PRACTICE AREA

Find a Cybercrime & Digital Fraud Lawyer

Cybercrime and digital fraud cover harm that happens online or through digital means, from scams and account hacking to more serious cyber offences, an area governed by specific UAE legislation distinct from general criminal law. This page is for people who have personally experienced something like this; if you’re asking on behalf of a business about compliance obligations, our Data Protection page is the better starting point.

LAST REVIEWED 28 SEPTEMBER 2026

Researched and maintained by the LEXNOVA Content & Research Team · Editorial policy

Checked against the official sources listed on this page. General information only — not legal advice. LEXNOVA is not a law firm.

Illustration of a laptop showing a broken padlock with a red crack and scattered data fragments

Example Cybercrime & Digital Fraud Matters

  • Online scams and fraud
  • Hacked accounts and unauthorized access
  • Phishing and identity theft
  • Cyberbullying and online harassment
  • Business email compromise and corporate fraud
  • Blackmail and extortion

WHO MAY NEED THIS

Anyone who has been scammed online, had an account compromised, or experienced harassment or fraud through digital channels.

Understanding Cybercrime and Digital Fraud in the UAE

Cybercrime covers a broad range of harmful conduct carried out online or through digital means, from financial scams and account hacking to harassment and impersonation.

The UAE has specific cybercrime legislation, distinct from general criminal law, designed to address the particular nature of digital offences and their cross-border, fast-moving character.

This is a growing area of legal need as more of daily life, banking, business, and communication, moves online, creating new opportunities for both legitimate activity and fraud.

Understanding the general nature of what happened to you, a scam, unauthorized access, harassment, or something else, helps you describe your situation clearly and connect with genuinely relevant expertise.

When You Might Need a Cybercrime Lawyer

Falling victim to an online scam, whether a fake investment opportunity, a phishing attempt, or a fraudulent seller, is one of the most common reasons people seek help in this area. If the seller is real and the dispute is about a faulty product or a refused return, see what to do when a seller will not refund a defective product.

Having an account hacked or compromised, whether personal email, banking, or a business account, often raises both immediate security concerns and questions about legal recourse.

Experiencing online harassment, threats, or impersonation can also fall within cybercrime law, and a lawyer can help you understand your options.

Businesses facing email compromise, invoice fraud, or other digital attacks affecting company finances or data are another significant category of need.

Common Cybercrime Matters

Online scams and fraud, including fake sellers, investment scams, and fraudulent payment requests.

Unauthorized account access, covering hacked email, social media, or banking accounts.

Phishing and identity theft, where someone uses deceptive means to obtain your personal or financial information.

Online harassment and impersonation, including threats, defamation, or someone falsely posing as you online.

Business email compromise, a form of corporate fraud where attackers manipulate business communications to redirect payments or data.

LEXNOVA is not a law firm and does not provide legal advice. Legal Connect exists to help you describe what happened clearly, then explore potentially suitable legal professionals from our network.

We consider factors like the nature of the incident, whether it involves fraud, hacking, harassment, or a business-related attack, and other relevant details you share.

Every potential match involves human review before an introduction is made, cybercrime matters often involve genuinely technical and legal nuance deserving real judgment.

Once we identify potentially suitable professionals, we help facilitate an introduction, from there the lawyer can properly assess your evidence and advise on realistic options.

UAE Cybercrime Law: An Overview

The UAE has developed dedicated legislation specifically addressing cybercrime, recognizing that digital offences often require a distinct legal framework from traditional criminal law.

This legislation covers a range of conduct, including unauthorized system access, online fraud, digital harassment, and the misuse of personal data or online platforms for harmful purposes.

Because this area continues to evolve alongside technology itself, working with a lawyer who has genuinely current, specific experience in cybercrime matters, rather than general criminal practice alone, matters significantly.

If you’re unsure whether your situation falls within this legal framework, that uncertainty is a reasonable starting point, a lawyer can help clarify this once you’ve described what happened.

What to Do If You’ve Been Scammed Online

Preserving evidence quickly, screenshots, transaction records, and any communication with the person or platform involved, is one of the most important immediate steps.

Securing any affected accounts, changing passwords and reviewing account activity, helps limit further potential harm while you address the underlying incident.

Reporting the incident through appropriate channels, alongside seeking legal guidance, can both be part of addressing what happened, a lawyer can advise on how these fit together.

Recovery prospects vary significantly depending on the specifics of the scam, the platforms involved, and whether the perpetrator can be identified or located.

Responding to Account Compromise

If an account has been hacked, immediate steps like securing the account, reviewing what access or actions occurred, and documenting the incident all matter.

For business accounts specifically, understanding the scope of any resulting financial or data exposure is an important part of assessing your situation.

A lawyer can advise on both the immediate practical steps and any broader legal options depending on how the compromise occurred and what harm resulted.

This is a category where acting quickly can genuinely matter, both for limiting ongoing harm and preserving evidence of what happened.

Business Email Compromise and Corporate Fraud

Business email compromise typically involves an attacker gaining access to, or convincingly impersonating, a business email account to redirect payments or extract sensitive information.

This can result in significant financial loss, particularly when it involves manipulated invoice or payment instructions sent to genuine business partners.

Addressing this often involves both immediate security response and legal consideration of recovery options, particularly where funds have already been transferred.

Businesses affected by this type of fraud benefit from a lawyer with genuine experience in both the legal and practical realities of these fast-moving incidents.

The process typically starts with a clear review of your evidence and the specific nature of the incident to assess your realistic options.

This may involve filing a formal complaint with relevant authorities, alongside exploring any civil recovery options depending on the circumstances.

Cross-border elements, common in online fraud given how easily scams can originate from anywhere, can add complexity to both reporting and recovery.

A lawyer can help you understand realistic timelines and outcomes based on the specific nature and evidence available in your situation.

Choosing Between a Law Firm and an Independent Lawyer

Larger firms may bring more resources for complex, high-value, or business-related cybercrime matters involving significant financial loss.

Independent lawyers can offer more direct, accessible support for more straightforward personal matters, like account compromise or a smaller-scale scam.

The right choice depends on your matter’s complexity and value, and how much direct access to a senior lawyer matters to you.

This is a preference you can share through Legal Connect, and we’ll take it into account when considering potentially suitable professionals.

Questions to Ask a Cybercrime Lawyer

Have they handled matters similar to yours, whether online fraud, hacking, or business email compromise?

What is their honest assessment of your realistic options based on the evidence and circumstances you’ve described?

What is their fee structure, and what should you expect regarding costs as the matter progresses?

These are reasonable questions any credible lawyer should answer clearly during your first conversation.

Fees vary based on the complexity of the matter, whether it involves a straightforward complaint or a more involved cross-border fraud investigation.

LEXNOVA does not set or control fees, this is communicated directly by each professional, and it’s reasonable to request a clear estimate before proceeding.

For business-related matters involving significant financial loss, understanding the full scope of potential legal costs relative to what might realistically be recovered is worth discussing early.

A credible lawyer should be willing to explain their fees and approach clearly before you commit to proceeding.

Preventing Future Incidents

While legal action addresses what has already happened, many people and businesses affected by cybercrime also want guidance on reducing future risk.

This often extends beyond purely legal advice into practical security measures, though a lawyer can sometimes point you toward relevant resources as part of addressing your matter.

For businesses, an incident can be a prompt to review broader digital security and fraud-prevention practices going forward.

This is worth raising with the lawyer you’re introduced to as part of a broader conversation about your situation.

Red Flags to Watch For When Choosing a Lawyer

A lawyer who guarantees recovery of lost funds before genuinely understanding the specifics of your situation is making a promise no responsible professional can honestly make.

A lack of genuine, current familiarity with UAE cybercrime legislation specifically, rather than general criminal law experience alone, is worth probing.

Vague or evasive answers about fees or realistic timelines are reasonable causes for caution.

Trust your own judgment, cybercrime matters often move quickly, and it’s reasonable to seek clarity if something about the process feels unclear.

START YOUR REQUEST

Tell Us About Your Matter.

The matter type is already set to Cybercrime & Digital Fraud, so the form begins with your location. We study your case and connect you with a specialist lawyer who has handled similar matters. LEXNOVA is not a law firm — any legal advice comes directly from the independent legal professional you are connected with.

Where is your matter located?

HOW LEXNOVA LEGAL CONNECT WORKS

Tell us what you need, we review your requirements against practice area, location, and language, and — where appropriate — help facilitate an introduction to a potentially suitable legal professional. The legal advice itself is always provided directly by that professional.

See the full process

FAQ

Overview & Eligibility

The UAE has specific cybercrime legislation covering online fraud, and options may include filing a complaint with the relevant authorities as well as exploring legal recovery, a lawyer can guide you through the realistic paths available.

There are official channels for reporting cybercrime, and a lawyer can help clarify the process and what level of involvement is required from you.

Acting quickly to secure the account and document what happened is important, alongside understanding your legal options if the compromise resulted in financial loss.

The UAE’s cybercrime law addresses various forms of online harassment, a lawyer can clarify how this applies to your specific situation.

Yes. Using a network, app or device to extort or threaten someone into doing or not doing something is a specific offence under Article 42 of the UAE's cybercrime law, Federal Decree-Law No. 34 of 2021, and threats involving matters of honour are treated as far more serious. Being targeted is not your fault. Do not send money, negotiate or delete anything; keep the messages, links, dates and any demands made. Report it to the police of the emirate, including through its official online reporting channels, and to the platform; DIFC and ADGM have no police force, so reports go to Dubai or Abu Dhabi Police. Threats made in person are reported to the police too. If private images are involved, see LEXNOVA's page Someone Is Threatening to Share Private Photos of Me. You can flag your request as urgent.

This depends significantly on the specifics of the scam and the platforms or parties involved, a lawyer can give you a realistic assessment based on your situation.

Screenshots, transaction records, messages, and any communication with the person or platform involved can all matter, preserving this evidence early is important.

Cross-border cybercrime adds complexity, but it doesn’t necessarily mean you have no options, a lawyer can advise on what’s realistically achievable in your situation.

Yes, sharing this when describing your situation helps us consider lawyers with genuinely relevant experience in corporate or business-focused cybercrime matters.

This is worth mentioning clearly, since business-related incidents may involve different considerations, evidence, and processes than a personal matter.

Many lawyers in this space assist with communication and formal requests to platforms, banks, or payment providers as part of addressing the incident.

That uncertainty is a completely reasonable starting point, describing what happened as best you can lets us consider lawyers who can properly assess your situation.

Depending on the circumstances, both avenues may be relevant, a lawyer can clarify how these interact in your specific situation.

This is a recognized category of harm under UAE cybercrime law, describing the specifics helps identify a lawyer with genuinely relevant experience.

This is a sensitive situation a lawyer can help navigate, describing the circumstances as clearly as you’re comfortable with helps us consider genuinely relevant expertise.

In some cases, a lawyer can advise on immediate protective steps, such as securing accounts or notifying relevant institutions, alongside pursuing your broader matter.

Investment scams are a recognized and increasingly common category, a lawyer can advise on what recovery or reporting options may be realistically available.

Not necessarily, a lawyer can advise on whether and how to make a report as part of addressing your overall situation.

While this is more of a technical and compliance matter than a purely legal one, some lawyers can point you toward relevant guidance as part of addressing an incident.

No, this page covers online and digital-specific defamation or insult. Offline defamation, something said in person or in a physical setting, falls under general criminal law, our Criminal page is the better starting point for that.

Article 43 of the UAE's cybercrime law, Federal Decree-Law No. 34 of 2021, makes it an offence to insult someone online, or to attribute something to them that would expose them to punishment or contempt. Capture links, screenshots, dates and account names first, then report the content to the platform. Insult and defamation of individuals are generally prosecuted only on the victim's complaint to the police or Public Prosecution, filed within three months of learning of the statement and who made it; online cases can raise separate questions, so take advice promptly rather than relying on the three months. Separately, the Civil Transactions Law treats harm to honour and reputation as moral harm that can be compensated. The cybercrime law can also apply to posts from abroad that harm UAE nationals or residents. LEXNOVA's page on being defamed or insulted covers each route; if you are the one accused, see I'm Accused of Insulting Someone Online.

It depends on whether the seller itself was ever real. If the storefront was a fake designed purely to take payment, that’s fraud, and this page is the right starting point. If the seller is real but the product was defective, misdescribed, or a return was refused, that’s a commercial dispute better handled through our Consumer Protection page.

If someone committed fraud against you, unauthorized access, phishing, a scam, this page addresses that directly. If your dispute is instead with the bank itself, for example it won’t reverse a transaction you’ve already reported, our Banking & Finance page covers that angle.

Treat it as two problems at once: an account takeover and a threat. First secure what you still control: the email address and phone number linked to the account, your passwords and other sessions, two-step verification, and the platform's hacked-account recovery process. Keep evidence of the threat, including screenshots that show the account name, the dates and any payment details demanded, and do not send money, negotiate or delete messages. Report the takeover and the threat together to the police of the emirate, including through its official online reporting channels, and to the platform. If the person may use the account to impersonate you, warn your contacts. Threatening someone online to force them to act is itself an offence under the UAE's cybercrime law. You can flag your request as urgent.

How LEXNOVA Works

We consider the nature of the incident, whether it involves fraud, hacking, harassment, or another form of cybercrime, and other relevant details, with every potential introduction reviewed by a person.

No, a general description of what happened is enough at this stage, sensitive account or financial details are best shared directly with the lawyer once introduced.

No, LEXNOVA does not guarantee outcomes, our role is to help connect you with a potentially suitable lawyer who can properly assess your specific situation.

Fees & Timelines

Cost generally depends on the matter's complexity, whether it proceeds to litigation or settles early, the seniority of the lawyer engaged, and whether billing is hourly, fixed-fee, or retainer-based. LEXNOVA does not set or control fees — ask any introduced lawyer for a written estimate before engaging them.

Costs vary based on the complexity of the matter and what’s involved, this is best discussed directly and openly with the lawyer you’re connected with.

Acting quickly can matter, both for preserving evidence and limiting further harm, marking your request as urgent helps us prioritize accordingly.

LEXNOVA is not a law firm and does not provide legal advice, legal opinions, legal representation, or legal services. Any legal advice or representation is provided directly by the independent legal professional engaged by the client.

A connection or introduction does not constitute a guarantee, endorsement, or assurance of outcome. Users should independently confirm the professional's qualifications, authorization, fees, scope of engagement, and suitability.