Policy & Regulation·Jan 13, 2026
Dubai bars privacy coins from exchanges amid global AML push
Cryptocurrency exchanges operating in the Dubai International Financial Centre (DIFC), a financial hub in the United Arab Emirates (UAE), entered a new compliance environment on Jan. 12 as updated Crypto Token rules issued by the Dubai Financial Services Authority (DFSA) came into force. The revised framework bars exchanges from offering certain digital assets.Photo by Christoph Schulz on UnsplashPrivacy tokens restricted to private walletsThe affected assets are privacy tokens like Zcash (ZEC) and Monero (XMR), although the restriction does not prevent Dubai residents from holding those coins in private wallets. The move is aimed at addressing anti-money laundering (AML) and sanctions compliance risks. The exclusion of privacy tokens reflects alignment with global compliance standards, according to Elisabeth Wallace, Associate Director of Policy & Legal at the DFSA. She told CoinDesk that bans of this kind are effectively inevitable if crypto businesses want to align with standards set by the Financial Action Task Force (FATF), given that privacy tokens are designed to obscure transaction histories and the identities of holders. The revised rules extend beyond token classifications, preventing regulated firms from deploying or providing tools designed to mask blockchain activity. These include mixers, tumblers, and other technologies that obscure transaction information. At the same time, the DFSA refined its classification of what it terms “Fiat Crypto Tokens,” limiting the category to tokens pegged to fiat currencies and backed by high-quality, liquid assets capable of meeting redemption requests under market stress. Under this definition, algorithmic stablecoins such as Ethena (ENA) would not qualify as stablecoins, though they would still be treated as cryptocurrencies. The update also alters how token eligibility is determined. Rather than maintaining a centralized list of approved assets, the DFSA now requires licensed firms to carry out their own assessments of the crypto assets they offer, document those judgments, and keep them under ongoing review. Thailand enforces crypto travel ruleComparable regulatory tightening is unfolding elsewhere in Asia. In Thailand, during a high-level meeting on Jan. 9, Prime Minister Anutin Charnvirakul said the Securities and Exchange Commission had been instructed to strictly enforce the travel rule, according to The Nation Thailand. The international standard requires crypto service providers to verify both senders and recipients in wallet-to-wallet transfers. The directive forms part of a broader government initiative to establish a national data bureau, envisioned as a centralized platform for real-time monitoring of suspicious transactions and the development of detailed financial risk profiles. In South Korea, enforcement actions have similarly intensified. According to Dailian, Korbit, the country’s fourth-largest crypto exchange, paid a 2.73 billion won ($1.9 million) fine imposed by the Financial Information Unit (FIU) under the Financial Services Commission (FSC) for violations of anti-money laundering (AML) rules. The payment followed a board decision and was made within a reduced-penalty period, allowing Korbit to receive a 20% discount. Crypto firms comprise 77% of Korean finesA broader review of penalties issued by the FIU since the disclosure of its sanctions guidelines shows that 77% of total fines were levied against virtual asset service providers (VASPs). While an analysis by Digital Asset found that only four of 95 fine cases issued since August 2023 involved VASPs, those cases accounted for a disproportionately large total of 41.8 billion won ($28.4 million). Exchanges fined to date include Delio, Hanbitco Korea, Dunamu—the operator of Upbit—and Korbit, with Dunamu receiving the largest penalty imposed by the FIU to date. The sanctions were linked to alleged know-your-customer (KYC) failures, unreported transactions involving individuals subject to warrants, and shortcomings in systems designed to detect suspicious activity. Separately, the FIU had issued disciplinary measures against Dunamu, including a warning to its chief executive and a three-month partial suspension of operations, which the company is contesting in court. The next hearing is scheduled for February. In overall fine totals, casinos ranked behind crypto firms, underscoring how enforcement against crypto intermediaries has been particularly robust, as oversight patterns continue to evolve.
