A cybercrime consultation should establish what happened online, which legal provision may apply and what evidence can reliably show who was responsible. The criminal lawyer Dubai residents choose should explain those questions before predicting an outcome. An offensive message, an unauthorised account login and a fraudulent payment instruction involve different facts and potentially different offences.
Whether you are reporting an incident or responding to an allegation, begin with the complete record. Identify the accounts, devices, people and payments involved, then distinguish what you know from what you suspect. An organised account helps the legal team assess urgency without treating an accusation or a screenshot as a complete case.
Identify the conduct before applying a legal label
Federal Decree Law No 34 of 2021 on Countering Rumours and Cybercrimes addresses different forms of online conduct. Article 2 concerns unlawful intrusion into electronic systems and related technology. Article 6 addresses unauthorised dealings with personal electronic data, while Article 40 addresses obtaining property, benefits or specified documents through electronic fraud. The adviser should connect the alleged act to the elements of the relevant provision.
For suspected payment fraud, provide the original invoice, subsequent instructions, account details and transfer confirmation. Explain who was authorised to change payment information and how the change was verified. A failed transaction or unpaid commercial debt does not by itself establish the fraudulent conduct required by Article 40.
For account access allegations, identify the permissions that existed at the relevant time. Employment records, administrator settings, handover messages and withdrawal of access rights may affect the factual assessment. Technical access and permission to use that access are questions the legal team should examine separately.
In September 2025, INTERPOL reported that Korean police and Emirati authorities recovered USD 3.91 million sent to an illegitimate bank account in Dubai after forged shipping documents were detected. This was a specific international fraud case described in its Operation HAECHI VI results, not a standard recovery rate. An individual cybercrime complaint still depends on its evidence, timing and the authorities’ assessment.
Assess messages and privacy concerns carefully
Article 42 deals with electronic threats and extortion intended to compel a person to act or refrain from acting. Article 43 addresses insults and specified defamatory imputations through electronic means. Preserve the entire exchange, including earlier messages that explain the relationship, the request and the surrounding circumstances.
Privacy requires its own analysis. Article 44 covers specified electronic conduct intended to invade private or family life without consent and outside legally authorised circumstances. It includes certain recordings, images and disclosures, and addresses publication of even true information with an intention to harm. Accuracy alone should therefore not be treated as permission to publish private material.
Tell the adviser whether the material was sent privately, shared in a group or published publicly. Include the audience, forwarding history and available dates. Avoid posting the disputed material again to explain your side of the dispute before its legal implications have been assessed.
Preserve evidence in a form that can be examined
Article 65 gives evidence derived or extracted from electronic devices, systems and other technology the evidential standing of physical criminal evidence. This recognises electronic evidence; it does not make every item conclusive or remove questions about authenticity, completeness and attribution.
Keep original messages, attachments and available account records. A screenshot can help explain the incident, but retain the underlying conversation where possible. Record the account name, relevant address, date and time. Keep an unaltered copy separate from any annotated version prepared to explain your concerns.
Ask whether a qualified technical expert is needed. Useful questions include who controlled the account, whether access was shared and whether the available records support the suggested timeline. A technical report should explain its material and methods in language that the legal team can use, including limitations and alternative explanations.
Evidence gathering must remain lawful. Do not enter another person's account or collect their private communications merely because you believe the information will support your case. Articles 2, 6 and 44 make the method of obtaining material an issue in its own right. Discuss lawful preservation and any necessary request to the competent authority.
Prepare a clear complaint or response
The Ministry of Interior publishes a service for filing cybercrime reports and describes evidence collection followed by referral to Public Prosecution. The appropriate police authority and reporting channel should be checked against the incident and its connection to the relevant emirate. Retain the submission acknowledgement and case reference.
A useful complaint explains the sequence of events and attaches the documents supporting each allegation. Identify direct financial losses with payment records. Distinguish the person whose identity is established from the person you suspect controlled an account. If information is missing, say so rather than filling the gap with an assumption.
For a business incident, identify who may instruct the lawyers and speak for the company. Coordinate legal advice with technical containment so that important logs and records are preserved while security concerns are addressed. Keep a record of any changes made to affected systems and who made them.
Understand the position during an investigation
Federal Decree Law No 38 of 2022 governs criminal procedure. Article 48 requires the arresting officer to explain the allegation and the right to remain silent before taking statements. Article 8 addresses interpretation for a person whose statements are required and who does not understand Arabic. Explain any language difficulty promptly so that the required assistance can be arranged.
Article 98 permits the accused's lawyer to attend the investigation and inspect the case papers, subject to the prosecutor deciding otherwise in the interests of the investigation. Ask the team what access is currently available and what remains to be obtained. Do not assume the entire file will be available immediately.
Provide the adviser with summonses, statements already given and any detention or release decision. Discuss the wording before signing any new statement and ask for clarification where necessary. The practical response depends on the procedural stage and the actual allegation, rather than a generic account of how cybercrime cases usually proceed.
Check who will advise and represent you
When selecting the criminal lawyer Dubai clients need for a cybercrime matter, verify professional registration and the proposed team. The Dubai Legal Affairs Department directory identifies registered professionals and licensed firms. It expressly does not provide specialisation information or endorse a particular provider.
The Department also distinguishes legal consultancy from advocacy. A legal consultancy firm licence does not authorise pleading or representing clients before Dubai Courts at any level. Ask who will advise on the case, who will conduct any court representation and how those professionals will coordinate their work.
Discuss experience through practical questions. Ask how the team would examine disputed account access, assess a technical report or organise evidence involving an overseas provider. The explanation should identify the work needed and its limits without disclosing another client's confidential information.
Agree the scope and cost of the work
Articles 46 and 49 of Federal Decree Law No 34 of 2022 address written fee agreements and the work covered. Obtain a clear engagement before the agreed work begins. Identify whether it covers initial advice, a complaint, investigation attendance, court proceedings or a particular procedural stage.
Confirm how translation, technical experts, appeals and external expenses will be charged. Agree who will provide updates and how urgent communications will be handled. A useful proposal explains the immediate task, outstanding evidence and decisions requiring your instructions, rather than promising acquittal, prosecution or recovery before the facts have been assessed.
Frequently Asked Questions
1. Is a screenshot enough to prove a cybercrime?
Its significance depends on the issue and the surrounding evidence. Article 65 recognises electronic evidence, but authenticity, context and attribution still require assessment. Keep the original material and explain how the screenshot was obtained. A cropped image may leave important questions unanswered.
2. Does a private message avoid cybercrime liability?
Do not assume that it does. The relevant provision, message content, method of communication and surrounding facts must be examined. Articles 42 and 43 address electronic threats and insults, while privacy concerns can require separate consideration under Article 44. Provide the complete exchange for review.
3. What should I bring to the first consultation?
Bring identification, notices, account details, original communications, payment records and a dated chronology. Tell the criminal lawyer Dubai residents consult which facts remain uncertain and whether an immediate hearing or response is required. Include relevant records that may support the other person's account so the advice reflects the full picture.
4. What should a company preserve after a suspected fraudulent payment instruction?
Keep the original invoice, complete instructions, sender and account details, transfer confirmations and the records of any verification. Explain who could approve a change of account. Coordinate preservation with the technical team and record any security changes so the legal adviser can understand the original sequence.
5. How should I prepare when account access is disputed?
List the people who had authorised access, the dates permissions changed and the records supporting those details. Preserve available account logs, handover messages and original communications through lawful means. Mark what remains uncertain and ask whether a technical examination is needed.
About the author
Dr. Hassan Elhais is a Senior Legal Consultant at Amal Al Rashedi Lawyers and Legal Consultants in Dubai. He advises on UAE family, civil, commercial and criminal law matters.
Related Links
About the Author
Dr. Hassan Elhais publishes analysis of UAE criminal law matters, including online allegations, digital communications and cybercrime-related legal issues. For readers researching a cybercrime lawyer in Dubai, his writing offers insight into the legal questions surrounding these topics. Explore his published work and practice-area information for further context.
Copyright © of this article is retained by the author and/or other copyright owners. We explicitly grant you permission to download a copy, without any alteration, of this article
for personal non-commercial research or study, without prior permission or any charge. This article can be utilized on your website or for marketing, however, we grant you permission
to host this article on your website and no other rights. This content should not be altered in any way or sold commercially in any format without prior permission of the copyright holder.
During reference of this article, full biographic details entailing the name of the author, his designation, the institute and the publishing date of the article shall be provided.
