Cybercrime Allegations in Dubai: Evidence and Legal Assistance
Cybercrime allegations in Dubai
A cybercrime allegation can arise from account access, use or disclosure of data, impersonation, online fraud, threatening or harmful communications, or material published through a website, application or social-media account. The legal assessment depends on the alleged act, the technology used, who controlled the relevant account or device, the available evidence and the precise provision relied on.
The principal federal legislation is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes. It addresses a wide range of conduct involving websites, information systems, networks and information-technology tools. An accusation should therefore be assessed against the actual wording of the alleged offence rather than a generic list of “cyber crimes”.
What should be reviewed first?
The starting point is the complaint, summons, prosecution paper or other official notice. It should identify, or help identify, the alleged conduct, the relevant account or device, the period under investigation and the legal provision being considered. The facts may involve several laws, so the cybercrime legislation should be read together with the applicable procedural and substantive rules.
Preserve digital evidence
Do not delete, edit, reset or factory-restore relevant devices, accounts, messages, cloud records or transaction histories. Do not ask another person to alter material or attempt to regain access by using credentials without clear authority. Useful records may include:
- the original device, SIM and account details connected to the allegation;
- complete message threads, emails, call records and platform notifications rather than isolated screenshots;
- login alerts, session histories, IP or access logs, password-reset notices and multi-factor authentication records;
- invoices, payment records, wallet or bank references and communications showing the purpose of a transaction;
- employment, agency or system-access documents showing what access was authorised;
- the complaint, police or prosecution reference, summons and any device-seizure or examination record; and
- a dated chronology identifying who controlled each device or account and when.
Preserve originals and record how each copy was obtained. Digital material can be incomplete, altered by export, stripped of metadata or attributed to the wrong user. A lawyer can assess whether specialist technical assistance is appropriate; the existence of a screenshot or an account name alone does not resolve every question of authorship, control, context or integrity.
Issues that may require legal analysis
There is no universal defence formula. Depending on the allegation, the assessment may include:
- whether the alleged act falls within the wording and elements of the cited offence;
- whether the accused person controlled the device, account or credentials at the relevant time;
- whether access was authorised and, if so, whether its permitted scope is disputed;
- whether intent, knowledge, purpose, context or a required consequence can be established;
- whether the digital evidence is complete, reliable and linked to the allegation; and
- whether investigation and court procedures were followed under the applicable UAE rules.
The Federal Decree-Law No. 38 of 2022 Promulgating the Criminal Procedures Law provides the general procedural framework. The exact position depends on the case file and current law.
How Abdul Hamid Law Firm & Advocates can assist
The firm can review the notice and available case documents, identify the provision being relied on, organise a chronology, advise on preserving records, assess attribution and evidential issues, and prepare submissions or representation for the relevant investigation or court stage. Where necessary, the legal team can coordinate with an appropriate technical specialist. Any proposed step depends on the facts, the available evidence and the scope of the engagement; no outcome can be guaranteed.
Frequently asked questions
Should I delete messages or reset my device?
No. Deleting or changing relevant material can remove context and may create additional evidential difficulties. Preserve the device and data, and obtain case-specific legal advice before making changes.
Is a screenshot enough to prove who used an account?
A screenshot may be relevant, but attribution can require a wider review of account control, device access, timestamps, platform records, metadata and the surrounding communications. Its weight depends on the complete evidence.
Does every cybercrime allegation carry the same penalty?
No. The possible legal consequences depend on the specific offence, its elements, any aggravating facts and the final legal classification. Avoid relying on a general penalty summary without checking the cited provision and current text of the law.
What should I bring to an initial consultation?
Bring the official notice or case reference, a chronology, the relevant devices where appropriate, complete communications, account and access records, transaction documents and details of any upcoming attendance or hearing. Do not send sensitive material through an insecure channel without first confirming an appropriate method.
Related guidance: See the firm’s pages on cybercrime, identity theft and cyberbullying. Learn more about Senior Emirati Lawyer Abdulhamid Yousef and the firm.
If you have received a cybercrime complaint, summons or prosecution notice in Dubai, request a consultation so the documents, deadlines and preservation steps can be reviewed.
This page provides general information and is not legal advice. Reading it does not create a lawyer-client relationship.