ChatGPT
Perplexity
Grok
The UAE has more advisers offering crypto and Web3 legal services than it did three years ago, and the range of what sits behind that description has widened rather than narrowed. Some are regulatory practices. Some are corporate service providers that added a legal line. Some are general commercial firms that took a crypto matter and now list it. All of them are findable by the same search. This is a guide to telling them apart using criteria you can verify yourself, rather than by reputation signals that are easy to manufacture.
Do You Need a Crypto Lawyer, or Something Else?
Start here, because a meaningful proportion of projects that engage a crypto lawyer did not need one, and a meaningful proportion that did not engage one should have.
You probably do not need one yet if you are pre-product, not holding client assets, not issuing anything, and not yet raising. Incorporating a holding company and signing standard commercial contracts are ordinary corporate work. Paying regulatory counsel rates for them is a poor use of a seed round.
You likely do need one if any of the following is true. You are issuing a token or an instrument referable to an asset. You are holding assets, keys or fiat on behalf of anybody else. You are matching orders between third parties. You are marketing a virtual asset service into the UAE. You are raising from institutional investors who will run diligence on your structure. You are being asked by a bank, an exchange or a counterparty what permission your entity holds.
You need one urgently if you are already doing any of those without having established which regulatory perimeter you are inside.
The distinction is not company size or funding stage. It is whether the business touches a regulated activity. A three-person team holding user funds has a harder regulatory position than a thirty-person team selling software.
What Separates Regulatory Counsel From a Formation Agent
Both will help you set up an entity in the UAE. That is where the overlap ends, and the difference is worth understanding before you compare quotes, because the two are not selling the same thing.
A formation agent's product is incorporation. They know the free zones, the paperwork, the visa process and the commercial licensing steps, and they are often genuinely efficient at all of it. Some providers employ qualified regulatory personnel or work alongside an affiliated legal practice. What a formation-only engagement does not inherently include is independent advice on whether the activity you intend to conduct requires a financial services permission, and what follows if it does and you do not hold one. That is a description of scope rather than a criticism of the service.
Regulatory counsel's product is a defensible position on the perimeter. The output is an analysis of what your activity is under a named framework, what permission it requires, what the capital and conduct consequences are, and what the structure needs to look like as a result. Incorporation follows from that analysis rather than preceding it.
The failure mode is sequencing. A project incorporates first, on advice about which free zone is cheapest, and then discovers the activity it intends to conduct is not permitted from that vehicle in that jurisdiction. Unwinding is more expensive than the original advice would have been.
Credentials You Can Actually Verify
Marketing language in this sector is difficult to check. These criteria are not.
Named individuals with published backgrounds. A firm should tell you who will do the work and what that person has done before. Attribution to a "legal team" without named individuals is a signal worth noticing, particularly on regulatory content.
Regulatory outcomes you can partly trace. Ask what applications the firm has taken through VARA, the FSRA, the DFSA or the CMA, and to which permission. Public registers will confirm that a named entity holds a given permission, which is more than most claims in this sector offer. They will not confirm which adviser prepared the application, and they will not show withdrawn, refused or historical applications, so treat the register as corroboration of one part of the answer rather than verification of the whole.
Jurisdiction specificity. UAE crypto regulation is not one regime. VARA covers Dubai outside the DIFC. The FSRA covers ADGM. The DFSA covers the DIFC. The Central Bank covers its own perimeter. And the Capital Market Authority, which replaced the Securities and Commodities Authority under Federal Decree-Law No. 32 of 2025, issued a federal Virtual Assets Framework under Decision No. 4/R.M/2026 in February 2026, announced publicly that April, expanding onshore regulated activities from three to eight. Activity conducted solely within ADGM or DIFC sits outside it, but a free zone firm targeting onshore UAE clients must assess the federal perimeter separately under Federal Decree-Law No. 33 of 2025. An adviser who talks about "UAE crypto law" without distinguishing between these, or who has not registered the CMA framework, is describing something that does not exist as a single body of rules.
Primary sources in their published material. Content that cites rulebook provisions and links to regulator pages is produced by people reading the rulebooks. Content that recycles figures without attribution frequently repeats errors from the article it was based on.
Currency of published material. Frameworks in this region have changed substantially and repeatedly. Guidance that does not reflect the current rulebook version is a reasonable proxy for how current the practice is.
Conflicts and independence. Some advisers are paid by the free zone or service provider they recommend. That is not disqualifying, but you are entitled to know it.
The Engagement Models Compared
Formation agent | General commercial firm | Specialist regulatory counsel | Fractional general counsel | |
Primary product | Incorporation and licensing admin | Contracts, disputes, corporate | Perimeter analysis, applications, structuring | Ongoing embedded counsel |
Independent perimeter advice | Not inherently in scope | Sometimes, variable depth | Core competence | Core competence |
Cost basis | Fixed fee per service | Hourly | Project or fixed fee | Monthly retainer |
Best fit | Straightforward entity setup, no regulated activity | Ordinary commercial needs | Licensing, token classification, structuring | Continuous regulatory need without a full-time hire |
Weakness | Independent legal perimeter analysis may require separate counsel | Depth varies widely by individual | Not built for day-to-day commercial work | Cost only justified at sustained volume |
Most projects use more than one of these over time, and the mistake is usually not choosing the wrong one but using a single provider for everything.
Questions Worth Asking Before You Engage
Six questions that produce informative answers.
Which regulator has jurisdiction over what we are proposing, and why that one?
What specifically is the regulated activity here, named as it appears in the rulebook?
Have you taken an application to that regulator, for that permission, and what was the outcome?
What is the capital consequence of the structure you are recommending?
What is out of scope in this engagement?
Who is doing the work, and what is their background?
The second question is the most useful of the six. Naming the activity as the rulebook names it does not by itself prove an analysis has been performed, but it does indicate familiarity with the framework you are about to be advised on. An answer given in general terms about crypto regulation in the UAE indicates less.
Where the Relationship Usually Goes Wrong
Advice arrives after the structure is built. Counsel is engaged to validate a decision rather than to inform it, which limits what can be done.
Scope is defined by deliverable rather than by question. A fixed fee for a license application does not cover the classification analysis that determines whether it is the right application.
Nobody owns the ongoing obligations. Licensing is a project. Compliance is not. Firms frequently plan the first and not the second.
If you are at the point of choosing counsel, the useful preparation is being able to describe your activity precisely, since that is what determines everything else. Our guides to UAE crypto licensing and crypto legal advisory in the UAE cover the frameworks in more detail. Ape Law is a UAE-based crypto-native legal practice; our principal Victoria Wells publishes her background and regulatory record, which you are welcome to check against the criteria above before getting in touch.
Frequently Asked Questions
Do I need a crypto lawyer to start a Web3 company in Dubai?
Not necessarily. If you are not issuing anything, not holding assets for others, not matching trades and not marketing a virtual asset service into the UAE, entity setup is ordinary corporate work. Regulatory counsel becomes necessary at the point your activity touches a regulated perimeter, which is a question about what the business does rather than how large it is.
What is the difference between a crypto lawyer and a company formation agent?
A formation agent's product is incorporation and commercial licensing administration. Regulatory counsel's product is an analysis of which regulated activity you are conducting, what permission it requires, and what the structure needs to look like as a result. The second determines the first, which is why sequencing them the other way round causes problems.
How do I verify a crypto law firm's experience in the UAE?
Ask which regulator applications they have taken through and to which permission, then check the relevant public register. Ask for named individuals rather than a team attribution, and check whether their published material cites rulebook provisions and reflects current framework versions.
Is one law firm able to advise across VARA, ADGM, DIFC and the federal regime?
Some can, but confirm it rather than assume it. These are separate regimes with separate regulators, rulebooks and investor classification systems, and the federal picture changed in 2026 when the Capital Market Authority issued its Virtual Assets Framework. Note also that operating from a free zone does not by itself put a firm outside the federal perimeter where it targets onshore UAE clients. An adviser who does not distinguish between them in conversation is unlikely to be distinguishing between them in analysis.
What should a crypto legal engagement cost in Dubai?
Fees vary by scope and provider, and any figure quoted without a defined scope is not comparable. The more useful question is what is included: whether the classification analysis that determines the correct application is inside the fee, or whether the fee covers only the application itself.
This article provides general information about selecting legal counsel in the UAE and is not legal advice. Speak with qualified counsel about your specific circumstances.
