The Central Bank of the UAE (CBUAE) has imposed a Dh1.82 million financial penalty on a branch of a foreign bank operating in the country for violating consumer protection rules.

The regulator did not identify the bank involved.

Why was the bank fined?

According to the CBUAE, inspections found that the bank failed to issue a liability letter within the mandatory seven-day timeframe, breaching the central bank’s Market Conduct and Consumer Protection Regulations and Standards.

The penalty was imposed under Federal Decree-Law No. 6 of 2025, which governs the Central Bank, financial institutions and insurance activities.

What is a liability letter?

A liability letter is issued when a customer wants to transfer an existing loan or other financial obligations to another bank or apply for new financing elsewhere.

Banks are required to provide the document within seven days to ensure customers can switch lenders or complete financing arrangements without unnecessary delays.

CBUAE reinforces consumer protection

The central bank said the enforcement action reflects its commitment to ensuring banks comply with UAE laws and consumer protection regulations.

The regulator added that it will continue to monitor financial institutions to uphold transparency, integrity and high standards across the UAE’s banking sector.

Dubai Police has warned residents against purchasing or attempting to use stolen credit cards and banking data being illegally promoted through suspicious websites and social media platforms, stressing that offenders could face severe legal penalties under the UAE’s cybercrime laws.

According to police officials, organised fraud networks operating outside the UAE are increasingly using fake online platforms to advertise stolen financial information, including compromised credit card details and unauthorised banking access.

Officials said criminals were targeting internet users through deceptive websites and online pages designed to lure buyers seeking illegal financial services or discounted payment methods.

Authorities stressed that anyone found purchasing, sharing or using stolen banking information could face imprisonment, in addition to financial penalties reaching up to Dh2 million under federal cybercrime legislation.

Officials explained that many victims unknowingly compromise their own financial information after entering banking details on fake websites carefully designed to imitate trusted companies, online stores or service providers. Cybercriminals also frequently use fraudulent payment links sent through messages, emails or social media platforms to steal card information from unsuspecting users.

Police said stolen banking data is often circulated through organised cybercrime networks, where compromised card details are bought and sold before being used in fraudulent transactions. Authorities noted that the misuse of stolen information may occur days or even weeks after the original breach, making it harder for victims to trace exactly when or where their financial data was exposed.

Dubai Police also urged residents to closely monitor bank accounts and credit card statements and report any suspicious or unauthorised transactions immediately. Officials explained that quick reporting significantly improves the chances of freezing fraudulent activity, tracing transactions and recovering stolen funds before larger financial losses occur.

The warning comes as cybercrime and online financial fraud continue to evolve across digital platforms, with authorities repeatedly advising the public to avoid dealing with unverified websites, suspicious online advertisements or unknown payment channels.

Police further encouraged residents to rely only on secure banking applications and official payment platforms when conducting financial transactions online.

The Central Bank of the UAE has instructed financial institutions across the country to strengthen fraud prevention systems and tighten customer authentication procedures as digital banking scams continue evolving globally.

The move comes as the UAE expands its efforts to protect consumers and strengthen confidence in the country’s financial system amid growing use of online banking and digital payment services.

According to the Central Bank, banks and financial institutions are now required to improve how they verify transactions and avoid depending on a single authentication method, such as SMS alerts or one-time passwords (OTPs), which fraudsters increasingly target through sophisticated cyber scams.

Real-time fraud monitoring

The regulator also confirmed it has started building a new Anti-Fraud Operations Centre known as CAFOC, which will act as a central platform for monitoring suspicious activity in real time and coordinating rapid responses across the banking sector.

The new centre is expected to combine advanced tracking systems, analytical tools and data-driven fraud detection capabilities designed to identify emerging threats faster and improve coordination between banks and government authorities.

The Central Bank added that the anti-fraud framework will also help collect and analyse fraud trends and behavioural patterns, allowing regulators to develop more targeted supervisory policies and interventions.

The latest measures arrive as financial fraud risks continue rising worldwide alongside rapid digital transformation and increased reliance on mobile banking, online transactions and electronic payment systems.

Authorities said ongoing engagement with banks and licensed financial institutions has helped strengthen implementation of the updated requirements and improve the sector’s readiness to deal with increasingly complex fraud threats.

Cybersecurity and financial fraud prevention have become major priorities for regulators globally, with many countries introducing stricter digital authentication standards as online scams become more advanced.