WhatsApp Legal Rules in the UAE: Messages, Calls, Groups and Screenshots

WhatsApp is the default way the UAE talks — to family, to colleagues, to landlords, to the parents' group at school. Most residents assume that what happens inside a chat stays informal. It does not. Messages, voice notes, screenshots and forwards are all evidence, and several everyday WhatsApp habits sit squarely inside the criminal law. The rules are knowable, and knowing them is far cheaper than learning them from a police summons.

Direct answer. Using WhatsApp in the UAE is legal, but what you send on it is governed mainly by Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes, in force since 2 January 2022 (see the text on the UAE Legislation portal and the UAE Government portal's cyber safety pages), alongside the Penal Code (Federal Decree-Law No. 31 of 2021). Insulting someone, sharing their photos or private conversations without consent, and spreading false information can all be criminal offences when done through an information network — which WhatsApp is. Voice and video calling sit under a separate telecom regime administered by the TDRA. This guide is the rules overview; for the complaint-and-defence process in an insult case, read our deep-dive on WhatsApp defamation cases in Dubai.

The laws that actually govern what you send

Two federal statutes do most of the work, and a third regime covers the calls.

The first is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes, the UAE's cybercrime law. It took effect on 2 January 2022 and it is the statute prosecutors reach for whenever an offence travels over an "information network" — a phone app, a social platform, an email. Because a WhatsApp message always travels over a network, conduct that might be a minor matter offline is routinely charged under this law instead, and the cybercrime versions of these offences are treated more severely than their offline counterparts.

The second is the Penal Code — Federal Decree-Law No. 31 of 2021 — whose insult and defamation provisions can apply in parallel. Prosecutors frequently rely on both together when the conduct happened on a phone.

The third is the telecom regime: voice and video calling over the internet is a regulated activity under the TDRA's rules, which is a licensing question rather than a criminal-content question. It gets its own section below.

One structural point matters throughout this guide. The duties — do not insult, do not publish someone's private material, do not spread false news — are stable and federal. The numbers — fine bands and imprisonment ranges — are set by the statute and applied at the court's discretion, and they can change; confirm the current figures against the official text on the UAE Legislation portal or with a licensed UAE lawyer before relying on any figure you read online.

Insults and abusive messages

A rude message can be a crime in the UAE, and it does not need an audience.

Under the cybercrime framework, insulting a person or attributing to them something that exposes them to punishment or contempt is an offence when done through an information network. The threshold surprises newcomers in three ways:

• A private one-to-one chat can qualify. Public dissemination is not required — the message reaching the victim can be enough.
• Truth is not automatically a defence. A humiliating disclosure can be an offence even if accurate; the harm to dignity and reputation is what the law targets.
• Every format counts. Voice notes, emojis used abusively, memes, images and forwarded messages are all treated as content you sent.

Heated moments — a traffic dispute, a divorce, an argument with a contractor — generate a large share of these files. The exact fine band and imprisonment range for online insult are set by Federal Decree-Law No. 34 of 2021 and applied at the court's discretion, and they can change; confirm the current figures with a licensed UAE lawyer or against the official text. If you are on either side of an insult or defamation file, the process — evidence, police report, prosecution, reconciliation — is covered step by step in our guide to WhatsApp defamation cases in Dubai.

Screenshots and forwarding private conversations

Taking a screenshot for your own records is one thing. Publishing it is another.

The cybercrime law's privacy provisions penalise using an information-technology means to intrude on someone's private or family life without consent — and that reach covers recording conversations, photographing people, and publishing news, photos, comments or private material, even where the material is true. In WhatsApp terms, the risky moves are:

• Posting a screenshot of a private chat into a group, or onto social media, without the other person's consent.
• Forwarding someone's private photos, voice notes or videos beyond the chat they were shared in.
• Recording a call and sharing the recording.
• Publishing someone's number, address or family matters to third parties.

The pattern to internalise: consent to receive material is not consent to republish it. A photo sent to you inside a marriage, a friendship or a business relationship does not become yours to circulate when the relationship sours. Complainants in these files are very often people the sender knows well.

Keeping a screenshot privately, or handing it to the police or Public Prosecution as evidence in your own complaint, is the lawful use. Broadcasting it is where liability starts. The exact penalty range for privacy offences is set by Federal Decree-Law No. 34 of 2021 and can change; confirm the current figures with a licensed UAE lawyer or against the official text.

Group chats: what members and admins risk

A group multiplies the audience, and the audience is what turns a bad message into a worse case.

For ordinary members, the rules above apply with more exposure: an insult read by thirty colleagues does more reputational damage than the same words in a private chat, and the wider circulation is weighed accordingly. Forwarding is republishing — "I only forwarded it" is not the defence people assume, because the forwarder chose to give the content a new audience.

For group admins, UAE law does not turn adminship itself into automatic guilt for everything posted. But an admin's own conduct is assessed: creating or running a group dedicated to unlawful content is very different from hosting a family chat where someone misbehaves once. Practical hygiene for admins:

• Remove clearly unlawful content and, where it recurs, the member posting it.
• Do not pin, endorse or re-share offending material — endorsement is conduct.
• Keep the group's purpose lawful and its membership known to you.

If a dispute inside a group has already produced a police report, treat it as a criminal matter from that point — our guide to arrest rights and criminal defence in the UAE explains what happens after a complaint is filed.

WhatsApp calls: the VoIP rules are a separate regime

The legal question about WhatsApp calls is not about what you say — it is about who is licensed to carry the call.

Voice over IP is a regulated telecommunications activity in the UAE. The TDRA's published position is that VoIP services are telecommunications services and regulated activities under Federal Law by Decree No. 3 of 2003, governed by its VoIP Regulatory Policy (version 2.0, issued 30 December 2009), and that they may be provided only by licensees or with TDRA approval — using unlicensed VoIP services can itself be an offence (see the TDRA's FAQs). The TDRA maintains the list of approved calling services, and whether a given app's calling feature connects on UAE networks follows from that licensing position, not from the app's own settings.

What this means for an ordinary user:

• Messaging, voice notes, photos and documents on WhatsApp are not the issue — the VoIP rules are about live voice and video calls.
• Which calling apps are permitted is set by the TDRA and can change; confirm the current list of approved services with the TDRA before treating any workaround as lawful.
• Circumventing network restrictions to place calls — including using tools whose purpose is to mask that circumvention for unlawful ends — carries its own legal risk under the cybercrime framework.

For businesses, licensed alternatives exist through the UAE's licensed telecom operators; a company that needs reliable international calling should solve it through a licensed service, not through workarounds on staff phones.

Sharing content: rumours, false news and forwards

The forward button is a publishing decision, and the law treats it as one.

The cybercrime law penalises spreading false information and rumours through information networks — the kind of content that stirs public opinion, harms public health measures or damages confidence in institutions. During fast-moving news events, WhatsApp forwards are exactly where such material circulates. Three habits keep you on the right side:

• Do not forward unverified claims about emergencies, health scares, security incidents or public institutions — being the tenth forwarder rather than the author does not remove responsibility.
• Check against official channels before sharing anything consequential; UAE authorities publish quickly on verified accounts and official portals.
• Correct and delete when something you shared turns out false — persistence aggravates, retraction helps.

Beyond rumours, sharing content that is criminal in itself — material that violates public morals, promotes hatred, or infringes someone's privacy as described above — is an offence regardless of who authored it. The exact penalty for each category is set by Federal Decree-Law No. 34 of 2021 and applied by the courts case by case, and figures can change; confirm current ranges with a licensed UAE lawyer.

What stays perfectly legal

The everyday uses that worry people are mostly fine, and it helps to say so plainly.

• Chatting, sending photos of your own life, voice notes and documents to people who want to receive them.
• Business communication with clients who have given you their contact and expect to hear from you.
• Keeping records of your own conversations, including screenshots, for your own files or for a genuine complaint.
• Robust disagreement — criticism, negotiation, complaint — expressed without insults, threats or humiliation.
• Reporting unlawful content you receive to the authorities, with the evidence attached.

The recurring thread in everything above is consent and audience: content shared with the people it was meant for, in the tone the law expects between adults, is not what these provisions exist to punish.

How WhatsApp offences are reported

If you are the victim, the complaint channels are official, fast and app-based; if you are accused, expect the same channels to have been used.

The UAE Government portal's cyber safety pages list the official routes: the Ministry of Interior's eCrimes service through the MoI UAE app, Dubai Police's eCrime platform for cybercrimes in Dubai, Abu Dhabi Police's Aman service, and the Federal Public Prosecution's My Safe Society app (see the cyber safety and digital security hub on u.ae). A WhatsApp complaint is a criminal complaint: the police take the report and evidence, the Public Prosecution decides whether to charge, and many insult files between individuals end at reconciliation — the full sequence, including what evidence decides these cases, is in our defamation case guide.

Preserve evidence properly on either side: keep the original chat on the device, do not edit or crop screenshots, and do not delete messages once a dispute is live — deletion can be read against you, and investigators can often establish what was sent anyway.

What to do now

Sort your situation into one of three lanes and act on the lane, not the panic.

1. Nothing has happened — you just want to stay safe. Apply the consent-and-audience rule before sending, stop forwarding unverified material, and clean up any group you admin.
2. You are the victim. Preserve the evidence, file through the official channel for your emirate, and read the complaint process guide before you attend the station so your file is complete on the first visit.
3. You are accused, or a police summons has arrived. Treat it as a criminal matter from minute one: do not contact the complainant, do not delete anything, and get advice before you give a statement — our guide to criminal defence and arrest rights explains the stages.

Cybercrime files move quickly, and early mistakes — an angry reply, a deleted chat, an uncounselled statement — are the ones that harden into charges. If a WhatsApp dispute is turning into a legal matter, you can find and compare criminal lawyers on LEXAI and contact one directly. LEXAI lists lawyers; you engage and pay the lawyer directly, off-platform, on terms you agree with them. You can also use our AI legal assistant to understand the process in plain language before you make the call.

This article is general information about the rules governing WhatsApp use in the UAE. It is not legal advice on your situation.