Cross-border fraud victims: options in United Arab Emirates

A transfer leaves a Dubai account on a Thursday afternoon. By Friday morning it has cleared two intermediary banks and landed in a jurisdiction with no mutual legal assistance treaty in sight. That is not a hypothetical – it is the pattern we see most often when cross-border fraud targets individuals and businesses connected to the United Arab Emirates.

Fraud victims with a UAE nexus have real options: urgent freezing relief, criminal complaints that trigger asset-preservation measures, on-chain tracing where crypto is involved, and disclosure orders that compel banks and intermediaries to reveal where the money went. None of these is guaranteed to succeed, and each depends on speed, evidence quality, and the specific jurisdictions through which the funds moved.

This analysis maps those options in sequence – what exists, how it works in practice, where it fails, and what a disciplined first response looks like. It is written for defrauded principals, insolvency practitioners, and the lawyers and funders who advise them.

Why the UAE presents a specific cross-border recovery context

The UAE sits at the intersection of significant capital flows, a civil-law-influenced domestic court system, financial-free-zone courts operating under common law, and outbound corridors that routinely touch South Asia, the Gulf Cooperation Council, Europe, and sub-Saharan Africa. That combination creates both opportunities and friction for a fraud victim seeking to recover assets.

On the opportunity side, the UAE has developed a serious anti-money-laundering and asset-recovery infrastructure over the past several years. The Dubai International Financial Centre courts – the DIFC courts – apply English-influenced common law, can grant urgent injunctive relief, and have a track record of issuing freezing orders in fraud matters. The Abu Dhabi Global Market courts operate on comparable principles. Both free-zone courts have mutual-enforcement arrangements that extend their reach, and both can issue disclosure orders compelling financial institutions to reveal account information.

On the friction side, coordinating between the DIFC or ADGM courts and the onshore UAE courts – which apply federal civil procedure – requires careful structuring. If the fraudster's assets sit in an onshore account rather than a free-zone one, a DIFC freezing order does not automatically freeze them. Local admitted counsel must act on the ground to bridge that gap. We coordinate closely with admitted local counsel in the UAE; local procedure governs the filing.

The first question is therefore not "can I recover?" but "where did the money actually go, and which court can reach it fastest?"

What are the realistic legal instruments available in the UAE?

Several distinct instruments are available to a fraud victim with a UAE nexus, and choosing correctly among them – or combining them – is the principal strategic task in the first days after a loss.

A domestic freezing injunction can be sought through the DIFC or ADGM courts in appropriate cases. These orders are interim in nature: they preserve assets pending the resolution of the underlying dispute. Where there is a credible risk of dissipation, these courts can act on an urgent, without-notice basis – meaning the defendant is not told the application is coming, which is the standard approach in fraud matters. Without notice is not a technicality; it is what prevents the fraudster from emptying the account the day before the hearing.

A proprietary injunction is a related but distinct tool. Where the victim can argue that the stolen money is still identifiable as their property – not merely a debt owed by the fraudster – the court can grant a proprietary injunction, asserting the claimant's ownership interest. This is analytically more powerful than a straightforward freezing order because it survives insolvency of the fraudster. It is also harder to obtain, requiring clear evidence of the asset trail.

Disclosure orders are often the precursor to both. A Bankers Trust order compels a bank to reveal account information – balances, recipients, timestamps – in circumstances where the claimant can demonstrate the bank holds information necessary to trace stolen proceeds. A Norwich Pharmal order operates on similar logic but extends to third parties more broadly: any person who, without being themselves a wrongdoer, holds information that would help identify the wrongdoer or locate the assets. In fraud matters, the critical phone carriers, payment processors, and correspondent banks often fall into this category.

Criminal complaint is a parallel track, not a substitute. The UAE has robust anti-fraud and cybercrime provisions. A well-documented criminal complaint can trigger police-led asset preservation measures, which in some circumstances move faster than civil proceedings. The limitation is that the criminal process is controlled by the prosecution, not the victim. It supplements civil recovery; it does not replace it.

How does tracing work when funds cross into or out of the UAE?

Tracing is the investigative foundation of any recovery. Without it, legal applications are applications in the dark – courts will not freeze what they cannot identify, and banks will not disclose what the claimant cannot specify.

For fiat transfers, tracing begins with the payment record: SWIFT identifiers, correspondent bank chains, beneficiary account details. In our experience, even a single SWIFT message reveals several data points – the ordering bank, the correspondent, the beneficiary institution, the account number, and the value date. Each is a node in the chain. Working outward from the origin, the chain typically resolves in two to four hops before reaching either a terminal account or a VASP.

Where funds enter a virtual asset service provider – that is, a crypto exchange – the trail does not go cold. Public blockchains record every transaction, and those records are permanent and cannot be altered by the fraudster. Blockchain-analytics tools allow wallet clustering and attribution: associating pseudonymous addresses with known entities, including centralised exchanges that have know-your-customer data on their users. A disclosure order against a VASP, once the relevant wallet address is identified, can compel production of the account holder's identity.

Where funds have moved into stablecoins, there is an additional tool: stablecoin issuers can, on appropriate legal process, freeze specific token balances directly at protocol level. This is a fast and, where available, highly effective measure – though it depends on the specific stablecoin, the jurisdiction of the issuer, and the speed at which the application reaches the issuer before the tokens are converted or moved again.

Cross-border tracing from the UAE into third countries requires coordination between forums. A disclosure order obtained in the DIFC courts may not be automatically enforceable in Switzerland or Singapore. Letters of request, bilateral cooperation mechanisms, and in some cases parallel proceedings in the receiving jurisdiction are the instruments that bridge that gap. Getting this sequencing right is where delays destroy recovery prospects.

What does the first 48 hours actually look like?

The first 48 hours after discovering a fraud are the highest-leverage period in any recovery matter. Decisions made – or not made – in that window often determine whether assets can be reached at all.

Before anything else, one question decides the next 48 hours: is the money still moving, or has it settled? If it is still in transit – within a correspondent banking chain, queued at an exchange, or sitting in a VASP omnibus wallet – the window for recall or freezing is measured in hours, not days. If it has already reached a terminal account and been withdrawn or converted, the approach shifts from prevention to trace-and-freeze.

Immediate steps in order of priority:

• Preserve every communication: emails, messages, call logs, screenshots, wire instructions, and contract documents. Do not delete anything and do not contact the fraudster, as doing so can compromise later proceedings.
• Contact the sending bank and request a recall or hold. Banks have limited ability to act unilaterally across jurisdictions, but a formal recall instruction starts the documented chain and sometimes triggers correspondent bank cooperation.
• Engage specialists capable of beginning the investigative trace immediately. Every hour of delay is an hour in which the trail gets colder and the assets get further.
• In parallel, assess whether a criminal complaint is appropriate. In the UAE, a timely complaint can trigger preservation measures through law-enforcement channels that civil courts cannot replicate at the same speed.

What the first 48 hours is not: it is not the time to conduct extended due diligence on the fraudster's background, to consult widely without acting, or to assume the bank will handle it. Banks have compliance obligations; they are not recovery agents. A victim who waits for the bank to resolve the matter will, in most cases, wait too long.

The steps above cover the typical pattern. Your matter turns on specific facts – where the money went, how fast, and which forums can act. A confidential case review tells you whether it is worth pursuing. Contact Axiom Trace at info@axiomtracel.com.

Cross-border enforcement: reaching assets that have left the UAE

For a claimant chasing funds across two legal systems, the hard part is not the claim – it is timing. A judgment or order obtained in the UAE means nothing in a jurisdiction that does not recognise it, unless steps are taken to convert it into locally enforceable process.

The UAE is party to various bilateral and multilateral treaties on judicial cooperation, and the DIFC courts have entered into a series of memoranda of understanding with courts in other major financial centres. These arrangements facilitate the recognition and enforcement of DIFC judgments and orders in those partner jurisdictions, and vice versa. Where they apply, they substantially reduce the time and cost of enforcement abroad.

Where no treaty mechanism applies, the common-law route – or its civil-law equivalent in the receiving jurisdiction – requires commencing fresh enforcement proceedings locally. This is slower and more expensive, but it is the standard path when assets have moved to a jurisdiction outside any treaty network. Enforcement of arbitral awards under the New York Convention provides a parallel route where the underlying dispute is subject to arbitration – the Convention has wide membership, and an arbitral award is often more portable than a court judgment.

A Chabra order – relief against a third party who holds assets that are, in substance, the defendant's – can extend the reach of freezing proceedings to entities nominally separate from the primary fraudster. This is a powerful tool in fraud matters where the defendant has structured assets through nominees, shell companies, or related parties. Establishing the connection requires evidence, and that evidence usually comes from earlier disclosure proceedings.

In our experience, the jurisdictions most frequently encountered downstream of UAE-connected frauds are Singapore, Hong Kong, several offshore centres in the common-law world, and – where crypto is involved – any of the major centralised exchange hubs regardless of geography. Each has its own procedural requirements. Coordinating simultaneous applications across two or more of these forums, while managing the risk that action in one tips off the defendant in another, is the central operational challenge.

Where recovery attempts most commonly fail – and what that tells you

Honest analysis requires naming the failure modes as clearly as the instruments available. Recovery is not certain, and the gap between a well-resourced attempt and a failed one is often narrower than victims expect at the outset.

The most common failure is delay. Assets dissipate. Fraudsters who have executed a cross-border scheme have usually planned the exit. Within days of a fraud, a disciplined actor will have converted, layered, and moved the proceeds through multiple accounts, using nominees and offshore vehicles to obscure the trail. By the time a victim has assembled a legal team and filed an application, the terminal account may be empty and the beneficial owner may be untraceable without sustained disclosure proceedings.

The second failure mode is asset-class mismatch. A freezing order over a bank account does nothing if the funds have already become crypto. A disclosure order against a VASP does nothing if the VASP is unregulated and outside any cooperative jurisdiction. Recovery requires matching the legal instrument to the asset's current form and location – and getting that wrong wastes time and costs money without advancing the matter.

The third failure mode is evidence fragility. Courts will not grant urgent relief on speculation. They require evidence of the fraud, evidence of the asset to be frozen, and evidence that there is a real risk of dissipation. A victim who has preserved no documentation, whose only record is a phone call, and who cannot identify where the money went faces an almost impossible evidential burden. This is why evidence preservation in the first hours is not optional.

A micro-case illustrates the contrast. In a matter in the Gulf, autumn 2024, involving funds in the high seven figures, Axiom Trace was engaged within 36 hours of the loss. Payment-trail reconstruction identified an onward transfer to a centralised exchange within the first day. A disclosure order application was filed on an urgent without-notice basis, the exchange account was frozen before withdrawal, and the underlying criminal complaint, filed in parallel, produced corroborating account data within the subsequent week. Recovery was not complete – a portion of the funds had already been withdrawn – but the preserved portion was substantial. The variable that determined the outcome was speed of instruction.

The myth that reporting to your bank is enough – and the secondary scam risk

One of the most persistent myths in fraud response is that reporting to the bank is sufficient and that the bank's fraud team will handle the recovery. Banks have important roles in fraud response. They can initiate recalls, flag transactions to correspondent institutions, and cooperate with law enforcement. What they cannot do is obtain freezing orders, conduct cross-border tracing, or compel disclosure from third parties.

A bank recall request is not a legal hold. The receiving bank has no obligation to freeze funds on the basis of a recall request alone; the decision is commercial and at the receiving bank's discretion. In cross-border fraud, where the receiving bank is in a different jurisdiction and has no legal process compelling it to act, the recall request often fails or produces a partial result at best.

Equally important is the secondary scam risk. As of early 2026, the ecosystem of fraudulent "recovery firms" – entities that approach fraud victims, charge substantial upfront fees, and deliver nothing – remains active and, in some regions, growing. These operations frequently target victims of investment fraud and crypto scams, representing themselves as specialised recovery agents with connections to law enforcement or regulatory bodies. They promise what real recovery cannot promise: guaranteed return of funds, specific percentages, fixed timelines.

Real asset recovery is conditional, slow, expensive, and uncertain. It involves courts, disclosure orders, formal legal proceedings, and qualified admitted counsel. It does not involve upfront fees paid to an entity without a verifiable identity or a credible legal team. If anyone contacts you unsolicited after a fraud and offers guaranteed recovery for an advance payment, that is a second fraud, not a solution.

Our guidance on recognising and avoiding secondary scams is set out in more detail in the Fraud Response insight hub. The same logic applies whether the original fraud occurred in the UAE or anywhere else.

For a confidential read on whether your situation presents recoverable assets, request a case review: info@axiomtracel.com.

Strategy for referring lawyers and insolvency practitioners

Lawyers and insolvency practitioners who encounter UAE-connected fraud in the course of their mandates face a specific coordination challenge. The client may have an existing legal relationship in one jurisdiction, but the assets – and the fraudster – may be in another. Building a recovery team that spans both without creating conflict or duplication requires early coordination.

From the perspective of an insolvency practitioner tracing assets stripped from an estate, the UAE context offers both tools and constraints. The DIFC and ADGM courts are accessible and effective. The onshore civil courts require admitted local counsel and move at a different pace. Identifying which forum holds the assets – and whether those assets are in free-zone or onshore accounts – is the first step before any application is made.

For referring lawyers, the key question is whether the matter benefits from a parallel civil and criminal track. In our experience, a well-constructed criminal complaint in the UAE can produce asset-preservation outcomes – and investigative results – that civil proceedings alone cannot achieve within the same timeframe. The two tracks interact: criminal records obtained through the complaint can strengthen the civil evidence base, and civil disclosure orders can provide specificity that the criminal complaint lacks at the outset.

Where arbitration is involved – as it frequently is in commercial disputes with UAE counterparties – the enforceability of any award across the relevant jurisdictions becomes a central concern from day one. Enforcement of arbitral awards under the New York Convention is the standard mechanism, but the specific procedural requirements of the enforcement jurisdiction must be assessed before the arbitration commences, not after the award is obtained.

For further context on how the UAE fits within a broader global recovery picture, and where funds from UAE-connected frauds most frequently travel, see our jurisdiction-specific analysis at UAE fraud recovery insight.

Frequently asked questions

Q: What should I do in the first hours after a fraud?

A: Preserve all evidence immediately – every message, payment instruction, contract, and screenshot. Contact your bank to issue a recall, but do not rely on the bank alone. Engage a specialist to begin tracing as quickly as possible. In the UAE context, assess whether a parallel criminal complaint is appropriate; it can trigger preservation measures faster than civil proceedings in some circumstances. Time is the variable that most consistently determines how much of the loss is recoverable.

Q: Is my loss realistically recoverable?

A: That depends on several factors: how quickly you act, where the funds went, what evidence you have, and whether the assets are still in a form that can be frozen. Recovery is conditional and never certain. The most reliable predictor of a good outcome is speed of instruction combined with quality of evidence preserved. A confidential case review – with no commitment required – is the fastest way to assess viability. You can also use the practical guidance on cross-jurisdictional fraud response to understand what factors courts and practitioners consider when assessing a matter.

Q: How do I avoid a second, recovery-focused scam?

A: Legitimate asset recovery firms do not cold-call fraud victims, do not promise guaranteed outcomes, and do not request large upfront fees as a condition of starting work. Any entity that contacts you unsolicited, claims connections to law enforcement or regulatory authorities, and asks for an advance payment is almost certainly a secondary fraud operation. Real recovery is conducted through formal legal proceedings by admitted counsel and qualified investigators. Ask for verifiable credentials, a clear engagement structure, and an honest assessment of prospects – not promises.

Related analysis

• Fraud Response insight hub – practical guidance on fraud typologies, first-response steps, and avoiding secondary scams.
• UAE fraud recovery insight – jurisdiction-specific analysis of the UAE's legal infrastructure for asset recovery.
• When scam money lands in the United States – what to do – cross-border recovery options where funds have moved to the US, a common onward destination from Gulf-connected frauds.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. We coordinate closely with admitted local counsel in the UAE; local procedure governs the filing of any proceedings there. In our experience, the difference between a matter that recovers something and one that recovers nothing is almost always the speed and discipline of the first response. To discuss a matter, contact info@axiomtracel.com.

If funds have already moved, time matters – request a confidential case review at info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace coordinates closely with admitted local counsel in the UAE; local procedure governs all filings. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.