Disputing an Unauthorised Bank Transaction Under CBUAE Rules — UAE
Sourced from UAE federal decrees, laws, and ministerial decisions. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
The Central Bank of the UAE Consumer Protection Standards are the binding rules every licensed financial institution must follow on unauthorised transactions and disputed charges. Under Article 5: Business Conduct § 5.1.1.47, where a transaction is unauthorised the bank must reimburse the consumer after completion of the investigation or within 30 calendar days of the day the matter was first reported by the consumer or identified by the institution (whichever is shorter) — unless there is evidence the consumer acted fraudulently or with gross negligence. Under § 5.1.1.46, consumers must be allowed a minimum of 30 business days to report the transaction after being properly informed of it.
If the bank refuses to reimburse, the case escalates to Sanadak, the independent ombudsman established by the CBUAE under the Establishment of the Ombudsman Unit Regulation. Consumers must wait 15 calendar days from raising the complaint with the licensed financial institution before escalating to Sanadak. Sanadak is free for consumers; the ombudsman has reduced complaint-resolution time to 15 working days. Decisions are binding on the firm if the consumer accepts. If the consumer is dissatisfied, an appeal can be filed within 5 working days to the Appeals Committee for Licensed Financial Institutions (or the Insurance Dispute Resolution Committee for insurance complaints) for a fee of AED 500, refunded if the appeal succeeds.
When does it apply?
- An unauthorised debit / credit card transaction, ACH-equivalent transfer, or online-banking transaction on your UAE account.
- You were tricked into authorising a payment but the bank's authentication / Confirmation of Payee equivalent failed to warn you (narrower than the UK regime; outcome depends on the facts).
- The bank investigated and refused to reimburse, citing 'gross negligence' or 'authorised transaction'.
- At least 15 calendar days have passed since you raised the complaint with the bank (the minimum wait before Sanadak will accept the case).
Recovering Money from a UAE Bank Under CBUAE Rules
- File the bank complaint in writing via the bank's official complaint channel (mobile app, online banking, or registered email). Cite CBUAE Consumer Protection Standards Article 5 §§ 5.1.1.46–47 and require: (a) immediate documentation of the report; (b) investigation; (c) reimbursement of the unauthorised amount within 30 calendar days of the report or completion of investigation, whichever is shorter, unless gross negligence is proven.
- Include all evidence. The bank's case is the documentary record. Include the police case number (eCrime / MoI), screenshots, the timeline, and any CBUAE communications.
- Wait 15 calendar days from the complaint date. Sanadak will not accept a case until the consumer has given the bank 15 calendar days to respond. If 15 days pass and the bank has not responded — or has responded but you are unsatisfied — you can escalate.
- File at Sanadak. Sanadak (sanadak.gov.ae) is the independent banking and insurance ombudsman established by the CBUAE under the Establishment of the Ombudsman Unit Regulation. Filing is free for consumers. Sanadak now resolves complaints in approximately 15 working days. The decision is binding on the financial institution if you accept it.
- If Sanadak's decision is unfavourable, appeal within 5 working days. The Appeals Committee for Licensed Financial Institutions (or the Insurance Dispute Resolution Committee for insurance) charges AED 500 per appeal — refunded if the appeal succeeds.
- For very high-value cases or where Sanadak declines, civil court is the final route. UAE civil courts handle commercial and consumer disputes. The court fee structure and litigation timeline make this a last resort for most consumer scams.
What should you NOT do?
- Don't accept the bank's 'authorised transaction' finding without seeing the reasoning. The CBUAE Standards expect a documented investigation. Ask for the written conclusion and the documents the bank relied on.
- Don't escalate to Sanadak before the 15-calendar-day bank wait expires. Sanadak rejects premature escalations and you'll lose time.
- Don't sign a 'full and final settlement' release for a partial offer before exhausting Sanadak. Once signed, the release closes the route.
- Don't miss the 5-working-day appeals window. If you're dissatisfied with Sanadak's decision, the appeals clock is short.
- Don't share the OTP / 3D Secure code with anyone — even afterwards. Even after the scam, disclosing the OTP to someone claiming to be 'fraud recovery' can be used as evidence of gross negligence and bar reimbursement.
Common Questions
What does the CBUAE consider 'gross negligence'?
The CBUAE Consumer Protection Standards 2021 do not list specific examples but in practice gross negligence includes voluntarily sharing OTPs / 3D Secure codes with a caller, ignoring repeated bank warnings about a payment, or knowingly responding to a clearly fraudulent message. The bank carries a burden to evidence the finding; consumers should request the documented reasoning.
What is Sanadak and is it really free?
Sanadak is the independent banking and insurance ombudsman established by the Central Bank of the UAE. Filing is free for consumers. The consumer must first raise the complaint with the bank and wait 15 calendar days for a response before escalating. Sanadak now resolves complaints in approximately 15 working days. Decisions are binding on the firm if the consumer accepts. An unfavourable decision can be appealed within 5 working days to the Appeals Committee (AED 500 fee, refunded if you win).
Does the 30-day CBUAE refund rule apply to authorised transactions?
The 30-calendar-day reimbursement rule (Article 5 § 5.1.1.47) applies to unauthorised transactions. Authorised-but-induced transfers — where the consumer was tricked into authorising — are evaluated case by case under the CBUAE complaint-management framework rather than under the per-se reimbursement timeline. The UAE does not yet have a UK-style mandatory APP fraud reimbursement regime.
Should I also file with the Department of Economic Development?
For scams committed by UAE-licensed businesses (e.g. a registered company that sold goods and failed to deliver), the relevant emirate's Department of Economic Development handles consumer-protection complaints — Dubai DED, ADDED in Abu Dhabi. For bank-side recovery of funds the CBUAE / Sanadak route is the correct channel; DED handles the business-side complaint in parallel.
When does it apply — disputing an unauthorised bank transaction under cbuae rules?
An unauthorised debit / credit card transaction, ACH-equivalent transfer, or online-banking transaction on your UAE account.You were tricked into authorising a payment but the bank's authentication / Confirmation of Payee equivalent failed to warn you (narrower than the UK regime; outcome depends on the facts).The bank investigated and refused to reimburse, citing 'gross negligence' or 'authorised transaction'.At least 15 calendar days have passed since you raised the complaint with the bank (the minimum wait before Sanadak will accept the case).
How do I get a UAE bank to refund a scam transaction?
File the bank complaint in writing via the bank's official complaint channel (mobile app, online banking, or registered email). Cite CBUAE Consumer Protection Standards Article 5 §§ 5.1.1.46–47 and require: (a) immediate documentation of the report; (b) investigation; (c) reimbursement of the unauthorised amount within 30 calendar days of the report or completion of investigation, whichever is shorter, unless gross negligence is proven.Include all evidence. The bank's case is the documentary record. Include the police case number (eCrime / MoI), screenshots, the timeline, and any CBUAE communi...
What should you NOT do — disputing an unauthorised bank transaction under cbuae rules?
Don't accept the bank's 'authorised transaction' finding without seeing the reasoning. The CBUAE Standards expect a documented investigation. Ask for the written conclusion and the documents the bank relied on.Don't escalate to Sanadak before the 15-calendar-day bank wait expires. Sanadak rejects premature escalations and you'll lose time.Don't sign a 'full and final settlement' release for a partial offer before exhausting Sanadak. Once signed, the release closes the route.Don't miss the 5-working-day appeals window. If you're dissatisfied with Sanadak's decision, the appeals clock is short.D...