- The UAE’s Federal-Decree Law No. 6 of 2025 got here into impact on 16 September.
- Article 62 locations APIs, explorers, and decentralised platforms below Central Bank management.
- Article 61 regulates all advertising, emails, and on-line posts about crypto providers.
In a sharp pivot from its crypto-friendly picture, the United Arab Emirates has enacted sweeping new laws that classifies primary cryptocurrency infrastructure, together with Bitcoin wallets, as probably prison except licensed by the Central Bank.
Legal consultants from Gibson Dunn have flagged the regulation’s scope as unusually broad, warning that its language introduces vital risk for global expertise suppliers.
This shift, embedded in Federal-Decree Law No. 6 of 2025, comes into pressure from 16 September and carries global penalties for builders and platforms providing crypto entry.
The regulation replaces the 2018 banking statute and considerably widens the definition of monetary exercise. What units this laws aside just isn’t solely its scope but additionally its enforcement tooth.
Penalties for non-compliance vary from fines of AED 50,000 to AED 500,000,000 (as much as $136,000,000) and will embrace imprisonment.
Importantly, this is applicable not simply to entities working inside the UAE but additionally to these whose merchandise are accessible from inside the nation.
Licensing now applies to wallets, APIs and even analytics
The most consequential aspect of the brand new regulation is discovered in Article 62. It grants the Central Bank management over any expertise that “engages in, offers, issues, or facilitates” monetary exercise.
The wording is broad sufficient to embody self-custodial wallets, API providers, blockchain explorers, analytics platforms, and even decentralised protocols.
This marks a elementary change in how crypto infrastructure is regulated in the UAE.
Previously, licensing obligations centered on conventional monetary entities, however the up to date framework shifts this focus to incorporate software program and knowledge instruments.
According to developer evaluation, even public-facing instruments similar to CoinMarketCap and open-source Bitcoin wallets might now require licensing to stay accessible inside the UAE.
For the primary time, builders might face prison penalties for providing unlicensed crypto instruments, even when they’re based mostly overseas.
This extension of jurisdiction alerts a new regulatory posture that treats entry to crypto as tightly as its possession or change.
Communications and advertising now fall below regulation
The crackdown doesn’t cease at monetary infrastructure. Article 61 of the identical regulation defines the advertising, promotion, or promoting of monetary providers as a licensable exercise.
In apply, which means merely internet hosting a web site, publishing an article, or sharing a tweet about an unlicensed crypto service may very well be thought of a authorized violation if that content material reaches UAE residents.
This change dramatically expands the compliance footprint for firms and builders.
Gibson Dunn highlights that these provisions materially broaden the enforcement perimeter, particularly for companies with no formal presence in the UAE.
The regulation applies to communications that originate outdoors the nation however are accessible inside it.
The result’s a regulatory panorama the place builders, content material creators, and infrastructure suppliers should weigh whether or not their platforms are not directly accessible by customers in the UAE.
In many instances, avoiding authorized publicity might require disabling entry or halting service altogether.
Dubai’s free zones now not defend crypto providers
Over current years, the UAE has positioned itself as a hub for blockchain innovation.
Jurisdictions similar to Dubai’s Virtual Assets Regulatory Authority (VARA) and Abu Dhabi Global Market (ADGM) attracted global consideration with purpose-built crypto licensing frameworks.
However, the brand new federal regulation overrides these free-zone preparations, asserting Central Bank management nationwide.
Federal regulation supersedes any guidelines launched by the UAE’s free zones, successfully dissolving the regulatory arbitrage that when drew firms to Dubai.
The broader context contains the nation’s historical past of digital restrictions.
For occasion, WhatsApp voice calls stay blocked throughout the UAE, reinforcing a constant coverage method to centralised management over communications and digital instruments.
While this will likely deliver the UAE in nearer alignment with worldwide strain from teams just like the Financial Action Task Force, it additionally places crypto service suppliers in a tough place.
In different jurisdictions going through related strain, companies have withdrawn completely to keep away from enforcement risk.
Enforcement begins in 2026, with additional guidelines anticipated
Entities have a one-year window from 16 September 2025 to return into compliance. This grace interval could also be prolonged on the discretion of the Central Bank.
During this time, additional laws are anticipated to make clear how these broad guidelines will likely be utilized in apply.
Despite this, the scope of the regulation is already inflicting concern.
The language round facilitation and communication, mixed with the extreme penalties below Article 170, means that companies providing crypto instruments globally should now contemplate the risk of incidental publicity to UAE customers.
For software program builders and platform operators, this marks a vital departure from the norms of decentralised entry and open-source innovation.
