01
Not Tested Against the Product
The application reflected the client's vision without verifying how the product would operate. VARA responded with an extensive list of questions.
An international group with licences in Europe and Latin America applied to VARA and received extensive regulator questions. We rebuilt the application around the one activity the client can operate, with a money-flow model, a new business plan and financial model, and updated compliance policies.

Trusted by clients and partners across the globe
Client:
Crypto exchange [[confirm activity type]], part of an international group
Situation:
Licensed entities in the EU and Latin America; VARA application already filed
Challenge:
An application built on intended scope rather than on how the product operates
Medici Scope:
Application audit · Product model · Money-flow model · Business plan and financial model · Compliance policies · Communication with VARA
Jurisdiction:
UAE, Dubai (VARA)
Timeline:
Filed in March [[year]] · [[our timeline]]
Outcome:
In progress: VARA decision pending
Licensed in two regions. Dubai was planned as the next market.
The group held licensed entities in several jurisdictions, including Europe and Latin America, and was bringing its exchange to the MENA region.
The objective was a VARA licence and an exchange operating in Dubai.
The application described intentions. VARA required operating detail.
01
The application reflected the client's vision without verifying how the product would operate. VARA responded with an extensive list of questions.
01
One of the two activities applied for was rare and costly, with no clear business case.
01
After filing, the UAE updated its AML and compliance requirements. The documents had to be brought into line.
01
The client was not receiving responses from the regulator.
01
Submitted before Medici's involvement.
Before: broad application (custody, exchange, brokerage, token issuance).
02
The client asked why VARA was raising so many questions. We audited the application.
03
How funds move, who holds them and how client assets are segregated.
04
The application narrowed to the activity the client can operate.
Two activities, one without a business case.
05
New business plan, financial model and policies reflecting the August changes.
06
Direct communication with the VARA case manager.
Licensing experience elsewhere did not transfer automatically.
01
In plain terms: VARA reviews how a business will operate day to day: where client funds are held, who can move them and what happens when something fails.
01
Without a money-flow model, an application does not progress.
01
EU and Latin American licences do not carry over. The UAE applies its own obligations, risk expectations and compliance requirements.
01
The August [[year, act]] changes updated AML and compliance requirements, so a March application needed revision.
01
The process takes about 12 months [[confirm]]. Each additional activity extends it and increases cost.
Licence what the business can operate.

01
A licence should cover activities the client can run, not every activity it can afford. A broader application serves the adviser, not the client.

02
Where are client funds held, and in which currency? Is there hedging? How do funds move between wallets? Does a transfer make the company a custodian? How are client funds protected when unexpected costs arise? Does the budget hold if requirements call for 20 staff instead of 10?

03
The application was narrowed to the activity the client understands, with a clear view of how funds move within the platform.

04
Contact with the case manager now provides timely, detailed information.
In progress: VARA decision pending
01
One activity, with documents aligned to the updated UAE requirements.
02
The client understands how funds will move, and which obligations and operating costs apply.
03
Active communication with the regulator and a credible route to authorisation. [[update after VARA's decision]]
*Timelines and outcomes depend on the regulator's review.
Three points to check.

01
Each additional activity adds questions, time and cost.
01
Not after the regulator's first round of questions.
01
Experience from other jurisdictions does not transfer automatically.
Send it to us. We will identify why, and what needs to change.
Discuss Your Case