Cybercrime Investigation & Device Seizure in Saudi Arabia (2026 Legal Guide) — Rules & Requirements

Last verified:

Source: Anti-Cyber Crime Law (Royal Decree M/17 of 2007), Articles 3–18; Saudi Code of Criminal Procedure (Royal Decree M/2 of 2001), Articles 41–44, 100–102; CST and NCA operational roles.

About this article

Sourced from Omani royal decrees, ministerial decisions, and the Basic Statute of the State. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards

Omani National Law

What is this right?

Cybercrime investigation in Saudi Arabia runs through the Public Prosecution (Niyaba) and the Bureau of Investigation, with operational support from the Ministry of Interior and the Communications, Space and Technology Commission (CST). The statutory framework is the Anti-Cyber Crime Law (Royal Decree M/17 of 2007), which authorises seizure of digital devices and data when investigating an offence under the Law.

For physical-premises search and seizure, the Saudi Code of Criminal Procedure (Royal Decree M/2 of 2001) Articles 41–44 govern. Search of a private residence generally requires authorisation by the Public Prosecution; in cases of flagrante delicto or where the accused is found in the place to be searched with the suspected offence-related items, immediate search is permitted.

Your rights during the investigation (Code of Criminal Procedure): Article 4 — right to counsel of your choice; Article 100 — must be informed of the reasons for arrest and of your right to remain silent on substantive matters; Article 102 — prohibition on torture, coercion, or threat; confessions obtained in violation are inadmissible. For seized devices, demand a written seizure inventory listing every device with serial numbers / IMEIs.

When does it apply?

  • Saudi Public Security, Bureau of Investigation, or CST officers arrive with a search warrant or request related to a cybercrime investigation.
  • You are summoned for questioning under the Anti-Cyber Crime Law (Articles 3–8).
  • Your phone, laptop, hard drive, USB drive, or other electronic device is seized in connection with an alleged offence.
  • Investigators request passwords / encryption keys to your devices.

What to do when Saudi cybercrime investigators arrive

  • Verify the officer's identity and the authorisation. Ask for ID and for the written authorisation (search warrant from the Public Prosecution / Bureau of Investigation order). Search of a private residence generally requires Public Prosecution authorisation under Code of Criminal Procedure Articles 41–44, except in flagrante delicto.
  • Call your lawyer immediately. Code of Criminal Procedure Article 4 protects the right to counsel from the moment of arrest / detention.
  • Note serial numbers, IMEIs, and a complete inventory of any seized device. Demand a written seizure receipt listing every item taken with identifying information. Sign only after verifying the inventory is complete.
  • Do not unlock devices or share passwords beyond what the authorisation compels. Voluntary access expansion weakens any subsequent challenge.
  • Do not make spontaneous statements about an alleged offence to the investigator without counsel present. Code of Criminal Procedure Article 100 protects the right to silence on substantive matters; Article 102 makes coerced confessions inadmissible.
  • If you are an expatriate, demand embassy notification. Saudi practice typically allows consular notification for held foreign nationals under the Vienna Convention on Consular Relations.

What should you NOT do?

  • Don't accept search by officers without proper identification or authorisation. Code of Criminal Procedure Articles 41–44 require authorisation for residential searches outside flagrante delicto situations.
  • Don't sign a blank or incomplete seizure inventory. Every item must be listed before signing. Items not listed cannot be relied on as evidence.
  • Don't make spontaneous explanations to the investigating officer. Wait for your lawyer.
  • Don't surrender phones / laptops without a written seizure receipt. The receipt is your only protection if devices are lost or altered in custody.

Common Questions

Can Saudi investigators search without authorisation?

Generally, no — the Saudi Code of Criminal Procedure (Royal Decree M/2 of 2001) Articles 41–44 require authorisation by the Public Prosecution for residential searches, except in flagrante delicto situations. For digital devices, the Anti-Cyber Crime Law 2007 authorises seizure when investigating an offence under the Law, but the procedural safeguards of the Code of Criminal Procedure continue to apply.

Do I have to give investigators my password?

Saudi law has limited explicit doctrine on compelled-decryption analogous to the US Fifth Amendment debate. In practice, voluntary password disclosure is treated as consent to access; refusal can complicate matters but is not itself a per-se offence. The safer path: demand the seizure proceed through formal forensic-acquisition channels with the written inventory documented, rather than handing over a password verbally.

What about the right to remain silent?

Code of Criminal Procedure Articles 100–102 establish: (a) the accused must be informed of the reasons for arrest; (b) the right to consult counsel of choice (Article 4); (c) the prohibition on torture, threat, or coercion during interrogation; (d) the inadmissibility of confessions obtained in violation of these protections. These are narrower than US Miranda rights but they exist and are enforceable.

When does CST get involved?

The Communications, Space and Technology Commission (CST, formerly CITC) is the telecom and digital-services regulator. CST has operational power over Saudi telecom operators and platforms accessible from KSA, including content takedown on Public Prosecution request. The National Cybersecurity Authority (NCA) is separately the critical-infrastructure cybersecurity regulator. CST is more likely to act in content / telecom-side cases; the Bureau of Investigation + Public Prosecution handle the criminal case.

What is the cybercrime investigation and device seizure under the anti-cyber crime law right in Oman?

Cybercrime investigation in Saudi Arabia runs through the Public Prosecution (Niyaba) and the Bureau of Investigation, with operational support from the Ministry of Interior and the Communications, Space and Technology Commission (CST). The statutory framework is the Anti-Cyber Crime Law (Royal Decree M/17 of 2007), which authorises seizure of digital devices and data when investigating an offence under the Law.For physical-premises search and seizure, the Saudi Code of Criminal Procedure (Royal Decree M/2 of 2001) Articles 41–44 govern. Search of a private residence generally requires authori...

When does it applycybercrime investigation and device seizure under the anti-cyber crime law?

Saudi Public Security, Bureau of Investigation, or CST officers arrive with a search warrant or request related to a cybercrime investigation.You are summoned for questioning under the Anti-Cyber Crime Law (Articles 3–8).Your phone, laptop, hard drive, USB drive, or other electronic device is seized in connection with an alleged offence.Investigators request passwords / encryption keys to your devices.

Saudi investigators are at my door for a cybercrime case — what are my rights?

Verify the officer's identity and the authorisation. Ask for ID and for the written authorisation (search warrant from the Public Prosecution / Bureau of Investigation order). Search of a private residence generally requires Public Prosecution authorisation under Code of Criminal Procedure Articles 41–44, except in flagrante delicto.Call your lawyer immediately. Code of Criminal Procedure Article 4 protects the right to counsel from the moment of arrest / detention.Note serial numbers, IMEIs, and a complete inventory of any seized device. Demand a written seizure receipt listing every item tak...

What should you NOT docybercrime investigation and device seizure under the anti-cyber crime law?

Don't accept search by officers without proper identification or authorisation. Code of Criminal Procedure Articles 41–44 require authorisation for residential searches outside flagrante delicto situations.Don't sign a blank or incomplete seizure inventory. Every item must be listed before signing. Items not listed cannot be relied on as evidence.Don't make spontaneous explanations to the investigating officer. Wait for your lawyer.Don't surrender phones / laptops without a written seizure receipt. The receipt is your only protection if devices are lost or altered in custody.

You came here to know your rights — help someone else know theirs.

Support This Mission