Skilled Person

A skilled person, in the context of UAE virtual asset regulation, is an independent expert appointed by the regulator to assess, monitor, or oversee an aspect of a regulated entity’s operations. The appointment of a skilled person is an enforcement and supervisory measure that places external expertise alongside or within the entity to address identified compliance deficiencies and report to the regulator on remediation progress.

VARA Precedent

The skilled person mechanism gained prominence in UAE virtual asset regulation through the Morpheus Software Technology FZE (Fuze) enforcement case in August 2025. In that case, VARA imposed a skilled person appointment alongside cease-and-desist orders and financial penalties, citing failures in AML programme controls, governance, compliance, and internal systems and controls; engaging in unlicensed virtual asset activities; and failure to disclose material information to the regulator.

The Fuze case is the only published VARA enforcement action resulting in a skilled person appointment as of March 2026, making it the sole precedent for understanding how VARA deploys this measure.

Function and Scope

A skilled person appointment typically involves:

Assessment: The skilled person conducts an independent assessment of the specific compliance areas identified in the enforcement notice, evaluating the adequacy of existing controls, identifying gaps, and assessing root causes.

Monitoring: The skilled person monitors the entity’s remediation activities, verifying that corrective actions address the identified deficiencies effectively and within required timeframes.

Reporting: The skilled person reports findings and progress assessments to the regulator, providing an independent view that complements the entity’s own reporting.

Advisory: In some cases, the skilled person may provide recommendations on remediation approaches, compliance program enhancements, or governance improvements.

Cost Implications

The entity bears the cost of the skilled person appointment. Skilled person engagements typically involve senior compliance professionals or advisory firm teams operating at premium professional services rates. Engagement durations are measured in months, potentially extending to a year or more depending on the scope of deficiencies and the pace of remediation.

For total cost modeling including skilled person risk, see our total cost of compliance model. The financial impact of a skilled person appointment significantly exceeds the cost of proactive compliance investment.

Comparison with Other Enforcement Measures

The skilled person appointment occupies a distinct position in VARA’s enforcement toolkit:

More intrusive than supervisory warnings or financial penalties alone
Less severe than license suspension or revocation (it implies the entity may be recoverable)
Similar in concept to measures available under ADGM-FSRA and DFSA enforcement frameworks

Who Can Serve as a Skilled Person

Skilled persons are typically drawn from professional services firms with regulatory compliance expertise. In the UAE virtual asset context, potential skilled person candidates include:

Big Four advisory firms: Deloitte Middle East, PwC Middle East, EY, and KPMG — firms with established financial services regulatory practices and compliance assessment capabilities
Specialized regulatory consultancies: Boutique firms with specific virtual asset regulation expertise
Law firms: Firms with regulatory advisory practices that can assess compliance frameworks and governance structures

The skilled person must be independent from the entity under review. A firm that provides ongoing advisory or audit services to the entity may face independence conflicts that preclude appointment as the skilled person.

Engagement Process

The typical skilled person engagement follows a structured process:

Appointment notification: VARA notifies the entity of the skilled person appointment as part of the enforcement notice
Terms of reference: VARA establishes the scope, deliverables, and timeline for the skilled person engagement
Engagement commencement: The skilled person begins the assessment, which may involve document review, interviews with management and staff, system testing, and operational observation
Interim reporting: The skilled person may provide progress reports to VARA during the engagement
Final report: The skilled person delivers findings, conclusions, and recommendations to VARA
Remediation oversight: The skilled person may continue to monitor remediation activities based on the report findings

Compliance Implications

Practitioners should recognize the skilled person mechanism as a strong incentive for proactive compliance investment. Building robust AML programs, maintaining effective KYC procedures, implementing travel rule compliance, and maintaining regulatory transparency are all measures that reduce skilled person appointment risk.

The cost of proactive compliance — including blockchain analytics platforms (Chainalysis, Elliptic, Crystal Blockchain), KYC platforms (Sumsub), and advisory support — is substantially lower than the combined cost of a skilled person appointment (professional fees plus remediation costs plus potential reputational damage). The total cost of compliance model provides the framework for evaluating proactive compliance investment.

For enforcement response planning, see our how to respond to enforcement guide. For the full enforcement timeline, see the enforcement action dashboard.

For regulatory context, visit UAE Tokenization Regulations and Dubai Tokenisation.

glossaryenforcementskilled-person

Skilled Person — VARA Enforcement and Supervisory Measure