UAE Cybercrime Crackdown Escalates Following Iran War in the Gulf - By Radha Stirling, Expert Witness, Crisis Manager and Founder of Detained in Dubai. 29 March 2026
Cybercrime Laws In Depth - A background report by Detained in Dubai
UAE's mass cybercrime arrests and desperate struggle to manage Dubai's reputation
Since the outbreak of the Iran war in the Gulf, the United Arab Emirates has implemented an extensive cybercrime enforcement campaign targeting individuals who filmed, shared, or discussed events linked to missile and drone activity.
What began as public warnings has rapidly escalated into widespread arrests, detention, and prosecution of residents, tourists, workers, and students of multiple nationalities.
We have received reports of more than 100 individuals currently in detention. Police sources have confirmed additional cases, corroborated by multiple independent accounts. While the exact figure remains unclear, the true number is likely to be in the several hundreds.
More concerning is the increasing classification of these cases under national security frameworks, exposing individuals to severe penalties, prolonged detention, and significantly reduced access to due process.
A Pattern of Enforcement
Across dozens of cases reviewed, a consistent pattern has emerged:
· Individuals are being detained merely for taking photos or videos, even where the material was not shared or published
· Private messages to family and friends are triggering arrests
· Forwarding or interacting with content can result in detention, even where the individual did not create it
· In some cases, simply receiving an image and failing to delete it has reportedly led to arrest
· Cybercrime cases are being escalated to national security authorities in Abu Dhabi
· Many individuals were unaware their actions were prohibited, with numerous cases relating to incidents that occurred before widespread warnings were issued
· Enforcement appears inconsistent and, in some cases, arbitrary, with similar conduct resulting in different outcomes
· Police are reportedly approaching individuals in public spaces and requesting access to their phones, with arrests made where relevant images or videos are found
· Following incidents such as drone strikes, missile activity, explosions, or fires, authorities are reportedly identifying individuals present in the area, compiling lists, and approaching them days later for questioning and device inspection, in some cases up to nine days after the event
They're hunting them down.
What Families and Detainees Are Telling Us
Families are describing fear, confusion, and desperation.
“We just found out his case has been moved to national security. We are shocked. Why?”
“He hasn’t done anything wrong. He didn’t even know it was prohibited.”
“He hasn’t seen a lawyer. He didn’t know his hearing date.”
“He is sleeping on the floor. He is sick. He has no money, no food.”
“Please help my brother. He is suffering.”
“They opened a criminal case and now I’m really scared.”
“I didn’t have any bad intentions. I only shared it privately with friends.”
“Our son has been detained since early March.”
“He shared a video in a private work group to ask if it was safe to go to work.”
“He is being held with around 60 others. No lawyer. No consulate.”
“We have had just one phone call. No visitation.”
“We are devastated. We are desperate.”
“He is a student. He just forwarded a few videos in our family group.”
“He didn’t make the videos.”
“They checked his phone and took him.”
“Please help him.”
These accounts are consistent across nationalities and cases.
Case Studies: Ordinary Actions, Severe Consequences
A British man in his 60s was charged alongside 20 others under cybercrime laws in connection with missile-related footage, demonstrating that tourists are being directly affected.
Canadian, Russian, and German nationals were arrested after privately sending a photo of a drone strike on their own residence to family members to confirm they were safe.
A 20-year-old French resident was detained after sending a video to his parents. Reports indicate multiple French nationals have been arrested with at least 12 having been bailed and 2 allowed to leave the country, highlighting disparities in outcomes even where the charges have been the same.
A British airline employee was detained when, upon arriving at DXB, he shared a photo of the airport with a private group of colleagues to ask whether it was safe to walk through the airport. Detained in Dubai has contacted his MP, Ms Oppong-Assare for support.
A Filipina domestic worker was arrested after taking a photo while waiting to begin work. Her family are very worried for her safety, particularly given that Filipina maids are not a priority for diplomats, the UAE government or the international media.
An Indian university student was detained for forwarding videos within a family group. He did not create the content but was arrested while strolling the Palm.
A Vietnamese seafarer was arrested upon arrival in Dubai for photos taken outside UAE jurisdiction.
A Russian tourist shared footage privately, believing only public posting was restricted. He was detained and his devices seized.
A man who filmed a fire in a car park was escalated to State Security. His family report denial of medication, lack of food, and severe detention conditions.
Inside Detention: Conditions and Concerns
Accounts from detainees describe:
· Overcrowded cells, with 50–60 detainees in shared spaces
· Sleep deprivation, in some cases exceeding 48 hours
· Individuals required to sign statements in Arabic on a tablet
· Limited access to food, medical care, and communication
· Lawyers refusing to represent cases under ‘national security’ framework
· Embassies given restricted access or outright denied
Scale of Arrests
While official figures reference smaller groups, multiple reports indicate:
· clusters of 20+
· groups of 35, 45 and 60 people detained
· additional unreported cases across emirates
Based on consistent evidence, the number of affected individuals is likely in the hundreds.
Legal Escalation: From Cybercrime to National Security
According to top law firms, most cases are being escalated beyond standard cybercrime provisions.
Under national security frameworks, individuals may face:
· 5 to 15 years imprisonment, or potentially life sentences
· Fines reaching approximately USD 500,000
· Prolonged or indefinite pre-trial detention
· Restricted access to lawyers, embassies, and evidence
· Human rights violations and torture
This represents a significant shift in legal exposure, from up to 2 years in prison to indefinite detention at the whim of the authorities. We have received a report that 15 people, including a British citizen, were beaten by police in detention.
The Chilling Effect
A wider impact is now evident.
People are increasingly afraid to communicate, send messages, document events or share information or a news article, even privately.
Many are choosing to remain silent, unsure whether even routine communication could expose them to criminal liability and unsure to what extent authorities are surveilling the population.
At the same time, ·media coverage has become noticeably restrained, public discourse is limited and influencers are closely aligned with official messaging. There is a visible and sudden influx of pro-Dubai accounts with few followers deployed by the government to address negative content on social and news media sites. Part of Iran's war is to destroy public confidence in the UAE. Information warfare is part of any conflict. If the UAE stopped targeting expats and tourists, it would stop playing into Iran's hands.
The UAE has invested heavily in cultivating a global image through influencer marketing and state-supported initiatives, including training and coordination programmes designed to shape online narratives.
Those who promote the country and align with official messaging appear to operate with a degree of protection, while ordinary residents and visitors who deviate, even unintentionally, face severe consequences.
This creates a stark imbalance where positive narratives are amplified and rewarded while uncontrolled or unsanctioned content is penalised and silenced.
This is not new. Celebrities and influencers have long been used to promote the UAE while being shielded from the legal realities faced by others. For example, Ricky Martin publicly promoted Dubai despite laws that criminalise homosexuality, at a time when individuals were jailed simply for being gay.
What life's REALLY like in war-torn Dubai: The glittering tax-free influencer fantasy is unravelling as expats are arrested and treated as criminals for simply taking a photo of drone damage and sending to worried relatives | Daily Mail Online
For hundreds of thousands of Brits fed up with rising crime, red tape and the high cost of living, a sun-soaked, tax-free lifestyle has proved irresistible.
Read More
There is growing concern that individuals are being encouraged to visit and invest in the UAE through highly curated portrayals of safety and opportunity, without being adequately informed of the physical and legal risks. Influencers and government operated social media accounts are trying to counter the official travel advice from foreign governments that are warning citizens to avoid all travel to the UAE, including transit. They are warning people to leave now before it's too late. Dubai supporters are contrasting that advice by claiming it is still safe and "there is nowhere else I'd rather be".
Historically, this imbalance has been evident. High-profile figures and celebrities have promoted the UAE internationally while being insulated from the legal consequences that ordinary individuals could face for similar conduct.
This raises serious questions about transparency, informed consent for travellers and the responsibility of both governments and corporate partners.
Airlines, tourism bodies, and international partners continue to promote the UAE as a safe destination, yet there is little evidence of meaningful efforts to communicate the extent of legal exposure individuals may face.
The result is an environment where the image of safety is carefully maintained while the reality of risk is not clearly communicated
The UAE's Coordinated Astroturfing and Online Reputation Defence Campaigns
If high profile influencers wasn't enough:
During the March 2026 escalation of regional tensions, including Iranian missile and drone strikes affecting Gulf airspace and prompting international travel warnings (such as Australian government advice to leave or avoid transit through the UAE), a noticeable surge occurred in defensive online activity on platforms like X and under news articles. Low-follower accounts, often with default avatars, minimal organic history, or recently activated profiles flooded comment sections with repetitive dismissals of negative coverage. Common tactics included blunt claims of “fake news,” “I live here and everything is normal,” accusations of selective pessimism or jealousy, conspiracy framing (e.g., “Zionists and Ikhwani”), or downplaying impacts by citing population size or isolated examples like store openings.
These accounts typically exhibit little to no unrelated personal content and activate in tight clusters precisely when stories highlight empty malls, tourist exodus, hospitality layoffs, flight disruptions, or economic risks. This pattern aligns with organised reputation-management efforts rather than spontaneous grassroots responses. While many appear to be real individuals typing the comments (varied phrasing and occasional local knowledge), the volume, timing, and disproportionate focus suggest coordination through PR agencies or outsourced teams, a tactic observed in past Gulf image-management campaigns.
This pushback operates alongside stricter regulatory controls on content creators. Effective February 2026, the UAE Media Council made an Advertiser Permit mandatory for influencers and anyone posting promotional (paid or unpaid) content online. Permit holders must comply with 20 mandatory content standards, display their permit number publicly, and avoid material that could harm “national unity,” public security, or the economy. Violations risk permit revocation, fines, or legal action. Many of Dubai’s estimated 50,000 influencers, who often hold Golden Visas or rely on tourism/real-estate ties, have strong incentives to align with positive narratives during crises.
Complementing influencer oversight are aggressive cybercrime enforcement measures. UAE law (including Federal Decree-Law No. 34 of 2021 and Article 52 on rumours) criminalises the publication or sharing of “false news, rumours or provocative propaganda” that may incite panic, disturb public security, or harm the economy with penalties of one to two years’ imprisonment and fines from AED 100,000 to 200,000, escalating during crises. In March 2026 alone, authorities charged individuals for filming or sharing footage and commentary related to the strikes, with warnings issued against content contradicting official statements. Dubai Media Office and police publicly urged residents to “sidestep rumours” and rely solely on verified government sources, framing negative reporting as potentially illegal.
Together, permit-driven influencer self-censorship, direct cybercrime threats, and coordinated low credibility comment campaigns create a multi-layered system designed to suppress dissenting narratives and manufacture the appearance of consensus that “life continues as usual.” While protecting the UAE’s critical tourism and investment image (which accounts for a significant portion of GDP), such measures risk chilling legitimate discussion of verifiable risks, including government travel advisories and observable economic impacts.
Economic and Social Impact
The perception of safety in the UAE has been affected by:
· Regional conflict
· Legal uncertainty
· Aggressive enforcement
· A growing perception of increasingly authoritarian and unpredictable governance
The impact extends beyond tourism and is affecting multiple sectors:
· Tourism and hospitality, impacted by declining perception of both physical safety and legal risk
· Aviation and transport, facing operational, safety, and workforce challenges
· Media, marketing, and influencer sectors, increasingly constrained and self-censoring
· Corporate and multinational operations, navigating legal exposure and staff safety obligations
· Foreign direct investment, deterred by regulatory unpredictability and regional instability.
· Events and exhibitions, experiencing reduced attendance amid safety and legal concerns
· Maritime and logistics, exposed to both security threats and cross-border enforcement risks. Lengthy shipment delays are being reported by staff at the ports which is creating a supply chain challenge.
The current environment is creating a dual risk landscape, where both physical safety concerns and legal uncertainty are influencing behaviour across multiple sectors.
While long-term recovery is likely, the short to mid-term impact and knock-on effects are likely to be significant. Even if the UAE stabilises quickly at a national level, the consequences for individuals, investors, and business owners will be far more severe.
We have seen this before. During previous economic crises, foreign nationals were disproportionately targeted through the legal system, with aggressive debt enforcement, asset seizures, and criminal complaints used to recover losses.
There are numerous documented cases where individuals lost their businesses, assets, and freedom through what can only be described as coercive and exploitative practices.
These actions were not limited to private actors. In many cases, banks and state mechanisms were directly involved in pursuing foreign nationals under financial pressure.
See the case of Ryan Cornellius who remains in prison after his business and assets were looted:
There is a real and justified concern that similar patterns will emerge again, particularly as economic strain increases. The laws haven’t changed to afford protections and this kind of abuse has continued over the past decade. We expect it to increase in prevalence following the Iran conflict.
Trapped in Crisis: Travel Bans
Many individuals remain unable to leave the UAE due to civil-related travel bans.
These cases:
· are often non-criminal
· predate the current crisis
· Lead to homelessness as their employment visas can’t be renewed
· Are a death sentence as for the late veteran, Robin Berlin who died trying to flee the desert
Despite this, individuals are unable to exit, exposed to ongoing regional risks, at daily risk of dying in a drone attack or explosion and living in fear, often while caring for young children
There are increasing calls to lift or suspend non-serious travel bans and allow individuals the choice to leave safely
It’s important to note that UAE civil claims can be enforced internationally in most jurisdictions with the UK even having a mutual enforcement treaty that allows banks and claimants to recover funds abroad. The UAE banks have also used the Interpol Red Notice system to have debtors jailed abroad, often for low amounts like $5,000.
Legal Reality
People are being exposed to serious criminal liability for actions they did not understand to be prohibited and have been arrested for:
· Filming or photographing incidents, whether or not the material is shared
· Sharing content publicly or privately
· Forwarding or redistributing material, including content they did not create
· Communicating privately via messaging platforms
· Commenting on or interacting with content online
· Sharing or commenting on news articles or posts
· Expressing opinions that may be considered critical, negative, or contrary to official narratives
· Publishing or circulating information deemed to be false, misleading, or unverified
· Disseminating content considered harmful to public order, state security, or the reputation of the state
· Content that may be interpreted as inciting fear, panic, or public disorder
Almost anything can be deemed unlawful under these vague and oppressive laws. Authorities are afforded broad discretion in how they interpret and enforce them.
What is particularly concerning is that enforcement is extending beyond public activity to private communication and even conduct outside the UAE. Anyone who has potentially committed any of the above acts before visiting the UAE, can be arrested for the next five years under these extraterritorial laws”. We have seen it in previous cases like that of Laleh Shahravesh who was detained over a Facebook post made years before visiting Dubai.
A Defining Reality
We are seeing ordinary people caught in extraordinary circumstances.
What begins as a simple act, sending a message, taking a photo, asking if it is safe, can escalate into detention under national security frameworks.
There is an urgent need for clarity, proportionality, and humanitarian consideration. We have urged diplomats to release people who have innocently taken a photo where they have clearly meant no harm. Let them return to their homes and families and free them from this most stressful time.
Selective Responsiveness to Allied Pressure
The UAE’s deepening security partnership with the United States, including cooperation on regional stability, counterterrorism, maritime security in the Strait of Hormuz, and advanced technology and defense initiatives, has strengthened its strategic leverage. This close alignment appears to embolden Abu Dhabi in its domestic narrative control measures, including coordinated astroturfing campaigns, influencer regulation, and cybercrime enforcement.
Security agreements with the Emirates are understood to be a key factor behind Western governments’ measured approach to public communications. Allies have often issued relatively restrained travel warnings or avoided stronger language regarding risks in Dubai, even amid visible economic impacts, flight disruptions, and security incidents. This restraint is widely perceived as an effort to support the UAE’s image as a stable hub and to avoid undermining a critical security partner. In practice, it can result in governments appearing to help manage or downplay coverage of issues that the UAE views as damaging to its reputation.
In contrast, the UAE has shown less responsiveness to concerns from European Union allies and the UK on matters such as consular access and media reporting. This asymmetry highlights how security partnerships can influence the tone and intensity of allied criticism, allowing the UAE greater confidence in pursuing aggressive online reputation defence and legal measures without facing unified pushback.
Final Line
In the current environment, the greatest risk may not be what people say, but that they are now too afraid to say anything at all.
The UAE’s image is becoming increasingly authoritarian. People want to be safe, but they do not want to live in fear of arrest either. Many have already left while others are packing their bags, looking for an alternative life under another sun.
We have been contacted by residents of Dubai seeking recommendations for alternative places to take up residence. In 2009, many fled to Spain, Cyprus, Thailand and Florida. We’re seeing a similar pattern now.
