UAE Deepfake Laws

Deep fake scams are common worldwide and United Arab Emirates is not an exception. Previously, artificial intelligence (AI) was used to create and enhance content for marketing purposes, creativity, problem solving matters and much more. By law, Making or sharing deep fake content is not automatically illegal, but it becomes a crime when used for malicious purposes like fraud, defamation, harassment, or non-consensual intimate imagery. It means it can be either legal or illegal, and depends on its creation and purpose. In response to the adverse effects of artificial intelligence (AI) and the increasing number of criminal activities, the UAE authorities have introduced deepfake laws. One of the UAE Deepfake Laws addresses defamation, breach of privacy, and the spread of misinformation among the masses. Criminal offences of deepfake scams are penalised under Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes.

A deep fake can be an image, audio or video clip, which is created using AI platforms to imitate a real person’s face, voice or his actions. It is done for making it appear he said or did something he never did. AI usage is not prohibited, if using in creative work. This is legal in the UAE. However, a deepfake becomes Illegal when it is uses without consent of a person, or it damages reputation of that person. Therefore, UAE government imposes severe penalties, including fines and imprisonment, if someone is found breaching deep fake laws.

There is no single dedicated law to penalize deepfake acts. Instead, harmful deepfakes are prosecuted under existing legislation, mainly Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes, in force since January 2022. Which provision applies depends on how the deepfake was used. The Federal Decree-Law No. 34 of 2021 has been enforced since January 2022. Under this law, fabricated information or any misleading content is penalised in the UAE. The financial penalties range from AED 150,000 to AED 500,000. Moreover, the offender might be imprisoned.

Additionally, the Personal Data Protection Law imposes penalties when a fake voice or face is used to defame a person. Personal Data Protection Law; Federal Law No. 45 of 2021 is enforced when personal data is fabricated through voice or physical appearance online. Another scenario for implementing the deepfake law is when a scam has occurred. For example, a person has been tricked through a cloned voice, or their fake video has been circulating for money extortion.

Alongside its cybercrime and data-protection legislation, the UAE has developed policy frameworks for responsible artificial intelligence. These policy frameworks complement, but do not replace, the UAE’s criminal, cybercrime and data-protection laws.”

Individuals who are blackmailed through cloned voices or videos. Sometimes, the scammer would impersonate an acquaintance and ask for money. Secondly, employees could be victims of deepfake scams. They may get a fake call from their director to transfer money to a random account. Additionally, crime offenders may use deepfake videos of public figures to announce fraudulent schemes.

It is crucial to report deepfake scams. Therefore, the affected person should share information carefully with authorities:

Collect Evidence. One should not try to take down the content or destroy it before reporting to the authorities. The victim must copy the URL or take screen recordings and screenshots to keep the evidence safe. To collect more evidence, the scammer’s contact details should be reported to authorities. A contact detail could be a WhatsApp number or a social media account. They might also be connected with you through an email.

Do not pay or engage with the scammer. It is advised that the victim that they must not respond to demands for money or extortion. It can make the case more complicated because the scammer may destroy the evidence after meeting their demands.

Report to the authorities. The UAE police department has made developments in complaint mechanism systems. Offenders can be reported for a case through a digital portal.

Ask for Legal Advice in the UAE. Meanwhile, you can also seek legal solutions. Any moral or financial damage can be claimed if the evidence proves the offender guilty. We have experienced lawyers to provide legal advice and full legal support on such matters.

In the UAE, compensation for damages can be claimed by the victim by filing a civil lawsuit. Civil law lawyers can be hired for the purpose. The claim could be against damaging the psychological, financial and reputational matters. Moreover, these factors can be reflected through digital view counts, reshared content or reach on social media. Therefore, the victim must record such evidence.

Businesses are vulnerable to deepfake risks in two ways. Criminals may use deepfakes to impersonate a senior manager, whereas employers may face reputational damages if the employee has misused the information. Companies should safeguard their transactions by ensuring a strict verification process and maintaining internal policies to combat AI-generated content in the future. Companies can reduce these risks by requiring callback verification and dual approval for payment requests, especially urgent ones made by phone or video. They should train staff to recognize impersonation attempts, adopt a clear policy on the acceptable use of AI tools.

The UAE continues to strengthen laws for artificial intelligence by developing policies, laws, and a cybersecurity framework. Cybercrime laws have played a vital role in fighting cases of AI-generated and deepfake content. In 2024, Federal Law No. 5 ensured that the idea of manipulated content shall not be changed. The UAE Charter has emphasised privacy, data security, transparency, accountability, safety and compliance with laws. Moreover, the UAE’s International Stance on Artificial Intelligence Policy has to follow principles of progress, community, collaboration, ethics, sustainability and safety while contributing to AI discussions at the international level. Officially, this policy was updated in June 2026. It is important to understand that the policy does not replace the UAE’s cybercrime laws.