Cybercrime in the UAE is an important legal concern as residents and businesses increasingly rely on digital platforms for banking, communication, shopping and business transactions. Online fraud, phishing, unauthorised access to computer systems and misuse of personal information can expose victims to financial loss, privacy risks and other harm.

The United Arab Emirates has established a legal framework to address offences committed through information technology, computer systems and online platforms. Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes is a central part of this framework. Understanding the law, recognising common online threats and knowing how to report suspected offences can help individuals and businesses respond appropriately.

This guide explains cybercrime laws in the UAE, possible penalties, common digital offences and how to report cybercrime in Dubai through the appropriate official channels.

Modernised Legal Framework for Cybercrime in the UAE

The principal legislation addressing cybercrime in the UAE is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes. The law came into effect on 2 January 2022 and provides a legal framework for addressing various offences involving information technology and online activity.

The legislation covers different categories of conduct, including certain forms of unauthorised access, electronic fraud, misuse of information technology systems and unlawful handling or disclosure of information. It also addresses specified offences involving online content.

The applicable provision depends on the nature of the alleged offence, the circumstances and the available evidence. An incident involving electronic payment fraud may raise different legal issues from one involving unauthorised access to confidential information or the unlawful publication of digital content.

Emerging technologies, including artificial intelligence, can also create new risks involving impersonation, manipulated media and fraudulent communications. Whether a particular incident constitutes a criminal offence depends on the conduct involved and the applicable provisions of UAE law.

Readers should consult the official UAE legislation portal for the authoritative text of the law.

Common Types of Cybercrime in Dubai and the UAE

Cybercrime can take several forms, affecting individuals, businesses and public institutions. Understanding common threats can help people recognise suspicious activity and take appropriate action.

Online Fraud and Phishing

Electronic fraud may involve deceptive websites, fraudulent payment requests, impersonation or other methods intended to obtain money or information unlawfully.

Phishing is a common technique in which criminals use emails, text messages or websites that appear legitimate to obtain passwords, banking details or other sensitive information.

For example, a person may receive a message claiming that a bank account requires urgent verification. The link directs the recipient to a fraudulent website designed to collect login credentials.

Residents should verify unexpected requests through official channels and avoid sharing confidential information through suspicious links.

Unauthorised Access to Computer Systems

Accessing computer systems, accounts or information without the required authorisation may constitute an offence under applicable UAE law.

Businesses should establish appropriate access controls, review account permissions and investigate suspected security breaches. Individuals should secure their accounts and report suspected unauthorised access through the appropriate official channels.

Identity Theft and Online Impersonation

Online impersonation may involve the misuse of another person’s identity, photographs, account details or other identifying information.

Such conduct can be connected to financial fraud, deceptive communications or other unlawful activities. The legal consequences depend on the facts and the relevant provisions of UAE law.

Misuse of Personal and Confidential Information

Personal records, financial details, business documents and private communications may be exposed through unlawful access or disclosure.

Depending on the circumstances, the misuse of such information may raise issues under cybercrime, privacy or other applicable legislation. Individuals and businesses should take reasonable steps to protect sensitive information and investigate suspected breaches.

AI Deepfakes and Digital Fraud

Artificial intelligence can be used to create convincing synthetic voices, images and videos. Criminals may exploit these tools to impersonate individuals, deceive employees or encourage victims to transfer money.

Not every manipulated image or AI-generated recording constitutes a criminal offence. The legal position depends on the circumstances, the purpose of the content and the applicable legislation.

Individuals and businesses should verify unusual requests, particularly those involving urgent payments, confidential information or changes to financial instructions.

Cybercrime Penalties Under UAE Law

Cybercrime penalties in the UAE vary according to the offence, the circumstances and the relevant statutory provision. Depending on the conduct involved, the law may provide for imprisonment, fines or both.

The legislation contains different penalties for different offences. It is therefore inaccurate to suggest that every cybercrime carries the same fine or prison term.

When assessing a suspected offence, relevant considerations may include:

• The nature of the alleged conduct.
• Whether a computer system or protected information was accessed unlawfully.
• Whether the incident involved electronic fraud, threats or another specific offence.
• The circumstances and consequences of the incident.
• Whether additional legal provisions apply.

Businesses should also consider their obligations under applicable cybersecurity, data protection and other regulatory requirements. Corporate responsibility and the personal criminal liability of an individual are separate legal questions and should not be assumed without examining the relevant law and facts.

Anyone facing a cybercrime allegation, investigation or potential complaint should seek advice from a qualified UAE lawyer who can assess the circumstances and explain the applicable legal provisions.

How to Report Cybercrime in Dubai

If you suspect that you have been a victim of cybercrime in Dubai, consider reporting the incident through the appropriate official channel.

Step 1: Secure Your Accounts

If an account may have been compromised, change its password using a trusted device and enable multi-factor authentication where available.

If financial information or payment details are at risk, contact your bank or payment provider promptly to discuss protective measures.

Step 2: Preserve Relevant Evidence

Keep copies of suspicious messages, emails, transaction records, website addresses, account notifications and other information connected to the incident.

Record relevant dates and times. Avoid deleting original communications or altering files that may be useful during an investigation.

Step 3: Choose the Appropriate Official Reporting Channel

The UAE Government identifies several official channels for reporting cybercrime, depending on the location and nature of the incident.

• Dubai Police eCrime: For relevant cybercrime incidents within Dubai’s geographical scope.
• Ministry of Interior eCrimes platform: An official reporting option available through the relevant government channels.
• Abu Dhabi Police Aman service: For relevant reporting within Abu Dhabi.
• Nearest police station: Residents can approach the appropriate police station for assistance.

For Dubai-specific guidance, visit the Dubai Electronic Security Center’s incident-reporting page. You can also consult the UAE Government’s cyber safety and digital security guidance.

Check the official service’s current instructions before submitting a complaint, as the appropriate channel may depend on where the incident occurred and the nature of the suspected offence.

Step 4: Provide Accurate Information

Follow the reporting authority’s instructions and provide the information requested, such as a description of the incident, relevant dates, available evidence and transaction references.

Keep any complaint reference or acknowledgement provided to you. Avoid making unsupported allegations or submitting inaccurate information.

Step 5: Seek Legal Advice if Necessary

Some incidents involve substantial financial losses, confidential business information, disputed facts or complex questions about criminal liability.

A qualified UAE lawyer can explain the relevant legal provisions, help assess the available evidence and advise on appropriate next steps.

Reporting an incident does not guarantee a particular investigative outcome or recovery of lost money.

What Residents and Businesses Can Do to Prevent Cybercrime

Preventive measures can reduce exposure to common digital threats, although no security measure eliminates every risk.

Practical Steps for Individuals

• Use strong, unique passwords for important accounts.
• Enable multi-factor authentication where available.
• Avoid clicking unexpected links or opening suspicious attachments.
• Verify payment requests and urgent messages through trusted channels.
• Keep devices, browsers and applications updated.
• Limit the sharing of sensitive personal and financial information online.
• Contact the relevant institution promptly if you suspect fraud or unauthorised access.

Cybersecurity Measures for Businesses

Businesses should adopt security controls appropriate to their size, activities and risk exposure.

Useful measures include restricting access to sensitive information, providing employee awareness training, maintaining secure backups and establishing procedures for responding to suspected incidents.

Organisations should also review applicable legal and regulatory requirements for protecting personal information and handling security incidents.

Employees should know how to report suspected phishing attempts, compromised accounts and unusual payment requests without delay.

Businesses concerned about financial fraud schemes should also review guidance on fraud risks affecting businesses in the UAE.

Broader Context: UAE Digital Safety and Child Protection

Cybercrime legislation forms part of a wider legal framework governing digital activity in the UAE.

For example, Federal Decree-Law No. 45 of 2021 concerns the protection of personal data. Depending on the circumstances, other legislation may also apply to electronic transactions, privacy and criminal offences.

The UAE has also introduced specific legislation addressing children’s online safety. Federal Decree-Law No. 26 of 2025 Regarding Child Digital Safety entered into force on 1 January 2026. It addresses the protection of children in digital environments and establishes relevant obligations under the law.

This legislation has a distinct purpose and scope from the main cybercrime law. Its relevance depends on the digital activity, the parties involved and the circumstances.

Readers can consult the official UAE legislation on Child Digital Safety for further details.

Frequently Asked Questions About Cybercrime in the UAE

What is cybercrime in the UAE?

Cybercrime in the UAE refers to criminal conduct involving computers, information technology systems, networks or online platforms. Examples may include electronic fraud, certain forms of unauthorised access and other offences covered by UAE law.

What law governs cybercrime in the UAE?

Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes is a principal law addressing cybercrime in the UAE. It took effect on 2 January 2022.

What are the penalties for cybercrime in the UAE?

Penalties depend on the particular offence and applicable legal provision. They may include imprisonment, fines or both. The relevant legislation should be consulted before drawing conclusions about a specific case.

How can I report cybercrime in Dubai?

For relevant incidents within Dubai’s geographical scope, you can consult the Dubai Electronic Security Center’s incident-reporting page, which directs users to Dubai Police’s eCrime service. Other official reporting channels may be appropriate depending on the location and circumstances.

What should I do if I lose money through online fraud?

Contact your bank or payment provider promptly, secure affected accounts, preserve transaction records and relevant communications, and report the incident through the appropriate official channel. Recovery is not guaranteed, but prompt action may help protect your accounts and preserve useful evidence.

Can businesses face legal consequences for cybercrime incidents?

Potential consequences depend on the facts and applicable law. A business may have relevant legal or regulatory obligations, but a cyber incident alone does not automatically establish that the company or an individual employee has committed a criminal offence.

Does UAE cybercrime law apply to online impersonation and deepfakes?

Certain conduct involving impersonation, fraud, threats or unlawful publication may fall within applicable UAE criminal laws. The legal position depends on the specific facts, the content involved and the relevant statutory provisions.

Should I consult a lawyer about a cybercrime complaint?

Legal advice may be useful where an incident involves substantial financial loss, confidential information, a criminal allegation or uncertainty about the appropriate legal procedure. A qualified UAE lawyer can assess the circumstances and explain the available options.

Conclusion

Cybercrime in the UAE can affect individuals, businesses and organisations through electronic fraud, unauthorised access, misuse of information and other forms of digital misconduct.

Understanding Federal Decree-Law No. 34 of 2021, recognising common online threats and knowing how to use official reporting channels can help people respond more effectively. Because penalties and legal procedures depend on the specific circumstances, readers should consult authoritative legislation and seek qualified legal advice when necessary.