Dubai’s VARA Releases Updated Anti-Money Laundering Guidelines, Requiring Crypto Firms to Integrate Real-Time Risk Controls Against FATF Blacklists

TechFlow News, June 16: According to Bitcoin.com, the Dubai Virtual Assets Regulatory Authority (VARA) recently released an updated Anti-Money Laundering (AML) regulatory guidance. The new guidance requires cryptocurrency businesses operating in Dubai to integrate real-time data on Financial Action Task Force (FATF) high-risk and blacklisted jurisdictions into their risk-scoring models—replacing the previous static compliance tracking mechanism. Under the new rules, firms must update their risk assessments at least once every three months; immediate updates are required if there are significant changes to operational structure or product lines. Additionally, proliferation financing risks and targeted financial sanctions risks must be assessed separately—not conflated with general AML compliance. Firms must also formally document risks arising from AI-assisted operations and anonymity-enhancing exchanges. VARA stated that compliance officers, senior management, and board members bear full responsibility for their company’s residual risk rating, signaling a regulatory shift from post-hoc penalties toward proactive, systemic risk management.