UAE Digital Transactions Doubled in 2025 — So Did One Specific Kind of Fraud. Here's What It Means for Your Business

LexisNexis Risk Solutions published its Cybercrime Report 2026, “Evolving Threats Beneath the Surface,” in September 2026, built from an analysis of more than 116 billion digital transactions worldwide. The UAE-specific numbers, drawn from roughly 700 million transactions through the company's Digital Identity Network, tell an unusually clear story: digital transaction volume in the UAE rose 107% year-on-year through 2025, while the overall attack rate actually fell 45%, to 1.2% — below the 1.6% global average.

That is, on its face, good news. More UAE consumers are transacting digitally, and proportionally fewer of those transactions are fraudulent. But one number inside the same report cuts the other way: attacks targeting password resets surged more than 300%, and automated bot attack volume rose 62% year-on-year to roughly 11 million attempts. “The UAE's ability to sustain rapid digital growth while reducing its overall attack rate is an encouraging indicator of resilience,” said Stephen Topliss, VP of Global Fraud and Identity at LexisNexis Risk Solutions — while flagging that fraud is shifting from broad, scattershot attacks toward more targeted attempts to hijack identity and account-recovery moments specifically.

Why a small business should care about a banking-fraud statistic

This report is aimed at banks, telcos and government services — the sectors that actually process password resets and logins at scale. A café, salon or clinic in Dubai or Sharjah isn't handling account recovery flows. But the underlying behavioural shift applies well beyond finance: as digital interactions become the default way UAE customers deal with any business, they also become more attentive to whether the digital thing in front of them is genuinely who it claims to be, particularly at the exact moment they're asked to trust a link, a login, or a destination they didn't type themselves.

That attentiveness doesn't stay confined to banking apps. A customer who has read headlines about a 300% jump in account-takeover attempts is, consciously or not, a little more cautious about tapping an unfamiliar link to "leave a review" or "see our menu" too — especially if it was handed to them as a loose QR sticker rather than something that visibly belongs to the business.

The practical fix: remove the guesswork, not just the risk

You can't fix a national fraud statistic. What you can fix is how confidently a customer arrives at your actual Google profile, your actual WhatsApp number, your actual Instagram — with nothing left to type, search for, or second-guess. That's the specific gap an NFC card closes that a generic printed QR code doesn't: a customer taps a physical, branded object you handed them or that's fixed to your counter, and their phone opens exactly one destination, set once, by you.

For reviews specifically, a Google Review NFC Card with QR (AED 29) takes a customer straight to your real Google Business Profile review box — no search results page in between, where a similarly named competitor or an outdated listing could catch them instead. For direct contact, a WhatsApp NFC Chat Card with QR (AED 29) opens a chat with your actual registered WhatsApp Business number in one tap, rather than a customer typing a number from memory or a faded sign and risking a transposed digit landing them somewhere else entirely.

Neither product claims to stop fraud — no physical card can. What they do is remove the one step in a customer's digital journey with your business where trust is actually being asked for: "is this really them?" When the answer is baked into a fixed, branded object instead of a search result or a hand-typed guess, that's one less moment of hesitation between a customer and the review, message, or visit you actually want.

Photo by Dan Nelson on Unsplash