VARA Rulebook
VARA’s March 2026 Rulebook v2.1 raises the bar for retail-facing crypto venues. Exchanges operating under VARA must evidence that they identified harm in their own data and acted on it.
Evidence outcomes, not just monitor trades. Built for MiCA, Consumer Duty, and VARA.
Destructive retail trading rarely looks like one bad decision. It looks like a recognisable sequence: winning streaks that breed overconfidence, losses that trigger asset drift, position sizes that creep upward, risk controls that quietly disappear, deposits that follow losses. Liquidation isn’t the end of the pattern — many traders continue the cycle for months or years. The behavioural sequence is visible in the data the entire time. Every regulated venue holds it. Almost none have a system designed to read it as a sequence.
Visible in the data. No system reads it.
Three regulatory frameworks have moved this gap from “best practice” to “compliance obligation” within eighteen months. VARA’s 2026 rulebook is active in the UAE. FCA Consumer Duty applies to UK retail financial services, with the crypto authorisation gateway opening 30 September 2026. MiCA conduct obligations apply across the EU. The shared question: can a regulated venue evidence it identified retail harm and acted on it, or did the harm continue while the venue watched the trades?
Three regulatory frameworks shaping retail conduct obligations.
VARA’s March 2026 Rulebook v2.1 raises the bar for retail-facing crypto venues. Exchanges operating under VARA must evidence that they identified harm in their own data and acted on it.
The Consumer Duty requires UK retail financial firms to act in good faith and avoid foreseeable harm. UK crypto firms preparing for the FCA authorisation gateway must demonstrate, with data, that they monitored customer outcomes and acted when those outcomes were poor.
MiCA’s full regime for crypto-asset service providers applies across the EU. CASPs must act honestly, fairly, and professionally in clients’ best interests — venues that build behavioural evidence now satisfy MiCA’s current duties and prepare for the regime’s likely evolution.
BRIE was built around a clear thesis: retail trading harm unfolds in recognisable patterns, not isolated incidents. The four phases below describe how harm tends to develop — they are not labels we assign to traders, and real spirals rarely fit neatly into one phase.
Overconfidence forms after winning streaks. Position discipline weakens at the edges, new asset classes appear, foundations for later harm are laid.
Discipline erodes. Trade frequency rises, leverage creeps upward, sessions stretch, risk controls become inconsistent. The behaviour is no longer routine.
Active recovery-seeking. Position sizes balloon, leverage spikes, trades cluster into compressed time windows. Capital moves between accounts. Strategy, where one existed, is abandoned.
Capital sourcing and desperation. Deposits follow losses in repeating cycles. Withdrawals fragment. Destruction compounds across weeks or months, often without external visibility.
Overconfidence forms after winning streaks. Position discipline weakens at the edges, new asset classes appear, foundations for later harm are laid.
Discipline erodes. Trade frequency rises, leverage creeps upward, sessions stretch, risk controls become inconsistent. The behaviour is no longer routine.
Active recovery-seeking. Position sizes balloon, leverage spikes, trades cluster into compressed time windows. Capital moves between accounts. Strategy, where one existed, is abandoned.
Capital sourcing and desperation. Deposits follow losses in repeating cycles. Withdrawals fragment. Destruction compounds across weeks or months, often without external visibility.
BRIE’s detection engine reads behavioural signals, liquidation proximity, discipline modifiers, and recognised pattern combinations across all four phases simultaneously. The output is a real-time risk score, an audit-grade case file, and tier-appropriate intervention recommendations. The exchange retains full control over how it acts on what BRIE surfaces.
BRIE is built for regulated retail trading venues operating under MiCA, the Consumer Duty, and VARA. The need is most acute on venues offering leverage, perpetuals, or other derivative products, where the speed and scale of harm is largest. The detection logic applies across spot venues as well, where harm patterns operate over longer time horizons.
These venues are starting to face obligations they did not face before: avoiding foreseeable harm to retail traders, monitoring risk in real time, and intervening proportionately when these patterns emerge. They must also be able to demonstrate that work to regulators.
Within those venues, BRIE supports the teams who carry that obligation in practice.
Chief Compliance Officers and Heads of Compliance responsible for demonstrating to regulators that the venue acts with documented care under conduct rules.
Heads of Surveillance and Market Integrity responsible for monitoring trader behaviour at scale and producing audit-grade evidence of how risk was identified and addressed.
Risk and Conduct teams responsible for translating observed patterns into appropriate, proportionate interventions across the trader lifecycle.
For these teams, BRIE turns scattered behavioural signals into a single defensible workflow: detection, scoring, evidence, and recommended intervention, sized to each tier of harm.
BRIE is built by Amir Yehya. The company is in pre-launch, with first deployments targeted for regulated retail trading venues across the EU, UK, and UAE in 2026.
The product is built around an observation drawn from years of personal trading experience and a close study of how MiCA, the Consumer Duty, and VARA are shaping retail conduct obligations. Behavioural risk on retail venues unfolds in patterns that are visible in the data the entire time, but no regulated venue is set up to read them as a sequence. BRIE was built to close that gap.
For partnership, pilot, or media enquiries, contact amir@brietech.io.
Tell us a little about your venue. We review every enquiry personally and reply within one or two business days.