Skip to content
Coverage

Card and bank billing

United Arab Emirates — Central Bank Consumer Protection Regulation and Sanadak

NationalAEDerived or secondary source

United Arab Emirates

Rule id
billing.ae-cbuae
Version
1.0.0
In force from
February 15, 2021
Last read against its sources
August 5, 2026
Countries bound
United Arab Emirates

In plain language

What this regime says.

The UAE has a prescriptive Consumer Protection Regulation made by the Central Bank and an independent free ombudsman, Sanadak, sitting above the banks. Complain to the bank citing the Standards, then take the final response to Sanadak.

Who is covered

Consumers of financial institutions licensed by the Central Bank of the UAE.

What you get

A regulated investigation and a free, binding ombudsman decision within Sanadak's limits.

Where claims go wrong

  • Going to the Central Bank for an individual claim. Sanadak is the route.
  • Not citing the Consumer Protection Standards, which are specific and enforceable.

Authority

Every citation,
with its pinpoint.

A claim that cites “EU law” gets filed. A claim that cites Article 7(1)(c) gets answered. These are the exact coordinates this entry rests on.
  1. Consumer Protection Regulation, Central Bank of the UAE (Circular No. 8/2020)Consumer Protection Regulation and Consumer Protection Standards issued by the Central Bank of the United Arab Emiratescomplaint handling, disclosure, and the treatment of unauthorised and disputed transactions by licensed financial institutions
  2. Federal Decree-Law No. (14) of 2018 on the Central Bank and Organisation of Financial Institutions and ActivitiesFederal Decree-Law No. (14) of 2018, United Arab Emirates

Sources

Where a figure is indexed, converted or published by a regulator rather than fixed in the instrument, the provenance is recorded separately. Anything marked as a modelled estimate is exactly that — a model, not a statutory number.

What it imposes

Clocks, defences and the ladder.

A rule module builds these while it evaluates, because a limitation period depends on which forum is open to you. What follows is the structure this regime produces — deliberately with no dates and no figures, because those belong to your facts rather than to the law.

The clocks it starts

  • Card scheme dispute window (commonly 120 days)The scheme window is short and it is the one that closes first. It runs from the transaction or, for undelivered goods and interrupted services, from the date delivery or performance was due. The domestic routes below run much longer, so a closed scheme window is a reason to hurry, not a reason to stop.Filing window

What it entitles you to, beyond money

  • A reasoned written decision from the institutionA decision naming the clause or rule relied on is the thing that unlocks everything above it, and it is an obligation rather than a favour in every regime in this file.complaint handling, disclosure, and the treatment of unauthorised and disputed transactions by licensed financial institutions
  • Reversal or refund of the disputed amount where the claim succeedsWhat that is worth depends on the route: a scheme dispute reverses the transaction, a conduct regulator can require the institution to put you back in the position you would have been in, and a court or ombudsman can go further and cover consequential loss.
  • Blocking further payments to the same merchantAsk for this in the same letter. Recovering what has gone does not stop what is coming, and a recurring authority survives a successful dispute unless you cancel it separately.

What the other side will say

Each of these is a refusal this regime lets a counterparty attempt, paired with the answer to it. Reading them before you write is worth more than any amount of polish on the letter itself.

"The merchant is abroad, so there is nothing we can do"

high likelihood

The institution treats a cross-border transaction as outside its reach and refers you to the merchant's own country.

What answers it

Your counterparty is the institution that debited your account, and it is regulated where you are. The card schemes operate cross-border disputes as a matter of routine — that is most of what the scheme rules are for. Ask the institution to state, in writing, which rule it says prevents it from raising a cross-border dispute.

"The transaction was authenticated with your OTP/PIN, so you authorised it"

high likelihood

The institution treats a one-time password or a PIN entry as conclusive proof that the cardholder consented.

What answers it

Authentication proves that a credential was used, not that you consented to that particular payment. Ask for the authentication log, the device and channel used, and the merchant identifier. Where the credential was obtained by deception, or where the institution ignored its own fraud-monitoring signals, the analysis changes — and in several regimes here the burden of proving authorisation sits on the institution, not on you.

Consumer Protection Regulation, Central Bank of the UAE (Circular No. 8/2020) — complaint handling, disclosure, and the treatment of unauthorised and disputed transactions by licensed financial institutions

Silence, indefinitely

high likelihood

The complaint is acknowledged and then simply never answered, which in practice defeats more claims in this region than any substantive argument.

What answers it

Treat silence as a refusal and escalate on that basis. Write once more, state the date of your complaint and the reference, say that you are treating the absence of a decision as a refusal, and copy the regulator or redress body named in this result. A file that has gone to the regulator gets answered.

Where to take it next

  1. Written complaint to the institution that debited youAddress it to the complaints or consumer-protection unit, not to a branch. Ask for a reference number and a written decision with reasons, and say what outcome you want in one sentence.Claim directtypically 30 days
  2. Scheme chargeback, in parallelAsk the issuer to raise a dispute under the card scheme reason code that fits the facts. It is faster than any regulatory route, it costs nothing to run alongside, and a refusal decides nothing about your legal rights.Claim directtypically 45 days
  3. Sanadak — the independent ombudsman unitBinding on themSanadak is the UAE's independent ombudsman for banking and insurance complaints, established by the Central Bank and operating since 2023. It is free to consumers and its decisions bind the licensed financial institution within its limits. You must complain to the institution first and give it the period the Consumer Protection Standards allow before Sanadak will take the case.Ombudsmantypically 90 daysofficial page
  4. The Central Bank of the UAEThe Central Bank makes and supervises the Consumer Protection Regulation and Standards, but individual complaints are handled by the independent ombudsman unit, Sanadak, which it established. It will not resolve your individual claim — it acts on patterns — so file anyway, because that is how patterns are built, but do not wait on it as your remedy.Regulatorofficial page
  5. Civil or small-claims proceedings against the merchant or the institutionThe last rung, and in several countries here the cheapest one — consumer courts and small-claims procedures in this region are frequently free or nearly so and do not need a lawyer. Use it when the sum is worth it and the regulator route has produced nothing.Small claimstypically 180 days

Documents

What this regime can produce.

Every one of these is a document you send yourself, in your own name. Duesday never writes to anybody on your behalf and is never anyone’s agent.

The same claim type elsewhere

Card scheme chargeback rules (Visa, Mastercard, American Express, Discover)SCHEMESupranationalparty states varyVisa Core Rules and Visa Product and Service RulesConfidence: mediumPSD2 — unauthorised transactions and direct-debit refunds (Directive (EU) 2015/2366)EUSupranational30 countriesDirective (EU) 2015/2366 (PSD2)Confidence: highNorway — Financial Contracts Act 2020 and FinansklagenemndaNONationalNorwayLov om finansavtaler (finansavtaleloven), LOV-2020-12-18-146Confidence: mediumRussia — Federal Law 161-FZ on the National Payment System and the financial ombudsmanRUNationalRussiaФедеральный закон от 27.06.2011 № 161-ФЗ «О национальной платежной системе», ст. 9Confidence: mediumSwitzerland — Financial Services Act ombudsman affiliation and the Swiss Banking OmbudsmanCHNationalSwitzerlandFinancial Services Act (FinSA / FIDLEG), SR 950.1Confidence: mediumTürkiye — Bank Cards and Credit Cards Law No. 5464 and the Consumer Arbitration CommitteesTRNationalTürkiyeBanka Kartları ve Kredi Kartları Kanunu No. 5464Confidence: mediumConsumer Credit Act 1974 s.75 (and s.75A) — creditor joint and several liabilityGBNationalUnited KingdomConsumer Credit Act 1974, s.75Confidence: highCanada — payment card codes of conduct, provincial consumer protection and OBSICANationalCanadaCode of Conduct for the Payment Card Industry in CanadaConfidence: medium

Other rights in the same countries

Abu Dhabi Global Market — Data Protection Regulations 2021AE-ADGMSub-nationalUnited Arab EmiratesADGM Data Protection Regulations 2021Confidence: mediumDubai International Financial Centre — DIFC Data Protection Law 2020AE-DIFCSub-nationalUnited Arab EmiratesDIFC Data Protection Law, DIFC Law No. 5 of 2020Confidence: mediumUnited Arab Emirates — consumer protection price displayAENationalUnited Arab EmiratesFederal Law No. 15 of 2020 on Consumer Protection, and its implementing regulationConfidence: lowUnited Arab Emirates — Emirates PostAENationalUnited Arab EmiratesFederal postal regulation and the Emirates Post terms of serviceConfidence: lowUnited Arab Emirates — Etihad Rail passenger services and the emirate transport authorities' passenger rulesAENationalUnited Arab EmiratesFederal and emirate-level transport regulation, and the operator's conditions of carriageConfidence: lowUnited Arab Emirates — Federal Law No. 15 of 2020 on Consumer ProtectionAENationalUnited Arab EmiratesFederal Law No. 15 of 2020 on Consumer ProtectionConfidence: lowUnited Arab Emirates — GCAA Civil Aviation Regulations, CAR-PWP (Passenger Welfare Program)AENationalUnited Arab EmiratesCAR-PWP — Passenger Welfare Program, Issue 02 (GCAA Civil Aviation Regulations, CAR III General Regulations)Confidence: mediumUnited Arab Emirates — mandatory health insurance and the emirate health authoritiesAENationalUnited Arab EmiratesDubai Law No. 11 of 2013 concerning Health Insurance in the Emirate of Dubai, and the Abu Dhabi health insurance schemeConfidence: low

Does this one reach your facts?

The engine runs every regime that could apply at once and reconciles them, rather than making you guess which page to read.

Not a law firm. Not legal advice. You send it yourself. This page describes a law; it is not advice about your situation and no outcome is promised.