AML Requirements for NFT and utility token providers in the DIFC
DIFC businesses that issue Non-Fungible Tokens or Utility Tokens, or provide services relating to tokens issued by others.
Are nft and utility token providers designated in the DIFC?
Yes. The designation follows the business itself, so a firm carrying on this activity in the DIFC is within the regime without any further test.
- Designating provision
- DFSA AML 3.2.1(1)(c)
- Supervisor
- Dubai Financial Services Authority
Issuers of, and service providers relating to, Non-Fungible Tokens and Utility Tokens. Designated by default, with a carve-out for an issuer whose every issue stays at or below USD 15,000 and for a service limited to technology support or advice to an issuer. Federally a token used for payment or investment is a virtual asset activity under Article 4 rather than a DNFBP category, so this designation has no federal equivalent.
Because the test turns on the firm's own activity, the free scope check puts the question that decides it and states the answer with the provision behind it.
Reports filed with no suspicion required
No threshold-based report has been established for this sector in the DIFC. Reporting here is suspicion-driven: suspicious transaction and activity reports are filed when the firm has grounds to suspect, whatever the amount. That is not the same as saying nothing is owed, and it is why record keeping and the ability to recognise a suspicion matter more in this sector than any threshold.
What the regime requires here
DFSA Rulebook, Anti-Money Laundering, Counter-Terrorist Financing and Sanctions Module (AML), rule 3.2.1 governs AML in the DIFC. Every designated firm owes the same spine of obligations: a documented risk assessment covering money laundering, terrorist financing and proliferation financing; customer due diligence with enhanced measures for higher risk and for high-risk countries; policies approved by senior management; a compliance officer at management level; an independent audit of the controls; immediate implementation of targeted financial sanctions; staff training; and records available to the authorities on request.
- DFSA Rulebook, AML module, rule 3.2.1 (DNFBP definition in the DIFC)
- DFSA Rulebook, AML 15 (DNFBP Registration and Supervision)
What Federal Decree-Law No. 10 of 2025 changed sets out the obligations and the penalties in full, with each article cited.
See where this firm actually stands
AML Compass assesses a nft and utility token provider against the duties that apply in the DIFC, scores its risk and inspection readiness, and produces a report of the gaps citing the provision behind each one.
This page summarises published legislation and rulebooks for general information. It is not legal advice, and it does not replace the texts themselves or guidance from your supervisor.