Fraud cost the UAE an estimated AED 1.24 billion — and BEC money flows here.

The UAE Financial Intelligence Unit's strategic analysis of fraud put estimated losses at AED 1.24 billion between 2021 and 2023, naming phishing, vishing, and business email compromise among the dominant typologies. The FBI adds an uncomfortable footnote: the UAE ranks among the top five international destinations for stolen BEC funds — money defrauded from businesses worldwide flows through accounts here.

The pressure is visible inside the banks. In a 2026 survey of 100 UAE banking fraud, AML, and compliance leaders, 58% reported rising fraud losses and 62% put their institution's annual fraud losses above AED 18.3 million. On the consumer side, GASA's research found one in three surveyed UAE residents lost money to a scam in the 12 months to late 2025.

For businesses the cost multiplies beyond the stolen dirham: LexisNexis puts the total cost at AED 4.19 for every AED 1 of direct fraud loss once investigation and remediation are counted, and 42% of UAE organizations reported fraud increasing year on year.

The regulator is moving — the Central Bank's 2025 fraud-control notice forces banks to show payee names before transfers are confirmed — but there is still no statutory reimbursement for authorized push payment fraud, and recovery rates are poor: in GASA's UAE survey, only 9% of scam victims fully recovered their losses.

The UAE economy runs on cross-border supplier payments — it is a re-export hub where paying a new overseas supplier by wire is routine. Yet ordinary IBAN transfers historically carried no name check, and the new Central Bank rules are consumer-facing. When a business pays a fraudster's account against a doctored invoice, the payment was authorized, and recovery depends on how fast funds can be traced.

The FBI's finding that the UAE is a top destination for BEC proceeds cuts both ways: the same mule-account infrastructure that receives foreign fraud money is available to target local businesses. And with finance functions of one or two people common in UAE SMBs, AI-polished vendor-impersonation emails land exactly where there is no second pair of eyes.

Verifying supplier bank details before payment is the one control a UAE business can deploy that the banking system does not provide for it. PayHQ makes that check systematic: every incoming invoice is compared against the supplier record you verified, and changed details are flagged before the transfer goes out.