How to Report Cyber Crime in the UAE depends on where the incident occurred, whether anyone is in immediate danger, and what evidence or money can still be protected. Official options include the Ministry of Interior eCrimes channel, Dubai Police online services, Abu Dhabi Police Aman, the Public Prosecution’s My Safe Society service, and any police station. Call 999 for an emergency.
The first hour can matter more than the final wording of the complaint. Preserve the original messages and account details, call the bank if funds or cards are involved, secure affected accounts from a clean device, and then file through the most relevant official channel. A concise chronology supported by original records is easier to investigate than a long narrative with edited screenshots.
Save the evidence before blocking, deleting, resetting, or publicly confronting anyone. If money is moving, contact the bank immediately to freeze cards or accounts and request a recall, then make the police report. For Dubai incidents, use the Dubai Police website or app or attend a station. The Ministry of Interior eCrimes channel provides a federal route, Abu Dhabi Police Aman accepts confidential reports, and My Safe Society is a nationwide Public Prosecution channel. Use 999 where there is immediate danger. Submit dates, usernames, links, phone numbers, email headers, payment records, wallet addresses, and the original files. Keep the reference number and add new evidence through the authority handling the case.
How to Report Cyber Crime in the UAE in 7 Steps
- Move to safety and call 999 if there is an immediate threat, active extortion, or risk of physical harm.
- Preserve the original messages, posts, files, links, account identifiers, and transaction records before changing the affected device or account.
- Contact the bank, card issuer, exchange, employer, or platform immediately if money, credentials, business systems, or private content are at risk.
- Choose the official reporting channel that best fits the emirate and urgency of the incident.
- Write a factual timeline explaining what happened, when it happened, what was sent or taken, and the loss or threat involved.
- Upload organized evidence, submit the complaint, and save the reference or case number and confirmation screen.
- Follow up with the assigned authority, provide any new evidence promptly, and avoid private contact that could compromise the investigation.
These steps work for online fraud, account hacking, phishing, impersonation, threats, blackmail, privacy violations, unlawful access, and many other digital incidents. The legal classification is decided by the authorities based on the conduct and evidence. A victim does not need to identify the correct statutory article before making a report.
Official Cybercrime Reporting Channels
Ministry of Interior eCrimes Channel
The UAE Government’s official cyber-safety guidance identifies the Ministry of Interior eCrimes service as a federal reporting option. It is useful where the incident is not limited to one emirate, where the victim is unsure which local force should receive it, or where a nationwide starting point is more practical. Follow the identity and evidence prompts shown in the current service.
Dubai Police Website, App, or Police Station
For an incident connected to Dubai, the Dubai Police website and mobile application provide online police services, and any police station can receive a complaint. Use 901 for Dubai Police non-emergency assistance and 999 for an emergency. Online reporting is convenient, but an urgent financial or personal-safety situation should not be delayed merely to complete a perfect upload.
Abu Dhabi Police Aman
Aman is Abu Dhabi Police’s confidential reporting service. The current UAE Government guidance lists it among the official channels and gives 8002626 as the contact number. Confidential information can help the police identify a risk, but a formal case may still require the victim’s identity, statement, original evidence, and follow-up cooperation.
My Safe Society
The UAE Public Prosecution’s My Safe Society service is another nationwide reporting option identified on the official government platform. It is designed to receive information and supporting digital material. Use the current official app or service listing, and retain the submission confirmation so the material can be matched to any later police or prosecution file.
Emergency and In-Person Reporting
Call 999 when the digital conduct creates immediate danger, such as a credible threat of violence, stalking linked to a current location, a child at risk, or blackmail accompanied by an urgent physical threat. A police station is appropriate when the online form cannot accept the evidence, the victim needs language or accessibility support, or the situation requires an immediate statement.
Avoid unofficial links sent by strangers who claim they can file a report. Start from a verified government website or official app store listing. If the matter is serious, a Cybercrime Lawyer in Dubai can help organize the complaint and protect the victim’s or accused person’s procedural rights without replacing the official reporting authority.
Is Money Still Moving Right Now?
Every hour reduces what can be frozen or recalled. Leaders Advocates can guide the bank contact, the evidence you must save first, and the report itself in the right order and without wasted steps.
Choose the Right Channel for the Incident
A report will not necessarily fail because the victim started with a federal channel rather than a local one. Authorities can direct or transfer the matter where appropriate. Choosing sensibly at the start still saves time. Consider where the victim was located, where the account or device was used, where money was transferred, and whether a named suspect is connected to a particular emirate.
- Use Dubai Police for an incident centered in Dubai, especially where a Dubai account, resident, business, or transaction is involved.
- Use Abu Dhabi Police channels for conduct centered in Abu Dhabi, with Aman available for confidential reporting and information.
- Use the Ministry of Interior eCrimes route where the matter spans emirates or the correct local starting point is unclear.
- Use My Safe Society to submit information and digital material through the federal Public Prosecution channel.
- Use any police station when online access fails, the volume of evidence is large, or an in-person statement is needed.
- Use 999 when a delay could expose a person to immediate physical danger or allow an active emergency to continue.
The online channel is the beginning of the process, not a guarantee that every step will stay online. Investigators may ask the victim to attend, show the original device, provide a formal statement, identify a transaction, or consent to technical examination. Keep travel and contact details current so requests are not missed.
Evidence to Preserve Before You File
Digital evidence is vulnerable to deletion, account closure, automatic message expiry, software updates, and loss of metadata. Preserve first, then secure. A screenshot is useful for readability, but it may not show the original sender, full URL, file properties, or message context. Whenever possible, retain both the visible capture and the original source.
- Full-screen screenshots showing the account name, date, time, and surrounding conversation.
- The original message export or chat backup where the platform allows it.
- Profile URLs, usernames, user IDs, phone numbers, email addresses, and account creation details visible to the victim.
- Complete email headers, not only a screenshot of the sender name and subject line.
- Website addresses, shortened links, advertisement pages, QR codes, and the page displayed after a click.
- Bank statements, card alerts, transfer confirmations, invoices, beneficiary names, IBANs, and payment references.
- Cryptocurrency wallet addresses, transaction hashes, exchange accounts, network names, and time-stamped withdrawal records.
- Original photographs, videos, voice notes, documents, and file names without editing or recompression.
- Device details, login alerts, IP or location notifications, recovery emails, and security logs available to the account holder.
- A short chronology matching each event to an exhibit number so the investigator can follow the sequence.
Do not improve the evidence by cropping out uncomfortable context, adding arrows to the only copy, combining screenshots, or changing file names without keeping the originals. Create working copies for explanation and preserve untouched originals separately. Record how each item was obtained. This helps establish authenticity if the case reaches the public prosecution or court.
What to Do First in a Financial Cybercrime
For card fraud, bank account takeover, business email compromise, false investment platforms, or payment diversion, contact the financial institution immediately. Ask it to freeze affected cards or access, mark the transaction as fraudulent, attempt a recall or hold, preserve the logs, and explain its formal dispute process. Write down the time, agent, and reference number for every call.
A bank complaint is not a substitute for a police report. The bank protects the account and handles its payment processes; the police investigate the suspected crime. Give the bank the police reference when available and give the police the bank’s reference, beneficiary details, and transaction timing. The two tracks should support each other. Where funds must be pursued separately, our debt recovery lawyers in Dubai can advise on the civil route.
If credentials were stolen, use a clean device to change passwords and enable multi-factor authentication after saving the evidence needed to show what happened. Secure the email account first because it can reset other services. Check forwarding rules, recovery addresses, active sessions, API keys, and linked devices. Do not log back into a suspicious page to collect more evidence.
How to Handle Blackmail, Sextortion, and Threats
Do not pay an online blackmailer on the assumption that payment will end the threat. Payment may confirm that the victim can be pressured and can lead to repeated demands. Preserve the demand, the threatened material, account identifiers, payment instructions, and any evidence showing how the offender obtained the content. Then report promptly.
Do not negotiate alone, threaten the offender, or send new private material as proof of cooperation. Tighten account privacy, alert a trusted person, and keep the victim physically safe. If the threat involves a child, imminent violence, stalking, or a disclosed home or workplace location, call 999 and explain the immediate risk.
Victims are often afraid that reporting will cause the content to spread. No reporting channel can promise that an offender will not act, but delay and payment usually reduce the available options. Confidential handling, platform preservation requests, account tracing, and prompt intervention are more effective when the evidence and identifiers still exist.
Being Blackmailed and Afraid to Report It?
Paying rarely ends it, and waiting removes the options that still exist while the accounts and evidence are live. Speak to us confidentially and we will handle the reporting with you.
Phishing, Impersonation, and Social Media Fraud
A convincing logo or display name does not prove that a message came from a bank, government entity, delivery company, employer, or known contact. Preserve the URL and sender details before reporting the fake profile or page to the platform. Contact the impersonated organization through a number or website found independently, not through the suspicious message.
If the victim entered a password, one-time code, card number, Emirates ID image, or passport copy, explain exactly what was disclosed. Different data creates different risks. The response may include replacing cards, securing UAE Pass or email access, monitoring accounts, notifying an employer, and watching for new SIM, loan, or account activity.
For social media impersonation, capture the profile address, user ID if visible, posts, messages, follower requests, and examples showing the real identity being copied. A platform takedown can stop current exposure, but it can also remove accessible evidence. Save the material and report it to the authorities before or at the same time as requesting removal. Where a brand or trading name is being copied, our intellectual property lawyers in Dubai can address the separate infringement issue.
Business Email Compromise and Company Incidents
A company incident needs both legal reporting and technical containment. Isolate compromised accounts or devices without destroying logs. Preserve email headers, server records, authentication logs, invoice changes, bank instructions, access history, and internal approvals. Assign one person to maintain the chronology and one secure channel for communication about the incident.
Notify the bank immediately if a transfer was diverted. Contact the real supplier or customer through a previously verified number to confirm the correct payment details. Review whether personal data was accessed and whether sector-specific, contractual, insurance, or data-protection notifications may be required. Do not make a public attribution before the facts are established.
An employee can provide initial information, but the company should identify who is authorized to make statements, provide corporate documents, and instruct counsel. Preserve legal privilege where applicable and separate factual incident records from speculation. A coordinated report helps investigators connect the fraudulent communication to the payment and technical evidence. Our corporate lawyers in Dubai can confirm who holds authority to act for the company.
Write a Strong Cybercrime Complaint
A strong complaint is specific, chronological, and easy to verify. Begin with the reporter’s identity and contact details, the affected account or property, and a one-sentence description of the incident. Then list events by date and time. Identify what the suspect said or did, the platform used, the amount lost or demanded, and the evidence attached.
Avoid exaggeration and conclusions that the evidence cannot yet prove. It is better to say that an account using a particular username requested a transfer than to identify a real person without a reliable basis. If a fact is uncertain, label it as uncertain. Investigators can test technical links, but inaccurate certainty can distract from the strongest evidence.
- Use numbered exhibits and refer to them in the chronology.
- State all amounts, currencies, dates, time zones, and transaction references exactly.
- Explain any delay in reporting and what changed during that period.
- Separate direct observation from what another person told you.
- Identify any earlier report to a bank, platform, employer, telecom provider, or foreign authority.
- Provide safe contact details and disclose urgent confidentiality or protection concerns.
- Keep the original-language evidence and provide an accurate Arabic translation if the authority requests it.
What Happens After the Report
The receiving authority reviews the submission and may ask for clarification, original devices, additional documents, or a formal statement. A cybercrime unit can examine account identifiers, request available information from banks, telecom providers, platforms, or other entities through lawful channels, and connect the digital evidence to a person or transaction.
If the evidence supports a suspected offense, the file may move from police investigation to the public prosecution. The prosecution can direct further investigation and decide whether to bring charges. The criminal court determines guilt and penalty. The exact path and timing depend on the conduct, evidence, location of the suspect and data, and need for cross-border cooperation.
There is no universal completion date for every cybercrime report. A simple local account trace may progress differently from a cryptocurrency fraud involving multiple exchanges and countries. Treat any online promise of a guaranteed three-day recovery or guaranteed arrest with caution. Save the case reference and obtain updates through the official channel.
The UAE Cybercrime Law
Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes is the principal federal legislation covering many digital offences. It includes unlawful access, interference with data or systems, electronic fraud, extortion, privacy-related conduct, and certain forms of online insult or publication. Other criminal, evidence, procedure, data protection, and sector laws may also apply.
The legal classification and penalty cannot be determined from a short label such as “hacking” or “scam.” The court considers the precise act, intent, method, target, harm, aggravating circumstances, and evidence. Victims should focus on accurate reporting. A person accused of a cyber offence should not delete material, contact the complainant to influence the case, or give an unprepared statement about technical facts.
Serious cases may involve both criminal and civil consequences. A conviction can address punishment, while a victim may also seek compensation or recovery through the legally available route. The existence of a criminal report does not itself guarantee that money will be recovered, especially when funds have already moved abroad or through multiple accounts.
Cross-Border Incidents
Report a cybercrime in the UAE even if the suspect, platform, bank, server, or wallet appears to be abroad. The UAE authority can decide jurisdiction and use the available cooperation mechanisms. The victim should provide country information, foreign phone codes, platform notices, bank destinations, exchange names, and any foreign report number.
Cross-border cases usually require more time because records must be preserved and obtained through another entity or country. Public platform support and a foreign police report may be useful, but they do not replace the UAE complaint where the victim, loss, transaction, or harmful effect is connected to the UAE.
Do not pay a private recovery agent who promises special access to police, exchanges, or hackers. Verify credentials, fee terms, and the lawful recovery method. A demand for advance cryptocurrency, remote access to the victim’s device, or a seed phrase is a strong warning sign of a second fraud.
Protect Your Position After Filing
- Keep the report confirmation, case number, investigator contact, and every follow-up request in one secure file.
- Do not post evidence, accusations, or the suspect’s personal details on social media while the case is active.
- Preserve the affected device and do not factory-reset it unless the investigating authority or a qualified forensic specialist directs the process.
- Continue monitoring bank accounts, email rules, phone numbers, social profiles, and identity-related alerts.
- Record new messages or transactions and provide them through the assigned official channel.
- Tell the authority before travelling or changing telephone numbers so that contact and attendance requests are not missed.
- Use a lawyer if the report involves significant loss, confidential business data, competing allegations, or a risk that the reporter may also be accused.
A complainant should remain factual in all follow-up communication. New evidence should be labeled and connected to the original chronology. Repeatedly submitting the same material through multiple channels can create confusion. Once an authority confirms responsibility for the file, use that reference unless instructed otherwise.
Where a case moves toward prosecution, Criminal Defense Lawyers in Dubai can advise an accused person on interviews, evidence, bail, and court procedure. Victims with a compensation or recovery claim may need separate advice on the civil and enforcement routes.
Common Reporting Mistakes
- Deleting an embarrassing conversation before preserving it.
- Blocking the suspect before saving the username, URL, profile, and payment details.
- Waiting for a bank or platform to finish its internal review before making a police report.
- Paying a blackmailer or recovery agent without telling the authorities.
- Submitting cropped or edited screenshots without the original files and surrounding context.
- Guessing the suspect’s identity and presenting the guess as a proven fact.
- Using an unofficial reporting link or sharing UAE Pass codes with someone claiming to help.
- Publicly naming the suspect or publishing private evidence during the investigation.
- Resetting a device or closing an account before preserving logs and messages.
- Losing the reference number or failing to respond to an investigator’s request.
People Also Ask
Report Fast, Preserve the Originals
The most reliable answer to How to Report Cyber Crime in the UAE is to act in the right order: protect people and money, preserve original evidence, use a verified official channel, and maintain one clear case file. Do not wait for certainty about the suspect or the legal article before reporting urgent facts.
Complex investigations can involve police, public prosecution, banks, platforms, forensic specialists, and foreign authorities. If the matter becomes a contested criminal or compensation case, a Litigation Lawyer in Dubai can help align the evidence, procedural steps, and recovery strategy with the official file.
One Wrong Step Can Cost You the Evidence
Blocking, deleting, or resetting before the originals are saved is what weakens most cybercrime files. Leaders Advocates preserves the evidence properly, file it through the right channel, and stay with the case through prosecution or recovery.
