[Dubai VARA Requires Crypto Firms to Use Data-Driven Risk Models, Update Risk Assessments Every Three Months] (Reported by Bitcoin.com) Dubai's Virtual Assets Regulatory Authority (VARA) has issued new guidelines requiring crypto firms to establish real-time risk scoring models based on quantitative business data, replacing static tracking methods. The new regulations mandate that crypto firms update their risk assessments at least every three months or immediately following significant changes to their operational structure or product lines. Companies must incorporate risks associated with high-risk and blacklisted countries identified by the Financial Action Task Force (FATF) into their assessment systems in real time, while distinguishing between risks related to proliferation financing and targeted financial sanctions, which must not be conflated with general anti-money laundering measures. VARA emphasized that firms must formally document and address risks posed by emerging tools such as AI-driven operations and anonymity-enhancing transactions, and demonstrate to regulators that assessment results directly influence resource allocation and daily compliance enforcement.