Cybercrime in the UAE: Legal Liability for Online Defamation, Threats, and Digital Abuse

UAE Legal Framework for Cybercrime

Federal Cybercrime Legislation

Federal cybercrime legislation regulates offences committed through websites, networks, smartphones, applications, social-media platforms, electronic systems, and other information-technology tools.

Criminal and Civil Procedures

Police and Public Prosecution handle criminal investigation, while victims may also pursue compensation where material or moral harm can be proved.

Key Legal Concepts and Definitions

Online insult attacks dignity, defamation attributes harmful facts, a threat communicates intended harm, extortion links a threat to a demand, and a privacy breach involves unauthorised handling of private information or communications.

Who UAE Cybercrime Law Applies To

Cybercrime rules may affect residents, visitors, employees, employers, companies, professionals, influencers, family members, reviewers, and users of foreign or anonymous social-media accounts.

Online Insults and Defamation

Insulting another person or attributing a fact that may expose them to punishment or contempt can create criminal liability when technology is used.

Social-Media Posts, Reviews, and Group Chats

Reviews should describe provable events rather than accuse people of theft, fraud, corruption, or criminal behaviour without a legally sound basis.

Online Threats and Cyber Extortion

Threats may be express or implied. Liability becomes more serious where private content, criminal allegations, reputation, or physical harm is used to force payment or conduct.

Privacy Breaches and Unlawful Recording

Unauthorised recording, interception, publication, or disclosure of private communications, photographs, videos, or family information may create separate criminal exposure.

Sharing Photographs, Videos, and Personal Information

Consent to create or send a photograph does not necessarily mean consent to publish, edit, forward, or use it to threaten or humiliate the person.

Edited Images, Deepfakes, and Manipulated Content

Edited recordings, fabricated screenshots, false voice notes, and deepfakes may create liability where they are used to defame, deceive, or harm another person.

Disclosure of Workplace and Professional Secrets

Employees and professionals may face criminal, employment, civil, and disciplinary consequences for publishing confidential information obtained through their work.

False Information, Rumours, and Reposting

Users should verify content before sharing it. Reposting can extend the publication and create independent evidence of circulation.

Rights of Victims

Victims may report the offence, submit evidence, seek protection, request platform removal, participate in proceedings, and pursue compensation where legally justified.

Rights and Obligations of Accused Persons

Accused persons should preserve the complete context, avoid contact with the complainant, and obtain advice before making detailed statements or surrendering critical evidence.

Employer and Business Responsibilities

Businesses should maintain policies governing social media, confidentiality, internal reporting, digital evidence, customer complaints, and employee messaging.

Cybercrime Complaint Procedures in the UAE

1. Preserve the complete evidence.
2. Secure devices and online accounts.
3. Assess immediate safety risks.
4. Obtain legal review.
5. File through the competent police channel.
6. Provide devices or original files where lawfully requested.
7. Attend police and prosecution questioning.
8. Submit technical and witness evidence.
9. Proceed before the criminal court if referred.
10. Assess compensation and related claims.

Dubai Cybercrime Reporting

Dubai Police provides an eCrime service and smart-police channels for reporting qualifying electronic offences.

Abu Dhabi Reporting and Police Assistance

Abu Dhabi Police provides electronic services and the Aman channel for submitting security information and reports.

Criminal Investigation and Public Prosecution

Investigations may involve account attribution, device inspection, telecommunications information, digital-forensic analysis, translation, witnesses, and technical experts.

Civil Compensation and Related Claims

Compensation may be sought for provable business loss, employment damage, medical or psychological harm, security expenses, and moral injury.

Required Documents and Digital Evidence

• Emirates ID and passport
• Original device
• Full conversations and chat exports
• Screenshots and screen recordings
• Voice notes and videos
• Profile links and usernames
• Telephone numbers and email headers
• Payment demands and transfers
• Witness details
• Medical and business-loss evidence
• Police and platform reports
• Technical-expert reports

Preserving Screenshots, Devices, and Metadata

Preserve complete screens, dates, links, account names, surrounding messages, original files, device data, and backup copies.

Identifying Anonymous or Fake Accounts

Investigators may use lawful technical and circumstantial evidence. Victims should preserve usernames, profile links, payment information, and connected accounts.

Electronic Evidence and Authenticity

Evidence may be challenged as edited, fabricated, incomplete, mistranslated, unlawfully obtained, or incorrectly attributed to the accused.

Common Defences and Objections

Defences may involve account hacking, false attribution, incomplete context, inaccurate translation, consent, lack of publication, absence of a threat, or submission only to a competent authority.

Common Misunderstandings

• A private message cannot be criminal.
• Deleting a post removes the evidence.
• Forwarding content creates no liability.
• Truth automatically permits publication.
• Adding “in my opinion” prevents defamation.
• Voice notes are not evidence.
• Secret recording is always lawful.
• A fake account guarantees anonymity.

Common Mistakes to Avoid

• Responding with another insult
• Deleting original evidence
• Paying a blackmailer without advice
• Posting the complaint publicly
• Contacting or threatening the complainant
• Giving an unprepared statement
• Accessing another person’s account unlawfully
• Waiting until the content spreads

Practical Examples

Legal Risks and Consequences

Cybercrime may result in imprisonment, substantial fines, compensation, professional discipline, employment consequences, business loss, account restrictions, and serious reputational harm.

How a Lawyer Evaluates a Cybercrime Case

A lawyer reviews the content, account ownership, recipients, context, publication, intent, privacy, threats, evidence integrity, translation, jurisdiction, procedural status, and related disputes.

How a Lawyer Builds a Stronger Legal Position

Legal support may include evidence preservation, complaint or defence drafting, forensic coordination, translation review, police and prosecution representation, compensation assessment, and settlement negotiation.

Settlement vs Criminal Proceedings

Settlement may address content removal, apology, confidentiality, compensation, and non-republication, but it does not automatically terminate every criminal proceeding.

When Urgent Legal Action May Be Needed

• Physical harm is threatened
• Intimate content may be published
• Money is demanded
• A child is targeted
• Personal data is exposed
• An account may be deleted
• Business secrets are leaking
• Police contact the accused

Frequently Asked Questions

Conclusion

Cybercrime in the UAE covers online insults, defamation, threats, extortion, privacy breaches, manipulated content, and unlawful disclosure of confidential information.

Early legal advice can help preserve evidence, prevent further offences, manage police and prosecution procedures, prepare an effective defence, and assess compensation or settlement options.