← Regulatory Pulse
UAEAML/CFTGuidance

VARA publishes AML/CFT Business Risk Assessment Guidance for Dubai VASPs

Dubai VARA has issued guidance focused on business-wide AML/CFT risk assessments, reinforcing how licensed virtual asset service providers should identify, document and manage financial-crime exposure.

Published 12 June 2026Guidance

On 12 June 2026, Dubai's Virtual Assets Regulatory Authority announced AML/CFT Business Risk Assessment Guidance for virtual asset service providers.

The guidance forms part of VARA's continuing focus on risk-based compliance and the implementation of UAE anti-money laundering, counter-terrorist financing and proliferation-financing requirements across the virtual asset sector.

Why it matters

A business risk assessment is a foundational compliance document. Dubai VASPs should review whether their methodology adequately covers customer, product, delivery-channel, transaction, geographic and emerging virtual-asset risks and whether the assessment is connected to policies, controls and monitoring.

Who is affected

VARA-licensed VASPs, licence applicants, compliance officers, MLROs, exchanges, custodians, brokers, transfer providers and virtual asset issuers operating in or from Dubai.