Due diligence in the UAE
One missed check can cost a year of revenue
Signing with the wrong counterparty is one of the most expensive mistakes a UAE business can make. Before any contract, invoice, or wire transfer, a short verification routine protects your cash and your licence.
Fraudulent companies in the UAE rarely look obviously fake. They often present polished websites, convincing WhatsApp numbers, and even a trade licence number copied from a legitimate business. The only way to stay safe is to verify, not trust, before any money or signature leaves your side.
Check the paperwork before you check the pitch
Every legitimate UAE company holds a trade licence from either a mainland authority (such as Dubai DED or the Department of Economic Development in Abu Dhabi) or a free zone (DMCC, JAFZA, ADGM, DIFC and others). Ask for the licence copy directly, then confirm it on the issuer’s own portal. Match three things: the exact legal name, the licensed activity, and the expiry date. If the pitch is about construction services but the licence covers general trading only, that is a hard stop.
A real company also leaves a trail outside its own website. Look it up on the UAE Ministry of Economy registry, cross-check the VAT number on the Federal Tax Authority portal, and search for the directors’ names. If none of them appear anywhere beyond the company’s own landing page, treat the whole operation as unverified.
Red flags
Signals that should slow you down
- Pressure to pay fast. “Transfer today or you lose the slot” is the oldest trick in UAE B2B fraud.
- Bank account in a third country that does not match the company’s registered address.
- Gmail or Outlook contact addresses instead of a domain email tied to the website.
- Website registered less than six months ago with no archived versions and no team page.
- Reviews that all appear in the same weekwritten in the same tone, often with stock photos.
Look past the website into the real footprint
A legitimate UAE firm has history. It has a Google Maps pin at a real office, not a shared mailbox in a tower nobody can name. It has staff on LinkedIn whose profiles predate the deal by years. It has invoices in a consistent template, with a TRN that matches its licence. Fraudulent operators cut corners on all of this because their window is short.
Call the published landline during business hours, not just the mobile number on the proposal. Ask for a tour of the office, or request a short video call from inside their premises. Scammers almost always refuse, blame it on travel, or send you a stock image of a boardroom. Honest companies are glad to show you around because trust is their main asset in a city built on referrals.
Finally, read the reviews with a cold eye. Three five-star reviews posted on the same Tuesday, all mentioning the same project manager by first name, is a pattern, not a coincidence. Look for mixed, dated, specific feedback. A business with two years of real customers will have at least a few complaints, and that is actually a good sign.
When the deal is big, bring in professionals
DIY checks catch the obvious scams. For anything over a few hundred thousand dirhams, or any long-term partnership, a professional review is cheap insurance. Specialised risk advisory and security consultants in the UAE will verify licences and ownership, run court-record and sanctions screenings, confirm beneficial owners, and visit the physical office on your behalf. They also check whether directors are linked to previously liquidated companies, which is a pattern you cannot easily spot alone.
This is standard practice for banks, insurers, and listed companies, and it is becoming standard for serious SMEs too. The report lands in your inbox before you sign, not after the money has moved.
Three habits that keep you out of trouble
Verify every licence yourself
Never trust a licence PDF the counterparty emails you. Open the issuing authority’s portal and look it up by number.
Pay in stages, not up front
Split payments against milestones. Fraudsters want 100% in advance; real suppliers accept staged terms.
Keep a verification file
Save licence copies, screenshots, call notes, and emails. If something goes wrong, your evidence pack decides how fast the police or courts can help.
The simple rule
If a UAE counterparty refuses any part of your verification process, that refusal is the answer. Honest partners expect to be checked and respect you more for doing it. Walk away from anyone who treats basic due diligence as an insult, you have just saved yourself a very expensive problem.
Frequently asked questions
How can I check if a UAE company is legally registered?
Ask for the trade licence number and look it up directly on the issuing authority’s portal. For mainland companies that means the relevant emirate’s Department of Economic Development; for free zone entities it is the free zone’s own registry (DMCC, JAFZA, ADGM, DIFC, and so on). Confirm the exact legal name, licensed activities, and expiry date match what the company told you.
What are the most common signs of a fraudulent company in Dubai?
The classic red flags are pressure to pay quickly, a bank account in a country unrelated to the company’s address, free webmail instead of a domain email, a very new website with no team page, and reviews that all appeared in the same short period.
Any one of these on its own is a yellow flag. Two or more together usually means you should walk away.
Is it worth paying for professional due diligence?
For small, one-off purchases, your own checks are usually enough. For contracts worth more than a few hundred thousand dirhams, long-term partnerships, or any deal involving advance payments, professional due diligence typically costs well under one percent of the deal value and catches issues you cannot find alone, such as hidden ownership links, past liquidations, or sanctions exposure.
What should I do if I have already paid a company I now suspect is fraudulent?
Act within the first 24 to 48 hours. Contact your bank immediately to request a recall of the transfer, then file a report with the Dubai Police e-crime platform or the relevant emirate’s cybercrime unit. Keep every email, invoice, screenshot, and chat message in a single folder, that evidence pack is what determines whether authorities can trace and freeze the funds.
Can I rely on online reviews when choosing a UAE supplier?
Reviews help, but only when you read them carefully. Look for a spread of dates over months or years, specific project details rather than generic praise, and a mix of positive and critical feedback. A perfect five-star profile with reviews all posted in the same week is often a sign that the testimonials were purchased or written in-house.
How long does a basic company verification take in the UAE?
A self-serve check, licence lookup, VAT number confirmation, website age, LinkedIn cross-reference, usually takes 10 to 30 minutes. A full professional background report from a UAE risk advisory firm typically lands within 48 to 72 hours for a standard local entity, and up to a week when the ownership structure crosses several jurisdictions.
I am an accomplished coder and programmer, and I enjoy using my skills to contribute to the exciting technological advances.