From enhanced carbon capture at gas processing plants to grid modernisation and renewable energy storage, the technology reshaping the UAE’s oil and gas industry, has acquired a new dimension. As of the 2026, a significant portion of the research and development (R&D) behind it can be converted into a corporate tax credit of up to 50 percent under the country’s first dedicated R&D Tax Credit regime. According to Dhruva, a Ryan Affiliate, the opportunity for the energy sector is substantial, but the design of the regime rewards companies that act early and penalises those that treat it as a year-end exercise.

The regime was established by Cabinet Decision No. 215 of 2025 and made operational by Ministerial Decision No. 24 of 2026, issued on 18 March 2026. It applies to tax periods and fiscal years beginning on or after 1 January 2026, with the first claims expected in 2027. Credits are calculated on a tiered basis, rising from 15 percent to a headline 50 percent. Qualifying expenditure is capped at AED 5 million per qualifying entity or tax group per year, which produces a maximum credit of AED 2 million.

“The UAE’s energy transition has been told as a sustainability story and an investment story. From this year it is also a tax story. The work being undertaken to decarbonise hydrocarbon production, including enhanced oil recovery, carbon capture and storage, methane abatement, and the development of digital twins for processing plants, exemplifies the systematic, uncertainty-driven R&D that this regime is designed to reward. The catch is that the value sits in the documentation, and the documentation has to be built in real time. You cannot retrospectively reconstruct a year’s worth of R&D evidence in 2027,” said Nimish Goel, Leader, Middle East, Dhruva, Ryan LLC Affiliate.

For an industry as engineering-intensive as oil and gas, the central question is not whether qualifying activity exists. It is whether companies can tell the difference between routine engineering and genuine R&D, and prove it. Applying an established recovery method to a new reservoir does not, in itself, qualify. By contrast, systematically resolving technical uncertainty, whether relating to reservoir behaviour, materials performance under high-pressure conditions, the capture of CO₂ from sulphur recovery flue gas, or the integration of new digital control systems,  may qualify, provided the systematic experimentation and its outcomes are documented as the work is carried out.

“Two features will catch international energy companies off guard. Only R&D performed inside the UAE qualifies, and subcontracted R&D counts only when it is carried out by UAE-based third parties. Much of the sector’s historical R&D has run through global technology centres and group affiliates abroad. Companies will need to look hard at where their R&D actually physically takes place, before they assume they qualify,” said Fran Wilhelm, Associate Partner, Dhruva, Ryan LLC Affiliate.

The regime’s defining feature is a dual threshold that links the credit rate to both qualifying spend and headcount. The first AED 1 million of qualifying spend earns 15 percent and requires at least two R&D staff on average; spend between AED 1 million and AED 2 million earns 35 percent and requires at least six; and spend between AED 2 million and AED 5 million earns the top 50 percent rate and requires at least fourteen. Both conditions must be met for each band. Where the headcount falls short, the claim drops back to the highest band where both the spend and the staffing tests are satisfied. A minimum of AED 500,000 of qualifying expenditure applies to each R&D project.

This is where oil and gas companies face a structural choice that other sectors may not. R&D in the industry is often capital-intensive rather than people-intensive: a single carbon capture or enhanced oil recovery pilot can absorb millions in equipment and consumables while employing only a handful of dedicated researchers. Under the dual threshold, that profile caps the credit at the lowest band regardless of how much is spent. Reaching the higher rates means building R&D headcount physically in the UAE.

Pre-approval from the Emirates Research and Development Council is mandatory before any credit can be claimed, with no exceptions. No pre-approval means no credit, however strong the underlying scientific or technological uncertainty. Businesses must keep detailed technical records of objectives, methods, experiments and outcomes for at least seven years. The credit is also currently non-refundable, so it benefits companies that have a corporate tax or top-up tax liability to offset, which describes most established producers and service contractors in the sector. That said, it has been suggested that Phase 2 may include a refundable credit and an increase in both application and generosity, meaning all businesses should start planning ahead, irrespective of their tax position.

“Companies that map their qualifying projects now, secure pre-approval and build the evidence trail through the 2026 financial year will capture real value when claims open in 2027. Those that wait will find that the spend was eligible but the proof was never created. In this regime, the documentation is the asset,” concluded Nimish Goel.

Stefan Deiss, CEO and Co-Founder, The Hashgraph Group

The Middle East has moved faster on digital identity than almost any other region in the world. The UAE Pass now connects residents to more than 5,000 government and private services. Saudi Arabia’s Absher platform has issued over 28 million unified digital IDs. Dubai has gone fully paperless across 45 government entities.

But these systems were built for a world where the main challenge was convenience: getting citizens online, reducing paperwork, speeding up access to services. The threats they were designed to handle were stolen passwords, forged documents and basic impersonation.

What they were not built for is an environment where artificial intelligence can generate a convincing human face in seconds, clone a voice from a few minutes of audio, and inject a synthetic video feed into a verification check in real time.

What distributed ledger technology actually adds

Most digital identity systems today are centralised. Your credentials sit in a government or enterprise database, and every time your identity needs to be checked, the system queries that database. Sometimes that means scanning your face against a stored biometric template. Sometimes it means pulling up your document records and cross-referencing them. Either way, the process depends on one central store of information being secure, accurate and available.

The model works until it doesn’t. A single database holding millions of identities is a high-value target. An attacker who gets in does not compromise one person. They compromise everyone. And the tools available to attackers are improving fast.

The GCC fraud detection market has reached $1.2 billion. Deepfake attacks on identity systems are surging globally. In May, the Saudi Data and Artificial Intelligence Authority published updated deepfake guidelines that explicitly recommend blockchain-based provenance systems to establish traceable records of original content. The guidelines identify identity impersonation through cloned voices and facial simulations as a major risk, and single out finance, politics and identity verification as sectors requiring priority monitoring.

This is the context in which distributed ledger technology becomes relevant. Decentralised identity flips the conventional model. Instead of credentials sitting in someone else’s database, you hold them yourself, in a digital wallet on your device. When you need to prove something, you present only the specific credential required. The verification is recorded on a distributed ledger, a shared record maintained across a network of independent computers rather than controlled by any single organisation. Nobody owns it, can alter it, and shut it down.

Then there are zero-knowledge proofs. This is a way of proving something is true without revealing the underlying information. You could prove you are over 18 without showing your date of birth. You could prove you hold a valid professional licence without disclosing your name or address. The verifier gets the confirmation they need. You keep everything else private.

There is no single database to breach. The individual controls what information is shared and with whom. And every verification event is recorded permanently, creating an audit trail that regulators, enterprises and individuals can each trust independently.

In Sharjah, decentralised identity infrastructure has been integrated across a smart city ecosystem, making it one of the first urban environments in the world where residents, buildings and services interact through digital credentials rather than centralised databases.

The physical presence problem

There is a further gap that even well-designed digital identity systems do not currently address: physical presence.

Identity verification today confirms who someone claims to be remotely. It checks documents, runs facial recognition, performs biometric matching. What it cannot confirm is that a real human being is actually sitting in front of the screen. A synthetic face, a cloned voice and an injected video feed can sail through remote checks that were designed for an era when faking a human was genuinely difficult. That era is over.

The technology to close this gap exists. Ultra-wideband radar, the same short-range spatial sensing found in consumer devices, can detect physical presence with sub-10-centimetre accuracy. It can pick up vital signs such as breathing and heartbeat as a liveness check. When that presence event is cryptographically bound to a decentralised identity credential and recorded on a distributed ledger, the result is a tamperproof record proving a specific individual was physically present at a given location at a given time, verifiable by any authorised party without exposing personal data.

The applications stretch across sectors. In transport, a traveller approaching a gate at an airport or train station could be verified instantly: identity confirmed, physical presence proven, the event recorded permanently. The same logic applies to stadiums, conferences, concert venues and any gated environment where ticket fraud is a problem.

Why the Middle East is the right place for this conversation

The UAE government has announced its intention to transition 50 per cent of federal sectors and services to agentic AI within two years. When AI agents begin autonomously processing licences, permits, compliance checks and cross-border transactions, the question of who authorised what, and whether a human was genuinely involved at the point of decision, becomes critical. Without a verifiable link between a physical person and a digital action, agentic AI systems become vulnerable to impersonation at a scale that manual fraud teams cannot monitor.

The region also has structural advantages that most other markets do not. Governments in the Gulf are bringing policy, investment and technology deployment together under unified national strategies. Saudi Arabia’s Vision 2030, the UAE’s digital economy strategy targeting 20 per cent of non-oil GDP by 2030, and the broader push toward smart city infrastructure all create an environment where new identity infrastructure can move from concept to deployment far faster than in markets weighed down by legacy systems and fragmented regulation.

What comes next

The digital identity systems the Middle East has built over the past decade are genuine achievements. But they were designed for a world where the person on the other end of a verification check was assumed to be real. That assumption is becoming less reliable every quarter.

The next generation of identity infrastructure needs to do three things. It needs to remove single points of compromise by decentralising how credentials are stored and verified. It needs to give individuals control over their own data through zero-knowledge proofs and selective disclosure. And it needs to prove physical presence at the moment of verification, closing the gap that synthetic media is already exploiting.

About the Author:
Stefan Deiss is Co-Founder and CEO of The Hashgraph Group (THG), a Swiss-based Web3 and AI technology engineering company specialising in enterprise solutions built on the Hedera network.

Stefan brings over two decades of experience in technology and business transformation. He spent 11 years at Orange Business Services before moving to Zurich Insurance Group, and went on to found his own consulting firm in 2013. In 2016, he co-founded The Hashgraph Group, which today operates globally with offices across Switzerland, Abu Dhabi, Hong Kong, and beyond.

Under his leadership, THG has developed a suite of enterprise products including TrackTrace for EU Digital Product Passport compliance, IDTrust for decentralised digital identity, and EcoGuard for sustainability and carbon markets. He is also co-inventor of CITI (Continuous Identity Trust Infrastructure), a patent-pending cryptographic framework that binds physical presence to digital identity.

Qashio, the MENA region’s leading spend management solution, is rewarding its UAE customers with exclusive FIFA World Cup 2026™ fan experiences, including premium viewing access, interactive competitions, and hospitality benefits at Emirates Golf Club’s Footy Central in Dubai. The initiative gives customers the opportunity to experience a dedicated football watch party destination during the world’s biggest football tournament.

Running from 11 June to 19 July 2026, Footy Central will screen live matches alongside themed F&B, interactive games, family-friendly activities, competitions, and matchday entertainment. The programme builds on the global appeal of football’s premier event, which reached more than five billion viewers across all platforms during its previous edition, and reflects Qashio’s value proposition beyond spend management by turning client loyalty into tangible rewards and premium benefits.

The campaign will unlock exclusive access to selected matchday rewards and fan activations for Qashio customers, including F&B vouchers, matchday credits, Viya Points, gaming rewards, and VIP hospitality experiences. Viya Points, the digital reward currency within the Viya App ecosystem, can be redeemed across a premium lifestyle network of 400 venues, extending the value of the campaign beyond the matchday.

Guests can participate in the Ronaldo Header Challenge, where they can test their heading accuracy, while the FIFA Console Zone will host the PS5 FIFA Esports Challenge: Road to the Cup, with guests competing in head-to-head matches for leaderboard positions and daily rewards. Half-time engagement will include lucky draws during key matches, alongside Predict & Win competitions that reward guests for accurate match predictions.

Armin Moradi, CEO and Founder of Qashio, said: “Football is the most popular sport in the UAE among both Emiratis and the broader expat population, which makes the FIFA World Cup 2026™ a powerful moment to celebrate with our customers. Qashio was built to help businesses manage spend with more control and value, and this campaign extends that promise by turning loyalty into memorable experiences for finance leaders and teams across the country.”*

The FIFA World Cup 2026™ customer rewards campaign reflects Qashio’s broader approach to building a spend management platform that combines financial control with meaningful customer engagement. Through rewards, activations, competitions, and hospitality benefits, Qashio is continuing to create value for businesses beyond transactions, while giving customers new ways to engage with one of the most anticipated sporting events in the world.

For more information on the Footy Central experience and partnership opportunities, visit the link.