Civil Law and UAE: Fluid Identity of Legal Subjects in Digital Ecosystems

1. Introduction

Fluid identity of legal subjects in digital ecosystems refers to situations where it becomes difficult to determine who or what is the legally relevant subject of rights, duties, ownership, liability, or enforcement because digital systems involve constantly changing relationships between:

• individuals;
• companies;
• platforms;
• algorithms;
• AI systems;
• digital wallets;
• virtual assets;
• smart contracts;
• online intermediaries;
• autonomous software;
• data controllers/processors; and
• decentralized networks.

Traditional civil law generally assumes a relatively stable structure:

Person → Legal capacity → Right/Duty → Act → Liability → Remedy

Digital ecosystems complicate this structure because the person interacting with the system may not be the same person controlling the relevant asset, account, algorithm, wallet, data or transaction.

The UAE is particularly interesting because its legal landscape combines federal civil law with specialized digital-economy jurisdictions such as DIFC and ADGM, while the DIFC has developed a dedicated Digital Economy Court for disputes involving digital assets, blockchain, fintech, AI, digital data and digital-payment platforms.

2. Meaning of "fluid identity"

"Fluid identity" does not mean that UAE law has abolished the traditional concept of legal personality.

Rather, it describes the practical difficulty of identifying the relevant legal actor in a digital environment.

For example:

Person A owns a crypto wallet
↓
Platform B provides custody
↓
Smart contract C executes the transaction
↓
Oracle D supplies external information
↓
Exchange E processes the transaction
↓
Bank F settles the fiat component

If something goes wrong, the question becomes:

Who is the legal subject responsible for the resulting loss?

This is the central problem of fluid digital identity.

3. Traditional legal subject versus digital ecosystem

Traditional civil law tends to operate around recognizable legal subjects.

Natural person

A human being capable of holding rights and obligations.

Legal person

A corporation or other recognized entity capable of possessing rights and obligations.

Representative

An agent acting for another legal subject.

Trustee/fiduciary

A person exercising authority over another's property or affairs.

Digital ecosystems introduce additional functional actors:

• account holders;
• platform operators;
• wallet providers;
• custodians;
• exchanges;
• developers;
• DAO participants;
• smart-contract deployers;
• validators;
• data processors;
• AI operators.

Not all of these are necessarily separate legal persons.

That distinction is fundamental.

4. Legal personality does not automatically arise from technological autonomy

An algorithm can:

• make recommendations;
• execute transactions;
• allocate resources;
• generate contracts;
• interact with other systems;
• control access to digital assets.

But technological autonomy does not automatically make the algorithm a separate legal person.

The important distinction is:

Autonomous function ≠ legal personality.

The legal system still generally searches for the human or juridical person to whom the relevant conduct, property, contractual relationship or statutory duty can be attributed.

5. The UAE civil-law foundation

The current UAE Civil Transactions framework continues to organize private law around recognizable legal relationships involving:

• persons;
• property;
• obligations;
• contracts;
• civil liability;
• agency;
• ownership;
• compensation.

The Federal Decree by Law No. 25 of 2025, which entered into force on 1 June 2026, repealed the former 1985 Civil Transactions Law.

This is important for digital ecosystems because the new law should be used as the primary current federal statutory framework rather than assuming that provisions from the former Civil Code remain unchanged.

6. Digital identity is different from legal identity

This distinction is essential.

Digital identity

May consist of:

• username;
• email;
• device;
• IP address;
• wallet address;
• biometric identifier;
• digital signature;
• authentication credentials;
• platform account.

Legal identity

Determines:

• who owns property;
• who entered the contract;
• who owes the duty;
• who is liable;
• who can sue;
• who can be sued.

Thus:

Digital identifier ≠ necessarily legal person.

A wallet address, for example, identifies a blockchain account but does not necessarily identify its beneficial owner.

7. Pseudonymity creates attribution problems

Blockchain ecosystems frequently allow users to transact through addresses such as:

0xABC...

The address may demonstrate that a transaction occurred.

But it does not necessarily answer:

Who controls the wallet?

Who beneficially owns the asset?

Who instructed the transaction?

Was the wallet controlled personally or through a custodian?

Was it compromised?

This creates an evidentiary problem:

Digital attribution → Legal attribution

The first does not automatically establish the second.

8. Case Law 1 — Gate Mena DMCC v Tabarak Investment Capital

[2024] DIFC DEC 002

This is one of the most important UAE cases for fluid legal identity in digital ecosystems.

The dispute involved:

• Bitcoin;
• wallets;
• cryptocurrency transactions;
• fiat payment;
• intermediaries;
• custody;
• contractual obligations.

The transaction involved 300 Bitcoin and generated disputes concerning who was responsible for the relevant digital assets and how the parties' obligations should be characterized.

The Digital Economy Court considered whether the relevant contractual obligation was one requiring a particular result or one involving reasonable care, together with questions of causation, contributory conduct, mitigation and Bitcoin valuation. (difccourts.ae)

Principle

The existence of multiple technological actors does not eliminate the need to identify the legally responsible human or juridical actor.

Importance

The case illustrates the transition:

Wallet → Custodian → Contract → Legal responsibility

rather than treating the blockchain itself as a legal person.

9. Gate Mena and the identity of digital assets

Gate Mena is also important because the Court addressed the legal characterization of Bitcoin.

The Court treated Bitcoin as property for relevant legal purposes while separately examining whether it constituted money or currency for other purposes. (difccourts.ae)

This demonstrates:

One digital object can have different legal consequences depending upon the legal question.

The asset's technological identity does not itself determine its complete legal classification.

10. Case Law 2 — Gate Mena DMCC v Tabarak Investment Capital [2023] DIFC CA 002

The earlier Court of Appeal proceedings are particularly useful for understanding the relationship between:

• custody;
• control;
• fiduciary responsibility;
• digital assets;
• entrusted authority.

The Court considered the characteristics of fiduciary relationships and emphasized loyalty, avoidance of conflicts and misuse of entrusted authority.

Principle

Where one person controls another's property or affairs, the legal system may attach duties to the relationship of control, regardless of whether the property is physical or digital.

Importance

This is highly significant for:

• crypto custodians;
• investment platforms;
• wallet providers;
• digital asset managers.

A digital wallet therefore does not necessarily eliminate traditional fiduciary concepts.

11. Case Law 3 — Techteryx Ltd v Aria Commodities DMCC

[2025] DIFC DEC 001

This case involved TrueUSD (TUSD) and approximately USD 456 million in reserve assets.

The dispute involved:

• stablecoins;
• reserve assets;
• beneficial ownership;
• banks;
• digital assets;
• tracing;
• proprietary remedies;
• freezing orders.

The Digital Economy Court granted significant protective relief concerning the assets and traceable proceeds. (difccourts.ae)

Principle

A digital token, its underlying reserves and the persons exercising control over those assets can represent distinct legal interests.

Importance

The case shows why courts must distinguish:

Token holder

from

Beneficial owner

from

Custodian

from

Bank holding reserve assets

from

Platform/operator

The digital ecosystem may contain several legally relevant subjects surrounding one economic asset.

12. Fluid identity and beneficial ownership

Consider:

Company A

owns a stablecoin platform.

Company B

holds reserve funds.

Company C

operates the technology.

Customer D

holds tokens.

Bank E

holds fiat reserves.

The question:

Who legally owns the underlying reserve?

cannot be answered simply by asking:

"Who owns the token?"

Techteryx illustrates this distinction between digital representation and underlying property rights.

13. Case Law 4 — CoinMENA B.S.C. (C) v Foloosi Technologies Ltd

[2025] DIFC CFI 067/2025

This dispute involved a Bahrain-based crypto-asset business and a DIFC payment-processing company.

The dispute concerned:

• payment processing;
• settlement;
• contractual relationships;
• chargebacks;
• unpaid transaction amounts;
• crypto-related payment infrastructure.

The claimant alleged that approximately AED 7.97 million remained unpaid or withheld.

The Court's treatment demonstrates that a digital ecosystem can contain several entities performing different functional roles. (difccourts.ae)

Principle

Functional participation in a digital transaction does not necessarily make every participant a party to every legal relationship.

Importance

The court must identify:

Who contracted with whom?

before determining:

Who owes whom money?

14. Contractual identity in fintech ecosystems

A digital transaction can involve:

User

→ Platform

→ Payment processor

→ Bank

→ Custodian

→ Technology provider.

But contractual identity may be narrower:

User ↔ Platform

The payment processor may not necessarily be a party to the user's contract.

This prevents the technological complexity of a transaction from automatically expanding contractual liability.

15. Case Law 5 — Jeffrey Stone v Abhi Fintech Limited / Abhi Limited

[2023] DIFC CFI 089/2023

This fintech dispute involved questions concerning:

• corporate entities;
• jurisdiction;
• joinder;
• expert evidence;
• procedural management.

The proceedings illustrate how courts must determine which corporate entity is properly connected to the claim and whether additional entities should be brought into the litigation. (difccourts.ae)

Principle

The existence of a group of technologically connected companies does not erase separate legal personality.

Importance

Digital businesses frequently operate through:

• holding companies;
• operating companies;
• technology subsidiaries;
• regulated entities;
• payment subsidiaries.

The correct legal defendant must therefore be identified.

16. Corporate identity in digital ecosystems

A common mistake is:

Platform = Company

In reality:

Platform ≠ necessarily one legal entity.

A digital ecosystem can contain:

Parent company

↓

Operating company

↓

Technology company

↓

Regulated subsidiary

↓

Payment company

↓

Third-party service provider

Each may have separate legal personality.

Therefore, liability cannot simply be attributed to "the platform" without identifying the relevant legal entity.

17. Case Law 6 — Tayseer Ali v Sadapay Technologies Ltd

[2025] DIFC CFI 022/2025

This case involved a fintech entity and disputes concerning:

• jurisdiction;
• limitation;
• the proper legal forum.

The Court dismissed the jurisdiction challenge and held that the DIFC Courts had jurisdiction over the claim. (difccourts.ae)

Principle

Identifying the legal subject is inseparable from identifying the court capable of exercising jurisdiction over that subject.

Importance

Fluid digital relationships can create uncertainty concerning:

• domicile;
• place of business;
• contractual forum;
• jurisdiction;
• applicable law.

Thus:

Identity → Jurisdiction → Applicable Law → Remedy

18. Case Law 7 — Jonathan Lau v Qashio Holding Company Limited

[2026] DIFC CFI 058/2026

This recent fintech dispute concerns a corporate relationship involving Qashio.

The proceedings involved requests for disclosure concerning:

• shareholder arrangements;
• share issuance;
• SAFE transactions;
• payments;
• banking records;
• corporate documentation.

The Court ordered substantial document production and subsequently considered permission to appeal. (difccourts.ae)

Principle

Where digital businesses operate through complex corporate and financial structures, identifying the relevant legal subject may require extensive documentary disclosure.

Importance

This demonstrates that legal identity is sometimes an evidentiary question before it becomes a substantive liability question.

19. AI as a non-person legal actor

AI introduces a particularly difficult version of fluid identity.

Suppose an AI system:

• approves a loan;
• rejects an application;
• generates investment advice;
• executes a transaction;
• identifies fraud;
• determines a credit score.

Who made the decision?

Possible candidates include:

• developer;
• deployer;
• employer;
• platform operator;
• data controller;
• human supervisor.

The AI itself does not automatically become a legal subject merely because it performs an autonomous function.

The civil-law question is therefore:

Who legally controls, deploys, benefits from or is responsible for the AI system?

20. Algorithmic agency versus legal agency

This distinction is important.

Algorithmic agency

The system performs an action autonomously.

Legal agency

The law recognizes an agent acting on behalf of a principal.

Therefore:

Autonomous software action ≠ automatically legal agency.

A court must examine:

• authorization;
• contractual structure;
• human control;
• statutory requirements;
• attribution rules.

21. Smart contracts and legal identity

A smart contract may automatically execute:

If X happens → transfer Y.

The code performs the transaction.

But the code does not necessarily answer:

• who owns Y;
• who programmed the contract;
• who deployed it;
• who controlled it;
• who benefited;
• who bears the risk of coding errors.

Thus:

Code execution ≠ complete legal attribution.

The legal system must translate technological events into legal relationships.

22. DAOs and collective identity

Decentralized autonomous organizations create an even harder problem.

A DAO may involve:

• token holders;
• developers;
• governance participants;
• multisignature signatories;
• treasury managers;
• automated protocols.

The question becomes:

Is the DAO itself a legal person?

Unless applicable law recognizes it as such, the court may need to identify the individuals or entities behind particular legal relationships.

Possible questions include:

• Who owns the treasury?
• Who entered the contract?
• Who authorized the transaction?
• Who controls the protocol?
• Who owes fiduciary duties?
• Who can be sued?

23. Wallet identity

A wallet is not necessarily a legal person.

It can be better understood as:

Technical mechanism for holding or controlling digital assets.

The relevant legal subject may be:

• the individual controlling the private key;
• a company;
• a custodian;
• a trustee;
• an exchange.

Therefore:

Wallet address → evidence of control/transaction

but not necessarily:

Wallet address → proof of legal personality

24. Account identity and platform identity

An online account may be registered in one person's name but operated by another.

Examples:

• employee uses corporate account;
• agent uses principal's account;
• hacker obtains credentials;
• nominee controls account;
• custodian holds account for customer.

Therefore, courts may need to distinguish:

Account holder

from

authorized user

from

beneficial owner

from

actual controller

from

wrongdoer.

This is one of the most important manifestations of fluid identity.

25. Digital signatures

Digital signatures help solve the attribution problem but do not necessarily answer every legal question.

A valid digital signature can provide evidence concerning:

• authentication;
• integrity;
• approval;
• execution.

But the court may still ask:

Was the person authorized?

Was the device compromised?

Was the signature obtained through fraud?

Did the signer have legal capacity?

Thus:

Authentication ≠ complete legal attribution.

26. Identity and legal capacity

Civil law traditionally distinguishes:

Who is the person?

from:

Does that person have legal capacity?

Digital ecosystems complicate both.

A platform may know a user's digital identity but still have uncertainty regarding:

• age;
• authority;
• corporate capacity;
• agency;
• beneficial ownership;
• sanctions/compliance status.

Therefore:

KYC identity → Legal capacity → Authority → Contractual validity

becomes an important chain.

27. Identity and fiduciary relationships

Fluid identity becomes particularly significant where assets are entrusted to intermediaries.

For example:

Customer

↓

Crypto custodian

↓

Wallet

↓

Blockchain

The customer may own the asset while the custodian controls the private key.

Therefore:

Control ≠ ownership.

This distinction is central to Gate Mena and Techteryx.

28. Identity and proprietary remedies

Identifying the legal subject is essential for:

• ownership claims;
• tracing;
• freezing orders;
• restitution;
• recovery of digital assets.

Suppose cryptocurrency moves through:

Wallet A → Wallet B → Exchange C → Bank D

The claimant must establish:

1. original ownership;
2. wrongful transfer;
3. traceable proceeds;
4. relevant legal relationships;
5. identity of the persons controlling the relevant assets.

Techteryx demonstrates how traditional proprietary remedies can operate in complex digital-asset environments.

29. Identity and data protection

Data ecosystems create another fluidity.

A person can simultaneously be:

• data subject;
• customer;
• employee;
• account holder;
• consumer.

Meanwhile, companies can be:

• data controller;
• processor;
• joint controller;
• technology provider.

Thus:

One digital interaction can produce multiple legal identities and roles.

The applicable rights and obligations depend upon the specific role.

30. Identity and cross-border fintech

A digital transaction can involve:

UAE customer

→ DIFC fintech

→ foreign payment processor

→ ADGM entity

→ foreign bank

→ global blockchain network

This creates questions concerning:

• jurisdiction;
• applicable law;
• service of process;
• recognition;
• enforcement;
• asset location.

Fluid identity therefore produces fluid jurisdictional relationships.

31. The UAE's Digital Economy Court response

The DIFC Digital Economy Court is particularly relevant because its jurisdiction covers disputes arising from:

• digital assets;
• blockchain;
• fintech;
• AI;
• digital data;
• e-commerce;
• digital-payment platforms;
• virtual-asset service providers.

This specialized jurisdiction reflects the recognition that traditional legal disputes can acquire highly technical digital dimensions.

32. Does UAE law recognize AI or blockchain as legal persons?

The safer legal proposition is:

Technological autonomy does not, by itself, create separate legal personality.

The law generally continues to identify:

• natural persons;
• companies;
• recognized legal entities;
• contractual parties;
• fiduciaries;
• agents;
• other legally recognized subjects.

The difficult question is therefore not:

"Is the algorithm intelligent?"

but:

"Which legally recognized subject is responsible for the system's operation, control, benefit or consequences?"

33. Functional identity

Digital ecosystems require courts to examine functional roles, not merely labels.

A person may be:

• owner;
• controller;
• custodian;
• agent;
• beneficiary;
• developer;
• operator;
• intermediary;
• creditor;
• debtor.

The same entity can occupy several roles simultaneously.

For example:

Fintech company = platform operator + data controller + contractual service provider + custodian.

Each role may carry different duties.

34. Fluidity does not eliminate legal certainty

The concept should not be misunderstood as meaning that digital law has no stable subjects.

Rather:

The legal subject may remain stable while the technological role surrounding that subject changes.

For example:

Company A

may remain the legal person, while acting simultaneously through:

• website;
• mobile app;
• AI system;
• blockchain wallet;
• API;
• smart contract.

The technology changes the method of action, not necessarily the legal personality.

35. Attribution model

A useful UAE examination model is:

Digital Event

↓

Technical Actor

Who executed the action?

↓

Human/Entity Controller

Who controlled the system?

↓

Legal Relationship

Contract? Agency? Custody? Fiduciary relationship?

↓

Legal Duty

What obligation applied?

↓

Breach

What went wrong?

↓

Causation

Did the conduct cause the loss?

↓

Remedy

Damages? Restitution? Injunction? Specific performance?

36. Seven major legal problems caused by fluid identity

1. Attribution

Who performed the legally relevant act?

2. Ownership

Who owns the digital asset?

3. Control

Who controls the account or wallet?

4. Capacity

Did the person have legal capacity?

5. Agency

Was the action performed on behalf of another?

6. Liability

Who bears the loss?

7. Jurisdiction

Which court has authority?

37. Case-law synthesis

38. Critical examination distinction

Remember:

Digital identity

Who does the system say you are?

Technical identity

Which account, wallet, device or key performed the action?

Legal identity

Which person or legal entity possesses the relevant rights and obligations?

Beneficial identity

Who ultimately owns or benefits from the asset?

Controlling identity

Who actually controls the system or asset?

These five identities may be different.

39. Example for examination

Suppose a crypto exchange holds 1,000 BTC.

The blockchain shows:

Wallet X → Exchange Wallet Y.

But:

• Customer A claims ownership;
• Company B operates the exchange;
• Custodian C controls the private keys;
• Bank D holds related fiat reserves;
• Developer E maintains the wallet software.

The court cannot simply say:

"Wallet Y owns the Bitcoin."

Instead, it must investigate:

Ownership → Custody → Control → Contract → Authority → Beneficial interest → Wrongdoing → Remedy

That is the essence of fluid identity.

40. Conclusion

Fluid identity of legal subjects in UAE digital ecosystems describes the increasing difficulty of mapping technological actors onto traditional legal categories.

The fundamental UAE civil-law structure remains based on recognizable legal subjects:

Natural Person + Legal Person + Contractual Party + Agent + Fiduciary + Owner + Creditor/Debtor

But digital ecosystems introduce layers of:

Platform + Wallet + Algorithm + Smart Contract + Custodian + Token + Data + Blockchain

The central legal challenge is therefore attribution.

The courts must translate:

technical control → legal control

digital transaction → legal transaction

digital asset → legally recognized property/right

algorithmic action → attributable human/entity conduct

platform relationship → legally enforceable relationship

The Gate Mena, Techteryx, CoinMENA and other DIFC proceedings demonstrate that UAE courts are increasingly applying established private-law concepts—contract, ownership, custody, fiduciary duty, causation, jurisdiction, tracing and remedies—to complex digital relationships rather than automatically treating technological systems as independent legal persons.

Ultra-rapid revision

Digital Identity ≠ Legal Identity

Control ≠ Ownership

Wallet ≠ Legal Person

Algorithmic Action ≠ Automatic Legal Agency

Platform ≠ Necessarily One Legal Entity

Token Holder ≠ Necessarily Beneficial Owner

Technical Attribution ≠ Complete Legal Attribution

Master formula

Digital Event → Technical Actor → Human/Entity Controller → Legal Role → Duty → Breach → Causation → Liability → Remedy