Crypto Scams in the UAE and How to Avoid Them

Dubai’s reputation as a crypto hub cuts both ways. The same things that attract legitimate exchanges — a large, wealthy, internationally connected population, high smartphone use and real interest in digital assets — also attract people who want to steal from that population. Most crypto fraud that reaches UAE residents isn’t technically clever. It relies on urgency, trust in a familiar brand name, and the fact that a blockchain transfer can’t simply be reversed.

This guide covers the scams we see described most often in UAE enforcement notices, police warnings and complaints, explains how to check any platform against official sources in a couple of minutes, and sets out what to do — in order — if you have already sent money. None of it requires technical knowledge, only the habit of checking before you send.

Fake exchanges and unlicensed trading apps

The most damaging scams look like real platforms. You are shown a polished trading app or website, often with live-looking charts, a “VARA licence” badge and a support chat. You deposit a small amount, it grows quickly, and you are encouraged to add more. When you try to withdraw, a “tax”, “unlock fee” or “verification deposit” suddenly appears. Paying it never releases the funds.

A variation uses real names. VARA has repeatedly warned about firms misrepresenting their status — including entities claiming to be part of the Dubai Land Department’s real-estate tokenisation pilot (alerts in April 2025 and February 2026). In July 2025, the federal identity authority, the securities regulator and VARA jointly denied claims that staking Toncoin could earn a UAE Golden Visa and said crypto investors are not eligible for it. If a crypto offer is wrapped in a government programme, check the government source directly.

There is also a grey zone between fraud and unlicensed activity. In October 2025 VARA fined 19 unlicensed firms between AED 100,000 and AED 600,000 each and issued cease-and-desist orders, and in 2026 it fined large offshore exchanges such as KuCoin and MEXC for serving Dubai without a licence. Some global exchanges serve UAE residents cross-border under licences from other countries — CEX.IO, for example, relies on its Gibraltar GFSC authorisation and US FinCEN registration rather than a UAE licence. That is a different risk from an outright fake: the company exists, but you won’t have a UAE regulator to complain to. Whatever a platform says about itself, verify it on the regulator’s register it names.

How to check VARA’s register and alerts in two minutes

Before sending any money, do two checks on vara.ae.

First, the register. Open the VARA public register and search for the exact legal name — for example “Binance FZE” or “Foris DAX Middle East FZE” — not the marketing brand. Check that the status is active and that the licensed activities cover what you are doing; a broker-dealer licence, for instance, doesn’t cover everything an exchange does. Note that firms with only an in-principle approvalIn-principle approval (IPA)An early regulatory step. A firm with only an IPA usually cannot serve clients yet — check for a full, active licence. are not allowed to serve clients yet.

Second, the alerts. VARA’s regulatory notices page lists consumer and investor alerts and fines. Past alerts have named, among others, BTC Bay, Koto Crypto, Coincashy, Finchain, Crypto Force, XT and Stabit (November 2024), JPEX (2023), MKAN Coin and a general memecoin warning (February 2025), and Vesta Prime Portal (October 2025). A brand on that page is a hard stop.

WhatsApp and Telegram “investment groups”

It often starts with a wrong-number message, a LinkedIn contact, or being added to a WhatsApp group with a name like “VIP Crypto Signals Dubai”. The group is full of members posting screenshots of profits, all of whom are part of the scheme. A “professor” or “analyst” shares free tips that seem to work. Then you are invited to a private platform or a “mining pool” with fixed monthly returns.

Over weeks, sometimes months, the scammers build a relationship — this is the pattern known globally as “pig butchering”. Dubai Police have targeted these networks directly: in April 2026 a joint operation with the FBI and Chinese police led to 276 arrests and the shutdown of nine fraud centres running crypto investment scams, according to BleepingComputer and US authorities.

The tells are consistent: guaranteed or fixed returns, pressure to move quickly, a platform you can’t find on any register, and a friendly contact who never meets in person or video-calls convincingly. Legitimate investment firms in the UAE are licensed and don’t recruit through anonymous chat groups.

P2P scams: fake receipts and chargebacks

P2PP2PPeer-to-peer trading: you buy or sell crypto directly with another person, while the platform holds the coins in escrow until the bank payment clears. trading, where you buy or sell USDT directly with another user and pay by bank transfer, is popular in the UAE — and so are scams around it. Three patterns come up again and again.

Fake payment receipts. A buyer sends a screenshot of a bank transfer that never happened, or an edited receipt, and pressures you to release the USDT. Always confirm the money has actually arrived in your bank app before releasing — never rely on a screenshot or an SMS that could be spoofed.

Third-party money. A buyer pays you from someone else’s account, often a fraud victim’s. When the victim reports it, the bank can recall the payment or freeze your account, and you may be questioned about funds you received. Only accept payments from an account in the counterparty’s own name.

Card chargebacksChargebackWhen a payer asks their bank to reverse a payment. A classic P2P scam: pay, receive crypto, then claim the transfer was fraud.. Where card payment is involved, a buyer can dispute the charge after receiving crypto, leaving you without either.

Our P2P crypto guide covers safer ways to trade, including the regulated AED bank rails that have replaced P2P for many users.

Fake OTC desks and cash meetups for USDT

Many residents who want to swap cash for USDT, or the reverse, find “exchange offices” through ads, paid press releases or Telegram. Some ask you to send crypto first and promise cash on arrival; others meet in a café or car park and hand over counterfeit notes, or simply rob the buyer. Even when the deal goes through, receiving cash or crypto that turns out to be linked to fraud can lead to account freezes and investigation under the UAE’s 2025 AML law.

None of the cash-exchange shops we checked was on the VARA register, and VARA has issued alerts naming cash-style operators. For large amounts, a VARA-licensed OTC deskOTC deskAn “over-the-counter” service that arranges large crypto trades privately at one agreed price, instead of on a public order book. that settles by bank transfer is the safer route; for physical cash, see our guide to crypto to cash in Dubai.

Impersonation: fake Binance, fake VARA, fake police

Impersonation is the scam that most often reaches people who have done everything else right. In Arabic searches it frequently shows up as “نصب بينانس” — but the problem is not Binance itself, which holds a VARA licence through Binance FZE (VL/24/04/001). The fraud is people pretending to be Binance.

Common versions: a fake “Binance support” agent on WhatsApp or Telegram warning that your account is about to be frozen; a lookalike website or app with a near-identical address; a “Binance VIP” or “Binance UAE” group promising guaranteed signals; or an email asking you to “verify” by entering your login and 2FA code. Binance offers an official tool, Binance Verify, on binance.com, where you can check whether an email, phone number, website or social account is genuine. The same principle applies to every exchange: contact support only from inside the official app.

Government impersonation follows the same script. Callers claim to be from VARA, the police, the Central Bank or a court, saying your account is linked to money laundering and must be “secured” by transferring funds or sharing an OTP. VARA does not contact individuals to collect funds, and UAE police don’t ask you to move money to a “safe wallet”. Hang up and call the official number yourself.

Recovery scams: the second hit

People who have lost money are targeted again. After a loss, victims are contacted by “lawyers”, “blockchain forensics firms” or “VARA recovery agents” who claim they can trace and return the funds for an upfront fee, sometimes quoting real details from the original scam. Some even pose as police. The fee is paid and the “recovery” never happens.

Genuine recovery is slow and runs through the police, your bank and — where funds land at a regulated exchange — that exchange’s compliance team. No legitimate firm can guarantee recovery, and none needs you to pay in crypto to an unknown wallet first. If you have been scammed, assume anyone who contacts you unprompted about getting your money back is part of the problem.

What to do if you’ve been scammed

Speed matters. Funds that are still in a bank transfer, or that have just landed at a regulated exchange, can sometimes be stopped. Work through these steps the same day.

1. Step

   Stop sending money and cut contact

   Do not pay any “release fee”, “tax” or “unlock charge”, however urgent it sounds. Stop replying to the scammer, but don’t delete the chat — you will need it as evidence.

   If you shared a seed phrase or gave remote access to a device, move any remaining funds immediately to a new wallet created on a clean device.

2. Step

   Call your bank immediately

   If you paid by bank transfer or card, call your bank’s fraud line and ask them to stop or attempt a recall of the payment, and to block your card if needed. The earlier you call, the better the chance.

   Change your banking passwords if you shared any login details, and ask the bank for a reference number for your report.

3. Step

   Collect the evidence

   Save screenshots of chats, the website or app name and address, transaction IDs (hashes), the wallet addresses you sent to, bank receipts, phone numbers and usernames.

   Write a short timeline while it is fresh: when contact started, what was promised, and each payment you made.

4. Step

   Report to the police

   In Dubai, report through the eCrime service in the Dubai Police app or on dubaipolice.gov.ae, or call 901 (non-emergency); use 999 in an emergency. Older guides point to ecrime.ae, but we could not confirm that address is still the live entry point. Dubai Police’s eCrime Hub at ecrimehub.gov.ae is an awareness platform; its “Report and Recover” section points victims to the reporting channels.

   In Abu Dhabi, file the report at a police station or in the ADPolice app. Abu Dhabi Police’s Aman service (toll-free 8002626, SMS 2828, aman@adpolice.gov.ae) is for confidential tips, such as passing on a scammer’s number, not for filing a case. Residents of other emirates can report to their local police.

5. Step

   Notify the platforms involved

   If you sent crypto from a licensed exchange, or the funds went to a wallet on a known exchange, report it to that exchange’s support from inside the official app, quoting the transaction hash and your police reference. Exchanges can freeze funds that arrive on their platform when law enforcement asks.

   If the scam used a fake version of a real brand, report it to that brand too.

6. Step

   Watch for follow-up scams

   Expect “recovery agents” to contact you. Ignore them, and route all follow-up through the police and your bank.

   Turn on 2FA everywhere, review which devices are logged in to your accounts, and tell family members what happened — scammers often move on to relatives.

Habits that prevent most crypto scams

Almost every scam above fails against a few simple habits. Use only platforms you have checked on the regulator’s register, and reach them by typing the address yourself or through the official app store. Test every new platform with a small amount, including a withdrawal back to your bank, before committing more. Keep long-term holdings in a wallet you control — our crypto wallets guide explains how — and never share a seed phrase with anyone.

Above all, treat urgency as a warning sign. A real exchange, bank or regulator will never need you to act within the next ten minutes. Crypto assets are volatile even without fraud, so invest only what you can afford to lose.