Guidance on Rule III D Risk Assessments

VARA issued guidance clarifying expectations under Rule III(D) of the Compliance and Risk Management Rulebook on how VASPs must conduct and document enterprise-wide AML/CFT risk assessments.

What firms should do

Yes - review and align internal risk-assessment methodology with Rule III(D) guidance

Regulator: Virtual Assets Regulatory Authority
Type: Guidance
Status: Final/In Force
Published: 7 Nov 2025
Topic: Compliance & Risk
Impact: Medium

Read it on the regulator's website

Found automatically on the regulator's website and summarised by AI by Arakan Lexara. Not legal advice; check the official source before relying on it.

Arakan Lexara Weekly

Get the week's UAE regulatory changes every Monday.

Key developments, what firms are asked to do and the deadlines ahead. Free.

More from the Virtual Assets Regulatory Authority

VARA imposed a financial penalty on Peken Global Limited, operator of the KuCoin exchange brand, for unlicensed virtual-asset activity targeting Dubai, following its March 2026 investor alert.

22 Jun 2026Enforcement NoticeMedium impact

Guidance on Rule III D Risk Assessments

More from the Virtual Assets Regulatory Authority

VARA Notice of Fines - Shelbit General Trading L.L.C

VARA Issues 50th VASP Licence as Dubai's Regulated Virtual Assets Market Continues to Grow

VARA Notice of Fines - Peken Global Limited ("Kucoin")

VARA Notice of Fines - MX Global LTD ("MEXC")

VARA Notice of Fines - CoinMENA FZE

VARA Publishes AML/CFT Business Risk Assessment Guidance