Kraken's 'full' VARA approval: what actually changes for clients in Dubai

A headline licence upgrade doesn't automatically mean unrestricted retail trading. Clients dealing with any VARA-regulated exchange need to check exactly which stage of the licence it holds and which activities that stage actually permits.

The question clients are actually asking

When a name like Kraken (operating in the UAE through its Payward entity) announces it has secured "full VARA approval", the immediate question from counterparties, institutional clients and retail users is simple: does this mean I can now open an account, deposit funds and trade with this exchange in Dubai without restriction? The honest answer is: not necessarily, and not until you have checked exactly what licence stage and which activities VARA has actually authorised.

VARA's two-stage licensing model

The Virtual Assets Regulatory Authority (VARA), established under Dubai Law No. 4 of 2022, does not hand out a single generic crypto licence. It runs a staged authorisation process built around its Virtual Assets and Related Activities Regulations and a set of activity-specific rulebooks (exchange services, broker-dealer services, custody, lending, advisory, and others).

• Minimum Viable Product (MVP) licence: an initial, closely supervised authorisation that allows a VASP to launch on a restricted basis, typically with caps on client numbers, transaction volumes, or permitted activities, while VARA monitors systems, controls and conduct in live conditions.
• Full Market Product (FMP) licence: granted once the VASP has demonstrated, through the MVP period, that its compliance, custody, cybersecurity and governance arrangements meet VARA's standards. This stage removes the operational restrictions imposed during MVP and permits the full scope of the specific activities for which the firm applied.

A firm announcing it has secured "full" approval is, in substance, saying it has graduated from the restricted MVP phase. That is a meaningful regulatory milestone, but it does not automatically mean every activity, client category or jurisdication is covered.

What changes practically on graduation to full licence

Moving from MVP to FMP status typically expands:

• the number and category of clients the VASP may onboard (the MVP phase often restricts volumes or excludes certain client types pending review);
• the range of licensed activities it can offer at scale, such as moving from a limited exchange service to the full suite including custody or broker-dealer functions, if those activities were part of the original application;
• marketing and distribution freedoms within the Emirate, since VARA's marketing regulations tie permitted promotional activity to licence status.

What does not automatically change is the firm's authorisation to deal with clients outside Dubai, or to offer activities it was never licensed for in the first place. VARA licences are activity-specific and Dubai-specific; a full licence for exchange services does not confer authorisation for, say, lending or staking products unless those are separately listed.

A "full VARA licence" headline answers one question: has this firm graduated from restricted operation. It does not answer the question clients actually need resolved: which specific activities, and which clients, are covered.

What this means if you are dealing with the exchange

For a retail user in Dubai, the practical effect of full licensure is generally positive: fewer onboarding restrictions, a broader product set, and a regulator that has had a live supervisory track record on this specific entity rather than a paper application. For an institutional counterparty, such as a fund, corporate treasury or payment processor contracting with the exchange, the upgrade is a relevant due diligence point but not a substitute for contractual protections on custody segregation, withdrawal rights and insolvency treatment of client assets, none of which VARA licensing alone guarantees.

It is also worth noting that regulatory approval under VARA does not, by itself, secure UAE banking relationships for the licensed entity or its clients. Banks apply their own risk appetite to virtual asset-linked accounts regardless of VARA status, so a full licence removes a regulatory hurdle, not necessarily a banking one.

A due diligence checklist before relying on the headline

• Check VARA's public register for the exact licensed entity (the operating entity may differ from the globally recognised brand name) and confirm the licence is active, not merely applied for.
• Identify the specific activity licences held (exchange services, broker-dealer, custody, and so on) rather than assuming a single "full licence" covers everything the brand offers globally.
• Confirm whether the licence permits retail client onboarding or is restricted to institutional or professional clients.
• For institutional counterparties, request the VASP's custody and asset segregation arrangements in writing; licensing status does not displace the need for contractual protection.
• Where the counterparty markets internationally, check whether its Dubai licence is being used, correctly or otherwise, to imply authorisation to serve clients outside the UAE.

Key instruments referenced: Dubai Law No. 4 of 2022 on the Regulation of Virtual Assets in Dubai; VARA Virtual Assets and Related Activities Regulations and Compulsory/Activity-specific Rulebooks. General information, not legal advice.