UAE warns against phishing links and online blackmail as cyber fraud risks grow

Abu Dhabi: Legal adviser Abdullah Al-Harbi, from the General Secretariat of the National Committee to Combat Money Laundering, Terrorism Financing and the Financing of the Spread of Weapons, has warned against online blackmail and phishing, stressing that responding to blackmailers or clicking on fake links impersonating banks can expose people to the theft of personal data and money. Speaking as part of the General Secretariat's "Moment of Awareness" programme, Al-Harbi warned against phishing attempts involving fraudulent messages that use the names and logos of banks or other trusted entities. Such messages may claim that an attempt has been made to access a person's account and ask the recipient to click on a link to confirm their identity. Al-Harbi said responding to such messages and entering personal information through the links could amount to handing the data directly to fraudsters. He explained that Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes penalises anyone who obtains another person's money through fraudulent means or by using a false name or impersonating another person through an information network or information technology. He added that impersonation does not necessarily involve a bank. Fraudsters may also impersonate people or organisations that victims know and trust. While the law punishes perpetrators, he stressed that protecting personal data and money begins with users themselves. Al-Harbi said banks in the UAE do not ask customers to update banking information, passwords or verification codes through text messages or unknown links. He urged people not to click on suspicious links and to verify requests through official channels. In a related warning, Al-Harbi urged people not to respond to online blackmailers, saying doing so could lead to repeated demands and serious consequences. Anyone subjected to blackmail should not respond or negotiate with the perpetrator, he said. Instead, they should preserve all evidence and immediately report the incident to the competent authorities. Al-Harbi warned that cyber extortion begins with a demand and may not stop after the victim responds, adding that paying a blackmailer could lead to further demands for money. He also highlighted the importance of building trust with children and encouraging them to seek help without fear if they encounter online threats. He warned against believing a blackmailer's promise to delete material in return for payment, saying victims could subsequently receive another message demanding more money. Legal adviser Abdullah Al-Harbi, from the General Secretariat of the National Committee to Combat Money Laundering, Terrorism Financing and the Financing of the Spread of Weapons Al-Harbi said UAE legislation treats electronic blackmail as a serious crime. Federal Decree-Law No. 34 of 2021 provides penalties for anyone who uses information technology to threaten or blackmail others, with increased penalties in cases where the threat is linked to a demand or benefit. He advised families to watch for behavioural changes in children and ensure they feel safe and confident enough to report threats without fear. "Reporting protects you, and adhering to the law protects you and your community, and the security of the homeland is everyone's responsibility," he said. Phishing threat Meanwhile, a report by cybersecurity company Kaspersky said phishing remained one of the most common cyber threats, with attackers directing users to fake websites where they may unknowingly disclose account login credentials, personal information or bank card details. Phishing campaigns monitored by Kaspersky between January and September 2025 showed that 88.5 per cent of attacks targeted login credentials for online accounts, while 9.5 per cent targeted personal information such as names, addresses and dates of birth. A further 2 per cent targeted bank card details. Kaspersky data also showed that users in the Middle East clicked on more than 47 million phishing links between November 2024 and October 2025.