A Dubai expat is facing trial for allegedly exploiting a loophole in a local bank’s credit card payment system to steal Dh74,500. The accused, an African national, discovered a flaw in the bank’s WhatsApp payment feature that allowed users to settle credit card dues.
Exploiting the System
The loophole involved adding a negative sign (-) to the payment amount, causing the money to be credited to the user’s account instead of being deducted. Court records reveal that the expat used this tactic over two consecutive days, successfully transferring Dh74,500 into his account. The funds were then moved to another local bank account and withdrawn on the same day.
Detection and Investigation
The fraudulent transactions were detected by the bank’s accounting and IT departments, leading to an internal review of the accused’s account. Upon discovering the unauthorized transactions, bank officials reported the incident to the police at Al Muraqqabat Station. The suspect was apprehended, and a white iPhone Pro Max 15, believed to have been used in the crime, was seized.
Bank Testimony and Denial
An IT specialist at the bank testified that the flaw was uncovered during a routine audit in February. The accused denied the charges, claiming his phone was hacked on the dates of the transactions, February 2 and 3. He further argued that he believed the funds were transferred by someone with whom he had previous financial dealings.
Civil Lawsuit and Court Proceedings
In addition to the criminal charges, the bank has filed a civil lawsuit seeking Dh51,000 in damages. The court has referred the civil claim to the competent civil court for further deliberation, pending the final outcome of the criminal case.
