HomeCyber Crime Punishment In UAE: a complete guide
In the era of digital technologies, even a single thoughtless action on the internet can lead to a criminal case. The UAE’s cybercrime laws are considered some of the strictest in the world: massive fines, deportation, and prison sentences of up to 25 years are imposed for online fraud, spreading fake information, hacking accounts, or extortion. Moreover, punishment can be assigned not only for malicious actions but also for seemingly harmless posts and reposts on social media. Many foreigners face criminal prosecution without even realizing they have broken the law.
Our legal team provides clients with comprehensive legal support in matters of crypto crimes in the UAE. Experienced specialists are ready to assess risks and mitigate consequences before a case is initiated, represent interests in the police, prosecution, and courts, protect your digital rights, devices, and business reputation, achieve case closure or sentence mitigation.
Fundamentals of UAE Legislation on Cybercrimes
Cybercrimes in the United Arab Emirates are strictly regulated and severely punished under a special regulatory act — Federal Decree-Law No. 34 of 2021 “On Combating Cybercrimes.” This document serves as the key legislative basis relied upon by authorities in investigating and preventing any crimes committed using information technologies and the internet.
According to UAE legislation, a cybercrime is considered any action committed using information systems, networks, electronic data, or means of communication that violates public order, national security, the economy, or the rights of private individuals. A key feature: those held accountable may include not only individuals who committed malicious actions but also those who allowed violations due to negligence or ignorance of local regulations.
This decree-law replaced the outdated Law No. 5 of 2012, as the landscape of digital crimes has drastically changed since its adoption. The new version is adapted to modern threats: from attacks using malware to manipulations with cryptocurrencies.
Types of cybercrimes and corresponding punishments
In the UAE, cybercrimes are considered a serious threat to public order and security, therefore strict punishment is provided for them. Federal Decree-Law No. 34 covers a wide range of violations: from hacking attacks to defamation on social media.
Unauthorized access and system hacking (Hacking)
Unauthorized access to information systems is one of the most serious cybercrimes, especially when it involves interference with government platforms, banking systems, and critical infrastructure. The law qualifies even a simple attempt at access without permission as a criminally punishable act.
If damage is caused as a result of hacking, whether it is a data breach, system paralysis, or theft of information, the penalties are intensified. In accordance with Article 4 of Federal Decree-Law No. 34/2021, the punishment includes a fine ranging from 100,000 to 500,000 dirhams (AED) and/or imprisonment for up to 5 years. In cases where the hacker’s actions have harmed national security, the prison term can be increased to 15 years, and the fine can reach up to 1 million AED.
Additional liability is provided for the use of malicious software, botnets, and viruses during hacking. Important: even if the crime was committed outside the UAE, it can be punished if a party located in the Emirates was affected.
Cyber fraud (Online Fraud)
The law clearly classifies various forms of cyber fraud, covering both simple schemes and complex transnational crimes. The definition includes phishing attacks, credit card fraud, creation of fake websites, deception in online sales, and investment scams.
For example, if a person pretends to be a representative of a well-known company, creates a fake page on social media, and collects advance payments from clients — this is cyber fraud. According to Article 11 of Law No. 34, the punishment may include a fine ranging from 20,000 to 500,000 AED and/or imprisonment for up to 3 years. In cases where the fraud targets government institutions or involves large sums, the penalties are increased.
Particularly severe punishments are imposed for crimes involving the use of forged electronic signatures and documents. Responsibility is also borne by those who distribute fraudulent software or participate in financial pyramids disguised as digital investment platforms.
Defamation, insults, and cyberbullying on the internet (Cyber Defamation & Bullying)
The spread of false information, insults, threats, or mockery on social networks, messengers, or via email is classified as cyberbullying or defamation.
Even if the message was deleted, screenshots and technical logs (log files) can be used as evidence. Law No. 34 provides for a fine of up to 250,000 AED and/or imprisonment for up to 2 years for offensive publications. If the offense affected a government body, legal entity, or had a racist or discriminatory nature, the penalties can increase to 500,000 AED and 5 years of imprisonment.
Important: Citizens and residents of the UAE bear full responsibility for posts on their accounts, even if they were made by reposting or without malicious intent. Both individuals and legal entities can be held liable for defamation.
Theft of personal data and identity fraud (Identity Theft)
Any actions related to theft or unauthorized use of personal data of other individuals (passports, bank details, medical records data, IP addresses, identifiers, and passwords) fall under Articles 6 and 7 of Decree-Law No. 34.
Even if the data was used not for profit, this can already be considered a crime. The punishment is a fine of up to 500,000 AED and/or imprisonment for up to 5 years. If the data was used to commit other crimes (financial fraud or obtaining a visa), the penalties become more severe.
In addition, separate provisions of the law are provided for the use of someone else’s biometric data, digital identifiers, or falsification of a profile on social networks. Foreign citizens convicted of such crimes are subject to deportation by court sentence.
Copyright infringement and intellectual property protection (IP Infringement)
The UAE strictly protects intellectual property in the digital environment. Illegal copying, distribution, or use of software, movies, music, educational materials, designs, brands, and other protected information is punishable under Articles 19 and 20 of Law No. 34.
Cybercrimes in this field include hacking software for free distribution, posting unlicensed content on platforms, using others’ trademarks without permission, and even publishing others’ photos without consent.
Depending on the scale of the violation, the court may impose a fine ranging from 50,000 to 700,000 AED, and in some cases, imprisonment for up to 6 months. If the violator’s actions caused financial damage to the company or the author, civil compensation and a ban on entering the country are possible.
Legal entities that allowed the publication of protected content on their platforms may also be held accountable, up to the blocking of the website and revocation of the business license in the UAE.
How to file a complaint about cybercrime in the UAE?
Step 1. Prepare the evidence
Before contacting the authorities, gather as much information and evidence as possible:
- Screenshots of chats, insults, suspicious messages;
- Emails, links to fake websites, sender IP addresses;
- Bank account statements if you have become a victim of financial fraud;
- Video or audio recordings (if applicable);
- Data of the accounts through which the crime was committed.
Important! All materials must be preserved in their original form and, if possible, have timestamps (date, time, source).
Step 2. Determine the competent authority
In the UAE, cybercrimes are handled by:
- Ministry of Interior – UAE Cybercrime Department;
- Electronic channels of the Emirates police (especially Dubai Police and Abu Dhabi Police);
- eCrime platforms at Dubai Police;
- Smart App Dubai Police (available in App Store and Google Play).
The choice of authority depends on the location of the incident and your jurisdiction.
Step 3. Submitting a complaint through the online platform
For incidents, you can use the official service eCrime.ae:
- Go to the website www.ecrime.ae;
- Click “Report Cybercrime”;
- Choose the category of the crime (fraud, hacking, defamation, etc.);
- Fill out the form with your personal information and a description of the incident;
- Attach evidence (files, images, documents);
- Confirm and send the complaint.
After submitting the complaint, you will receive a reference number to track its status.
Step 4. Submitting a complaint through the mobile application
Many emirates provide the opportunity to file complaints through official applications. In Dubai:
- Install Dubai Police Smart App;
- Log in or register;
- Select “Cybercrime” in the menu;
- Describe the incident and upload evidence;
- Confirm the submission.
Services respond within a few working days. In some cases, direct contact from an investigator or a summons to the station for testimony is possible.
Step 5. Contact the police station
If the situation is urgent or you cannot apply online, you can visit a police station in person. In this case, it is necessary to:
- Bring your passport or Emirates ID with you;
- Prepare printed evidence;
- Prepare a brief written description of the incident in English or Arabic in advance.
The police will open a case, issue you a complaint number, and you will be able to track its further progress.
Step 6. Collaboration with a legal representative
If the case is complex, related to cross-border schemes, significant damage, or a threat to your business, it is extremely important to involve a lawyer experienced in cyber law. A specialist will help properly file a complaint, interact with the police and prosecution authorities, ensure the protection of your rights during the investigation, and file a parallel civil lawsuit for compensation of damages (if applicable).
Step 7. Monitor the progress of the case
After submitting a complaint, you can receive updates using the case number on the portal. ecrime.ae, through the mobile application, via the police call center. If you do not receive information within a few weeks, it makes sense to submit a status request or seek support from a lawyer.
Possible consequences for foreigners (Deportation)
If the offender is not a citizen of the UAE, the sentencing may be accompanied by an automatic decision on their administrative deportation. In some cases, this is applied as an additional measure of punishment—alongside imprisonment and large fines. Deportation means forced expulsion from the country with a possible ban on re-entry for many years, and sometimes even for life.
The UAE considers deportation as a way to protect its digital borders and the reputation of an investment-attractive jurisdiction. This especially often concerns non-residents temporarily residing in the country: expats, freelancers, tourists, business representatives. Even temporary stay in the UAE does not guarantee protection from consequences if involvement in a digital offense is established.
A decision on deportation can be made either by a court verdict or by an administrative decision of the Ministry of Internal Affairs, especially if the authorities consider the foreigner a threat to national security or public order. Therefore, at the first signs of a criminal investigation, it is extremely important to seek legal assistance in a timely manner to minimize risks, present the defense’s position, and, if possible, challenge the deportation decision.
How to protect yourself from cybercrimes in the UAE
To minimize the risk of becoming a victim of cybercrime in the UAE, start with basic digital security measures:
- Use reliable and unique passwords for all your accounts, including online banking, corporate systems, and social networks. Avoid simple combinations and use password managers for storage.
- Enable two-factor authentication (2FA) wherever possible. It significantly increases the level of protection even in case of a password leak.
- Be cautious of phishing emails and messages. Do not click on suspicious links or download files from unreliable sources.
- Regularly update the software and operating system on all devices. Many cyberattacks exploit vulnerabilities fixed in the latest updates.
- Install licensed antivirus software and regularly scan the system, especially if you use corporate networks or store confidential data.
In addition to technical security, legal awareness is important. Our cyber law specialists in Dubai help clients assess risks and compliance with legislation, develop preventive protection measures, prepare legal documents for online activities, and respond effectively in case of an attack or accusations.
Contact cybercrime lawyers in Dubai
Our experienced lawyers in Dubai specialize in defending clients accused of cybercrimes. We promptly analyze the charges, assess the evidence base, develop a defense strategy, and represent the client’s interests in court.
In addition, we assist foreign citizens who are at risk of being deported or whose bank accounts and assets have been frozen. Our team possesses knowledge not only of local legislation but also of international practices, which is especially important in cross-border cybercrimes. We also support clients at all stages: from interrogations and investigations to appealing decisions.
If you are under investigation, have become a victim of cybercrime, or fear unfounded accusations — do not delay seeking consultation. Contact our specialists in Dubai to receive confidential, professional, and timely legal assistance. We are ready to protect your interests and ensure a strong legal position in the most complex situations.
