Fraud and Chargebacks on UAE Cards: How to File and What Actually Gets Refunded

Fraud on a credit card issued by a UAE bank is more common than most cardholders realize. Card-not-present fraud (online transactions made without the physical card) is the fastest-growing category of unauthorised activity, according to UAE Central Bank data. The good news is that, if you act fast, the chargeback system protects most cardholders. The bad news is what "quickly" means, and which dispute categories the network rules will actually reverse.

In this article we explain the chargeback process for UAE-issued Visa, Mastercard and American Express cards, the timelines that matter, and the categories where you will get your money back versus the ones where you usually will not.

The two systems

UAE-issued cards split into two camps. Visa and Mastercard operate open-loop networks, which means the bank that issued your card handles your dispute against the bank that processed the merchant. Chargeback rules are determined by the Visa Core Rules or Mastercard Operating Rules. American Express is a closed-loop issuer, so the dispute is handled inside Amex's own resolution system. In practice, the experience is very similar. The procedural deadlines differ slightly.

UnionPay-branded cards (less common but growing) follow UnionPay's own scheme rules and can take longer to dispute on cross-border transactions.

The two big categories

Most disputes from UAE cardholders fall into one of two buckets.

Fraud, where someone other than you used the card or its details to make a purchase. This includes stolen physical card use, card data skimmed for online use, account takeover where a fraudster used SMS-OTP intercept to authorise a transaction, and unauthorised recurring billing.

Merchant disputes, where you made the purchase but the merchant didn't deliver, delivered the wrong product, charged twice, billed a higher amount than agreed, or charged after promising a refund. These are not fraud; the chargeback is for "service not rendered" or "goods not as described."

The procedure is different.

Reporting fraud

Speed matters. UAE issuers expect to be notified within 30 calendar days of the statement date the disputed transaction appears on. While some networks allow up to 120 days for fraud, UAE bank policies usually shorten this to 30-60 days for expediency.

Step one: call the bank's 24/7 hotline rather than the branch. The number is on the back of the card. Ask for the card to be blocked immediately and a replacement sent. Once the card is blocked, the fraudster cannot add further charges to it.

Step two: file the dispute. The bank will email or SMS a fraud dispute form. Fill it in, list each disputed transaction with date, amount, and merchant name, and confirm you did not authorise it. Attach any supporting evidence: proof of location if you weren't in the country where the transaction occurred (boarding passes, immigration stamps, geo-tagged photos), screenshots of phishing messages where relevant, and a police report if the card was stolen.

Step three: get the police report if the loss is more than a few thousand dirhams or any element of physical theft is involved. UAE police accept fraud reports at any station and, increasingly, through the Dubai Police app or Abu Dhabi Police "Aman" service. The case number reinforces your dispute.

The bank provisionally credits the disputed amount to your account within 7-15 days while the chargeback investigation proceeds. The merchant has 45 days to respond. If they don't, or their evidence is insufficient, the credit becomes permanent.

Common fraud categories where UAE banks reliably reverse the charges: card-not-present transactions where you were physically in the UAE but the charge was foreign and unverified by 3D Secure; counterfeit card use; recurring subscriptions that the cardholder did not authorise; account takeover via OTP fraud (if the OTP was harvested by phishing rather than shared willingly).

Categories where reversal is harder: transactions you authorised under social engineering pressure ("voice phishing" calls pretending to be the bank), where the fraudster tricked you into approving the OTP. UAE banks distinguish "you were defrauded" from "you authorised under fraud," and the latter often does not get reversed.

Filing a merchant dispute

For non-fraud disputes (you bought, but the merchant failed), the chargeback reasons are different. The main ones used in the UAE: goods not received; goods not as described; defective merchandise; cancelled recurring transaction billed anyway; duplicate charge; credit not processed.

Step one: contact the merchant first. Visa and Mastercard rules require a documented attempt to resolve directly with the merchant before a chargeback is filed. Email is best because it's timestamped. If the merchant ignores you for 15 days or refuses unreasonably, you have proof.

Step two: file the dispute with the bank, attaching the merchant communication, the original transaction receipt, the order confirmation, any tracking record, and a clear written statement of what went wrong.

Timeline: 60-120 days from the transaction date, depending on the type of dispute. "Goods not received" allows up to 120 days from the expected delivery date, not the order date.

What gets refunded reliably: undelivered goods from non-Amazon, non-Noon online merchants where you have a clear paper trail; duplicate charges; charges after a documented refund commitment; cancelled gym, telecom, or subscription billings post-cancellation date.

What gets refunded less reliably: "buyer's remorse" disputes (you got what you ordered but no longer want it); quality complaints where the merchant disputes the description; partial-fault situations.

What the bank cannot do

The bank cannot reverse a transaction that you initiated, fully authenticated, on a working card, where the merchant delivered the agreed product. Buyer's remorse is not a chargeback ground. Equally, banks cannot retrieve funds you transferred via instant payment (UAEFTS, Aani) directly into a fraudster's account; transfers are not card transactions and are settled under different (and harsher) rules.

Practical hygiene

Use 3D Secure (One-Time Password) on all online transactions. Decline merchants that bypass OTP. Keep bank app push notifications on. Set transaction-based SMS alerts. Block international online transactions when not travelling, using your bank app's card controls.

Most UAE issuers fully reverse legitimate fraud within 21-45 days. The rest is paperwork and patience.