CBUAE Regulates Digital Money and Payment Tokens in UAE

Introduction

UAE businesses involved with digital money, stablecoins, or tokenized payments must now navigate a new, comprehensive regulatory framework established by the Central Bank of the UAE (CBUAE). This framework, primarily driven by Federal Decree-Law No. 6 of 2025 and the Payment Token Services Regulation (Circular No. 2/2024), mandates that entities engaging in specific activities related to payment tokens obtain licensing or registration from the CBUAE. This directly impacts their operational and compliance strategies.

This article outlines the key aspects of these new regulations, clarifies who must comply, details the implications for businesses, and provides actionable steps to ensure adherence. For any UAE entity operating or planning to operate in the digital finance space, understanding and adapting to this framework is critical for continued legal operation and market participation.

Understanding the New Regulatory Framework

The UAE has solidified its legal and regulatory stance on digital money, stablecoins, and tokenized payments through a landmark set of legislations. Federal Decree-Law No. 6 of 2025, also known as the Central Bank Law, provides the overarching legal authority for financial sector regulation in the UAE, including digital assets. Complementing this, the Payment Token Services Regulation (Circular No. 2/2024) offers detailed guidelines for service providers. Together, these documents create a clear and structured environment for the integration of digital assets into the nation's payment systems.

The CBUAE's objectives for this framework are multifaceted. It aims to foster innovation in financial technology, ensure consumer protection, maintain financial stability, and combat financial crime in the rapidly expanding digital economy. By establishing clear rules, the CBUAE seeks to build trust and confidence in the UAE's digital finance sector.

Federal Decree-Law No. 6 of 2025: The Central Bank Law

The Federal Decree-Law No. 6 of 2025 is a pivotal piece of legislation, expanding the CBUAE's mandate to explicitly include the regulation, supervision, and licensing of digital assets and related services. This law vests the CBUAE with comprehensive powers to oversee a broad range of financial activities, ensuring a coherent and robust regulatory landscape across the UAE. For a deeper understanding of the broader implications of this law, refer to AURNE's insight on UAE's New Central Bank Law: Navigating Digital Asset & Fintech Compliance by September 2026.

Payment Token Services Regulation (Circular No. 2/2024)

This specific circular elaborates on the practical application of the Central Bank Law concerning payment tokens. It defines what constitutes a payment token, outlines the scope of regulated activities, and details the licensing and ongoing compliance requirements for entities providing payment token services. The regulation focuses on ensuring that these services operate within a secure, transparent, and consumer-friendly environment.

CBUAE's Expanded Authority and its Business Implications

A significant aspect of this new framework is the CBUAE's exclusive authority over digital banking, payment tokenization, and stored-value facilities. This centralization of power brings several critical implications for businesses:

Unified and Centralized Oversight

The CBUAE now stands as the sole regulator for these specific digital finance activities. This eliminates fragmented regulatory guidance that might have existed previously, promoting consistency and clarity across the sector. Businesses no longer need to navigate potentially conflicting rules from multiple authorities, leading to a more streamlined compliance approach.

Enhanced Scrutiny and Supervision

With exclusive authority comes a heightened level of oversight. The CBUAE will rigorously assess licensing applications, implement robust ongoing supervision, and enforce compliance to uphold the integrity of the financial system. This includes detailed examinations of business models, governance structures, risk management frameworks, and technological infrastructure.

Clearer Regulatory Landscape for Innovation

For businesses, this clarity, while demanding strict adherence, also reduces uncertainty regarding regulatory expectations. It lays a foundational understanding for planning and innovation within defined boundaries. The framework aims to enable responsible technological advancement while safeguarding financial stability and protecting consumers.

This move reinforces the UAE's proactive approach to digital finance, positioning it as a leader in regulating emerging technologies responsibly. Businesses can now operate with greater assurance, knowing the precise regulatory environment they must adhere to.

Who Must Comply with These New Rules?

The new regulations directly impact businesses that are involved in providing services related to payment tokens. It is crucial for UAE businesses to precisely distinguish between different types of digital assets. These regulations specifically target payment tokens, which are digital representations of value used for payment or exchange, including stablecoins. Businesses dealing with other forms of digital assets, such as utility tokens or non-fungible tokens (NFTs) that are not primarily used for payment, may fall under different regulatory considerations.

Regulated Activities

If your business engages in any of the following activities with payment tokens, you must ensure compliance with the CBUAE's licensing and registration requirements:

• Issuing: Creating and distributing new payment tokens. This includes stablecoin issuers who back their tokens with fiat currency or other assets.
• Converting: Facilitating the exchange of payment tokens into fiat currency, other payment tokens, or other digital assets. This applies to exchanges or platforms offering such services.
• Providing Custody: Holding, safeguarding, or administering payment tokens on behalf of others. This encompasses digital asset custodians or wallet providers.
• Providing Transfer Services: Facilitating the movement of payment tokens between parties, including payment gateways or remittance services utilizing tokenized value.

Key Implications for Your Business

For UAE businesses operating in or looking to enter the digital money and payment token space, these regulations carry several important implications that require immediate attention and strategic planning.

1. Mandatory Licensing and Registration

If your activities fall under the scope of issuing, converting, providing custody for, or transferring payment tokens, obtaining the necessary license or registration from the CBUAE is no longer optional. This is a fundamental requirement for legal operation in the UAE. The process is expected to be thorough, requiring detailed submissions regarding business plans, capital adequacy, governance, and operational controls.

2. Operational Review and Alignment

You will need to thoroughly review your current business models, processes, and technologies to ensure they align with the CBUAE's new standards. This includes understanding and meeting requirements for:

• Capital Adequacy: Ensuring sufficient financial resources to support operations and manage risks.
• Corporate Governance: Establishing robust internal structures, clear roles and responsibilities, and effective oversight mechanisms.
• Risk Management: Implementing comprehensive frameworks for managing operational, financial, cyber, and compliance risks.
• Consumer Protection: Adhering to standards for transparency, disclosure, fair treatment, and complaints handling.

3. Enhanced Compliance Frameworks

Developing robust internal compliance frameworks that specifically address the CBUAE's regulations will be essential. This may involve:

• Updating internal policies and procedures to reflect the new requirements.
• Implementing advanced Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) controls specific to digital assets, in line with broader UAE directives such as those discussed in UAE's New AML Law: What Federal Law No. 10 of 2025 Means for Your Business.
• Training staff on the updated regulatory landscape and their individual compliance responsibilities.
• Integrating new technological solutions for monitoring, reporting, and record-keeping.

4. Cybersecurity and Technology Standards

The CBUAE will expect high standards for cybersecurity and technological resilience. Businesses must demonstrate that their systems are secure, reliable, and capable of protecting customer data and assets. This includes implementing robust IT governance, incident response plans, and regular security audits.

5. Market Credibility and Competitive Advantage

While compliance requires significant effort and investment, operating under a CBUAE license will significantly enhance your credibility and trustworthiness in the market. This not only attracts more secure partnerships and customers but also positions your business for long-term growth and competitiveness within the regulated digital finance ecosystem.

Actionable Steps for Compliance

To ensure your business remains compliant and positioned for success in the evolving digital finance landscape, consider these immediate and strategic steps:

1. Conduct a Comprehensive Activity Assessment

• Detailed Review: Undertake a thorough internal review to identify if your current or planned business operations involve issuing, converting, providing custody for, or transferring payment tokens as defined by the CBUAE.
• Legal Opinion: Seek a legal opinion to definitively classify your digital asset activities under the new framework. This clarity is paramount for determining the exact regulatory obligations.

2. Familiarise Yourself with the Regulations

• In-depth Study: Acquire and meticulously study Federal Decree-Law No. 6 of 2025 and the Payment Token Services Regulation (Circular No. 2/2024). Pay close attention to definitions, scope of services, and specific requirements for capital, governance, and risk management.
• Stay Updated: Monitor CBUAE announcements and supplementary guidance that may be issued to clarify aspects of the framework.

3. Prepare for Licensing and Registration

• Process Understanding: Understand the detailed application procedures, documentation requirements, and the criteria for approval. This typically involves submitting a comprehensive business plan, demonstrating capital adequacy, outlining robust governance arrangements, and undergoing fit and proper assessments for key personnel.
• Resource Allocation: Allocate necessary internal resources, both human and financial, to manage the licensing application process effectively.

4. Enhance Internal Policies and Controls

• Compliance Framework Development: Begin developing or updating your internal compliance frameworks to specifically address the CBUAE's regulations. This includes AML/CFT policies tailored for digital assets, cybersecurity protocols, consumer protection measures, and data privacy policies.
• Staff Training: Implement comprehensive training programs for all relevant staff to ensure they understand the new regulatory obligations and their roles in maintaining compliance.

5. Seek Expert Guidance

• Specialised Knowledge: Navigating new and complex financial regulations requires specialised knowledge. Engage with legal, financial, and compliance advisory experts who possess deep expertise in UAE financial regulations and digital assets.
• Compliance Roadmap: Professional advisors can help interpret the nuances of the framework, identify gaps in your current operations, and develop a clear, efficient compliance roadmap, from initial assessment to successful licensing and ongoing adherence.

Looking Ahead: The Future of Digital Finance in the UAE

The CBUAE's new framework marks a pivotal development for digital finance in the UAE. By establishing clear regulatory boundaries, the Central Bank is fostering a secure and trustworthy environment for innovation to thrive. This approach not only protects consumers and safeguards financial stability but also enhances the UAE's reputation as a progressive global financial hub.

For Financial Institutions

Traditional financial institutions looking to integrate digital money or payment token services must recognize that these regulations extend their existing compliance obligations to new asset classes and service models. This means evolving their core banking systems, risk management, and AML/CFT frameworks to accommodate digital assets. For more on navigating these changes, see UAE Central Bank Law: Key Compliance Changes for Financial Institutions by September 2026.

For Fintech Innovators and Digital Asset Service Providers

For fintech startups and existing digital asset service providers, this framework provides much-needed regulatory clarity. While it introduces strict requirements, it also offers a pathway to legitimacy and growth within a regulated environment. Compliance will be a key differentiator, attracting institutional investors and a broader customer base who prioritize regulatory adherence. This aligns with the broader transformation of UAE financial regulation, as detailed in UAE Financial Regulation Transformed: Navigating CBUAE's Expanded Scope and Digital Asset Oversight.

Conclusion

The Central Bank of the UAE's introduction of a comprehensive regulatory framework for digital money and payment tokens signifies a mature and forward-thinking approach to integrating digital assets into the nation's financial system. Through Federal Decree-Law No. 6 of 2025 and the Payment Token Services Regulation (Circular No. 2/2024), the CBUAE has established clear rules for activities involving stablecoins and other payment tokens, asserting its exclusive authority and setting high standards for licensing, governance, and compliance.

For UAE businesses, this framework mandates a thorough review of operations and a commitment to rigorous compliance. The transition requires proactive assessment of activities, deep understanding of the regulations, and strategic preparation for licensing or registration. While the compliance journey demands effort, it offers significant benefits, including enhanced market credibility, improved operational resilience, and the opportunity to innovate within a secure and well-defined regulatory environment.

Engaging with expert advisors is essential to navigate the complexities of these new regulations effectively. AURNE stands ready to provide the specialized guidance needed to interpret the nuances of this framework, develop robust compliance roadmaps, and ensure your business successfully adapts to the evolving digital finance landscape in the UAE.

---

---

This article is for general information only and does not constitute professional, legal, tax, or financial advice. Speak to AURNE for guidance specific to your situation.