VARA’s Sponsored VASP Regime: Dubai’s New Crypto Gateway

In a sweeping regulatory update released in May 2025, Dubai’s Virtual Assets Regulatory Authority (VARA) unveiled a revised suite of rulebooks designed to enhance oversight and market integrity across the virtual asset sector. Among the most impactful changes is the introduction of the Sponsored VASP model—a pioneering framework that enables smaller players to operate under the umbrella of licensed entities, without the cost or complexity of full VARA authorization.

This article is part of a broader Unlock Blockchain series unpacking the key updates outlined in VARA’s latest rulebooks, which were detailed in this feature. Each installment will explore one of the newly introduced or amended regulatory elements, offering insight into how these changes will shape the UAE’s digital asset landscape in 2025 and beyond.

The Sponsored VASP model—first spotlighted by VARA CEO Matthew White in September 2024—embodies the regulator’s evolving approach: pragmatic, layered, and risk-proportionate. As White emphasized in his public remarks, Dubai’s goal is to avoid stifling innovation while maintaining a high bar for consumer protection and institutional integrity.

Under this new model, a Regulated Sponsor—an already licensed VASP approved by VARA—can extend its license to include a Sponsored VASP. The sponsored entity is treated as a fully regulated player, provided it operates within the parameters defined by the sponsor and under VARA’s oversight. This means startups no longer need to bear the full application and infrastructure costs of independent licensing. Instead, they can function within a trusted compliance framework while focusing on building products and traction.

Yet this structure is anything but a regulatory shortcut. To participate, Sponsored VASPs must be registered legal entities in Dubai and must clearly disclose their status in all marketing communications. The Regulated Sponsor bears full compliance responsibility, including audits, capital adequacy, and ongoing regulatory reporting. All customer complaints and risk events from the Sponsored VASP are reported through the sponsor.

In effect, VARA has introduced a formal, legally embedded incubation model—one that allows new entrants to grow responsibly under the wing of established institutions. For Dubai, it’s a strategic middle path: reducing friction for startups without compromising regulatory depth.

Still, the model introduces new complexities and questions. Who will take on the role of Regulated Sponsor, given the legal and reputational risks? Which startups are confident enough to share their books and business operations with another VASP? This isn’t a landlord-tenant arrangement—it’s a full-stack compliance relationship, requiring transparency, trust, and operational synergy.