Running a Crypto Trading Company in a UAE Free Zone? Your VAT, Corporate Tax, Accounting & AML Compliance Guide for 2026

Crypto trading company compliance in the UAE is a four-part problem: the licence, the VAT split, corporate tax, and the accounting and AML that support both. Free zones such as DMCC, IFZA, DWTC, ADGM and DIFC have made it easy to incorporate a virtual-asset business; the FTA, VARA and the federal AML regime have made it equally easy to fall out of compliance by assuming the crypto itself is the only thing that matters. Fastlane's crypto-aware accounting service handles the bookkeeping, VAT, corporate tax and AML registration for these companies, and this guide sets out what each obligation actually requires in 2026.

Do you need a VARA licence or just a free zone NOC?

A company that trades only its own funds, with no clients, normally needs a free zone No Objection Certificate rather than a virtual asset licence, subject to VARA registration once monthly rolling volume exceeds AED 1 billion; any client-facing activity — exchange, broker-dealer, custody, advisory, transfer and settlement — requires a full VARA VASP licence, and from 2026 also sits under the federal Capital Markets Authority framework. A trade licence from a free zone is never a substitute for a virtual asset services licence.

Which crypto transactions are VAT exempt under Cabinet Decision No. 100 of 2024?

Cabinet Decision No. 100 of 2024, which amended the VAT Executive Regulation with effect from 15 November 2024, exempts two things: the transfer of ownership of virtual assets, including their conversion, and the keeping and management of virtual assets where no explicit fee, discount, commission or rebate is charged — and both exemptions apply retrospectively from 1 January 2018.

The definition matters. A virtual asset is a digital representation of value that can be traded or converted digitally and used for investment purposes. That covers Bitcoin, Ethereum and most tokens. It expressly excludes digital representations of fiat currency and financial securities, which is why stablecoins and tokenised securities sit in a grey area (section 9). The retrospective effect also matters: a business that charged 5% VAT on crypto sales between 2018 and 2024 may be able to recover it through a voluntary disclosure, but it must also revisit input VAT it recovered on the assumption those supplies were taxable.

Exempt is not the same as zero-rated: exempt supplies carry no VAT and block recovery of the input VAT attributable to them, which is the root of the apportionment issue in section 4.

Which crypto services are taxable at 5% VAT?

Every service supplied around the asset for a consideration is taxable at 5%: exchange commissions and trading fees, brokerage, advisory and consulting, wallet management or custody where a fee is charged, platform and software subscriptions, listing fees, and crypto mining services — the FTA's public clarification VATP039 confirms that mining does not fall within the exemption.

Place of supply is where free zone crypto businesses recover the most value. Advisory, platform and brokerage services supplied to customers outside the UAE can be zero-rated under Article 31 of the VAT Executive Regulation where the recipient has no UAE presence and the service is not performed on UAE goods or property — zero-rated, not exempt, so input VAT stays recoverable. Getting the customer's location evidenced (KYC data does double duty here) is what separates a 5% liability from a 0% one.

When must a crypto company register for VAT, and how does input VAT apportionment work?

VAT registration is mandatory once taxable supplies exceed AED 375,000 in the past twelve months or are expected to within the next thirty days, and voluntary from AED 187,500; exempt transfers do not count toward the threshold, but a business making both exempt and taxable supplies can recover only the input VAT attributable to its taxable supplies and must apportion the rest.

The apportionment mechanics: input VAT directly attributable to taxable supplies (the trading platform's hosting, the advisory team's software) is fully recoverable; input VAT directly attributable to exempt supplies (a custody-only cold-storage facility with no fee) is not recoverable at all; residual input VAT (rent, audit fees, general IT) is recovered in the proportion that taxable supplies bear to total supplies, computed per return and trued up annually under the FTA's standard method. A pure proprietary trader with no fee income makes only exempt supplies, has no recoverable input VAT, and normally has no reason — and no right — to register.

Fastlane handles VAT registration for AED 199 and VAT return filing from AED 149, including the exempt/taxable apportionment schedule that the FTA asks for first in any crypto audit.

How is a free zone crypto company taxed for corporate tax?

A free zone crypto company is a taxable person paying 9% on taxable income above AED 375,000, and reaches 0% only as a Qualifying Free Zone Person whose income is qualifying income under Ministerial Decision No. 229 of 2025 and which meets the adequate-substance, audited-financial-statements and de minimis conditions; because proprietary trading of virtual assets is not among the listed qualifying activities, most crypto traders and exchanges should plan on 9%.

The qualifying activities list includes fund management, wealth and investment management and treasury services to related parties, each subject to regulatory oversight in the UAE, and “trading of qualifying commodities” — but qualifying commodities are physical metals, minerals, energy and agricultural commodities traded in raw form on a recognised exchange. Virtual assets are not within that definition. A VARA-licensed fund or asset manager may be able to bring regulated management fees within the qualifying-activity list; a proprietary trader or an exchange earning commissions from unrelated persons generally cannot. QFZP status also requires audited IFRS financial statements every year and, on breach, is lost for the period and the following four.

Two practical points. First, the return deadline is 9 months after year-end and applies even in a year of losses or no activity — see our guide on filing a corporate tax return with no activity. Second, crypto companies with crypto held as inventory will have fair-value movements flowing through profit, so the realisation election under MD 134/2023 only helps for assets on capital account. Fastlane's corporate tax filing from AED 249 includes the QFZP eligibility analysis and the election decisions.

How do you account for crypto under IFRS?

Under IFRS, crypto held for sale in the ordinary course of business is inventory under IAS 2 — measured at the lower of cost and net realisable value, or at fair value less costs to sell for a commodity broker-trader — while crypto held as an investment is an intangible asset under IAS 38 measured at cost less impairment or, where an active market exists, under the revaluation model; crypto received as payment is revenue at AED fair value on the date of receipt. The accounting framework itself depends on turnover: cash basis up to AED 3 million, IFRS for SMEs up to AED 50 million, full IFRS above (MD 114/2023).

Fair value needs a documented source: the closing price on a named major exchange at a stated time on the reporting date, converted to AED at the Central Bank of the UAE rate. Every transaction needs date, time, wallet or exchange, quantity, AED price, fees and counterparty. At hundreds of trades a day across several venues this is only workable with a crypto sub-ledger tool (Koinly, CoinTracker, Ledgible or similar) reconciled monthly to exchange and on-chain statements, which is how Fastlane's monthly accounting from AED 499 is run for these clients.

Worked example: a DMCC crypto exchange with AED 6M fee income

A DMCC-licensed, VARA-licensed exchange with AED 6 million of commission income, AED 2 million of fee-free custody activity, AED 1.4 million of proprietary trading gains and AED 3.9 million of costs pays roughly AED 9,000 of net VAT after apportionment and AED 281,250 of corporate tax at 9%, and cannot use QFZP for its commission income.

The two levers that change these numbers are customer-location evidence (moving commission income from 5% to zero-rated without losing recovery) and the accounting classification of the proprietary book (fair-value movements in inventory hit taxable income every year). Neither is optimised by accident; both are set up in the bookkeeping.

What AML obligations apply to crypto companies in the UAE?

Every UAE crypto business is within the AML/CFT regime under Federal Decree-Law No. 20 of 2018 as amended and Cabinet Decision No. 10 of 2019: it must register on the FIU's goAML portal, adopt a written AML policy, appoint a compliance officer or MLRO, perform customer due diligence with enhanced measures for higher-risk customers, monitor transactions, file suspicious transaction reports, apply the FATF Travel Rule to virtual asset transfers and keep records for at least five years. VARA licensees carry additional periodic risk assessments and reporting.

1. goAML registration — with the UAE Financial Intelligence Unit, before operations begin; the registration is the gateway for STR filing. Fastlane's AML compliance service from AED 349 covers registration and the policy set.
2. AML/CFT policy and risk assessment — a documented, board-approved programme proportionate to the business, refreshed at least annually.
3. Compliance officer / MLRO — a named, competent individual with authority to file reports independently.
4. Customer due diligence — identity verification, beneficial ownership, sanctions and PEP screening, source-of-funds where risk indicates, and enhanced due diligence for high-risk jurisdictions and customers.
5. Transaction monitoring — rules and analytics for unusual volume, structuring, rapid movement, mixers, and sanctioned addresses; blockchain analytics tooling is expected for VASPs.
6. Suspicious transaction reporting — STRs to the FIU via goAML without tipping off; no threshold.
7. Travel Rule — originator and beneficiary information transmitted with virtual asset transfers between VASPs, per FATF Recommendation 16 as adopted in UAE rules.
8. Records — KYC files, transaction records and compliance decisions retained for a minimum of five years.

How are stablecoins, NFTs and mining treated?

Stablecoins pegged to fiat may fall within the VAT exemption's exclusion for digital representations of fiat currency, so their transfer could be taxable pending FTA guidance; NFTs may not meet the virtual-asset definition at all, and VARA and the DFSA exclude them from their crypto frameworks; mining is outside the scope of VAT on own account and a taxable 5% service when performed for others, per VATP039.

What is the complete crypto compliance calendar?

A free zone crypto company runs six recurring obligations: corporate tax registration once, a CT return 9 months after every year-end, VAT registration when taxable income crosses AED 375,000, VAT returns 28 days after each period, monthly IFRS bookkeeping with crypto sub-ledger reconciliation, and AML programme maintenance with goAML reporting — plus an annual audit where the free zone or QFZP status requires it.

What are the penalties for non-compliance?

Late corporate tax registration costs AED 10,000 and late filing AED 500 per month for twelve months then AED 1,000 per month; VAT late registration is AED 10,000, late returns AED 1,000 then AED 2,000, and late payment 14% per annum under Cabinet Decision No. 129 of 2025; AML breaches carry fines up to AED 5 million per violation; and operating a virtual asset service without a VARA licence has drawn fines of AED 10 million.

FTA penalties block deregistration if the company ever winds up, and free zone renewal is increasingly conditional on tax status — see why unpaid penalties block CT and VAT deregistration.

Key terms used in this guide