Scam alert: Beware of phishing emails that impersonate CBUAE

A fresh round of scam messages were sent to residents in the UAE, impersonating the Central Bank of the UAE

by Gulf Business

March 25, 2024

Image credit: Getty Images

The UAE’s Cybersecurity Council has issued a warning to residents and travellers in the country, against criminal activity, such as phishing and impersonation scams.

It alerted residents against criminals sending deceptive emails to compromise online security such as bank accounts and private information such as username and passwords.

The warning comes as a fresh round of scam messages were sent to residents in the UAE, impersonating the Central Bank of the UAE (CBUAE).

The message received by residents includes a PDF document, that claims to be a notification to verify bank account details, from the UAE’s Ministry of Interior while the sender’s WhatsApp account used the logo of the CBUAE as its profile image.

While the document at first glance looks legitimate, upon a closer look, shows that it is a phishing message.

Incorrect details include, multiple authorities such as – CBUAE, Ministry of Interior, and Ministry of Finance cited in one document. The language also includes multiple spelling mistakes and formatting error.

It is important to know that government authorities do not initiate contact through WhatsApp channels.

Be alert against scams

The Cybersecurity Council highlights these details in its latest video. It warns against responding to messages or emails demanding ‘Urgent account verification’.

Cybercriminals regularly send deceptive phishing emails to compromise your online security. Stay one step ahead of their ever-evolving tactics.

Watch this reel to learn how to identify and protect yourself from email phishing scams. Your vigilance is crucial in safeguarding our… pic.twitter.com/hz1tm5HqOD

— Cyber Security Council (@cscgovae) March 24, 2024

Watch this reel to learn how to identify and protect yourself from email phishing scams. The authority emphasises that “vigilance is crucial in safeguarding our digital spaces”.

7 common scams

In an earlier notification, the Cybersecurity Council had alerted residents to seven types of common scam email or messages.

With technology advancing and email being utilized across various aspects of our daily lives, it’s crucial to recognize the dangers of deceptive emails aiming to steal sensitive data.
Understanding this threat is paramount for self-protection. Safeguard against cyber threats with… pic.twitter.com/BvkwQ87f7D

— Cyber Security Council (@cscgovae) March 20, 2024

These include:

Account verification requests
Cloud file sharing notifications
Fake invoices or bills
Delivery status updates
Bank account detail requests
Malicious file attachments
Requesting sensitive corporate information

How to detect phishing emails:

Carefully review the sender’s details such as phone number or email address. Government authorities do not initiate contact or send notifications through WhatsApp or Gmail accounts.
Check the document or message for details such as spelling mistakes, incorrect grammar, as well as illegitimate demands.
Authorities never ask for account details or Emirates ID details over email or calls.
Directly contact the sender through trusted channels without clicking on any links provided in the email.
Approach the Dubai Police to report such contacts.

Read: Interview: Positive Technologies maps cybersecurity trends in MENA