AED11.8m Dubai Phone Scam: Why Verification Matters Before Moving Money

Dubai Police have arrested two suspects in connection with a series of phone scams that caused reported losses of AED11,877,532, highlighting how impersonation, psychological pressure and false claims of official authority can be used to persuade victims to transfer significant sums of money.

According to Dubai Police, the suspects allegedly posed as employees of official and international entities and told victims that they were implicated in legal cases outside the UAE.

Victims were then threatened with potential legal consequences and instructed to transfer money, purportedly so that the legitimacy of their assets could be verified.

Some were also persuaded to sell gold jewellery and transfer the proceeds.

Dubai Police said investigators traced the movement of funds and identified two individuals who were allegedly communicating directly with victims. The suspects reportedly admitted their involvement and said they had acted on instructions from a party outside the UAE in return for payment.

The case demonstrates how fraudsters can combine impersonation with urgency, fear and apparent authority to overcome a victim's normal caution.

For individuals and businesses, the wider lesson is clear: a request that appears to come from an official body should not be treated as genuine simply because the caller appears knowledgeable, urgent or convincing.

How Impersonation Fraud Creates Pressure

Impersonation fraud often succeeds because the victim is encouraged to act before they have time to verify what they have been told.

In this case, the alleged scammers reportedly told victims that they were connected to legal matters overseas.

That type of claim can create immediate pressure.

A victim may believe that failing to cooperate could expose them to arrest, prosecution, financial penalties or other serious consequences.

Fraudsters can then exploit that fear by presenting a supposedly simple solution.

This may involve transferring funds, disclosing banking details, moving assets or following instructions designed to establish control over the victim.

Dubai Police also said some victims were encouraged to book hotel rooms and avoid communication with family and friends while the supposed verification process was taking place.

Isolation can make fraud more effective because it reduces the opportunity for another person to question the story or suggest independent verification.

Why Independent Verification Matters

One of the most effective responses to an unexpected financial or legal demand is to verify it independently.

This means avoiding the contact details provided by the person making the request.

If a caller claims to represent a government department, bank, regulator, law-enforcement agency or international organisation, the recipient should independently locate the organisation's official contact details and verify the request through a separate channel.

The same principle applies to businesses.

Payment instructions, changes to bank details, requests involving senior executives and unusual demands from suppliers or professional advisers should all be subject to appropriate verification.

Verification may include:

• Calling a known contact using previously verified details.
• Checking the organisation through an independent source.
• Confirming payment instructions through a second communication channel.
• Reviewing whether the request is consistent with normal procedures.
• Escalating unusual demands internally.
• Seeking professional advice where significant sums or legal threats are involved.

Fraudsters often rely on victims remaining inside the communication channel controlled by the fraudster.

Independent verification breaks that control.

Fraud Does Not Always Depend on Sophisticated Technology

Modern fraud is frequently associated with hacking, malware or artificial intelligence.

However, many successful schemes still depend primarily on social engineering.

The criminal does not necessarily need to compromise a banking system if they can persuade the victim to make the transfer themselves.

Information obtained from public sources, data breaches, social media or previous communications can also make an approach appear more convincing.

A caller who knows an individual's name, employer, location or other personal details may appear legitimate even though the information may have been obtained elsewhere.

Businesses therefore need to consider fraud prevention as both a technical and human issue.

Cyber security is important, but so are payment controls, verification procedures and staff awareness.

Significant Financial Losses Can Lead to Complex Investigations

Once funds have been transferred in response to a fraud, establishing where the money has gone can quickly become complicated.

Funds may move through several accounts, companies or jurisdictions.

In some cases, money may be divided across multiple recipients or converted into other assets.

Dubai Police said a specialist team analysed the complaints and traced the movement of funds as part of the investigation that led to the arrests.

For private organisations facing suspected fraud, similar issues can arise.

Understanding the wider picture may require reviewing financial transactions, corporate records, connected entities and individuals.

Conflict Advisory Group provides asset tracing services to support clients seeking to understand the location and movement of assets in complex commercial and fraud-related matters.

The objective of an asset-tracing exercise will depend on the circumstances.

It may involve identifying companies, property interests, business relationships or other relevant assets connected to an individual or organisation.

Businesses Can Also Be Targeted by Impersonation

The principles illustrated by the Dubai Police case are not limited to individual victims.

Businesses routinely receive payment instructions and requests that appear to originate from clients, suppliers, directors or professional advisers.

A fraudster may impersonate a senior executive and request an urgent transfer.

They may claim that a supplier's banking information has changed.

They may also pose as a regulator or other authority and demand information or payment.

The common element is often urgency.

The recipient is encouraged to act quickly and discouraged from independently checking the request.

Strong internal controls can make these schemes more difficult to execute.

Businesses should consider requiring additional verification for unusual transfers, changes to payment instructions and transactions above appropriate thresholds.

Where there are concerns about the legitimacy of an organisation or commercial relationship, independent due diligence can also help establish the people and entities behind it.

When Fraud Is Suspected

Suspected fraud should be approached methodically.

A victim or organisation may need to preserve relevant communications, transaction records, telephone numbers, account details and other evidence.

Where money has already moved, speed may also be important.

Banks, legal advisers, law enforcement and other appropriate parties may need to be contacted depending on the circumstances.

Businesses should avoid drawing conclusions before the available evidence has been reviewed.

An effective fraud response is focused on establishing facts, preserving evidence and understanding the people, companies and transactions involved.

In more complex cases, this may require corporate intelligence, financial enquiries, asset tracing or review of digital material.

The Wider Lesson From the Dubai Case

The alleged AED11.8 million fraud illustrates how effective impersonation can become when it is combined with fear and pressure.

The victims were not simply being asked to send money.

They were reportedly presented with a story involving international legal cases, official authority and consequences for failing to cooperate.

That context can make an otherwise unusual request appear urgent and credible.

For individuals and organisations in the UAE, the safest response to an unexpected demand involving money, banking information or personal data is to stop and verify it independently.

No genuine verification process should depend on preventing the person involved from seeking independent confirmation.

Dubai Police has urged the public to remain cautious about suspicious calls and messages requesting payments or personal and banking information, and to report attempted fraud through the appropriate official channels.

For organisations dealing with suspected fraud, disputed transactions or concerns about the people and companies behind a commercial relationship, Conflict Advisory Group can provide discreet support through due diligence, corporate intelligence and asset-tracing enquiries across the UAE and internationally.