Cybercrime in Egypt: What Happens If You Are Accused of an Online Crime?

Introduction

Cybercrime has become one of the most important areas of criminal law in Egypt. Social media platforms, messaging applications, websites, online banking, electronic transactions, and digital devices are now part of everyday life. At the same time, these technologies can become connected to criminal allegations involving hacking, online fraud, threats, blackmail, privacy violations, defamation, unauthorized access, misuse of accounts, or publication of unlawful digital content.

For anyone accused of an online crime in Egypt, the situation can be confusing and stressful. A person may suddenly receive a police summons, discover that a complaint has been filed, or learn that a digital account, telephone number, computer, or message has been connected to a criminal investigation. Understanding the legal process is therefore essential before taking any step.

Egypt’s principal legislation in this field is Law No. 175 of 2018 on Combating Information Technology Crimes. The law entered into force on August 15, 2018, and establishes rules covering information systems, electronic data, unauthorized access, digital evidence, privacy-related offenses, and other technology crimes.

An accusation, however, is not automatically the same thing as a conviction. Criminal responsibility depends on the evidence presented to the competent authorities and the court, the legal elements of the alleged offense, the connection between the accused person and the digital activity, and the circumstances in which electronic evidence was collected and examined.

Cybercrime in Egypt: What Happens If You Are Accused of an Online Crime?

This article explains what can happen if you are accused of cybercrime in Egypt, what the investigation may involve, how digital evidence is treated, what defenses may become relevant, and why early legal assistance can be important.

What Is Cybercrime Under Egyptian Law?

The expression “cybercrime” covers a broad range of conduct involving information technology. It does not refer to one single offense. Depending on the circumstances, conduct carried out through a computer, mobile phone, website, social media account, or information network may fall under different provisions of Egyptian criminal legislation.

Law No. 175 of 2018 regulates a number of information-technology offenses and gives legal recognition to electronic evidence subject to the technical requirements established by the law and its Executive Regulations.

Potential allegations may include unauthorized access to information systems, unlawful use of accounts or data, interference with systems, online fraud, misuse of technology, privacy violations, publication of certain unlawful content, and other offenses committed through information technology.

The exact legal classification depends on the facts. An online argument, for example, may involve a completely different legal issue from unauthorized access to another person’s account. Similarly, sending a threatening message may raise different questions from publishing private photographs or obtaining confidential information without authorization.

For this reason, a person accused of an online crime should not assume that every allegation will be treated in the same way.

What Happens After a Cybercrime Complaint Is Filed?

The first stage may begin with a complaint submitted by an alleged victim or another reporting party. Depending on the circumstances, the matter may involve the competent police authorities, specialized information-technology crime investigators, the Public Prosecution, and eventually the competent criminal court.

At the investigation stage, authorities may examine the alleged communication, account, telephone number, computer, website, electronic messages, photographs, recordings, transaction records, or other digital material connected with the complaint.

Technical examination can be particularly important because the central question is often not simply whether content exists, but who created, transmitted, controlled, or published it.

A screenshot bearing a person’s name does not necessarily answer every technical question about authorship. Investigators may examine available technical information and other evidence to determine whether the account or device can reasonably be connected to the accused.

The circumstances of each case therefore matter considerably.

Can a Screenshot Be Used as Evidence?

Digital evidence has an important position under Egyptian law. Article 11 of Law No. 175 of 2018 provides that evidence derived or extracted from electronic devices, systems, software, or other information-technology means may have the same evidentiary value as material criminal evidence when the technical conditions prescribed by the Executive Regulations are satisfied.

This does not mean that every screenshot automatically proves every allegation.

A screenshot may be relevant, but questions can arise concerning its source, authenticity, completeness, connection to the accused, and the method through which the underlying electronic material was obtained.

For example, a screenshot of a social-media conversation may show a username and profile photograph. The defense may nevertheless examine whether the account was actually controlled by the accused at the relevant time, whether the account was compromised, whether another person had access to the device, and whether the technical examination supports the alleged attribution.

The evidentiary value of digital material must therefore be considered within the complete evidentiary record.

What Is the Role of Technical Examination?

Technical examination can be one of the most significant elements in a cybercrime investigation. Digital investigators may examine devices, accounts, electronic communications, technical records, or other available information.

The objective may include identifying the source of communications, establishing connections between accounts and devices, examining stored data, or determining whether digital material has technical characteristics consistent with the allegation.

The Executive Regulations of Law No. 175 of 2018 provide technical rules connected with digital evidence and information-technology investigations.

For the accused, this means that the defense should pay attention not only to the visible content but also to the technical foundation supporting the accusation.

A person may deny sending a message, for example. The important legal question can then become whether the available evidence reliably establishes that the accused was the person who controlled the relevant account or device and performed the alleged act.

Can Someone Be Accused Because a Phone Number Is Registered in Their Name?

The registration of a telephone number can be relevant evidence, but the precise evidentiary significance depends on the facts of the case and the other evidence available.

A telephone number may be connected to an account or communication. The defense may nevertheless examine who actually possessed the device, who had access to the account, whether the device was shared, whether the SIM card was used by another person, and whether technical evidence establishes the accused’s participation in the alleged conduct.

The distinction between identifying a subscriber and proving the identity of the person who actually committed the criminal act can therefore become important.

Each case should be analyzed according to its own evidence rather than relying on one isolated fact.

Common Cybercrime Allegations in Egypt

Online Threats

Threatening another person through electronic communications can create criminal liability when the legal elements of the relevant offense are established.

The wording, context, intended effect, identity of the sender, and surrounding circumstances can all become relevant.

A message containing aggressive language should not automatically be classified without examining the full context. Likewise, the fact that a message was sent electronically does not eliminate the requirement to establish the elements of the underlying offense.

Electronic Blackmail

Electronic blackmail may involve threats to publish private photographs, conversations, videos, or other information unless the victim pays money, provides a benefit, or complies with a demand.

Cases of this nature can involve several forms of evidence, including messages, account information, telephone records, stored files, and technical reports.

The accused should avoid deleting or manipulating potentially relevant material because doing so may create additional evidentiary complications.

Online Defamation

Defamation and insult allegations can arise from publications, comments, posts, messages, videos, or other digital communications.

The legal assessment may depend on the exact words or content, the manner of publication, the intended audience, and the applicable criminal provisions.

A complete defense requires examining the actual material rather than relying solely on a description of it.

Unauthorized Access

Unauthorized access to an information system or account may constitute an information-technology offense under the circumstances specified by Egyptian law.

The prosecution may seek to establish access, lack of authorization, the relevant system or account, and the accused person’s connection to the activity.

Technical evidence can therefore become particularly important in these cases.

Online Fraud

Digital platforms can also be used in fraudulent transactions. Examples may involve false advertisements, deceptive online sales, fraudulent payment requests, or impersonation.

The legal characterization depends on the facts and the applicable criminal provisions. Evidence may include payment records, communications, account information, advertisements, electronic invoices, and technical data.

What Should You Do If You Are Accused?

The first practical step is to take the accusation seriously and avoid treating the matter as an ordinary online dispute.

Do not delete messages, photographs, emails, posts, files, or other material merely because you believe it may be embarrassing or unfavorable. Digital evidence can exist in multiple locations, and attempts to remove material may complicate the investigation.

You should also avoid contacting the complainant in an attempt to pressure them into withdrawing the complaint. Such communication could create additional evidence or lead to further allegations.

Preserving the original device can also be important. Changing passwords may sometimes be appropriate for account security, but technical steps should be considered carefully where an investigation is already underway.

Obtaining advice from a qualified criminal lawyer at an early stage can help determine what documents should be preserved, what procedural steps may be appropriate, and what issues should be raised during the investigation.

The Importance of the First Investigation

The initial investigation can be highly significant because statements, documents, technical reports, and other evidence may shape the subsequent proceedings.

The accused should understand the allegation before responding to detailed questions. A lawyer may review the available facts and determine whether the accusation concerns account ownership, publication, transmission, unauthorized access, possession of digital material, or another legal issue.

A consistent factual position is also important. Contradictory explanations about who used a device, who controlled an account, or how a message was transmitted may create unnecessary difficulties.

That does not mean an accused person should attempt to construct a story. The appropriate approach is to provide truthful information while protecting the procedural and legal rights available under Egyptian law.

Can the Accused Challenge Digital Evidence?

Digital evidence can be examined and challenged through legally appropriate arguments.

Potential questions may concern authenticity, attribution, technical integrity, collection procedures, completeness, interpretation, and the relationship between the evidence and the accused.

For example, if the prosecution relies heavily on an account allegedly controlled by the accused, the defense may need to examine how the account was attributed, what technical evidence connects the account to the accused, and whether alternative explanations have been investigated.

If photographs or conversations are involved, the defense may also examine whether the material is complete and whether its origin and integrity can be established.

These issues must be evaluated according to the evidence actually contained in the case file.

Egyptian Court of Cassation Principles on Cybercrime

The Egyptian Court of Cassation has addressed information-technology crimes in published principles. Official Court of Cassation materials include principles concerning Article 25 of Law No. 175 of 2018 and the mental element required for the offense of violating privacy. One published principle explains that the general criminal intent in the Article 25 offense is established through the commission of the material act itself, subject to the circumstances of the case.

Another important published decision concerns the consequences of an appeal filed only by the accused. In Appeal No. 12829 of Judicial Year 92, hearing of February 6, 2024, the Court of Cassation addressed the supplementary penalty of confiscation under Article 38 of Law No. 175 of 2018 and explained that an accused person should not be placed in a worse position based solely on an appeal filed by that person.

The Court has also addressed the relationship between offenses under the Information Technology Crimes Law and offenses under the Penal Code. An official published principle discusses the determination of the more severe penalty where multiple offenses are legally connected.

These decisions illustrate an important point: cybercrime litigation is governed not merely by the existence of electronic material, but also by rules concerning criminal intent, classification of offenses, evidence, penalties, and procedural safeguards.

A Practical Defense Strategy

A cybercrime defense should begin with a detailed review of the accusation.

The lawyer may first identify the exact statutory provision relied upon by the prosecution. After that, the evidence supporting each element of the offense can be examined separately.

The next step may involve reviewing the technical evidence. This can include reports concerning the device, account, telephone number, IP-related information, digital files, messages, or other electronic material.

The defense can then consider whether the evidence establishes the identity of the person responsible for the alleged act. Account ownership and criminal responsibility are not necessarily identical questions.

Finally, procedural issues, contradictions, missing evidence, technical irregularities, and applicable Court of Cassation principles may be considered where relevant.

Practical Example 1: Facebook Account Allegation

Imagine that a person is accused of publishing threatening messages through a Facebook account bearing his name.

The complainant provides screenshots of the messages. The accused denies sending them.

In this situation, the case should not be evaluated solely by asking whether the screenshot exists. Relevant questions can include whether the accused controlled the account, whether the account was accessible to other people, whether technical examination connects the account activity to the accused, and whether the content and circumstances establish the elements of the alleged offense.

The defense may therefore focus on attribution, technical evidence, and the legal requirements of the specific accusation.

Practical Example 2: WhatsApp Threat

Suppose an individual is accused of sending a threatening WhatsApp message.

The defense should examine the actual conversation rather than an isolated screenshot. The complete conversation may provide context concerning the alleged threat, while technical evidence may address the connection between the telephone number, device, and accused person.

The legal significance of the message depends on its content, circumstances, and the applicable legal provision.

Practical Example 3: Alleged Online Blackmail

Assume that a complainant claims that an unknown person demanded money in exchange for not publishing private photographs.

The investigation may involve the telephone number, messages, payment information, device examination, account information, and other digital evidence.

If the accused denies involvement, the defense should carefully examine whether the evidence establishes that the accused controlled the relevant account or device and whether the alleged communications can reliably be attributed to that person.

What Should You Avoid Doing?

One of the biggest mistakes is deleting digital evidence immediately after learning about a complaint.

Another mistake is contacting the complainant aggressively or threatening them. Such conduct can create additional legal problems.

Publicly discussing the case on social media can also be risky. Posts intended to defend oneself may unintentionally reveal information, contradict previous statements, or generate new allegations.

A further problem can arise when an accused person gives multiple inconsistent explanations without first understanding the evidence.

The safer legal approach is to preserve relevant material, avoid unnecessary communications, and obtain case-specific legal advice.

Does Hiring a Lawyer Guarantee Acquittal?

No lawyer can legitimately guarantee a particular result in a criminal case.

The role of counsel is to examine the evidence, protect the accused’s legal rights, identify applicable defenses, challenge weaknesses in the prosecution case where legally appropriate, and present the defense before the competent authorities and courts.

The final result depends on the facts, evidence, applicable law, procedural history, and judicial determination.

This distinction is especially important in cybercrime cases because digital evidence can be technically complex and may require specialized analysis.

The Role of Horus Law Firm

For individuals facing criminal allegations involving digital communications, social media, electronic evidence, online threats, privacy violations, hacking, or other technology-related accusations, specialized legal assistance can be valuable.

Horus Law Firm – مؤسسة حورس للمحاماه provides legal services in criminal and technology-related matters. The firm is associated with Dr. Abdel Meguid Gaber, Attorney at the Court of Cassation – الدكتور عبد المجيد جابر المحامي بالنقض.

For additional legal information and professional legal services, readers can visit the official website of Horus Law Firm.

Additional legal resources and articles can also be found through Avocato Online.

Why Early Legal Advice Matters

A cybercrime allegation can develop quickly. Evidence may be collected, devices may be examined, statements may be recorded, and the investigation may move forward before the accused fully understands the legal nature of the allegation.

Early legal advice allows the facts to be organized before important decisions are made.

The lawyer can identify the alleged offense, examine the available documents, evaluate the digital evidence, explain the procedural position, and determine which issues require immediate attention.

In complicated cases, technical questions may also require specialist consideration.

Frequently Asked Questions

1. Is cybercrime punishable in Egypt?

Yes. Egypt has Law No. 175 of 2018 concerning Combating Information Technology Crimes, which establishes criminal provisions concerning various technology-related acts.

2. Is a screenshot automatically enough to convict someone?

Not necessarily. Its evidentiary significance depends on the circumstances, authenticity, technical requirements, attribution, and the complete evidentiary record.

3. Can WhatsApp messages be used as evidence?

Electronic communications may form part of the evidence in a criminal case. Their legal weight depends on the circumstances and whether the relevant technical and evidentiary requirements are satisfied.

4. What if someone hacked my account and used it to commit a crime?

That possibility should be investigated through the available technical evidence. The central issue may become whether the accused actually committed or controlled the relevant activity.

5. Can I delete the messages after learning about the complaint?

Deleting potentially relevant evidence is generally not a sensible response. Preserving the original material and seeking legal advice is preferable.

6. Can the police examine my phone?

The legal authority to examine or seize electronic devices depends on the circumstances and applicable procedural rules. A lawyer can review the legality of the specific procedure in the case.

7. What if the account was used by another person?

The defense can examine evidence concerning actual possession and control of the account or device. Technical attribution can therefore become an important issue.

8. Can an accused person challenge a technical report?

Where legally appropriate, the defense may challenge evidence and raise objections concerning technical methodology, attribution, integrity, interpretation, or other relevant matters.

9. Does Egyptian law recognize digital evidence?

Yes. Article 11 of Law No. 175 of 2018 gives qualifying digital evidence evidentiary value comparable to material criminal evidence when the technical requirements are satisfied.

10. Should I hire a lawyer before speaking to investigators?

Obtaining legal advice early can help the accused understand the allegation, preserve evidence, and protect procedural rights before important investigative steps occur.

Important Documents and Evidence to Preserve

A person accused of an online crime should consider preserving all potentially relevant information.

This may include the original mobile phone, computer, emails, complete message conversations, account information, transaction records, photographs, videos, login notifications, relevant applications, and communications with other persons.

Screenshots can be useful, but where possible the original digital source should also be preserved.

The accused should avoid editing, manipulating, selectively deleting, or altering relevant material. A complete record may provide important context that an isolated screenshot does not show.

Cybercrime and Privacy

Privacy-related allegations represent an important category of technology offenses. Article 25 of Law No. 175 of 2018 addresses certain conduct involving violation of privacy and publication of information, photographs, or similar material concerning another person without consent.

Such cases require careful examination of what was published, how it was obtained, how it was transmitted, whether consent existed, and whether the statutory elements have been established.

The fact that information is already available online does not necessarily resolve the legal question.

Cybercrime and Social Media

Social media has created new forms of evidence and new forms of criminal allegations.

Facebook, Instagram, TikTok, WhatsApp, Telegram, and other platforms can generate messages, posts, comments, photographs, videos, account information, and technical records.

A person’s online identity can therefore become an important issue in litigation.

At the same time, the existence of an account bearing a person’s name does not, without considering the surrounding evidence, necessarily answer every question about who performed a particular act.

Cybercrime and Electronic Fraud

Online fraud cases may involve advertisements, websites, social-media pages, electronic payments, digital wallets, bank transfers, and messaging applications.

The investigation can therefore extend beyond the communication itself.

Financial records may help establish the movement of money. Account information may help identify the relevant user. Device evidence may help connect activity to a particular person.

The accused should therefore review the entire evidentiary chain rather than focusing on one message or transaction.

What Can Happen If You Are Convicted?

The consequences depend on the specific offense and the applicable statutory provision.

Law No. 175 of 2018 contains different penalties for different offenses, including imprisonment, fines, and in certain circumstances supplementary measures such as confiscation of devices or equipment connected with the crime. The precise penalty must be determined from the provision applicable to the established conduct.

A conviction can also create practical consequences beyond the primary criminal penalty, depending on the nature of the offense and the circumstances.

For that reason, anyone facing an actual criminal accusation should obtain advice based on the specific charge rather than relying on general descriptions of cybercrime penalties.

A Practical Checklist for an Accused Person

If you are accused of an online crime in Egypt, consider the following steps:

1. Obtain a clear copy or understanding of the accusation.
2. Identify the exact legal provision involved.
3. Preserve the original electronic devices.
4. Preserve relevant messages and conversations.
5. Avoid deleting potentially relevant evidence.
6. Do not threaten or pressure the complainant.
7. Avoid discussing the case publicly online.
8. Organize documents and communications chronologically.
9. Consult a qualified criminal lawyer.
10. Review the technical evidence and its connection to the accused.
11. Identify contradictions or gaps in the evidence where they exist.
12. Prepare the defense according to the actual case file.

Horus Law Firm – مؤسسة حورس للمحاماه, together with Dr. Abdel Meguid Gaber, Attorney at the Court of Cassation – الدكتور عبد المجيد جابر المحامي بالنقض, can be referenced for legal assistance concerning criminal defense, cybercrime allegations, electronic evidence, privacy disputes, online threats, and technology-related criminal matters.

For more legal information, visit Horus Law Firm and Avocato Online.