DFSA’s new company-led suitability model and AML expectations may make it difficult for licensed entities to justify supporting privacy-focused assets.
The Dubai Financial Services Authority (DFSA) made a major update to its Crypto Token Regulatory Framework, shifting responsibility for crypto token suitability assessments from the regulator to licensed companies operating in the Dubai International Financial Centre (DIFC), Dubai’s financial free economic zone.
Under the revised rules, which took effect on Monday, companies providing financial services involving crypto tokens must determine whether tokens they engage with meet the DFSA’s suitability criteria. As part of the change, the DFSA will no longer maintain or publish a list of recognized crypto tokens.
The update follows a consultation process launched in October 2025, and reflects a shift in the regulator’s approach since introducing its crypto token regime in 2022. Since then, the DFSA said it has closely monitored developments and engaged with stakeholders to ensure the framework remains aligned with global standards.
