Crypto & NFT Tax Accounting in UAE 2026: What VASP Operators and Investors Must Declare
Crypto in the UAE has grown up.
It is no longer just a wallet, a token, a Discord launch, or a trading account on an exchange. It now sits inside a serious regulatory system. And that system is not controlled by one single authority.
That is where many people get caught.
A crypto exchange in mainland Dubai may deal with VARA.
A digital asset fund in Abu Dhabi may deal with ADGM / FSRA.
A crypto token business inside DIFC may answer to the DFSA.
A stablecoin operator may need the attention of the Central Bank of the UAE.
And once tax enters the picture, the Federal Tax Authority is always part of the conversation.
So before we talk about what VASP operators, NFT platforms, crypto businesses, and what investors must declare in 2026, we need to pause and ask a better question:
Who regulates your activity in the first place?
Because in the UAE, crypto compliance is not one road. It is more like a roundabout with six exits. Take the wrong one, and your tax treatment, reporting duties, and record-keeping position can become messy very quickly.
First, Understand Who This Applies To — The Regulator Landscape in 2026
The UAE has built one of the most active virtual asset frameworks in the region.
That is a good thing.
For serious crypto businesses, it creates structure. It gives the market more credibility. It also gives banks, investors, regulators, and tax authorities more comfort.
But there is another side to it.
More structure also means more questions, more filings, more records and more proof.
Here is the simple version.
| Regulator | Main jurisdiction | Who it mainly covers |
| VARA | Dubai, excluding DIFC | Crypto exchanges, custodians, brokers, wallet providers, NFT platforms, and other VASPs |
| ADGM / FSRA | Abu Dhabi Global Market | Digital asset exchanges, custodians, brokers, funds, and other regulated virtual asset businesses |
| DIFC / DFSA | Dubai International Financial Centre | Crypto token and digital asset activities carried out inside DIFC |
| CBUAE | UAE-wide for payment tokens | AED-pegged stablecoins and certain foreign stablecoin or payment token activities |
| CMA / SCA | Federal UAE framework | Broader UAE virtual asset framework outside financial free zones, subject to specific exclusions |
| FTA | UAE-wide tax authority | Corporate tax, VAT, tax registration, returns, records, and tax clarifications |
VARA is usually the first name Dubai-based crypto businesses hear.
It regulates virtual asset activity in and from Dubai, except inside DIFC. So if you operate a crypto exchange, custody business, brokerage, wallet service, or NFT-related platform in Dubai, VARA may be part of your life.
And VARA does not stop at licensing. Licensed VASPs also have ongoing reporting duties. That includes regular monthly and quarterly reporting.
In plain English: getting the licence is not the finish line. It is the start of a reporting relationship.
ADGM / FSRA runs its own digital asset framework in Abu Dhabi Global Market.
This matters because ADGM is not just “Abu Dhabi crypto rules.” It has its own regulatory architecture. The FSRA covers virtual assets, fiat-referenced tokens, digital securities, derivatives, funds, custody, and related activities through its digital assets framework.
A business operating from ADGM needs the right Financial Services Permission. On the tax side, ADGM entities may also consider whether they can qualify as a Qualifying Free Zone Person under the UAE corporate tax framework. If the conditions are met, eligible income may benefit from 0% corporate tax under the FTA Corporate Tax Guide for Free Zone Persons.
That sounds attractive. But it is not automatic. The conditions, substance and the income type matters.
DIFC / DFSA is another separate track.
This is a common mistake. A business inside DIFC should not assume VARA applies simply because DIFC is physically in Dubai. DIFC has its own regulator, the DFSA, and its own crypto token framework.
So if your business is in DIFC, check the DIFC rules. Do not borrow the mainland Dubai answer and hope it fits. It probably will not.
CBUAE, the Central Bank of the UAE, becomes important when stablecoins and payment tokens enter the room.
AED-pegged stablecoins are sensitive because they sit close to payments and money movement. That brings a different level of scrutiny. VASPs dealing with certain foreign payment tokens or stablecoin-related conversion activities may also need to consider the Central Bank’s Payment Token Services Regulation.
In short: stablecoins are not “just another token.” Regulators tend to look at them with sharper eyes.
CMA / SCA sits at the federal level.
Cabinet Resolution No. 111 of 2022 created the wider UAE framework for virtual assets and virtual asset service providers. But not every token falls neatly into the same bucket.
NFTs and service tokens that do not qualify as investment assets may fall outside the CMA/SCA remit, depending on what they actually do.
That last part is important.
The name of the token is not enough. Calling something an NFT does not settle the question.
The real issue is function.
What rights does it give? How is it used? Is it investment-like? Is it a service token? Is it part of a platform, a game, a membership, or a financial product?
The label is decoration. The substance is what matters.
Then comes the FTA.
And this is where many people mix things up.
Licensing and tax are not the same conversation.
A business may be licensed by VARA, regulated in ADGM, or supervised by DFSA. That still does not remove the tax question. Tax sits with the Federal Tax Authority.
The FTA administers corporate tax and VAT across the UAE. For crypto and virtual assets, two clarifications are especially important: VATP039 and VATP040.
VATP039 deals with cryptocurrency mining.
VATP040 explains VAT changes affecting virtual assets, including the VAT exemption for certain transfers and conversions of virtual assets under Cabinet Decision No. 100 of 2024.
So the starting point is not simply:
“Do I pay tax on crypto?”
That question is too broad.
A better question is:
Where am I regulated, what activity am I actually carrying out, and which authority expects a filing, report, return, or record from me?
That answer shapes everything that follows.
The Tax Rules Every UAE Crypto Participant Must Know in 2026
Crypto tax in the UAE is not as simple as “zero tax.”
That line sounds nice. It also sells well on social media. But it is not the full story.
The better answer is this:
It depends on who you are, what you are doing, and whether your crypto activity looks like an investment or a business.
That distinction matters.
A person buying Bitcoin once and holding it is not in the same position as a company running an exchange.
An NFT collector is not the same as an NFT marketplace.
A casual investor is not the same as a high-volume trader running a structured strategy every day.
Same asset class. Very different tax outcomes.
Corporate Tax — 9% Applies to Businesses, Not Individual Investors
The UAE introduced federal corporate tax under Federal Decree-Law No. 47 of 2022. The headline rule is simple: taxable income up to AED 375,000 is taxed at 0%, and taxable income above AED 375,000 is taxed at 9%.
So if a UAE crypto business earns taxable profits above the threshold, corporate tax can apply.
This includes businesses such as:
- crypto exchanges;
- custodians;
- brokers;
- wallet service providers;
- NFT marketplaces;
- mining operators;
- staking platforms;
- DeFi-related service businesses;
- advisory, development, or technology companies earning crypto-related income.
The form of the business does not make the tax question disappear. A company earning income from crypto activity still needs to look at corporate tax.
For individual investors, the position is usually different.
The UAE does not impose personal income tax on individuals in the way many other countries do. Also, the FTA says a natural person is subject to corporate tax only if they conduct a business or business activity in the UAE and their total business turnover exceeds AED 1 million in a calendar year.
The FTA also confirms that personal investment income is not treated as business or business activity for this purpose.
That is the key comfort point for ordinary investors.
If someone is simply investing personally, like buying crypto, holding tokens, selling occasionally, or collecting NFTs as a private investment, they are generally not in the corporate tax net.
But here is the part people should not ignore.
There is a line where “personal investing” can start to look like “business activity.”
And that line is not always bright.
The FTA has not published a simple crypto-specific test saying, for example, “X trades per month means business” or “Y wallet balance means personal.”
So high-volume crypto traders need to be careful. The risk increases when the activity starts to look organised, repeated, and commercial.
Think about factors like:
- how often trades are made;
- whether there is a clear trading strategy;
- whether the person uses systems, staff, bots, or business infrastructure;
- whether the activity is promoted as a service;
- whether there is commercial intent beyond private investment;
- whether turnover from business activity crosses AED 1 million in a calendar year.
That last number matters.
A natural person carrying on a business or business activity in the UAE becomes subject to corporate tax obligations when total business turnover exceeds AED 1 million in a Gregorian calendar year. Resident natural persons must register by 31 March of the following calendar year if they cross that threshold.
So the question is not only:
“Did I make a gain?”
The better question is:
“Does my crypto activity look like a private investment, or does it look like a business?”
That is where the real tax risk sits.
For companies, the compliance timeline is also important. A corporate tax return must generally be filed within nine months from the end of the relevant tax period. So, for a business with a financial year ending 31 December 2025, the filing deadline would generally be 30 September 2026.
The return is filed through the FTA’s EmaraTax portal, commonly using the corporate tax return form CTRET1.
Missing registration deadlines can be expensive. The FTA has confirmed an administrative penalty of AED 10,000 for late corporate tax registration, although a waiver initiative may apply in specific first-tax-period cases where the tax return is filed within seven months.
So, for 2026, the practical message is this:
Individual investors may remain outside corporate tax when acting personally. Crypto businesses do not. And high-volume traders should not assume they are automatically safe just because the account is in their own name.
VAT — The Game-Changer: Cabinet Decision No. 100 of 2024
VAT is where crypto in the UAE changed in a very real way.
Cabinet Decision No. 100 of 2024 brought one of the most important VAT updates since VAT was first introduced in 2018. It was issued on 6 September 2024 and became effective from 15 November 2024.
The key change sits in Article 42 of the VAT Executive Regulations.
For the first time, certain virtual asset activities were clearly treated as exempt financial services. This includes the transfer of ownership of virtual assets, including virtual currencies. It also includes the conversion of virtual assets.
And here is the important part.
These two exemptions apply retroactively from 1 January 2018.
That is not a small technical update. It can change the VAT position of past transactions.
The amendment also brings safeguarding, managing, and enabling control of virtual assets into the picture. But that rule doesn’t go all the way back to 2018. It applies from 15 November 2024.
So what’s the practical point?
Some businesses may now need to go back and revisit their earlier VAT treatment. If qualifying transactions were handled between 2018 and 2024, refund claims may be worth considering.
But timing matters.
For tax periods from 2018 to 2020, refund claims must be submitted by 31 December 2026. Miss that date, and the right to claim may be lost permanently.
The FTA later gave more details through Public Clarification VATP040, issued on 14 March 2025. This clarification explains how the amendment should be applied in practice.
But there is one big exception.
Mining.
Crypto mining does not fall under this VAT exemption. The FTA made that clear in Public Clarification VATP039, issued in January 2025.
Mining rewards are treated differently. They can be subject to 5% VAT and may also be treated as taxable business income.
So the simple message is this:
Transfers and conversions of virtual assets may be exempt. Certain custody and control services may also be exempt from 15 November 2024. But mining is not in the same basket.
And that one difference can change the whole VAT outcome.
NFT-Specific Tax Treatment — Where It Gets Complex
NFTs are where things can get tricky.
Under UAE VAT law, “virtual assets” can include digital representations of value that are traded or converted digitally for investment purposes. So yes, an NFT can fall into that bucket.
But it depends on what the NFT actually does.
As of April 2026, the FTA has not issued a separate, NFT-only tax guide. So the tax treatment depends on the NFT’s features, purpose, and use.
For individuals, the position is usually simpler. If someone is casually collecting, holding, or selling NFTs as a personal investment, the tax position may remain at 0%.
For NFT businesses, the answer changes. Studios, marketplaces, and minting platforms need to treat NFT-related revenue as business income. Once taxable income goes above AED 375,000, corporate tax can apply at 9%.
Marketplaces also need to think beyond tax.
If an NFT marketplace allows secondary trading, it may be treated like a virtual asset exchange and may need a VASP licence from VARA.
Minting platforms have their own risk area, too. In some cases, they may need permission for virtual asset issuance.
VAT is another trap.
Not every NFT is automatically treated as a virtual asset. If the NFT is really a digital service, standard 5% VAT may apply. That is where many businesses get the classification wrong.
And then there is staking.
NFT staking follows the same broad idea as crypto staking. If it is personal, the tax position may be 0%. If it is part of a business, it can fall into corporate tax, with 9% applying above the relevant threshold.
What VASP Operators Must Declare — Specific Obligations by Activity
This is where the discussion becomes practical.
Not every VASP has the same tax and reporting position. A crypto exchange does not look like a custody provider. A wallet service is not the same as a lending platform. An NFT marketplace has its own moving parts.
So instead of treating all VASPs as one big category, let’s break it down by activity.
Crypto Exchanges
Crypto exchanges sit right in the middle of the compliance conversation.
If an exchange operates in Dubai, it may need to register with VARA. If it operates in another jurisdiction, such as ADGM or DIFC, the relevant regulator will depend on where the business is based and what activities it carries out.
From a tax angle, corporate tax registration is not optional. A crypto exchange must register for corporate tax even if it has not yet made a profit.
The tax itself follows the normal UAE corporate tax rules. Taxable income up to AED 375,000 is taxed at 0%. Any taxable income above that is taxed at 9%.
VAT needs closer attention.
The core transfer and exchange of virtual assets may now fall under the VAT exemption introduced by Cabinet Decision No. 100 of 2024. But that does not mean everything an exchange earns is automatically exempt.
Trading fees, wallet charges, lending income, custody fees, premium account services, listing fees, and other add-on services may need to be reviewed separately. Some may still be taxable.
That is where exchanges often get caught. They treat the whole platform as one service, when tax may look at each revenue stream on its own.
There is also the regulatory reporting side.
A licensed exchange may also have regular reporting duties. That can mean monthly, quarterly, and annual submissions to VARA or the relevant regulator.
And these reports aren’t just box-ticking. They give regulators a clear view of platform activity, risk exposure, compliance controls, and market conduct.
Then comes AML and KYC.
Exchanges need to keep proper records for customer due diligence, transactions, wallet activity, risk assessments, and supporting documents. If VARA, the FTA, or another authority asks for them, those records should be ready.
Put simply, a crypto exchange needs to prove three things:
- It knows its customers.
- It knows where the money and tokens are going.
- And it knows how each revenue stream has been treated for tax.
Custodians and Wallet Providers
Custody sounds simple. Hold the client’s assets. Keep them safe. Done.
But in crypto, it’s rarely that neat.
From 15 November 2024, safeguarding and custody services for virtual assets can fall under the VAT exemption in Article 42. That is good news for custodians and wallet providers, but it also means the service has to be classified properly.
There is also a licensing point.
To qualify for a Custody Services Licence, client assets cannot be mixed together casually. Each client’s virtual assets must be kept segregated in separate wallets. That separation matters. It shows who owns what, and it protects both the client and the provider if questions come later.
Things get more complicated when custody is bundled with other services.
For example, a provider may offer custody, advisory support, and trading access in one package. Tax authorities may not see that as one simple service. Some parts may be exempt. Others may be taxable. That means input VAT may need to be split between exempt and taxable activities.
This is exactly the kind of area that can attract audit attention.
VARA also treats custody as its own regulated activity. It is not something a business can simply tuck inside another licence and assume it is covered. A separate Custody Services Licence may be needed.
And then there is CARF.
Custodians are treated as Reporting Crypto-Asset Service Providers under CARF. That brings a serious data obligation. They must collect and keep customer TINs, wallet addresses, transaction details, annual balances, and fair market values.
The reporting framework starts in 2027, but the data problem starts much earlier.
Custodians need to begin collecting the right information now. Otherwise, when the reporting deadline arrives, they may find themselves trying to rebuild years of missing wallet and customer data. That is not compliance. That is archaeology.
Broker-Dealers and OTC Desks
Broker-dealers and OTC desks have their own tax pressure points.
If they earn trading revenue, spreads, commissions, or other fees, that income needs to be included in the corporate tax calculation. The normal UAE corporate tax rules apply. So once taxable profits go above AED 375,000, the 9% rate becomes relevant.
VAT is less automatic.
Brokerage fees may not always follow the same treatment as the underlying crypto transfer. If the fee is really a service charge, it may be standard-rated for VAT. That is why the service needs to be classified carefully.
There is also the regulatory side.
If the activity is regulated by VARA or another UAE regulator, reporting obligations may apply. That can include regular submissions, activity reports, and compliance records.
And for groups operating across more than one country, or through more than one entity, transfer pricing should not be ignored.
For example, one entity may bring in clients. Another may execute trades. Another may hold technology or provide support. In that case, the group needs to show that fees and profit allocation between entities make commercial sense.
Crypto moves fast. Tax authorities do not. They still want the paperwork.
NFT Platforms and Marketplaces
NFT platforms need to be careful with labels.
Calling something an NFT marketplace does not automatically answer the tax or licensing question. The real issue is what the platform does.
If the marketplace allows secondary trading, it may fall closer to an exchange model. That can bring VASP licensing requirements, especially under the exchange category.
Minting platforms have a different risk. If the platform is involved in creating or issuing virtual assets, virtual asset issuance permissions may be needed.
Then comes income.
Revenue from minting fees, royalties, platform commissions, listing charges, and other marketplace fees should be included in the corporate tax calculation. If taxable profits cross AED 375,000, corporate tax can apply at 9%.
VAT needs a product-by-product review.
Some NFT activity may involve virtual assets. Some may simply be a digital service. If the NFT is treated as a digital service rather than a virtual asset, standard 5% VAT may apply.
That is the danger with NFT platforms. They often treat all token movements the same way. The FTA may not.
A safer approach is to map each product and revenue stream separately. Minting, royalties, platform fees, access passes, gaming assets, memberships, and secondary sales may not all land in the same VAT bucket.
Mining Operations
Commercial mining has a very different tax profile from simply holding crypto.
If mining is carried out as a business, the profits fall under corporate tax. The usual UAE rule applies: taxable profits above AED 375,000 can be taxed at 9%.
VAT is the bigger point here.
The FTA made it clear in VATP039, issued in January 2025, that crypto mining does not qualify for the virtual asset VAT exemption. So mining income can be subject to 5% VAT.
That means mining rewards need proper valuation too. When rewards are received, they should be valued at the market rate on that date. Not later. Not when sold. The receipt date matters.
The good news is that normal business costs can still be considered. Electricity, mining hardware, hosting costs, maintenance, and other commercial mining expenses may be deductible if they are properly recorded and linked to the business.
So mining operators need clean books. They need to know what came in, what it was worth, and what it cost to earn it.
Staking-as-a-Service and DeFi Platforms
Staking and DeFi are still moving targets.
The UAE is heading toward more clarity on staking and yield products, with ADGM expected to refine its rules in 2026 after consultations in 2025. But for now, the tax point is fairly direct.
If staking is offered commercially, the income should be treated as business income for corporate tax purposes.
That matters for platforms offering staking-as-a-service, yield products, validator access, pooled staking, or similar services. The structure may look different from traditional finance, but the tax question is still familiar: is the platform earning business income?
DeFi platforms also need to be careful when UAE users are involved. If a platform facilitates transactions, earns fees, or operates from the UAE, the FTA may look closely at how that activity is being reported.
And then things get even messier when DeFi overlaps with NFTs.
For example, a platform may offer NFT staking, token rewards, liquidity features, and marketplace activity all in one place. That is not one simple tax category. It may touch corporate tax, VAT, VASP licensing, custody rules, and reporting obligations at the same time.
In short, DeFi may be decentralised.
Compliance is not.
What Individual Investors Must — and Must Not — Declare
For individual crypto investors in the UAE, the starting point is simple.
There is no personal income tax return to file.
The UAE does not have a personal income tax system like the US, UK, Canada, or many European countries. So if you are buying crypto personally, holding it, selling it occasionally, or collecting NFTs as a private investment, you are usually not filing a personal tax return just because of that activity.
That is the good news.
Now, the part people should not ignore.
“Individual investor” does not mean “invisible to the tax system.”
The FTA can still look at the facts. If the activity starts to look less like private investing and more like a business, the position can change.
There is no bright-line test. The FTA has not said that 50 trades a month is fine, but 51 trades is a business. It does not work that neatly.
Instead, the risk increases when the activity becomes frequent, organised, and commercial.
For example, someone using a structured trading strategy, running bots, managing other people’s funds, promoting crypto services, or earning regular income from advisory or consulting work is in a different position from someone who simply bought Bitcoin and waited.
The AED 1 million threshold matters here.
If an individual earns AED 1 million or more in annual business revenue from crypto-related work, such as advisory, consulting, trading services, or other commercial activity, corporate tax obligations may apply.
So the real question is not only:
“Am I an individual?”
It is:
“Does what I am doing look like a business?”
That is where the risk sits.
High-net-worth investors should be especially careful. Larger portfolios attract more questions, especially from banks. And banks care about paperwork almost as much as they care about money. Sometimes more, which is rude but predictable.
A good investor file should include the full transaction history: wallet addresses, dates, amounts, token details, and AED value at the time of each transaction.
The source of funds also matters.
If crypto is converted into fiat and moved into a UAE bank account, the bank may ask where the money came from. Transactions through licensed VASPs are usually easier to explain than transfers from unknown wallets or offshore platforms with weak records.
UAE banks generally do not accept direct crypto deposits. The usual route is to convert crypto through a licensed VASP and then receive fiat proceeds into the bank account, supported by proper AML documentation.
If the investor is using a company, the rules change again.
A corporate structure must deal with corporate tax compliance. That can include filing corporate tax returns even where the income is below the taxable threshold. In some cases, that may mean filing a nil return.
There is also a VAT point worth revisiting.
Some investors and businesses may need to review their historical crypto-to-fiat VAT positions. Because of the VAT changes introduced by Cabinet Decision No. 100 of 2024, refund eligibility may exist for certain past transactions.
But the deadline matters.
For 2018 to 2020 tax periods, refund claims must be submitted by 31 December 2026. After that, the opportunity may be gone.
So for individual investors, the practical position is this:
- You may not need to file a personal tax return.
- You may not owe tax on personal crypto gains.
But you still need clean records, clear source-of-funds evidence, and a sharp eye on whether your activity is still investing — or has quietly become a business
CARF — The Global Reporting Framework UAE Is Implementing
CARF is not a “later problem.”
That is the mistake many crypto businesses are making.
Yes, the first exchange of information is expected in 2028. But the data collection starts much earlier. And if your systems are not ready by then, you will not be fixing a reporting issue. You will be trying to rebuild missing data after the fact.
That is a very expensive kind of panic.
In September 2025, the UAE Ministry of Finance signed the CARF Multilateral Competent Authority Agreement. That gave the UAE the legal framework to take part in the automatic exchange of crypto-asset information.
The next phase is already in motion.
During 2025 and 2026, the UAE is expected to work through consultation, detailed rules, and system requirements. Then, from 1 January 2027, CARF data collection is expected to begin.
The first automatic exchange of UAE crypto data with more than 70 partner countries is expected in 2028.
So the deadline may look far away.
It is not.
For VASPs, 2026 is the preparation window.
Who Counts as an RCASP?
CARF applies to Reporting Crypto-Asset Service Providers, usually called RCASPs.
That can include centralised exchanges, custodial wallet providers, brokers, marketplaces, payment processors, and some DeFi platforms.
The key question is simple:
Can the platform identify users and process transactions?
If the answer is yes, CARF may apply.
Calling a platform “decentralised” will not be enough if, in practice, it knows who the users are and helps move the transactions.
Substance wins again. Annoying, but true.
What RCASPs Must Collect and Report
CARF will require much more than basic customer details.
RCASPs will need to collect and report customer tax identification numbers, tax residency information, and personal details. They will also need wallet addresses, transaction records, annual balances, and fair market values.
And this is not limited to crypto-to-fiat activity.
Crypto-to-crypto transactions are also in scope.
That matters because many platforms are not built to capture this data cleanly. They may have wallet records in one system, KYC data in another, transaction data somewhere else, and valuation support sitting in a spreadsheet that only one person understands.
That will not work under CARF.
Reports will need to be submitted in the standard OECD XML format. So this is not just a tax issue. It is a data issue. A systems issue. A governance issue.
What VASPs Should Do Now
The first step is to decide whether the business is an RCASP.
Do not leave this as a vague compliance question. Document the analysis. Look at the actual activity, not just the label on the website.
Next, upgrade KYC processes.
VASPs should start collecting the right data fields now, especially tax identification numbers and tax residency details. Waiting until 2027 may mean going back to thousands of users and asking for missing information. That is not a fun customer experience. It is also not a reliable compliance strategy.
Systems also need testing.
Businesses should check whether their current data can be captured, organised, valued, and exported in line with OECD XML schema standards. If the answer is no, the fix needs to start before the reporting obligation becomes live.
CARF should also be connected with existing VARA, AML, and KYC frameworks.
Otherwise, businesses may end up with duplicate checks, inconsistent customer files, and three teams collecting the same information in three different ways. That creates gaps. It also creates headaches.
Someone senior should own the CARF and CRS 2.0 workstream.
Not “tax will look at it later.”
Not “compliance has it somewhere.”
One accountable owner, with clear responsibilities, proper coordination between tax, compliance, legal, operations, and IT.
VASPs should also monitor the UAE Ministry of Finance updates during 2026. The secondary rules and local technical schema will matter. They will shape what needs to be collected, how it must be reported, and what the local filing process looks like.
A Note for VASPs With EU Clients
If a UAE VASP has EU clients, the clock may already be running.
The EU’s DAC8 rules are already live. EU member states started collecting crypto data from 1 January 2026, with the first reporting to tax authorities expected in 2027.
So a UAE business with EU exposure cannot simply wait for the UAE CARF go-live date in 2027.
For those businesses, CARF preparation is not early.
It is already due.
Accounting Records UAE VASPs and Crypto Businesses Must Maintain
This is the part many crypto businesses underestimate.
They think compliance means getting the licence, filing the return, and keeping a few exchange reports.
That is not enough.
For UAE tax purposes, records matter. And for crypto businesses, they matter even more because the asset is digital, the movement is fast, and the evidence is often spread across wallets, exchanges, banks, contracts, and blockchain explorers.
A clean tax position is only useful if you can prove it.
What the FTA Expects You to Keep
Under UAE tax rules, businesses generally need to keep financial records for at least seven years from the end of the relevant tax period.
For VAT, records must generally be kept for at least five years under Federal Decree-Law No. 8 of 2017.
That means a VASP or crypto business should be able to produce the basics without drama:
- Invoices.
- Bank statements.
- Contracts.
- Payroll records.
- Audited accounts.
- Intercompany agreements.
- Supporting documents for deductions.
- And anything else used to prepare tax returns, VAT returns, or financial statements.
This is not “admin.” This is a defence.
If the FTA asks how a number was calculated, the business needs to show the trail. Not a guess. Do not rebuild it from screenshots. Do not ask the finance team to “check the old Telegram group.”
Crypto Needs a Stronger Record Trail
Crypto records need more detail than ordinary accounting records.
Every transaction should have a clear log. That means the date, time, asset type, quantity, and AED market value at the time of the transaction.
The AED value is especially important.
Corporate tax is calculated in AED. So if a business earns, swaps, pays, stakes, mines, or receives crypto, it needs a reliable way to show what that crypto was worth when the transaction happened.
Cost basis also needs to be tracked properly.
Without a cost basis, profit calculations become messy very quickly. And messy calculations are exactly what tax audits do not enjoy.
Businesses should also document their fair market valuation method. For example, they may use the daily closing price from a recognised exchange. The key is consistency. Pick a reasonable method, apply it properly, and keep the evidence.
Do not change the method every time the number becomes inconvenient.
That is not valuation. That is storytelling.
Wallets, Ownership, and Client Assets
Wallet records are now a core part of crypto accounting.
VASPs should maintain wallet address records, not only for today’s tax position but also for CARF readiness. When global crypto reporting begins, wallet-level information will become even more important.
Proof of ownership also matters.
A business should be able to show which digital assets belong to the firm, which belong to clients, and which are held through third parties.
For custodians, this is critical.
Client assets and firm assets must be segregated. If the same wallet, ledger, or internal account is used too casually, the business may struggle to prove who owns what.
That creates tax risk.
It also creates regulatory risk.
And if client money is involved, it creates the kind of risk nobody wants to explain in a board meeting.
The Blockchain Audit Trail
Crypto businesses sometimes assume blockchain records solve everything.
They do not.
Blockchain gives a trail, but the business still needs to connect that trail to its books. A wallet address on its own does not explain the customer, contract, purpose, tax treatment, AED value, or revenue category.
By 2026, the FTA’s digital audit capabilities are stronger. Audits involving blockchain activity may now expect verifiable on-chain records, supported by proper accounting documentation.
So manual bookkeeping and scattered spreadsheets are no longer enough for serious operators.
A spreadsheet can help.
A spreadsheet cannot be the whole finance department.
Systems UAE Crypto Businesses Should Consider
Larger VASPs and crypto businesses should invest in systems that can keep up with the activity.
That may include integrated accounting software that supports FTA-compliant Audit Files.
Real-time reconciliation between VAT returns and bank statements.
Automated TRN validation for vendors.
Cloud-based storage for tax invoices and supporting documents.
And, for larger operators, blockchain-based ERP integration that connects wallet activity with the accounting system.
The goal is simple.
When a transaction happens, the business should be able to trace it from wallet to ledger, from ledger to tax return, and from tax return back to source evidence.
That is what good crypto accounting looks like in 2026.
Not prettier spreadsheets.
Better proof.
Penalties for Non-Compliance — What’s at Stake in 2026
Crypto compliance is not just about “being organised.”
There is real money at stake.
And in some cases, the cost is not only financial. A business can face regulatory action, licence issues, reputational damage, and, for serious violations, even criminal exposure.
Here’s what UAE crypto businesses and VASPs should keep on their radar.
| Violation | Possible penalty or consequence |
| Late or missed corporate tax registration | AED 10,000 fixed fine |
| Late corporate tax return filing | AED 10,000 for the first offence; AED 50,000 or more for repeat offences |
| Unpaid tax after a voluntary disclosure | 1% per month on the unpaid amount |
| Error found during an FTA audit | Penalties may reach AED 20,000 or more |
| VARA non-compliance or operating without a licence | Penalties may reach up to AED 10,000,000, plus licence suspension |
| Serious VARA violations | Criminal charges may be possible |
| Late VAT refund claim for 2018–2020 tax periods | The right to claim may be lost after 31 December 2026 |
| Missing seven-year record-keeping | Deductions may be disallowed, with additional penalties |
The message is simple.
Missing a deadline is not harmless. Misclassifying revenue is not harmless. Running a crypto business without the right licence is definitely not harmless.
For VASPs, the risk grows because several authorities may be involved at the same time.
The FTA may look at tax returns, VAT treatment, deductions, and records.
VARA or another regulator may look at licensing, market conduct, client assets, AML controls, and reporting.
Banks may ask for source-of-funds evidence before accepting fiat proceeds from crypto activity.
And under CARF, cross-border reporting will add another layer of visibility.
So the old approach, “we will fix the records later,” is no longer safe.
Later is where penalties live.
How ADEPTS Can Help Your Crypto or NFT Business Stay Compliant in 2026
The FTA is no longer asking what crypto is.
It is asking how you accounted for it.
That is where ADEPTS comes in.
For crypto businesses, VASPs, NFT platforms, wallet providers, and blockchain companies, compliance is no longer a single tax question. It sits across VAT, corporate tax, accounting, licensing, AML records, CARF reporting, and sometimes transfer pricing too.
One weak link can create a very expensive mess.
ADEPTS helps crypto and NFT businesses get their UAE tax and accounting position in order before the questions start coming from the FTA, VARA, ADGM, DIFC, banks, or overseas reporting authorities.
Our work includes VAT compliance for VASPs, including reviews under Cabinet Decision No. 100 of 2024, retroactive VAT position checks, and input VAT apportionment for mixed supplies.
We also support corporate tax registration and filing for crypto businesses, including exchanges, custodians, OTC desks, NFT marketplaces, mining operators, staking platforms, and blockchain service companies.
For businesses still relying on wallet exports, spreadsheets, and “we’ll reconcile it later,” we help build proper accounting and bookkeeping systems for blockchain activity. That means transaction records, AED valuations, cost basis tracking, wallet mapping, and evidence that can stand up to an FTA review.
CARF is another area where early preparation matters. ADEPTS can help assess whether your business is a Reporting Crypto-Asset Service Provider, identify gaps in your KYC and transaction data, and prepare your systems for the 2027 reporting environment.
If the FTA comes calling, we can also support with audit responses, documentation, reconciliations, and technical explanations.
And for crypto groups operating through more than one entity or jurisdiction, we help with transfer pricing. That includes reviewing how revenue, costs, technology, staff, and risk are shared across the group.
The UAE crypto landscape is not one straight road. VARA, ADGM, DIFC, and the FTA can all matter, depending on where you operate and what you actually do.
ADEPTS understands that overlap.
So you are not getting a generic tax answer pasted onto a crypto business. You are getting UAE-focused advice built around the way VASPs and digital asset companies actually operate.
Book a consultation with ADEPTS and review your crypto tax, VAT, accounting, and CARF readiness before 2026 turns into a deadline problem.
Conclusion
The UAE is still one of the world’s most attractive places to build, hold, and scale a digital asset business.
But the old story is gone.
Crypto in the UAE is no longer just about “0% tax” and easy access to global markets. It now sits inside a multi-layered compliance environment, with corporate tax, VAT, regulator reporting, AML records, CARF, accounting systems, and audit trails all working together.
That is not bad news.
It simply means the market has matured.
For serious operators, this creates an advantage. Businesses with clean books, clear licensing, proper tax treatment, and strong records will have an easier time dealing with banks, investors, regulators, and the FTA.
Crypto and NFT tax accounting in the UAE in 2026 is no longer optional — it is a strategic necessity.
And the bar is still rising.
CARF data collection begins in 2027. E-invoicing is moving ahead, with the UAE pilot expected from July 2026. The FTA’s digital audit capabilities are expanding. Every quarter, the message becomes clearer: crypto businesses need better systems, better records, and better answers.
The opportunity is still here.
But so is the scrutiny.
Speak to ADEPTS to review your crypto tax, VAT, accounting, and CARF readiness before a deadline, audit, or bank query turns into a problem.
FAQs:
In most cases, no. If you’re investing personally — buying, holding, and selling crypto — there’s generally no tax. But if your activity starts to look like a business, the FTA may see it differently.
The standard UAE corporate tax applies. 0% on taxable income up to AED 375,000, and 9% on anything above that.
Usually not. Transfers and conversions of virtual assets are now treated as VAT-exempt under Cabinet Decision No. 100 of 2024, with retroactive effect.
It depends. Casual personal sales are generally not taxed. But if you’re running an NFT business, the income may fall under corporate tax. VAT also depends on whether the NFT is treated as a virtual asset or a digital service.
VATP039 is an FTA clarification that confirms crypto mining does not qualify for VAT exemption. Mining rewards may be subject to 5% VAT and treated as taxable business income.
Usually within nine months after the year-end. So for a 31 December 2025 year-end, the deadline would generally be 30 September 2026.
If you operate through a company, yes — you still need to file a corporate tax return, even if no tax is payable. For individuals, there is generally no filing requirement unless the activity is treated as a business.
CARF is a global reporting framework for crypto transactions. In the UAE, data collection is expected to begin in 2027, with international data exchange starting in 2028.
In Dubai, it is typically VARA (outside DIFC). SCA applies more broadly at the federal level, depending on the activity and location.
Possibly. Because the VAT exemption is retroactive to 1 January 2018, some businesses may be able to claim refunds — but deadlines apply, especially for older tax periods.
If it is personal, usually no. If staking is part of a business activity, it may be treated as taxable income under corporate tax.
Detailed transaction logs, wallet records, AED valuations, cost basis tracking, contracts, invoices, and full financial records — typically retained for at least seven years.
Not automatically. You may qualify for 0% as a Qualifying Free Zone Person, but strict conditions apply. It is not guaranteed.
Penalties can reach up to AED 10,000,000, and the business may face suspension or further regulatory action.
It can change the VAT treatment. Some NFT-related transactions may fall under the virtual asset exemption, but others — especially digital service elements — may still be subject to 5% VAT. Classification matters.
References
- Updates to UAE VAT Executive Regulation No 100 of 2024.
https://assets.kpmg.com/content/dam/kpmg/ae/pdf-2024/10/update-to-the-uae-vat-executive-regulation.pdf. - ADGM Regulations and Rules. 7 Oct. 2024, https://www.adgm.com/legal-framework/rules-and-regulations.
- Amended Common Reporting Standard XML Schema.
https://www.oecd.org/en/publications/amended-common-reporting-standard-xml-schema_dd7ee57a-en.html. - Authority, Federal Tax. ‘Federal Tax Authority – United Arab Emirates’. Federal Tax Authority United Arab Emirates, https://tax.gov.ae//en/default.aspx.
- Cabinet Decision No. 111/2022 on the Regulation of Virtual Assets and Their Service Providers | Virtual Assets Regulatory Authority (VARA).
https://rulebooks.vara.ae/rulebook/cabinet-decision-no-1112022-regulation-virtual-assets-and-their-service-providers?utm_source=chatgpt.com - Cabinet Resolution No. (111) of 2022 Regulating Virtual Assets and the Related Service Providers.
https://uaelegislation.gov.ae/en/legislations/1623/download. - Crypto-Asset Reporting Framework: Frequently Asked Questions.
https://www.oecd.org/content/dam/oecd/en/topics/policy-issues/tax-transparency-and-international-co-operation/faqs-crypto-asset-reporting-framework.pdf. - Custody Services Rulebook | Virtual Assets Regulatory Authority (VARA).
https://rulebooks.vara.ae/rulebook/custody-services-rulebook. - DFSA Crypto Token Regulation. https://www.dfsa.ae/crypto.
- Digital Assets. 21 Aug. 2024, https://www.adgm.com/business-areas/digital-assets.
- EmaraTax. https://u.ae/en/information-and-services/finance-and-investment/taxation/emaratax.
- Federal Decree by Law on Concerning Value-Added Tax (VAT).
https://uaelegislation.gov.ae/en/legislations/1227. - Federal Decree-Law No. (47) of 2022 On Corporate and Business Tax.
https://uaelegislation.gov.ae/en/legislations/1582/download.
- Free Zone Persons Corporate Tax Guide | CTGFZP1 May 2024.
https://tax.gov.ae/Datafolder/Files/Guides/CT/Free%20Zone%20Persons%20-%2020%2005%202024%20final%20for%20GCD.pdf. - H. Regulatory Reporting | Virtual Assets Regulatory Authority (VARA).
https://rulebooks.vara.ae/rulebook/h-regulatory-reporting. - organization|authorurl:https://www.ey.com/en_gl/people/ey, authorsalutation:|authorfirstname:EY|authorlastname:Global|authorjobtitle:Multidisciplinary professional services. EU Adopts Directive Introducing Tax Transparency Rules for Crypto Assets (DAC8).
https://www.ey.com/en_gl/technical/tax-alerts/eu-adopts-directive-introducing-tax-transparency-rules-for-crypt. - Payment Token Services Regulation | CBUAE Rulebook.
https://rulebook.centralbank.ae/en/rulebook/payment-token-services-regulation - ‘Public Clarification No. 40 on Amendments to the VAT Executive Regulation’. KPMG,
https://kpmg.com/ae/en/insights/tax-insights/public-clarification-no-40-on-amendments-to-the-vat-executive-regulation.html. - UAE Ministry of Finance Signs Crypto-Asset Reporting Framework (‘CARF’) Agreement and Launches Public Consultation. https://www.pwc.com/m1/en/tax/documents/2025/carf-and-crs-update.pdf.
- VAT Public Clarification VATP040 – Amendments to the Executive Regulations of Federal Decree-Law No. 8 of 2017 on Value Added Tax – Cabinet Decision No. 100 of 2024 March 2025.
https://www.pwc.com/m1/en/tax/documents/2025/tax-alert-public-clarification-VATP040.pdf. - VATP039: UAE VAT Public Clarification on Cryptocurrency Mining – January 13, 2025 – VATupdate.
https://www.vatupdate.com/2025/01/17/vatp039-uae-vat-public-clarification-on-cryptocurrency-mining-january-13-2025 - https://assets.kpmg.com/content/dam/kpmg/ae/pdf-2024/10/update-to-the-uae-vat-executive-regulation.pdf.
