The Central Bank of the UAE has taken a firm step toward strengthening banking security and customer protection.
Banks and licensed financial institutions in the UAE have been directed to stop using WhatsApp and other instant messaging platforms for financial services, customer communication involving sensitive data, and document handling. Institutions are expected to confirm compliance and corrective measures by 30 April 2026, with non-compliance potentially leading to supervisory action or financial sanctions.
For customers, this is more than a regulatory update. It is a reminder that financial information should only move through secure, official, and controlled channels.
What banks should no longer request through WhatsApp
Under the directive, banks should not use instant messaging platforms to request, receive, or share sensitive customer information. This includes:
Personal or financial documents
Transaction instructions or confirmations
Payment, transfer, loan, or account-related details
Passwords, PINs, OTPs, or authentication information
These restrictions apply across customer service, relationship management, document submissions, and financial service requests.
Why this matters
Messaging apps may feel convenient, but they are not designed to operate as secure banking channels.
The CBUAE has highlighted risks such as fraud, impersonation, account takeover, social engineering, and the unauthorized disclosure of customer information. Regulators have also raised concerns around data residency, as information shared through third-party messaging platforms may be stored or processed outside the UAE.
In a financial system built on trust, convenience cannot come at the expense of confidentiality.
What customers should expect
Customers should expect banks to move communication and service requests toward approved channels, such as:
Mobile banking applications
Online banking portals
Official call centers
Secure email or verified bank platforms, where applicable
Physical branches
This may make certain processes feel more structured, but it also gives customers a clearer and safer way to interact with their banks.
What customers should do now
Customers should be especially careful with any request received through WhatsApp or similar messaging platforms.
Do not send Emirates ID copies, bank statements, salary certificates, trade licenses, account details, or financial documents through messaging apps.
Never share OTPs, PINs, passwords, or authentication codes with anyone.
Always verify requests directly through the bank’s official app, website, call center, or branch.
If someone claiming to represent a bank requests sensitive information through WhatsApp, treat it as a potential fraud attempt and report it immediately.
A stronger standard for banking trust
This directive reflects the UAE’s wider commitment to secure financial services, consumer protection, and disciplined digital banking practices.
For customers, the message is clear: your financial information deserves a protected environment. Official banking channels are no longer simply preferred. They are becoming the standard for safe and responsible financial communication.