Civil Law and UAE: Electronic Signature Disputes — Advanced Analysis

1. Introduction

Electronic-signature disputes in the UAE have moved beyond the simple question of whether an electronic signature is legally valid. Under the current framework, the more difficult questions are:

• Who actually signed?
• Who authorised the signature?
• Was the signature created by the signatory or automatically applied by a system?
• Was the electronic signature certificate valid at the relevant time?
• Was the signatory's device or credential compromised?
• Was the document changed after signature?
• Can the signature be attributed to a particular person?
• Did the person have authority to bind a company?
• Does an electronic copy of a signature constitute a valid signature?
• What happens where the signatory later denies having signed?
• What evidentiary weight should be given to audit trails, metadata and expert evidence?

The current UAE framework is principally governed by Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services, together with Federal Decree-Law No. 35 of 2022 on Evidence in Civil and Commercial Transactions.

The 2021 legislation expressly recognises electronic signatures and establishes categories including Advanced Electronic Signatures and Qualified Electronic Signatures. An Advanced Electronic Signature must, among other things, be uniquely associated with and under the control of the signatory, identify the signatory, and be linked to the signed data so that alteration can be detected.

2. What Is an Electronic Signature?

An electronic signature is broadly a technological means by which a person indicates approval, authentication or adoption of an electronic record.

It can take different forms, including:

• typed name;
• scanned signature;
• electronically inserted signature image;
• click-to-sign mechanism;
• biometric signature;
• cryptographic digital signature;
• certificate-based signature;
• cloud-based signature;
• platform-generated signature;
• electronic signature attached to a PDF;
• signature generated through a trusted service provider.

The important legal point is:

The technology used to sign and the legal question of whether the person intended to sign are related but distinct questions.

3. UAE Legal Framework

A. Federal Decree-Law No. 46 of 2021

The 2021 law provides the principal federal framework for:

• electronic documents;
• electronic signatures;
• electronic seals;
• trust services;
• qualified trust services;
• electronic identification;
• certification;
• preservation of electronic records.

It recognises the legal effect of electronic transactions rather than requiring every transaction to be reduced to traditional paper.

Advanced Electronic Signature

Article 19 establishes requirements including:

1. exclusive association with the signatory;
2. control by the signatory;
3. ability to identify the signatory;
4. linkage to the signed data;
5. ability to detect modification of the signed data;
6. compliance with applicable technical/security requirements. 

This makes identity, control and integrity central to electronic-signature disputes.

4. Qualified Electronic Signature

A Qualified Electronic Signature provides an even stronger statutory framework because it is associated with a qualified certificate and qualified trust-service infrastructure.

In practical litigation, the distinction is important.

A basic electronic signature may require evidence establishing:

“This person intended to sign.”

A qualified signature can provide a much stronger technological and statutory basis for:

“This signature is attributable to this identified signatory and the signed document has not been altered.”

Nevertheless, a qualified signature does not eliminate every possible dispute.

A party may still raise questions concerning:

• fraud;
• coercion;
• lack of authority;
• compromised credentials;
• incapacity;
• contractual illegality;
• scope of authority;
• underlying consent.

5. Electronic Signature Versus Digital Signature

The terms are sometimes used interchangeably, but legally they need not mean the same thing.

Electronic signature

A broad category.

It can include a name typed into an electronic document or another electronic method of expressing consent.

Digital signature

Usually refers to a cryptographic mechanism using:

• private keys;
• public keys;
• certificates;
• cryptographic verification.

Therefore:

Every digital signature may function as an electronic signature, but not every electronic signature is necessarily a cryptographic digital signature.

This distinction becomes important when determining the level of authentication available.

6. The Five Central Questions in an Electronic-Signature Dispute

An advanced UAE court analysis should generally ask:

1. Attribution

Who created or authorised the signature?

2. Intention

Did that person intend to authenticate or approve the document?

3. Integrity

Was the document changed after signing?

4. Authority

Did the person have legal authority to bind the individual or company?

5. Evidentiary reliability

Can the electronic system and associated records reliably establish the preceding facts?

These five questions should not be collapsed into one.

7. Case Law 1 — Dubai Court of Cassation, Matter No. 241 of 2007

This is an important historical UAE authority concerning electronic signatures under the former Federal Law No. 1 of 2006 on Electronic Commerce and Transactions.

The Dubai Court of Cassation considered the evidentiary significance of a preserved electronic signature and recognised that such an electronic signature could be relied upon unless successfully challenged.

The case formed part of the early development of UAE electronic-signature jurisprudence.

Importance

The case established an important conceptual transition:

A signature does not necessarily lose legal significance merely because it exists electronically.

However, the decision arose under the 2006 legislation, which has since been replaced by Federal Decree-Law No. 46 of 2021.

It should therefore be used as historical jurisprudence, not as a direct statement of every requirement under the current legislation.

8. Case Law 2 — Dubai Court of Cassation, Matter No. 277 of 2009

In this case, decided on 13 December 2009, the Dubai Court of Cassation considered electronic communications and electronic signatures under the former electronic-transactions regime.

The court recognised that transactions conducted through email could have legal force where the information remained available in the relevant electronic record. It also recognised the evidentiary significance of an electronic signature even where the electronic communication or signature was not produced in its original physical form.

Importance

This authority is particularly significant for the proposition that:

An electronic signature does not become legally irrelevant merely because there is no traditional paper original.

It helped establish the functional-equivalence approach that has become central to modern electronic-commerce law.

9. Case Law 3 — Dubai Court of Cassation, Case No. 35 of 2008

The Dubai Court of Cassation's decision in Case No. 35 of 2008 is another historical authority concerning electronic records and documents.

The reported principle is that electronic records can carry the evidentiary weight of their physical counterparts where the relevant authenticity requirements are satisfied.

Importance

The case demonstrates an important distinction:

Electronic form is not the same thing as evidentiary weakness.

The court must instead examine:

• authenticity;
• integrity;
• attribution;
• reliability.

This reasoning remains relevant under the modern statutory framework, although the governing legislation has changed.

10. Case Law 4 — ICICI Bank Ltd v Bavaguthu Raghuram Shetty [2022] DIFC CFI 034

This is a DIFC authority rather than an onshore UAE Court of Cassation decision, so it must be treated as comparative UAE jurisprudence.

The dispute involved personal guarantees containing electronically applied/copy signatures.

The critical question was not simply:

“Does the signature look like Mr Shetty's signature?”

Instead, the court focused on:

Was the electronic signature applied by or with the authority of Mr Shetty?

Experts examined the signatures and concluded that the underlying signature corresponded strongly with known signatures. The remaining issue was whether the electronic application had been authorised. The court considered the surrounding documents, subsequent wet-ink signatures, extensions and other evidence and concluded that the electronic signatures were sufficiently supported by the evidence.

Major principle

This case illustrates:

Authentication of the underlying signature is different from proving authorisation of its electronic application.

That distinction is extremely important.

11. Why ICICI Bank v Shetty Is Important

Imagine a company possesses a scanned copy of a director's signature.

It places that signature on:

“Personal Guarantee — AED 50 million.”

The director says:

“That is my signature, but I never authorised anyone to put it on this guarantee.”

There are therefore two separate questions.

Question A

Is the signature image genuinely derived from the director's signature?

Question B

Did the director authorise its use on this document?

An expert may answer Question A.

The court must determine Question B from the complete evidence.

That distinction is one of the most important lessons from ICICI Bank v Shetty.

12. Case Law 5 — Barclays Bank PLC v Bavaguthu Raghuram Shetty [2020] DIFC CFI 061

Another important DIFC authority is Barclays Bank PLC v Bavaguthu Raghuram Shetty.

The dispute involved allegations that electronic signatures had been inserted into a version of an ISDA agreement without proper authority.

The court examined:

• different versions of the agreement;
• alleged electronic insertion of signatures;
• forensic analysis;
• the integrity of another executed version;
• the surrounding contractual history.

The court found that the existence of another intact executed version substantially undermined the challenge to the disputed electronic version.

Principle

Electronic-signature disputes should not necessarily be determined by examining one isolated PDF.

The court may consider the entire evidentiary environment.

For example:

disputed electronic document

• earlier agreement
• later correspondence
• performance
• subsequent confirmation
• system records

may collectively establish authenticity and authority.

13. Case Law 6 — Ondina v Olin [2025] DIFC CFI 046

This is a recent DIFC authority concerning whether an email could satisfy a legal requirement for a document to be signed.

The court considered emails exchanged concerning a variation to an employment contract.

The employee's email ended with her name, and the court concluded that this constituted an electronic signature because:

• the email was electronic information stored in perceivable form;
• her name was attached to the communication;
• she intended to authenticate her acceptance of the revised arrangement. 

Importance

The case demonstrates that:

An electronic signature need not necessarily resemble a traditional digital-signature certificate.

The legal inquiry may instead focus upon:

• identification;
• adoption;
• intention;
• authentication.

This is especially important for email-based contracting.

14. Case Law 7 — Naho v Neukirchi [2024] DIFC SCT 415

This DIFC Small Claims Tribunal decision also considered whether an email containing the sender's name could constitute an electronic signature.

The analysis focused upon the statutory concept of an electronic signature as an electronic sound, symbol or process attached to or logically associated with a record and adopted with the intention of signing it.

Importance

The decision illustrates the movement from a form-based approach:

“A signature must look like handwriting.”

toward a functional approach:

“Did the person adopt the electronic mark or process with the intention of authenticating the record?”

This is especially relevant to:

• email contracts;
• online acceptance;
• electronic amendments;
• platform transactions.

15. Case Law 8 — Jonathan Lau v Qashio Holding Company Ltd [2026] DIFC CFI 058

This is a recent DIFC decision involving electronically generated records associated with DocuSign and corporate documentation.

The case demonstrates the importance of examining the underlying electronic record rather than relying exclusively upon a printed or visual representation.

Relevant evidence can include:

• electronic completion records;
• signing history;
• timestamps;
• document versions;
• electronic audit trails;
• corporate resolutions.

Importance

The dispute illustrates the growing importance of native electronic evidence in proving the circumstances surrounding execution.

It is particularly relevant to modern commercial litigation because electronic signatures are increasingly generated by sophisticated platforms rather than simply inserted into PDFs.

16. Case Law 9 — Dubai Court of Cassation, Civil Cassation No. 468 of 2024

This recent Dubai Court of Cassation decision concerned WhatsApp communications relating to a substantial loan.

Although the case was principally about electronic communications rather than a conventional cryptographic electronic signature, it is relevant to electronic-signature disputes because it illustrates the court's willingness to examine electronic manifestations of contractual consent.

The reported decision treated the electronic communications as capable of establishing the contractual relationship and addressed issues concerning attribution and authenticity.

Importance

It reinforces the broader proposition:

The absence of a conventional wet-ink signature does not automatically mean the parties have no enforceable agreement.

Electronic communications may themselves provide evidence of:

• offer;
• acceptance;
• acknowledgment;
• consent;
• promise;
• modification.

17. Case Law 10 — Dubai Court of Cassation, Personal Status Cassation No. 451 of 2021

This authority involved a WhatsApp communication and its legal significance in a personal-status context.

It demonstrates that UAE courts can examine modern electronic communication when determining whether a legally relevant declaration has been made.

Although it is not a commercial electronic-signature case, it is useful by analogy because it demonstrates that the court's focus is on:

• authenticity;
• identity;
• content;
• intention;
• legal consequences.

The case should therefore be used as supporting jurisprudence rather than as a direct interpretation of the current commercial electronic-signature regime.

18. Current Legal Test for an Electronic Signature

A sophisticated UAE analysis should divide the dispute into six stages.

Stage 1 — Existence

Did an electronic signature actually exist?

For example:

• signature image;
• cryptographic signature;
• email name;
• click-to-sign;
• platform authentication.

Stage 2 — Attribution

Can the signature be attributed to the alleged signatory?

Stage 3 — Intention

Did the person intend to sign or authenticate the record?

Stage 4 — Integrity

Was the document altered after signing?

Stage 5 — Authority

Did the signatory have authority to bind:

• himself;
• an employer;
• a company;
• a principal?

Stage 6 — Legal effect

What legal consequence does the signed document produce?

19. The Most Difficult Issue: Authorisation

Electronic-signature disputes often involve the statement:

“The signature is mine, but I did not authorise its use.”

This is different from saying:

“The signature is not mine.”

The evidence required is therefore different.

Forgery dispute

The question is:

Was the signature generated from the alleged signatory?

Authority dispute

The question is:

Did the signatory authorise someone or a system to apply it?

Consent dispute

The question is:

Did the signatory intend to become legally bound?

Capacity dispute

The question is:

Was the signatory legally capable of entering the transaction?

These questions should not be confused.

20. Electronic Signature and Corporate Authority

Corporate transactions create additional complexity.

Suppose:

Finance Director signs an AED 100 million guarantee electronically.

The company later argues:

“The finance director had no authority to execute it.”

The electronic-signature technology may prove that:

Finance Director X used the platform.

But that does not automatically prove:

Finance Director X had authority to bind Company Y.

Therefore:

Authentication ≠ corporate authority.

The court may need to examine:

• articles of association;
• board resolutions;
• powers of attorney;
• commercial licence;
• delegation arrangements;
• previous transactions;
• correspondence;
• internal authority;
• subsequent ratification.

21. Electronic Signature and Apparent Authority

A third party may argue that it reasonably relied upon the apparent authority of the person signing electronically.

This produces two separate questions:

Technical attribution

Was the electronic signature associated with Person X?

Legal attribution

Could Person X legally bind Company Y?

A reliable electronic signature can solve the first question without automatically solving the second.

22. Digital Certificate Disputes

Qualified electronic signatures often involve certificates.

A dispute may concern:

• certificate issuance;
• certificate expiration;
• certificate revocation;
• identity verification;
• trust-service provider;
• private-key security;
• certificate suspension.

The court may therefore need evidence from the relevant trust-service provider.

23. Compromised Credentials

Consider:

Director's signing credentials → stolen → attacker signs contract → company disputes agreement.

The company may argue:

“The system identifies our director, but he did not actually sign.”

The court may examine:

• login records;
• IP address;
• device information;
• multi-factor authentication;
• OTP;
• biometric authentication;
• certificate status;
• system alerts;
• unusual login patterns;
• subsequent conduct.

Thus:

Digital authentication is strong evidence, but authentication evidence can itself be challenged.

24. Electronic Signature and Document Integrity

A sophisticated electronic-signature system can create a relationship between:

Signature → Document → Cryptographic value

If the document changes after signing, the verification mechanism may reveal the modification.

This is why Article 19's requirement that an Advanced Electronic Signature be linked to the signed data in a way that permits detection of modification is important.

Example

A party signs:

“Payment due: AED 500,000.”

Someone later changes the PDF to:

“Payment due: AED 50,000.”

If the signature system is appropriately designed, verification may show that the signed data no longer matches the original.

25. Electronic Signature and Fraud

Fraudulent electronic-signature disputes may involve:

• stolen credentials;
• false identity;
• manipulated documents;
• unauthorised signature insertion;
• fake certificates;
• impersonation;
• compromised email accounts;
• insider misconduct.

The court should distinguish:

technical irregularity

from

legally material fraud.

A technically unusual signature is not automatically fraudulent.

That point is strongly illustrated by ICICI Bank v Shetty, where the fact that signatures were electronically applied did not itself establish forgery.

26. Scanned Signature Versus Advanced Electronic Signature

This distinction is particularly important.

Scanned signature

A photograph/image of a handwritten signature inserted into an electronic document.

Advanced electronic signature

A signature satisfying statutory technical requirements relating to:

• identification;
• control;
• association;
• integrity;
• security.

A scanned signature can potentially be legally relevant, but its evidentiary vulnerability is usually greater because the court may need additional evidence proving:

• who inserted it;
• who authorised it;
• when it was inserted;
• whether the document was altered.

27. Email Signature Disputes

An email ending:

“Regards,
Ahmed”

may or may not constitute a legally significant electronic signature depending on the applicable law and circumstances.

Ondina v Olin demonstrates the importance of intention and adoption of the person's name in the electronic communication.

The court should therefore ask:

1. Did the sender write the email?
2. Was the email account attributable to the sender?
3. Did the sender intend to authenticate the communication?
4. Did the email satisfy any statutory writing/signature requirement?
5. What did the surrounding communications show?

28. WhatsApp and Electronic Consent

WhatsApp creates an even more informal environment.

A message such as:

“Agreed. I will pay AED 2 million.”

may become evidence of contractual consent.

But the court should consider:

• whether the number belonged to the alleged sender;
• whether the account was controlled by that person;
• whether the message was extracted reliably;
• whether the conversation is complete;
• whether subsequent messages contradict it;
• whether the sender intended it to constitute a legally binding commitment.

The 2024 Dubai Cassation authority demonstrates the increasing importance of these issues.

29. Electronic Audit Trails

Modern signing platforms can produce:

• timestamp;
• IP address;
• email address;
• authentication method;
• device information;
• signing sequence;
• document hash;
• completion certificate;
• certificate information.

An audit trail can therefore become as important as the signature image itself.

For litigation, the question may be:

Can the audit trail independently corroborate the claimed signing event?

30. Expert Evidence

Experts are often central to difficult electronic-signature disputes.

They may examine:

• metadata;
• cryptographic certificates;
• PDF structure;
• document hashes;
• server logs;
• signature certificates;
• IP addresses;
• audit trails;
• device data;
• handwriting comparisons;
• electronic insertion.

But the expert's role has limits.

Expert

“The electronic signature was applied from this account at 14:32.”

Court

“Did the person legally authorise the use of that account?”

The technical conclusion does not automatically resolve the legal question.

31. Chain of Evidence

An electronic signature should ideally be supported by a chain:

Identity

↓

Authentication

↓

Signing event

↓

Document

↓

Timestamp

↓

Integrity verification

↓

Audit trail

↓

Contractual authority

↓

Subsequent conduct

The stronger the chain, the more difficult it becomes to challenge the transaction successfully.

32. Electronic Signature and Subsequent Conduct

Subsequent conduct can be particularly important.

Suppose a director denies authorising an electronic guarantee.

But subsequently:

• signs amendments referring to the guarantee;
• makes payments under it;
• acknowledges the debt;
• requests an extension;
• negotiates enforcement.

Such conduct may provide important corroborative evidence.

This reasoning was significant in ICICI Bank v Shetty, where subsequent wet-ink documents referring to guarantees supported the inference that the electronic guarantees were recognised.

33. Electronic Signature and Ratification

Even where initial authority is disputed, subsequent conduct may raise a separate question of ratification.

For example:

Person X signs electronically without authority.

Later:

Company Y expressly confirms the contract.

The legal consequences of the later confirmation must be analysed under the applicable UAE contract and agency rules.

Therefore, the court should not necessarily stop its analysis at the original signing event.

34. Electronic Signature and Coercion

An electronic signature may be technically authentic but legally challengeable.

For example:

Employee is threatened → signs electronic settlement → later challenges consent.

The cryptographic evidence may establish:

“Employee signed.”

But it does not necessarily establish:

“Employee signed voluntarily.”

This illustrates an important principle:

Electronic authenticity does not automatically prove validity of consent.

The underlying civil-law doctrines concerning coercion, fraud, mistake and capacity remain relevant.

35. Electronic Signature and Mistake

Similarly:

Person accidentally signs the wrong document.

The system may produce a perfectly valid audit trail.

The dispute then becomes one of:

• mistake;
• intention;
• authority;
• contractual formation;
• rectification or other applicable remedy.

Technology can establish the occurrence of a signing event without necessarily resolving its substantive legal consequences.

36. Electronic Signature and Non-Repudiation

One major objective of advanced electronic signatures is non-repudiation.

The basic concept is:

The signatory should not easily be able to deny having signed a document when reliable technical evidence establishes the signing event.

But non-repudiation should not be understood as:

“The signatory can never challenge the signature.”

Challenges may still involve:

• compromised credentials;
• fraud;
• lack of authority;
• coercion;
• system failure;
• certificate problems;
• document alteration.

37. Evidence Law and Electronic Signatures

The Electronic Transactions and Trust Services Law should be read together with the Evidence Law of 2022.

The Electronic Transactions Law addresses:

legal recognition and technological validity.

The Evidence Law addresses:

production, proof and evidentiary treatment in litigation.

Thus:

Electronic Transactions Law

→ Is the electronic signature legally recognised?

Evidence Law

→ How is the electronic record proved in court?

Civil Transactions Law

→ What contractual consequences follow?

These are separate questions.

38. Six-Layer Model for UAE Electronic-Signature Litigation

A useful advanced framework is:

A successful challenge at any one layer may affect the ultimate result.

39. Comparison of Important Cases

40. Key Advanced Legal Principles

Principle 1 — Electronic form does not invalidate a signature

A document is not legally defective merely because it is electronic.

Principle 2 — Authentication is not authority

Proving that a signature belongs to a person does not necessarily prove that the person authorised its use.

Principle 3 — Signature is not consent in every dispute

A technically authenticated signature may still be challenged on substantive grounds such as fraud or coercion.

Principle 4 — Integrity matters

The court must consider whether the signed document remained unchanged.

Principle 5 — Audit trails are increasingly important

Modern electronic-signature litigation is often decided through system evidence rather than visual examination of a signature alone.

Principle 6 — Subsequent conduct can corroborate execution

Later performance, acknowledgment or confirmation may support the authenticity and authority of an earlier electronic signature.

41. Practical Example

Suppose Company A claims that Company B electronically signed a five-year supply agreement.

Company B says:

“Our director never signed it.”

Company A produces:

• signed PDF;
• DocuSign completion certificate;
• director's email;
• IP information;
• timestamp;
• OTP record;
• audit trail.

Company B produces:

• evidence that the director was travelling;
• evidence of a compromised email account;
• expert evidence concerning the document;
• internal records showing that the director lacked authority.

The court should not decide merely by asking:

“Does the PDF contain a signature?”

It should analyse:

Identity → Authentication → Intention → Integrity → Authority → Substantive validity.

That is the modern electronic-signature dispute.

42. Conclusion

UAE electronic-signature law has developed from the early recognition of electronic records under the former 2006 regime into a much more sophisticated system under Federal Decree-Law No. 46 of 2021.

The modern dispute is rarely:

“Is an electronic signature valid?”

The more difficult question is:

“Has the party proved that the electronic signature was genuinely attributable to the alleged signatory, was authorised or adopted by that person, remained connected to an unaltered document, and produced the legal effect claimed?”

The case law illustrates this evolution.

The historical Dubai Court of Cassation decisions in Matter No. 241/2007, Matter No. 277/2009 and Case No. 35/2008 established the early legal recognition of electronic signatures and electronic records.

The later DIFC decisions—particularly ICICI Bank v Shetty, Barclays v Shetty, Naho v Neukirchi and Ondina v Olin—demonstrate increasingly sophisticated judicial analysis of attribution, authorisation, intention, integrity and electronic execution.

The strongest practical formula is therefore:

Electronic Signature Validity = Identity + Attribution + Intention + Integrity + Authority + Statutory Compliance

A technically authentic signature can still be legally ineffective if the signer lacked authority, consent was defective, the document was materially altered, or another substantive legal defect invalidates the underlying transaction.

Important jurisdictional note: the Dubai Court of Cassation authorities are onshore UAE authorities. The DIFC cases cited above are comparative UAE authorities, because DIFC has its own electronic-transactions and procedural framework. The older onshore cases were decided under the former 2006 electronic-transactions legislation and should therefore be distinguished from the current Federal Decree-Law No. 46 of 2021.