Cyber Crimes

Cyber Extortion: A Digital Crime Leading to Severe Penalties

Cyber Extortion: A Digital Crime Leading to Severe Penalties

With the rapid advancement of communication technologies, social media, and smart applications, cybercrime has become one of the most pressing challenges facing individuals and businesses alike. Among the most serious of these offences is cyber extortion, a crime that violates personal privacy and causes profound psychological, social, and professional harm — sometimes going beyond financial loss to damage reputations, family life, and career prospects.

What Is Cyber Extortion in the UAE, and What Penalties Does It Carry?

A digital crime threatening individuals and businesses — met with stringent sanctions under UAE law

1. What Is Cyber Extortion?

Cyber extortion occurs when a person uses an information network, technological means, electronic platform, or social-media application to threaten or pressure another individual with the intention of compelling them to perform a specific act, refrain from an action, pay money, or provide a benefit or service — in exchange for not publishing or disclosing information, photographs, videos, or data relating to the victim.

Important NoteThe perpetrator does not need to actually possess the photographs or information. The offence may be established by mere threat or claim of possessing material capable of harming the victim, provided the intent is to obtain an unlawful benefit.

2. Laws Governing Cyber Extortion in the UAE

The UAE legislator has given considerable attention to combating cyber extortion through dedicated legislation designed to protect individuals and institutions from exploitation and threats via various technological means.

⚖️

F.D.L. 34/2021

Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes — the primary legislative framework for cybercrimes in the UAE, including specific provisions on threats and extortion via technological means and information networks.

📜

F.D.L. 31/2021

Federal Decree-Law No. 31 of 2021 on Crimes and Penalties — contains provisions on threats, coercion, and violations of personal liberty, which may apply alongside cybercrime legislation depending on the circumstances of each case.

🔒

Privacy & Data Protection

In many cyber extortion cases, the offence overlaps with crimes such as privacy violations, publication of images or recordings without consent, and misuse of personal data.

3. Common Forms of Cyber Extortion

Cyber extortion takes many forms and employs various methods. Below are the most prevalent forms encountered by judicial and security authorities in the UAE:

📸

Intimate Image Threats

Threatening to publish private or intimate photographs or videos unless a ransom is paid or demands are met.

💻

Account Hacking

Breaking into electronic accounts or devices and threatening to disclose their content.

🏢

Corporate Extortion

Threatening to publish damaging information about a company unless financial demands are met.

🎭

Fake Accounts

Creating fictitious accounts to impersonate others and then using them as leverage for extortion.

4. Cyber Extortion vs. Cyber Defamation — What Is the Difference?

Many people confuse these two offences. However, there is a fundamental legal distinction that must be understood:

AspectCyber ExtortionCyber Defamation
DefinitionThreatening to disclose information in exchange for a benefitPublishing false information with intent to harm reputation
Core ElementThreat + demand for unlawful benefitPublication of false or defamatory content
IntentFinancial gain or coercionCausing reputational harm
StageCrime is complete at the threat stage — actual publication not requiredCrime requires actual publication or broadcasting

5. Penalties for Cyber Extortion

Penalties vary depending on the circumstances of the case, the nature of the means employed, and the consequences of the offence pursuant to applicable UAE legislation.

Offence CategoryApplicable LawPotential Penalty
Extortion via electronic means or information networkF.D.L. 34/2021Imprisonment and/or fine, with confiscation of devices used
Threats and coercionF.D.L. 31/2021Imprisonment and/or fine depending on severity
Privacy violations and unauthorised disclosure of imagesF.D.L. 34/2021Imprisonment and/or fine, and civil compensation
Identity theft and fake accounts used for extortionF.D.L. 34/2021Compounded penalties for multiple offences

6. What to Do If You Are a Victim of Cyber Extortion

If you are subjected to any form of cyber extortion, it is strongly advised to follow these steps in order:

  • Do not respond to the extortionist or engage in any further communication with the perpetrator.
  • Do not transfer any money or make any concessions under any circumstances.
  • Preserve all messages, conversations, and electronic evidence.
  • Take screenshots and save all data related to the incident.
  • Do not delete accounts or conversations connected to the incident.
  • Change passwords for important accounts if there is any suspicion of hacking.
  • File a report with the competent authorities immediately without delay.
  • Obtain specialised legal advice to understand the appropriate course of action.
⚠ Important WarningIn many cases, paying money does not end the extortion — it may in fact encourage the perpetrator to demand additional sums or continue threats in the future. Legal recourse is the only truly effective path.

7. How to Protect Yourself from Cyber Extortion

Preventive measures play a crucial role in reducing exposure to cyber extortion risks:

🔐

Strong Passwords

Use a unique password for each electronic account and change them regularly.

Two-Factor Authentication

Enable two-factor authentication on all your electronic accounts.

🚫

Protect Private Content

Do not share personal photographs or sensitive information with untrusted individuals.

⚙️

Regular Updates

Keep devices and applications updated regularly to close security vulnerabilities.

🕵️

Beware of Links

Do not click on unknown links or phishing messages.

🔒

Privacy Settings

Regularly review privacy settings on social media applications.

Frequently Asked Questions about Cyber Extortion in the UAE

What is the penalty for cyber extortion in the UAE?
The penalty varies depending on the circumstances of each case, the means used, and the resulting consequences under applicable legislation. It may include imprisonment, fines, confiscation of devices, and civil compensation for the injured party.
Is threatening someone via WhatsApp a criminal offence?
Yes. If the messages contain threats, pressure, or an attempt to force a person to perform an act, pay money, or provide a benefit, this constitutes a criminal offence under Federal Decree-Law No. 34 of 2021.
Is threatening to publish photographs a crime?
Yes, and it may also give rise to criminal liability related to privacy violations — even if the photographs are never actually published. The threat alone is sufficient to establish the offence.
Can cyber extortion be reported if the perpetrator is outside the UAE?
A report can be filed with the competent authorities within the UAE. Each case is handled according to the available legal procedures, including international judicial cooperation mechanisms.
Should money be paid to the extortionist?
Absolutely not. Paying money does not guarantee the cessation of the crime and in most cases leads to its continuation. Legal recourse is the optimal solution.
Does deleting conversations affect the case?
Yes. Deleting evidence may make it difficult to prove the incident before judicial authorities. It is therefore preferable to retain all relevant messages and data and document them through screenshots.
Do voice messages constitute evidence?
Voice messages may form part of the evidence that can be relied upon depending on the circumstances of the case and the procedures followed before the competent authorities.
Can compensation be claimed for cyber extortion?
The injured party may be entitled to claim compensation for material and moral damages sustained pursuant to UAE civil law, in addition to criminal prosecution of the perpetrator.
Is creating a fake account for the purpose of threats a criminal offence?
Yes, and it may give rise to multiple legal liabilities depending on the circumstances, including identity theft, threats, and extortion — each of which may constitute a separate criminal offence.
Is cyber extortion limited to demands for money?
No. The purpose may be to obtain information, images, services, or to compel the victim to take a particular course of action. The offence is established by the mere existence of threat and pressure with intent to achieve an unlawful benefit.

AWADH ALMHEIRI LAW FIRM AND LEGAL CONSULTATIONS

If you have been subjected to any form of cyber extortion or digital threat, do not hesitate to contact our team of lawyers specialising in cyberspace crimes.

We provide specialised legal consultations and accompany our clients through all stages of the case — from filing the complaint to obtaining a judicial ruling.

Acting swiftly on legal measures makes all the difference — take action now to protect your rights.

Legal Disclaimer: The information contained in this article is for general awareness and informational purposes only. It does not constitute specialised legal advice and is not a substitute for it. Each case has its own specific circumstances, and it is recommended to consult a qualified lawyer for legal advice pertaining to your situation.

All rights reserved — AWADH ALMHEIRI LAW FIRM AND LEGAL CONSULTATIONS