Dubai Fines 19 Crypto Firms for Operating Without Licenses in Major Compliance Sweep

Dubai’s Virtual Assets Regulatory Authority (VARA) has imposed financial penalties and cease-and-desist orders on 19 cryptocurrency firms found to be operating without the required licenses. The enforcement action, announced Tuesday, marks one of the most extensive crackdowns by the authority since its establishment, reinforcing Dubai’s intent to uphold strict compliance and consumer protection standards within its digital asset ecosystem.

According to VARA, penalties ranged between $27,000 and $163,000, depending on the severity and impact of each violation. The sanctioned entities were instructed to immediately halt all operations and promotional activities targeting clients in or from Dubai. Firms were cited for offering crypto services without authorization and for violating the advertising and marketing guidelines introduced in 2024.

Among the companies fined are UAEC Digital Fintech FZCO, Morpheus Software Technology FZE (operating as FUZE), TON DLT Foundation, GLEEC DMCC, UEEX Technology, and LBK Blockchain FZCO. Others include Triple A Technologies, Hatom Labs, Hokk Finance, Mastercoin DMC, and A to Z Globe DMCC. VARA said these entities breached regulatory requirements by failing to obtain the necessary approvals before conducting or promoting crypto-related activities.

Nicholas McNicholas, VARA’s Head of Enforcement, explained that fine amounts are determined by evaluating “the nature, seriousness, and impact” of each breach, as well as the reach of any unlicensed marketing campaigns. He noted that firms using misleading materials suggesting regulatory approval faced higher penalties.

Under VARA’s 2024 marketing rules, virtual asset service providers (VASPs) must include clear disclaimers on promotional content and secure prior authorization before advertising to residents or citizens of Dubai. CEO Matthew White previously emphasized that these measures are designed to “ensure responsible communication, transparency, and trust” in the emirate’s growing digital asset market.

One repeat offender, Morpheus Software Technology FZE, had earlier faced penalties for anti-money-laundering failures and weak governance controls. The company has since accepted VARA’s findings, submitted a remediation plan, and agreed to oversight by an independent compliance monitor — an example of VARA’s willingness to work with firms seeking to correct deficiencies rather than impose blanket bans.

This latest round of enforcement follows a similar action in October 2024, when VARA fined seven unlicensed firms between $13,600 and $27,200. McNicholas confirmed that all sanctioned entities are afforded an opportunity to appeal and that an independent review mechanism remains in place to ensure procedural fairness.

VARA reiterated that engaging with unlicensed crypto operators poses “significant legal, financial, and reputational risks” to consumers and institutions alike. Only firms holding valid VARA licenses may legally offer cryptocurrency services within or from Dubai.

The crackdown coincides with ongoing collaboration between VARA and the United Arab Emirates Securities and Commodities Authority (SCA), aimed at unifying national and emirate-level oversight. The joint framework seeks to close regulatory gaps and deliver consistent supervision for all crypto service providers across the UAE.