

Banking and payments are one of our core services. For the firms we license in the jurisdictions we serve, we arrange banking through a controlled network of providers we work with directly. See the Banking and Payments page for how we approach it.

FATF Status & International Standing

The UAE was removed from the FATF “Jurisdictions under Increased Monitoring” list on 23 February 2024 following reforms including a specialist financial-crimes court, beneficial-ownership transparency upgrades, and intensified enforcement, and from the EU AML high-risk third-country list in 2025. As of June 2026 it is off all FATF lists and under standard follow-up. The practical effect is that EU correspondent banks no longer apply blanket enhanced due diligence to UAE counterparties, which underpins ADGM’s standing as a credible institutional jurisdiction.

EU Market Access

In short: An ADGM licence does not grant access to the EU market. Operators serving EU residents must either obtain a separate CASP authorisation in an EU member state or fall within the narrow reverse solicitation exemption under MiCA Article 61, which ESMA restricts to isolated, genuinely unsolicited contacts.

An ADGM FSP confers no EU passporting rights, and MiCA contains no third-country equivalence regime. ESMA reads solicitation broadly: EU-targeted marketing, EU-language content, geo-targeted advertising, EU influencer engagements, or use of EU country-code domains all void the exemption. Operators with a material EU client base should obtain a parallel CASP authorisation; Cyprus is a common choice and one of the jurisdictions we license in. For full detail, see Reverse Solicitation Under MiCA →.

Advantages and Limitations

ADGM combines English common law, a first-mover regulator brand, tax efficiency, and post-delisting reputational durability, calibrated to professional and institutional clients. The trade-offs are premium cost relative to MiCA jurisdictions, real substance requirements, a professional-only client perimeter, and no EU passporting.

  • English common law with ADGM’s own independent courts. Contracts, security interests, and disputes follow English-law principles directly, which institutional investors and counterparties value.
  • First-mover regulator brand. FSRA published the world’s first comprehensive crypto framework in 2018; roughly 40% of its virtual-asset applicants are headquartered outside the UAE, reflecting international credibility.
  • 0% Qualifying Free Zone Person rate on Qualifying Income. Lower effective tax than most credible crypto jurisdictions when the conditions are met.
  • 100% foreign ownership in ADGM as a federal financial free zone.
  • Post-FATF, post-EU AML delisting removed enhanced-due-diligence overhead for international banking and counterparty relationships.
  • Single consolidated FSP. Multiple Regulated Activities sit within one Financial Services Permission, rather than a stack of activity-specific licences.
  • × Premium cost relative to MiCA jurisdictions. An ADGM build is materially more expensive than a comparable Cyprus or Estonia MiCA build, driven by senior-officer payroll, insurance, and the ADGM office.
  • × Professional and institutional clients only. ADGM is not built for retail virtual-asset distribution; a retail product is routed through Dubai’s VARA instead.
  • × Physical-presence and substance requirements are real and enforced. Registered addresses without operations fail at both authorisation and QFZP tax assessment.
  • × No EU passporting. An ADGM FSP does not authorise marketing to EU clients post-MiCA; operators targeting the EU obtain a separate CASP authorisation or rely on the narrow reverse solicitation exemption.
  • × Prohibited asset categories. Privacy tokens and algorithmic stablecoins may not be used within ADGM regulated activity.

How ADGM Compares

The first comparison is within the UAE: ADGM is institutional and professional-only, while Dubai’s VARA is retail-permissive across seven categories, so client base usually settles the choice (see the Dubai and UAE guide). Beyond the UAE, ADGM competes with Hong Kong and Singapore as Asia-Pacific institutional hubs and with Cyprus as the EU alternative for operators that need passporting.

FactorAbu Dhabi (ADGM FSRA)Hong Kong (SFC)Singapore (MAS)Cyprus (CySEC)
Client BaseProfessional / institutionalProfessional + vetted retailProfessional + retail (capped)Retail + professional
Timeline6–18 months12 months+6–12 months8–14 months
Min. CapitalUSD 250k–500k + EBCMHKD 8m≈ $1.02MSGD 250k≈ $192KEUR 50k–150k
Corporate Tax9% federal / 0% QFZP16.5%17%15% (from 1 Jan 2026)
Legal SystemEnglish common lawCommon lawCommon lawEU civil law
EU PassportingNoNoNoYes (MiCA)
Best ForInstitutional, common-lawAPAC exchangesAPAC paymentsEU market access

When ADGM Is the Right Choice

ADGM fits if your clients are professional or institutional, if your investors and counterparties value English-common-law structures and an independent court, if you need a 0% effective tax rate on qualifying income with a credible substance story, and if you can absorb the institutional premium. Consider alternatives if your core market is retail (Dubai’s VARA fits better), if a material share of revenue is or will be EU-sourced (Cyprus offers MiCA passporting at lower cost, and is one of the jurisdictions we license in directly), or if Hong Kong or Singapore carries more weight with your APAC investors. If you are weighing ADGM against a route we deliver, we are happy to talk it through.

Common Mistakes in ADGM Applications

Most failures originate before the formal submission, in the planning and personnel decisions taken in the first 90 days. The recurring errors:

  • Choosing ADGM when the market is retail. An operator whose core market is retail hits the conduct perimeter and is usually better served routing retail product through Dubai’s VARA. Settle the regulator choice by client base before forming any entity.
  • Treating the AIP as the licence. The Approval-in-Principle is conditional sign-off, not authorisation; several months of operational-readiness conditions and capital and staffing commitments still stand between AIP and the FSP grant.
  • Appointing senior officers for cost reasons. FSRA tests whether the SEO, MLRO, and Compliance Officer have the seniority and industry knowledge to challenge the business; junior or part-time candidates are routinely rejected at fit-and-proper stage.
  • Treating the RegLab as a shortcut. The sandbox is a restricted-scope testing environment, not a substitute for full authorisation when scaling commercially.

Frequently Asked Questions

Eligibility & Choosing the Regulator
ADGM or Dubai’s VARA, which is better for a crypto business?

ADGM FSRA suits institutional-only, common-law-preferred firms: broker-dealers, custodians, multilateral trading facilities, and asset managers serving professional clients who want a regime aligned with English law and an established international-financial-centre brand. Dubai’s VARA suits operators targeting retail and the broadest single-licence activity reach across seven categories. The choice depends on client base, activity profile, and whether English common law matters to your investors. For the full VARA, DFSA, and CBUAE picture, see the Dubai and UAE crypto-licensing guide.

Does ADGM FSRA accept retail clients?

No. The ADGM virtual-asset regime is built around professional and institutional clients, and retail virtual-asset offerings are tightly constrained. Operators whose core market is retail typically route the retail product through VARA in Dubai and reserve ADGM for the institutional book. This professional-client orientation is the single clearest line between the ADGM and VARA regimes.

Process & Timeline
What is the difference between Approval-in-Principle and a Financial Services Permission?

Approval-in-Principle (AIP) is FSRA’s conditional sign-off: the regulator is satisfied with the business case and senior-officer fitness in principle and names the operational-readiness conditions to satisfy before authorisation. The Financial Services Permission (FSP) is the operating authorisation itself, granted once those conditions (office, capital deposit, staffing, systems, insurance) are met and verified. The AIP is not a licence and does not authorise live virtual-asset activity. Most timeline slippage happens between AIP and FSP, in the operational-readiness phase, not during the substantive review.

How long does ADGM FSRA licensing take?

Realistically 6 to 18 months from first FSRA engagement to a granted Financial Services Permission, depending on activity complexity and application quality. Arranging and advising mandates sit at the faster end; operating a Multilateral Trading Facility or providing Custody sits at the slower end. The bottleneck is typically the operational-readiness phase after Approval-in-Principle: office fit-out, senior-officer onboarding, systems testing, and policy finalisation routinely add several months.

Tax & Substance
Does an ADGM crypto entity automatically get the 0% corporate tax rate?

Not automatically. The UAE levies 9% federal corporate tax on profits above AED 375,000. Qualifying Free Zone Person status preserves a 0% rate on Qualifying Income, but requires continuous compliance with five conditions: adequate substance, Qualifying Income predominance, the de minimis test, no election to mainland taxation, and arm’s-length transfer pricing with audited accounts. Virtual-asset activities are not on the published list of Qualifying Activities, so the position must be advised case-by-case. Engage a specialist tax adviser before incorporation, not after.

Do you need to be a UAE national or have a UAE national partner?

No. ADGM permits 100% foreign ownership by default as a federal financial free zone. UAE-resident senior officers (the Senior Executive Officer, the Money Laundering Reporting Officer, and the Compliance Officer) are required and must hold UAE residence visas, typically sponsored by the licensed entity. Full foreign ownership does not remove the need for genuinely UAE-resident senior officers, and both must be planned for from incorporation.

Considering ADGM for your crypto business?

We obtain crypto licences in Lithuania, Cyprus, Gibraltar, Malta, Poland, Switzerland and Bosnia, and we handle the formation and banking around them. Tell us what you are building and we will map the route.

Banking & Payments

A company and a licence still need a bank account

Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.

Explore banking & payments →

Tomberg & Partners

Tell us what you need to build.

Speak with our team about formation, licensing, banking, or the operating structure your business needs.

Book a free consultation