Online scams in the UAE are no longer limited to suspicious emails. Today, fraudsters use WhatsApp, Instagram, fake investment platforms, fake job offers, courier payment links, crypto schemes, fake bank calls, UAE Pass scams, and websites that look almost identical to official government or bank portals.
The most important advice is simple: act quickly, preserve evidence, and report through the correct official channel. In many online fraud cases, delay can reduce the chances of freezing funds, tracing accounts, or identifying the offender.
An online scam may include any digital method used to deceive a person into sending money, sharing personal data, revealing OTPs, giving UAE Pass access, or transferring funds to a fraudster. Common examples include:
Before filing the complaint, take urgent protective action:
Contact your bank immediately if money, cards, accounts, or online banking are involved. Ask the bank to block the card, freeze suspicious transactions, secure your account, and issue a written complaint or reference number.
Change passwords for your email, bank app, social media accounts, UAE Pass, and any account connected to the scam. Enable two-factor authentication where possible.
A strong cybercrime complaint depends on evidence. Preserve everything before the scammer deletes or blocks you.
Collect:
If the scam happened in Dubai, the main official route is the Dubai Police eCrime service. The Dubai Electronic Security Center confirms that Dubai Police established an online eCrime portal for the public to record cybercrime complaints — specific to crimes within Dubai's geographical scope.
You can report through:
For scams connected to other emirates, or where the location is unclear, victims may use the UAE Ministry of Interior's eCrimes platform. The UAE Government's official portal states that cybercrimes can be reported online through the MOI's eCrimes platform, available on the MOI UAE app and through the Dubai Police eCrime website.
In practice, the correct authority usually depends on where the victim is located, where the loss occurred, where the bank account is held, or where the suspect is believed to operate.
If funds were stolen from a UAE bank account, the police report and the bank complaint should move together.
First, notify your bank urgently and obtain a complaint reference number. Then file a cybercrime report with the police. If your dispute with a licensed financial institution or insurance company is not resolved internally, you may escalate to Sanadak — the independent financial ombudsman unit established by the Central Bank of the UAE. Sanadak accepts complaints against licensed financial institutions and insurance companies licensed by the Central Bank.
If the fraud misuses the name, logo, employee name, or fake email address of the Central Bank of the UAE, the CBUAE asks the public to notify it directly, while also advising victims to report to local law enforcement.
After filing, the authority may review the complaint, request additional documents, contact the complainant, trace digital information, coordinate with banks or platforms, and refer the matter to the competent prosecution if sufficient grounds exist.
The success of a complaint often depends on the speed of reporting and the quality of evidence. A vague complaint such as "I was scammed online" is far weaker than a structured complaint containing the date, amount, platform, username, bank account, screenshots, transaction receipts, and a clear explanation of how the fraud occurred.
Recovery is possible in some cases, but it is never automatic. It depends on how quickly the transaction is reported, whether the funds remain in the UAE banking system, whether the receiving account can be frozen, and whether the offender can be identified.
In criminal proceedings, the court may deal with restitution where the law allows it. For example, Article 41 of the UAE cybercrime law, dealing with unauthorised fundraising through fictitious portfolios or companies, provides that the court shall order the refund of illegally seized funds.
A victim may also need separate civil proceedings depending on the facts, the amount lost, and whether there are identifiable defendants or negligent parties.
Before submitting the report, prepare a short statement covering:
Reporting an online scam in the UAE is not merely an administrative step; it is the foundation of any investigation, fund-freezing request, prosecution, or recovery claim. In Dubai, victims should generally use Dubai Police eCrime for Dubai-related cyber offences. For wider UAE matters, the Ministry of Interior eCrimes platform may be appropriate. Where a bank or licensed financial institution is involved, the victim should also complain to the bank and, where necessary, escalate through Sanadak.
The golden rule is: report early, preserve evidence, and use official channels only.
Our criminal law team advises victims of cybercrime and online fraud on reporting, evidence preservation, and recovery options in the UAE. Contact us for a confidential consultation.
Book a Consultation →