Regional security research
Cyber threats in UAE
Check suspicious delivery, government-service and business account messages with a verification workflow for residents and organizations in the UAE.
Check delivery and service-fee requests
If a message demands a small payment to release a parcel or complete an official process, navigate to the genuine provider independently. Confirm a tracking reference through its official app or website. A local-looking logo, currency or telephone number is not proof of authenticity.
Protect business and identity information
Messages can mix English and Arabic or refer to an organization you already use. Verify the request through established contacts, and remove identity numbers, passwords and access tokens before voluntary analysis. AEGLIX does not authenticate government identities or establish that a screenshot is genuine.
Consult current official guidance
Use the UAE Cyber Security Council at csc.gov.ae for national guidance and the affected provider for service-specific help. Reporting routes can depend on the incident and emirate; check the current official process instead of relying on a number supplied in a suspicious message.
Check evidence before acting
Check a suspicious link, message or screenshot text with Guardian. Remove private tokens and personal information before submission. A low-risk result is not a guarantee of safety.
Review source-linked threat feeds and investigate the indicator. Region tags describe available evidence or inference; they do not establish victim location, operator identity or complete national coverage.
Further reading
Practical research guides · Africa-tagged phishing observations this week
Nigeria · Kenya · UAE · Saudi Arabia