Identity Theft in the UAE is a growing concern, and it involves illegally using another person’s personal or financial information without their knowledge or consent.
In the UAE, several federal laws treat identity theft as a serious criminal offense.
This article explains the laws governing identity theft in 2025 and how our law firm can assist if you’re a victim or falsely accused.
Contact our expert lawyers & legal consultants in UAE. Click the WhatsApp icon below.
Table of Contents
Identity Theft in the UAE Laws
Identity theft is not treated lightly in the UAE. The law addresses this issue from several angles, including document forgery, data misuse, cybercrime, and online fraud.
Several federal laws provide a legal framework to deter and punish identity-related offenses. Below is a detailed breakdown of how UAE law tackles identity theft.
Identity Theft in the Crimes and Penalties Law
This law is the foundation for addressing identity-related crimes in the UAE.
Federal Law by Decree No. (31) of 2021 on Crimes and Penalties outlines the legal treatment of forgery, impersonation, and misuse of documents and standard methods used in identity theft.
Forgery of Documents
Forgery is a core aspect of identity theft. Articles 251 to 253 and 258 of the law define forgery as altering a document with the intent to use it as genuine.
This includes:
- Altering text, numbers, photos, or forging a signature.
- Using another person’s signature or thumbprint without consent.
- Creating fake documents or impersonating someone.
Forgers of official documents may face imprisonment for up to ten years, while non-official document forgeries are also punishable by incarceration.
If a person knowingly uses a forged document, they will face the same punishment as the individual who committed the forgery.
Furthermore, impersonating someone in any document made to verify identity is also criminalized and can lead to serious legal consequences.
Cyber Identity Theft and Online Impersonation Law
Federal Decree-Law No. (34) of 2021 on Countering Rumors and Cybercrimes deals with identity theft in the digital space.
This law targets offenses involving online fraud, data misuse, and the creation of false digital identities. The aim is to protect individuals and institutions from modern identity misuse.
Misuse of Personal Data
According to Article 6, accessing, modifying, copying, deleting, or sharing someone’s electronic data without permission is a punishable offense.
If the data includes medical records, bank details, or e-payment information, the offense becomes more serious due to its sensitive nature.
Offenders can be sentenced to at least six months of imprisonment and/or fined between AED 20,000 and AED 100,000.
This is considered an aggravating factor if the information is sensitive, potentially leading to harsher penalties.
IP Address Circumvention
Article 10 criminalizes circumventing an IP address, particularly when it is done to commit a crime or evade detection.
This behavior is often used to mask the real perpetrator in identity theft cases.
Anyone guilty of this offense can face temporary imprisonment and/or a fine ranging from AED 500,000 to AED 2,000,000.
Fake Digital Identities
Under Article 11, creating fake websites, social media accounts, or emails and attributing them to someone else is a serious crime.
The penalties increase if these digital tools are used to offend or defraud others.
Those who create fake accounts or emails may be fined between AED 50,000 and AED 200,000 and face imprisonment.
If the account is used offensively, the offender can face at least two years in prison.
If the fake identity is linked to a government entity, the punishment can reach up to five years of imprisonment and a fine of up to AED 2,000,000.
Online Fraud Using False Identity
Article 40 addresses internet fraud, which involves using a false identity to obtain money, documents, or other assets unlawfully.
Offenders may be sentenced to at least one year in prison and/or fined between AED 250,000 and AED 1,000,000.
Learn more about Cyber Crime Laws, UAE.
Personal Data Protection and Consent Law
Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data strengthens protection against identity theft by regulating how personal information can be collected, processed, and used.
Consent Requirements for Data Use
Article 6 of this law emphasizes that no personal data may be used without the subject’s clear, informed, and freely given consent. The law requires that:
- Consent should be documented clearly and easily accessible.
- The individual must be able to withdraw consent at any time.
- The organization or controller must be able to prove consent was obtained.
Failure to comply with these provisions could lead to data misuse claims.
It may be linked directly to identity theft charges, particularly if the data is used to impersonate someone or commit fraud.
For Dubai Fininsail Center cases, learn about DIFC data protection law.
Identity Theft Lawyers in Dubai, UAE
With a strong legal foundation now outlined, knowing where to turn for help is essential. Cases of identity theft in the UAE require a swift legal response, whether you’re a victim or have been accused.
Our law firm in the UAE specializes in sensitive matters and provides various services tailored to identity theft cases.
Criminal Defense for Identity Theft Accusations
We represent clients who are wrongfully accused of identity theft or related cybercrimes. Our Criminal Lawyers in Dubai are skilled in defending forgery, data misuse, and impersonation charges.
We analyze the evidence, challenge the prosecution’s case, and advocate for dismissal or reduced charges when appropriate.
Victim Representation and Compensation Claims
If you are a victim of identity theft in the UAE, we can assist in filing criminal complaints, tracing digital breaches, and pursuing civil compensation claims.
Our firm helps restore your legal identity and recover financial losses where applicable.
Digital Forensics and Evidence Gathering
Our legal team works with certified digital forensic experts to gather technical evidence, trace cyber activity, and identify perpetrators.
This is essential in both criminal prosecutions and civil claims.
Compliance with UAE Data Protection Laws
We advise clients on proper data handling, especially businesses, to ensure they comply with consent and data protection laws.
This includes preparing consent forms, privacy notices, and training on compliance protocols.
Cybercrime Reporting and Legal Action Support
We help clients navigate the cybercrime complaint process, report incidents to the relevant UAE authorities (such as the Cybercrime Department), and take swift legal action to prevent further harm.
Learn How to Report Cybercrime in the UAE.
FAQs about Identity Fraud in the UAE
Identity theft in the UAE is heavily regulated and has serious legal consequences.
Whether through forged documents or digital impersonation, the UAE’s legal framework is robust and precise.
If you’re a victim or accused of identity theft, our law firm is here to provide expert legal guidance and defense.
Protecting your identity starts with knowing your rights—and acting fast.
A law graduate and legal writer focusing on UAE law, he became known for his ability to clarify complex legal concepts through his writings. His work simplifies the intricacies of the legal landscape in the Emirates, helping both locals and expatriates navigate their legal concerns.
