What Happens After a Cybercrime Complaint Is Filed in the UAE? A Complete Guide to Police Investigation, Arrest, Bail and Legal Rights
A WhatsApp message sent in anger, an insulting social media comment, the circulation of a private photograph, a recorded telephone conversation or unauthorised access to somebody else’s online account may appear, at first, to be an ordinary personal dispute. However, depending on the circumstances, such conduct can have serious criminal consequences in the United Arab Emirates (UAE).
For an individual living and working in the UAE, particularly an expatriate who may not be familiar with the country’s criminal justice system, the situation can become particularly stressful when the police make contact or when they discover that a cybercrime complaint has been registered against them.
Questions immediately arise. Will the police arrest the person? Can the mobile phone be examined? Will the matter be referred to the public prosecution? Is a travel ban possible? Can bail be obtained? Does withdrawing the complaint bring the proceedings to an end?
These are not merely procedural questions. The manner in which a person responds during the initial stages of an investigation can have a considerable bearing on the subsequent proceedings.
The important point to understand is that registration of a cybercrime complaint does not automatically establish criminal liability. The authorities must investigate the allegations, examine the available evidence and determine whether the conduct constitutes an offence under the applicable legislation.
This article examines what happens after a cybercrime complaint is filed in the UAE, the powers of the investigating authorities, the rights of an accused person and the legal remedies available under UAE law.
1. The Legal Framework Governing Cybercrime in the UAE
The principal legislation governing cyber offences in the UAE is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes, which came into force on 2 January 2022.
The legislation provides a comprehensive framework for addressing offences committed through information networks, websites, electronic information systems and other information technology facilities.
It replaced the earlier Federal Decree-Law No. 5 of 2012 concerning combating cybercrimes.
However, the Cybercrime Law cannot be examined in isolation. The procedural aspects of criminal investigations, questioning, arrest, detention, provisional release and prosecution are primarily governed by Federal Decree-Law No. 38 of 2022 Promulgating the Criminal Procedures Law, as amended.
A further development relevant to persons facing criminal proceedings is Federal Decree-Law No. 34 of 2024 concerning the Regulation of Penal and Correctional Institutions, which provides an additional statutory framework governing the treatment and rights of persons held in such institutions.
Accordingly, a cybercrime complaint may involve the application of several legal provisions. The Cybercrime Law determines the nature of the alleged offence and its punishment, while the Criminal Procedures Law regulates how the investigation and prosecution are conducted.
Understanding this distinction is essential when assessing the legal position of an accused person.
2. What Conduct Can Lead to a Cybercrime Complaint?
One common misconception is that cybercrime is limited to hacking, identity theft or financial fraud. In reality, the scope of UAE cybercrime legislation is considerably wider.
An offence may arise from the use or misuse of social media platforms, messaging applications, email services, websites, electronic devices and other digital communication systems.
The nature of the conduct, the intention behind it and the surrounding circumstances determine which legal provision may apply.
Some important provisions are discussed below.
A. Electronic Threats and Extortion – Article 42
Article 42 of Federal Decree-Law No. 34 of 2021 deals with cyberextortion and cyber threats.
A person who uses an information network or information technology equipment to threaten or extort another individual, with the intention of compelling that person to do something or refrain from doing something, may attract criminal liability.
Under Article 42(1), the prescribed punishment includes imprisonment for up to two years and a fine ranging from AED 250,000 to AED 500,000.
The provision also addresses more serious threats involving demands connected with committing a crime or dishonourable acts. In such circumstances, the punishment may extend to temporary imprisonment for up to ten years.
For example, threatening to publish private photographs unless a person transfers money or complies with a particular demand may raise serious issues under this provision.
B. Online Insult, Defamation and Slander – Article 43
Article 43 addresses defamation and slander committed through information networks, information technology equipment or information systems.
The provision covers electronically communicated insults and the attribution of characteristics to another person that may expose that person to punishment or public contempt.
The prescribed punishment includes imprisonment and/or a fine ranging from AED 250,000 to AED 500,000.
The provision also recognises an aggravating circumstance where the offence is committed against a public official or a person entrusted with a public service during or because of the performance of their duties.
Consequently, a social media argument should never be dismissed as legally insignificant merely because it took place online.
C. Breach of Privacy and Disclosure of Private Information – Article 44
Article 44 is particularly important because many cybercrime complaints arise from disputes involving private communications, photographs and recordings.
The provision addresses conduct intended to invade another person’s privacy or the sanctity of private or family life without consent.
Among the acts covered are:
- Intercepting, recording, transmitting or disclosing private conversations or communications.
- Taking photographs of other persons and transferring or publishing electronic photographs.
- Publishing comments, images, information or recordings with the intention of harming another person, even where the material is genuine.
- Publishing photographs of accident victims or deceased persons without the required consent.
- Tracking, monitoring or disclosing another person’s geographical location information.
The prescribed punishment under the main provision includes imprisonment for at least six months and/or a fine ranging from AED 150,000 to AED 500,000.
The legal significance of Article 44 is that the truthfulness of the material does not, by itself, provide a complete defence where the statutory requirements concerning privacy invasion and intention to cause harm are established.
The circumstances in which information was obtained, the manner in which it was circulated and the intention behind its publication therefore require careful examination.
3. What Happens After a Cybercrime Complaint Is Filed?
The filing of a complaint generally initiates the criminal investigation process.
A complaint may be submitted to the police or the competent Public Prosecution, depending on the applicable procedure and jurisdiction.
The investigating authorities will ordinarily begin by examining the allegations and collecting information that may assist in establishing whether an offence has occurred.
This may involve:
- Recording the complainant’s statement.
- Obtaining supporting documents and electronic material.
- Identifying persons who may have knowledge of the incident.
- Examining the communications or online activities forming the basis of the complaint.
- Calling the person complained against for questioning.
- Referring the matter to the Public Prosecution where appropriate.
The police investigation is not the same as a final determination of guilt.
At this stage, the authorities are concerned with establishing the relevant facts and collecting evidence. The Public Prosecution subsequently exercises its statutory powers to determine the appropriate course of action.
A person receiving a police call should therefore avoid assuming either that the matter is insignificant or that an arrest is inevitable.
The correct approach is to establish the nature of the complaint and obtain appropriate legal advice before making detailed statements.
4. The Importance of Electronic Evidence in UAE Cybercrime Cases
Electronic evidence frequently occupies a central position in cybercrime investigations.
Unlike many conventional criminal cases, where the investigation may depend primarily on eyewitness accounts or physical documents, a cybercrime investigation can involve extensive digital material.
Examples include:
- WhatsApp and other messaging application conversations.
- Instagram, Facebook and other social media posts.
- Emails and electronic correspondence.
- Audio recordings and video files.
- Photographs and screenshots.
- Information stored on mobile phones and computers.
- Account access information and relevant electronic records.
- Communication and location-related data.
An important provision in this regard is Article 65 of Federal Decree-Law No. 34 of 2021.
It expressly provides that evidence derived or extracted from electronic devices, equipment, media, drives, information systems, computer programs and other information technology equipment has the same probative force as physical forensic evidence in criminal proceedings.
This provision gives electronic evidence considerable legal significance.
However, the existence of an electronic record does not mean that every allegation made on the basis of that record must automatically be accepted.
The circumstances in which the material was obtained, its authenticity, completeness, relevance and connection with the accused remain important matters for examination.
For example, an isolated screenshot may not tell the entire story. The preceding messages, subsequent replies, identity of the account holder and circumstances in which the communication took place may materially alter the interpretation of the exchange.
Similarly, where an account has been accessed by another individual, the question of who actually controlled or used that account may become relevant.
Should You Delete Messages After Learning About a Complaint?
No.
Deleting messages, resetting a mobile phone, changing account information to conceal activity or attempting to destroy potentially relevant material after becoming aware of an investigation can create additional complications.
A person should preserve relevant electronic material in its original form and avoid making unauthorised alterations.
If there is a concern that a device contains sensitive personal information, the appropriate course is to obtain legal advice about protecting that information while complying with lawful investigative procedures.
The objective should be to preserve evidence, not to manipulate it.
5. What Should You Do If the UAE Police Call You for Questioning?
Receiving a call from the police can be an unsettling experience, particularly for someone unfamiliar with UAE criminal procedure.
Nevertheless, the first response should be calm and measured.
Ignoring an official summons is rarely a sensible strategy. Equally, attending an investigation without understanding the nature of the allegations may place a person in an unnecessarily difficult position.
The following precautions are advisable.
First, Establish the Nature of the Complaint
Where possible, ascertain the investigating authority, the reference number and the general nature of the allegation.
Second, Preserve Relevant Documents
Collect the complete communications, photographs, emails, payment records and other material that may explain the circumstances.
Third, Avoid Contacting the Complainant Unnecessarily
Attempts to argue, threaten or persuade the complainant through further electronic communications may create additional evidence and complicate the matter.
Fourth, Obtain Legal Advice Before Making a Detailed Statement
A cybercrime complaint may involve several overlapping provisions. A statement that appears harmless in isolation may have a different significance when examined alongside the electronic evidence.
Fifth, Comply With Lawful Directions
Do not ignore a formal summons or attempt to obstruct the investigation.
The objective is to ensure that the accused person’s explanation is properly understood and that relevant evidence is not overlooked.
6. What Are Your Rights When the Matter Reaches the Public Prosecution?
The Public Prosecution plays a central role in the UAE criminal justice system.
It has the authority to:
- Conduct criminal investigations.
- Examine the available evidence.
- Decide whether the matter should proceed to court.
The Criminal Procedures Law provides important safeguards for an accused person during this stage.
Article 97 – Informing the Accused of the Charge
Under Article 97 of Federal Decree-Law No. 38 of 2022, when the defendant appears before the Public Prosecution for investigation for the first time, the prosecutor must record the information necessary to establish the defendant’s identity.
The defendant must also be informed of the charge attributed to them, and any statement made in response must be recorded in the investigation report.
This is important because an accused person should understand the allegation being investigated rather than being left to speculate about the nature of the complaint.
Article 98 – Right of the Lawyer to Attend the Investigation
Article 98 provides for the accused person’s lawyer to attend the investigation and examine the investigation papers, unless the prosecutor decides otherwise in the interests of the investigation.
Legal representation at this stage can be particularly valuable.
A lawyer familiar with UAE criminal law can:
- Examine whether the alleged conduct falls within the relevant statutory provision.
- Assess the electronic evidence.
- Assist in presenting the accused person’s explanation.
The importance of early legal assistance should not be underestimated, particularly where the complaint involves several communications, multiple social media accounts or allegations of unauthorised access.
7. Can the UAE Authorities Arrest You Following a Cybercrime Complaint?
Yes, arrest is legally possible in appropriate circumstances. However, the filing of a complaint does not automatically mean that the accused person will be arrested.
The powers of arrest and detention are governed by the Criminal Procedures Law.
Article 99 deals with notices to appear, arrest warrants and travel bans issued by the Public Prosecution.
Depending on the circumstances, the authorities may require the accused person to appear for questioning or take more restrictive measures where legally justified.
Understanding the Different Stages of Arrest and Investigation
It is important to distinguish between the following situations:
| Procedural Stage | What It Means |
|---|---|
| Being asked to attend the police station | A request to appear before the police for questioning. |
| Receiving a formal notice to appear | An official requirement to appear before the competent authority. |
| Being arrested under a lawful warrant | Taking the accused person into custody under legal authority. |
| Being placed in detention pending further investigation | Keeping the accused person in custody while the investigation continues, subject to applicable legal requirements. |
These are different procedural stages and should not be treated as interchangeable.
What Happens Immediately After Arrest?
Article 102 of the Criminal Procedures Law requires the Public Prosecution to question an arrested person immediately.
Where immediate questioning is not possible, the person may be kept in a designated detention facility until questioning takes place.
This period must not exceed 24 hours. Once the period expires, the person must be sent to the Public Prosecution for immediate questioning or be released.
After questioning, Article 103 permits the Public Prosecution to order detention on remand where sufficient evidence exists concerning a felony or a misdemeanour punishable by a penalty other than a fine.
Therefore, arrest and remand detention are separate legal stages.
An arrest does not establish guilt, nor does it automatically mean that the person must remain in custody until the conclusion of the trial.
8. Can a Person Facing a UAE Cybercrime Case Obtain Bail?
One of the most pressing concerns for an accused person, particularly an expatriate with employment and family responsibilities, is whether release can be obtained while the investigation continues.
The answer is that provisional release is possible, subject to the applicable legal conditions and the circumstances of the case.
Articles 108 and 109 of the Criminal Procedures Law are particularly relevant.
Article 108 – Provisional Release
Article 108 empowers the Public Prosecution to order the provisional release of a person held in custody in a felony or misdemeanour case, subject to the statutory exceptions and conditions.
The release decision may be made by the Public Prosecution on its own initiative or following an application by the accused person.
Once the matter has been referred to the court for trial, the competent court exercises the relevant authority over release.
Article 109 – Conditions of Release
Article 109 provides that provisional release may be subject to conditions, including:
- A personal guarantee.
- A financial bail bond.
- A travel ban.
The competent authority determines the applicable conditions and the amount of any financial guarantee.
It is important to appreciate that bail is not automatic. The authorities consider the nature of the alleged offence, the evidence, the circumstances of the accused and other relevant factors.
A properly prepared application should therefore address the reasons why continued detention is unnecessary and why the accused person can be released subject to appropriate conditions.
9. Can a Travel Ban Be Imposed in a Cybercrime Case?
Yes.
A travel ban is a particularly important consideration in cases involving expatriates.
Under Article 99 of the Criminal Procedures Law, the Public Prosecution may issue a travel ban against an accused person depending on the circumstances.
A person who is being investigated for a cybercrime offence should therefore not assume that they are free to leave the UAE merely because they have not been arrested.
How Can a Travel Ban Affect an Accused Person?
A travel restriction may have significant consequences for:
- Employment.
- Family commitments.
- International travel.
Anyone who becomes aware of an investigation should establish whether any travel restriction or other judicial measure has been imposed before making travel arrangements.
It is also important to distinguish between a travel ban imposed during criminal proceedings and immigration or residency-related consequences that may arise independently under other applicable laws.
10. Can a Cybercrime Complaint Be Settled or Withdrawn?
This is an area that deserves particular attention because many cybercrime disputes originate from personal disagreements, business relationships, family disputes or exchanges between individuals who subsequently wish to resolve their differences.
However, withdrawing a complaint does not necessarily bring every criminal proceeding to an end.
The legal position depends on the offence involved and the applicable provisions governing reconciliation.
Article 68 – Amicable Settlement With the Victim
Article 68 of Federal Decree-Law No. 34 of 2021 specifically addresses amicable settlement with the victim in relation to certain offences, including:
| Legal Provision | Offence Category |
|---|---|
| Article 42(1) | Certain cyberextortion and cyber threats. |
| Article 43 | Defamation and slander. |
| Article 44 | Revealing secrets and invasion of privacy. |
The accused person may invoke an amicable settlement reached with the victim or the victim’s representative before the Public Prosecution or the court, provided the judgment has not become final.
The procedure is governed by the applicable provisions concerning criminal reconciliation under the Criminal Procedures Law.
This provision can be particularly significant in cases where the dispute has been resolved and the complainant is no longer interested in pursuing the matter.
Important Considerations Before Settling a Cybercrime Complaint
Nevertheless, settlement must be approached carefully.
It is necessary to:
- Identify the exact offence.
- Examine whether the statutory reconciliation provisions apply.
- Ensure that the settlement is properly documented.
- Present the settlement before the competent authority.
A private agreement or an informal message stating that the complainant no longer wishes to proceed should not automatically be treated as an order terminating the criminal proceedings.
11. What Happens If the Public Prosecution Refers the Case to Court?
If the Public Prosecution concludes that sufficient grounds exist to proceed, the matter may be referred to the competent criminal court.
At this stage, the case enters the judicial proceedings.
The court examines the charges, the prosecution evidence and the defence put forward by the accused.
Key Legal Questions in a UAE Cybercrime Defence
In cybercrime cases, the defence may need to address several important questions:
- Does the alleged conduct actually constitute an offence under the Cybercrime Law?
- Has the prosecution established the necessary elements of the offence?
- Is the electronic evidence authentic and reliable?
- Has the complete communication been examined?
- Is there evidence connecting the accused person with the relevant account or device?
- Does the available evidence establish the intention required by the applicable statutory provision?
- Are there legal grounds for challenging the interpretation or admissibility of the evidence?
Why Electronic Evidence Requires Careful Examination
These questions cannot be answered by examining a single screenshot or isolated message.
A proper defence requires a detailed assessment of the case papers, the applicable legislation and the complete evidentiary record.
The accused person must also remember that the criminal court, rather than the complainant, determines criminal liability in accordance with the law.
12. Special Considerations for Expatriates Facing Cybercrime Allegations in the UAE
Expatriates may face additional practical difficulties when involved in criminal proceedings.
For many foreign nationals, a criminal investigation can affect employment, business activities, family responsibilities and travel arrangements.
There may also be concerns about language, communication with the authorities and understanding the procedural requirements.
The Criminal Procedures Law recognises the importance of language assistance.
Under Article 8, where an accused person does not speak Arabic, the competent authorities must provide an approved or licensed interpreter or use the authorised technical means for interpretation.
Foreign nationals who are arrested or detained should also understand their consular rights.
For instance, an Indian national detained in the UAE may specifically request the authorities to inform the Embassy of India or the Consulate General of India about the detention.
The Embassy of India in Abu Dhabi has clarified that consular notification is not automatic and that the detained Indian national should expressly request it.
This is an important practical safeguard that expatriates should be aware of.
13. Why Early Legal Advice Matters in a UAE Cybercrime Investigation
Cybercrime investigations are often more complicated than they initially appear.
A dispute may involve a series of WhatsApp conversations, social media publications, private photographs, electronic recordings and competing allegations.
The difficulty is not always establishing that a communication took place. The more important question is determining what that communication actually proves under the applicable law.
For example, an allegation of online defamation may require examination of the precise words used, the identity of the person targeted and the surrounding circumstances.
A privacy-related allegation may require an entirely different assessment of consent, the manner in which the information was obtained and the purpose for which it was published.
Similarly, a complaint involving threats may require examination of the nature of the threat and whether the statutory elements of extortion or coercion are established.
This is why choosing an experienced cybercrime lawyer in UAE is an important consideration when a complaint has been registered.
What Should a Cybercrime Lawyer in UAE Examine?
A lawyer dealing with UAE criminal matters should be able to:
- Examine the exact statutory provisions applicable to the allegations.
- Review the electronic evidence and identify evidentiary weaknesses.
- Assess the legality and procedural circumstances of the investigation.
- Assist in preparing the accused person’s explanation.
- Represent the accused during the relevant investigation stages.
- Advise on applications for provisional release and bail.
- Examine whether amicable settlement or criminal reconciliation is legally available.
- Prepare the defence if the matter proceeds to trial.
Mrs. Awatif Al Khouri emphasises the importance of examining the complete circumstances of an alleged cyber offence rather than relying solely on isolated electronic communications.
In her approach, the identity of the account user, the context of the communication, the available digital evidence and the precise legal provision involved must all be examined before assessing the criminal liability of an individual.
14. Conclusion: Do Not Ignore a Cybercrime Complaint in the UAE
The increasing use of electronic communication has made cybercrime legislation an important part of the UAE’s criminal justice framework.
A disagreement that begins with a message, photograph, recording or social media publication can develop into a criminal investigation involving the police, electronic evidence examination and proceedings before the Public Prosecution.
In appropriate cases, the consequences may include arrest, detention, financial bail conditions and travel restrictions.
However, it is equally important to remember that an allegation is not a conviction.
The law provides procedural safeguards and opportunities for the accused to explain their position, challenge the evidence and seek appropriate remedies.
The most sensible course of action is to preserve relevant electronic material, avoid further confrontation, respond appropriately to official communications and obtain legal advice at the earliest possible stage.
A cybercrime investigation should never be approached casually, but neither should a person assume that the mere existence of a complaint establishes guilt.
The real issue in every cybercrime case is whether the prosecution can establish the ingredients of the alleged offence through legally sustainable evidence. That question must be examined carefully, in the light of the applicable UAE legislation and the complete circumstances of the case.
Frequently Asked Questions (FAQs)
1. What Happens When Someone Files a Cybercrime Complaint in the UAE?
The complaint is examined by the competent authorities. The police may record statements, collect electronic evidence and call the person complained against for questioning. The matter may subsequently be referred to the Public Prosecution for further investigation and a decision on prosecution.
2. Can I Be Arrested for a WhatsApp Message in the UAE?
Yes, a WhatsApp communication can form the basis of a cybercrime complaint if its contents and circumstances fall within an applicable criminal provision. However, arrest is not automatic. The authorities must act in accordance with the Criminal Procedures Law.
3. Can the Police Examine My Mobile Phone in a UAE Cybercrime Investigation?
Electronic devices and their contents may be examined in accordance with the applicable legal procedures and investigative powers. Article 65 of the Cybercrime Law recognises the evidentiary value of material extracted from electronic devices and systems.
4. Can I Get Bail in a UAE Cybercrime Case?
Provisional release may be available under Articles 108 and 109 of the Criminal Procedures Law. The Public Prosecution or the competent court may impose conditions such as personal guarantees, financial bail or a travel ban.
5. Can a Cybercrime Complaint Be Withdrawn in the UAE?
The effect of withdrawal depends on the offence. Article 68 of the Cybercrime Law specifically permits the accused to invoke amicable settlement with the victim in certain offences, including Articles 42(1), 43 and 44, before the judgment becomes final.
6. Can a Person Facing a Cybercrime Investigation Leave the UAE?
Not necessarily. A travel ban may be imposed under the Criminal Procedures Law. Anyone involved in an ongoing investigation should verify whether a travel restriction exists before attempting to leave the country.
7. Can an Expatriate Be Prosecuted for a Cybercrime Committed Outside the UAE?
In certain circumstances, yes. Article 69 of Federal Decree-Law No. 34 of 2021 provides for the application of the law to specified offences committed outside the UAE, including circumstances involving UAE government systems, activities planned or directed from within the UAE, or offences affecting UAE interests or residents.
8. Should I Consult a Cybercrime Lawyer in UAE Before Attending Questioning?
Obtaining legal advice before making a detailed statement is advisable. A lawyer can examine the allegation, identify the applicable legal provisions and help ensure that relevant evidence and the accused person’s explanation are properly presented.
Important Legal Disclaimer
This article is intended for general legal information and educational purposes. It does not constitute individual legal advice. The outcome of any cybercrime investigation depends on the specific allegations, available evidence, applicable statutory provisions and decisions of the competent UAE authorities. Individuals facing criminal proceedings should obtain advice from a lawyer licensed to practise in the relevant UAE jurisdiction.
