VARA publishes AML/CFT Business Risk Assessment Guidance for Dubai VASPs
Dubai VARA has issued guidance focused on business-wide AML/CFT risk assessments, reinforcing how licensed virtual asset service providers should identify, document and manage financial-crime exposure.
On 12 June 2026, Dubai's Virtual Assets Regulatory Authority announced AML/CFT Business Risk Assessment Guidance for virtual asset service providers.
The guidance forms part of VARA's continuing focus on risk-based compliance and the implementation of UAE anti-money laundering, counter-terrorist financing and proliferation-financing requirements across the virtual asset sector.
A business risk assessment is a foundational compliance document. Dubai VASPs should review whether their methodology adequately covers customer, product, delivery-channel, transaction, geographic and emerging virtual-asset risks and whether the assessment is connected to policies, controls and monitoring.
Who is affected
VARA-licensed VASPs, licence applicants, compliance officers, MLROs, exchanges, custodians, brokers, transfer providers and virtual asset issuers operating in or from Dubai.