Background & Biography
Matthew White leads the Dubai Virtual Assets Regulatory Authority, commonly known as VARA. The authority announced in November 2023 that he would succeed Henson Orser, with a planned transition over the following months. White came to the role after more than two decades in technology and advisory work. His July 2026 Fortune author biography continues to identify him as VARA’s CEO.
Before joining the regulator, White was a partner at PwC, where he led work on cybersecurity and digital trust. PwC’s own 2023 Middle East crisis and resilience survey identifies him in that leadership role, providing a contemporary record independent of the later appointment announcement. VARA credits him with helping establish the authority before becoming its chief executive. This background connects his regulatory career to the practical questions of technology governance, operational controls and confidence in digital systems.
VARA’s appointment biography also records that White co-founded the startups decent and Clubbie, adding an entrepreneurial dimension to his advisory background. His present executive responsibilities are more precisely defined in Dubai’s virtual-assets law. The CEO manages the authority under the relevant supervision and approval structure, develops plans and draft rules, and oversees implementation once approved. That structure is important to understanding his influence: leadership of the regulator involves both executive responsibility and institutional checks.
The institution he leads was established in March 2022 under Dubai Law No. 4 of 2022. Its remit covers virtual assets and related activities across Dubai’s mainland, special development zones and free zones, excluding the DIFC. That is a defined jurisdiction rather than a mandate over every financial activity across the UAE. VARA’s current website names Helal Saeed Almarri as chairman of its executive board, a role separate from White’s chief-executive responsibilities.
Notable Contributions
White’s appointment was framed around taking VARA into full-scale market operations. The authority had already issued its Virtual Assets and Related Activities Regulations in February 2023, before his appointment as CEO. It is therefore more accurate to examine his role in operating and developing the regime than to credit him with personally creating every original rule. The framework combines requirements that apply across firms with additional obligations tied to the activities they conduct.
That design was developed further in May 2025 when VARA published updated activity-based rulebooks. The regulator described stronger controls for margin trading and token distribution, clearer treatment of collateral-wallet arrangements, and more consistent compliance requirements across licensed activities. A transition period required affected firms to comply by 19 June 2025. These were published supervisory changes, not merely a conference proposal, and they provide a concrete record against which to assess how the authority’s approach evolved during White’s tenure.
Market conduct is another important part of the remit. VARA’s 2024 marketing regulations require communications within their scope to be fair, clear and identifiable as promotional. They prohibit misleading assurances of safety or guaranteed returns and set requirements for risk disclosure. The regulations expressly address marketing in or targeting the UAE, which should not be confused with an expansion of VARA’s general licensing jurisdiction. For exchanges, promoters and other participants, communication practices are part of the regulatory obligation rather than an optional addition to product compliance.
White has described how he wants the framework to work in practice. In an October 2025 Khaleej Times interview, he emphasized principles-based requirements, data-supported supervision and controlled experimentation. He also discussed the need for regulated custody and other infrastructure that institutions require before entering a market. Those remarks document his stated priorities. They do not independently demonstrate that every firm meets its obligations or that regulatory oversight removes the risks of holding a virtual asset.
A more specific example is the cooperation with the Dubai Land Department. In April 2025, White signed an agreement intended to coordinate real-estate tokenization, following the launch of a pilot the previous month. The collaboration connected the land-registration authority’s responsibilities with VARA’s virtual-asset remit. It covered legal and technical coordination, risk assessment and investor awareness. This is a setting in which the rights represented by a token must fit the underlying property framework, rather than being determined by software alone.
The property initiative progressed beyond its original announcement. In February 2026, the Land Department announced a second phase enabling resale of approximately 7.8 million real-estate tokens from 20 February within a controlled pilot framework. Its stated purpose was to assess market efficiency and operational readiness while protecting participants’ rights. This establishes a further phase of the project, but not a universal secondary market for all Dubai property. It also does not establish that token holders can always find a buyer at their preferred price.
Another collaboration, announced by DMCC in October 2025, addressed tokenized commodities such as gold and diamonds. The agreement envisaged pilot projects, education and information sharing, combining DMCC’s commodities work with VARA’s oversight. White represented the regulator’s view that such arrangements could help translate tokenization into usable market structures. The announcement is evidence of a partnership and planned tests; it should not be presented as proof that all contemplated commodity products subsequently launched.
The separate position of the DIFC is illustrated by the memorandum White signed with the Dubai Financial Services Authority in October 2025. The DFSA’s account specifies cooperation on licensing, supervision, enforcement, financial-crime controls and information exchange. Each authority retained its responsibilities within its own jurisdiction. The agreement is important because coordination can help address activity spanning the two regimes without suggesting that either regulator has absorbed the other.
Supervision also requires firms to implement federal obligations. VARA’s February 2026 Travel Rule circular sets out expectations for information accompanying qualifying transfers, including collection, verification and secure transmission of originator and beneficiary details. It also addresses checks on counterparties and handling missing information. These requirements show the operational workload behind a regulated digital-asset transfer. They are institutional and statutory obligations, not evidence of a personal rulemaking power held by White alone.
Why Katharos.ai Follows Matthew White
Katharos.ai follows White because his position places him at the point where published regulation becomes authorization, supervision and coordination with other public bodies. The most useful evidence is specific: a revised rulebook, an activity permitted under a licence, a controlled pilot or a documented agreement between authorities. His technology-risk background makes that implementation focus particularly relevant to understanding his public work.
The larger question is how a specialist regulator keeps rules usable as products change. Property tokens and tokenized commodities raise different questions from a conventional crypto brokerage, while cross-border transfers create information-sharing duties of their own. White’s statements help explain the direction of the authority, but the resulting permissions and operating records remain the stronger test of what has actually changed.
Areas to Follow
- Changes to activity-specific permissions and the conditions attached to new or restricted licences. - Evidence from property-token resale and other pilots, including whether tests support wider participation. - Implementation of the Travel Rule, cybersecurity controls and data-supported supervision by regulated firms. - Practical results of cooperation with the DFSA, Land Department and DMCC, with each body’s jurisdiction kept distinct. - Whether public communication accurately distinguishes an application, in-principle approval, full licence and operational launch.
Reporting Scope
This profile covers White’s public professional record and selected VARA developments verified through 6 October 2026. Regulatory actions are attributed to the authority or relevant partner institution. Interviews describe his stated approach, while announcements of future projects remain plans unless later implementation is documented. The profile makes no claims about personal investments or returns and does not treat a regulatory licence as a guarantee of product safety.
Areas of Influence
Policy & Regulation is White’s category. His influence concerns the conditions under which virtual-asset businesses operate, the supervision of their activities and the cooperation needed when financial and technological systems overlap. It is grounded in a specific public office in Dubai. It should not be conflated with the authority of the UAE’s central bank, federal legislators, the ADGM regulator or the DFSA.
Katharos.ai publishes this profile for information, based on the sources listed. Inclusion is not an endorsement of the individual, their organizations, or any investment product.
Source notice: Information and images are attributed to the external sources listed. Katharos.ai does not endorse the subjects or claims described and does not independently certify the authenticity of every source statement or image.