CORPORATE, Crypto
April 7, 2026
4:34 pm

Five Corporate Tax Mistakes That Could Strip Your Crypto Firm of Its 0% Free Zone Status

The perception that digital assets are entirely untaxed in the Emirates was perhaps reasonable in 2022. It is no longer accurate. Since June 2023, Federal Decree-Law No. 47 of 2022 has imposed a 9% levy on business profits above AED 375,000, and the Federal Tax Authority is actively enforcing those rules. For crypto firms established in Dubai, Abu Dhabi, or one of the many specialised zones across the country, the stakes are particularly high.

A Qualifying Free Zone Person (QFZP) can still enjoy a 0% charge on qualifying income. That much is true. But the conditions attached to that status are strict, and the consequences of failing them are severe: full taxation at 9% for the current period and the following four years. The FTA’s audit capacity grew by 135% in 2024, and its digital cross-referencing tools now simultaneously match corporate returns against VAT filings, customs records, and financial statements.

What follows are the five errors we see most often among crypto and blockchain firms, each of which can cost a free zone entity its preferential position.

Mistake 1: Treating Free Zone Registration as an Automatic Shield

The Assumption Behind the Problem

Many founders believe that incorporating in a recognised free zone, whether DMCC, IFZA, RAKEZ, or another, automatically shields their profits from taxation. This is wrong. Free zone registration and QFZP status are not the same thing. A trade licence from DMCC Crypto Centre, for instance, gives your firm legal existence; it does not automatically satisfy FTA requirements.

What the FTA Actually Requires

To retain that 0% position on qualifying income, a free zone entity must meet all of the following conditions simultaneously:

Be a juridical person incorporated, established, or registered in a free zone
Maintain adequate substance within that zone, including premises, qualified staff, and sufficient operating expenditure
Derive income that falls within the definition of qualifying income under the relevant Ministerial Decisions
Not have elected to be subject to the standard 9% regime
Keep audited financial statements (required from 2025 onward for QFZPs)
File an annual return with the FTA, even if no payment is due

Failing on any single criterion triggers a loss of QFZP status. And the failure is not limited to one year; the entity becomes ineligible for the following four tax periods as well.

The Registration Trap

Even before QFZP status comes into play, there is a simpler problem. Many crypto firms have not registered with the FTA at all. Late registration attracts an AED 10,000 penalty. The FTA introduced a one-time waiver for firms that file their first return within seven months of the end of their first tax period. For companies with a financial year ending 31 December 2025, the waiver deadline is 31 July 2026. Miss it, and the penalty stands. A nil return is still a return.

Mistake 2: Getting the Qualifying vs Non-Qualifying Income Split Wrong

How the Classification Works

For QFZPs, everything hinges on the distinction between qualifying and non-qualifying income. Qualifying income, broadly defined, includes revenue from transactions with other free zone persons or from qualifying activities with non-free zone persons as outlined in Ministerial Decision No. 265 of 2023 (updated by Ministerial Decision No. 229 of 2025). Non-qualifying income is subject to the standard 9% charge.

The De Minimis Threshold That Catches Firms Off Guard

If non-qualifying revenue exceeds the lower of 5% of total revenue or AED 5 million, the entity loses its QFZP status entirely, not on the excess amount alone, but on all income for five years.

We see crypto firms misclassify income in three common ways:

Treating revenue from mainland clients as qualifying without confirming the activity is listed under the relevant Ministerial Decision
Failing to verify that the counterparty in a free-zone-to-free-zone transaction is the beneficial recipient of services, as required by Cabinet Decision No. 100 of 2023
Ignoring ancillary income streams, such as bank interest, rental income from mainland property, or insurance recoveries, that quietly push the entity past the threshold

A Practical Scenario

Consider a blockchain analytics firm in DMCC. Its core consulting fees from other free zone clients qualify for the 0% charge. But the firm also earns interest from a mainland bank deposit, collects rent on a Jumeirah apartment, and receives a modest insurance payout. Individually, these sums appear trivial. Together, they might exceed the 5% ceiling, and if they do, every dirham of the firm’s income becomes taxable at 9%.

The fix is granular revenue mapping: each income line is classified against the current qualifying activities list, tested monthly against the de minimis cap, and documented well enough to survive an FTA review.

The Differences Between Qualifying and Non-Qualifying Income at a Glance

Income Type	Classification	Typical Free Zone Examples	Taxed At
Fees from other free zone entities for qualifying activities	Qualifying	Software development for DIFC client	0%
Revenue from qualifying activities with mainland persons (on approved list)	Qualifying (subject to conditions)	Advisory services meeting Ministerial Decision criteria	0%
Mainland-sourced commercial income outside approved activities	Non-qualifying	Retail sales to mainland consumers	9%
Bank interest from mainland deposits	Non-qualifying	Savings account with a national bank	9%
Rental income from mainland property	Non-qualifying	Apartment in Dubai Marina	9%
Exchange or brokerage fees (depending on licensing and classification)	Variable	VARA-licensed exchange services	0% or 9%

Mistake 3: Ignoring VAT Obligations on Mining and Staking Activities

The Exemption That Does Not Cover Everything

Cabinet Decision No. 100 of 2024 brought significant relief for crypto firms by exempting transfers and conversions of virtual assets from the 5% VAT. The exemption applies retroactively to 1 January 2018, which means some firms may have overpaid on historical transactions and could be eligible for refunds.

However, the FTA issued guidance VATP039 in January 2025, making one point abundantly clear: mining does not qualify for this exemption.

Why Mining Is Treated Differently

The FTA views mining as a service, specifically the provision of computational power to validate blockchain transactions. When performed on behalf of another party (such as in a mining pool), it is a taxable supply at either 5% or 0%, depending on the circumstances. Mining on a personal account, where no identifiable recipient exists, may fall outside the scope of VAT, but commercial operations almost certainly do not.

This distinction catches crypto firms that assumed the broad virtual asset exemption covered all their activities. Staking, similarly, remains in a grey area, with no definitive FTA guidance as of early 2026.

What Firms Should Do

Review your VAT position against the specific language of Cabinet Decision No. 100 of 2024 and VATP039
Separate mining and staking revenue from trading and advisory income in your accounting records
Consider whether historical VAT refund claims are available for qualifying transactions dating back to 2018
Budget for the 5% VAT charge on mining services rendered to identifiable third parties

Mistake 4: Failing to Reconcile Corporate Returns with VAT Filings

The FTA’s Cross-Referencing Capability

The FTA built its audit infrastructure around VAT long before corporate taxation came into effect. Now, both obligations feed into the same enforcement system. The Authority’s digital tools compare revenue and expense figures across your corporate return and your VAT submissions. Where the numbers diverge without explanation, the system flags the discrepancy.

Common Mismatches in Crypto Operations

Crypto firms are particularly vulnerable to mismatches for several reasons:

Volatile asset valuations mean that the income reported for corporate purposes (based on financial statements) may differ from the supply values reported for VAT
Timing differences in recognising revenue from token sales, staking rewards, or advisory fees
Transactions classified as exempt for VAT (following the virtual asset exemption) but simultaneously reported as taxable income for corporate purposes
Related-party transactions where transfer pricing adjustments alter one set of figures but not the other

The Penalty Exposure

Under the revised penalty regime introduced by Cabinet Decision No. 129 of 2025 (effective 14 April 2026), submitting an inaccurate return attracts an AED 500 penalty. That may seem modest, but it is only the starting point. If the FTA discovers the inaccuracy during an audit, the penalty rises to 15% of the underpaid amount plus monthly interest. Filing a voluntary disclosure before the FTA issues an audit notice results in significantly lower charges, typically 1% per month on the difference between the original due date and the disclosure date.

The lesson is straightforward: reconcile both sets of figures before filing, document every variance, and correct errors early.

Mistake 5: Neglecting Substance Requirements and Record-Keeping Standards

Substance Is Not a Formality

The term “adequate substance” appears repeatedly in the legislation, but many crypto firms treat it as a box-ticking exercise. It is far more than that. The FTA expects a QFZP’s core income-generating activities (CIGAs) to be performed in the free zone. For a blockchain development firm, that means actual coding, testing, and deployment from the zone. For an exchange, it means operational staff, compliance oversight, and server management within the relevant jurisdiction.

A free zone entity may outsource certain CIGAs to a related party or third party. Still, only if that outsourcing is to another free zone entity, and the QFZP maintains adequate supervision.

The Documentation Burden

Record-keeping requirements have become noticeably more onerous. The FTA mandates that all financial records be retained for seven years. Failure to maintain proper records triggers an AED 10,000 penalty for a first offence, increasing to AED 20,000 for repeat violations within 24 months.

For crypto firms, this extends beyond conventional ledgers:

Wallet addresses and proof of ownership for all on-chain assets
Transaction histories for every exchange, transfer, and conversion
Cost-basis documentation for tokens acquired through mining, airdrops, or staking
Internal control procedures demonstrating how digital assets are valued and how custody is maintained
KYC documentation for counterparties, particularly in free-zone-to-free-zone transactions, where beneficial ownership must be verified

Audit Preparedness

The FTA can audit periods going back seven years. Firms that lack organised records will spend more time (and money) responding to queries than those with systems already in place. Proactive annual reviews of documentation and substance indicators are well worth the effort.

How CARF Will Change Reporting Obligations from 2027

The UAE signed the Multilateral Competent Authority Agreement under the OECD’s Crypto-Asset Reporting Framework (CARF) in September 2025. Implementation begins 1 January 2027, with the first automatic data exchange expected in 2028.

What this means in practice: licensed crypto platforms (exchanges, custodians, brokers) will need to collect and share customer identification data, transaction volumes, and residency details with the FTA, which will then share this information with tax authorities in over 70 participating countries.

For crypto firms operating from the Emirates, this adds another compliance layer. Even if your own tax position is clean, your customers’ home jurisdictions will receive detailed information about their transactions. Firms that have not invested in robust KYC and reporting infrastructure will find themselves unprepared.

The VARA Licensing Layer

Operating a crypto firm in Dubai requires more than just FTA compliance. The Virtual Assets Regulatory Authority (VARA) oversees all virtual asset activity in onshore Dubai (excluding DIFC, which falls under the DFSA). Since May 2025, VARA has published updated rulebooks covering supervisory mechanisms across most activity categories.

For firms registered in DMCC, a trade licence alone does not grant the right to perform regulated virtual asset activities. Depending on the service offered, a firm may need:

A full VASP licence from VARA (for exchanges, brokerages, or custody services)
A VARA Non-Objection Certificate (for non-regulated activities like proprietary trading)
No VARA authorisation at all (for purely non-client-facing activities such as software development)

Failure to hold the correct licensing can result in fines of up to AED 4,000,000 from the SCA, operational suspension, and even criminal prosecution. Beyond the immediate penalty, an unlicensed operation creates questions about the legitimacy of reported income, which may in turn trigger FTA scrutiny of the entity’s corporate returns and QFZP claims.

Small Business Relief: A Temporary Buffer Worth Knowing About

The corporate framework includes a temporary provision known as Small Business Relief, available until 31 December 2026. Tax resident persons with revenue below AED 3 million in both the current and prior periods may elect to be treated as having no taxable income.

For qualifying crypto firms, this effectively raises the 0% threshold from AED 375,000 to AED 3 million. But there are catches:

The relief is not available to QFZPs (free zone entities claiming the 0% regime cannot also claim Small Business Relief)
Members of large multinational groups are excluded
Electing Small Business Relief means certain provisions of the law, including loss carry-forward and transfer pricing obligations, will not apply

It is a useful option for smaller mainland-based crypto operations, but it is not a substitute for proper QFZP structuring.

Transfer Pricing: The Overlooked Exposure

Related-party transactions are common in crypto group structures, particularly where a holding entity in one free zone works alongside an operational subsidiary in another. The Emirates’ transfer pricing rules follow OECD guidelines, and documentation requirements apply when UAE revenue exceeds AED 200 million, or the entity belongs to a multinational group with consolidated revenue above AED 3.15 billion.

Perhaps more importantly, the FTA can request transfer pricing documentation within 30 calendar days of notice. That window does not allow time to create records afterwards. Intercompany agreements, benchmarking studies, and functional analyses should be current and readily accessible.

For crypto groups, a common risk is underpricing services between related entities to shift profits toward the free zone entity with QFZP status. The FTA is aware of this pattern and treats it as a priority area during reviews.

Cyprus as a Complementary Jurisdiction

Firms weighing up their international structuring options should consider how Cyprus fits alongside a presence in the Emirates. Since 1 January 2026, Cyprus has operated a 15% corporate income tax (up from the previous 12.5%), alongside a new flat 8% charge on disposal gains from crypto assets. The Special Defence Contribution on dividends has been reduced to 5%, while deemed dividend distributions have been abolished for profits earned on or after 2026.

Cyprus also offers a 120% R&D super-deduction (extended through 2030) and has eliminated stamp duty on corporate transactions. Its extensive network of double taxation treaties, EU membership, and well-established regulatory infrastructure make it a strong base for firms that need both a European presence and a Middle Eastern operational hub.

C. Savva & Associates is not a law firm. For matters requiring legal expertise, the firm collaborates with its partner law firm Nicholas Ktenas & Co., LLC, which provides legal counsel on corporate and commercial law, banking and finance, data protection, intellectual property, employment law, and trusts.

Preparing for the Second Filing Season

With the second corporate filing season approaching and the revised penalty framework under Cabinet Decision No. 129 of 2025 taking effect on 14 April 2026, crypto firms should treat compliance as an ongoing process rather than an annual scramble.

Key dates for entities with a financial year ending 31 December 2025:

Filing and payment deadline: 30 September 2026
Late registration waiver deadline: 31 July 2026
Revised penalty regime effective: 14 April 2026

Waiting until September is a mistake. Begin your reconciliation and revenue classification review now.

Frequently Asked Questions

Is crypto tax-free in the UAE?

For individuals holding or trading digital assets in a personal capacity, the Emirates imposes no personal income or capital gains tax. That position has not changed. However, once crypto activity crosses into business territory, whether through an incorporated entity or individual activity generating annual revenue above AED 1 million, the 9% corporate levy applies to profits exceeding AED 375,000. Free zone firms meeting all QFZP conditions may still benefit from the 0% position on qualifying income. The distinction between personal investing and commercial trading is ultimately a factual determination that the FTA makes based on frequency, volume, and organisational characteristics.

What are the allowable expenses in the UAE corporate tax?

Deductible costs must be incurred wholly and exclusively for the purpose of generating taxable income. Typical allowable items include employee salaries and benefits, office rent, professional advisory fees, marketing costs, depreciation of tangible and intangible assets, and certain loan interest. Related-party payments must satisfy the arm’s-length standard. Entertainment expenses are subject to a 50% restriction. Donations require approval from recognised public benefit organisations. Importantly, fines and penalties paid to government authorities are generally not deductible, giving firms yet another reason to maintain strict compliance with FTA deadlines and filing requirements.

How much crypto can I make tax-free?

Individuals in the Emirates face no personal levy on crypto gains regardless of amount, provided the activity is genuinely personal in nature. For corporate entities on the mainland, the first AED 375,000 of taxable profit is charged at 0%, with amounts above that threshold subject to 9%. Mainland firms with annual revenue below AED 3 million may elect Small Business Relief to be treated as having no taxable income until 31 December 2026. Free zone QFZPs can maintain a 0% position on all qualifying income with no cap, so long as substance, documentation, and de minimis conditions are met continuously.

What is the corporate tax exemption in the UAE?

The standard corporate structure provides a two-tier framework: 0% on the first AED 375,000 of taxable profit and 9% on amounts above that. Free zone entities recognised as QFZPs benefit from a separate 0% charge on qualifying income, without the AED 375,000 ceiling, provided they maintain adequate substance, earn qualifying income, and satisfy all conditions under the relevant Cabinet and Ministerial Decisions. Government entities, qualifying public benefit organisations, and certain investment funds may also be fully exempt. Temporary Small Business Relief further extends the effective 0% threshold to AED 3 million for eligible mainland firms until the end of 2026.

Protect Your 0% Position Before the Next Filing Deadline

Getting the 0% position right is not something you do once and forget about. It requires ongoing monitoring, accurate classification, and documentation that can withstand FTA scrutiny. If you operate a crypto or blockchain firm in a free zone and have questions about your QFZP eligibility, revenue classification, or VAT exposure, reach out to C. Savva & Associates. Our advisory team works with digital asset firms across the Emirates and in Cyprus, helping them stay compliant while preserving every legitimate advantage their structures allow.