Is VPN Allowed in UAE? Understanding the Legalities

Checked 30 October 2026

Short answer: no UAE law bans VPNs as such, and none mentions them by name. What the cybercrime law punishes is hiding or faking your IP address in order to commit a crime or to stop a crime from being discovered. The regulator, TDRA, says outright that companies, institutions and banks may use VPNs to reach their own networks. Using a VPN to get around the UAE’s blocking of websites or calling apps is a grey area that carries real legal risk, and this guide explains why.

What the law says: Article 10

The UAE’s cybercrime law is Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes. It was issued on 20 September 2021, came into force on 2 January 2022 and replaced Decree-Law No. 5 of 2012. In the English translation hosted by Abu Dhabi Global Market, Article 10 punishes anyone who

“circumvents an IP Address through the use of an IP address of others or any other means with the intention of committing or to preventing detection of a crime”

Federal Decree-Law No. 34 of 2021, Article 10 (English translation; the Arabic text is the official one)

The penalty is temporary imprisonment and/or a fine of AED 500,000 to AED 2,000,000. Two things in that sentence matter for ordinary users:

• The intent. The offence needs the aim of committing a crime or of preventing its detection. Using a VPN on hotel Wi-Fi to protect your bank login is not that.
• The tool. The article does not say “VPN”. It covers any way of disguising your IP address, a VPN, a proxy or someone else’s connection, when it is used for that criminal purpose.

We searched the full English text of the law: the words VPN, virtual private network and proxy do not appear in it. Article 16 separately punishes using encryption to commit a crime or hide its evidence, again only with that intent. The one amendment we found, Federal Law No. 5 of 2024, changed Article 21 (on terrorist groups), not Article 10.

What TDRA, the regulator, says

The Telecommunications and Digital Government Regulatory Authority (TDRA) has published three things that touch on VPNs:

• A statement of 31 July 2016, issued when the older law’s penalties were raised, says that no regulations prevent companies, institutions and banks from using VPN technology to reach their internal networks, and that the punishment is linked to the fraudulent act and the intent behind it. It does not say the same in so many words about private users.
• Its current Internet Guidelines repeat that corporate VPN use is allowed, and tell hosting and cloud companies that running VPN services which let UAE users bypass the internet providers’ filtering is “strictly not allowed”. That rule is aimed at the companies selling the service, not at users.
• Its Internet Access Management policy lists 19 kinds of content that internet providers must block. The first is “bypassing blocked content”, which includes VPN services that mainly let people reach blocked content. So e& and du can, and do, block some VPN websites. A blocking category tells providers what to block; it is not itself a criminal offence for the user.

What officials have said since

• In February 2024 the head of cybersecurity for the UAE government, Mohamed Al Kuwaiti, told Khaleej Times that there is no problem with people using VPNs and that misuse is the problem (newspaper interview).
• In August 2025 the UAE Cybersecurity Council, warning about public Wi-Fi attacks, advised using a trusted VPN on open networks (statement to WAM, reported by Khaleej Times).
• In December 2024 the Public Prosecution posted a reminder of Article 10 and its AED 2 million maximum fine, again tied to committing or hiding a crime (reported by Gulf News).
• In January 2018 the regulator called a viral text message about a Dh5,000 fine for using a VPN “fabricated” (reported by The National).

The grey area: blocked sites and calling apps

This is where most of the risk sits, and where official sources say less than people would like.

• Blocked websites. Reaching a site that the UAE blocks is not named as an offence in itself in the law. But much blocked content is illegal to view or share under other laws (gambling, pornography, content against public order), and Article 10 can apply when a VPN is used to commit or hide such an offence.
• Internet calls. TDRA treats voice and video calls as a regulated service. Its FAQ warns that people using calling services not provided by a licensed operator “may be committing a criminal offence”. WhatsApp and FaceTime calls are not on TDRA’s list of allowed apps. Read our guide to internet calls in the UAE.
• Newspapers and lawyers go further. Khaleej Times has written that hiding your IP address to reach blocked websites or calling apps is an offence under the 2021 law, and a lawyer it interviewed said using a VPN for blocked calling apps may be considered illegal. That is their reading; the wording of Article 10 needs criminal intent. We found no official report of anyone prosecuted only for using a VPN, which does not mean it cannot happen.

Allowed, risky, punishable

Blocked by mistake? Ask for a review

If a lawful site is blocked, you do not need a VPN to fight it. TDRA’s Block or Unblock Websites service takes requests from individuals through UAE Pass; it is free and TDRA says it takes 3 to 10 working days. You can also use the forms of du and e&, and each provider’s block page carries a report link.

How the law got here

• 2012: Article 9 of Decree-Law No. 5 of 2012 punished using a false or third-party IP address to commit or hide a crime, with a fine of AED 150,000 to 500,000 and/or imprisonment.
• 2016: an amendment raised that penalty to temporary imprisonment and AED 500,000 to 2,000,000. Media called it a “VPN law”, but the amendment did not add the word VPN; TDRA’s statement of 31 July 2016 said only the penalty had changed.
• 2022: Decree-Law No. 34 of 2021 replaced the 2012 law, and the same rule became Article 10 with the same penalty range.

Choosing a VPN for lawful use

For privacy and public Wi-Fi, pick a provider whose no-logs claims have been checked by an independent auditor, with apps from the official stores. Our overview of the best VPN in the UAE compares them, and our reviews go through each one.

Staying up to date

Laws and TDRA’s lists change. The official text is on the UAE Legislation portal; the Arabic version is the one that counts in court. We check this page against TDRA’s guidelines and the portal and show the date at the top.

Sources

Checked on 30 October 2026. Providers change their apps, servers and terms, so check the official page before you pay.

1. UAE Legislation portal: Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes
2. Federal Decree-Law No. 34 of 2021, English translation (PDF hosted by ADGM)
3. Lexis Middle East: Decree-Law 34 of 2021, amendment history
4. Federal Decree-Law No. 5 of 2012 on Combating Cybercrimes, English translation (PDF hosted by TDRA)
5. TDRA: statement on the use of VPN to clarify media reports (31 July 2016)
6. TDRA: Internet Guidelines (VPN guidance, blocking categories, allowed VoIP apps)
7. TDRA: Internet Access Management regulatory policy, version 1.1 (19 April 2017)
8. TDRA: frequently asked questions (VoIP)
9. TDRA: Block or Unblock Websites service
10. du: block or unblock a website
11. e&: block or unblock websites form
12. Khaleej Times: UAE residents permitted to use VPNs, misuse is a problem, says cybersecurity chief (4 February 2024)
13. Khaleej Times: UAE Cybersecurity Council on public Wi-Fi breaches (24 August 2025)
14. Gulf News: UAE Public Prosecution warns against illegal network circumvention (23 December 2024)
15. Khaleej Times: VPN downloads in the UAE and the Dh2 million fine for misuse (26 October 2025)
16. Khaleej Times: is it illegal to use VPNs to make free calls? (lawyer's answer, 12 March 2023)
17. The National: Dh5,000 VPN fine rumour quashed by the telecoms regulator (23 January 2018)