Guide · updated 31.07.2026 · 13 min read · Lucent Legal team

P2P Crypto Trading and "Exchangers" in the UAE: Where a Private Deal Ends and a Criminal Case Begins

You sold a bit of bitcoin to someone you know for cash dirhams, or you regularly swap crypto through a Telegram group — and then your account gets frozen and the bank starts asking where the money came from. It's a familiar situation for anyone using P2P (peer-to-peer) channels to trade crypto in Dubai. Short answer: a one-off deal between two people isn't banned by itself, but the moment the trading becomes regular, high-volume, or organised, regulators treat it as a business that needs a VARA or SCA licence — and not having one isn't a grey area, it's a violation. Worse, even someone acting in good faith on a single trade isn't protected from the risk that their counterparty's money turns out to be "dirty" — at which point the bank's problem becomes yours. Here's where the line actually sits, why cash deals at physical "exchanger" offices are their own separate risk, and what genuinely lowers the odds of getting caught up in something.

Where the line actually sits

Regulators don't treat it as a crime just because one person sold crypto to another for dirhams. The problem starts when it stops being a one-off and starts looking like systematic activity — in other words, an unlicensed business.

Signs that make a bank, the police, or VARA stop seeing a trade as "just personal":

• Frequency. Not once a year, but weekly or more often — with the same counterparty or different ones each time.
• Volume. Large or repeated transfers, especially amounts that don't match your normal financial profile.
• Intermediation. You're not just selling your own crypto — you're matching buyers with sellers, holding other people's funds in an intermediate account or wallet, or taking a fee for arranging the deal.
• Advertising yourself as a channel. Public posts in Telegram or WhatsApp groups along the lines of "swapping crypto for dirhams" are, in effect, a shopfront for an exchange business, even if you're technically a private individual.

No source names an exact transaction count or monthly amount past which a trade automatically becomes a business — it's a judgment call, made after the fact by the regulator, the bank's compliance team, or an investigation, not a threshold spelled out in advance. If you're trading crypto regularly at meaningful amounts, it's worth checking with a lawyer whether your activity counts as commercial rather than assuming "it's just helping friends out." For the broader picture of what's legal in crypto in the UAE and what needs a licence, see is crypto legal in Dubai and the UAE.

Why a licence is needed — and what it actually costs

Organised crypto-for-fiat trading for a fee falls under the VA Exchange or VA Broker-Dealer categories that VARA licenses. The one-off application fee for these categories is AED 100,000, the annual supervision fee is AED 200,000, and minimum paid-up capital runs from AED 800,000 (Exchange) to AED 400,000–600,000 (Broker-Dealer). This isn't a box-ticking formality — it's a genuine regulatory bar for anyone wanting to legally arrange crypto trades for third parties in Dubai. For the full breakdown of categories, fees, and process, see VARA licence in Dubai.

The practical takeaway: any operation offering to swap crypto for cash dirhams "here and now" without such a licence can't be doing so legally, no matter what it calls itself — "exchanger," "crypto office," "P2P manager." You can always ask a legitimate VASP (Virtual Asset Service Provider) for its licence number and check it against the public VARA or SCA register; not getting a straight answer to that question is itself a signal.

The "dirty money" risk: it can hit the honest side of the deal too

Even if you personally haven't broken any rules, in a P2P trade you don't control where your counterparty's crypto or cash actually came from. UAE banks are required to verify source of funds under anti-money-laundering (AML) rules set out in Federal Decree-Law No. 20 of 2018 and its amendments — and moving a large sum received through P2P trading into a bank account is one of the classic triggers for extra scrutiny.

The worst-case version: if the money you received in exchange for crypto turns out to be connected to someone else's criminal case (fraud, money laundering), you as the recipient can end up drawn into an investigation — not because you organised anything, but because you were a link in a payment chain. According to legal sources, the Financial Intelligence Unit (FIU) in the UAE has had expanded powers since 2025 to freeze suspicious funds — and a freeze at the investigation stage, unlike the 7-day cap on a routine bank AML check, has no predictable timeframe.

For what to do if your account is already frozen, and how to talk to the bank about a compliance request, see the separate guide what to do if a bank freezes your account in the UAE.

Cash deals at "exchanger" offices — a separate red flag

Beyond informal P2P groups in messaging apps, Dubai has physical outfits that offer to swap crypto for cash dirhams on the spot, styled like a currency exchange counter. There's no regulatory difference here from organised OTC trading: if the outlet systematically swaps crypto for cash for clients in exchange for a fee, it needs a VARA licence (in Dubai) or an SCA licence (elsewhere) — a verbal "it's just like exchanging dollars" carries no legal weight, because virtual assets sit under an entirely separate regulatory framework from fiat currency exchange.

There's an additional practical risk specific to cash deals: no digital trail at all. If a question later comes up about where the dirhams came from, or who the counterparty was, you won't have a bank statement or an on-chain transaction to back up the terms of the deal — just your word. That weakens your position both with a bank running a later check and with an investigation, if the trade turns out to be connected to someone else's offence.

What a freeze actually looks like in practice

A typical scenario lawyers see: someone sells crypto through a P2P channel regularly for a few months, and money arrives in their personal account in small but frequent transfers from different people. At some point the bank puts a hold on the account through an internal compliance request, with no explanation beyond a general line about "unusual activity." From there it splits two ways: if you can document where the money came from and what the transactions were, the restriction usually lifts within weeks; if the bank sees signs of systematic unlicensed activity, or worse, a link to a money-laundering case, it can escalate to the FIU or the prosecution — and there, the account can stay frozen with no predictable end date until the review is done.

A second common scenario: your P2P counterparty turns out to be part of a fraud scheme (a fake investment platform, stolen funds), and the dirhams or crypto you received get frozen as part of tracing the assets — even though you were just an ordinary crypto seller and had nothing to do with the scheme itself.

How to lower the risk

You can't eliminate the risk in P2P trading entirely — no one can guarantee that — but a few practical steps meaningfully reduce it:

1. Trade crypto through licensed platforms rather than informal channels — an exchange with a VARA licence (Dubai) or SCA licence (the other emirates) has AML/KYC checks built in, so the "where did the money come from" question gets resolved at the platform level instead of after the fact with your bank.
2. Check your counterparty (KYC, know your customer) even in a private deal — ask for ID, and where possible, keep a record that the deal is a one-off, personal transaction rather than part of a pattern.
3. Document every trade. A screenshot of the chat setting out the terms, the on-chain transaction, a bank confirmation of the transfer, the date and amount — this is what you can show a bank or a lawyer if a question comes up later.
4. Avoid cash where you can settle by bank transfer or through an exchange instead — a digital trail is itself evidence of good faith.
5. Don't take on the role of "middleman for friends," even with no bad intent — the moment you're regularly matching other people's trades or holding their funds in your wallet, you've stepped into activity that needs a licence.

This material is for information only and is not legal advice. UAE law changes — a lawyer will assess how it applies to your situation.