Is a VPN illegal in the UAE? What the law says, and the fine it carries
You have probably heard about the "AED 2 million VPN fine" in the UAE. We read the law itself to see exactly what that fine is for, and what the TDRA says about calling apps, which is where most people actually get caught out.
The UAE's cybercrime law does not mention VPNs. The article behind the "AED 2 million fine" is Article 10, and it punishes getting around an IP address, using someone else's address or any other means, with the intent to commit a crime or prevent its discovery. Calls through unlicensed apps are a separate matter: the TDRA says those are very likely illegal.
What the UAE cybercrime law says
Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes, in force since 2 January 2022 and amended in 2024. It never uses the word "VPN".
For getting around an Internet Protocol (IP) address by using another person's address or by any other means, with the intent to commit a crime or to prevent its discovery.
For hacking into a website, information system or network. The penalty rises if the hacking causes damage, copies or publishes data, or aims to obtain data for unlawful purposes.
The VoIP question: WhatsApp, FaceTime and other calling apps
The part most people miss. (TDRA, frequently asked questions)
Internet voice and video calls must come from a licensed provider, and providers must block unlicensed calling services.
It is "very likely that it is illegal" to use one for calls, and a user "may be committing a criminal offence".
A calling app from the TDRA's published list. Practical details: WhatsApp calls in the UAE.
When is using a VPN fine, and when is it an offence?
- Protecting your connection on public Wi-Fi in hotels, airports and cafés.
- Connecting to your company's network when working remotely.
- Keeping your everyday browsing private.
- Hiding your address to commit a crime or prevent its discovery (Article 10).
- Hacking a website or system (Article 2).
- Making calls through unlicensed or unapproved apps, according to the TDRA's FAQ.
Using a VPN lawfully in the UAE
Reaching office systems securely is not what Article 10 is aimed at. If your employer gives you a VPN, use that one for work.
Everything you send passes through the provider, so pick one with an independently audited no-logs policy.
Audited no-logs, nearby servers and obfuscation: compared in the best VPN in the UAE, owners in who owns which VPN.
Sources
Official English text, published by Abu Dhabi Global Market. The Arabic text prevails if the two differ.
Frequently asked questions: tdra.gov.ae
This page is general information drawn from the law text and official pages, not legal advice. Rules change, so check the official text or ask a licensed lawyer about your own case. Last checked: 2 November 2026.
VPNs and UAE law: frequently asked questions
Short answers to what readers ask most. Question not here? Write to us.
No law in the UAE bans VPNs by name. Article 10 of the cybercrime law punishes getting around an IP address to commit a crime or to prevent its discovery: the criminal intent is part of the offence.
Using a VPN to protect your connection on public Wi-Fi, to reach your company network or to keep your browsing private is not what Article 10 describes. Using one to commit a crime, to hide one, or to make calls through unlicensed apps is where the risk lies.
The often-quoted AED 500,000 to AED 2 million fine, with possible temporary imprisonment, is the penalty in Article 10 for getting around an IP address with the intent to commit a crime or prevent its discovery. It is not a fine for having a VPN app.
Dubai follows the same federal law as the rest of the UAE: Decree-Law 34 of 2021 does not ban VPNs, and its Article 10 targets disguising your IP address to commit or hide a crime. The TDRA's rules on unlicensed calling apps also apply in Dubai.
Yes. Connecting to your employer's network over a VPN is a normal, legitimate use, and nothing in Article 10 is aimed at it.
There is no official list of allowed VPN apps. The TDRA's pages mention VPNs only as a service for government entities, and its approved list covers internet calling apps, not VPNs.
The TDRA says it is "very likely that it is illegal" to use an unlicensed app for internet voice and video calls, and that users "may be committing a criminal offence". That applies whether or not a VPN is used.
The best VPNs this month
Our full ranking with scores and prices, kept up to date.
See the full ranking