If Dubai is where crypto goes to scale, Abu Dhabi is where it goes to be taken seriously by institutions. Not with slogans about “0% tax” or “the future of Web3,” but with a mature, English common-law financial free zone, a specialist financial regulator, and a virtual-asset framework that has been iterated since 2018.
The Financial Services Regulatory Authority (FSRA) of ADGM does not offer a generic “crypto licence.” It grants a Financial Services Permission with named virtual-asset activities: operating a trading venue, dealing, arranging, managing, advising, and providing custody in relation to accepted virtual assets and fiat-referenced tokens. That specificity is what makes the licence legible to banks, funds, auditors, and institutional clients.
Protegra maps your business to the right FSRA activities, structures the ADGM entity and operating model around them, and takes you from first application to a permission that is ready for real institutional operations.
An ADGM application is not won by picking a free-zone package and submitting a generic policy deck. It is won by aligning the activity scope, entity, capital, custody model, technology, governance, and local operating structure before FSRA tests the application.
We turn an ADGM application into an institutional business that can operate after approval.
Start your applicationnot a permission selected from a price list. We work across exchanges and multilateral trading facilities (MTFs), OTC and broker-dealer activity, custody, asset management, advisory, arranging deals, and fiat-referenced token (stablecoin) issuance and intermediation.
Your commercial description may be “exchange,” “broker,” or “crypto platform.” The regulatory answer depends on what the business actually does: whether it operates a multilateral trading facility for virtual assets, deals as principal or agent in accepted virtual assets, arranges or introduces transactions, manages portfolios or funds that invest in virtual assets, provides custody of virtual assets or keys, or issues or intermediates fiat-referenced tokens. We map the real activity before the capital requirement and application architecture are fixed.
Custody is not simply another feature added to a trading licence. FSRA’s framework treats custody, client-asset protection, and staking as distinct control perimeters, with specific requirements on segregation, access rights, reconciliation, disclosures, and rewards. Where the business combines activities, we confirm whether custody and staking must be separated or supported by an approved external provider.
FSRA expects more than incorporation and named directors. The business needs a credible AML/CFT programme, compliance ownership, risk management, technology controls, market-conduct procedures, customer disclosures, and local accountability. We build those controls around the product you will actually operate.
More than 100 virtual-asset entities now hold active licences across the UAE’s five regulatory regimes, with ADGM/FSRA and VARA together accounting for the majority of permissions. The market has grown fastest since 2025, with dozens of new licences added in a single year.
ADGM published its first comprehensive virtual-asset framework in 2018, well before most jurisdictions had dedicated crypto rules. The FSRA has iterated that framework regularly, including major updates in 2025 and 2026 covering staking, fiat-referenced tokens, and accepted virtual assets.
FSRA’s framework identifies seven core regulated activities involving virtual assets: operating a multilateral trading facility (MTF), dealing as principal, dealing as agent, arranging deals, advising, managing assets, and providing custody — plus a dedicated regime for fiat-referenced tokens.
Abu Dhabi’s value is not simply that it has a mature virtual-asset regime. It is that the framework is organised around institutional financial services, under English common law, inside a recognised international financial centre.
FSRA allows firms to apply for one or more regulated activities, but the capital, governance, custody, and operational requirements change with the scope. The correct question is not “Which licence do crypto companies get?” It is: what will your company actually do with virtual assets, client orders, wallets, and customer funds? ADGM is a separate jurisdiction with its own regulator, courts, and rulebook. An FSRA permission does not cover Dubai mainland, DIFC, federal payment-token, or onshore securities activity, where VARA, the DFSA, the CBUAE, and the federal CMA apply instead.
An MTF permission covers operating a multilateral or organised trading facility for accepted virtual assets — essentially an exchange or trading venue where multiple participants can interact under non-discretionary rules.
MTF operators face the highest base capital anchors and supervision intensity, reflecting their systemic role. The requirement is layered with expenditure-based capital and any client-asset add-ons.
Dealing permissions cover buying and selling accepted virtual assets as principal or agent, including market-making and OTC execution. Capital depends on whether the firm deals as principal or agent, whether it holds client assets, and whether it serves retail or professional clients.
Arranging and advising permissions cover introducing or matching transactions and providing personal recommendations on accepted virtual assets without necessarily holding principal risk or client assets. These activities often sit at the lower end of the capital spectrum but still require full AML/CFT, conduct, and governance controls.
Managing Assets covers discretionary portfolio management and operating collective investment funds whose portfolios include virtual assets. It is the core permission for crypto asset managers, hedge funds, venture funds, and family-office mandates investing in virtual assets.
Custody covers safekeeping and administering virtual assets on behalf of clients, including wallet management, key storage, and settlement. FSRA’s June 2025 amendments set custodian capital as the higher of a base amount (around US$250,000) or six months’ annual audited expenditure, reflecting the operational and safeguarding risks.
FSRA’s FRT regime, effective 1 January 2026, governs issuing, managing, operating, and providing custody of fiat-referenced tokens, plus a new FRT intermediation activity. Minimum capital requirements are set separately for issuers (around US$2 million) and intermediaries (around US$50,000), with additional prudential and conduct standards.
Custody should not be treated as an informal feature of another activity: its legal structure and relationship with other licensed activities must be confirmed before incorporation. FRTs are treated as regulated financial instruments within ADGM and are designed primarily for cross-border and institutional use, not general circulation on the UAE mainland.
FSRA capital is only one part of the ADGM licensing project. A realistic Year 1 estimate includes activity scope, entity setup, registered office, FSRA application and supervision fees, paid-up capital, board and key personnel, AML/CFT, technology, custody, insurance, accounting, audit, banking, and ongoing operations.
One licence, three levels — the regulator asks for exactly the same file in all three, and what changes is how much of it sits with you. The middle level is the default here, and the estimate below is built on it. Moving up or down changes our fee and nothing else — not the capital, not the state fees, not the statutory clock. Carrying a file to the decision is not a promise of approval: no adviser can give one, and an adviser who does is selling you something other than advice.
ADGM licensing is structured around the activity scope, ADGM entity, capital, local substance, operating model, and evidence submitted to FSRA. On timing: the FSRA publishes no service standard for virtual-asset applications. Its guidance sets the order — pre-application meetings, formal application, in-principle approval, Financial Services Permission, operational launch — and firms that announced both dates took a median of about twelve months from in-principle approval to permission. Sources: FSRA Guidance on Virtual Asset Activities in ADGM (VER07.100625, paras 166–171) and public ADGM announcements, checked 23 September 2026. The timings below are indicative, not a promise.
We map the business against FSRA’s regulated activities:
We also confirm that the entity will operate in ADGM and identify whether a VARA, DFSA, CBUAE, or CMA route would apply instead for other target markets.
The ADGM entity structure is established through the ADGM Registration Authority.
We prepare:
The initial engagement and pre-application materials are prepared around one consistent business model.
This includes:
We prepare the detailed application package:
We manage regulator communication, meetings, interviews, document revisions, and requests for information.
The objective is to keep the business model, policies, technology, governance, and financial evidence consistent throughout the review.
Where applicable, the company progresses through the ADGM incorporation and FSRA in-principle approval process before completing the full operating structure.
The business must not begin regulated virtual-asset activity before the full Financial Services Permission is granted.
Once FSRA approval is granted, the company completes the remaining operational conditions:
An FSRA permission begins an ongoing supervisory relationship.
Customer-risk review, transaction monitoring, sanctions controls, suspicious-activity escalation, and policy updates.
Wallet and key controls, cybersecurity, incident response, vendor oversight, reconciliation, resilience testing, and evidence maintenance.
Review of marketing, token admissions, customer disclosures, complaints, conflicts, suitability, and changes to the service model.
Capital and expenditure testing, reporting, permission-condition tracking, and material-change notifications.
FSRA’s activity-based structure gives businesses flexibility, but it also creates several points where a licence can become misaligned before submission.
See how we workAn exchange may also be a dealer, custodian, manager, or FRT intermediary. Applying for too little can leave the company unable to operate the product it has built. Applying for too much can increase capital, fees, policies, and operational burden unnecessarily.
ADGM is a separate financial free zone in Abu Dhabi. VARA, DFSA, CBUAE, and CMA govern other parts of the UAE. Incorporating in the wrong zone means preparing for the wrong regulator.
Custody and staking create distinct risk and control perimeters.
FSRA’s capital rules may require the higher of a fixed minimum and an expenditure-based test.
No. An in-principle approval or preliminary incorporation step is not the same as a full Financial Services Permission.
No. Token admission, issuance, marketing, custody, and distribution may involve separate analysis. FRTs are subject to a dedicated regime with reserve, redemption, and disclosure requirements.
Select a challenge to see how an Abu Dhabi virtual-asset project moves from an initial business idea to an FSRA-ready operating structure.
“We thought we needed an MTF licence. Once the product was mapped, we realised it also involved dealing, custody, and asset management.”
“The activity scope was defined before we committed capital. We knew which services belonged in the application and which controls each one required.”
“We had designed the wallet and staking architecture before deciding whether custody would be in-house or outsourced.”
“The custody and staking model was selected before the application was submitted. Capital, governance, technology, safeguarding, and client disclosures all followed the same structure.”
“We chose a UAE address without checking whether it was in ADGM, VARA, or DIFC. We later discovered that FSRA was not the applicable regulator.”
“The zone and regulator were confirmed before incorporation. The entity, licensing strategy, and operating model were designed together.”
Reference: the Financial Services Permission with Virtual Asset Activities Endorsement in the Licensing Atlas.
Leave your details and we will map your business to the FSRA activity categories, confirm the ADGM jurisdiction, and identify the first steps toward authorisation.
Poland used to be one of Europe’s most active crypto markets. Its virtual-currency register contained 1,841 businesses, ranging from small peer-to-peer operators…
The AFM published its MiCA expectations before applications opened. What Dutch CASP licensing really takes: two regulators, real substance, class choice.
Brussels reopened MiCA on 20 May 2026, months after its transition ended, while Brazil writes its first crypto rulebook. What both mean for 2026 plans.