Corporate Criminal Investigations in the UAE: Business Exposure, Defence and Crisis Response

A payment dispute escalates into an allegation of fraud. A regulator identifies conduct that may require referral to investigative authorities. A former employee alleges that confidential information or company data was unlawfully used. A transaction under internal review raises questions about payments, documents or authority.

In each case, an issue that began as a commercial, employment, compliance or governance problem may develop into a criminal investigation in the UAE.

For boards and senior management, the immediate concern is rarely an abstract question about criminal liability. The practical questions come first.

Has a complaint actually been filed? Who is named? Can senior personnel travel? Could employees be called for interview? Are devices or company records likely to be requested? Does the business need to notify an insurer, bank, auditor or regulator? Can an internal investigation continue without compromising the defence position?

These questions need disciplined answers quickly.

A poorly managed first response can create problems that did not exist when the allegation first emerged. Records may be lost. Employees may give inconsistent explanations. A commercially motivated communication may be treated as an admission. The company and an executive may unknowingly adopt conflicting positions. An internal review may collect information unlawfully or contaminate evidence.

Corporate criminal defence in the UAE therefore requires more than reacting to the allegation itself. The legal response must protect the criminal position while preserving operational continuity, evidence, governance integrity and the company's position in any related civil, regulatory or arbitral proceedings.

When Does a Commercial Dispute Become a Criminal Matter?

A failed transaction is not automatically fraud.

An unpaid invoice is not automatically a criminal offence.

A breach of contract is not criminal merely because the financial consequences are serious.

Many disputes properly remain within the civil courts or arbitration.

That distinction is important because allegations made during a commercial dispute can create substantial pressure on directors and management before their legal character has been established.

The analysis should begin with conduct, evidence and legal elements rather than labels used by the complainant.

Depending on the circumstances, criminal scrutiny may arise from allegations involving matters such as:

• deception or fraudulent conduct;

• breach of trust;

• forgery or use of allegedly forged documents;

• bribery or corruption;

• misappropriation;

• cyber-enabled conduct;

• unauthorised access to systems or information;

• misuse or disclosure of confidential information;

• unlawful handling of personal data;

• money laundering;

• concealment or movement of suspected criminal proceeds; or

• other conduct prohibited under applicable UAE legislation.

The fact that an allegation arose within a contractual relationship does not prevent authorities from examining whether separate criminal conduct occurred.

Equally, the filing of a criminal complaint does not establish that a crime has been committed.

The proper legal characterisation depends on the evidence, relevant intention or knowledge requirements, the nature of the transaction and the particular offence alleged.

Why Intent and Evidence Matter

Commercial disputes frequently involve conflicting interpretations of the same events.

One party may describe a representation as deliberately false. The other may say it was a good-faith commercial forecast that later proved incorrect.

One party may allege misappropriation. The other may rely on an agreement, power of attorney, board approval or historical course of dealing as authority for the transaction.

A document may be described as forged, when the actual dispute concerns authority, authenticity, amendment or the circumstances in which it was issued.

The criminal analysis therefore cannot safely begin with the allegation alone.

Counsel needs to understand:

Who made the representation?

What did that person know at the time?

What authority did they possess?

What documentation existed?

Where did the money or property move?

Who benefited?

What happened before and after the relevant event?

The chronology often determines whether the matter is a contractual dispute with aggressive allegations or a genuine criminal-risk event.

Criminal Proceedings Can Run Alongside Commercial Proceedings

A criminal investigation may exist at the same time as a civil claim, arbitration, regulatory inquiry, employment dispute or internal investigation.

The factual overlap can be substantial.

The legal objectives are not.

A statement prepared to strengthen a civil recovery claim may affect the criminal file.

An admission made in correspondence intended to achieve a commercial settlement may later require explanation in another proceeding.

Documents disclosed voluntarily in one process may become relevant elsewhere.

The company should therefore avoid managing each proceeding in isolation.

Where the same transaction has generated several legal fronts, there should be a coordinated strategy covering criminal defence, commercial claims, regulatory exposure, evidence and communications.

The Immediate Business Consequences of a Criminal Investigation

Criminal exposure frequently becomes an operational issue before it becomes a trial issue.

Depending on the case, management may need to deal with:

• police or Public Prosecution inquiries;

• document requests;

• employee interviews;

• access to devices or electronic evidence;

• banking concerns;

• regulator engagement;

• insurance notifications;

• auditor inquiries;

• internal reporting obligations;

• board escalation;

• travel considerations; and

• reputational exposure.

The correct response depends heavily on the procedural stage.

A threat to “file a criminal case” is not the same as a complaint that has actually been registered.

A police inquiry is not the same as formal questioning before the Public Prosecution.

An individual asked to provide information may occupy a different procedural position from someone formally accused.

Understanding that distinction is essential before management reacts.

Can a Criminal Complaint Result in a UAE Travel Ban?

Potentially, but not automatically.

This is an important distinction for executives and international businesses.

Under the UAE Criminal Procedures Law, the Public Prosecution may, depending on the circumstances, issue procedural measures that can include a notice to appear, an arrest warrant or a travel-ban order.

The existence of a commercial complaint by itself should therefore not be treated as proof that a travel restriction exists.

Where mobility is commercially important, the correct question is not whether travel bans are theoretically possible. It is whether a restriction has been issued, against whom, in what proceeding and what procedural options are available.

For multinational businesses, uncertainty itself can be disruptive. A senior executive who regularly travels between the UAE and other jurisdictions may require prompt verification of the procedural position before making assumptions.

The First 48 Hours: Protect the Position Before Explaining It

Early decisions can materially affect the defence.

One of management's first responsibilities should be to preserve relevant evidence.

Depending on the matter, that may include:

• emails;

• messaging applications;

• contracts and amendments;

• invoices;

• accounting records;

• bank instructions;

• board resolutions;

• powers of attorney;

• meeting notes;

• access logs;

• transaction data;

• CCTV where relevant;

• employment records;

• document metadata; and

• relevant device or system information.

Preservation does not mean collecting everything indiscriminately.

The process should be legally controlled and proportionate.

Companies should not use an investigation as justification to access private accounts without lawful basis, alter documents, interfere with witnesses, remove evidence or conduct unnecessary searches of personal information.

The objective is to preserve the factual record, not recreate it.

Issue an Appropriate Legal Hold

Where the matter is sufficiently serious, management should consider a documented preservation instruction to relevant personnel.

That instruction should identify the categories of material that must not be deleted or altered and suspend ordinary destruction processes where necessary.

IT personnel may need to preserve backup data, logs or accounts that would otherwise be deleted automatically.

The scope should remain targeted.

An effective legal hold preserves material without broadcasting allegations unnecessarily throughout the organisation.

Do Not Let Employees Build the Company's Narrative

One of the most damaging early mistakes is uncontrolled internal discussion.

Employees may attempt to help by drafting explanations, reconstructing events from memory, contacting former colleagues or communicating directly with the complainant.

Those actions can create inconsistent accounts and new documentary evidence.

Management should therefore establish clear communication control.

Employees can be instructed to preserve relevant material and refer external requests to the appropriate internal contact.

That does not mean instructing anyone to conceal information or obstruct lawful cooperation.

It means ensuring that official responses are accurate, properly authorised and legally informed.

Create a Focused Response Team

For a significant corporate criminal matter, a central response team can help maintain control.

Depending on the issue, participants may include:

• a board representative;

• a designated senior executive;

• in-house legal counsel;

• compliance;

• finance;

• IT or information security;

• HR where employees are involved; and

• external criminal and dispute counsel.

Not everyone needs access to every fact.

The response structure should define who can instruct external advisers, who approves communications, who manages evidence and who makes operational decisions.

A controlled response is particularly important where the allegation concerns senior management itself.

Understand the Public Prosecution Stage

Once a matter reaches formal criminal investigation, procedural status matters.

The accused should understand the allegation being investigated and obtain advice before substantive questioning where possible.

The UAE Criminal Procedures Law provides for legal representation during investigation, subject to the Public Prosecution's powers and the circumstances of the investigation.

This is one reason why informal preparation should not be confused with formal legal defence.

What appears to management as a simple request to “explain what happened” may form part of the evidential record.

Separate the Company's Interests From the Individual's Interests

A company and its directors do not always have identical legal interests.

At the beginning of a matter, they may appear aligned.

That alignment can change.

The company may wish to establish that an individual exceeded delegated authority.

The individual may argue that senior management knew of and approved the conduct.

The company may decide that suspected misconduct should be reported or remediated.

The employee may consider the same conduct to have been standard company practice.

The company may rely on internal controls as evidence of compliance while an individual argues that those controls were never followed in practice.

These are not theoretical differences.

They can determine who should instruct counsel and whether separate legal representation is needed.

When Should Separate Counsel Be Considered?

Separate representation should be considered where there is a material possibility that the company's defence and the individual's defence may diverge.

Relevant questions include:

• Did the individual act within delegated authority?
• Could the company attribute responsibility to that individual?
• Could the individual attribute knowledge or approval to other officers?
• Is one person's evidence potentially adverse to another?
• Could disciplinary action or termination follow?
• Could the company seek recovery from the individual?
• Does the company have disclosure or reporting obligations inconsistent with the individual's preferred position?

Not every case requires separate lawyers for everyone involved.

But the question should be addressed early rather than after confidential information has already been shared across potentially conflicting interests.

Family Businesses Require Particular Care

The distinction between corporate and personal interests can be especially difficult in family-owned and closely held businesses.

Commercial decisions may historically have been approved informally.

Personal and company funds may have interacted.

Authority may depend on longstanding relationships rather than documented delegations.

Directors may also be shareholders, relatives, authorised signatories and beneficiaries of transactions.

Practices that worked commercially for years can become difficult to explain once examined through the lens of a criminal allegation.

Clear documentation of authority, related-party transactions, payment instructions and corporate approvals can therefore become central evidence.

Build the Facts Before Building the Defence Narrative

The strongest defence normally starts with chronology.

Who did what?

When?

Under whose authority?

What was known at the time?

Which document governed the action?

Where did the money, asset or data move?

What happened next?

The investigation should test favourable and unfavourable evidence.

If approvals are missing, management needs to know.

If emails contradict the company's preferred explanation, counsel needs to see them.

If there were weaknesses in internal controls, they should not be discovered for the first time when authorities raise them.

A narrative built before the evidence has been tested is fragile.

A defence built from verified facts is far more difficult to destabilise.

Preserve Metadata and Digital Evidence

Modern business investigations are often decided by electronic evidence.

A printed email may not reveal when it was created, forwarded or altered.

A screenshot may not establish source, authorship or completeness.

Messaging platforms may contain deleted or edited communications.

System logs can establish when a user accessed data.

File metadata may become important where authenticity is challenged.

For that reason, businesses should avoid amateur attempts to “clean up” or reorganise relevant electronic material.

Where digital evidence is likely to matter, preservation should protect both content and technical integrity.

Cross-Border Evidence Requires Additional Planning

Many UAE businesses operate across several jurisdictions.

Relevant documents may sit with foreign subsidiaries, parent companies, overseas service providers or cloud platforms.

Evidence may be in Arabic, English and other languages.

This can create questions concerning:

• access rights;

• data transfers;

• confidentiality;

• privilege;

• document ownership;

• authenticity;

• translation;

• localisation requirements; and

• foreign regulatory restrictions.

A global group should not assume that information can simply be moved between jurisdictions because all entities share the same parent company.

Evidence strategy should consider the legal position in the UAE as well as restrictions applicable where the information is held.

Data Protection Does Not Prevent Legitimate Defence Work

Internal investigations can involve significant personal information.

The UAE Personal Data Protection Law recognises circumstances in which processing may be justified in connection with legal claims, defence, judicial proceedings or security procedures.

That is important.

But it should not be interpreted as an unlimited licence to access employees' personal communications or collect irrelevant information.

The investigation should remain linked to a legitimate legal purpose and should respect applicable data-protection obligations, confidentiality requirements and any separate regime applicable in DIFC, ADGM or another regulated environment.

Cybercrime Allegations Require Separate Analysis

Where the conduct involves email, messaging applications, databases, websites, electronic documents, social media, payment systems or unauthorised system access, Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes may become relevant in addition to general criminal legislation.

Cyber-related allegations can arise unexpectedly within ordinary commercial disputes.

A departing employee accesses data.

A party alleges that electronic documents were altered.

Confidential information is forwarded outside authorised channels.

Someone accesses an account using credentials provided for a different purpose.

Management should not assume that the fact the parties had a commercial or employment relationship answers the cybercrime question.

The scope of authorisation and the specific conduct need to be examined carefully.

Fraud Allegations Require More Than the Word “Fraud”

Fraud is one of the most common allegations raised when transactions fail.

It is also one of the most frequently overused labels in commercial disputes.

The defence should examine precisely what representation or conduct is said to have been deceptive, what the accused knew, what the complainant relied upon and how the alleged loss occurred.

Contemporaneous documents are often decisive.

An optimistic forecast that later failed is not analysed in the same way as a representation made with knowledge that the relevant fact was false.

The legal analysis must follow the evidence rather than the language adopted in the complaint.

Forgery Allegations Can Turn on Corporate Authority

Forgery issues can arise around contracts, letters, signatures, board resolutions, invoices, certificates and electronic records.

In corporate disputes, authority can be as important as authenticity.

A document may bear a genuine signature but be challenged because the person lacked power to bind the company.

Alternatively, authority may exist but the document itself may be alleged to have been altered.

The defence therefore needs to separate:

• authenticity;

• authority;

• accuracy;

• alteration; and

• intended legal effect.

These are different questions and should not be collapsed into one factual argument.

Bribery and Corruption Risk Should Be Escalated Immediately

Allegations concerning improper payments, gifts, commissions, intermediaries or influence can create both criminal and governance exposure.

The UAE Crimes and Penalties framework contains bribery offences, and the position can become more complex where public officials, foreign officials, intermediaries or regulated entities are involved.

Where an allegation concerns potential bribery, management should avoid conducting an informal inquiry through the implicated business team alone.

Relevant payment records, intermediary agreements, approvals, communications and due-diligence files should be preserved promptly.

The issue may also trigger internal reporting obligations under group compliance policies.

The 2025 UAE AML Framework Has Increased the Importance of Financial Crime Controls

The UAE financial-crime framework underwent another significant development in 2025 with Federal Decree-Law No. 10 of 2025 regarding anti-money laundering, counter-terrorism financing and proliferation financing, supported by Cabinet Resolution No. 134 of 2025.

For regulated and designated businesses, the implications extend beyond traditional criminal defence.

A transaction under investigation may raise questions about customer due diligence, beneficial ownership, source of funds, suspicious activity, internal escalation and regulatory reporting.

Financial crime investigations therefore often require criminal, regulatory and compliance analysis to proceed together.

A company should avoid treating an AML issue merely as an accounting irregularity or an ordinary payment dispute.

Internal Investigations Should Be Designed for the Legal Problem

An internal investigation should have a defined purpose.

Management should determine:

What allegation is being tested?

Who is directing the investigation?

Which records are necessary?

Who should be interviewed?

Who receives the findings?

Could the findings need to be disclosed to a regulator or authority?

Could employees require independent representation?

Will disciplinary action potentially follow?

A poorly scoped investigation can generate unnecessary documents, expose confidential material and create inconsistencies.

A disciplined investigation should produce reliable facts without becoming a parallel uncontrolled process.

Interview Witnesses Carefully

Internal witness interviews can be highly valuable, but timing and structure matter.

Employees should understand who the lawyer represents and the purpose of the interview.

Interviewers should distinguish what the witness actually remembers from assumptions reconstructed after the event.

Relevant documents may need to be tested against the witness's recollection.

Where an employee may personally face criminal exposure, separate representation may become appropriate.

The goal is accuracy, not forcing every witness into a common corporate account.

Do Not Confuse Settlement With Criminal Resolution

A commercial settlement may be strategically useful in some disputes.

It may resolve payment, contractual or civil claims.

It does not necessarily mean that every criminal or regulatory consequence automatically disappears.

The effect depends on the offence, procedural stage, complainant's rights and applicable law.

Management should therefore avoid agreeing commercial settlement terms on the assumption that they necessarily dispose of a criminal file.

The criminal and commercial consequences should be analysed separately and then coordinated.

Communications Strategy Matters

A significant criminal allegation can affect more than the parties immediately involved.

Banks, auditors, investors, insurers, lenders, business partners, regulators and employees may all require information.

The business should resist two extremes.

The first is silence where legal or contractual notification is required.

The second is issuing broad assurances before the facts are known.

A controlled communications protocol should identify:

• what must legally or contractually be disclosed;

• who approves external statements;

• what information remains under investigation;

• how privilege and confidentiality are protected; and

• how communications in one proceeding may affect another.

Accuracy should take priority over speed.

Boards Need a Decision Record

Where the allegation is material, the board or appropriate management body should document significant decisions.

That may include:

• appointment of external counsel;

• preservation measures;

• conflict assessments;

• regulatory notifications;

• authority to communicate with investigators;

• internal investigation scope;

• suspension or reassignment decisions;

• insurance notifications; and

• remediation steps.

This does not mean creating unnecessary commentary about the merits of the allegation.

It means preserving a proper governance record showing how the business responded.

A Practical Corporate Criminal Investigation Review

When a significant allegation arises, boards and senior management should be able to answer several questions quickly.

Has a criminal complaint actually been filed?

Do not manage a threat, police inquiry and Public Prosecution investigation as though they are the same procedural event.

Who is personally exposed?

Identify the company, directors, officers, employees, authorised signatories and third parties potentially involved.

Do the company's interests and the individuals' interests remain aligned?

If not, independent counsel may be required.

Have all relevant records been preserved?

Evidence preservation should occur before systems overwrite material or employees delete communications in the ordinary course.

What is the verified chronology?

A reliable timeline should precede the defence narrative.

Are there parallel civil, arbitration, employment or regulatory proceedings?

Statements and tactical decisions need to be coordinated across them.

Could travel, banking or operational continuity be affected?

Verify the actual procedural position rather than relying on assumptions.

Are there mandatory notifications?

Check regulators, insurers, lenders, auditors and internal group policies.

Does the allegation involve financial crime, cyber conduct, data protection or regulated activity?

If so, the response may need specialist workstreams beyond ordinary criminal defence.

What is the objective?

The answer may include defending individuals, protecting the company, preserving licences, maintaining banking relationships, recovering assets, resolving parallel disputes or remediating controls.

A defence strategy becomes much clearer once those objectives are distinguished.

Prevention Begins With Corporate Discipline

The strongest response to criminal exposure is usually built before the allegation arises.

Good governance does not guarantee that a company will avoid complaints.

It makes the facts easier to establish when a complaint occurs.

High-risk areas commonly include:

• authority to sign;

• payment approvals;

• procurement;

• customer representations;

• intermediary and distributor relationships;

• expense claims;

• conflicts of interest;

• related-party transactions;

• data access;

• document retention;

• use of confidential information;

• client funds; and

• regulatory reporting.

Controls should be proportionate to the business.

A medium-sized trading company does not need the same compliance infrastructure as a regulated financial institution.

But both need to know who can authorise payments, sign documents, access sensitive systems and approve exceptions.

Policies Need to Match Actual Practice

A written policy has limited defensive value if everyone knows that the business operates differently.

Boards should periodically test whether delegated authorities are actually followed.

Are material payments properly approved?

Are significant agreements signed by authorised personnel?

Can the business trace why a payment was made?

Are exceptions recorded?

Are complaints escalated?

Are sensitive systems accessed only by authorised users?

Where formal governance and operational reality diverge, a criminal allegation can expose that gap very quickly.

The Strategic Objective Is Control

A corporate criminal investigation can create pressure to react immediately.

That pressure should not produce improvisation.

The strongest response normally comes from controlling five things early: the evidence, the procedural position, conflicts of interest, communications and decision-making authority.

Once those are controlled, management can make informed choices about defence, cooperation, settlement, regulatory engagement and business continuity.

The objective is not to construct the most aggressive narrative.

It is to establish a defensible factual and legal position capable of surviving scrutiny from investigators, prosecutors, regulators, counterparties and, if necessary, the courts.

How Kadernani & Company Legal Consultants Can Assist

Kadernani & Company Legal Consultants advises businesses, directors, shareholders and senior executives on UAE criminal investigations arising from commercial activity, financial transactions, corporate governance, employment relationships, data issues and regulatory matters.

Our approach begins by separating the allegation from the verified procedural and factual position.

Before deciding how the client should respond, we seek to establish what complaint or investigation actually exists, who is implicated, what authority is involved, which evidence needs immediate preservation and whether criminal, civil, regulatory or arbitral proceedings are developing in parallel.

This first-stage analysis is particularly important where a commercial dispute has escalated into allegations of fraud, breach of trust, forgery, misuse of company assets, cyber-related conduct, confidential-information misuse, bribery, money laundering or other financial crime.

We assist clients in coordinating the legal workstreams that may follow, which can include:

• assessment of criminal allegations and procedural status;

• preparation for police or Public Prosecution engagement;

• advice to companies, directors and senior personnel;

• conflict assessments and coordination with separately represented individuals;

• document and electronic-evidence preservation;

• internal investigations;

• review of corporate authority and approval records;

• analysis of financial transactions and payment flows;

• cybercrime and data-related issues;

• AML and compliance issues;

• coordination with civil litigation or arbitration;

• regulatory strategy;

• settlement analysis where legally appropriate;

• reputational and stakeholder-sensitive legal communications; and

• remediation of governance or compliance weaknesses identified during the matter.

Our disputes experience is important because a criminal allegation arising from a business relationship rarely exists in isolation. The same facts may underpin a payment claim, shareholder dispute, employment case, arbitration, regulatory inquiry or asset-recovery strategy.

Those processes should be coordinated rather than allowed to develop competing factual positions.

We also assist before a formal complaint is made.

Where a company identifies suspicious transactions, disputed authority, internal fraud concerns, data misuse or potentially unlawful conduct, early legal assessment can help management preserve evidence, determine whether an internal investigation is appropriate, address conflicts, understand reporting obligations and decide how the company should respond before positions become fixed.

The objective is not simply to defend an allegation once proceedings have begun. It is to protect the client's legal position while allowing the business to continue making defensible decisions under pressure.

For boards, CEOs and general counsel, the practical test is straightforward: if a serious criminal allegation were made tomorrow, could the company identify who has authority to respond, preserve the relevant evidence, separate corporate from personal interests, establish the true chronology and determine within a short period what must be disclosed, what must be defended and what must not be said prematurely?

If the answer is uncertain, the exposure is not limited to the alleged offence. It also lies in how the business will respond when the allegation arrives.