#
VASPs under VARA are subject to a Compliance and Risk Management Rulebook covering AML/CFT controls, risk assessments, client due diligence, suspicious-transaction monitoring/reporting, the FATF Travel Rule, targeted financial sanctions compliance, and record keeping. The UAE Virtual Assets Travel Rule is codified federally under Cabinet Resolution No. (134) of 2025, which applies alongside federal AML/CFT laws referenced in the VARA rulebook.
Beyond the VASP-facing rulebook, there is evidence of an active federal-level financial-crime risk-assessment cycle feeding into these obligations: VARA has published a UAE Proliferation Financing National Risk Assessment (PF NRA) for 2026 together with required actions, indicating that AML/CFT compliance expectations for VASPs are being informed by a broader, periodically updated national risk-assessment process rather than a static rulebook alone.
This module's claims all derive from VARA's own binding rulebook text and a named federal Cabinet Resolution, giving the regime a comparatively mature and clearly codified character relative to some of the jurisdiction's other modules. That said, the equivalent DFSA- and ADGM-specific AML/CFT particulars for DIFC- and Abu Dhabi-licensed entities were not independently verified in this research pass, so the full picture across all licensing zones is not yet confirmed to the same standard.
Outlook
The Travel Rule and VARA's Compliance and Risk Management Rulebook appear stable and unlikely to see near-term structural change; the more active area to watch is how the 2026 Proliferation Financing National Risk Assessment's required actions feed into updated VASP compliance expectations over the coming cycles, and whether DFSA and ADGM publish or clarify their own AML/CFT particulars in parallel with VARA's existing framework.
no periodic updates on record for this sub-brief
Sources and findings (4)
- T1 · VARAUAE Cabinet / VARA — The UAE Virtual Assets Travel Rule is set out under Cabinet Resolution No. (134) of 2025, referenced within VARA's Federal AML/CFT Laws framework.retrieved M5bindingin forcenew
- T1 · VARAVARA — VARA's Compliance and Risk Management Rulebook mandates AML/CFT controls, risk assessments, client due diligence, suspicious transaction monitoring and reporting, the FATF Travel Rule, compliance with targeted financial sanctions, and record keeping for licensed VASPs.retrieved M5bindingin forcenew
- T1 · VARAVARA — Entities seeking a VARA licence must exhibit compliance with AML/CFT requirements as part of issuance and licensing approval processes, including for Fiat-Referenced Virtual Asset issuers.retrieved M4bindingin forcenew
- T1 · VARAVARA — VARA published a UAE Proliferation Financing National Risk Assessment (PF NRA) 2026 and required actions, indicating an active federal-level financial-crime risk-assessment cycle feeding into VASP compliance obligations.retrieved M3non-bindingnew