Choose the official authority or support route that matches the evidence

Start with the immediate risk

If a gambling website is withholding money, requesting repeated identity checks or demanding another payment, stop and assess the immediate risk before arguing with its support team. Do not send more money merely to unlock a balance, pay a supposed tax or activate a refund. A request for an additional fee does not prove fraud by itself, but it deserves careful scrutiny—especially when the recipient differs from the name previously shown.

Preserve the evidence before blocking accounts or deleting messages. Save the exact website address, dates, payment references, beneficiary details, wallet addresses, emails, chat transcripts and the wording of any payment demand. Screenshots are useful, but original statements and exported conversations may provide stronger context. Do not alter files or annotate the only copy.

If card, bank or wallet credentials may be exposed, contact the relevant financial provider through a trusted channel. Use the number printed on the card, the provider’s official application or an independently verified website—not a number supplied in the disputed chat. The AED payment-risk guide explains how to organise transaction information without assuming that a payment dispute has already been decided.

Match the problem to the right route

Different organisations deal with different parts of a complaint. A regulator-related concern, an unauthorised transaction, suspected cybercrime and gambling harm should not be compressed into one vague report. The same incident may justify several reports, but each recipient should receive the facts relevant to its role.

The GCGRA’s consumer advisory tells consumers to consult its official licensee list and warns about unlicensed operators. That advisory does not establish a verdict about a named website unless the exact entity, domain and relevant category can be matched to a current official record. A missing match should trigger further verification, not an automatic accusation.

Build a complaint record that can be checked

A useful complaint record is chronological, specific and restrained. Begin with what you personally observed: when the account was created, the exact host used, what payment instruction appeared, what amount moved and what response followed. Separate those observations from suspicions. Write “the withdrawal remained pending on 12 August” rather than “the operator steals withdrawals” unless a competent authority has established that conclusion.

Create a working copy of the evidence and retain an untouched original where possible. Give files descriptive names containing the date and event. If a long conversation is exported, also note the few messages that contain the disputed instruction. Redact unnecessary sensitive information from copies sent to unrelated recipients, while preserving complete originals for an authority or financial institution that legitimately requires them.

For a structured approach to beneficiary names and transfers, use the bank-transfer beneficiary check. If the facts suggest impersonation, malicious access or deceptive digital communications, the cybercrime complaints guide can help separate the incident record from the regulatory question.

Handle identity-verification demands safely

Identity verification can be part of an account process, but its existence does not prove that a service is authorised or trustworthy. Before providing an Emirates ID image, passport copy, selfie or address record, verify the precise host and determine who says it will receive, store and use the document. Read the privacy information available through the same verified host and check whether the request is proportionate to the stated purpose.

Never provide a password, one-time passcode, card PIN, online-banking credential or wallet recovery phrase as “identity verification”. If a caller or chat agent asks you to move funds, install remote-access software or reveal a security code, stop the interaction and contact the relevant bank or provider independently. If identity documents have already been disclosed to a questionable recipient, preserve the request and consider asking the issuing or competent authority what protective action is appropriate.

Do not repeatedly upload clearer documents simply because an anonymous agent applies pressure. Record each request, the host displaying it and any change in the recipient or submission method. The wallet and withdrawal identity-check guide provides a focused checklist for separating ordinary document review from credential theft risks.

Treat payment recovery offers as a separate risk

After a loss or disputed withdrawal, a person may be contacted by someone claiming to recover funds. Treat that approach as a new transaction with its own risks. Knowledge of the original loss is not proof that the person is connected to an authority, bank or legitimate adviser. Details may have been copied from public posts, shared contact lists or earlier communications.

The US Federal Trade Commission’s refund and recovery scam guidance describes patterns that include demands for upfront payment. It is general consumer guidance rather than evidence against any named operator, and it does not decide a UAE complaint. Its practical warning remains relevant: do not assume that paying a fee, tax, deposit or processing charge will release lost money.

Ask for the person’s identity, organisation, role, written terms and verifiable contact details. Independently confirm any claimed connection to an authority. Do not use links or telephone numbers supplied solely by the recovery contact. Never grant remote access to a device containing banking, email or identity records.

Report facts without overstating legality

UAE authorisation questions require precise identity matching. A brand label alone may not identify the legal entity, host or regulated category. Record the full domain and any displayed company details, then compare them with current official information. The UAE licence checker sets out a domain-and-entity method, while the UAE casino law overview distinguishes evidence checks from broad assumptions.

Foreign authorisation, if claimed, applies only within the jurisdiction and scope named by the issuing authority. It is not UAE authorisation. Conversely, failure to find a name during one search is not proof that an operator is illegal. Registers can require exact spelling, an entity name rather than a brand, or a category-specific search. Report what was searched, when it was searched and what exact result appeared.

A sound submission uses neutral language: “I could not match this exact host to the official information checked on this date” is more accurate than a definitive criminal allegation. Authorities can assess evidence and legal status; complainants should provide records rather than manufacture a verdict.

Get help for gambling harm now

A regulatory or payment complaint can take time. Support for gambling harm should not wait for that outcome. Warning signs can include chasing losses, borrowing to continue, hiding spending, neglecting responsibilities, feeling unable to stop or experiencing severe distress after gambling. The World Health Organization gambling fact sheet provides evidence on gambling harms and prevention principles, but it does not decide UAE legality or the status of a named operator.

Reduce immediate access where safely possible: step away from gambling accounts, disable promotional messages, review payment access and involve a trusted person in financial safeguards. Do not share banking credentials with that person; use controls offered by financial providers and devices. The gambling-help route covers practical support planning.

If there is an immediate risk of self-harm, violence or another emergency, contact UAE emergency services or go to the nearest emergency department. A dispute over a balance is never a reason to postpone urgent care. For non-emergency support, contact an appropriate licensed healthcare professional in the UAE and describe the effect on sleep, finances, relationships and safety honestly.

Frequently asked questions