OTC Crypto Desk License UAE 2026: VARA Rules

An over-the-counter (OTC) crypto desk — a business that quotes prices and settles large virtual-asset trades bilaterally with clients rather than on a public order book — is one of the most sought-after licences in Dubai's virtual-asset sector. In Dubai, an OTC desk is generally licensed under the Virtual Assets Regulatory Authority (VARA) as a Broker-Dealer Services activity, which carries an application fee of AED 100,000 and an annual supervision fee of AED 200,000. This is a fully regulated financial activity with serious conduct, capital and AML expectations.

This guide addresses OTC crypto desk licensing from a compliance and regulatory perspective only. It contains no trading or investment advice and does not comment on any asset or price. It explains what an OTC desk is, why it is treated as broker-dealer activity, the VARA licensing process and costs, how it differs from an exchange, the AML burden that large bilateral trades attract, custody and settlement considerations, tax, and the mistakes that sink applications.

The appeal of an OTC desk is easy to understand. Large buyers and sellers of virtual assets need a discreet, reliable counterparty who can execute size without slippage, and a well-run desk earns trust and margin by providing exactly that. But that same profile — big, private, negotiated trades — is what makes the desk a serious regulated business with a heavy compliance load. Dubai, through VARA, offers a clear and credible path to licensing such a desk, and founders who understand the requirements from the outset can build a durable business on a properly authorised footing rather than an improvised one.

What licence do you need for an OTC crypto desk in the UAE?

An OTC crypto desk in Dubai is licensed under VARA's Broker-Dealer Services activity, with an application fee of AED 100,000 and an annual supervision fee of AED 200,000. If the desk also safeguards client assets it needs the separate Custody Services licence (also AED 100,000 / AED 200,000) held in a standalone segregated entity. Licensing realistically takes 6–12 months.

An OTC desk sits in the broker-dealer family because its economic function is dealing and arranging deals in virtual assets on behalf of, or as counterparty to, clients. When a client wants to buy or sell a large amount of a virtual asset without moving the market on a public exchange, they approach the desk, which quotes a price and executes the trade privately, then settles it. That activity — dealing as principal or agent, and arranging transactions — is precisely what VARA's Broker-Dealer Services category is designed to capture.

VARA operates a comprehensive, activity-based licensing regime. Rather than one blanket "crypto licence", a firm is authorised for specific activities, each with its own fee, rulebook and requirements. An OTC desk typically needs Broker-Dealer Services and may need additional activities depending on its model. To see how the desk fits within the full set of activities, read our VARA licence categories guide, and for the complete fee schedule, our VARA licence cost guide.

Application fees are due at submission and are non-refundable; annual supervision fees are payable in advance, per activity, every year. Note the important rule that Custody must be a segregated standalone entity — it cannot be aggregated with other activities in the same legal entity — so a desk that wants to hold client assets is effectively building two regulated entities.

OTC desk versus exchange: a critical distinction

Founders frequently blur these two, but they are fundamentally different businesses with different risk profiles. An exchange operates a multilateral venue: it brings together many buyers and sellers, matches their orders through an order book or matching engine, and typically does not act as the counterparty to trades. An OTC desk, by contrast, deals bilaterally — it quotes a price directly to one client and either takes the other side of the trade itself or sources liquidity to fill it, settling privately away from any public book.

That difference drives everything. Exchanges face market-integrity, listing, market-surveillance and system-resilience obligations built around running a venue. OTC desks face conduct, best-execution-style, counterparty-risk and settlement obligations built around bilateral dealing, plus especially intense AML scrutiny because their trades are large and privately negotiated. If your model genuinely involves running a matching venue, you are looking at Exchange Services, and our crypto exchange licence Dubai guide covers that route in detail. If you deal directly with clients on large tickets, you are an OTC broker-dealer.

Many desks operate a hybrid or evolve over time, which is why the activity mapping at the start of a project is so important. Licensing for the wrong activity, or missing an activity your model actually performs, is a costly error to unwind.

It is also worth appreciating why regulators care about the distinction beyond mere labelling. A venue that matches many participants creates systemic and market-integrity concerns — fair access, orderly markets, surveillance for manipulation — that a bilateral desk does not. A bilateral desk, on the other hand, concentrates conduct and counterparty risk in a single relationship and, because its trades are large and private, elevated money-laundering risk. The rulebooks are therefore tailored to each model's actual risks. When a desk maps its activities honestly against these categories at the outset, it not only avoids restructuring but also builds a compliance framework that genuinely fits the risks it runs, which is exactly what VARA wants to see during authorisation and ongoing supervision.

The VARA licensing process, step by step

VARA runs a structured, generally two-stage process — an initial approval or provisional stage followed by full authorisation once the firm has built out its operations and satisfied VARA's conditions.

Step 1 — Activity mapping and structuring. Define precisely what the desk will do, which VARA activities it triggers, and whether custody or exchange elements are involved. Incorporate the operating entity, and a separate custody entity if needed.

Step 2 — Initial application. Submit the application with a detailed business plan, ownership and control information, financial projections, governance structure and the proposed senior management. VARA assesses fitness and propriety and the viability of the model.

Step 3 — Build-out. Following initial approval, the firm builds its actual operations: compliance and risk frameworks, AML programme, technology and security, capital, office and staffing, and the policies VARA requires. This is where most of the time and cost sits.

Step 4 — Full authorisation. VARA reviews the completed build-out, may inspect and interview, and on satisfaction grants the full operating licence permitting the desk to onboard clients and trade.

Step 5 — Go live and ongoing supervision. The desk begins operating under continuous VARA supervision, filing regulatory returns, paying annual supervision fees, and maintaining its compliance and capital on an ongoing basis.

Realistic timelines run from roughly six to twelve months depending on the completeness of the application, the strength of the team, and how quickly the build-out is completed. Rushing the early stages usually lengthens the overall process.

AML: why OTC desks face the heaviest scrutiny

Large, bilaterally negotiated virtual-asset trades are exactly the transactions that money-laundering typologies target, so OTC desks carry a particularly heavy AML burden. The full federal framework applies: registration on the Financial Intelligence Unit's goAML platform, robust KYC with enhanced due diligence for higher-risk clients, source-of-funds and source-of-wealth verification on large tickets, sanctions and PEP screening, Travel Rule compliance for transfers above the threshold, ongoing transaction monitoring, and a fit-and-proper Money Laundering Reporting Officer with real authority.

For OTC specifically, the enhanced due diligence expectations are elevated because trade sizes are large and clients often institutional or high-net-worth. The desk must genuinely understand who its clients are, where their funds come from, and the commercial rationale for each large trade, and must file Suspicious Transaction Reports through goAML whenever suspicion arises. Wallet-level screening using blockchain analytics — checking counterparties and addresses for exposure to sanctioned entities, mixers or illicit sources — is a practical necessity, not a nicety. Regulators expect OTC desks to have mature, well-resourced AML functions from day one.

Custody, settlement and counterparty risk

A defining operational question for an OTC desk is whether it holds client assets. If the desk merely arranges and settles trades on a delivery-versus-payment basis without ever safeguarding client funds or private keys, it may avoid the custody activity. But if it holds client fiat or virtual assets — even briefly — it likely needs the Custody Services licence, which VARA requires to be a segregated, standalone entity that cannot be combined with other activities. This is a deliberate investor-protection design and it materially affects your structure and cost.

Settlement mechanics also matter. The desk must manage counterparty and settlement risk carefully: how trades are confirmed, how and when assets and payment change hands, how failed settlements are handled, and how the desk's own principal risk (if it trades as principal) is controlled. Robust operational procedures, clear client agreements and sound treasury management are essential. These are the areas where VARA probes hardest during authorisation, because poor settlement and custody arrangements are where client harm actually occurs.

Proprietary trading is different

If you intend to trade only your own capital rather than deal for clients, that is proprietary trading, and it is treated differently. Proprietary trading is not a licensed VARA activity; instead it requires a No Objection Certificate (NoC) from VARA and a separate company, with registration obligations above certain volume thresholds. This is an important distinction: an OTC desk deals for clients and needs a Broker-Dealer licence, whereas a pure prop-trading operation follows the NoC route. Mixing the two without proper structuring is a common source of confusion and regulatory risk.

Capital, staffing and substance requirements

VARA does not license letterbox operations, and an OTC desk must demonstrate genuine substance to obtain and keep its authorisation. That means a real office in Dubai, qualified senior management approved by VARA, and functioning compliance and risk functions. Key roles — the senior executive, the compliance officer, the money-laundering reporting officer, and finance and risk personnel — must be filled by fit-and-proper individuals whom VARA assesses individually for competence and integrity. In a small desk some of these functions may be combined, but the substance must be real and adequately resourced; a desk that outsources everything and maintains no genuine presence will not clear authorisation.

Capital requirements scale with the activity and the risk the desk takes. A broker-dealer that acts as principal — taking the other side of client trades onto its own book — carries more risk than one that purely arranges and matches, and its capital expectations reflect that. VARA sets base capital and, typically, expenditure-based requirements that ensure the firm holds a buffer of operating costs, and the desk must maintain that capital on an ongoing basis, not just at licensing. Founders should plan for meaningful capital plus a working-capital runway, because an undercapitalised desk is neither licensable nor sustainable. Treating capital as a launch hurdle to be minimised, rather than an ongoing prudential requirement, is a frequent and costly misunderstanding.

Conduct, disclosure and client agreements

An OTC desk deals directly with clients, so conduct standards are central to its licence. The desk must treat clients fairly, quote prices transparently, disclose its role (whether it acts as principal or agent, and how it is remunerated), and manage conflicts of interest — particularly where it takes the other side of a client's trade. Clear, comprehensive client agreements are essential: they set out the terms of dealing, settlement, fees, risk disclosures, and the respective obligations of desk and client. Regulators expect these agreements to be genuine and understood, not buried boilerplate.

Client classification also matters. Many OTC desks deal only with professional or institutional clients, which carries lighter conduct obligations than dealing with retail clients, who require stronger protections and disclosures. Getting classification right, and documenting that each client meets the relevant criteria, protects the desk and shapes its obligations. Because OTC trades are large and privately negotiated, the desk must be especially careful that clients understand what they are agreeing to and that pricing and execution are handled fairly and consistently. A desk that builds strong conduct and disclosure practices from the outset earns both regulatory confidence and client trust, which are the foundations of a durable OTC business.

Technology, security and operational resilience

Although an OTC desk is a relationship-driven business, it depends on robust technology and security. The desk holds or moves valuable virtual assets, manages private keys or relies on custody arrangements, and processes sensitive client data — all of which are targets. VARA expects strong cybersecurity, sound key-management, resilient systems, and business-continuity and disaster-recovery arrangements proportionate to the desk's activity. A security failure that leads to loss of assets or data is both a client-harm event and a regulatory one, and it can end a desk's business.

Operational resilience extends to how trades are booked, confirmed, reconciled and settled. Manual, error-prone processes create settlement risk and compliance gaps, so even a boutique desk needs disciplined operational systems and clear procedures. As volumes grow, the desk must scale its controls, monitoring and reconciliation accordingly. Regulators probe these operational foundations during authorisation and supervision because this is where real client harm tends to originate, and a desk that can demonstrate mature, well-controlled operations stands apart from one relying on ad hoc processes. Investing early in operational discipline pays off in smoother authorisation and fewer problems down the line.

Tax treatment of an OTC desk

An OTC desk that is profitable is within the scope of UAE corporate tax at 9% on taxable profit above AED 375,000, administered by the Federal Tax Authority, with no personal income tax on individuals. Where the desk is established on the Dubai mainland through the Department of Economy and Tourism (DET), or in a qualifying free zone, particular treatment may apply depending on the nature of its income and whether it meets qualifying conditions, but virtual-asset trading income and its characterisation require careful analysis. Register with the FTA and obtain tailored advice; the authoritative rules are at https://tax.gov.ae/. Do not assume a Dubai desk is automatically tax-free — model corporate tax properly alongside your licensing budget.

The real cost of running an OTC desk

The published VARA fees — AED 100,000 to apply and AED 200,000 in annual supervision for Broker-Dealer Services — are only the entry ticket, and founders who budget around them alone are in for a shock. The genuine cost of running a compliant OTC desk is dominated by the build-out and the ongoing operation: regulatory capital held on the balance sheet, a qualified team of senior managers, compliance and MLRO staff, blockchain-analytics and monitoring technology, secure infrastructure, office space, legal and audit fees, and, if the desk holds client assets, the entire additional cost of a separate segregated custody entity with its own AED 100,000 application and AED 200,000 annual fee. Add professional advisory fees through the two-stage authorisation, and the realistic first-year figure runs to a substantial multiple of the headline licence cost.

Ongoing costs are equally material and permanent. Annual supervision fees recur, capital must be maintained, compliance technology must be licensed and updated, staff must be paid and trained, and audits and regulatory returns must be completed each year. A desk that treats these as optional or tries to run lean on compliance quickly finds itself either out of good standing or exposed to enforcement. The right mindset is to budget for the desk as the serious regulated financial business it is, with compliance and operations as core, funded functions rather than costs to be trimmed. Desks that plan realistically from the outset are the ones that launch smoothly and stay in business; those that under-budget stall at authorisation or struggle to sustain operations afterward.

Banking, liquidity and counterparty relationships

Two commercial realities determine whether an OTC desk can actually operate once licensed: banking and liquidity. Banking is a well-known challenge for virtual-asset businesses, and an OTC desk moving large values must secure banking partners willing to support it, which requires a strong compliance story, clean documentation, and patience through enhanced due diligence. Without reliable banking and fiat rails, a desk cannot settle trades or serve clients, so this relationship should be pursued early and nurtured carefully. A desk with a mature compliance function and transparent operations is far more bankable than one that looks improvised.

Liquidity and counterparty relationships are equally critical. An OTC desk must be able to source the assets its clients want to buy and place the assets they want to sell, which means relationships with liquidity providers, exchanges, other desks and market makers. Managing counterparty risk across these relationships — assessing who you deal with, how exposures are settled, and how failures are handled — is central to the desk's risk management. The desk must also manage its own principal risk if it takes positions onto its book. These commercial foundations sit alongside the regulatory ones: a desk can be perfectly licensed and still fail if it cannot bank, cannot source liquidity, or cannot manage its counterparties. Building these relationships thoughtfully, and backing them with disciplined risk controls, is what turns a licensed entity into a functioning business.

Common Mistakes When Licensing an OTC Crypto Desk

• Confusing an OTC desk with an exchange. They are different activities with different rules. Licensing for the wrong one, or missing an activity your model performs, forces costly restructuring.
• Overlooking the custody entity requirement. If the desk holds client assets it needs a separate, segregated Custody licence. Trying to aggregate custody with broker-dealer activity will be rejected.
• Under-resourcing AML. OTC's large bilateral trades attract the heaviest scrutiny. A thin AML function with a weak MLRO is the fastest route to enforcement.
• Underestimating the timeline. VARA's two-stage process realistically takes six to twelve months. Promising clients an early launch damages credibility.
• Budgeting only for the licence fee. The AED 100,000 application and AED 200,000 annual fees are a fraction of the real cost once capital, compliance, technology and staffing are added.
• Blurring proprietary trading and client dealing. Prop trading needs a NoC and separate company, not a broker-dealer licence. Mixing them without structuring creates regulatory risk.
• Neglecting settlement and counterparty controls. Weak settlement procedures are where client harm occurs and where VARA probes hardest. Build them properly before applying.
• Skipping tax registration. Register with the FTA and model corporate tax; a free-zone address does not guarantee zero tax.

Licensing Your OTC Crypto Desk with Noble Core

Licensing an OTC virtual-asset desk correctly starts with precise activity mapping and ends with a compliance and settlement build-out that satisfies VARA's two-stage scrutiny — and errors at either end are expensive to fix. Noble Core helps founders scope the desk's activities, decide whether custody or exchange elements are involved, structure the operating and (where needed) custody entities, prepare the VARA application and business plan, build the AML and risk frameworks, appoint and secure approval for senior management and the MLRO, and coordinate FTA tax registration.

Ground your plan in the full landscape. Our crypto licence UAE pillar guide maps every regulator and licence, the crypto exchange licence Dubai guide covers the venue route if your model is multilateral, the VARA licence cost guide breaks down every fee, and the VARA licence categories guide explains where broker-dealer sits among the activities. Book a free 20-minute consultation and we will map exactly what your OTC desk needs to launch compliantly.

Frequently Asked Questions