Published 2026-07-14 · Last updated 2026-07-14 · By GCI Research Desk, DIFC, Dubai
Crypto due diligence runs in six steps, ordered to kill bad deals fastest. First, licensing: identify the regulator and verify the entity on its register. Second, custody: establish who actually holds the assets and under what legal structure. Third, the team: verify named, checkable people with real histories. Fourth, the economics: understand exactly how the venture makes money and what has to be true for returns to exist. Fifth, the claims: demand evidence for every volume, user and return figure. Sixth, the exit: confirm how you get your money out and who has done so. A venture that fails step one or two does not deserve steps three to six.
Step 1 and 2: licence and custody, the eliminators
Start with the regulator, because it is the fastest filter: a platform serving UAE investors should map to VARA, the DFSA in DIFC, the FSRA in ADGM or the SCA, and the entity should verify on the register for the activity offered. Then custody: who holds the assets, in what legal structure, and what happens on insolvency. Client assets held by a licensed custodian, segregated from the operator, is the standard. Assets pooled in the operator's own wallets is how the industry's biggest failures happened, whatever the marketing said.
Step 3 and 4: the team and the economics
Verify the people: full names, checkable histories, and a footprint that predates the project. Anonymous or unverifiable founders are a decisive red flag for a venture asking for your capital. Then the economics: write down, in one paragraph, exactly how the venture generates the return it advertises. If the return only exists while new money keeps arriving, it is not yield, whatever it is called. If the explanation needs jargon to survive, treat that as an answer.
Step 5 and 6: the claims and the exit
Every stated metric is a claim: trading volumes, user counts, reserves, returns. Ask what evidence sits behind each, and weight audited or independently attested figures above everything else. Reserve attestations, audit reports and named auditors can be checked; screenshots cannot. Finally the exit: confirm the withdrawal process, the limits, the timelines and the conditions under which withdrawals can be suspended, and look for evidence of investors who have actually exited at scale. An investment you cannot leave is not an investment.
How GCI helps you screen a virtual asset venture
Gulf Commercial Insights does not provide investment advice and does not recommend, rate or endorse any cryptocurrency, token or virtual asset. What GCI screens is the venture behind the proposition: the platform, the exchange, the fund structure or the operating business asking for your capital. The conviction engine checks the licensing claims against the named regulator, tests the business model and the stated metrics against evidence, and flags every figure that is assumed rather than proven. You get back a source graded verdict of CONVICTION, PROCEED WITH CONDITIONS, WATCH, READY or AVOID, with each claim tagged VERIFIED, ESTIMATED or REPORTED.
For anyone evaluating a crypto venture, fund or platform, that answers the three questions that matter:
- Is the entity actually licensed for the activity it is offering, and by which regulator?
- Do the claimed volumes, custody arrangements and business metrics stand up to evidence?
- What should you confirm in writing before you transfer any funds?
Verify first, commit second. We are a technology and research firm, not a DFSA regulated financial services firm and not a VARA licensed virtual asset service provider.
Evaluating a crypto venture, fund or platform?
Start with a free Deal Health Score on the specific venture, then get the full Conviction Report with a clear verdict and evidence tiered findings, priced to your mandate. See the public record of past verdicts first.