AI Voice Scam UAE: Legal Framework, Risks and How to Respond

People in the UAE have fallen victim to AI-generated voice scams. An AI voice scam in the UAE occurs when a perpetrator uses a fake voice/ai generated voice during a phone call. Voice phishing in the UAE usually targets victims who are unaware of the latest AI voice-changing techniques. Any sensitive information disclosed to an untrusted party can lead to a bigger scam. Under UAE law, primarily through Federal Decree-Law No. (34) of 2021 on Combating Rumours and Cybercrimes, AI voice deception cases are punishable. Depending on the offence, the offender could be sent behind bars for a year and also pay a hefty financial penalty (AED 250,000 to AED 1 million). Victims are advised to report these crimes to security units, including Dubai Police, Abu Dhabi police eCrime units or cybercrime reporting channels and relevant security authorities. Victims may also consult a professional law firm for legal assistance. Depending on the offence, the offender may face imprisonment and/or a fine. As described before, in electronic fraud cases under Article 40, the penalty can include imprisonment for at least one year and/or a fine between AED 250,000 and AED 1 million.

AI voices are generated through readily available software within a few seconds. Deepfake voices are impersonated as a trusted person of the victim, such as a call from a friend or a family member. In 2020, a case was reported where a bank manager fell victim to synthetic voice fraud and transferred USD 35 million in the UAE. The case raised concerns for the UAE cybercrime department, leading to increased efforts to reduce AI voice scams in the region. The case highlighted the growing risks of synthetic voice fraud and the need for stronger verification controls, cybercrime reporting, and public awareness in the UAE.

The voice cloning scam in the UAE is controlled by the cybercrime department, criminal investigation and a data privacy policy. Voice cloning scams in the UAE are investigated through police and cybercrime reporting channels.
Victims should preserve evidence, avoid deleting call logs or messages, and immediately notify the bank or report the matter to the relevant police authority. Professional criminal law lawyers can also be hired for registering the police complaints.

Article 40 criminalises the obtaining of money, documents, and other benefits through fraudulent electronic means. AI-generated audio scams may fall under these provisions to deceive victims. The perpetrator can be imprisoned for a year. They may also be fined between AED 250,000 and AED 1 million per offence. Further, Article 44 and Article 43, sets out penalties for defamation if the cloned voice is used to spread misinformation and false statements about the person. Damaging someone’s reputation in the UAE can lead to 6 months’ imprisonment and a fine from AED 150,000 to AED 500,000. Moreover, corporate liability is punishable under Article 58. It punishes the person responsible for the actual management of a legal person if they knew about the offence and their failure contributed to it. It is usually implied when a company employee has committed an offence or failed to perform their obligations. Article 59 orders the shutdown of websites and platforms that facilitate impersonation. It means that after conviction, the court may order punitive measures, including closing or blocking the violating website. After conviction, Article 59 allows the court to order additional measures, including closing or blocking a violating website or platform where technically feasible.

The scammer learns about the target and makes deepfake audio, pretending to be from their organisation. The impersonated voice may target the finance manager to request money transfers.

The scammer would make a convincing story by using a cloned voice. Throughout the conversation, the criminal would pressure the victim for a quick payment. Throughout this matter, the victim believes that the call is real. AI impersonation fraud leads to financial loss and emotional distress for the victims.

1. Never Come Under Pressure: The individual should be careful on the phone call. They must never come under pressure and make a transaction or any action directed by the scammer.
2. Always re-check: An organisation has specific numbers from which they call. You should always verify the caller’s number, especially if the impersonated person is from the bank.
3. Collect the Evidence. If you have found out about the scam call, then you should document all the evidence. This includes: phone recordings, screenshots, phone number or any other details the scammer has shared with you.
4. Report Immediately. You must quickly report the scam. You can report the case to Dubai Police’s eCrime platform. However, the cybercrime unit can also be contacted. Meanwhile, update your bank about the incident so they do not fall into the trap.
5. Go for Legal Help: If you have made a payment to the caller, ask a lawyer for help.

Businesses should never have single-factor authentication. Scammers would clone voices, but they can never decode the internal protocols of the company. Companies should add another verification step to ensure the call is real or fake.

Companies should provide training to their employees regarding AI voice scams in the UAE. They should let them know in what ways a call can be impersonated at work or in their personal life. Moreover, they should be aware of the cybercrime laws and reporting to keep themselves safe from any scam.

With all the protocols of the company, the company should also limit their daily transactions to avoid financial scams.

• Treating voice recognition only: Individuals usually believe in one kind of voice for the other person. They do not re-think or confirm in another way.
• Failing to report to Police Promptly: The more delay a report is, the less chances are to track the scammer.
• Poor Record Keeping: If the evidence has not been properly documented, it will weaken the criminal case and accountability.

The police department is proactively working to reduce AI voice cloning fraud in the UAE. Dubai Police oversee the crime reporting platforms. However, the Public Prosecution carries the criminal process after it has been filed in court. To further assist individuals, the UAE Cybersecurity Council has also directed businesses to be aware of deepfake and cloned voices used for scams.

AI voice scams are increasing in the UAE. Though cybercrime laws and departments are

established in the UAE, voice cloning scams still occur. The procedural matters should be looked at carefully, especially in businesses where financial transactions happen every day.  Meanwhile, individuals should be careful about every unknown caller ID.

AI voice scams are very dangerous because the victim usually hears a familiar voice. It is quite natural to react emotionally in such scenarios. A scammer mostly creates urgency which creates panic for victim. The request Always comes with pressure, or a warning. We all know that, a genuine caller does not create pressure like this. For individuals, the safest approach is to end the call politely first. Meanwhile do not share OTPs, Bank Account Numbers, or UAE Pass details. For businesses, payment instructions should never be approved through a phone call. Companies should create written approval rules for urgent transfers. A proper approval process may include callback verification, or email confirmation. If money has been transferred, the bank should be informed immediately. The matter should also be reported through the relevant police or cybercrime channels. The main lesson is simple: do not trust voice alone. In the age of AI voice cloning, identity must be verified through independent and secure methods.