Identity theft and protecting your personal data

Your Emirates ID, passport, phone number and UAE Pass are the keys to your financial life. In the wrong hands they can be used to open accounts, take over your phone number or pass a bank's checks in your name.

What criminals can do with your details

• A cybersecurity expert quoted by Khaleej Times (2026) named SIM-swap fraud and fake 'know your customer' onboarding as common uses of stolen ID data.
• SIM-swap fraud means taking over your phone number so the criminal receives your bank OTPs (Khaleej Times, 2026).
• Fake onboarding uses your identity to open mule accounts or false financial profiles in your name (Khaleej Times, 2026).
• Dubai Police warned in 2026 that sharing UAE Pass login details and Emirates ID data with fake callers could enable SIM swaps and give criminals access to bank accounts through mobile banking apps (Gulf News).
• Criminals also stitch together scraps of data, such as your birthday, school, phone number and pet's name, into a fuller profile (Khaleej Times, 2026).

Sharing ID copies carefully

• Share ID only when it is truly needed and for a clear purpose. Ask why it is needed (Khaleej Times, 2026).
• Add a watermark, the date and the purpose to any copy you send, for example 'For XYZ gym membership only, 10 October 2026' (Khaleej Times, 2026).
• Where possible, use UAE PASS verification rather than sending photos of your documents (Khaleej Times, 2026).
• Avoid sending ID images over WhatsApp or other unsecured channels, and never send them together with passwords or one-time codes (Khaleej Times, 2026).
• Delete ID photos from chats and downloads once they have been used, and do not keep them in an unlocked phone gallery.

Your UAE Pass and phone number are precious

• Never share your UAE Pass login, PIN or approval codes. Authorities never request passwords or verification codes by phone or text (Gulf News, reporting Dubai Police, 2026).
• Do not approve a UAE Pass or banking login request on your phone that you did not start yourself.
• If your phone suddenly loses signal for no clear reason and you start receiving odd login alerts, contact your mobile provider and your bank straight away. This can be a sign of SIM swap.
• Use a screen lock and turn on 2-step verification for email, banking, social media and shopping accounts (NCSC).

Oversharing online

• Do not post photos of your Emirates ID, passport, boarding pass, bank card or school ID, even partly covered.
• Think twice before posting your full date of birth, phone number or home location. These are the details used to answer security questions and pass identity checks.
• Ignore unexpected requests for personal information by call, email or text. Honest organisations do not ask this way (FTC).
• Online quizzes asking for your first pet, first school or mother's name are collecting common security-question answers.

Warning signs that someone is using your identity

• Charges for things you did not buy, or withdrawals you did not make (FTC).
• Accounts or loans in your name that you do not recognise (FTC).
• Bills, statements or messages that suddenly stop arriving, which may mean someone changed your details (FTC).
• Calls or letters about debts or services you never signed up for.
• If you see any of these, contact your bank immediately and report it to the police (see lesson sc-08).