Urgent Dubai Police Alert: New Scam Uses Fake Consumer Protection Websites to Steal Your Money

The Dubai Police have issued an urgent public warning about a sophisticated new cyber scam designed to trick residents into handing over control of their devices and bank accounts. The fraud involves criminals creating convincing fake websites that mimic official consumer protection portals, using them as a trap to harvest personal data and ultimately steal money.

This alert, released by the Anti-Fraud Department of the General Department of Criminal Investigation, highlights the increasing ingenuity of scammers who are exploiting public trust in government institutions. Understanding how this scam works is the first step to protecting yourself.

How the Elaborate Scam Operates: A Step-by-Step Breakdown

The fraud is a multi-stage process designed to build credibility before launching the attack:

The Bait: Fake Websites. Scammers create highly professional-looking websites that appear to be the official portals of consumer protection authorities, such as the Dubai Corporation for Consumer Protection & Fair Trade. These sites are promoted through social media ads or search engine results to attract individuals searching for ways to file a complaint against a company.

Data Harvesting. Victims land on the fake site and are prompted to fill out a detailed complaint form, entering personal information like their full name, phone number, email address, and the specifics of their grievance. Unknowingly, they provide scammers with the exact information needed to sound legitimate in the next phase.

The Impersonation. Posing as consumer protection officials, the fraudsters then contact the victim via phone or email. They reference the complaint details to build trust and then instruct the individual to download a "required" remote access application, falsely claiming it is needed to "verify the complaint," "process a refund," or "complete the investigation."

The Attack: Total Device Control. Once the app (such as AnyDesk or TeamViewer) is installed, it grants the scammer real-time visibility of the victim's phone screen. With this access, they can monitor as the victim logs into their banking app, capture account credentials and one-time passwords (OTPs), and initiate unauthorized transactions, often draining accounts within minutes.

Official Safety Guidelines from Dubai Police

Authorities stress that legitimate government agencies will never operate in this manner. Key safety measures include:

• Never Download Remote Access Software: Official bodies will never ask you to install an application that gives them control of your device.
• Guard Your OTPs: One-time passwords are the final layer of security for your accounts. Never share them with anyone.
• Verify Official Channels: Always access government services by directly typing the official website address (ending in .gov.ae) into your browser. Do not click on links from ads or unsolicited messages.
• Be Sceptical: If contacted by someone claiming to be an official, verify their identity by calling the agency back on a publicly listed phone number.

Ahmad Ahli, Acting Director of the Consumer Protection Department, emphasized that scammers are increasingly inventive. He urged the public to be vigilant and only use verified channels for any official business.

Protect Yourself: A Step-by-Step Guide

To avoid becoming a victim, follow these essential precautions:

• Double-Check URLs: Carefully examine website addresses for slight misspellings or incorrect domain extensions (e.g., .com instead of .gov.ae).
• Initiate Contact Yourself: Instead of clicking on ads, directly navigate to the official website of the relevant government department by typing the known URL into your browser.
• Report Suspicious Activity: If you encounter a fake website or are contacted by a scammer, report it immediately through the official eCrime platform (www.ecrime.ae) or by calling Dubai Police at 901.