User Problem
People often use felony as a general word for any serious crime. UAE law instead classifies offenses by the penalties and provisions that govern them. A person can therefore face a substantial minimum detention term and fine even where the standard classification is not the felony tier familiar from another legal system.
The phrase tampering with evidence is also broader than Article 18. That article addresses a defined digital-evidence offense involving a responsible system manager and intent to obstruct authorities in relation to crimes covered by the Cybercrime Law. Physical evidence, false documents, witness interference, or deletion by another person may engage different provisions and classifications.
Solution
Identify the exact conduct and provision before answering the classification question. Then separate the Article 18 count from the underlying crime and any additional allegation concerning access, deletion, forgery, fraud, or obstruction.
Is Tampering With Evidence a Felony in the UAE?
If you ask is tampering with evidence a felony in UAE, Article 18 of Federal Decree-Law No. 34 of 2021 provides the clearest answer for its defined digital-evidence offense.
It imposes detention for at least six months and a fine of at least AED 200,000, or either penalty, on a person responsible for managing a website, network account, email, or information system who deliberately conceals or tampers with digital evidence to obstruct competent authorities.
Because the provision uses detention rather than temporary or life imprisonment, a standard Article 18 case is generally analyzed at the misdemeanor level, not automatically as a felony.
That does not make it minor: the statutory minimums are substantial, and connected offenses or the seriousness of the underlying investigation can materially affect exposure. The exact classification must be based on the charge and judgment, not the everyday label.
UAE Classification Depends on the Governing Penalty
The felony-misdemeanor distinction is not decided by how alarming the allegation sounds or how high the fine appears. The Crimes and Penalties Law uses defined penalty categories. Article 18 uses detention and a fine, which generally points the standard offense toward misdemeanor treatment rather than the temporary or life imprisonment associated with felony classification.
A lawyer should still verify the official charge. The prosecution may allege more than Article 18, and another count can have its own classification and penalty. A summary from an employer, complainant, or online post cannot replace the charge sheet, prosecution referral, or judgment when assessing whether the case contains a felony-level allegation.
Facing a Digital-Evidence Tampering Allegation?
Leaders Advocates can review the Article 18 allegation, the official classification, system responsibility, technical records, intent, and any connected cybercrime charges.
Article 18 Has a Narrower Scope Than the Everyday Phrase
The provision identifies a category of responsible person: someone managing a website, account on an information network, email, or information system. It also requires deliberate concealment or tampering with digital evidence relating to a crime covered by the Cybercrime Law, together with intent to obstruct investigative or other competent authorities.
Each part matters. A system administrator performing an authorized retention procedure, an employee accidentally deleting a file, and a manager deliberately altering logs after an official inquiry are not the same fact pattern. The prosecution must establish the legally required elements, while the defense should preserve technical records that show authority, timing, automated processes, and actual purpose.
The Minimum Penalty Is Substantial Even Without Felony Classification
Article 18 states at least six months of detention and a fine of at least AED 200,000, or either penalty. The minimum language means the provision should not be described as carrying only a small administrative consequence. Classification and seriousness are separate questions: an offense can be treated as a misdemeanor and still carry major custodial, financial, professional, and immigration consequences.
The final sentence depends on the judgment and case circumstances. No one should assume that the minimum will be imposed, that detention will necessarily be suspended, or that a fine alone is guaranteed. Advice should address both liability and sentencing without converting a statutory minimum into a predicted outcome.
The Underlying Investigation Can Change the Practical Risk
Article 18 concerns evidence connected to another Cybercrime Law offense. The underlying matter may involve unauthorized access, online fraud, electronic forgery, privacy, or another digital crime. Its seriousness can affect how authorities interpret the alleged obstruction, the urgency of evidence preservation, and the number of related charges.
A person may be accused only of tampering, only of the underlying crime, or of both. The legal team should create a count-by-count map showing the act, date, device or account, evidence, required intent, and possible defense for each allegation. Combining everything into one narrative can hide weaknesses and lead to inaccurate assumptions about felony exposure.
Digital Evidence Must Be Preserved With Context
Relevant material may include audit logs, access histories, retention settings, backups, cloud records, device images, email headers, user permissions, change tickets, incident reports, and communications about the investigation. A screenshot may show what appeared on a screen, but not always who created or changed the underlying data or whether the image is complete.
Preservation should be lawful and technically controlled. Companies may need to limit access, document a legal hold, and involve qualified forensic support. Individuals should not reset devices, delete accounts, edit messages, or conduct unauthorized searches of another person’s records. Any collection method should preserve authenticity and avoid creating a second allegation.
- Identify the exact website, account, email, system, device, or record involved.
- Preserve original logs, backups, metadata, permissions, and change history.
- Record when notice of the investigation or evidence request was received.
- Separate automated deletion from a deliberate manual act and document both accurately.
- Do not contact witnesses to align accounts or recreate missing records.
Need Help Preserving Digital Evidence Properly?
Our team can help identify the relevant devices, logs, backups, permissions, change history, and official requests while avoiding unnecessary changes to the technical record.
Intent to Obstruct Is a Central Issue
An alteration alone does not answer every element of Article 18. The provision addresses deliberate conduct with the purpose of obstructing the work of competent authorities. Timing, notice, instructions, internal policy, ordinary system practice, and communications can all be relevant to whether the required purpose can be inferred.
The defense should not invent a business explanation after the fact. It should locate contemporaneous records showing why a change occurred, who authorized it, and whether the same process was routinely applied before the investigation. The prosecution may compare that explanation with access logs, backup behavior, communications, and the significance of the concealed material.
What to Do After Learning of an Allegation
Stop nonessential changes to relevant systems and obtain advice before giving a detailed statement. Preserve the official request, internal notices, access lists, policies, and technical environment as they existed. A company should coordinate legal, information-technology, compliance, and management roles so that one person does not unknowingly overwrite material another person is preserving.
A controlled response is not obstruction. It should comply with lawful directions, avoid speculation, and prevent unauthorized disclosure of private or privileged material. Counsel can help define the evidence scope, prepare the chronology, identify technical questions, and ensure that any expert receives clear instructions without coaching the result.
Why the Felony Label Is Only the Beginning
Clients also need to understand detention risk, fines, confiscation or device issues, employment consequences, professional licensing, immigration status, travel, and the connected investigation. Those consequences are fact-specific and should not be inferred from the misdemeanor label alone. A serious response is required even where Article 18 is not classified as a felony in a standard case.
The right strategy tests the exact elements, preserves the technical record, separates counts, and prepares alternative sentencing submissions if required. The lawyer should explain uncertainty and avoid guaranteeing that the charge will remain at one level before the prosecution file and connected offenses are fully reviewed.
A useful written case map should place every alleged act beside the person said to have performed it, the relevant account or system, the timestamp, the source record, the required intent, and the prosecution evidence. It should then identify a lawful explanation or defense only where records support it. This avoids allowing the broad word tampering to replace proof of the particular Article 18 elements. It also reveals whether an alleged deletion was automated, authorized, accidental, performed before notice, or carried out by someone without the management responsibility described in the provision. The map is not a substitute for forensic work or the official file, but it gives counsel a disciplined way to test gaps, request missing material, brief an expert, and keep the Article 18 count separate from the underlying cybercrime allegation and any other offense.
Related Success Story
Leaders Advocates publishes a Cybercrime Case in Dubai | Criminal Defense Success Story that highlights the role of digital records and coordinated defense. The reported matter does not establish the classification or outcome of a separate Article 18 allegation; every case depends on its own systems, intent, charges, and evidence.
Facing a Digital-Evidence Allegation? Leaders Advocates can review Article 18 scope, the official classification, system responsibility, technical records, intent, connected offenses, and the immediate preservation plan.
Common Mistakes
- Calling every serious allegation a felony without checking the penalty category.
- Assuming misdemeanor classification means the consequences are minor.
- Applying Article 18 to any evidence issue without testing its defined scope.
- Ignoring the specific intent to obstruct competent authorities.
- Resetting devices, deleting accounts, or changing retention settings after notice.
- Combining the tampering count and underlying offense into one unsupported theory.
Relevant Legal Services
A Cybercrime Lawyer in Dubai can analyze Article 18, digital systems, access records, preservation, and forensic evidence.
A Criminal Defense Lawyers in Dubai can advise on classification, statements, prosecution, trial, sentencing, and appeal.
A Litigation Lawyer in Dubai can coordinate contested evidence, expert questions, hearings, and related disputes.
People Also Ask
The practical answer to is tampering with evidence a felony in uae is that a standard Article 18 digital-evidence case is generally analyzed at the misdemeanor level because the provision uses detention, but it remains serious and carries substantial statutory minimums. The charge, connected offenses, technical record, and intent must be reviewed before any final classification is given.
Need Legal Advice on an Article 18 Cybercrime Allegation?
Get guidance on the exact charge, misdemeanor or felony classification, intent to obstruct, connected offenses, technical evidence, and the next procedural step.
