Komainu Gets VARA MVP Licence for Institutional Custody in Dubai
Komainu, the institutional digital asset custody provider, has received its Minimal Viable Product (MVP) licence from Dubai's Virtual Assets Regulatory Authority (VARA), converting a provisional approval first issued in 2022 into a full operating licence. The firm is the first dedicated institutional custodian to reach this milestone under the VARA regime, a development that carries direct implications for accounting firms, auditors, and CFOs building or reviewing digital asset programmes in the UAE.
What the MVP Licence Actually Means
VARA operates a staged licensing pathway. Firms enter on a provisional approval, demonstrate operational and compliance readiness across VARA's requirements, and then graduate to MVP status before reaching full market authorisation. Reaching MVP is not a soft checkpoint: it signals that Komainu has satisfied VARA's readiness requirements within what the regulator describes as an internationally benchmarked legislative framework for virtual asset service providers.
Services Now Permitted
Under the MVP licence, Komainu MEA FZE can offer an approved range of virtual asset services to institutional investors in Dubai. The firm positions itself as a gatekeeper for institutional exposure to digital assets, providing the same safeguards and protections investors expect from traditional finance custody arrangements. Its services have been designed by security, financial services, and cryptocurrency specialists and reviewed independently by external auditors.
VARA's Role in Dubai's Regulatory Architecture
VARA was established in March 2022 under Law No. 4 of 2022 and is responsible by decree for licensing and regulating the virtual asset sector across the Emirate of Dubai. It is widely recognised as the world's first regulator dedicated solely to virtual assets, and its mandate covers all licensing requirements and authorisation applications for virtual asset activities under UAE law. The authority's stated objective is to create a legal framework that protects investors while positioning Dubai as one of the world's most favourable jurisdictions for virtual asset activity.
Why Accounting Firms and CFOs Should Pay Attention
A VARA MVP licence is not just a headline for the custody provider. It reshapes the due diligence and accounting landscape for every counterparty, client, or portfolio company that interacts with Komainu's platform in the region.
Counterparty Risk and Balance Sheet Classification
When a corporate treasury or investment fund holds digital assets with a custodian, the regulatory status of that custodian influences how the position is classified, disclosed, and audited. A custody arrangement with a licensed, externally audited VASP in a jurisdiction with a defined regulatory framework is a materially different risk profile from one with an unregulated or provisionally approved entity. Auditors reviewing UAE digital asset positions will need to confirm the custodian's current VARA status and factor it into their assessment of control over the assets.
Under IFRS, control and the ability to obtain the economic benefits of a digital asset are central to recognition. A fully licensed custodian with a clear contractual and regulatory framework around asset segregation, safekeeping, and client money rules makes that analysis more straightforward. Accounting teams should update their working papers to reflect Komainu's MVP status and the service scope it is now authorised to provide.
VASP Due Diligence and AML File Updates
For accounting firms advising clients who use or are considering Komainu's UAE platform, the MVP licence triggers a natural refresh of the VASP due diligence file. Under the UAE's AML framework, firms onboarding or continuing relationships with VASPs are expected to maintain current records of the counterparty's regulatory status. A change from provisional to MVP is a material status update that should be documented. If your firm uses a structured VASP due diligence and onboarding framework, now is the time to run Komainu MEA FZE through it and record the outcome.
The AML angle extends beyond the due diligence file. VARA's licensing regime imposes conduct, risk management, and reporting obligations on licensed VASPs. A regulated custodian operating under those obligations is, in principle, a lower inherent-risk counterparty than an unlicensed or offshore alternative. That assessment should feed into any business-wide risk assessment your firm maintains for clients with UAE digital asset exposure.
Crypto Accounting Software Considerations
As institutional custody in Dubai moves onto a firmer regulatory footing, the operational data flows between custodian and client become more important to get right. The right crypto compliance reporting setup needs to be able to ingest custody statements, reconcile positions, apply the correct cost basis methodology under UAE and IFRS rules, and flag any discrepancies before they reach the financial statements. Teams that have been relying on manual processes or spreadsheets to track digital asset holdings held with UAE custodians should treat this moment as a prompt to assess whether their crypto accounting software is fit for purpose now that the custody side of the equation is formalised.
The broader context matters here. The UAE has been expanding its virtual asset licensing activity, and how the UAE virtual asset licensing landscape is evolving across both VARA and the Abu Dhabi-based CMA points to an environment where unlicensed activity will face increasing pressure. Firms that embed robust digital asset accounting software now will be better placed to handle the reporting demands that come with operating in a maturing regulated market.
The Institutional Custody Market in the UAE: Context
Komainu's achievement is notable because it is the first entity categorised as a dedicated institutional custodian to reach MVP status under VARA, as distinct from exchanges or broader multi-service VASPs that also offer custody as part of a wider licence. That distinction matters to institutional clients and their advisers because a pure-play custodian's risk model, governance structure, and regulatory obligations are designed around one core function: keeping assets safe.
What "Dedicated" Custody Means for Institutional Clients
In traditional finance, custody is a standalone, heavily regulated activity precisely because of the systemic importance of asset safekeeping. The same logic is beginning to apply in digital assets as jurisdictions like Dubai, the EU under MiCA, and others start separating custody from trading and other VASP activities. A dedicated custodian has no proprietary trading book, no exchange float to manage, and no structural conflict between its own positions and client assets. That separation is exactly what institutional investors and their auditors look for when assessing custody risk.
For accounting purposes, assets held with a dedicated, regulated custodian should be clearly segregated on the balance sheet from assets held on exchanges or in self-custody arrangements. The accounting treatment, disclosure requirements, and audit evidence needed for each category differ, and VARA's licensing of a dedicated custodian now gives UAE-based institutional clients a clear reference point for one of those categories.
VARA's Stated Objectives and What They Signal
VARA's public position on the Komainu licence is revealing. The authority described Komainu as its "first tradFi VASP" to join the MVP phase, noting that participation from the virtual asset arms of globally respected financial institutions allows VARA to structure interoperable guidelines and risk mitigation levers for secure market operations. That language is deliberate: VARA is signalling that it wants traditional finance-grade institutions inside its perimeter, not just crypto-native firms, and that the rules it is building will be calibrated against that standard.
For accounting and legal advisers helping clients decide where to hold or transact digital assets, that policy direction is useful intelligence. A regulator actively designing its framework around institutional-grade participants is one that is likely to impose institutional-grade requirements on conduct, record-keeping, and reporting. Clients operating in or entering the Dubai market should expect those requirements to tighten over time, and their internal systems, including their digital asset accounting software and crypto bookkeeping software, need to be built accordingly.
Practical Next Steps for Accounting Teams
Three actions are worth prioritising in the near term for firms with UAE digital asset exposure.
Update Counterparty Records
Log Komainu MEA FZE's MVP licence status in your VASP register and counterparty database. Record the date of the announcement, the scope of services authorised, and any relevant VARA licence reference. This documentation supports both AML file maintenance and the audit trail for digital asset positions held in custody.
Review Custody Agreements and Reporting Obligations
If any client or entity you advise holds or is planning to hold digital assets with Komainu's UAE platform, review the custody agreement in light of the new licence conditions. Confirm that the reporting and reconciliation outputs from the custodian are compatible with your accounting and audit workflow. A licensed custodian operating under VARA's framework should be producing standardised custody statements; make sure your systems can receive and process them.
Assess Software Readiness
A regulated custody environment generates structured, auditable data. Your crypto accounting software should be able to handle custody-based position reporting, multi-asset reconciliation, and IFRS-compliant fair value inputs without manual intervention at scale. If it cannot, the gap between what a licensed custodian can provide and what your internal systems can consume will create audit risk rather than reduce it.
Source: Virtual Assets Regulatory Authority (VARA)
Frequently Asked Questions
What is a VARA MVP licence?
A Minimal Viable Product (MVP) licence is an intermediate authorisation stage within VARA's licensing pathway. It follows a provisional approval and precedes full market authorisation. An MVP licence allows the holder to offer an approved range of virtual asset services to clients in Dubai while the regulator continues to monitor the firm's operational and compliance standards.
Why does Komainu being a "dedicated" custodian matter?
A dedicated custodian focuses solely on safekeeping client assets and does not operate a trading book or exchange alongside its custody function. This structural separation reduces conflicts of interest and aligns more closely with institutional-grade custody standards familiar from traditional finance, which is relevant to how auditors assess asset control and segregation.
How should an accounting firm update its AML files following this announcement?
The change from provisional to MVP status is a material regulatory update. Firms should record the new status in their VASP due diligence files, note the date and scope of the MVP licence, and reassess the inherent risk rating of Komainu MEA FZE as a counterparty. Under UAE AML requirements, VASP relationships require ongoing monitoring and documentation of regulatory status changes.
What accounting standard applies to digital assets held with a UAE-licensed custodian?
UAE-incorporated entities preparing financial statements under IFRS would typically apply IAS 38 (intangible assets) or, where the asset meets the definition, consider the appropriate treatment under evolving guidance. The custodian's regulatory status does not change the underlying accounting standard, but it does strengthen the audit evidence for control over the assets and the adequacy of disclosures about custody arrangements.
Does this development affect firms outside the UAE?
Any accounting firm, auditor, or CFO advising clients who invest in or transact with UAE-based digital asset platforms should be aware of VARA's licensing developments. Counterparty assessments, AML risk ratings, and audit procedures for digital asset positions should all reflect the current regulatory status of UAE-based VASPs, including custodians that have now reached MVP stage.