UAE Business Portal
Brent 82.4 ▲0.6% Gold $2 415 USD/AED 3.6725
VARA

Bybit Secures VARA VASP Licence for Spot Crypto in Dubai

On 22 October 2026 Bybit officially announced it had received a full VASP licence from Dubai's Virtual Assets Regulatory Authority (VARA) for exchange services in Dubai. VARA's public register shows the licence under Bybit Fintech FZE (ref VL/26/10/003), status Active, permitted to serve institutional, qualified and retail investors. Only spot activity is approved so far; derivatives need a separate authorisation.

Crypto regulation in Dubai: Bybit secures a full VARA VASP licence for exchange services

Common questions on this topic

What happened to Bybit in Dubai on 22 October 2026?

Bybit officially announced that it had received a full VASP licence from Dubai's Virtual Assets Regulatory Authority (VARA) to provide exchange services in the emirate. VARA's public register shows the licence under Bybit Fintech FZE, reference VL/26/10/003, status Active. The move takes Bybit from earlier stages (MVP from 2023, provisional non-operational from 2024) to full operational status.

What is the exact VARA licence category?

The VARA public register lists: Licence Type — VASP Licence; Licensed Activities — Exchange Services; client scope — permitted to serve institutional, qualified and retail investors. Derivatives are not included: Peter Loo, Bybit's Chief Legal and Compliance Officer, said the company plans to expand to derivatives, but a separate regulator approval would be required.

What does this change for UAE residents and businesses?

UAE residents, including retail users, gain access to spot crypto trading on a locally regulated venue with client-protection, AML/KYC and operational-resilience rules. For businesses working with virtual assets in the UAE, this is another case of a global exchange moving from provisional to full operational status — a signal that Dubai's regulatory framework is maturing.

Can Bybit customers in Dubai trade derivatives?

No. The VARA public register lists Exchange Services only, with no derivatives carve-out. Bybit's Chief Legal and Compliance Officer Peter Loo has publicly confirmed the intent to add derivatives, but only subject to a separate regulator approval beyond the current spot-trading licence.

VARA, SCA, ADGM or DFSA — how do they differ for crypto business?

VARA regulates virtual assets in the Emirate of Dubai (outside DIFC). SCA is the UAE federal capital-markets regulator and runs its own Virtual Asset Platform Operator Licence. ADGM (via FSRA) and DIFC (via DFSA) are international financial centres with English-style common law and their own crypto frameworks. The right jurisdiction depends on target client and activity type; for retail distribution in Dubai, the gateway is VARA.

On 22 October 2026 crypto exchange Bybit officially announced it had received a full VASP licence from the Dubai Virtual Assets Regulatory Authority (VARA), the emirate's regulator for virtual assets. VARA's public register lists the licence under Bybit Fintech FZE, reference VL/26/10/003, with Status Active, Licensed Activities Exchange Services, and the licence condition permitting service to institutional, qualified and retail investors.

What the regulator says

The Bybit Fintech FZE record in VARA's public register sets out the key fields: Licence Type — VASP Licence; Licensed Activities — Exchange Services; permitted client categories — institutional, qualified and retail investors; Status — Active; Licence Issued — 20 June 2026. This is the full operational tier of the licence: Bybit's earlier stages — the MVP from June 2023 and a Provisional (Non-Operational) VASP from September 2024 — did not allow the exchange to offer the full set of exchange services to retail clients in Dubai.

The company's public announcement followed on 22 October 2026. In it, co-founder and CEO Ben Zhou said Dubai had "made significant progress in building a regulatory environment for virtual assets". Chief Legal and Compliance Officer Peter Loo confirmed that the firm intends to "expand our licensed activities to include derivatives" in time — but noted this would require separate regulator approvals.

What it means for UAE businesses and residents

For UAE retail users, the key change is access to spot crypto trading on a locally regulated venue, with client-protection, AML/KYC and operational-resilience rules. For companies looking at crypto operations from the UAE (payment processing, token issuance, treasury), the move of a top-tier global exchange from provisional to full Active status is another signal that VARA's framework is maturing. If you are planning your own crypto business in Dubai, the starting point is VARA's licence regime; we cover the practical procedure in "VARA License in Dubai: How to Start a Crypto Business".

Context: how crypto regulation evolved in Dubai

VARA was created in March 2022 under the Dubai World Trade Centre Authority and is the world's first dedicated regulator for virtual assets. Since then, hundreds of providers have been licensed — exchanges (Binance, OKX, Crypto.com), custody services, brokers. At the federal level, SCA (Securities and Commodities Authority) runs its own Virtual Asset Platform Operator Licence; DIFC is served by DFSA; ADGM by FSRA, each under its own common-law framework. Bybit, one of the largest exchanges by trading volume globally, moving to full Active status at VARA reinforces Dubai's positioning as a regulated crypto hub in the Gulf.

Topics:VARADubaiCryptoRegulationBybit