A video appears to show your director ordering a transfer, or a caller sounds like a relative asking for urgent help. The instruction may be fabricated.
UAE Deepfake Laws are relevant when synthetic media is used to deceive, threaten, impersonate, or harm someone. The immediate priorities are to stop further loss, preserve evidence, and report through the proper route.
Quick Answer
Deepfake misuse in the UAE can fall under existing laws covering online fraud, threats, defamation, privacy, and impersonation. The applicable offense depends on what was created, communicated, and intended. Do not make an unverified payment. Preserve original messages and files, contact your bank immediately if money moved, and report suspected crime through official channels. The available criminal and civil responses depend on the facts, digital evidence, identifiable parties, jurisdiction, and whether funds or other assets remain recoverable.
Verify the request through a separate contact method already known to you. If funds were transferred, contact the bank’s official fraud channel immediately and provide the payment details.
Preserve original media, messages, account identifiers, and timestamps before requesting removal. Give the competent police authority an accurate incident chronology and obtain advice on recovery and any urgent legal measures.
How UAE Deepfake Laws Apply to Harmful Conduct
A deepfake is synthetic or manipulated audio, video, or imagery that imitates a person or event. Its legal significance depends on its use and the surrounding circumstances.
Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes addresses several forms of harmful digital conduct. The Penal Code may also apply.
Relevant cybercrime provisions
- Article 40 addresses internet fraud involving deceptive acquisition of property, benefits, or relevant documents or signatures.
- Article 42 concerns cyberextortion and threats.
- Article 43 addresses online insult and defamation.
- Article 44 concerns privacy violations and specified manipulation of recordings or images to defame or offend.
- Article 11 addresses fake electronic accounts, websites, and emails attributed to others.
- Article 65 gives qualifying digital evidence the probative force of physical forensic evidence.
- Article 69 addresses specified circumstances in which the law applies to conduct outside the UAE.
Article 40 provides imprisonment of at least one year and/or a fine ranging from AED 250,000 to AED 1,000,000. The provision applies where its elements are established.
A criminal fine is not the same as compensation payable to the victim. Recovery of personal or business losses needs separate legal consideration.
Common scenarios and the questions they raise
Executive impersonation and urgent transfers
A fabricated voice or video may instruct finance staff to bypass an approval process. The apparent identity of a senior officer can create pressure to act quickly.
Preserve the instruction, meeting invitation, participant details, payment approvals, and transaction records. Identify who actually verified the request and through which channel.
Fabricated investment endorsements
A manipulated interview or advertisement may suggest that a recognized person endorses an investment. The content may lead to a fake platform, account, or payment request.
Keep the advertisement, destination address, account details, and communications about the investment. A screenshot of the celebrity’s face alone may not show who received the money.
Victim of a Deepfake Scam or AI Impersonation in Dubai?
Fake videos, cloned voices, and AI-generated impersonation can lead to financial loss, identity misuse, and serious legal concerns. Leaders Advocates can assess your deepfake fraud complaint, review digital evidence, and advise on reporting suspected cybercrime under UAE law.
Family emergency impersonation
A cloned voice may ask for an urgent transfer or confidential information. Pause and contact the family member through a number already stored or another trusted person.
If payment has already occurred, preserve the call details and messages. Record what was said from memory without presenting that recollection as a recording.
Threats and reputational attacks
Someone may threaten to publish fabricated intimate or damaging material. Preserve the demand, sender information, and surrounding communication without circulating the material publicly.
Seek prompt assistance from the competent authorities where threats or safety concerns arise. Paying the sender does not establish that publication will stop.
Practical steps when an incident is discovered
Stop further transactions and secure access.
Pause the disputed payment instruction and notify the people responsible for finance or security. Use trusted internal channels rather than replying through a potentially compromised account.
If account access may be affected, arrange appropriate security measures while preserving available records. Do not wipe a device before evidence needs have been assessed.
Contact the bank promptly.
Provide the transaction reference, amount, date, beneficiary details, and explanation of suspected fraud. Ask about available recall or protective steps and retain the bank’s reference number.
A recall request does not guarantee reversal. The funds may have moved, and the bank’s available actions depend on the circumstances and applicable process.
Report through the appropriate official channel.
Dubai Police provides an eCrime reporting service. Use official police channels and keep copies of the information submitted and the acknowledgment received.
The UAE government also identifies Ministry of Interior reporting options and the federal Public Prosecution’s My Safe Society app. Follow the channel’s stated purpose and eligibility.
Abu Dhabi Police’s Aman service receives security information. Its official guidance distinguishes that function from filing a criminal report, so confirm the formal complaint route where required.
A platform report, bank notification, or security tip is not necessarily a registered criminal complaint. Ask the receiving authority what further steps or attendance are needed.
Seek removal after preserving evidence.
Report impersonation or harmful content through the platform’s official process after capturing relevant evidence. Keep report numbers, removal notices, and replies.
Removal can reduce further exposure but may complicate access to evidence. Coordinate preservation requests where appropriate rather than assuming the platform will retain everything indefinitely.
Evidence and documents to collect
The evidence should connect the content, sender, recipient, instruction, and resulting harm. Preserve original material where available and record how it was obtained.
- Original audio, video, images, and attached files.
- Full message histories, emails, and available headers.
- Account names, profile links, website addresses, and contact details.
- Dates, times, time zones, and the order of events.
- Payment confirmations, bank references, and beneficiary information.
- Meeting invitations and available participant or access records.
- Internal approvals and the applicable payment policy.
- Bank, police, and platform report references.
- Records of financial loss and relevant remedial expenses.
Do not edit the only copy of a recording to highlight suspicious features. Keep the original and use separate copies for explanation or technical review.
What a forensic assessment can establish
An appropriate expert may examine signs of alteration, file history, consistency, and available technical records. The assessment should explain methods, limitations, and alternative explanations.
Compression, missing originals, and repeated forwarding can affect the analysis. Provide the best available source files and explain any gaps.
Civil recovery and time limits
A criminal investigation and recovery of losses are related but distinct issues. Counsel should assess the responsible parties, legal basis, loss, and available assets.
Possible steps may include tracing requests, applications for appropriate asset measures, and compensation proceedings. The competent authority decides whether the legal conditions for a measure are met.
Chapter Three of the Civil Transactions Law addresses harmful acts. Under Federal Decree-Law No. 25 of 2025, Article 258 generally sets a three-year knowledge-based period for harmful-act claims.
The period concerns knowledge of the damage and the responsible person. The provision also addresses criminal proceedings and a fifteen-year outer period.
Have counsel calculate the deadline and check transitional rules, the claim’s legal basis, and any special regime. Do not assume reporting to a platform preserves a civil claim.
When the suspected offender is abroad
Article 69 can extend the cybercrime law to specified overseas conduct. It does not make every foreign person, platform, or asset immediately subject to practical recovery.
Identification, evidence access, cooperation, and enforcement may require procedures in another country. Give counsel the available location information without guessing where the offender is based.
Prevention for businesses and families
Create an approval process that remains effective even when the voice and image appear convincing. Staff should be able to pause an unusual instruction without being penalized.
- Verify urgent transfers through known contact details.
- Require independent approval for significant or unusual payments.
- Confirm beneficiary changes through an established procedure.
- Train staff to recognize pressure to bypass normal controls.
- Keep access rights and authentication arrangements current.
- Maintain an incident plan covering evidence, reporting, and communications.
Families can agree on a separate verification method for unexpected requests. Avoid relying on personal details that are publicly available online.
Is Someone Using a Fake Video or Cloned Voice to Threaten or Defame You?
Deepfake blackmail, fabricated recordings, online impersonation, and reputational attacks may involve UAE cybercrime, privacy, and defamation laws. Our team can assess threatening messages, manipulated media, platform records, and evidence-preservation steps before advising on appropriate complaints and legal remedies.
Common mistakes and risks
Do not publicly accuse someone solely because their face or name appears in the material. That person may also be a victim of impersonation.
Avoid deleting messages out of embarrassment or forwarding harmful content widely. Both actions can worsen the practical position.
Do not wait for a forensic report before notifying the bank about a suspected fraudulent transfer. Urgent protective action and evidence assessment can proceed together.
How a lawyer can help
Faris Raian and the team at Leaders Advocates can assess suspected deepfake fraud, threats, or reputational harm. The review should identify urgent steps and the evidence supporting each possible remedy.
A deepfake fraud lawyer Dubai can coordinate the legal complaint, technical questions, and recovery assessment. Ask for a realistic explanation of jurisdiction, cost, and the limits of tracing.
Relevant Legal Services
- Cybercrime Lawyers in Dubai can assess digital evidence and reporting.
- Fraud Lawyers in Dubai can advise on alleged deception and recovery.
- Defamation Lawyers in Dubai can assess reputational harm.
Relevant Success Story
The firm’s Success Stories report a corporate fraud and embezzlement matter. The listing does not establish that the matter involved deepfake technology.
Every matter depends on its own facts, documents, and legal circumstances. A reported outcome does not guarantee recovery in another case.
Frequently Asked Questions
Final Takeaway
Verify unusual requests independently and act promptly when deception is suspected. Preserve original evidence, notify the bank if funds moved, and obtain advice based on the specific facts and documents.
Lost Money After a Deepfake Call, Fake Investment Video, or Fraudulent Transfer?
Faris Raian and the Leaders Advocates team can assess deepfake-related financial fraud, bank transfer records, digital evidence, and potential recovery options. Get advice on police complaints, identifying responsible parties, civil compensation claims, and available asset protection measures where the legal requirements are met.
