Planet

Cryptocurrency crime in the UAE

The UAE has rapidly transformed into a global crypto hub, attracting startups, investors, and international projects. However, the greater the interest in digital assets, the more active criminal schemes become. Courts and regulators in the UAE are recording a rise in cases related to fraud and illegal transactions. For business owners, this is not just statistics but real risks: from the freezing of bank accounts to criminal investigations. The task of every market player is not only to comply with the law but also to be prepared for any inspections. Professional legal support is becoming a necessary condition for survival and growth in this market.
Our legal company helps businesses and private clients minimise risks and act strictly within the framework of the law. We develop AML/KYC compliance strategies, provide support during inspections, and offer consultations on licensing and asset protection. In cases of suspicion of involvement in crypto-crime, we provide prompt legal support and representation in UAE government bodies.

Contact Cryptocurrency Lawyers!

How the UAE regulates cryptocurrencies

In the United Arab Emirates, cryptocurrencies and virtual assets (VA/VASPs) are regulated by a complex system combining federal rules and free zone regulations. At the federal level, the central bank (CBUAE) and the Securities & Commodities Authority (SCA) establish key principles, including AML/KYC requirements, compliance with FATF rules, mandatory adherence to the Travel Rule, and the storage of client information for up to 8 years.

In Dubai, special oversight is carried out through the Virtual Assets Regulatory Authority (VARA), established in 2022 under Law No. 4. VARA licenses and regulates VASP activities in the emirate (excluding the financial zone DIFC), including exchanges, brokers, wallets, and advisory services. In financial zones, different regulations apply: in ADGM, crypto regulation is overseen by the Financial Services Regulatory Authority (FSRA), while in DIFC it is handled by the Dubai Financial Services Authority (DFSA).

To obtain a VASP licence, it is necessary to comply with strict AML/KYC requirements: customer verification (CDD/EDD), monitoring of suspicious transactions (SAR), adherence to the Travel Rule, and other anti-money laundering measures. It is also mandatory to submit an application with a complete set of documents, including a business model, monitoring procedures, and compliance policy.

Legal cryptocurrency activity includes exchange, storage, brokerage services, consulting, payment and token issuance platforms depending on the region and regulatory authority. DMCC (a free zone in Dubai) has been offering a licence for OTC cryptocurrency trading since 2018, but without the possibility of launching ICOs or a full-fledged exchange. Furthermore, in 2024–2025, the central bank issued regulations for stablecoins, introducing restrictions on their use in payment operations and licensing requirements.

Common types of cryptocurrency crimes in the UAE

The UAE has become one of the key centres of the global crypto industry, offering transparent regulation and licensing. However, the rapid growth of the industry has led to an increase in crimes involving digital assets. The country’s authorities pay special attention to combating illegal practices to maintain investor trust and protect the financial system. Let us consider the most common types of cryptocurrency crimes in the Emirates.

Fraud and investment scams

Classic cryptocurrency fraud schemes include promises of high returns, the creation of fake investment platforms, and pyramid structures. Fraudsters often attract investors through social media, promising “guaranteed income” or “secret algorithms.” Many schemes disguise themselves as legitimate projects, which is particularly dangerous for private investors. The problem is exacerbated by the international nature of transactions: funds are quickly transferred beyond jurisdictions, making investigations more difficult. Authorities in the UAE, together with Interpol and FATF, have intensified measures against such scams, including blocking websites and arresting scheme initiators. However, the main protection remains increased awareness among investors themselves and verifying company licences before investing.

Money laundering using cryptocurrencies

Cryptocurrencies are often regarded by criminal organisations as a tool for masking the origin of funds. In the UAE, this raises particular concern due to the country’s status as a global financial centre. Typical laundering mechanisms include transaction mixing (mixers/tumblers), transferring assets through decentralised exchanges, and using anonymous tokens. Such operations complicate the tracking of transaction chains and require the application of advanced blockchain analytics tools. The Central Bank and VARA have mandated licensed companies to implement monitoring systems and submit reports on suspicious activities. Violating these requirements may result in licence revocation and criminal liability.

Unlicensed cryptocurrency trading platforms

Trading on platforms without a VARA, FSRA, or DFSA licence is considered illegal. Such platforms do not ensure compliance with AML/KYC, which increases the risk of fraud, asset loss, and involvement in illegal schemes. UAE authorities regularly publish lists of illegal operators and warn citizens about the risks of using them. Moreover, operating without a licence can lead to criminal prosecution of organisers, including hefty fines and prison sentences. For investors, the consequences are also significant: funds on unlicensed exchanges are not protected by regulators or courts. Therefore, the most important rule remains verifying the licence status of a trading platform before registering and investing.

Phishing and wallet theft

Phishing remains one of the most common methods of cryptocurrency theft in the UAE. Malefactors create fake exchange websites, send emails with fraudulent links, and spread malicious software. The goal is to obtain private keys or access to the wallet owner’s seed phrase. A common method is cloning the interface of well-known crypto platforms and luring users through social media advertisements. Additionally, cybercriminals exploit breaches of cloud services where investors store data for wallet access. UAE authorities actively warn users and recommend storing crypto assets in cold wallets and using two-factor authentication. Nevertheless, due to psychological tricks, phishing attacks remain highly effective.

Pump-and-dump schemes

Pump-and-dump schemes are based on artificially inflating the value of a little-known token through mass purchasing and aggressive promotion on social media and messengers. Once a peak is reached, organisers abruptly sell off assets, crashing the price and leaving retail investors with losses. In the UAE, such actions are classified as market manipulation and are punishable under securities and virtual assets legislation. To detect such schemes, regulators use trading volume analytics and monitoring of suspicious transactions. Despite strict measures, the problem remains relevant as these schemes are often coordinated in closed international chats. Participation in such manipulations in the UAE is subject to severe fines and criminal liability.

The use of cryptocurrencies for financing terrorism

One of the most serious threats is considered to be the use of cryptocurrencies for financing prohibited organisations. The anonymity and cross-border nature of transactions make crypto-assets a convenient tool for bypassing traditional banking channels. The UAE authorities actively cooperate with international structures to monitor such operations, including Interpol and FATF. Licensed companies are required to track transactions and report suspicious activities to the country’s financial intelligence unit. The use of cryptocurrencies for financing terrorism entails criminal penalties, up to long-term imprisonment. The state is investing in blockchain analysis technologies to effectively block such schemes at early stages.

Punishments for cryptocurrency crimes in the UAE

  • Hacking, theft of keys and attacks on systems
    Replacing wrongdoers in crypto-assets, hackers and cybercriminals face severe sanctions. The minimum term is 7 years of imprisonment with a fine of up to AED 1.5 million if the crime involves theft or hacking of government systems. If the hacking resulted in damage to information systems, the minimum is 1 year of imprisonment and a fine of up to AED 3 million.
  • Unauthorised crypto activities, promotions and platforms
    Advertising or conducting operations in conjunction with unlicensed cryptocurrencies is strictly prohibited. For promoting or creating websites to attract funds without a licence – punishment of up to 5 years in prison and a fine from AED 250,000 to AED 1 million.
  • Money laundering through crypto-assets
    Federal Decree-Law No. 20/2018 provides strict liability for individuals and legal entities: fines of up to AED 5 million and/or imprisonment of up to 10 years. Legal entities may face fines of up to AED 50 million, revocation of licence, and prohibition of activity. Foreign violators may be deported by court decision.
  • Violations of AML/CFT: failure to submit STR or “tip-off”
    For failure to submit a report on suspicious transactions – up to AED 1 million fine and/or imprisonment. For warning a client about an inspection – a minimum of 1 year imprisonment and a fine of up to AED 500,000.
  • Common cybercrimes with cryptocurrencies
    For fraud, phishing, and the distribution of malicious codes, fines of up to AED 500,000 and imprisonment of up to 3 years are provided. If the crime has caused harm to national security – imprisonment of up to 15 years and a fine of up to AED 1 million.
  • Additional consequences
    Assets related to the crime may be confiscated by the court. Companies lose their licences, making business impossible. For foreign citizens, deportation and a ban on return are possible.

How to protect yourself?

The first step when working with cryptocurrencies in the UAE is to ensure that the platform or intermediary has a valid licence. In Dubai, the crypto business is regulated by the Dubai Virtual Assets Regulatory Authority (VARA). Licences are issued for brokerage activities, custody, exchange, and marketing of digital assets. In Abu Dhabi, the Financial Services Regulatory Authority (FSRA) operates within the Abu Dhabi Global Market (ADGM) zone. In DIFC, oversight is conducted by the Dubai Financial Services Authority (DFSA). Public registers are published on the websites of these regulators. Working with companies outside these lists poses a direct risk of losing funds and facing criminal liability.

Fraudsters often disguise themselves as investment funds or launch tokens without real value. To avoid becoming a victim:

  1. Do not trust projects with guaranteed profitability (“20% per month”).
  2. Check the white paper and the project team, look for them on LinkedIn and professional media.
  3. Study the roadmap: serious projects show plans and partners, not just promise rapid growth.

Use only official channels and wallets. Most attacks are carried out through phishing websites and fake applications. To minimise the risk:

  1. Download wallets and exchange applications only from official websites or stores like Google Play / App Store.
  2. Always check the website address: fraudsters use clones with minimal changes in the domain.
  3. Set up two-factor authentication and store keys on hardware wallets.

The UAE actively applies international AML/CFT standards. Violating these rules can lead not only to losses but also to a criminal case. We recommend:

  1. Always complete verification on platforms (KYC).
  2. Document the origin of funds for large transactions.
  3. Do not work with anonymous intermediaries and the “grey” P2P market.

Work with lawyers and consultants. For foreigners, it is especially important to understand the specifics of UAE legislation. Mistakes can cost not only money but also freedom. Legal support will help check contracts and agreements with exchanges or investors, organise a corporate structure to minimise tax and legal risks.

What to do if you are accused or involved in a crime?

An accusation of a crime is a stressful and dangerous situation that can affect freedom, reputation, and the future. Even if it is a misunderstanding or a mistake, it is important to understand how to behave and what steps to take. Correct actions from the very first moments help reduce risks and build an effective defence.

The first reaction to an accusation is often emotional: anger, fear, an attempt to argue with the police. However, resistance or rude behaviour can worsen the situation. It is important to maintain a calm tone and not take actions that could be interpreted as an attempt to evade or exert pressure. Even if you are confident in your innocence, you should not try to prove it yourself on the spot.

In most countries, the accused has key rights:

  • The right to remain silent: you are not obliged to answer police questions without a solicitor.
  • The right to legal protection: you have the right to a solicitor from the moment of detention.
  • The right to respectful treatment: authorities cannot use torture, threats, or unlawful pressure.

Knowledge of these rights helps to avoid mistakes that could later complicate the defence.

If you are summoned for questioning or detained, do not sign any documents without familiarising yourself with their content and consulting a lawyer. Answer questions briefly and only in the presence of a solicitor. Do not make confessions or assumptions about the details of the case; every word can be used against you. Maintain a respectful attitude: this will help reduce tension and avoid giving grounds for additional sanctions.

If you do not seek the help of a lawyer, you may sign a confession under pressure, which will then be difficult to contest. Incorrect answers can be interpreted as an admission of guilt. The lack of procedural oversight increases the risk of unlawful evidence being used against you. Even if the accusation is unfounded, without competent defence, the chances of acquittal decrease.

Contact lawyers specialising in cryptocurrency crimes

If you have fallen victim to such a crime or are accused of breaking the law, it is important to act quickly and professionally. Our lawyers have experience in handling cases related to cryptocurrencies and know how to work with local regulators, financial investigations, and international authorities.

We help clients analyse risks, gather evidence, protect assets, represent interests in the police and courts. If necessary, we interact with the Central Bank of the UAE, financial crime units, and international organisations to protect you at all levels. Particular attention is paid to cases with a foreign element, where experience in working within different legal systems is important.

If you have found yourself involved in a cryptocurrency investigation or have become its victim, do not delay seeking help. Contact our lawyers right now to receive consultation and reliable protection of your interests.

FAQ

Is cryptocurrency illegal in the UAE?

No, cryptocurrency is not illegal in the UAE. Exchange, storage, and trading of crypto assets are permitted but require licensing and compliance with regulatory norms. Regulation is carried out through authorities such as VARA in Dubai, FSRA in ADGM, DFSA in DIFC, and SCA at the federal level.

Is the website crypto.com allowed in the UAE?

Yes, Crypto.com is authorised and licensed in the UAE through its Dubai subsidiary CRO DAX Middle East FZE, which received full operational approval from VARA. Furthermore, in 2025, the platform expanded its operations by obtaining a limited licence to offer derivative instruments.

Are the UAE a cryptocurrency-friendly country?

Yes, the UAE is one of the most crypto-friendly jurisdictions. There are no taxes on capital gains and personal income here, and a developed infrastructure for VASP (VARA, FSRA, DFSA) licensing has been created, which makes the country attractive for crypto investors and companies.

Is tax levied on cryptocurrency in the UAE?

No, the income of individuals from cryptocurrency transactions is not taxed. There is neither income tax nor capital gains tax. This does not apply to entrepreneurial activities. Legal entities working with crypto-assets are subject to a corporate tax of 9% if the income exceeds AED 375,000 per year.

Cliodhna Joyce-Daly
Strategic Legal Consultant and Jurisdictional Expert
Specializing in international law, Cliodhna Daly brings extensive experience as an Irish qualified lawyer to the field of extradition in Dubai. Her deep knowledge and practice in criminal defence and immigration law, along with her participation in international human rights advocacy, enable her to provide effective and comprehensive legal support to those facing extradition processes in the UAE.

    Planet
    Planet