cbuae payment token and virtual asset regulation

table of contents

1. cbuae institutional mandate
2. regulatory development division
3. payment token regulatory framework
4. stablecoin supervision
5. digital dirham cbdc program
6. aml/cft enforcement role
7. fintech and digital transformation
8. coordination with other authorities
9. supervisory approach
10. strategic outlook

cbuae institutional mandate

The Central Bank of the UAE is the federal authority responsible for monetary policy, banking supervision, payment systems regulation, and financial stability across the United Arab Emirates. Established under Union Law No. 10 of 1980 and subsequently restructured under Federal Decree-Law No. 14 of 2018 Regarding the Central Bank and Organization of Financial Institutions and Activities, the CBUAE exercises regulatory jurisdiction that intersects significantly with tokenized asset markets.

The CBUAE’s operational structure, as documented on its operations page, encompasses twelve distinct functional areas: Regulatory Development, Financial Stability, Reserve Management, Islamic Finance, Anti-Money Laundering (AML), FinTech and Digital Transformation, Risk Management, Supervision, Monetary Policy and Domestic Markets, Payments and Settlements, Enforcement, and Currency and Coins. Several of these functions directly engage with virtual asset and tokenization regulation.

The CBUAE’s relevance to tokenization regulation stems from its jurisdiction over payment instruments, payment service providers, money service businesses, and the broader monetary system. Payment tokens — including stablecoins pegged to the UAE dirham or other currencies — fall within the CBUAE’s regulatory perimeter. The CBUAE also exercises supervisory authority over banks and financial institutions that interact with virtual asset markets, including those providing banking services to VASPs and those offering crypto-related products to their customers.

regulatory development division

The Regulatory Development division is responsible for developing and maintaining the CBUAE’s regulatory framework, including regulations applicable to virtual asset-related activities. The CBUAE describes this function as regulating and supervising “financial services companies operating in the UAE,” a mandate broad enough to encompass firms engaged in payment token activities.

The division has produced regulations addressing stored value facilities, payment service providers, and payment systems operators — all categories relevant to entities operating in the tokenized asset space. The regulatory framework is published in the CBUAE Rulebook, which provides detailed requirements for licensed entities across all supervised sectors.

The CBUAE’s approach to regulatory development emphasizes stakeholder consultation. The authority publishes consultation papers soliciting industry input on proposed regulations before finalizing them, a practice that has been applied to payment token-related regulatory development.

payment token regulatory framework

The CBUAE’s payment token regulatory framework addresses tokens designed to function as payment instruments — that is, tokens intended to be used as a medium of exchange rather than as investment instruments or utility tokens. This category primarily encompasses stablecoins but also covers other payment-oriented virtual assets.

Payment tokens fall within the CBUAE’s jurisdiction rather than the SCA’s because they function as payment instruments rather than securities or commodities. The token classification framework explains how the boundary between payment tokens and other token categories is determined at the federal level.

Key regulatory requirements for payment token issuers and operators include licensing by the CBUAE as a stored value facility or payment service provider, reserve requirements mandating that issued tokens are backed by specified high-quality liquid assets, redemption obligations ensuring that token holders can redeem tokens for fiat currency at par value, governance requirements including fitness and propriety standards for directors and senior management, technology and cybersecurity standards for the platforms and infrastructure supporting payment token operations, and ongoing reporting to the CBUAE on reserves, redemptions, and operational metrics.

The CBUAE’s regulatory approach to payment tokens is designed to ensure monetary stability and consumer protection while enabling innovation in payment systems. The authority has explicitly recognized that well-regulated payment tokens can contribute to the efficiency and inclusiveness of the UAE payment system.

stablecoin supervision

Stablecoins represent the most significant category of payment tokens within the CBUAE’s regulatory perimeter. The CBUAE distinguishes between dirham-denominated stablecoins (which are subject to the full range of CBUAE payment token regulations), foreign currency-denominated stablecoins (which may be used in the UAE but whose issuance may fall outside CBUAE jurisdiction), and commodity-backed or algorithmic stablecoins (which may be classified as investment products rather than payment tokens depending on their specific characteristics).

The CBUAE’s stablecoin supervision framework has evolved in coordination with VARA, which also regulates stablecoin activities within Dubai. The relationship between CBUAE federal stablecoin regulation and VARA’s stablecoin rules creates a dual-authority supervisory structure that firms must navigate carefully. The stablecoin regulatory framework analysis examines this dual-authority dynamic in detail.

The CBUAE’s stance on stablecoins is informed by international developments including the EU’s MiCA regulation of asset-referenced tokens and e-money tokens, the FATF’s guidance on stablecoins, and the BIS Committee on Payments and Market Infrastructures (CPMI) principles for stablecoin arrangements.

digital dirham cbdc program

The CBUAE’s Digital Dirham central bank digital currency initiative represents the most significant development in the payment token space. The program encompasses both wholesale CBDC applications (targeting interbank settlement and cross-border payments) and retail CBDC applications (targeting general-purpose consumer and business payments).

The wholesale CBDC component has advanced through the CBUAE’s participation in Project mBridge — a multi-country wholesale CBDC platform involving the BIS Innovation Hub, the People’s Bank of China, the Hong Kong Monetary Authority, the Bank of Thailand, and the Saudi Central Bank. Project mBridge has moved from proof-of-concept to minimum viable product stage, with successful cross-border settlement tests demonstrating the feasibility of CBDC-based international payments.

The retail CBDC component is progressing through consultation and design stages. Key design questions under consideration include the distribution model (direct CBUAE issuance to consumers vs. two-tier distribution through commercial banks), privacy protections for Digital Dirham users, offline payment capabilities for use in areas without internet connectivity, smart contract functionality enabling programmable payments, and interoperability with existing payment systems and virtual asset platforms.

The Digital Dirham has significant implications for the broader tokenization ecosystem. A functional CBDC could serve as the on-chain settlement currency for tokenized asset transactions conducted on UAE exchanges and platforms, reducing reliance on privately issued stablecoins and providing a sovereign digital payment instrument with the full backing of the central bank.

For detailed coverage, see the Digital Dirham progress brief and the stablecoin regulatory framework analysis.

aml/cft enforcement role

The CBUAE established a dedicated Anti-Money Laundering and Combating the Financing of Terrorism Department in August 2020, taking over AML/CFT supervisory functions that were previously handled by the Banking Supervision Department. This organizational change reflects the CBUAE’s recognition that AML/CFT compliance requires specialized institutional capacity, particularly as the scope of supervised entities expands to include virtual asset-related businesses.

The CBUAE’s AML/CFT role in the virtual asset space is complementary to the AML/CFT supervision conducted by the SCA, VARA, ADGM FSRA, and DFSA within their respective jurisdictions. The CBUAE focuses on AML/CFT compliance by banks and financial institutions that provide services to VASPs, payment token issuers and operators, and money service businesses that interact with virtual asset markets.

The CBUAE’s AML/CFT enforcement authority includes the power to conduct on-site and off-site supervisory assessments, issue directives requiring corrective action, impose administrative sanctions including fines and restrictions on business activities, and refer matters for criminal prosecution through the UAE Financial Intelligence Unit and law enforcement.

The effectiveness of the CBUAE’s AML/CFT framework was a key factor in the UAE’s removal from the FATF grey list in February 2024.

fintech and digital transformation

The CBUAE’s FinTech Office, launched in 2020, aims to build a mature fintech ecosystem in the UAE and position the country as a leading fintech hub. The FinTech Office’s mandate includes supporting innovation in payment systems, digital banking, and related financial technologies — all of which intersect with the tokenized asset market.

The FinTech Office facilitates engagement between innovative firms and the CBUAE’s regulatory divisions, helping firms understand regulatory requirements and navigate the licensing process. The office also monitors international fintech developments and advises the CBUAE on regulatory approaches to emerging technologies.

The CBUAE’s digital transformation agenda extends beyond external regulation to internal operations. The CBUAE has invested in upgrading its supervisory technology infrastructure, including data analytics capabilities for monitoring virtual asset-related risks in the banking system and payment processing infrastructure that can accommodate new payment technologies including CBDCs and tokenized payment instruments.

coordination with other authorities

The CBUAE coordinates with multiple UAE authorities on tokenization-related matters. Coordination with the SCA addresses the boundary between payment tokens and securities — a classification question that determines which authority has primary regulatory jurisdiction. Coordination with VARA addresses the interaction between federal payment token regulation and Dubai’s virtual asset regulatory framework. Coordination with ADGM FSRA and DFSA addresses the treatment of payment tokens within the financial free zones.

The CBUAE also coordinates with the Executive Office for Control and Non-Proliferation (EOCN) on sanctions compliance matters affecting virtual asset activities, and with the UAE FIU on financial intelligence matters related to virtual asset transactions.

The federal vs free zone comparison examines the coordination architecture in detail, and the multi-authority compliance map dashboard visualizes the regulatory jurisdictional structure.

supervisory approach

The CBUAE’s supervision of payment token activities follows the risk-based supervisory methodology described in its operational framework. The key supervisory objective, consistent with the Basel Committee Core Principles for Effective Banking Supervision, is to promote the safety and soundness of licensed financial institutions. For payment token activities, this translates into supervisory focus on reserve adequacy and asset quality, redemption risk and liquidity management, technology resilience and cybersecurity, AML/CFT compliance effectiveness, and consumer protection and disclosure.

The CBUAE’s Enforcement Department supports the supervisory function through a “disciplined twofold approach: protection and deterrence.” Enforcement actions for payment token-related violations can include administrative penalties, remedial directives, and referral for prosecution.

strategic outlook

The CBUAE’s strategic direction for payment token and virtual asset regulation points toward progressive integration of digital assets into the supervised financial system. The Digital Dirham CBDC initiative, if successfully launched, would establish a sovereign digital payment infrastructure that could serve as the foundation for tokenized asset settlement. Enhanced coordination with free zone regulators on stablecoin supervision is expected to reduce regulatory fragmentation. Development of open banking and payment infrastructure standards that accommodate tokenized payment instruments is underway.

For the latest CBUAE developments, monitor the regulatory framework tracker dashboard and the CBUAE entity profile. For official information, visit centralbank.ae.