Discuss the cybercrime matter with Dr Saeed Al Mazrouei Law Firm and Legal Consultancy, on matters of extortion, threats, fraud, defamation, invasion of privacy, and account hacking, with examination of the evidence, jurisdiction, and stage before determining the action.
Discuss your case via WhatsApp Identify your legal needCybercrime lawyer in Abu Dhabi reviews the incident, chats, accounts, transfers, and reports; determines the client’s capacity, the authority, and the stage; then studies reporting options, defense, content removal, and claims for rights. The service is selected after linking the objective to the evidence and jurisdiction, while separating the criminal track from claims for compensation or recovery of funds.
The names of e-cases are similar, but differences in the message, audience, objective, account identity, and procedural stage change what needs to be examined. Start from your current position, then move to the issue you want to address.
Organize the incident, set the objective, and link each request to its proof before choosing the track.
Organize the facts, evidence, and losses, and determine whether the harm is ongoing. Assess the possibility of reporting and the requests linked to it, and the appropriate financial or civil track, without assuming that every online dispute is a crime.
Bring the summons or full case particulars, together with the original conversation and prior and subsequent facts. Review the attribution of the act to you, the legal characterization, what evidence has been submitted against you, and any existing deadlines.
Identify the affected systems and the authorized person, the sequence of the incident, transfers, and affected parties. The file needs legal and technical coordination that preserves evidence and business continuity.
The review starts with the procedural records, memoranda, reports, and the judgment, not by merely retelling the incident. Examine what is required at the current stage and the relevant deadlines before proposing an action.
Send a chronological summary, and specify your capacity, the file’s stage, and any upcoming deadline.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyHandling a cyber case starts by understanding the incident, the evidence, and the desired objective. You may be harmed by a threat, a financial transfer, or publication of content; you may be facing an accusation due to a message or an account; or you may represent a company subjected to hacking or impersonation. The required service differs according to these elements and the stage the file has reached.
Dr Saeed Al Mazrouei Law Firm and Legal Consultancy’s team helps you review documents, identify legal and technical questions, prepare applications and memoranda, and follow up procedures within the agreed scope of engagement. Acceptance of the file and representation is determined after reviewing it and verifying jurisdiction, conflicts of interest, and power-of-attorney requirements.
What happened? When and where did its effect appear? What is your relationship to the parties and accounts? Has a report been filed or a summons received? And what result do you want: stopping the harm, defense, content removal, claiming an amount or compensation? These answers determine the starting point.
The track may include filing the report and gathering information, investigation before the competent authority, technical examination when requested, then decisions on disposition, referral, and trial when their basis exists. Not all files pass through the same stages, and a complaint alone does not mean the accusation is proven.
Review the facts, jurisdiction, documents, and requests. Use the official channels appropriate to the place of the incident, and consult the UAE Government page for reporting cybercrimes to verify available options. A service specific to another Emirate is not presumed to be automatically suitable for an Abu Dhabi file.
Verify the authority, date, and the capacity in which you were summoned, and keep a copy of the document. Prepare the sequence and documents, and request clarification of what is required from the competent authority. Consider engaging a lawyer and the limits of attendance, access, and submitting applications according to the stage and its governing procedures.
Defenses, requests, and evidence are organized in light of the case file and reports, then the grounds of the judgment are reviewed when issued. If an appeal is required, you must immediately review the judgment, the details of service and attendance, and the deadlines; do not infer an appeal period from a verbal description of the case.
These dispositions must be distinguished. Article 118 regulates an order that there is no basis to bring proceedings after an investigation, while Article 119 regulates closing a case within its scope. Start with the complete decision, issuing authority and procedural stage. The phrase “report closed” alone does not establish the available challenge or when its time limit starts. Record when you learned of the decision and when it was served, and send it promptly for review. Official source: UAE Criminal Procedure Law, Articles 118, 119
Abu Dhabi Police provides electronic services and the Aman channel on its official website. Use its published contact details to ask which channel fits the incident. Sending information through Aman should not be assumed to replace registering a report or completing an authority’s requested procedure. Keep the file number after registration, then use Abu Dhabi Judicial Department services for matters within its jurisdiction. Abu Dhabi Police: services and Aman Abu Dhabi Judicial Department
Write a sequence that states the act you personally observed, the account or number it came from, the date, what the other party requested, and what publication, transfer, or account access occurred. Separate this information from your conclusions about the perpetrator’s identity or motives. When the identity is unknown, state the data you know instead of putting a person’s name based on assumption.
Send the report number, authority, filing date, and a copy of what you submitted if available, and any completion request, summons, or outcome you received. Distinguish between report details, case number, banking complaint numbers, or platform requests; keep a table linking them to the same incident and showing the last action in each track.
The way a request is initiated does not determine what you will need later. Review the service and authority’s instructions regarding completion, attendance, or providing the device or original document. If you receive a message or call about the file, verify its source through official channels, and specify what is required, the date, and the capacity of the person requested to attend.
Start by obtaining the decision or its details, its reasons, its nature, and the issuing authority, then review whether an appropriate legal avenue exists and its conditions and deadlines. Do not treat every message about “closing the request” as a single judicial decision, and do not presume that resubmitting the same facts is the correct action without reading the reason for the disposition.
If the objection concerns the conviction, legal characterization, evidence, or penalty, review the grounds of the judgment and the available method of appeal. If the goal is to collect adjudged compensation or deal with an existing obligation, examine the instrument, its status, and what enforcement requires. Prepare the full judgment, prior-stage records, and service and attendance details, without delaying the review while waiting for a verbal summary.
Use this map to determine what you need to discuss, then match it with the documents and current stage. A file may combine more than one need, so priorities are arranged according to deadline, harm, and available evidence.
Scroll horizontally to view the remaining columns.
| Your situation now | First question | What you prepare for review |
|---|---|---|
| Ongoing threat to publish photos | What is the content of the threat, and has publication already occurred? | Full messages, the account ID, and links to the publication if any |
| An amount left due to a message or advertisement | How was the payment decision made, and who received the money? | The message or advertisement, transfers, and the bank’s response |
| A summons arrived concerning your account | What incident is the subject of the summons, and what are the date and the capacity? | The summons, account details, and the sequence of its use |
| Content affecting reputation was published | What is the phrase, who received it, and what documented harm occurred? | The link, full text, account details, and evidence of impact |
| A technical report was issued | What conclusion did it establish, and what are its limits? | The full report, annexes, and the disputed questions |
| A settlement was offered to you | What rights and files does the agreement cover? | The draft, existing decisions, amounts, and conditions of performance |
Instead of “I want to solve the case,” specify, for example: I need to review an upcoming summons; or evaluate fraud documents and a monetary claim; or study published content and the options related to it. This description helps select the service scope without preempting the legal opinion.
Clarify whether you are before reporting, before an investigation or trial, or you have a judgment that needs review.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyReview the nature of the threat and what was demanded in return, the means of communication, the identity of the account or number, and whether publication, transfer, or later contact occurred. A threat to publish private photos raises issues different from a message asking for money claiming a device hack; the content itself must be examined before determining the description.
It is helpful to prepare a sequence showing how the relationship began, how the materials reached the other party, the content of the threat, the account names, links, and timings. Do not send private materials to untrusted parties for the purpose of verifying the threat’s authenticity. The method of delivering sensitive evidence is discussed with a specialist or the official authority.
A pseudonym does not dispense with documenting the account ID, link, number, and payment requests. The other party’s location adds questions about jurisdiction, access to data, and cross-border cooperation. It is not possible to promise to reveal the identity, remove all copies, or end the incident within a fixed period.
The Law on Combating Rumors and Cybercrimes regulates electronic extortion and threats in Article 42. The facts must be matched to the operative text instead of applying a general penalty to every threatening message.
Article 42 of Federal Decree-Law No. 34 of 2021 addresses using technology to threaten or extort a person to make them act or refrain from acting. The demand need not be money: the message, demand and connection between them must be examined. The aggravated situation in paragraph 2 depends on the content of the threat and the accompanying demand. Official source: UAE Law on Combatting Rumours and Cybercrimes, Articles 42
The review starts by identifying the words or image in dispute, who was exposed to them, the publication context, and the status of the person concerned. A private message, a public comment, a service review, and publishing a private chat are not identical images, even if they all occurred on a single platform.
Examine the specific phrases, whether they describe an experience or contain accusations or insults, and the evidence supporting the stated facts. Calling a post an “opinion” or labeling it “defamation” is not enough to resolve the issue without reading the content and context.
Publishing private material may raise questions independent of the truth of what it contains. Also review the contribution of someone who re-shared, added a comment, or revealed the owner’s identity. Therefore, we need a complete copy of the post, the link, the account, and the date it appeared, together with clarification of the consequences.
The provisions on insult, slander, and violation of privacy are reviewed, including Articles 43 and 44 of the Law, depending on the specific act. Compensation is examined as a claim that requires stating the harm and its link to the incident.
Truth alone does not determine whether publication is lawful. Subject to its conditions, Article 44 includes publishing true information or images with intent to harm a person. This differs from insulting someone or attributing a fact that exposes them to punishment or contempt, addressed in Article 43. The conditions of each act must be examined separately; not every critical statement is a crime. Official source: UAE Law on Combatting Rumours and Cybercrimes, Articles 43, 44
Determine whether there was a prior relationship, how the party obtained the photos or information, and whether the threat relates to money, waiver, continuation of a relationship, or a child dispute. The existence of a family dispute does not remove the need to examine the electronic act separately. Nor should all disputes be merged into a single narrative that obscures the message, date, and specific demand.
Provide the full conversation including your replies. Reciprocal messages may affect understanding of the context and sequence, but “he started” alone is not sufficient to assess every message. Separating each party’s words, their timing, and the audience who received them helps identify matters that require defense, a request, or an explanation.
Read the phrases together with the work topic, participants’ status, and the number of recipients, and whether they included an accusation, disclosure of private information, or a threat. Keep the chat, group details, and the discussion context. A work or confidentiality issue may overlap with the electronic act; each track and its requirements must be identified instead of assuming that the employer can resolve criminal liability internally.
A colloquial, sarcastic, or abbreviated phrase may carry a meaning not conveyed by a literal translation alone. Attach the full original, specify the language, context, and the disputed phrases, and check that names and dates match. Do not alter the message text to facilitate translation, and do not replace the original with a summary written by one of the parties.
Yes, in terms of the elements for review: what data was published, how it was collected, to whom it was made available, and whether alteration, impersonation, or a threat occurred. Attach the published version, the link, and what shows how it differs from the original if lawfully available. Do not re-publish the photo to prove it is offensive; deliver it through an appropriate channel for reviewing the file.
The following examples are hypothetical to illustrate how to read a file; they do not describe the office’s cases or judicial outcomes.
A customer wrote that he did not receive his order, then added phrases accusing a person of other acts. Separate the purchasing experience and what supports it from the additional phrases, and read the full post with replies and edits. Do not reduce the file to a “negative review.”
A person shared a photo in private communication, then it appeared on a public account. Identify the circle of original sharing, how the published copy appeared, who posted or re-posted it, and any threat preceding publication. Sending the photo in a certain context does not by itself answer all questions about its later use.
A threatening message appears from a number you know, while its owner says the account was hacked. Review the messages, timing, security notifications, and other indicators. Knowing the number is not enough to resolve all aspects of attribution, and denial is not enough to negate it.
A screenshot containing an insulting phrase was submitted without the preceding and following messages. The priority is to obtain the full context, separate each party’s words and their dates, then identify the phrases and acts that require independent assessment.
Specify the content of the threat or publication, the account, links, and whether the harm is ongoing.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyThe file begins by identifying the persuasion method and the path of the money: investment ad, store, fake banking link, impersonation of an employee, or an email requesting a change of beneficiary account. Then promises and messages are linked to transfers, beneficiaries’ names, and banking references.
Review advertisements, alleged contracts, payment receipts, and the order or account history, who made the promises, and whether there were real transactions. Failure to perform a commercial obligation alone does not determine the criminal description; the conduct and surrounding evidence must be studied.
Prepare the link message, transaction data, bank notifications, and complaint numbers. Contact the bank promptly via its official channels regarding the transactions and affected instruments, and keep the result of the objection. The banking complaint, the report, and the monetary-claim track are procedures that must be coordinated according to the case.
Filing a report does not guarantee recovery of funds. Examine the beneficiary’s identity, the location of the funds, the possibility of tracing them, the available requests, and any related civil or banking track. Collection prospects differ from merely proving the incident or a judgment being issued.
Hacking relates to unauthorized access or control, whereas impersonation may create a new account in the name of a person or company without accessing their original account. The two may overlap if a hacked account is used to send monetary requests in its owner’s name.
In a hacked account, login notifications, password changes, recovery requests, and the devices log lawfully available help build the sequence. In an impersonated account, collect the links, identifiers, images used, messages sent to others, and the dates the account appeared.
Attributing the act requires examining who controlled the account and device at the time of the incident, and what the records, reports, and indicators support. A claim of hacking in turn needs supporting details; merely asserting it without examinable details is insufficient.
The provisions on hacking and fabricated accounts are reviewed according to the facts, including Articles 2 and 11 of the Law on Combating Rumors and Cybercrimes.
Article 2 addresses electronic intrusion and its conditions, while Article 11 addresses fabricating a website, account or email and falsely attributing it to a natural or legal person. Creating a new account in your name therefore differs from accessing your original account without authorization, even if the harm is similar. Official source: UAE Law on Combatting Rumours and Cybercrimes, Articles 2, 11
Scroll horizontally to view the remaining columns.
| Situation | What must be clarified? | Closest documents |
|---|---|---|
| Store did not deliver the order | Who is the seller? What was promised? And is the problem non-performance or misleading identity or information? | Product page, order, payment, and correspondence |
| Suspected investment or trading platform | Who received the funds? What promises were made? And were extra withdrawal fees requested? | Advertisements, agreements, transfer statements, and account history |
| Email impersonating a supplier | What changed in the email address or beneficiary account? And who approved the transfer? | The original message, invoice, and approval chain |
| SIM swap or loss of control of the number | When did the service cut off? What notifications and transactions followed? | Operator and bank notifications and recovery requests |
| Digital wallet or transfer of digital assets | What is the wallet address, network, and transaction ID? And what is the party’s connection to it? | Transaction identifiers, platform history, and correspondence |
A transfer made by the owner based on a misleading promise differs from assets leaving due to unauthorized access. Clarify who initiated the transaction, how you identified the beneficiary, and what preceded the transfer. A wallet address or on-chain movement alone does not prove the legal identity of whoever controlled it, nor guarantee the existence of assets that can be recovered.
The matter requires examining the source of authority, its limits, and duration. At work, a person may have access to part of a system without that including copying all data or using it for another purpose. Prepare authorizations, policies, the record of access changes, and specify the acts in dispute instead of relying on the fact that the person was an employee or knew the password.
Collect the account link, username, what mark or data was used, the messages it sent to customers, and any payments linked to it. Separate protection of the company’s identity, communication with the platform, and any harm suffered by persons who paid money. Repetition of the name or logo alone does not explain all acts that must be studied.
Prepare transaction data, chats, account notifications, and previous complaint numbers.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyKeep organized copies, and distinguish between what you saw yourself and what others relayed to you. Avoid modifying files, excerpting conversations, or resetting a device that may contain evidence before assessing how to preserve it. Do not access others’ accounts to collect evidence, and do not publish the disputed materials to justify your position.
The value of evidence is linked to its source, integrity, attribution, relevance to the incident, and context. A screenshot may show a useful portion, but it may not sufficiently show the account’s identity, the conversation sequence, or whether part of it was deleted. Therefore, it is reviewed alongside the available original and other indicators.
Who sent the message? What is the number’s or account’s connection to the person? And are there facts indicating compromise or use by another party?
What came before and after in the messages? Is the file original or a modified copy? And are the timing and time zone consistent?
The matter may require examination of a device, logs, or email by the competent authority or expert, in accordance with appropriate procedures.
Review the language, source, and the requirements for submitting the document or translating and attesting it, where applicable, based on its nature and the authority to which it will be presented.
Evidence is assessed in light of the applicable text, the case file, and what the competent authority accepts in terms of evidence and procedures.
The meaning of the address is reviewed together with its timing, the time zone, the available logs, the nature of the connection, and who uses it. Multiple people may share a connection or a device, so the specialist examines how the indicators link the connection, the account, the device, and the person. Do not equate knowing a technical address with establishing the perpetrator’s identity without examining the rest of the information.
Keep a record showing who collected the copy, when, from what source, and what tool or method was used, and to whom it was delivered. Distinguish the available original copy from working copies, and do not write your notes inside the original file. The competent expert determines the necessary technical procedures to demonstrate the integrity of the copies and the limits of what can be proven with them.
Identify when the content appeared, the account name, who viewed it, and what notifications or copies remain lawfully available. The possibility of obtaining additional data varies by platform, data type, time, and appropriate procedures. Do not assume that deleting a message makes any indicator impossible, nor that the platform necessarily retains a copy that can be retrieved.
The matter may require examining the file, its source, circulated copies, indicators, and an appropriate technical report. Keep the highest available version and the original file quality if possible, and record who sent it and when. A strange appearance or an automated image-checking website result does not, by itself, determine authenticity, manipulation, or the identity of who created the file.
Preservation focuses on keeping data that may aid investigation or proof, whereas removal targets stopping content from being available. Discuss the order of the requests and preserve the links, identifiers, and timings you have, because removing a page may make ordinary access to it more difficult. A user’s request to the platform is not the same as an official request to obtain private data.
Link each finding to the question it answers: did the report establish the existence of the file, its sending, or control over the device? What period was examined? And what data was unavailable? A party may agree on the accuracy of a technical fact and disagree with the legal conclusion built on it. The aim is to discuss the finding and its limits specifically.
Do not make the file a set of images without explanation. Link each document to a specific fact, record what it proves and what it does not, then identify what needs to be completed or examined. This organization helps prepare precise questions for the lawyer, the expert, and the competent authority.
Scroll horizontally to view the remaining columns.
| Document | What it may help clarify | What needs to be completed? |
|---|---|---|
| Screenshot of a post | The content visible at the moment of capture | The link, account, date, context, and the full version |
| Transfer receipt | Transaction data, amount, and reference | Reason for payment, its relation to the messages, and the identity of who requested it |
| Login notification for an account | A security event that appeared to the user | The timing, the source of the notification, and its relation to the act in dispute |
| Original email | Content and technical data available for examination | The identity of the controller, the email thread, and the context of the instructions |
| Removal request to a platform | Date, type, and outcome of the request | Did the content remain or did other copies appear? |
| Loss document | An amount or effect recorded in a document | Causation with the incident and how to present the claim |
The absence of the message text, not knowing whether there was a report, sending only one page of a judgment, or failing to state who made the transfer and the period and date may render the assessment incomplete. Request a specific list of the deficiencies, and gather them before moving from a general consultation to drafting an application or memorandum.
Send a brief index and specify what you want to prove with each set of documents.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyStart by verifying the name, capacity, and registration authority, then discuss experience in the type of incident and its stage. A financial fraud file requires understanding the transfer path and documents; an accusation file requires reading the evidence, the report, and procedures; while a corporate incident calls for coordination between the legal and technical aspects.
What is the likely characterization? What has been established and what needs examination? And what alternatives are available for the current stage?
How are the conversations, records, and transfers connected to the incident? And does the file require an additional report or document?
Define the memoranda, hearings, and applications covered, and whether appeal, enforcement, and expert opinion are out of scope.
Specify who is responsible for the file, the approved channel, and how you will be notified of decisions, deadlines, and required documents.
A consultation may suffice to understand options, while an ongoing file may require document review and a written opinion, or preparing a memorandum, or a power of attorney for representation. The agreement must specify the stages covered, deliverables, and whether expertise, translation, fees, appeal, and enforcement are within or outside scope.
Fees are affected by the file size, the number of parties, the stage of proceedings, the nature of the evidence, and the need for expertise or external follow-up. Duration is affected by procedures, reports, notifications, applications, and decisions; therefore, an estimate is provided tied to the stage and available information, without guaranteeing a date or outcome.
Identifying established facts and unresolved issues, missing documents, possible options and their risks, the proposed step, and the limits of the engagement. File review does not equal acceptance of a power of attorney and does not guarantee a judgment in favor of the client.
Start with a consultation to understand options; request a file review and written opinion to analyse evidence and defences; define the representation stage in a separate agreement for managing proceedings. Review the services below and confirm their suitability for the cyber incident and their scope before starting. No service should be assumed to include every stage.
Scroll horizontally to view the remaining columns.
| Service | The agreed deliverable | What do you confirm before starting? |
|---|---|---|
| Consultation | Discussion of the situation, options, and key questions | Duration, documents, and questions covered |
| File review and written opinion | Analysis of documents, facts, issues, risks, and recommendation | File size, scope of the opinion, and delivery date |
| Document drafting | A specific application, memorandum, or agreement draft | Who will submit it and follow it up, and what revisions are included |
| Power of attorney and representation | Managing procedures within an agreed stage and authorities | Hearings, applications, appeal, enforcement, and external costs |
If the stage changes or new evidence appears, the scope of work, time, and cost are reviewed before adding a new task. Request a written clarification of what the agreement covers, who manages the file, and what is required from you at each decision point.
Confirm the scope of work, deliverables, and external costs before authorizing representation.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyThe connection of the incident to Abu Dhabi and the UAE is examined: the place of the act and its effect and the parties and transfers, the nature of the crime, and the competent authority. The server’s location or the account holder’s nationality do not, by themselves, provide a comprehensive answer on jurisdiction.
There may be a need for data from a platform or a foreign entity, or evidence in different languages, or parallel procedures in more than one country. Possible requests, time, cost, and enforcement limits are assessed, while avoiding promises of direct access to private information or freezing funds outside the UAE without procedures.
Article 143 of the Criminal Procedure Law starts from the place where the offence occurred, unless the law provides otherwise. Article 144 explains particular rules for determining that place, while Article 145 addresses an offence committed abroad to which national law applies. The affected person’s residence in Abu Dhabi or an account on a foreign platform does not alone determine the court.
Conditional example: If the act is established to have occurred in Abu Dhabi, start from its location under Article 143 and check any special rule. If the act occurred abroad, first assess whether national law applies and the route in Article 145; the case is not automatically assigned to Abu Dhabi’s local courts. Official source: UAE Criminal Procedure Law, Articles 143–145
Gather the original message, available email headers, the approval chain, invoices, transfer data, and genuine communications with the vendor. Review how the request arrived, who approved it, and whether the email domain or account details changed, in coordination with the technical team and the bank.
Identify the type of data, affected persons, privileges, work and confidentiality policies, and access logs. Criminal, contractual, and regulatory issues may overlap, and it should not be assumed that every internal violation constitutes a cybercrime.
A person in charge is designated for coordination, with a log of actions, copies of evidence, and the timing of its preservation. Any notification or data-protection obligations are reviewed according to the regime applicable to the establishment, including differing regulatory frameworks where applicable. Legal handling requires coordination with the technical specialist and does not replace a cybersecurity response.
Prepare a single log showing when the issue was discovered, the systems, accounts, and people affected, and what containment, recovery, and communications were undertaken. Keep copies of relevant messages, notifications, contracts, and policies, and identify who has the authority to engage experts and share company data. Confirmed information is separated from preliminary technical assessment.
Identify the right-holder and the harm: a company from which an amount left, an employee subjected to a personal threat, or customers who received messages in the company’s name? There may be more than one capacity and more than one interest. Prepare proof of the representative’s authority and the connection to regulations and amounts, and do not assume that a general administrative authorization covers every required action.
Upon data leakage, business interruption, or loss, review the regulations, contracts, and insurance policy applicable to the establishment, and the regulator if any. Identify the information necessary to make a decision instead of sending a broad disclosure or a promise to customers before the assessment is complete. It should not be assumed that all companies or all incidents are subject to the same requirements.
Clarify the location of the parties, regulations, and transfers, and any ongoing action inside or outside the UAE.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyThe defense is built on reading the accusation, the evidence, the technical report, and the procedures, then identifying the actual points of dispute. A point may relate to attribution of the account or the act, the completeness of the conversation, the understanding of expressions, limits of authority in a company system, or the availability of the elements required for the legal characterization.
Hypothetical example: Receiving a message from an employee’s account does not, by itself, answer who used the account at the moment of sending. Access privileges, devices, logs, and accompanying facts are reviewed. Conversely, sharing a password does not automatically negate responsibility, and its effect must be examined in the specific case.
Bring materials that may also appear to go against your position; hiding them from the lawyer weakens the file assessment. The memorandum must address the elements of the accusation and the applications precisely, avoiding general denial or accusing other parties without support.
Scroll horizontally to view the remaining columns.
| Track | Objective | What needs study? |
|---|---|---|
| Criminal report | Presenting an incident suspected of being criminal to the competent authority | Characterization, jurisdiction, evidence, and capacity |
| Platform notification | Reviewing content or an account according to its policies | The link, type of violation, and the request outcome |
| Appropriate judicial application | A protective or other measure as permitted by law | Grounds, urgency, competent authority, and enforceability |
| Compensation | Claiming redress for harm supported by evidence | The harm, its relation to the act, and how to quantify the claim |
| Recovery of funds | Tracing the amount or claiming it through the available track | The beneficiary, the path of money and assets, and the possibility of recovery |
These tracks may complement one another, but success in one does not guarantee the outcome of another. Removing a post does not mean the disappearance of its copies, and a platform’s decision does not, by itself, determine legal liability, just as a money judgment does not equal its actual collection.
The type of crime, the stage, complaint conditions, the effect of the waiver, and the applicable texts must be examined. Do not draft a settlement on the basis that a waiver automatically ends all procedures. The scope of the amount, the rights covered, future obligations, and enforceability should also be specified.
For offences requiring a complaint under Article 11 of the Criminal Procedure Law, Article 17 regulates withdrawal, including termination of proceedings following withdrawal before a final judgment, subject to conditions where several complainants are involved. A financial settlement or withdrawal of a private claim does not automatically end every cybercrime accusation. First identify the legal classification and whether complaint provisions or a specific reconciliation mechanism apply. Official source: UAE Criminal Procedure Law, Articles 11, 17
Article 148 permits a civil claim for harm arising from the offence to be brought before the criminal court alongside the criminal case after payment of the prescribed fees. Harm, its connection to the act and the relief claimed must still be established. Procedural availability does not guarantee entitlement to an amount or its recovery. Official source: UAE Criminal Procedure Law, Articles 148
Prepare the seizure report or the device’s details and ownership, the file number, and the reason for the request, and clarify whether you need the device itself or work data or documents on it. The examination status, existing decisions, and what can be requested from the competent authority are reviewed. Returning the device, extracting a copy, and confiscation are different matters that require reading the procedure file.
Start with the actual decision, its reason, the issuing authority, and the related file, together with any documents on residence, work, and the obligations you wish to present. The effect of the case on travel or residence is not inferred from the crime’s name alone. Distinguish between a procedural request in an ongoing case and discussing a penalty or effect stated in a judgment.
Create a schedule of losses with the document, date, and link to the incident: a transferred amount, a direct cost, or a professional or personal effect you wish to present. Distinguish what has actually been paid from what you expect, and keep what shows why the loss is connected to the act. Not every amount you list automatically becomes recoverable compensation; the nature of the damage, its evidence, and the appropriate path for the claim are assessed.
There may be an original page, republished copies, and search results pointing to them. Keep a list of links and specify what is required for each one. The disappearance of a search engine result does not mean the page is deleted from the site, and deletion of the first post does not mean other copies disappear. A follow-up list helps track what changed without repeating unclear requests.
Review the identity and capacity of the signatory, the rights covered and what remains outside the agreement, the method of performance, the effect of breach, confidentiality, and non-publication. It must be clarified whether the settlement addresses only private claims and what requires an action or decision by a competent authority. Do not sign broad wording before understanding its effect on your rights and related files.
Do you want a defense, harm cessation, content removal, or a monetary claim? The relationship among the tracks is studied according to the file.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancyYou can start presenting the facts and documents remotely, then determine what requires attendance, an original document, or a power of attorney according to the required service and procedure.
Clarify what was deleted, from which device, and when, and what copies, notifications, or files remain. Examination possibilities are studied by specialists without guaranteeing content restoration.
Start with a brief description and request that a suitable method of delivering documents be specified, especially private images and identity and banking data, limiting sharing to what is required.
Bring the complaint number, its substance, the bank’s response, and the disputed transactions, to link them with the rest of the file and avoid inconsistent narratives or repeating requests without follow-up.
These outcomes are not guaranteed. The evidence, requests, authorities, platforms, and assets subject to enforcement are reviewed before evaluating options.
The applicable text, amendments, and procedural regulations related to the subject of the file are reviewed. The information here is for general awareness, and specific facts require an independent review.
Federal Decree-Law No. 38 of 2022 Promulgating the Criminal Procedure Law — Official text and its amendments A reference to review procedures, decisions, and methods of objection according to the stage.
Before contacting, prepare: a chronological summary; account details and links; full conversations available; transfer and loss data; complaint and report numbers; summonses and decisions; and the desired outcome. Keep originals, and name each file in a way that makes its content and date easy to identify.
Do not share passwords or verification codes. Presenting the status does not require handing over login credentials to your account. The delivery of sensitive evidence is determined after communicating with the team.
Send a timeline summary, the core document, and three questions you want to discuss. Fees and payment options are determined by the nature of the file, the scope of work, and prior agreement.
Contact Dr Saeed Al Mazrouei Law Firm and Legal ConsultancySend a summary of the matter and the principal documents so the appropriate scope of assistance and next step can be identified.
UAE lawyer, legal consultant and university lecturer at the College of Law, United Arab Emirates University
Registration number 3986
Open link →Legal Content Manager
Open link →
1