The Rise of Crypto Fraud: Protecting Your Customers from Pig Butchering and VASP-related Scams
How do you stop a scam you can’t even see coming?
In the UAE and beyond, cryptocurrency has become a critical component of the UAE’s institutional financial architecture.
But as wallets grow, so does the danger. The UAE crypto fraud 2026 is hitting harder than ever. Sophisticated tricks like the pig butchering scam and calculated VASP scams in the UAE are leaving victims blindsided and broke.
The targets in 2026 have shifted toward institutional treasuries and sophisticated professionals. Without crypto fraud prevention in the UAE, the odds are stacked against them. In early 2026, analysts report that 76% of AI-driven scams fall within the highest quartile for scale and severity, contributing to global losses projected at $17 billion annually. This surge underscores the critical importance of fraud and error in auditing as a foundational defense mechanism for businesses navigating the new reality of synthetic actors and AI-enhanced deception.
This is where ADEPTS steps in. As a trusted partner, we help companies close the gaps, shield their customers, and fight back against crypto investment scams in the UAE before the damage is done. Additionally, initiatives like the FBI’s Operation Winter SHIELD, launched in 2026, provide concrete digital security protocols to help organizations proactively counter cyber-enabled fraud.
Understanding Crypto Fraud in 2026: The Federal Enforcement Context
The UAE has become one of the fastest-growing crypto hubs in the world. Digital assets are finding a firm home here, from individual traders to global exchanges. But rapid growth comes with a price. By early 2026, losses have escalated as AI-enabled scams extract nearly 4.5 times more money per victim than traditional schemes. That’s not just a statistic. That’s life savings, business capital, or retirement funds gone in a single click. It’s the cost of being caught in a UAE crypto fraud 2026 trap.
The challenge? The UAE’s crypto ecosystem is evolving faster than its safeguards. UAE crypto regulations are now centered on compliance as a licensing condition, with Federal Decree-Law No. 33 of 2025 giving the Capital Markets Authority (CMA) explicit authority over virtual assets and extraterritorial reach for activities targeting UAE clients. Scammers adapt quickly, exploiting gaps in licensing, compliance, and investor awareness. New schemes, like VASP scams in the UAE, operate under increasingly tight scrutiny.
Regulators are stepping up. The Central Bank of the UAE (CBUAE) is setting anti-fraud standards. VARA in Dubai continues to provide innovation-specific oversight. The CMA now enforces federal-level licensing and supervision for all virtual assets used for investment purposes. Together, they’re creating a safer environment, but it’s still a race against time.
The Federal Token Admission Gateway and the CMA Green List
No virtual asset can be legally traded in the UAE unless it is accepted onto the official federal list maintained by a CMA-licensed platform. Key regulatory mechanisms for 2026 include:
| Feature of 2026 Regulation | Impact on VASPs | Legal Reference |
| Federal Token Admission | CMA de facto veto power over asset listings. | FDL 33 of 2025 |
| CBUAE Licensing Deadline | September 16, 2026, for DeFi and stablecoins. | FDL 6 of 2025 |
| Capital Architecture | Minimum capital requirements up to AED 4 million. | Decision 4/R.M/2026 |
| Enforcement Powers | Fines up to AED 1 billion and asset seizures. | CBUAE PTSR 2024 |
These changes emphasize that compliance is now non-negotiable. Entities must meet federal licensing requirements or risk severe penalties, including asset seizures and fines reaching AED 1 billion.
What is Pig Butchering? The Devastating Scam Explained
It sounds strange, but it’s deadly serious. The pig butchering scam in the UAE is a long-running scam built to drain victims dry. The name comes from how fraudsters “fatten up” their targets before the kill.
This scam traces its roots to industrialized scam compounds using agentic AI. It’s now global and thriving in crypto markets. Scammers in 2026 use deepfake video clones and automated LLMs to conduct multi-layered grooming in a fraction of the time. They appear on dating apps, slide into social media DMs, or message on WhatsApp. The tone is friendly, even caring. Nothing about it feels like a scam.
Then comes the “fattening” phase. Victims are slowly guided into investing in what looks like a high-return crypto opportunity. In reality, it’s nothing more than a polished scam. Accounts, dashboards, and transaction histories are all fabricated. The more you invest, the more convincing the setup looks until the day your money vanishes.
Globally, pig butchering has cost victims an estimated $4.4 billion in recent years. By 2026, AI-enabled scam operations are becoming more severe, faster, and more profitable, with some fraud networks extracting around 4.5 times more value than traditional scams. In the UAE, it’s one of the fastest-growing forms of crypto investment scams UAE.
The 2026 Evolution: Agentic AI and Synthetic Media
The threat is no longer limited to scripted messages sent by human operators. In April 2026, coordinated enforcement action against Burma-linked scam centres showed how these operations are moving from manual outreach to industrial fraud models supported by AI, phishing-as-a-service tools, and synthetic identities.
This matters because the psychological “fattening” phase is now reinforced by deepfake impersonations of CEOs, officials, and trusted professionals. Victims may receive a voice note, video call, or WhatsApp message that appears to come from a real person. Telegram and WhatsApp are increasingly used to manage these conversations at scale, while AI tools help scammers maintain multiple emotional scripts at the same time.
Research on AI-enabled scams shows that a large share of these operations now fall into the highest-risk category for scale and severity. That means higher daily revenue, more transaction activity, and more victims being managed at once. For businesses and professionals, the risk is no longer just emotional manipulation. It is synthetic trust built through voice cloning, deepfake bots, and automated relationship-building.
The warning signs are there, if you know them:
- Unsolicited contact from strangers claiming quick profits
- Heavy use of personal flattery or emotional connection
- Pressure to move money into little-known platforms
- Promises of guaranteed returns
- Unexpected voice notes, video calls, or distress messages that push you to act quickly
- Requests to move the conversation to WhatsApp, Telegram, or a private investment group
Once you’re inside the trap, it’s almost impossible to get your funds back. That’s why awareness is your first line of defense.
Virtual Asset Service Provider (VASP) related Scams: The Regulatory and Fraud Risk
Virtual Asset Service Providers, or VASPs, are the backbone of the crypto ecosystem. They handle exchanges, transfers, custody, and even ICO facilitation. When licensed and compliant, they’re critical to safe market growth. When they’re not, they become prime tools for crime.
The UAE has set clear rules. The 2026 Federal VASP framework mandates a three-module compliance rulebook under CMA Decision No. 4/R.M/2026, issued in February 2026. The framework is built around the General Framework Module, the Business Regulation Module, and the Alternative Trading System Module. Licenses are issued by authorities like VARA, the Capital Markets Authority (CMA), and the Central Bank, each working to create a safer environment for crypto transactions.
For any Virtual Asset Service Provider UAE operator, licensing is no longer a general approval exercise. The business must be mapped to the correct licensed activity, the correct regulator, and the correct token category. The CMA framework now recognises eight licensed activity categories: Principal Dealer, Agent Dealer, Custodian, Custody Arranger, MTF Operator, Investment Advisor, Portfolio Manager, and Transaction Arranger.
Selected 2026 VASP Capital Requirements
| VASP License Category (2026) | Activity Description | Minimum Capital Requirement |
| Category 1 | Dealing as Principal / Market Maker | AED 4,000,000 |
| Category 3 | Providing Custody and Vault Services | AED 3,000,000 |
| Category 5 | Portfolio Management and Objective Setting | AED 1,000,000 |
| Category 6 | Operating a Multi-Party Trading Platform / Exchange | AED 500,000 |
The problem is the rise of illicit operators. In 2026, the warning signs are not limited to vague communication, unrealistic returns, or missing office details. The bigger risk is structural non-compliance. A platform may appear professional but still operate outside the permitted activity category, offer tokens that cannot be admitted under the federal framework, or provide custody, exchange, advisory, or portfolio services without the correct licence.
The 2026 structural prohibitions are also clearer. Privacy tokens and algorithmic tokens are effectively outside the permitted perimeter. Any platform promoting, arranging, or dealing in these assets should be treated as a serious regulatory and fraud risk. Many of these unlicensed VASPs are pipelines for money laundering, large-scale Cryptocurrency scams in the UAE, and other financial crimes.
Federal and Emirate-Level VASP Requirements
| Regulatory Layer | Main Scope | Practical Impact for VASPs |
| CMA Federal Framework | Investment-related virtual assets and VASP activities across the UAE, outside the financial free zones | Activity-based licensing, capital requirements, token admission controls, and federal compliance oversight |
| VARA Dubai Framework | Dubai-based virtual asset activities outside DIFC | Dubai-specific licensing, marketing controls, public register checks, and local supervisory requirements |
| CBUAE Framework | Payment tokens, stablecoins, stored value, and financial infrastructure linked to payments | Payment-token compliance, anti-money laundering controls, and stricter monitoring of financial flows |
| DIFC / ADGM Frameworks | Financial free zone virtual asset activity | Separate DFSA and FSRA requirements that do not automatically replace federal, VARA, or CBUAE obligations |
UAE regulators have taken notice. In a joint move, authorities released new guidance to shut down unlicensed providers, enforce penalties, and improve reporting channels. Licensed banks and crypto companies are also tasked with monitoring suspicious transactions and flagging risks early.
Existing licensees now have a one-year compliance window to migrate to the new Business Regulation and ATS Modules, ending in February 2027. This gives firms limited time to review their activity permissions, capital position, governance structure, token listings, custody model, AML controls, and client protection procedures.
Compliance isn’t just about ticking boxes. Following the FATF Travel Rule, which mandates accurate, transparent transaction data, is key to preventing fraud before it starts. In the 2026 environment, it also means proving that the VASP’s licensing status, token admissions, transaction monitoring, governance, and client safeguards can withstand regulatory review.
Emerging Crypto Fraud Techniques in 2026
UAE crypto fraud 2026 often starts with a friendly message. Or maybe a phone call from someone claiming to be from the authorities. The tone is calm, the details convincing. By the time you realise something’s wrong, the account is empty.
Scammers in 2026 are no longer just sending suspicious links. They’re running full-scale operations. UAE crypto fraud 2026 now blends social manipulation with technology that can tamper with telemetry, poison wallet addresses, clone voices, and create fake credentials. A scammer can look like a police officer online in minutes and sound like one, too.
Money laundering has also taken a sharper turn. Stolen funds often move through cross-chain bridges and decentralised exchanges, creating industrialized laundering routes that are harder to trace than direct wallet-to-wallet transfers. It’s quick, discreet, and leaves little trace.
The worst part? Many scams are now stitched together. A fake trading platform feeds into a Ponzi-style payout. A romance scam doubles as a pig butchering scam in the UAE. A synthetic identity may be built from breached data, AI-generated documents, and mismatched personal records that look credible at onboarding. . This layering hides the fraud inside what looks like legitimate activity.
Types of Errors and Frauds in Auditing: Identifying Business Logic Flaws
For auditors, the risk is no longer limited to missing invoices, altered records, or unsupported transactions. In crypto ecosystems, the most serious errors can sit inside smart contract logic, wallet permissions, platform access controls, and transaction approval workflows. These are the types of errors and frauds in auditing that standard ledger testing may not detect.
A business logic flaw occurs when a system works exactly as coded but produces an unintended or exploitable result. In a crypto platform, this may allow unauthorised withdrawals, bypassed approval limits, manipulated pricing, or incorrect settlement of customer assets. Access control flaws create a similar risk where the wrong person, wallet, bot, or administrator can approve, move, freeze, or redirect funds.
This is why 2026 crypto audits must look beyond the ledger. Auditors need to test how smart contracts behave, how privileged access is granted, how wallet addresses are verified, how transaction alerts are triggered, and how exceptions are reviewed. Without that deeper testing, fraud may appear as normal platform activity until the funds have already moved.
In a market moving this fast, crypto fraud prevention in the UAE isn’t a nice-to-have; it’s the only way to keep customers a step ahead.
Best Practices for Protecting Customers in the UAE’s Crypto Space
Fraud moves fast. Protection has to move faster. In 2026, customer protection is no longer only about practical safety steps. It is also about mandatory audit readiness as the UAE prepares for the June 2026 FATF Mutual Evaluation onsite review. Here’s what works in the UAE’s high-growth crypto market.
Start with compliance that actually bites. Strong AML and KYC checks applied with a risk-based approach stop many Cryptocurrency scams in the UAE before they reach the customer. Make sure you know exactly who you’re dealing with, not just at onboarding but throughout the relationship. For VASPs and crypto-facing businesses, this now means stronger identity verification, biometrics with passive liveness checks, UBO screening, sanctions controls, and documented risk decisions that can be produced during a regulatory inspection.
Monitor transactions as if every one matters. Real-time, API-driven transaction surveillance should replace basic periodic checks. Sudden large transfers, repeated use of new wallets, or activity in high-risk jurisdictions should trigger immediate reviews. The focus should be on on-chain graph analytics, wallet behaviour, cross-chain movement, exposure to mixers or high-risk exchanges, and customer activity that no longer matches the original risk profile.
Your team is a critical line of defense. Train employees to spot the social and technical red flags of crypto investment scams in the UAE, and empower them to act quickly. In 2026, that training should also cover fraud and error in auditing, synthetic identity risks, deepfake impersonation, suspicious wallet behaviour, and internal control overrides. Standard statutory audits are no longer enough where collusion, privileged access, smart contract flaws, or hidden wallet movements can sit outside normal accounting records. Forensic Auditing is now required to test how fraud actually happens inside the system.
Customers also need the right tools and habits. Teach them how to store assets securely, avoid suspicious links, and use hardware wallets. Private keys should be treated like the keys to a vault, never shared, never stored online.
When something feels wrong, report it fast. The UAE’s Financial Intelligence Unit makes it simple through the goAML system. In the 2026 environment, reporting should not be treated as a narrative-only exercise. The quality of structured data matters. Names, wallet addresses, transaction hashes, counterparties, risk indicators, timelines, and supporting documents should be captured clearly so that suspicious activity can be reviewed, analysed, and escalated without delay.
Finally, give yourself an edge. Use blockchain analytics and AI-driven fraud detection to identify suspicious activity before it becomes a breach. With threats like VASP scams in the UAE and pig butchering on the rise, proactive detection is non-negotiable. Businesses should also retain VASP compliance documentation for 8 years where applicable, including CDD files, transaction monitoring alerts, Travel Rule records, STR decisions, board reporting, audit trails, and evidence of remedial action.
Compliance Checklist 2026
| Compliance Area | Requirement Detail | Reporting / Control System |
| CDD & KYC | Biometrics with passive liveness detection, customer risk profiling, sanctions screening, and UBO verification | Internal systems / SACM |
| Travel Rule | Mandatory originator and beneficiary data exchange for virtual asset transfers above AED 3,500 | TRP / Notabene or equivalent Travel Rule solution |
| Transaction Monitoring | On-chain graph analytics, wallet behaviour monitoring, cross-chain risk alerts, and behavioural baselines | goAML-supported escalation workflow |
| UBO Verification | Identification of natural persons with more than 25% ownership or control | Ministry of Economy / internal AML file |
| Audit Trail | Documented alerts, escalation notes, MLRO decisions, STR rationale, and board-level reporting | Compliance management system |
The MLRO Function in 2026: Personal and Objective Liability
The Money Laundering Reporting Officer is no longer a back-office formality. For regulated entities, the MLRO must be capable of challenging management, escalating suspicious activity, and ensuring that AML/CFT controls operate in practice, not only on paper. The function should have direct access to the board, proper authority, sufficient resources, and clear independence from commercial pressure.
In a 2026 inspection, regulators will not accept ignorance as a defense. If suspicious activity was visible, if alerts were ignored, or if controls were overridden without proper documentation, the issue becomes a governance failure as much as a compliance failure. The MLRO must therefore maintain evidence of decisions, training, monitoring, reporting, and remediation. Without that evidence, even a technically compliant policy may fail under regulatory review.
Future Outlook: Strengthening Crypto Security in the UAE
The rules are tightening, and that’s a good thing. UAE crypto regulations 2026 are moving from policy development to enforcement. The September 2026 reconciliation deadline for DeFi-linked models, payment tokens, and virtual-asset payment services is now a hard reference point for businesses operating inside the UAE financial perimeter. Each update raises the cost of doing business for criminals.
Fraud prevention is also getting smarter. New blockchain analytics tools, AI-powered monitoring, and improved identity verification are making it harder for scams like the pig butchering scam in the UAE to hide in plain sight. Transparency isn’t just a buzzword; it’s becoming the norm. By 2027, the market is expected to move further toward supervised AI, where fraud-scoring models must be explainable, auditable, tested for bias, and supported by proper human oversight before they are relied on for customer-risk decisions.
But technology alone won’t win this fight. Public-private collaboration is critical. Regulators, banks, licensed VASPs, and fintech firms must share intelligence and act in sync to stay ahead of increasingly complex threats, from VASP scams in the UAE to multi-layered investment fraud. The direction is also toward harmonisation. VARA remains important for Dubai-specific virtual asset innovation, while institutional players seeking broader UAE reach are likely to pay closer attention to direct CMA licensing, CBUAE requirements for payment tokens, and the separate rules of DIFC and ADGM.
VARA’s designation by the Ministry of Finance as a competent authority for certain UAE Corporate Tax purposes also strengthens its place within the wider federal tax and regulatory framework. This matters because virtual asset businesses are no longer being viewed only through a licensing lens. Their tax treatment, qualifying activities, governance, and compliance substance are now part of the same institutional review.
The next phase will also bring deeper cyber-resilience questions. The Digital Dirham is being developed as a secure central bank digital currency for retail, wholesale, and cross-border use, and global financial regulators are already pushing financial institutions to prepare for post-quantum cryptography. For crypto businesses, that means long-term security planning cannot stop at wallet controls and transaction monitoring. It must also consider encryption resilience, private-key protection, and future-proof infrastructure.
ADEPTS is committed to that fight. We invest in advanced crypto fraud prevention UAE tools, stay aligned with global best practices, and work closely with clients to protect customers before scams take root. The tactics will change. Our resolve won’t.
How ADEPTS Supports UAE Businesses in Combating Crypto Fraud
Fighting UAE crypto fraud in 2026 takes more than basic compliance checklists. It demands expertise, speed, and independent AML audits, forensic readiness assessments, and compliance intelligence built for the way scams and regulatory inspections work today. That’s where ADEPTS comes in.
We specialise in AML, KYC, and fraud detection solutions designed for the realities of the crypto market. Every risk management framework we build is customised to fit our client’s needs — and to align with UAE crypto regulations 2026 as they move from policy updates to active enforcement.
Our technology works in real time. Transactions are monitored the moment they happen, with suspicious activity flagged and reported through secure channels like the goAML system. For 2026, ADEPTS also supports customized goAML 2.0 readiness, API mapping, structured data capture, and escalation workflows so suspicious activity is documented in a format that can withstand regulatory review.
But tools alone aren’t enough. ADEPTS delivers forensic audit support that looks beyond ordinary accounting records. Our “Forensic Blood-hound” approach focuses on the risks traditional audits often miss, including smart contract vulnerabilities, access control flaws, hidden wallet permissions, unusual approval routes, and business logic gaps inside crypto platforms. This directly supports the assessment of types of errors and frauds in auditing, especially where fraud is embedded in system behaviour rather than visible in the ledger.
For licensed VASPs, banks, fintechs, and crypto-facing businesses, ADEPTS also helps assess whether the entity is ready for the 2026 inspection cycle. This includes reviewing AML/CFT policies, customer due diligence files, transaction monitoring alerts, Travel Rule processes, MLRO reporting, board oversight, and evidence of remedial action.
Where a business falls within the CBUAE payment-token or virtual-asset payment perimeter, ADEPTS can support regularisation planning before the 16 September 2026 deadline. This is critical because unlicensed or non-compliant activity may expose firms to severe enforcement action, including administrative penalties that can reach AED 1 billion under the expanded CBUAE enforcement framework.
For licensed VASPs, banks, and financial institutions, partnering with ADEPTS means more than compliance. It means gaining a trusted ally who understands VASP scams in the UAE, Cryptocurrency scams in the UAE, and the tactics behind crypto investment scams in the UAE, and knows how to stop them. In 2026, that support is not only about preventing fraud. It is about proving to regulators, boards, banks, and customers that the business is audit-ready, enforcement-ready, and structurally protected.
Conclusion
Crypto crime isn’t slowing down, and businesses that ignore the risk put both their money and reputation on the line. Scams are getting smarter, and old ways of fighting them won’t hold up. What makes the difference is having the right people and tools in place before problems surface.
That’s where ADEPTS can help. With practical strategies, clear insight into regulations, and hands-on experience, they guide businesses to spot risks early and stay protected. Working with experts who know the landscape means you can focus on growth without constantly looking over your shoulder.
FAQs:
You can check directly with VARA in Dubai and the CMA Federal Register or CMA registration record for federal VASP status. Where the activity is carried out from DIFC or ADGM, the DFSA or FSRA register should also be checked. Both publish lists of licensed entities, and you can cross-check a provider’s name against those records.
Penalties can include an AED 1 million minimum fine for unauthorised licensed financial activity, administrative penalties that can reach AED 1 billion, business closure, and, in some cases, criminal liability. The UAE takes unlicensed financial activity very seriously, especially in crypto.
They usually start with social media, dating apps, or messaging platforms. In 2026, scammers may also use AI-generated distress calls, voice cloning, and synthetic personal messages to make the first contact feel urgent and real. Scammers build trust over time and then slowly introduce fake investment opportunities.
They use blockchain analytics tools to trace suspicious transactions, monitor wallet activity, and flag money laundering patterns. Regulators also coordinate with global exchanges and law enforcement. In 2026, stronger use of structured reporting, transaction surveillance, and data-led risk monitoring is becoming central to crypto fraud detection.
A hardware wallet protects your keys, but it cannot protect you from social engineering. If you willingly send funds to a scammer, no device can reverse that. This is why wallet security must be supported by verification habits, platform checks, and caution around emotional or high-pressure investment requests.
Report it immediately to the UAE Cybercrime unit or local police. Keep all messages, transaction records, and wallet addresses. Early reporting improves the chance of tracing funds. Victims should also preserve screenshots, call logs, WhatsApp or Telegram chats, fake platform URLs, wallet hashes, and any voice or video messages used by the scammer.
It requires VASPs to carry out strict KYC checks, report suspicious activity, and share data with regulators when cross-border transfers are involved. This ensures compliance with FATF guidelines. For higher-risk transfers, firms must also maintain originator and beneficiary information, monitor wallet behaviour, and escalate suspicious activity through proper AML reporting channels.
September 16, 2026 is the key regularisation deadline for entities whose activities fall within the expanded CBUAE framework. Businesses captured under the new law must assess whether they need a licence or approval and regularise their position before the grace period ends. After that date, unlicensed activity may expose the business to enforcement action, shutdown risk, administrative penalties, and possible criminal consequences depending on the nature of the breach.
No, not simply by calling itself decentralized. The UAE framework looks at the function being performed. If a protocol, platform, dApp, or related infrastructure enables payment services, credit, deposits, money exchange, remittances, investment services, or other licensed financial activities for UAE users, it may fall within the licensing and oversight perimeter. Developers, operators, promoters, and control persons may therefore face regulatory exposure if the activity is carried out without the required approval.
In the DIFC, firms can no longer rely on a fixed regulator-approved list of recognised crypto tokens. Under the updated DFSA framework, the firm must assess and document whether each crypto token is suitable for the activity it wants to conduct. This increases governance responsibility because token selection, monitoring, risk controls, disclosures, and investor protection must be justified by the firm itself.
ADEPTS guides firms through licensing, risk assessments, and compliance programs. They help businesses understand the regulatory framework and reduce exposure to enforcement actions. In 2026, ADEPTS also supports AML audits, forensic readiness assessments, VASP compliance reviews, goAML readiness, transaction monitoring controls, and regularisation planning before key regulatory deadlines.
References
- 16.7 Know Your Customer (KYC) Process | CBUAE Rulebook.
https://rulebook.centralbank.ae/en/rulebook/167-know-your-customer-kyc-process-0. - Central Bank of the UAE. https://www.centralbank.ae/en/.
- Combatting Money Laundering.
https://u.ae/en/information-and-services/business/regulations/combatting-money-laundering. - FATF Updates Standards on Recommendation 16 on Payment Transparency.
https://www.fatf-gafi.org/en/publications/Fatfrecommendations/update-Recommendation-16-payment-transparency-june-2025.html. - FIU. https://www.uaefiu.gov.ae/en/.
- ‘goAML (Anti-Money-Laundering System)’. United Nations : Office on Drugs and Crime,
//www.unodc.org/unodc/en/global-it-products/goaml.html. - Registered Hawala Providers Regulation | CBUAE Rulebook.
https://rulebook.centralbank.ae/en/rulebook/registered-hawala-providers-regulation. - ‘UAE: Crypto Scam Victims on Average Lost Nearly Dh300,000 Each’. Khaleej Times,
https://www.khaleejtimes.com/business/uae-crypto-scam-victims-average-lost-nearly-dh300000. - UAE, Securities and Commodities Authority-. ‘Securities and Commodities Authority’. Securities and Commodities Authority, https://www.sca.gov.ae/en/home.aspx.
- https://www.vara.ae/en/.
- https://www.vara.ae/en/licenses-and-register/public-register/.
- Abbas, W. (2025, July 20). UAE: Crypto scam victims on average lost nearly Dh300,000 each. Khaleej Times.
https://www.khaleejtimes.com/business/uae-crypto-scam-victims-average-lost-nearly-dh300000 - Central Bank of the UAE. (n.d.). Central Bank of the UAE. Retrieved June 12, 2026, from
https://www.centralbank.ae/en/ - Central Bank of the UAE. (2024). Payment Token Services Regulation.
https://rulebook.centralbank.ae/sites/default/files/en_net_file_store/CBUAE_EN_5731_VER1.pdf - Financial Action Task Force. (2025, June 18). FATF updates standards on Recommendation 16 on payment transparency. https://www.fatf-gafi.org/en/publications/Fatfrecommendations/update-Recommendation-16-payment-transparency-june-2025.html
- Ministry of Finance. (2026, February 11). Ministry of Finance announces issuance of Ministerial Decision on the designation of Virtual Assets Regulatory Authority in Dubai.
https://mof.gov.ae/en/news/ministry-of-finance-announces-issuance-of-ministerial-decision-on-the-designation-of-virtual-assets-regulatory-authority-in-dubai/ - UAE Financial Intelligence Unit. (n.d.). FIU. Retrieved June 12, 2026, from https://uaefiu.gov.ae/en/
- UAE Financial Intelligence Unit. (n.d.). STR process. Retrieved June 12, 2026, from
https://uaefiu.gov.ae/en/stakeholders/reporting-entities/str-process/ - UAE Legislation. (2025). Federal Decree by Law No. (6) of 2025 regarding the Central Bank, regulation of financial institutions and activities, and insurance business. https://uaelegislation.gov.ae/en/legislations/3284
- United Nations Office on Drugs and Crime. (n.d.). goAML (Anti-Money-Laundering System). Retrieved June 12, 2026, from https://www.unodc.org/unodc/en/global-it-products/goaml.html
- Virtual Assets Regulatory Authority. (n.d.). Public Register. Retrieved June 12, 2026, from
https://www.vara.ae/en/licenses-and-register/public-register/ - Virtual Assets Regulatory Authority. (n.d.). Virtual Assets Regulatory Authority. Retrieved June 12, 2026, from
https://www.vara.ae/en/