Capital.com splits UAE crypto custody into separate licensed entity

Capital.com's UAE clients will soon reach crypto spot execution through a different legal entity than the one handling their CFDs — Capital Vault UAE, which holds a full virtual-asset licence from the Capital Market Authority. The products appear in the same app. The regulatory perimeter between them is real.

The structure matters more than the launch. Capital.com's CFD business already operates under an established regulatory framework in the UAE. Rather than expand that entity's permissions to cover spot crypto execution and custody, the firm built a separate affiliate with its own governance, its own custody arrangements, and its own CMA authorisation. This is not belt-and-suspenders caution. It is a deliberate jurisdictional choice, and I think the market is underreading what it signals.

When a firm segments a new business line this cleanly — separate entity, separate licence, separate custody — it is usually preparing for a regulatory environment where commingled risk becomes a liability. Cyprus came first: Capital Vault Ltd received MiCA authorisation in December 2025. The UAE followed with CMA permissions for dealing and custody. The pattern is a firm building portable compliance architecture, not a firm chasing individual licences.

Rahul Kumar, Capital Vault UAE's CEO, cited the CMA's review rigour as a feature. That framing is worth taking seriously. The CMA framework is recent and still being populated — Capital Vault UAE is listed among the first companies licensed under it, though Bybit, Daman, XBase and CoinCorner hold full licences too. Being early in a new framework is not the same as being first in a developed one. It means the rules are still being written around you, which is advantage and exposure at once.

What Capital.com has not disclosed is nearly as informative as what it has. No launch date. No supported tokens. No custody insurance disclosure. No clarity on whether clients can make external deposits or withdrawals, or whether this is a closed buy-and-hold model dressed as an exchange. I have seen this disclosure pattern before — when the product is real but the commercial details are still being resolved with regulators or liquidity providers who haven't signed. It does not mean the product is hollow. It means the firm is publishing the licence before it has finished building to it.

The consensus read on this is "UAE crypto expansion, regulatory box checked." I think the more precise read is that Capital.com is assembling a cross-jurisdictional custody and execution infrastructure designed to survive regulatory fragmentation — the scenario where MiCA, CMA, and whatever framework emerges in the Gulf states do not converge, and firms that built on unified legal structures find themselves restructuring under pressure. The separation between Capital Vault UAE and the CFD business is not just compliance housekeeping. It is what optionality looks like before you need it.

What remains genuinely open is the custody model itself — who holds the keys, under what insurance terms, and whether the CMA licence covers the full range of assets clients will expect to trade. Those details will determine whether this entity is a serious custody operation or a regulatory placeholder waiting for the real product to arrive.