Who Investigates Cybercrime in Saudi Arabia?
Under Article 15 of the Anti-Cyber Crime Law, the Bureau of Investigation and Public Prosecution (BIP) — known in Arabic as the Niyaba — is responsible for the investigation and prosecution of all cybercrime offences. The Communications and Information Technology Commission (CITC) provides technical assistance and forensic support to security agencies throughout the investigation and trial process (Article 14).
In practice, initial detection may come from:
- Cyber monitoring units within the Ministry of Interior
- Complaints filed by individuals or companies
- Employer or institutional reports
- Triggered alerts on monitored platforms and networks
---
What Triggers a Cybercrime Investigation?
Investigations can be launched based on:
- A formal complaint by an individual, company, or government body
- Proactive monitoring of online activity by security agencies
- Detection of data breaches or system intrusions
- Reports of fraudulent online transactions
- Content flagged as violating public order, religious values, or public morals
Expats should be aware that monitoring of social media, messaging applications, and network traffic is actively conducted in Saudi Arabia.
---
Your Key Rights During Investigation
The Right to Legal Representation
You have the right to engage a licensed Saudi lawyer at any stage of the investigation. This is one of the most important steps you can take. Do not make any statements to investigators without first consulting legal counsel.
The Right to Consular Assistance
As an expatriate, you are entitled to notify your country's embassy or consulate upon arrest or detention. Request this immediately and do not waive this right. Your embassy can provide a list of qualified local lawyers and monitor your case.
Protection Against Unlawful Detention
Saudi law sets procedural limits on detention periods. If you are arrested, your lawyer can challenge unlawful or extended detention before the appropriate court.
---
The Voluntary Disclosure Provision (Article 11)
One of the most important — and underutilised — provisions in the law is Article 11, which allows a court to:
- Fully exempt an offender from punishment if they voluntarily report the crime to authorities before it is discovered and before damage occurs
- Reduce the penalty significantly if the offender reports the crime after it occurs but before the investigation is complete
This provision is particularly valuable if you have participated in an offence unknowingly or under pressure and wish to come forward. Early disclosure — handled correctly through legal counsel — can make a decisive difference in the outcome of a case.
---
Device Seizure and Digital Evidence
During a cybercrime investigation, authorities are empowered to:
- Seize computers, smartphones, tablets, storage devices, and servers
- Access email accounts, cloud storage, and messaging applications
- Analyse metadata, browsing history, and communication logs
Under Article 13, equipment used in a crime may be permanently confiscated, regardless of whether it belongs to the suspect or a third party — provided the third party is not considered a bona fide innocent party.
Practical tip: Do not attempt to delete files or wipe devices once you are aware of an investigation. This can be treated as obstruction of justice and significantly worsen your legal position.
---
What to Expect During Prosecution
- Cases are heard before specialised criminal courts
- The prosecution is managed by the Bureau of Investigation and Public Prosecution
- Proceedings are conducted in Arabic — you will need a certified legal interpreter
- Sentences, if handed down, may include imprisonment, fines, deportation, and confiscation of assets
- The law also allows for permanent closure of websites or service accounts linked to the offence
---
Penalties for Organised or Aggravated Offences
If prosecutors allege that the crime was committed:
- As part of organised criminal activity, or
- By a public official using their position or official systems
...then the minimum sentence cannot be less than half the applicable maximum (Article 8). This is a mandatory sentencing floor, not a discretionary guideline.
---
Step-by-Step Guide: What to Do If Investigated
- Stay calm and do not make statements to investigators without a lawyer present
- Request consular notification from your country's embassy immediately upon arrest
- Engage a licensed Saudi criminal defence lawyer as soon as possible
- Do not delete or alter any digital content on your devices
- Preserve all communications and records that may support your defence
- Discuss the voluntary disclosure option with your lawyer if you have any involvement in the alleged offence
- Follow your lawyer's advice regarding statements, cooperation, and bail applications
---
Key Contacts and Resources
- Bureau of Investigation and Public Prosecution: The body responsible for charging decisions
- Communications and Information Technology Commission (CITC): Provides technical evidence to courts
- Your national embassy or consulate in Riyadh or Jeddah: Request consular access immediately upon arrest
- Saudi Bar Association: For referrals to licensed Saudi lawyers
---
Final Advice
Cybercrime investigations in Saudi Arabia move quickly and the consequences are severe. Expats do not receive special exemptions, and language barriers can compound the difficulties of navigating the process alone. Engaging qualified legal representation at the earliest possible moment is the single most important action you can take to protect your rights and your future in the Kingdom.