Dubai Virtual Asset Regulatory Authority requires crypto companies to use real-time risk models and update assessments every three months

According to Bitcoin.com, the Dubai Virtual Asset Regulatory Authority (VARA) has issued new guidelines requiring cryptocurrency companies to use quantitative business data to establish real-time risk scoring models and update risk assessments at least every three months or immediately when there are significant changes in operational structure or product lines. Enterprises must incorporate the risks of high-risk and blacklisted countries under the Financial Action Task Force (FATF) into their assessment system, distinguishing between risk assessments of proliferation financing and targeted financial sanctions. Enterprises must document and explain the risks associated with AI driven operations and anonymous enhanced transactions, and demonstrate to regulatory agencies that the assessment results determine resource allocation and daily compliance execution.