Back to Markets
Crypto▼ Bearish
VARA Mandates Real-Time FATF Blacklist Tracking for Dubai Crypto
VARA now requires Dubai crypto firms to embed FATF blacklists in real-time risk scoring, refresh assessments quarterly, and separate proliferation financing risks from AML.
Continue with
Dubai's Virtual Assets Regulatory Authority published guidance this week requiring crypto firms to embed Financial Action Task Force blacklists into dynamic risk scoring. The rules replace static compliance checklists with quantitative business data that feeds real-time models.
VARA drew the new standards from its 2026 Business Risk Assessment thematic review. Under the framework, virtual asset service providers must refresh their risk assessments every three months, or immediately after any major change in operations or product lines.
Firms must separate assessments for proliferation financing and targeted financial sanctions from general anti-money laundering risk. VARA said bundling those categories created blind spots. Companies must also document risks tied to artificial intelligence tools and anonymity-enhanced transactions, two areas the regulator flagged as high-growth vectors for abuse.