How to Verify a UAE Press Enquiry Before Sharing Documents, Quotes or Contact Details

A press email may look polished and still expose an organisation to malware, stolen passwords or fraudulent payments, risks identified in UK National Cyber Security Centre phishing guidance. Professional branding establishes neither a genuine assignment nor permission to disclose information. The practical rule is simple: verify identity first, then approve disclosure separately.

What should a UAE organisation do immediately after receiving an unexpected press enquiry?

An unexpected press enquiry should remain untrusted until the sender, outlet and assignment are independently confirmed. The employee receiving it should avoid acting on supplied links or contact details and send the request to the designated communications, legal, privacy or information-security owner.

What should a UAE organisation do immediately after receiving an unexpected press enquiry shown with practical context cues.

1. Stop: do not open unexpected attachments, follow embedded links, call numbers supplied in the message or release requested information.
2. Check: preserve the original message and refer it to the internal owner responsible for press approval and security review.
3. Share: release material only after both identity verification and disclosure approval. Public information may be acknowledged without providing anything new.

Which press-enquiry warning signs require an immediate pause?

Pause if the From and Reply-To addresses differ unexpectedly, the domain imitates an outlet with altered characters, or the requester asks for login codes, payment, confidential records or access credentials. Shortened links, compressed archives, unusual file types and unexpected attachments also justify review.

Urgency, poor spelling or a free-mail address can increase concern but does not prove fraud. Targeted phishing may use real company or employee details to make a request persuasive. The NCSC recommends layered technological, process and people-based controls rather than relying solely on an employee to recognise deception. Proper DMARC configuration can reduce domain spoofing, but email authentication does not verify a journalist or assignment.

What information should remain withheld until the press enquiry is verified?

• Personal data: identity documents, private numbers, home addresses, and customer or employee records.
• Authentication data: passwords, one-time codes, recovery details and access links.
• Confidential business information: contracts, internal lists, unpublished results and security records.
• Unpublished media material: draft statements, unapproved quotes, raw footage and embargoed releases.

The next question is not whether the message looks convincing, but whether independent evidence connects the sender to the claimed outlet.

How can the sender and media outlet behind a UAE press enquiry be verified independently?

Verify the sender by checking the complete email path and contacting the outlet through details found independently. A familiar display name or convincing logo is insufficient.

Which email and domain checks are useful for a press enquiry?

• Compare the visible name, From address, Reply-To and Return-Path character by character.
• Look for substitutions, misspellings and misleading subdomains, such as “rn” replacing “m”.
• Review SPF, DKIM and DMARC results where available. These indicate sending authority, message integrity and domain policy, but successful authentication does not confirm a journalist or assignment.
• Refer conflicting results, unfamiliar headers and suspicious attachments to information-security staff.

How should a newsroom be contacted without relying on details in the enquiry?

Locate the outlet’s official website independently and use its published newsroom email or switchboard, not the signature in the enquiry. Ask whether the named person is covering the stated topic under the claimed editor and deadline. If no independent route is available, request confirmation from an official corporate address and continue withholding non-public material.

How can the sender and media outlet behind a UAE press enquiry be verified independently shown with practical context cues.

A genuine UAE press assignment requires confirmation of the journalist, outlet, topic and deadline

Assignment confirmation should connect the named journalist or contributor to a current commission. Record the person’s name, status, outlet, editor, topic, format, requested material and deadline, then obtain confirmation from a published newsroom contact.

Is a press card, byline or social-media profile enough to verify a journalist?

No. A press card, biography, previous byline or professional profile can support an identity check, but it cannot prove a current assignment. Credential images and public profiles can be copied. If a UAE licence or credential is presented, use any published verification route offered by its issuing authority or contact that authority directly. Credential status and assignment confirmation remain separate questions.

How should a freelance journalist or production company be verified?

Freelancers, podcast hosts, researchers, production companies and public-relations intermediaries require confirmation from the named outlet or commissioning editor. Ask: “Can you confirm that this person or company is commissioned to cover this topic in the stated format by this deadline?”

A genuine UAE press assignment requires confirmation of the journalist, outlet, topic and deadline shown with practical context cues.

If the outlet will not confirm the commission, withhold non-public material. Once it does, proceed to agreeing UAE press interview terms and deciding what may be released.

What documents, quotes and contact details can be shared after a press enquiry is verified?

Verification permits consideration of a request, not unrestricted disclosure. Classify each item by sensitivity, ownership, personal-data content and contractual restrictions, then obtain approval from the responsible owner.

Seek legal or privacy review for free-zone, employment, health, financial, sector-specific or cross-border issues. Safer options include obtaining the person’s approval, forwarding the journalist’s request internally or providing a public communications address.

What documents, quotes and contact details can be shared after a press enquiry is verified shown as an editorial planning reference.

Verified press documents should be cleaned and transferred through controlled channels

Approved documents should be checked for hidden information, saved as release copies and sent through an organisation-approved channel. Record the approver, recipient and final file version. This controlled approach to documentation and access is also reflected broadly in the National Park Service Museum Handbook.

When should a suspicious UAE press enquiry be escalated or reported?

Escalate when identities conflict, the requester seeks sensitive material without a clear editorial need, or urgency is used to bypass approval. Communications should handle reputational issues, the privacy owner should assess personal data, information security should address malware or fraud, and legal should review confidentiality.

Frequently asked questions

How can I verify that a journalist or media outlet is legitimate in the UAE?

Check the email path, locate the outlet independently and ask its newsroom to confirm the journalist, topic, format and deadline. Verify identity and disclosure authority as separate steps.

Can UAE Verify be used to authenticate a press card, media licence or journalist’s identity?

Use only credential types and verification routes that the relevant issuing authority officially supports. A successfully checked credential still may not prove a current assignment.

Is a UAE press card, trade licence or previous byline enough to confirm a current press assignment?

No. These items may support identity or business-status checks, but the named newsroom or commissioning editor should confirm the current assignment.

Can I share an employee’s phone number or email address with a verified journalist under UAE personal-data rules?

Not automatically. Obtain appropriate approval, consider the applicable data-protection regime and share only what is necessary. Forwarding the enquiry internally is often safer.

What should I do if I have already sent documents to a press contact who cannot be verified?

Revoke access, reset exposed credentials, preserve evidence and notify information security. Legal or privacy staff should assess disclosure consequences and any applicable reporting duty. The lasting practice is to apply two gates every time: confirm the assignment, then approve the material.