A UAE company can hold, receive and spend crypto without a virtual asset licence. The line is crossed by handling somebody else’s — and that is easier to do by accident than the market admits.

A client in another country wants to settle a large invoice in tokens because the wire keeps failing. Your finance director wants a slice of the reserves held in bitcoin. A supplier has offered a discount for taking payment that way, and a competitor has just published a post about how they accept crypto now.

None of that makes you a crypto business, and all of it is a decision with a line somewhere in it. The published material in this market divides into two halves that both miss you: guides on how blockchains work, and guides on what it costs to become a licensed virtual asset firm. What is missing is the middle — the positions an ordinary company can actually take, and the specific act inside each one that stops being ordinary.

One question decides all of it, and it is not about the token

Every UAE virtual asset regime draws its perimeter around activity performed for another person: holding their asset, carrying their order, converting on their behalf, advising them, lending to them, marketing to them. The asset is what the activity concerns. The activity is what is licensed. Dubai's Law No. 4 of 2022 defines a virtual asset by what it does rather than by what it is called, which is precisely why the label on the token answers nothing and the identity of the person whose asset it is answers everything.

That gives you a grammar test that works in one pass. Write down what you are about to do, in a single sentence. If a second person appears in that sentence as the owner of the asset or the originator of the order, you are at the perimeter. If the sentence only has you in it, you are not.

Two companion pages carry the parts this one does not. Being paid in crypto does not make you a crypto business covers what a holding does to your accounts, your audit and your free zone tax status — the consequences once you are on the safe side of the line. Virtual asset licensing in the UAE covers the other side of it, including who should not attempt it. This page is about the line itself.

Six positions, and the act inside each that crosses

Read the crossing column again and notice what every entry has in common. None of them is about a different asset. All of them are about a different person.

The last column is worth reading twice as well, because it is the part boards get wrong before they get anything else wrong: there is no single UAE crypto regulator to write to. Which of the five bodies reads your file is decided by the verb you have chosen, and there is no UAE crypto regulator — there are five sets out that mapping verb by verb.

Treasury holding: where own funds stop being own funds

A company buying tokens with its own money and holding them for its own account is doing something ordinary. Self-custody and a third-party custodian are both ordinary; engaging a custodian makes somebody else responsible for keys, and it does not make you a custodian.

Four variations quietly change the answer, and three of them are common in owner-managed businesses.

The first is the shareholder's coins in the company's wallet. It is convenient, it is usually informal, and it means the company is holding an asset belonging to another person. The second is group treasury: one entity in a group holding the positions of the others "for efficiency". The third is lending the position out, or accepting someone else's as collateral. The fourth is staking — staking your own holding is one thing, and offering staking to other people is a regulated activity in its own right, which is why the ADGM FSRA finalised a framework for it on 29 April 2026.

There is also a ceiling on the position that has nothing to do with whose money it is. VARA's published position is that traders using their own funds, with no clients, are not required to hold a licence at this time, and that above a rolling volume the position changes. No figure appears on this page, deliberately: competing numbers circulate and the FAQ is revised without notice. If your plan depends on a volume, confirm the current threshold with VARA before the plan depends on it.

Accepting payment: two questions, and only one of them is about licensing

The licensing question is usually easy. A customer settling your invoice is not receiving a service from you in respect of their asset — they are paying you — so the ordinary case sits outside the perimeter.

The question that is live, and that almost nothing in this market addresses properly, belongs to a different building. Whether a particular token may lawfully settle a sale inside the UAE is a Central Bank matter under its Payment Token Services Regulation, issued on 7 June 2024. No article, restriction or token category from that regulation is stated here, because its text was not read for this page. It should be read against your specific token before you accept one, and read in its current form rather than in somebody's summary of it.

Three ordinary commercial arrangements do cross, and they turn up in e-commerce and agency businesses constantly. Holding balances for customers — a wallet, a store credit, a float — is holding somebody else's asset. Collecting payment on behalf of other sellers, as a marketplace does, is collecting third-party money. And converting the token for the customer, rather than receiving it and converting your own, inserts you into their transaction. Refunds deserve a moment's thought for the same reason: refunding in tokens at a rate you set is closer to an exchange than to a reversal.

Whether the underlying supply changes because of the settlement asset is a tax question rather than a licensing one, and it does not. That sits on the companion page with the accounting treatment and the free zone consequence, and the one-line version is that virtual assets appear nowhere on the closed Qualifying Activities list in Ministerial Decision No. 229 of 2025.

Paying suppliers: the conversion you do for yourself, and the one you do for them

Settling your own payable with your own tokens is an own-account transaction. So is buying tokens on a licensed platform in order to pay a supplier who has asked for them — you acquired an asset and you used it.

The crossing here is the most common accidental one in the UAE, and it is almost always done as a kindness. A company with a good exchange relationship helps a client, a supplier or a friend convert. Perhaps it sources the tokens for them. Perhaps it quotes them a rate. Perhaps, because the effort is real, it keeps a small margin. Each of those steps moves the transaction from your account to theirs, and the last one adds consideration. Sourcing an asset for another party at a price you set, for a spread, is the shape of brokerage and exchange activity rather than the shape of a favour.

Netting inside a group has the same problem wearing accounting clothes. If one entity settles another entity's obligations in tokens, ask whose asset moved and on whose instruction, and expect to answer that question later to a bank rather than to a regulator.

Paying people: your agreement is not the last word

You and an employee can agree a great many things commercially. What the two of you cannot do privately is satisfy the Ministry's wage machinery, which reads a specific channel and a specific filed contract.

So the honest position is narrow and this page will not go past it. Before any part of a salary is settled in tokens, establish what that machinery actually requires as to currency and evidence, and until you have that in writing, treat a token transfer as something in addition to the obligation rather than in discharge of it. Human resources is where that question belongs.

Two adjacent ideas cross the line rather than sitting near it. A scheme where the company holds tokens on behalf of staff is the company holding other people's assets. And issuing your own token as an incentive is an offering, not a benefit — Dubai's rulebook answers that in one line, and somebody else has to sell your token sets out what it says.

Marketing: the position where you touch nothing and still cross

This is the position almost nobody plans for, and the enforcement record is public.

On 7 October 2025 VARA penalised nineteen firms for unlicensed virtual asset activity and for breaches of its Marketing Regulations, with fines from AED 100,000 to AED 600,000, alongside cease-and-desist orders and a public warning against dealing with unlicensed operators. The pairing is the point: promotion is treated as an act in its own right, separate from whether you ever held or moved anything.

The practical rule for an ordinary business is short. Describe what your own business does — that you accept a token, that you hold a position — in plain factual terms. Do not promote what somebody else sells. An affiliate link to an exchange, a referral fee for introducing clients to a platform, a campaign built around a token's prospects, a "we recommend" in a newsletter: each of those is marketing a third party's product, and the fact that no asset passed through your hands is not the defence it feels like. If a campaign names a product you do not issue, get it reviewed before it runs.

Which authority holds which question

If nobody has told you which row your question sits in, you have not been advised yet. VARA has already answered the activity name on your licence is worth checking first, because for several activity names the regulator has published the answer already.

What to have on file, per position

The bank is where all of this becomes real, and the failure mode is rarely a refusal. It is a request for source of funds on a transaction you cannot evidence to the standard asked, weeks after it settled, with the account restricted while you look.

Document at the moment of the transaction. A single well-evidenced conversion is a short conversation; a pattern of undocumented ones is a decision made about you without you in the room. Banking advisory covers what banks actually test.

Where taking any of these positions is the wrong answer

You are doing it for somebody else and calling it a favour. That is the sentence with a second person in it. Rate, spread and gratitude are all irrelevant to the test.

Your model needs you to hold customer balances, even briefly. A float is somebody else's money. Design it out, or accept that you are building a licensed business and read the licensing page before spending anything.

The plan depends on a volume you cannot cap. Own-account trading sits outside the perimeter up to a threshold. A strategy whose whole point is scale will meet that threshold, and it is better to know the number now.

You cannot identify the counterparty. A customer who will only pay in tokens, at a discount, at speed, through a party you cannot name, is not offering you a payment method. That shape is older than crypto and it has never improved.

You intend to market it. If the campaign is the reason for the position, the position has a regulatory problem the accounting cannot fix.

You are in a free zone and rely on qualifying status. A meaningful token position is capable of costing that status for several periods. Hold it somewhere else and leave the operating company alone — the mechanism is on the companion page.

You are mining rather than holding. Different question entirely, and mostly not a crypto question: mining is an industrial decision before it is a crypto one.

Three things to settle before the first token moves

Which of the six positions you are actually in, and which of its crossing acts your plan sits closest to — because every one of the six is lawful until a particular act inside it is not. Whether the specific token may settle a UAE sale, established from the Central Bank's own text rather than from a summary. And what your bank will ask for on the day the fiat lands — asked before it lands, on a small transaction, while the answer is still cheap.

If the conclusion is that this is a payment and treasury question rather than a licensing one, that is the whole answer and the conversation should be short. What is worth paying for is the sentence test: write down what you are about to do, and count the people in it.

Frequently asked questions