Hex Trust Receives VARA MVP Licence in Dubai

Dubai's Virtual Assets Regulatory Authority (VARA) has granted Hex Trust a Minimum Viable Product (MVP) licence, authorising the firm to operate as a fully licensed virtual asset service provider in the emirate. The approval covers institutional custody, broker-dealer services, and staking, and it marks a concrete step in VARA's structured licensing pathway from provisional approval to operational status. For accounting firms, auditors, and CFOs managing digital asset exposure in the UAE, the development raises practical questions about counterparty classification, AML due diligence, and the records their crypto compliance reporting frameworks need to capture.

What the MVP Licence Actually Authorises

VARA operates a staged licensing structure. Hex Trust first received a provisional licence in June 2022, the same month it opened its Dubai office and designated the city as its MENA regional headquarters. The MVP licence, which follows that provisional grant, allows the firm to move from a restricted pilot phase into full commercial operations, subject to VARA's ongoing supervisory conditions.

Services now approved

Under the MVP licence, Hex Trust is authorised to provide three categories of virtual asset service to institutional clients and sophisticated investors in Dubai:

• Virtual asset custodial services: safekeeping and administration of digital assets on behalf of clients.
• Broker-dealer services: execution and facilitation of virtual asset transactions.
• Staking services: participation in proof-of-stake validation on clients' behalf.

Each category carries distinct compliance obligations under VARA's rulebook, and each has a different accounting treatment that firms servicing UAE-based clients will need to reflect accurately.

Who qualifies as a client under the licence

The authorisation is scoped to institutional clients and sophisticated investors. That designation matters for accounting and legal teams: it defines the counterparty class Hex Trust can serve and, by extension, the nature of the relationships that UAE-facing firms may hold with it. Retail exposure is not part of this licence, which limits but also clarifies the risk profile for B2B counterparts.

VARA's Licensing Pathway: Context for Compliance Teams

VARA was established under Dubai Law No. 4 of 2022 as the world's first dedicated virtual asset regulator with city-wide jurisdiction. Its licensing structure progresses through several stages: a preparatory licence, a provisional licence, and then the MVP licence, before a full operational licence is available. Hex Trust's journey from provisional to MVP spans the period since June 2022, illustrating that VARA does not issue authorisations quickly or lightly.

Why the sequencing matters for due diligence

Accounting firms and CFOs conducting VASP due diligence and onboarding frameworks for UAE counterparties need to distinguish between the stages. A provisional licence confirms that VARA has assessed and conditionally approved a firm, but it does not carry the same weight as an MVP licence for the purposes of AML counterparty verification. The MVP stage signals that the firm has demonstrated operational compliance to VARA's satisfaction over a sustained period. That distinction should be reflected in internal risk ratings and onboarding documentation.

The UAE's AML framework, implemented through the National Anti-Money Laundering and Combating Financing of Terrorism and Financing of Illegal Organisations Committee (NAMLCFTC) and enforced across designated non-financial businesses and professions, requires that firms dealing with VASPs verify their regulatory status. Holding a VARA MVP licence is meaningful evidence of that status, but it does not eliminate the need for full due diligence: firms still need to assess the specific services authorised, the client categories permitted, and whether those align with the transaction types they are processing.

Accounting Implications for B2B Firms and CFOs

The Hex Trust approval has several practical accounting angles that firms with UAE digital asset exposure should be thinking about now.

Custody classification and balance sheet treatment

When a regulated custodian holds digital assets on behalf of a client, the fundamental question for the client's balance sheet is whether those assets should be recognised as the client's own assets or whether the custodial arrangement creates a different presentation. Under IFRS, the answer depends on who controls the assets and whether the custodian's insolvency would affect the client's ability to recover them. Hex Trust's description of itself as a "fully licenced and insured" provider indicates that it carries some form of institutional insurance cover, which is relevant to that recovery analysis, though firms will need to obtain the specific policy terms before drawing conclusions.

The key point for accounting teams is that using a VARA-licenced custodian does not automatically resolve the balance sheet question. It does, however, provide a clearer regulatory context for the custody agreement, which informs the legal analysis that underlies the accounting judgement.

Staking services and income recognition

The inclusion of staking services in the MVP licence is notable. Staking rewards received through a third-party service provider like Hex Trust raise income recognition questions that differ from self-staking. Under IFRS, the timing of recognition depends on when the performance obligation is satisfied and when the asset received meets the definition of an asset the entity controls. Where staking is outsourced, there is also an additional layer: the fee arrangement with the provider needs to be accounted for separately, and the gross versus net revenue question arises if the firm is recording both the staking reward and the service fee.

Broker-dealer transactions and trade date accounting

For clients using Hex Trust's broker-dealer services, trade date versus settlement date accounting becomes relevant. Digital asset markets settle differently from traditional securities markets, and the specific settlement mechanics used by a VARA-licenced broker-dealer will affect whether a firm applies trade date or settlement date recognition consistently under its chosen policy. This is an area where crypto bookkeeping software needs to be configured correctly to capture the right dates from custodial and brokerage reports.

AML and KYC Considerations

VARA's MVP licence requires Hex Trust to maintain AML and KYC systems that meet the authority's detailed rulebook requirements. For firms that use or are considering using Hex Trust as a counterparty, that regulatory overlay has practical implications for their own AML programmes.

Reliance on third-party due diligence

UAE AML regulations, aligned with FATF Recommendation 17, allow firms to rely on third parties for customer due diligence in certain circumstances, but the relying firm retains ultimate responsibility. Where a VARA-licenced VASP like Hex Trust has onboarded a client through its own KYC process, a firm using that VASP as an intermediary cannot simply assume the due diligence is complete. It needs to assess whether the VASP's standards are equivalent, document that assessment, and retain the right to access the underlying CDD data on request.

Transaction monitoring across custodial accounts

Custody arrangements with regulated VASPs generate transaction data that feeds into a firm's transaction monitoring obligations. Digital asset accounting software used by compliance teams needs to ingest that data at a granular level: wallet addresses, transaction hashes, timestamps, and counterparty identifiers. A VARA-licenced custodian is more likely to produce structured, auditable data in a format that meets those requirements, which is one practical benefit of the regulatory upgrade that the MVP licence represents.

For a broader view of how AML capabilities should be assessed across the digital asset VASP landscape, the guidance in our article on crypto AML software capabilities remains directly applicable to UAE-facing counterparty reviews.

The UAE Regulatory Landscape: A Wider Picture

Hex Trust's MVP licence is one data point in a broader pattern of UAE regulatory consolidation. VARA governs virtual asset activity within Dubai's onshore emirate jurisdiction. The Abu Dhabi Global Market (ADGM) operates its own Financial Services Regulatory Authority (FSRA) framework for virtual assets in the Abu Dhabi free zone. More recently, the UAE's Securities and Commodities Authority (SCA), operating through its Capital Markets Authority, has also been active: the approval of Capital Vault's UAE CMA virtual asset licence for spot crypto dealing and custody illustrates that multiple regulatory bodies are now producing licensed VASPs across the federation.

For accounting firms advising UAE clients, this multi-regulator landscape requires careful jurisdictional mapping. A VARA licence covers operations within Dubai. A FSRA licence covers ADGM. An SCA licence operates at the federal level. The services authorised, the client categories permitted, and the AML obligations attached differ across frameworks. Compliance teams should not treat UAE regulatory approval as a single undifferentiated category.

What Hex Trust's approval signals for market development

The fact that Hex Trust is described as among the first virtual asset custodians to reach MVP status under VARA's framework is an indicator of how the Dubai market is developing. A growing number of regulated, institutional-grade VASPs with auditable compliance records creates a more stable environment for CFOs and finance teams looking to hold or transact digital assets through counterparties that can withstand regulatory scrutiny. It also raises the bar for firms that have not yet pursued licensing: operating without a VARA licence in Dubai, or relying on a counterparty that lacks one, carries increasing regulatory and reputational risk.

Practical Steps for Accounting and Compliance Teams

Given the Hex Trust MVP licence approval, here are the areas that warrant immediate attention from B2B finance and compliance professionals with UAE digital asset exposure.

Review and update counterparty registers

Any firm that holds Hex Trust on its counterparty register should update that record to reflect the MVP licence status, the specific services authorised, and the client category restrictions. Counterparty registers used in AML programmes should be date-stamped to show when the verification was last performed.

Assess custody agreement terms against accounting policy

If your firm holds digital assets in custody with any VARA-licenced provider, now is a good time to review the custody agreement to confirm how control is defined, what happens in an insolvency scenario, and whether the insurance cover is specific enough to support the balance sheet presentation you have adopted.

Configure crypto accounting software for service-specific data

Custody, broker-dealer, and staking services each generate different data outputs. Crypto accounting software should be configured to handle all three, with appropriate mappings for staking reward recognition, settlement date capture for brokerage trades, and custodial asset reconciliation. If your current setup was built only around simple buy-and-sell transactions, the addition of staking and brokerage through a regulated provider is a good prompt to revisit that configuration.

Document the VARA licensing stage in AML files

For AML purposes, document not just that Hex Trust holds a VARA licence, but which stage of the licensing pathway it has reached and which services are specifically covered. VARA's staged framework means that the authorisation scope can change as a firm progresses, so the date of verification matters.

Source: Virtual Assets Regulatory Authority (VARA)

Frequently Asked Questions

What is a VARA MVP licence and how does it differ from a provisional licence?

VARA's licensing pathway moves from a preparatory licence through a provisional licence and then to a Minimum Viable Product (MVP) licence before a full operational licence. The provisional licence is a conditional approval that allows limited pilot operations. The MVP licence confirms that a firm has demonstrated sustained operational compliance to VARA's standards and is authorised to offer specified services commercially to the permitted client categories.

Does using a VARA-licenced custodian change how digital assets appear on my balance sheet?

Not automatically. The balance sheet treatment of custodied digital assets under IFRS depends on the control analysis: who has the rights and exposure to the asset, and what happens in the custodian's insolvency. A VARA licence provides regulatory context and signals that the custodian meets regulatory standards, but it does not substitute for a legal and accounting review of the specific custody agreement terms.

How should staking income from a third-party provider like Hex Trust be recognised?

Staking rewards received through a third-party service provider should be recognised when the conditions for asset recognition are met, typically when the entity gains control of the reward. The gross versus net question also arises: if the provider charges a fee, firms need to determine whether to gross up the reward and separately expense the fee, or net the two. The custody and service agreement terms will drive that analysis.

What AML obligations apply when a UAE firm transacts with a VARA-licenced VASP?

UAE AML regulations require firms to verify the regulatory status of VASP counterparties and conduct appropriate customer due diligence. A VARA MVP licence is meaningful evidence of regulated status, but the relying firm retains AML responsibility. Firms should document the VARA licence stage, the services and client categories covered, and maintain the right to access underlying CDD data from the VASP on request.

Does the Hex Trust approval affect firms operating in Abu Dhabi or other UAE jurisdictions?

VARA's jurisdiction covers virtual asset activity within Dubai's onshore emirate. Firms operating in Abu Dhabi's ADGM free zone are subject to the FSRA framework. Federal-level activity falls under the SCA. A VARA licence does not confer authorisation across all UAE jurisdictions, so firms should map their counterparty's specific licence against the jurisdiction in which they are transacting.