Back to Cybercrime & Digital Matters Cybercrime & Digital Matters

Phishing and Account Takeover Fraud in the UAE

Phishing uses fake messages, calls or websites to trick people into revealing banking details or one-time passwords. Account takeover follows when criminals use that information to access your accounts.

Banks and regulators publish guidance on these scams, and the right first response is usually quick and practical.

Immediate steps

Call your bank using the number on your card or official app and report the fraud
Block cards and change passwords and credentials
Check linked email and mobile accounts for unauthorised access
Do not click further links or call numbers given in the suspicious message

Evidence to keep

Save the SMS, email, call log and any screenshots of fake websites. Record times and amounts. Request a written reference from the bank for your report.

Your bank and disputed transactions

Banks have procedures for disputed transactions, and the outcome can depend on the facts, such as whether credentials were shared and the bank's terms and applicable regulations. Respond to bank requests for information promptly.

Police and regulator reports

Report through official police channels, as explained in reporting cybercrime. Banks are supervised by the Central Bank, which has a complaints process for unresolved disputes with banks, details of which should be checked on its website.

Preventive habits

Never share one-time passwords, treat unsolicited links with suspicion and verify requests through official channels.

Businesses

Companies should have procedures for payment verification, particularly for changes in bank details requested by email.

How a consultation can help

A consultation can help you organise documents, communicate with your bank in writing and understand your options. It cannot guarantee refunds or outcomes.

Frequently asked questions

Will the bank always refund fraudulent transactions?

Not always. It depends on the circumstances and bank rules, so report immediately and keep records.

Is giving an OTP my fault?

Banks may treat disclosure of OTPs as significant, but each case turns on facts and rules.

Should I change my phone number?

Secure your accounts first. Changing numbers may be useful but is not a substitute for reporting.

Related guides and services

General information only. Please read our Legal Disclaimer.