What counts as a cybercrime in Qatar?

What does Qatar's law treat as a cybercrime?

Qatar's Cybercrime Prevention Law defines a cybercrime as any act involving the unlawful use of an IT means, an information system or the information network, in breach of the law (Article 1). The "information network" includes the internet and private and public networks.

The law reaches further than its own list. Anyone who commits an offence under any other law by using the information network or an IT means faces the penalty set for that offence (Article 45). The law also applies without prejudice to any harsher penalty in the Penal Code or another law (Article 44).

The law took effect on 2 October 2014. Its only amendment, Law No. 11 of 2025, added Article 8 bis on photos of people in public places from 21 July 2025.

Which acts are offences, and what are the penalties?

The main offences concern insults, private life, fraud, hacking, false news and blackmail. The penalties below are maximums; the court sets the sentence within them.

In every case the court also orders confiscation of the devices or programs used and of any proceeds, and closure of the premises or blocking of the website as appropriate (Article 53). It may also order a convicted non-Qatari to be deported (Article 52), which is one more reason to take advice early.

The Penal Code may also apply. It punishes spreading false or tendentious news or rumours to harm national interests or stir public opinion with up to five years (Article 136 bis), and broadcasting recordings or photos obtained by breaching privacy, without consent, with up to three years (Article 333 bis). The prosecution and the court decide which text applies.

How is a cybercrime reported?

If you decide to report, the competent body is the Ministry of Interior's Economic and Cyber Crimes Combating Department. Its channels are the Metrash app ("Communicate with us", then "Economic and Electronic Reporting", then "Reporting"), phone 2347444, hotline 66815757, email cccc@moi.gov.qa, and the reports office in Onaiza, as the Ministry announced in June 2025. Our police summons guide gives the full steps.

A complaint can also be made orally or in writing to the Public Prosecution or any judicial police officer (Criminal Procedure Code, Article 3). The police must accept reports and complaints and send them to the Public Prosecution at once (Article 31).

Timing matters. For offences that can only be prosecuted on the victim's complaint, a complaint is not accepted more than 30 days after the victim learned of the offence and who committed it (Article 7). Article 3 lists the Penal Code's defamation, insult and privacy offences and does not name the Cybercrime Law. If you are considering a complaint, don't leave it late.

What should you do if you're the victim?

1. 1

   Don't reply in kind, and don't pay anything under threat. If money has left your account, call your bank at once.

2. 2

   Take screenshots that show the account name, number or link, the date and the content, and keep the original messages.

3. 3

   Don't forward offensive content or private photos to other people; give them only to the authorities.

4. 4

   If you make a report, keep its number. You can follow it through the Public Prosecution's report inquiry service.

A victim may attend evidence-gathering steps whenever possible (Article 34). A victim may also claim compensation as a civil claimant, during the investigation or at trial until pleadings close, but not for the first time on appeal (Article 19). If the prosecution issues a no-grounds order, the victim may challenge it before the Attorney General within 15 days of being notified (Article 146).

Service providers must keep subscriber information for one year, and give investigators the data needed to establish the facts on a Public Prosecution order (Cybercrime Law, Article 21).

What should you do if you're accused?

If you are summoned over a post, message or account, attend on time. Your rights before the police and the prosecution are in our police summons guide. Also:

1. 1

   Don't delete posts, chats or accounts, and don't wipe your phone. Keep a copy for your lawyer.

2. 2

   Don't contact the complainant about the matter, directly or through others, and don't post about the case.

3. 3

   Write down what happened, with dates: what was posted or sent, when, from which account and to whom.

4. 4

   Speak to a lawyer before you give a statement or sign any record.

Investigators have wide powers here. The Public Prosecution can order a reasoned search of persons, places and information systems (Article 14), the immediate collection and recording of electronic data (Article 17), and the handover of devices and data by anyone concerned (Article 18). Evidence from IT systems cannot be excluded because of its nature (Article 15).

When should you speak to a lawyer?

Speak to a lawyer if you are summoned over something you did online, if you are being blackmailed or your photos have been shared, or if you lost money in an online scam. Other signs:

• The facts could fall under both the Cybercrime Law and the Penal Code.
• You don't know whether the 30-day complaint limit applies to you.
• You want to claim compensation alongside the criminal case.
• You have been asked to hand over your phone or account details, or to sign a statement.
• You are a resident worried about your residency or job.

Questions people ask