First 24 Hours After Being Scammed in the UAE — UAE
Sourced from UAE federal decrees, laws, and ministerial decisions. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
The UAE has a tightly integrated reporting system across federal and emirate-level police, but money-recovery still depends on the speed of the bank report. Within the first 24 hours, three jobs run in parallel: call the bank's fraud line to block cards, freeze the account, and request a reversal; file at eCrime.ae (Dubai) or through the MoI UAE app (federal / multi-emirate) so the police record exists; and preserve every screenshot, message, email, and call log for the formal complaint.
For life-threatening emergencies the number is 999. For Dubai Police non-emergencies the number is 901. The UAE banking system runs on the CBUAE Consumer Protection Standards 2021 — under Article 8 the licensed financial institution must document the report on receipt and complete the investigation and reimbursement of unauthorised transactions within 30 calendar days.
When does it apply?
- An unauthorised debit / credit card charge appears or a UAE bank account was accessed without permission.
- You were tricked into authorising a transfer by an impersonation call, phishing message, or fake delivery / customs / tax-refund text.
- An OTP or 3D Secure code was disclosed to a caller who turned out not to be the bank.
- An online purchase, classifieds advert, or social-media seller failed to deliver after payment.
- An investment, crypto, or 'guaranteed return' scheme stopped paying or refused withdrawal.
What to Do in the First Day After Being Scammed in the UAE
- Call your bank's fraud line. Use the number on the back of the card or in the official banking app — never any number that came from a suspicious message. Ask for the card to be blocked, the account frozen if needed, and (for transfers in progress) a recall to be attempted. CBUAE Consumer Protection Standards 2021 require the bank to document the reported transaction (date, time, details) on receipt. Get a written reference number.
- For Dubai-based scams, report at eCrime.ae or call 901. The Dubai Police eCrime portal handles online fraud, identity theft, cyberbullying, and impersonation crimes within Dubai. The Dubai Police app is the mobile equivalent.
- For multi-emirate or non-Dubai scams, use the MoI UAE app or the federal eCrime platform. The Ministry of Interior platform supports reporting for crimes anywhere in the UAE. The My Safe Society app, run by the UAE Federal Public Prosecution, also allows reports and follow-up on cyber-related cases.
- For life-threatening urgency, call 999. For the Dubai Police non-emergency call centre, dial 901.
- Change passwords on every account using the same email or password as the compromised one. Switch to authenticator-app 2FA where available; SMS 2FA is defeated by SIM-swap fraud.
- Document the timeline. Bank reference number, eCrime / MoI complaint number, screenshots of messages, copies of transfer receipts. The CBUAE complaint at step two of recovery will ask for all of it.
What should you NOT do?
- Don't accept calls from anyone claiming to be 'fraud recovery' offering to recover scammed money for an upfront fee. The CBUAE, the Dubai Police, and the UAE banking system never charge fees to recover scammed funds. Recovery scams are themselves common UAE-targeted scams.
- Don't share OTPs or 3D Secure codes with anyone — including someone claiming to be from your bank. No UAE bank will ever ask for an OTP. The CBUAE 2021 Standards expressly note that consumer-induced disclosure may be treated as gross negligence and bar reimbursement — protect the OTP.
- Don't delete the WhatsApp / iMessage thread, the call log, or the fraudulent receipt. Both the bank and the police rely on them for the case file.
- Don't post the scam details on UAE social media before the official reports are filed. Federal Decree-Law 34/2021 covers public discussion of pending criminal matters — keep facts in the official channel first.
Common Questions
What is the difference between eCrime.ae and the MoI eCrime platform?
eCrime.ae is managed by the Dubai Police for crimes inside Dubai. The Ministry of Interior eCrime platform (and the MoI UAE app) is the national federal channel for crimes that span multiple emirates or occur outside Dubai. If your scam touches multiple emirates, the MoI platform is the correct primary channel, with Dubai Police informed for any Dubai-side facts.
Will the bank actually refund within 30 days?
For genuinely unauthorised transactions, the CBUAE Consumer Protection Standards 2021 require reimbursement within 30 calendar days of the report. For authorised-but-induced transactions (you were tricked into authorising a transfer), the legal position is less protective than under the UK PSR regime — recovery depends on the bank's discretion, the receiving bank's cooperation, and whether the case is taken on under the CBUAE complaint route or by Sanadak.
Should I file in the emirate where I live or where the scam happened?
If both are Dubai, eCrime.ae. If both are Abu Dhabi or another emirate, the MoI platform. If the scam crossed emirates (you live in Sharjah, the scammer is operating from Dubai), the MoI eCrime platform handles it federally; you can also notify the relevant emirate police directly.
Does FDL 34/2021 apply to small consumer scams?
Yes — Federal Decree-Law 34/2021 covers a broad range of cybercrimes including online fraud, electronic forgery, account hacking, and impersonation. Fines start at AED 20,000 even for less serious offences. The law is the prosecution framework; the CBUAE Standards are the consumer-money-recovery framework. Both apply in parallel.
When does it apply — first 24 hours after being scammed in the uae?
An unauthorised debit / credit card charge appears or a UAE bank account was accessed without permission.You were tricked into authorising a transfer by an impersonation call, phishing message, or fake delivery / customs / tax-refund text.An OTP or 3D Secure code was disclosed to a caller who turned out not to be the bank.An online purchase, classifieds advert, or social-media seller failed to deliver after payment.An investment, crypto, or 'guaranteed return' scheme stopped paying or refused withdrawal.
What should I do immediately after being scammed in the UAE?
Call your bank's fraud line. Use the number on the back of the card or in the official banking app — never any number that came from a suspicious message. Ask for the card to be blocked, the account frozen if needed, and (for transfers in progress) a recall to be attempted. CBUAE Consumer Protection Standards 2021 require the bank to document the reported transaction (date, time, details) on receipt. Get a written reference number.For Dubai-based scams, report at eCrime.ae or call 901. The Dubai Police eCrime portal handles online fraud, identity theft, cyberbullying, and impersonation crimes...
What should you NOT do — first 24 hours after being scammed in the uae?
Don't accept calls from anyone claiming to be 'fraud recovery' offering to recover scammed money for an upfront fee. The CBUAE, the Dubai Police, and the UAE banking system never charge fees to recover scammed funds. Recovery scams are themselves common UAE-targeted scams.Don't share OTPs or 3D Secure codes with anyone — including someone claiming to be from your bank. No UAE bank will ever ask for an OTP. The CBUAE 2021 Standards expressly note that consumer-induced disclosure may be treated as gross negligence and bar reimbursement — protect the OTP.Don't delete the WhatsApp / iMessage threa...