UAE Digital Asset Regulations Move Into More Complex Ground With New CMA Rules

The United Arab Emirates is entering a more complex phase in digital asset regulation.

With Resolution No. 04 of 2026, the Capital Market Authority (CMA) has introduced a new framework for Virtual Asset Service Providers (VASPs) and Alternative Trading System (ATS) operators. The package replaces earlier federal virtual asset provisions and introduces a more detailed structure through three modules: the General Framework Module, the Business Regulation Module, and the Alternative Trading System Module.

This is more than a routine update to UAE digital asset regulations. It gives the federal lane a clearer shape, a stricter perimeter, and a more detailed operating structure. At the same time, it pushes the market into more layered territory, where questions around overlap, jurisdiction, and regulatory coordination will become harder to ignore.

The point is not that CMA replaces every other regulatory system in the country. The documents do not say that. What they do show is that the UAE now has a more formalized federal rulebook for digital asset activity, with clearer licensing categories, clearer red lines, and tighter market-structure controls.

A Stronger Federal Layer Is Now in Place

The new CMA regime creates a federal licensing and supervision framework for a broad range of digital asset activity.

Under the rules, licensed firms may engage in exchange, transfer, brokerage, custody, and financial services linked to the offering or sale of virtual assets. The framework also sets out a more detailed menu of regulated activity, including dealing as principal, dealing as agent, arranging custody, operating a Multilateral Trading Facility (MTF), investment advice, portfolio management, and arranging investment deals.

That matters because CMA is no longer operating only at the level of broad oversight. It is building a federal market structure.

What the New Law Allows — and What It Blocks

One of the most important features of the new framework is that it defines the edge of the market more clearly.

The law allows federally licensed VASP activity across a broad set of categories. But it also prohibits activity related to privacy tokens and privacy devices. It further bars financial services and public offering activity tied to algorithmic tokens.

The treatment of utility tokens and non-fungible tokens (NFTs) is also restrictive. Licensed entities are generally not allowed to provide services related to those assets, except in limited situations such as custody or the operation of a virtual asset MTF with prior CMA approval.

This gives the federal regime a more conservative tone and makes clear that the CMA lane will not suit every business model equally.

CMA Is Also Creating Its Own Listing Architecture

The law is not only about who gets licensed. It is also about which assets enter the market and how.

A licensed MTF operator must register a virtual asset with the Authority before listing it. The framework also contemplates a federal recognition architecture that may include a CMA Green List of recognized virtual assets.

That is a meaningful development. It shows that CMA is building not just a licensing route for firms, but also a federal pathway for asset recognition, listing, and market admission.

Trading Infrastructure Is Getting Tighter

The Alternative Trading System (ATS) module adds another layer to the framework.

It states that an Organized Trading Facility (OTF) cannot be used for trading and settling virtual assets in or from within the State. A virtual-asset-dedicated MTF, however, may conduct negotiated transactions. The module also requires suitability checks for retail direct participants and annual external technology audit reports.

Bybit Shows the Federal Route Was Already Active

The federal route did not begin with this resolution.

Bybit already offers one of the clearest examples of the federal route in action. As Unlock Blockchain reported in October 2025, the exchange secured a Virtual Asset Platform Operator License from the UAE’s federal regulator, then operating under the Securities and Commodities Authority (SCA) name, before the regulator’s transition to the Capital Market Authority (CMA). In that sense, Bybit shows that the federal licensing lane was already live before the new 2026 rulebook formalized and deepened it.

What the new package does is place that federal route within a more detailed framework for licensing, market access, trading systems, prohibited activities, and supervision.

Will the New Rules Accelerate CMA Licensing?

That is one of the most important commercial questions now facing the market.

There is good reason to believe the new framework could accelerate interest in the federal route by giving firms more clarity on regulated activity, prohibited token categories, listing mechanics, and trading venue structure. Bybit’s case suggests that the federal pathway was already live before the 2026 package was issued.

At the same time, the new framework is also more prescriptive. In some areas, it is more restrictive than some firms may prefer. So while it could accelerate applications from players that want federal footing, it may also push others to examine more carefully how the federal route compares with other regulatory options in the UAE.

A Broader Federal Perimeter Raises Bigger Questions

This is where the story becomes more interesting.

The documents show that the CMA framework is drafted in broad federal language. It applies to persons carrying on or intending to carry on relevant activity in and/or from within the State. The rules also say the licensed entity’s main office must be within the State under the Authority’s jurisdiction, while branches may be established inside or outside the State, or in a financial free zone within the State, with the Authority’s approval.

That does not prove contradiction with any other regime. It does not automatically mean firms licensed elsewhere in the UAE must also obtain a CMA license. The documents do not say that. But they do show that the federal lane has become more structured and more demanding, and that alone raises practical questions about how market participants will interpret its scope.

External legal commentary has also noted that the interaction between the new CMA framework and existing UAE digital asset regimes remains unclear, particularly after the transition period.

A More Mature Market, but a More Complex One

The UAE is not becoming less attractive as a digital asset market. It is becoming more sophisticated.

CMA is building a stronger federal lane with clearer rules on what licensed firms can and cannot do. That gives the market more detail, more boundaries, and a more formal structure for virtual asset activity.

That also creates a more complex operating environment.

CMA’s new framework is important not only because it defines federally licensed activity more clearly. It is important because it pushes the market into a new phase where the structure of regulation itself becomes part of the story.

That is the real story now. Not who is replacing whom, but how far the federal lane is now being defined — and what that could mean for the next stage of the UAE’s digital asset market.