Capital Vault Virtual Services L.L.C.-S.P.C., the local affiliate of Capital.com, received a full virtual-asset licence from the UAE Capital Market Authority on 20 August 2026. The licence authorises dealing in virtual assets as agent or matching principal and providing custody for clients. Spot crypto will run through this separate Abu Dhabi entity, outside the broker’s existing CFD brokerage.
No launch date, token list, pricing, or custody insurance has been disclosed. The split mirrors the MiCA setup Capital.com already runs in Cyprus.
The licence is real. The service is not.
Capital.com now holds a federal virtual-asset licence in the United Arab Emirates through its Abu Dhabi affiliate. It authorises spot crypto execution, settlement, and custody. What it does not include is a launch date. The company has an Abu Dhabi office and a local virtual-assets team, but the customer offer is not yet defined.
No token list. No pricing. No disclosed liquidity providers, key-storage model, or withdrawal route. The broker has split spot crypto into a separate Capital Market Authority-licensed entity, outside its leveraged CFD business. That split keeps client protections and capital rules for spot assets separate from leveraged products.
The split mirrors the model Capital.com already ran in Cyprus under MiCA. What has not crossed over is the client-facing detail that determines whether UAE users get an exchange or a buy-and-hold account. The signal is that global brokers are willing to create full custody operations in the UAE, not just offer CFDs.
A licence without a launch date is a regulatory fact, not a service.
The perimeter is the product
The CMA licence authorises two functions: dealing in virtual assets as agent or matching principal, and custody for clients. Capital Vault will hold spot assets inside that entity, separate from Capital.com’s CFD accounts. Governance, risk, and key management sit outside the group’s other regulated businesses.
Rahul Kumar, chief executive of Capital Vault UAE, said: “The UAE is at the forefront of virtual-asset regulation in the region, and the Capital Market Authority’s review process for virtual-asset licensing reflects that rigour.”
Tarik Chebib, Capital.com’s MENA chief executive, said clients had asked for a regulated way to buy and hold virtual assets alongside existing markets. The licence, in his framing, enables additional virtual-asset products for UAE users.
Hadef & Partners, a UAE law firm, reads the CMA framework as making custody a central regulated activity. Licensed custodians face strict asset segregation, key-management and technology-resilience rules.
Capital rules, not trading volumes, are the binding constraint.
A review of CMA licensing disclosures named Bybit, Daman Virtual Asset Brokerage, XBase, and CoinCorner among other full licence holders. Capital.com’s official announcement states that Capital Vault is among the first companies licensed under the CMA’s new virtual-asset framework, though independent verification against the full CMA register remains incomplete.
For a Western expat in Abu Dhabi who already trades CFDs through Capital.com, the licence can mean one less offshore crypto account. The same app becomes a CMA-custodied wallet, with dirham transfers and local recourse.
| Entity | Current rule | New rule | Effective date |
|---|---|---|---|
| Capital Vault UAE | Not licensed under the federal CMA virtual-asset framework | Full licence to deal as agent or matching principal and provide custody | August 2026 |
| CMA-licensed principal dealers | No federal CMA framework prior to 2026 | Minimum paid-up capital of AED 4 million | 2026 |
| CMA-licensed custodians | Unlicensed client virtual-asset custody | Minimum AED 3 million capital, plus six months of operating expenses in liquid resources | 2026 |
| Capital Vault Ltd, Cyprus | CySEC CASP authorisation dated 1 December 2025 | Permission for custody, crypto/fiat exchange, crypto/crypto exchange and order execution | 1 December 2025 |
| Source: UAE Capital Market Authority; Cyprus Securities and Exchange Commission and ESMA CASP register | |||
Cyprus first, Abu Dhabi next
The CMA’s new framework is activity-based, like MiCA. Dealing, custody, portfolio management, and running a trading venue each carry their own licence and capital floor. MiCA handles this through one EU authorisation plus passporting. The UAE anchors it in federal onshore oversight, while Dubai’s Virtual Assets Regulatory Authority and Abu Dhabi Global Market run parallel regimes.
Chambers Global Practice Guides notes the restructured CMA now holds federal authority for investment-purpose virtual assets onshore. Recent market commentary indicates that Abu Dhabi Global Market alone had more than 20 firms holding active virtual-asset licences by mid-2026. That density signals institutional infrastructure, even if token prices swing.
For a Western expat who already uses Capital.com, the change is practical: one less offshore crypto account. The same app can become a CMA-custodied wallet, with dirham transfers and local recourse, though withdrawal and staking terms remain unpublished.
Watch the CMA’s next publication.
If Capital Vault UAE files a variation application within six to twelve months, the service broadens. If it does not, expect a narrower buy-and-hold product.
Beyond the headline
The Bigger Picture
Capital.com’s new UAE structure is part of a broader shift where global brokers treat spot digital assets as a core regulated business rather than an adjunct to derivatives. Federal regimes like the CMA’s, combined with MiCA in Europe, are effectively turning crypto custody and execution into another cross-border capital-markets service line.
The Money Trail
The real financial stakes lie not just in trading fees but in who controls the infrastructure Western capital uses to access Gulf digital assets. By investing in separate, capital-intensive entities for custody and execution, firms like Capital.com position themselves to capture institutional flows that need regulated rails.
The Reach
One non-obvious implication for Western asset managers is that UAE-licensed crypto channels can become gateways into broader tokenisation plays across the Gulf. Western firms plugged into CMA-licensed brokers may gain early access to regionally listed digital instruments not yet available via US or EU venues.
Four groups, one waiting game
With the UAE service still pre-launch and the token list unpublished, the decision tree splits by circumstance.
- Western investor with UAE market exposure
Your decision is whether a CMA-custodied spot account changes your current UAE exposure. Review the CMA’s client-asset rulebook on the official CMA website before moving funds, and confirm how the new entity sits alongside your existing brokerage mandates.
- EU-based crypto-asset service provider
Use Capital.com’s dual-jurisdiction structure as a template. Compare the capital and segregation rules behind the UAE licence with your existing MiCA authorisation, and map where a separate spot-entity model would lower or raise your own compliance burden.
- Western expat resident in the UAE
Wait for the launch details before switching. Compare token support, fees, and withdrawal routes with your current platform, and confirm that dirham transfers to a CMA-regulated custodian fit your UAE tax and compliance position.
- Global multi-asset brokerage executive
Assess the ring-fenced entity model against your own expansion plans. Study the CMA’s activity-based capital floors and custody requirements, and test whether a separately capitalised spot crypto unit would protect your CFD business while opening access to institutional Gulf flows.
FAQ
How does CMA custody protect client virtual assets?
CMA rules require licensed custodians to treat client virtual assets as client property, segregated from the firm’s own assets. They must follow specific safekeeping procedures, periodic reconciliations, and internal-control obligations. Client funds are also subject to dedicated handling and reporting rules.
What is Capital Vault Ltd allowed to do across the European Economic Area?
Capital Vault Ltd holds a Cypriot CASP authorisation covering custody, crypto-to-fiat exchange, crypto-to-crypto exchange, and order execution. Those services can be passported across EEA states subject to local notification.
Which regulator covers a UAE crypto provider?
Onshore UAE falls under the CMA, which licenses virtual-asset dealers, custodians, and platforms for mainland users. Dubai’s Virtual Assets Regulatory Authority licenses activities within Dubai, excluding DIFC, while Abu Dhabi Global Market’s FSRA supervises virtual assets inside its free zone. Users should check which regulator covers their provider.
Explainer
- Capital Market Authority
- The UAE’s federal securities and commodities regulator. It began issuing virtual-asset service provider licences in 2026 under Decision 4/R.M/2026. Its framework splits virtual-asset work into eight licensed activities, each with its own capital floor.
- MiCA
- Short for the EU’s Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114. It requires crypto-asset service providers to obtain one national authorisation and meet prudential and organisational rules. Authorised firms can passport services across the European Economic Area through the ESMA CASP register.
- Custody
- The safekeeping of client assets on their behalf. Under the UAE CMA and MiCA, it is a separately licensed activity with asset segregation and key-management duties. The distinction matters because custody carries different capital and client-protection rules from trading.
- CASP
- A crypto-asset service provider authorised under MiCA. The term covers custody, exchange, execution, and other services defined by Regulation (EU) 2023/1114. Capital Vault Ltd is one such provider, with a Cyprus authorisation that can be passported across the EEA.
RELATED STORIES
