A convincing "delivery fee" link, a fake bank call, a cloned card — UAE residents lose real money to these daily, and the first hour matters more than anything else. Here is the recovery playbook, and what banks are actually obliged to do.
Act in this order
- Call your bank immediately and report the unauthorised transactions. Ask them to block the card or account and attempt recall of the funds.
- File a formal complaint with the bank. This triggers their investigation — get a reference number.
- File a police complaint with full transaction details and every piece of evidence: messages, numbers, links, screenshots.
Fraudsters move money onward fast; every hour of delay shrinks the recoverable amount.
What banks must do
UAE consumer protection rules put real obligations on licensed financial institutions. Banks must maintain updated security systems, build consumer awareness of financial crime, and — the part that matters to victims — compensate customers for losses from financial crimes within a reasonable timeframe.
The exception: banks are not liable where the loss resulted from the customer's gross negligence or fraudulent behaviour. In practice, disputes turn on exactly this line, which is why your evidence matters:
- Show you did not interact with the fraudulent site or share credentials
- Document that the loss was not caused by negligence on your side
- Keep records of every communication with the bank
If the bank stalls
Unsatisfied with the bank's answer? Escalate to the Central Bank of the UAE, which investigates consumer complaints against licensed institutions and can direct resolution. That escalation path costs nothing and changes banks' incentives considerably.
The criminals themselves face Federal Decree-Law No. 34 of 2021 (the Cybercrime Law): card cloning and hacking carry imprisonment and fines of AED 200,000 to 2,000,000.
Prevention in one paragraph
Your bank will never call asking for your card number, OTP or online banking password. No genuine delivery company collects fees by SMS link. And any "investment" recruiting on WhatsApp with guaranteed returns is a scam by definition. New to UAE banking? Set your accounts up safely from day one with our bank account guide.
Key takeaway
Report to your bank in the first hour, file a police complaint with evidence, and escalate to the Central Bank if the bank's answer disappoints. Banks must compensate financial-crime losses unless your own gross negligence caused them — so document everything.
FAQ
Will my bank refund money lost to a scam?
Banks must compensate losses from financial crimes within a reasonable timeframe — unless the loss came from your gross negligence or fraud. Whether sharing an OTP counts as gross negligence is exactly what investigations examine.
The bank rejected my complaint. What now?
Escalate to the Central Bank of the UAE with your complaint reference and evidence. It investigates conduct of licensed institutions and can direct a resolution.
Should I bother with a police report for a small amount?
Yes. The police report strengthens your bank claim, feeds action against the fraud network, and some banks require it before processing any refund.
What punishment do scammers face in the UAE?
Under the Cybercrime Law, card cloning and hacking carry imprisonment plus fines from AED 200,000 to AED 2,000,000.
