Dubai's Virtual Assets Regulatory Authority has ordered four KuCoin-linked entities to immediately cease all cryptocurrency activities directed at Dubai residents, marking the second jurisdiction in two weeks to take enforcement action against the exchange. The March 5, 2026, alert names Phoenixfin Pte Ltd, MEK Global Limited, Peken Global Limited, and KuCoin Exchange EU GmbH as operating without any form of regulatory approval in the emirate.
VARA Names Four Entities, Zero Licenses
The scope of the order is broad. VARA did not flag a technical violation or a pending application. The regulator stated plainly that none of the four entities "hold any licence to provide Virtual Asset services in/from Dubai" under Dubai Law No. 4 of 2022 and Cabinet Resolution No. 111/2022. The entities were accused of providing virtual asset activities to Dubai residents without the necessary regulatory approvals and misrepresenting their licensing status.
VARA's language left no ambiguity: "Any promotion, advertising, or solicitation related to KuCoin has not been approved." The regulator warned that consumers using unlicensed platforms face "significant financial risks and potential legal consequences," including criminal liability under UAE law.
The four named entities span three jurisdictions. Phoenixfin Pte Ltd is Singapore-registered. MEK Global Limited and Peken Global Limited are the same entities that pleaded guilty in the US to unlicensed money transmission charges in 2024, paying $297 million in criminal forfeiture and fines. KuCoin Exchange EU GmbH is the Vienna-based MiCA-licensed entity that Austria's FMA partially suspended just 11 days earlier.
Austria Was the First Domino
On February 23, 2026, Austria's Financial Market Authority prohibited KuCoin EU from onboarding any new customers after the exchange lost all four of its mandatory anti-money laundering and sanctions compliance officers, just 87 days into its MiCA authorization. The FMA found that KuCoin EU no longer had key function holders in AML, counter-terrorist financing, or sanctions compliance roles.
That order was framed as temporary, contingent on KuCoin EU appointing qualified replacements. But the Dubai action changes the calculus. VARA's alert is not about a missing compliance officer. It is about the fundamental absence of any license to operate, combined with an accusation of misrepresenting licensing status to users.
Two regulators, two continents, two different legal frameworks, the same exchange, the same month. The pattern matters more than either individual action.
The $297 Million Shadow
KuCoin's regulatory trajectory has been deteriorating since 2023. In December 2023, the exchange reached a $22 million settlement with New York authorities for misrepresenting itself as a licensed crypto exchange. In March 2024, the US Department of Justice unsealed a four-count indictment against KuCoin and founders Chun Gan and Ke Tang. Peken Global Limited, the same entity named in VARA's Dubai alert, pleaded guilty to operating an unlicensed money-transmitting business.
The penalties were severe: $184.5 million in criminal forfeiture, $112.9 million in fines, a two-year US market exit, and the forced departure of both co-founders from management. Canada's Ontario Securities Commission had already banned the exchange in 2022 for failing to meet securities law requirements.
Now add Austria (February 2026) and Dubai (March 2026) to the list. The jurisdictions are piling up faster than KuCoin can address them.
What Dubai Users Should Do Now
VARA's warning carries real weight for anyone in the UAE using KuCoin. The regulator explicitly stated that consumers face potential criminal liability for using unlicensed virtual asset services. While enforcement against individual users is rare, the warning creates a clear paper trail that removes any plausible deniability.
For users with funds on KuCoin who are based in Dubai, the priority is straightforward: withdraw to a self-custodial wallet or transfer to a VARA-licensed exchange. Dubai has granted licenses to several major platforms, including Binance's local entity, OKX's Middle East operation, and Bybit. Moving funds to a regulated platform or a self-custody wallet eliminates the counterparty risk that comes with using a platform that has no local regulatory standing.
Users in the broader UAE should check whether their specific emirate falls under VARA's jurisdiction. VARA regulates virtual assets in Dubai specifically; other emirates may have different regulatory frameworks or none at all.
A Licensing Gap Across Two Continents
The Dubai action highlights a structural problem in crypto exchange regulation: a license in one jurisdiction means nothing in another. KuCoin obtained its MiCA authorization in Austria in November 2025, which theoretically allows passporting across the European Economic Area. But that license did not help in Dubai, where VARA operates under an entirely separate legal framework.
For crypto card users, this jurisdictional fragmentation is directly relevant. KuCoin's card program operates through the exchange's broader infrastructure. If regulators in key markets restrict the exchange's ability to onboard users or process transactions, card availability and functionality can be impacted by actions taken thousands of miles away.
The broader pattern extends beyond KuCoin. Exchanges that expand rapidly across multiple regions without building local compliance teams in each jurisdiction are running the same playbook that has now triggered enforcement actions against KuCoin in the US, Canada, New York, Austria, and Dubai.
FAQ
Can KuCoin still operate in Dubai after the VARA order? No. VARA's order requires all four named entities to cease virtual asset activities directed at Dubai residents immediately. The entities hold no license to operate in Dubai and cannot promote, advertise, or solicit customers in the emirate.
Are KuCoin users in Dubai at legal risk? VARA warned that consumers using unlicensed platforms face "significant financial risks and potential legal consequences." While individual prosecutions are uncommon, the warning creates regulatory exposure for anyone continuing to use the platform from Dubai.
Does the Austria FMA action affect KuCoin outside Europe? The Austrian action is limited to KuCoin EU Exchange GmbH's ability to onboard new European customers. It does not directly affect KuCoin's operations in Asia, the Middle East, or other regions. However, the reputational impact and the pattern of multi-jurisdictional enforcement can influence user confidence globally.
Is KuCoin's MiCA license revoked? No. Austria's FMA described the restriction as temporary. KuCoin EU must appoint qualified AML and sanctions compliance officers to lift the prohibition. The license itself has not been revoked, but new business is frozen until compliance is restored.
Overview
Dubai's VARA ordered four KuCoin-linked entities to cease all unlicensed crypto operations in the emirate on March 5, 2026, accusing them of operating without approval and misrepresenting their licensing status. The action came 11 days after Austria's FMA froze KuCoin EU from onboarding new customers over missing AML officers. KuCoin has now faced enforcement actions in the US ($297 million DOJ settlement), Canada, New York, Austria, and Dubai. Users in affected jurisdictions should consider moving funds to regulated platforms or self-custodial wallets.
Recommended Reading
- Austria Bans KuCoin EU From Onboarding New Customers After AML Officers Vanish Three Months Into Its MiCA License
- Eleven US Senators Demand a DOJ and Treasury Probe Into Binance Over $1.7 Billion in Alleged Iran Sanctions Violations
- Kraken Becomes the First Crypto Firm to Access the Federal Reserve Payment System
