Google has rewritten the licensing conditions for financial advertisers targeting the United Arab Emirates, effective October 21, 2026. Cryptocurrency exchanges and software wallets can now qualify through four named regulators instead of three, while contracts for difference and rolling spot forex, which Google's 2019 rule tied only to "the relevant financial services authority," now require a licence from one of three named bodies.

In Short

Google changed which UAE financial licences count before a company can advertise crypto trading, crypto wallets, contracts for difference or currency trading to people in the Emirates. Crypto firms get one more regulator on the accepted list, the new federal Capital Market Authority, while firms selling contracts for difference and forex now need a licence from a specific list of three regulators, one that leaves out Dubai's crypto regulator. From October 21, 2026, an ad for these products aimed at the UAE has to come from a Google-certified advertiser licensed by one of the named bodies, and an advertiser that breaks the rule gets at least seven days of warning before suspension.

What the update says

The change appears in Google's Advertising Policies Help Center change log under the heading "Updates to Cryptocurrencies and related products policy (October 2026)." The entry is marked "Posted October 2026" and gives no day of posting. According to Google, the purpose is to "reflect regulatory changes and clarify licensing requirements for targeting the United Arab Emirates across both the Cryptocurrencies and related products policy and the Complex speculative financial products policy."

Both of those policies sit inside Google's broader Financial Products and Services policy. The operative sentence sets a single start date for four product types. "Beginning October 21, 2026, advertisers offering Cryptocurrency Exchanges, Software Wallets, Contracts for Difference (CFDs), or Rolling Spot Forex targeting the United Arab Emirates may advertise those products and services when they meet the following requirements and are certified by Google," according to the page.

Two lists follow.

Cryptocurrency exchanges and software wallets

For cryptocurrency exchanges and wallets, Google accepts a licence from any one of four authorities:

  • Capital Market Authority (CMA)
  • Dubai Financial Services Authority (DFSA)
  • Financial Services Regulatory Authority (FSRA)
  • Virtual Assets Regulatory Authority (VARA)

Advertisers must also comply with "any other local legal requirements" and must be certified with Google.

Contracts for difference and rolling spot forex

For complex speculative financial products, the list shrinks to three:

  • Capital Market Authority (CMA)
  • Dubai Financial Services Authority (DFSA)
  • Financial Services Regulatory Authority (FSRA)

VARA does not appear. The same two extra conditions apply: compliance with other local law and Google certification.

Enforcement

Google repeated the enforcement language that has accompanied its country-level financial policy changes for years. "Violations of this policy will not lead to immediate account suspension without prior warning. A warning will be issued, at least 7 days, before any suspension of your account," according to the page. The rule "will apply globally to all accounts that advertise these financial products," meaning the advertiser's own location does not matter; what counts is whether the ads target the UAE.

What changed against the February 2025 rule

Google first spelled out UAE licensing for crypto exchanges and software wallets in a change log entry posted on February 14, 2025, which took effect on February 26, 2025. That version, according to Google, allowed such ads "as long as the advertiser is licensed by" one of three authorities: the FSRA, VARA and the DFSA. Google certification and compliance with other local law were already required.

Set side by side, the crypto lists differ by one name. The October 2026 version adds the Capital Market Authority. Everything else in the crypto section - the certification requirement, the local-law clause, the global scope and the seven-day warning - carries over.

The CMA is a new body. Under Federal Decree Law No. 32 of 2025, the CMA replaced the Emirates Securities and Commodities Authority (SCA), the federal markets regulator established in 2000, "in all its rights, obligations and contracts," according to an analysis by the law firm CMS. A companion law, Federal Decree Law No. 33 of 2025, repealed the 2000 securities law. Both took effect on January 1, 2026, according to CMS, and the capital markets law carries a one-year transition period.

Google's February 2025 list never included the SCA. The October 2026 update therefore does more than rename an existing entry. It brings the federal markets regulator into the crypto list for the first time, under its new name. Google's page does not explain the addition beyond the phrase "regulatory changes."

The other three bodies each cover a defined territory. The DFSA supervises the Dubai International Financial Centre and the FSRA supervises Abu Dhabi Global Market, both financial free zones with their own rulebooks. VARA regulates virtual asset activity in the emirate of Dubai outside the DIFC. A crypto business licensed only at the federal level, by the CMA, had no route onto the February 2025 list; from October 21 it does, provided it also obtains Google certification.

The bigger change: CFDs and forex

For contracts for difference and rolling spot forex, the shift is larger, although Google's headline does not mention it. The page title refers only to the cryptocurrencies policy, and the AI-generated summary Google placed at the top of the help article is headed "Cryptocurrency Policy Update For United Arab Emirates."

Google opened the UAE to these products in December 2019. A change log entry titled "Update to Financial products and services policy (December 2019)" announced that Google would "allow the advertisement of Contracts for Difference and rolling spot forex in Canada, Turkey, and United Arab Emirates." That page named no UAE regulator. Its licensing condition was general: advertisers had to "Be licensed by the relevant financial services authority in the country or countries they are targeting."

Nearly seven years later, the October 2026 entry replaces that open formula with a closed list of three. A CFD or forex provider holding a UAE licence from any other authority would not meet the new wording. The most visible omission is VARA, whose remit is virtual assets. Its absence from the speculative products list is consistent with that remit, since CFDs and spot forex on traditional currencies fall outside it, but Google does not explain the choice.

Brazil went through a similar process. Google restricted complex speculative financial products there from March 10, 2023, allowing only certified advertisers licensed by the Brazilian Securities and Exchange Commission, the CVM. The UAE rule follows the same template, with one difference: the Emirates have several regulators with overlapping jurisdictions, so Google had to name three.

A copy error in the speculative products section

The help page contains an error that matters for anyone reading it closely. Under the heading "United Arab Emirates (Complex Speculative Financial Products)," the body text reads: "Google allows ads promoting cryptocurrency exchanges and cryptocurrency wallets targeting the United Arab Emirates as long as the advertiser is licensed by one of the following authorities." The sentence is copied word for word from the crypto section above it. Read literally, it would mean crypto exchanges and wallets need a licence from only three authorities, contradicting the four-authority list a few lines higher.

The introductory paragraph resolves the conflict. It names CFDs and rolling spot forex as the products covered, and the section ends by pointing to Google's "About complex speculative financial products" page rather than the crypto page. The three-authority list therefore applies to CFDs and rolling spot forex. The section also omits a space in "Google.For more details," another sign of hurried editing. As of the copy reviewed for this article, Google had not corrected the text.

A second inconsistency is smaller. The operative sentence refers to "Software Wallets," while the section bodies say "cryptocurrency wallets." Google's other country-level crypto rules draw a clear line between the two: hardware wallets can be advertised in Switzerland without a FINMA licence, for example, as long as the devices do not also offer buying, selling or trading. The UAE update says nothing about hardware wallets.

Google's AI summary at the top of the page adds its own imprecision. It describes the change as licensing "by specific authorities like VARA or DFSA," a phrasing that could be read as covering CFD advertisers too. For those advertisers VARA does not count. Google states that "The English version is the official language used to enforce Google Ads policies," and the summary is labelled as a beta feature, so the policy text below it is what governs enforcement.

Timing

The effective date is October 21, 2026. The posting carries only a month, which makes the notice period impossible to calculate precisely. By PPC Land's calculation, the February 2025 UAE update gave advertisers 12 days between posting on February 14 and enforcement on February 26.

Short notice periods are not unusual for these entries. Google's UK crypto clearance was announced on December 20, 2024 for January 15, 2025, and its US prediction markets policy took effect 16 days after it was posted, a gap PPC Land at the time compared with the 30 to 90 days Google typically gives. That prediction markets policy also kept binary options and similar fixed-payout derivatives out of Google's ads entirely.

For crypto advertisers already licensed by VARA, the DFSA or the FSRA and already certified by Google, nothing changes on October 21. The group most directly affected is CFD and forex providers whose licence comes from a body not on the new list, and any firm that obtained Google's UAE certification under the 2019 wording without one of the three named licences. Google's page does not say whether existing certifications will be reviewed.

Why this matters for financial advertisers

Google has spent two years replacing broad licensing language with named regulators, one country at a time. In Europe, the process ran through the Markets in Crypto-Assets Regulation. Google required MiCA authorisation across the EU from April 23, 2025, then stopped accepting France's older AMF registration for crypto ads from July 1, 2026 after national transition windows closed. In July 2026 it added Iceland, Liechtenstein and Norway to complete coverage of the European Economic Area. Outside Europe, Argentina opened to crypto exchange and software wallet ads in September 2025, tied to the CNV's registry of virtual asset service providers.

The UAE update follows the same logic. When a jurisdiction restructures its regulators, as the Emirates did with the CMA on January 1, 2026, Google's list either catches up or becomes a barrier for firms licensed under the new structure. Here Google took roughly ten months after the CMA came into existence to add it.

Licensing is only one gate. Google has also been extending identity checks for financial advertisers, and in June 2026 it expanded financial services verification to 24 more EU and EEA countries, bringing the total to 42, with ads restricted for advertisers not verified within 30 days of enforcement. The UAE update does not mention that verification programme.

Rival platforms run their own systems. Microsoft Advertising, which began accepting search ads from pre-approved US crypto exchanges in 2022, allowed crypto exchanges into Audience Ads in all markets where it accepts crypto advertising in May 2026, with pre-approval and a dedicated manager account required. A crypto business licensed by the CMA could therefore face different eligibility answers on each platform.

Timeline

Summary

Who: Google, and advertisers offering cryptocurrency exchanges, software wallets, contracts for difference or rolling spot forex to audiences in the United Arab Emirates. The named regulators are the Capital Market Authority, the Dubai Financial Services Authority, the Financial Services Regulatory Authority and the Virtual Assets Regulatory Authority.

What: Google rewrote its UAE licensing conditions. Crypto exchanges and wallets can qualify with a licence from any of four authorities, one more than in February 2025, with the federal CMA added. CFD and rolling spot forex advertisers, previously required only to hold a licence from "the relevant financial services authority," now need one from the CMA, the DFSA or the FSRA. Google certification remains mandatory, and a warning comes at least seven days before any suspension. The speculative products section of Google's page contains a copied sentence that refers to crypto instead of CFDs.

When: Google posted the update in October 2026 without a specific day. The requirements take effect on October 21, 2026.

Where: The rule applies to ads targeting the United Arab Emirates, from any Google Ads account worldwide.

Why: According to Google, the update reflects regulatory changes in the UAE. The most significant of these is the creation of the Capital Market Authority, which replaced the Securities and Commodities Authority on January 1, 2026.