How to Report Cybercrime in UAE (2026): eCrime & Legal Help

Cybercrime in the UAE is surging. The Telecommunications and Digital Government Regulatory Authority (TDRA) recorded over 50,000 cybercrime reports in 2025, with online fraud, social media blackmail, and phishing attacks topping the list. Whether you have been hacked, scammed, defamed online, or blackmailed through WhatsApp or Instagram, the UAE has one of the toughest legal frameworks in the region to protect you — but you need to know exactly how and where to report.

What Counts as a Cybercrime Under UAE Law?

Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes replaced the older 2012 law and significantly expanded the definition of cybercrime. It covers any criminal act committed using a computer, network, or information technology system — from hacking and fraud to defamation and spreading false information online.

The law is broad by design. It criminalises behaviour that many residents do not realise is illegal in the UAE.

Common offences under the Cybercrimes Law include:

• Hacking — unauthorised access to websites, information systems, networks, or databases (Article 2). Even accessing someone's unlocked phone without permission qualifies.
• Online fraud — using electronic means to deceive someone into handing over money, property, or personal data (Article 40).
• Blackmail and extortion — threatening to publish someone's photos, videos, or private information unless they pay money or perform an act (Article 42).
• Defamation and insult — insulting or defaming someone via social media, messaging apps, email, or any electronic platform (Articles 43-44).
• Invasion of privacy — recording, photographing, or sharing images of someone without their consent (Article 44).
• Spreading false information — publishing rumours, fake news, or misleading content that harms public order (Articles 28-29).
• Identity theft — creating fake accounts or impersonating someone online (Article 11).
• Unauthorised data interception — intercepting communications or data transmitted over a network (Article 3).

The law applies regardless of the nationality of the offender or victim, as long as the crime has any connection to the UAE — including if the server, victim, or perpetrator is located in the country.

What Are the Penalties for Cybercrimes in the UAE?

Penalties under Federal Decree-Law No. 34 of 2021 are severe. Fines range from AED 100,000 to AED 3,000,000 depending on the offence. Imprisonment ranges from six months to life, with deportation possible for non-citizens. Repeat offenders face doubled penalties.

Here is a breakdown of penalties for the most commonly reported cybercrimes:

A few things stand out. The fines are among the highest in the Gulf region. Deportation is standard for convicted expatriates. And the law treats attempted cybercrimes almost as seriously as completed ones — Article 48 states that an attempt carries up to half the penalty of the completed offence.

How Do You Report a Cybercrime in Dubai?

Dubai Police operates the eCrime platform (ecrime.ae) — the fastest channel for reporting cybercrimes in the emirate. You can also report via the Dubai Police app, by calling 901, or by visiting the Criminal Investigation Department (CID) in person at Al Qusais.

Step 1: Use the Dubai Police eCrime Platform

Go to ecrime.ae or open the Dubai Police app. Select "Report a Crime" and choose the cybercrime category that matches your case. You will need to:

• Create an account or log in with UAE Pass
• Select the type of cybercrime (fraud, blackmail, hacking, defamation, etc.)
• Provide a detailed description of the incident
• Upload evidence — screenshots, chat logs, transaction records, emails
• Submit your Emirates ID and contact details

The platform assigns a case number immediately. Response time is typically 24-48 hours for initial acknowledgement.

Step 2: Preserve Your Evidence

Before reporting, take these steps to protect your evidence:

• Screenshot everything — messages, profiles, transactions, emails. Include timestamps and sender details.
• Do not delete conversations — even if the content is distressing. Courts need the original data.
• Save URLs — web pages can be taken down. Use screenshot tools that capture the full page and URL.
• Record financial transactions — bank statements, transfer confirmations, cryptocurrency wallet addresses.
• Do not confront the perpetrator — this can cause them to delete evidence or escalate the situation.

Step 3: Follow Up

Dubai Police will contact you for additional information or to schedule an interview. You may be asked to visit the CID office in person. If the case involves financial fraud, you may also need to file a separate complaint with the Public Prosecution.

How Do You Report a Cybercrime in Abu Dhabi?

Abu Dhabi residents can report cybercrimes through the Abu Dhabi Police app, the TAMM government services platform, or by calling the Aman service on 8002626. For urgent cases, visit the nearest police station or the Criminal Investigation Department in Abu Dhabi city.

The process in Abu Dhabi differs slightly from Dubai.

Abu Dhabi Police App: Download the app and navigate to "Report a Crime." The cybercrime section allows you to upload evidence and provide a written statement. You will receive a reference number via SMS.

TAMM Platform: The TAMM portal (tamm.abudhabi) also allows electronic crime reporting. Log in with UAE Pass, select the relevant service, and follow the guided process.

Aman Hotline (800 2626): This confidential reporting service operates 24/7. You can report cybercrimes anonymously. Aman is particularly useful for cases involving blackmail or threats where the victim fears retaliation.

In person: The Abu Dhabi Police CID is located on Khalifa bin Zayed Street. Bring your Emirates ID, any printed evidence, and a clear written account of the incident.

What About Other Emirates — Sharjah, Ajman, RAK?

Every emirate has its own police force that handles cybercrime reports, but cases are often escalated to the Federal Public Prosecution or the Telecommunications and Digital Government Regulatory Authority (TDRA) for cross-emirate or complex investigations.

Sharjah Police: Report via the Sharjah Police app or by visiting the Cybercrime Section at Sharjah Police HQ. Call 065943228 for direct assistance.

Ajman, RAK, Fujairah, Umm Al Quwain: Report at the nearest police station. These emirates have smaller cybercrime units, and complex cases are typically referred to federal authorities.

Federal-level reporting: You can also report cybercrimes directly to the TDRA via their website (tdra.gov.ae) or through the "My TDRA" app. The TDRA coordinates with police forces across all seven emirates and handles cases involving ISPs, telecom providers, and cross-border digital offences.

Dealing with a cybercrime case in UAE? Find experienced criminal lawyers on FindLawyer — compare qualifications, read client reviews, and get legal help fast. Find a Criminal Lawyer in Dubai →

What Evidence Do You Need to Report a Cybercrime?

Strong evidence dramatically increases the chances of a successful prosecution. UAE courts require digital evidence to be preserved in its original form — altered screenshots or edited chat logs can be dismissed and may even lead to charges against the complainant for fabrication.

The type of evidence depends on the offence, but here is what investigators typically request:

For online fraud:

• Bank statements showing the fraudulent transaction(s)
• Screenshots of the communication with the fraudster (WhatsApp, email, social media)
• The website or app used for the scam
• Any contracts or invoices exchanged electronically
• Cryptocurrency wallet addresses and transaction hashes (if applicable)

For blackmail or extortion:

• All messages from the blackmailer — text, voice, and video
• The platform used (WhatsApp, Instagram, Snapchat, Telegram)
• Any payments already made, with transaction records
• The blackmailer's profile or phone number

For hacking:

• Screenshots of unauthorised access or changes to your accounts
• Login notifications from the service provider (Google, Apple, bank)
• IP addresses if available from account security logs
• Any ransom demands received

For defamation:

• The defamatory content — screenshots with timestamps, URLs, and the author's profile
• Witness statements from people who saw the content
• Evidence that the statements are false (if applicable)
• Proof of damages caused (lost clients, emotional distress reports)

One critical rule: never tamper with evidence. Article 13 of the Cybercrimes Law imposes penalties of up to two years imprisonment and AED 500,000 for altering or destroying digital evidence.

What Happens After You File a Cybercrime Report?

The investigation process typically takes 2-8 weeks for straightforward cases. Complex fraud or cross-border cases can take 3-6 months. The police investigate, then refer the case to the Public Prosecution, which decides whether to charge the accused or close the file.

Here is the typical timeline:

Week 1-2: Police review your complaint and evidence. They may request additional information or ask you to provide a formal statement in person.

Week 2-4: The cybercrime unit investigates. This may involve requesting data from ISPs, social media platforms, banks, or international agencies through Interpol.

Week 4-8: If sufficient evidence exists, the case is referred to the Public Prosecution. A prosecutor reviews the file and decides whether to press charges.

If charges are filed: The case moves to criminal court. The accused is summoned or arrested. Trial timelines vary — misdemeanour cases may conclude within 2-3 months, while felony cases can take 6-12 months.

If the case is closed: You have the right to appeal the Prosecution's decision. A criminal lawyer can file a grievance and request the case be reopened with additional evidence.

When Do You Need a Criminal Lawyer for a Cybercrime Case?

You should consult a criminal lawyer before filing a report if the case involves significant financial loss (over AED 50,000), if you are unsure whether you are a victim or could be considered a participant, or if the perpetrator is outside the UAE. A lawyer is essential if you are the accused.

Hire a lawyer immediately if:

• You have lost a large sum of money and need to freeze the perpetrator's accounts (this requires an urgent court order)
• The cybercrime involves your business — data breaches, corporate espionage, or employee fraud
• You are being blackmailed and are unsure how to proceed safely
• You have been accused of a cybercrime and need to prepare a defence
• The case is cross-border — the perpetrator is in another country
• You want to pursue civil compensation in addition to the criminal case

What a criminal lawyer does in cybercrime cases:

• Files the complaint strategically to maximise the chance of prosecution
• Requests urgent measures — account freezes, travel bans on the accused, device seizures
• Coordinates with digital forensics experts to preserve and authenticate evidence
• Represents you at the Public Prosecution and in court
• Negotiates settlements where appropriate (particularly in defamation cases)
• Handles appeals if the case is initially dismissed

Criminal lawyers in the UAE who specialise in cybercrime typically charge AED 10,000-50,000 for representation, depending on the complexity of the case. Compare criminal lawyers in Dubai to find one with specific cybercrime experience.

Can You Report a Cybercrime if the Perpetrator Is Outside the UAE?

Yes. The UAE Cybercrimes Law has extraterritorial reach. If the crime affected a person or entity in the UAE, or if any part of the offence occurred through UAE-based infrastructure, authorities can investigate. Cross-border cases are handled through Interpol and bilateral treaties.

The UAE is a member of Interpol and has mutual legal assistance treaties (MLATs) with over 40 countries. In practice, this means:

• UAE police can request foreign law enforcement agencies to investigate and extradite suspects
• Social media companies (Meta, Google, Apple) regularly comply with UAE court orders for user data
• Financial institutions can be compelled to freeze accounts in cooperating jurisdictions
• The process is slower — expect 6-12 months for cross-border cases

If the perpetrator is in a country without an MLAT with the UAE, recovery becomes significantly harder. A criminal lawyer with international experience can advise on alternative strategies, including pursuing the case in the perpetrator's home jurisdiction.

How Do You Protect Yourself From Cybercrimes in the UAE?

Prevention is far cheaper than prosecution. The most common cybercrimes targeting UAE residents — phishing, social engineering, and romance scams — succeed because of human error, not technical sophistication. Basic digital hygiene blocks the majority of attacks.

Essential steps:

• Enable two-factor authentication on all accounts — email, banking, social media
• Never share OTP codes with anyone, even if they claim to be from your bank
• Verify identities before transferring money — call the person directly on a known number
• Use strong, unique passwords for each service (use a password manager)
• Be sceptical of unsolicited investment opportunities, especially in cryptocurrency
• Never send intimate photos or videos to anyone you have not met in person
• Check URLs carefully — phishing sites mimic legitimate UAE bank and government websites
• Report suspicious messages to the TDRA via the "My TDRA" app immediately

The UAE Central Bank has issued multiple warnings about phishing scams impersonating Emirates NBD, FAB, ADCB, and other major banks. If you receive a call or SMS asking for your card details or OTP, hang up and call your bank directly.

Frequently Asked Questions

Is cyberbullying a crime in the UAE?

Yes. Federal Decree-Law No. 34 of 2021 criminalises online harassment, bullying, and intimidation under Articles 43 and 44. Penalties include imprisonment of up to two years and fines between AED 250,000 and AED 500,000. This applies to adults and minors. Schools and parents can report cyberbullying through the same police channels used for other cybercrimes.

Can I report a cybercrime anonymously in the UAE?

You can report anonymously through Abu Dhabi's Aman service (800 2626) and Dubai's Crime Stoppers line. However, anonymous reports are harder to investigate because police cannot contact you for follow-up evidence. For the strongest case, file a formal complaint with your identity — your personal information is protected by law and not shared with the accused during investigation.

What if someone threatens me on WhatsApp — is that a cybercrime?

Threats made via WhatsApp, Telegram, Instagram, or any electronic platform are criminal offences under Article 42 of the Cybercrimes Law. Do not delete the messages. Screenshot the conversation including the sender's phone number and profile, then report immediately through the eCrime platform (Dubai) or your local police. Penalties for online threats include imprisonment of up to ten years and fines up to AED 1,000,000.

How long do I have to report a cybercrime in the UAE?

There is no strict statute of limitations for reporting to police, but delays weaken your case. Digital evidence degrades — accounts get deleted, logs expire, and platforms purge data. For financial fraud, banks typically require disputes within 60 days. As a practical rule, report within 48 hours of discovering the crime for the best outcome.

Can a cybercrime conviction lead to deportation from the UAE?

Yes. Non-citizens convicted of a cybercrime felony — including serious fraud, blackmail, or hacking — face deportation after serving their sentence. Even misdemeanour convictions can result in deportation at the judge's discretion. A criminal record also affects future visa applications to the UAE and other GCC countries.

Keep Reading

• How to File a Criminal Complaint in UAE: Step-by-Step Guide
• UAE Employment Law: Your Rights as an Employee
• Criminal Lawyers in UAE — Complete Guide
• Find a Criminal Lawyer in Dubai