The Dubai Virtual Assets Regulatory Authority has published a circular directing all Virtual Asset Service Providers operating in the Emirate of Dubai to align their onboarding, investor classification and client suitability processes with VARA’s Rulebooks, with a focus on consistent application of the Market Conduct Rulebook’s investor classification regime. VASPs may only conduct Virtual Asset Activities with clients classified as Retail, Qualified or Institutional. The circular highlights that a Qualified Investor can include an individual with relevant virtual asset or complex product knowledge with net assets of at least AED 3,500,000 (excluding primary residence and related liabilities) and/or annual income of AED 700,000 or more, or a legal entity with net assets of at least AED 3,500,000 whose directors have relevant virtual asset knowledge. At onboarding, VASPs must collect income and net asset information, and where thresholds are met offer clients the option to elect Qualified Investor status with clear disclosure that this provides access to a broader range of services and higher-risk products; if elected, the VASP must verify source of wealth (and where relevant source of funds) and validate financial information with reliable documentation. A suitability assessment is required before confirming Qualified Investor status, and if the client fails, a cooling-off period of at least one week applies before a substantively different reassessment; clients may remain Retail during this period if eligible. The circular also requires a defined process for lifecycle upgrades from Retail to Qualified status when triggered by product-access requests, updated eligibility information or increased trading volumes, and sets ongoing obligations including retention of classification and suitability records for at least eight years and periodic reviews to confirm continued eligibility. VASPs are required to immediately review and align relevant processes, and VARA may request evidence of compliance including suitability assessments, client records and policy documentation; failures may lead to regulatory action under the Virtual Assets and Related Activities Regulations and applicable Rulebooks.