Scams Targeting Expats in the UAE: Dubai Police Impersonation, Fake Jobs, and How to Stay Safe in 2026

You moved to Dubai for opportunity. For the clean skyscrapers and the job prospects and the lifestyle. Not to get scammed.

But if you've been in the UAE for more than a week, you've probably gotten one of these messages: a text saying you owe a Salik toll, an email from "Dubai Police" about a traffic fine, or a WhatsApp job offer that sounds too good to be true. Because it is.

The UAE is genuinely one of the safest places in the world for physical crime. But digitally? It's a different story. You've got a massive expat population, high average incomes, people moving fast with their digital transactions, and widespread smartphone use. That combination makes the UAE one of the most profitable hunting grounds on the planet for scammers.

The numbers back this up. The UAE Financial Intelligence Unit reported AED 1.2 billion (USD 326 million) in fraud losses between 2021 and 2023. In the first half of 2025, crypto scam victims in the UAE lost an average of $80,000 each according to Chainalysis data, the highest per-victim loss anywhere in the world.

This guide covers the scams specifically targeting you, whether you're an Emirati, a long-term resident, or someone who just touched down in Dubai last month.

The scams you need to know about

1. Dubai Police and government impersonation

This is the one keeping authorities up at night. A criminal group called the Smishing Triad, tracked by Resecurity, has been running slick campaigns impersonating Dubai Police, the UAE Federal Authority for Identity and Citizenship, and Digital Dubai Authority.

Here's how it plays out: you get an SMS, email, or phone call saying you've got an unpaid traffic fine, a license renewal issue, or a parking violation. The message includes a link to a payment page that looks pixel-perfect like an official government portal. Some people even get phone calls from someone with a scripted pitch and background noise designed to sound like you're calling a police station.

In March 2025, Dubai Police arrested a gang impersonating the Consumer Rights Protection Department to steal bank details. But the international operations keep humming. Resecurity found over 144 malicious domains linked to these campaigns, many registered in China and using cheap domain extensions like .icu, .site, and .top. That's not a typo. They're just registering sketchy domains and hoping you won't look twice.

Here's the hard rule: Dubai Police, Abu Dhabi Police, and every single UAE government entity will never ask for payment details, bank info, or passwords over phone, SMS, or email. Never. Traffic fines? Only through official channels: the Dubai Police app, Abu Dhabi Police app, or the Ministry of Interior website.

2. Salik and Nol card phishing

Fake Salik toll and Nol card top-up pages show up at the top of search results thanks to search engine manipulation. You search "Nol recharge" or "Salik top up," and the first few results look like official RTA pages. They've even got valid-looking SSL certificates.

Kaspersky researchers found over 240 phishing pages impersonating Digital Dubai Authority services including DubaiPay and Salik, starting in April 2024 and still running through 2025.

How to stay safe? Don't search for Salik or Nol top-ups. Ever. Use the official apps instead: salik.ae or the RTA Dubai app for Salik; rta.ae, the nol Pay app, or RTA Dubai for Nol. Bookmark them now.

3. WhatsApp job scams

This one hurts expats the most, especially if you're job-hunting or on a tight budget. Proofpoint reported that smishing attacks across the Middle East surged 33% in 2025, with job scams leading the charge.

The pattern's always the same: WhatsApp message from an unknown number with a job offer. Sometimes it's "part-time work" liking YouTube videos or writing reviews for AED 500-800 a day. Sometimes it's a more legit-looking job offer from what seems like a real UAE company.

The "task-based" scams work on a simple formula: you do a few easy tasks and actually get paid a little money. They're building your trust. Then they ask you to "invest" to unlock the higher-paying tasks. Khaleej Times reported a Dubai hotel worker who lost her entire life savings of AED 66,000 to this scheme. A Gulf Law attorney said they're handling 20 victims a month now, with some losing over AED 500,000.

The more traditional job scam demands upfront payment for "visa processing fees," "security deposits," or "recruitment fees." Here's something that could actually save you money: under UAE Federal Decree-Law, employers can't charge workers recruitment fees. Period. Any request for money before you start is a scam.

How to verify a real job offer? Check the employer on the MOHRE website. Every genuine UAE job offer comes with a 14-digit MOHRE transaction number. This is your gold standard. Verify it through the MOHRE app or website under "Enquiry for Job Offer." If someone won't give you that number, they're not real.

4. Crypto and investment scams

The UAE's reputation as a crypto hub has made it a magnet for scammers. They create fake trading platforms, promote them on social media, sometimes using deepfake videos of celebrities to push their schemes.

According to reporting in Khaleej Times, Dubai Police's cyber crimes division regularly tracks and blocks AI-generated ads with deepfakes of famous figures promoting fake investment platforms. But new ones keep popping up faster than they can be shut down.

The damage is real: the average loss for crypto scam victims in the UAE hit $80,000 in the first half of 2025. Major Ponzi schemes like HyperVerse ($2 billion in losses) specifically targeted UAE residents.

The rule: before you invest anything, check the platform against the Securities and Commodities Authority (SCA) registry and the Dubai Financial Services Authority (DFSA) warnings list. Do it every time.

5. Package delivery scams

Same story as everywhere else, just localized. Fake SMS from Aramex, Emirates Post, or international carriers like DHL saying a package couldn't be delivered. The link takes you to a page asking for Emirates ID details or credit card info. It's straightforward and it works too often.

7 protection steps for UAE residents

1. Use only official apps for government services

Everything: Salik, Nol, traffic fines, visa renewals, Emirates ID. Download from the App Store or Google Play. Never follow links from SMS or email. The UAE PASS app is the only legitimate identity verification tool.

2. Verify job offers through MOHRE (seriously, do this)

Every legitimate UAE job offer has a 14-digit transaction number you can verify on the MOHRE website or app. No exceptions. If a recruiter can't provide that number, they're not offering a real job. This single check could save you thousands of AED.

3. Never pay to get a job

We need to be clear: UAE law forbids employers from charging recruitment fees. Visa fees, security deposits, training charges, processing fees, "bonuses"—all scams. All of them. If money is leaving your pocket before you've actually started working, you've been had.

4. Enable SMS filtering on your phone

On iPhone: Settings, Apps, Messages, turn on "Filter Unknown Senders." Messages from numbers not in your contacts go to a separate tab.

For deeper protection, Rampart uses AI to analyze the actual content of SMS and email, flagging scam patterns no matter where the message comes from. In the UAE, where scammers burn through local and international numbers constantly, this matters. You're protected from new scam patterns the moment they arrive, not after someone else has already been hit. Learn more at rmprt.app.

5. Be ruthless with WhatsApp messages from strangers

Job offer? Investment tip? Any money request from an unknown WhatsApp number? Treat it like a threat. Don't engage. Block. Report. Do not reply asking if it's real. Just block.

6. Check URLs before you tap or click

Legitimate UAE government sites end in .ae (salik.ae, rta.ae, dubaipolice.gov.ae). If you see a government URL ending in .com, .icu, .site, or .top, it's fake. Be suspicious instantly.

7. Know how to report

For Dubai, Sharjah, Ajman: call 901 or use the Dubai Police eCrime portal. For Abu Dhabi: call 800-2626, SMS 2828, or email aman@adpolice.gov.ae. Dubai Police Economic Crimes Department: +971 4 203 6341. National level: Ministry of Interior eCrime reporting service.

What to do if you've been scammed

Move fast. Contact your bank immediately to freeze accounts and dispute transactions. Hours matter for card payments, which might be reversible if you act quick.

File a report through the Dubai Police eCrime portal or call 901. Give them everything: screenshots, phone numbers, transaction records, messages.

If you shared identity documents (Emirates ID, passport copies), watch for identity theft. Consider putting alerts on your bank account and with your telecom provider.

If a job scam took your money, also report to MOHRE. They track fraudulent recruitment operations and can help take down repeat offenders.

The UAE is fighting back, but scammers move faster

UAE authorities are genuinely among the most active in the world when it comes to digital fraud. Dubai Police arrests fraud gangs regularly, Smishing Triad domains are getting shut down, and the regulatory framework is solid.

But scammers operate from outside the UAE. They use disposable numbers and domains. They change tactics weekly. That gap—between when a new scam launches and when authorities can respond—is where people get hurt.

Rampart is built for exactly that gap. Instead of relying on blocklists of known scam numbers (which become outdated in days), Rampart analyzes the actual content of your messages, spotting the manipulation patterns, suspicious links, and geographic red flags that signal a scam. It catches them even when the number and domain are brand new. It works across SMS and email, in English and multiple other languages.

If you want protection that starts working the moment a scam message hits your phone, not after someone else has already lost money, check out rmprt.app.