UAE cybercrime law regulates misuse of websites, networks, accounts and information technology. The current federal framework is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes, which took effect on 2 January 2022 and applies to conduct within its scope in Dubai and the other Emirates.
If you face online extortion, fraud, unauthorised access or a privacy violation, preserving evidence and reporting promptly are usually more important than arguing with the other party or deleting content. Abdulrahman Alaamri Advocates and Legal Consultants reviews files for victims and accused persons and identifies the applicable provision and procedure.
Common types of cybercrime cases
- Unauthorised access to a website, account or information system or access beyond the permitted scope.
- Deleting, copying or disclosing data or disrupting an electronic system or service.
- Online fraud, theft of payment data, or use of a fake website, email or account.
- Forgery or knowing use of electronic documents, records or signatures.
- Blackmail or threats using images, messages or digital information.
- Privacy violations involving capture, transmission or publication of personal material in circumstances criminalised by law.
- Online insult, defamation or accusations made on platforms or messaging applications.
- Rumours, false information or management of unlawful content in the cases specified by law.
The conduct may also engage Federal Decree-Law No. 31 of 2021. Read our guide to the UAE Crimes and Penalties Law for the general classification and procedure.
What should a cybercrime victim do?
- Do not delete evidence: preserve the chat, message, email, notification, URL and account as they appeared.
- Record the context: take complete captures showing the account name, date, time and URL and retain original files where possible.
- Secure the account: change passwords from a trusted device, enable multi-factor authentication and review active sessions.
- Notify the bank promptly: in a financial fraud case, request a card or transfer hold where possible and retain the reference number.
- Report through an official channel: use the Ministry of Interior platform, Dubai Police eCrime or the nearest police station according to location and incident type.
- Call emergency services: use 999 where there is an immediate threat to safety.
Do not attempt to access or expose the other party’s account in response. Doing so may create a separate allegation and affect the integrity of the evidence.
Evidence in online fraud and extortion matters
- The account URL, username, identifier and a complete page capture.
- An exported chat or email with header data where available.
- Transfer receipts, bank statements, bank notifications and transaction references.
- Shortened links, phone numbers and digital wallet addresses.
- Original images, recordings and files without editing.
- A chronology of contact attempts and relevant witnesses.
Preserving evidence must be balanced against republishing private or offensive content. Organise the material with our guide to preparing a case file and evidence.
If you are accused in a cybercrime case
Do not delete an account, device or conversation after learning of a report, and avoid contacting the complainant in a way that may be perceived as pressure or a threat. Prepare the summons, report number, relevant devices and accounts, usage chronology and any evidence of authorisation, ownership or impersonation. A lawyer can assess attribution, the legality of seizure and forensic examination, intent, the permitted scope of access and whether the alleged facts match the charged provision.
Online defamation and privacy
The applicable provision may depend on whether publication was public or private and whether the material contained an accusation, insult, recording, image or disclosure of personal data. Describing content as offensive is not enough without examining the exact words, medium, audience, intent and context.
Reporting and compensation
A matter may begin with a police report followed by a Public Prosecution investigation under the Criminal Procedures Law. A person who suffered direct personal harm may also examine a connected civil claim or a separate civil action according to stage and jurisdiction. Acceptance of a report does not prove the accusation, and a criminal judgment does not determine every compensation element without the appropriate claim and evidence.
Official sources and reporting guidance
- Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes.
- Federal Decree-Law No. 38 of 2022 Promulgating the Criminal Procedures Law.
- Cybercrime reporting guidance on the UAE Government portal.
Speak with a cybercrime lawyer in Dubai
A lawyer can review the report, digital evidence, transfers and deadlines before the next step is selected. Call Abdulrahman Alaamri Advocates and Legal Consultants on +971 54 333 0000 or send a summary through the firm’s WhatsApp.
This page provides general information. The applicable provision and procedure depend on the incident, evidence and competent authority.
