UAE Sees Rise in Card Skimming Cases: Experts Warn on How to Stay Safe

Authorities and cybersecurity experts are warning residents about a surge in card skimming incidents across the UAE, as fraudsters adopt both physical and digital tactics to steal sensitive banking information.

Sharjah resident Mohammed Zubair learned the hard way after clicking on what appeared to be a legitimate McDonald’s promotion on Facebook. After entering a One-Time Password (OTP) for his Dh50 order, he discovered Dh350 had been deducted for a purchase in Russia — the website had been a fake.

Card skimming traditionally involves criminals physically altering ATMs or card machines, sometimes placing hidden cameras to capture PINs. But experts say digital skimming — where fake websites or online payment pages capture card data — is becoming harder to detect as cybercriminals use more sophisticated techniques.

“Digital card skimming is growing due to the rise of online payments,” said Mohammed Abukhater, regional VP at technology firm F5. “Stolen card details are often stored for weeks or months before being used, making them harder to trace.”

Adrian Dinca, principal analyst at Sophos’ Red Team, urged victims to immediately freeze their card and call their bank to cancel suspicious transactions. He also recommends reviewing past statements for small, unnoticed withdrawals and requesting a replacement card.

Warning signs include:

• Physical red flags: Loose or unusual attachments on card machines, hidden cameras, or devices fitted over legitimate terminals.

• Digital red flags: Poorly designed websites, slightly altered URLs, unsolicited ads offering unusually large discounts, and requests for OTPs outside the standard banking flow.

With card skimming on the rise, experts advise UAE residents to only use trusted payment channels, avoid clicking on unverified promotional ads, and enable real-time transaction alerts to detect suspicious activity quickly.