Authorities across the UAE are alerting the public about a growing cyber threat where scammers send fraudulent emails disguised as legitimate invoices from well-known companies like McAfee Security and PayPal — all in an effort to take control of victims’ computers and steal sensitive data.
According to a Khaleej Times report, these phishing emails claim that charges amounting to Dh1,400 or Dh2,200 have already been billed to the recipient. The email urges the recipient to act quickly — usually within 24 hours — and provides a US-based contact number to supposedly reverse the transaction.
Once the victim calls, they’re tricked into giving scammers remote access to their computers. From there, personal banking credentials and private information can be silently harvested, leaving the victim financially vulnerable.
One near-miss was shared by Um Mazin, a government employee who received what looked like a McAfee invoice from someone named Jarred. Believing her antivirus software had been auto-renewed, she called the number and followed the caller’s instructions. Just before giving full access via a Quick Assist code, she noticed a security warning. Realizing it was a scam, she refused to proceed, confronted the caller, and immediately reported the incident to police.
Cybercrime enforcement has intensified in recent years. Dubai Police previously apprehended 494 individuals in 406 phone scam cases. Meanwhile, Sharjah Police continue to crack down on online fraud, with two men recently arrested for accessing 173 bank accounts and defrauding victims of more than Dh3 million.
Authorities reiterated that legitimate companies will never ask for remote PC access or send invoices from personal email addresses. They strongly urge the public to steer clear of unsolicited emails and report any suspicious activity through official cybercrime channels.