3 Crimes, 15 Years: Oman's Cybercrime Law Guards E-Payments

A new legal explainer published this week has put fresh attention on a part of Oman's Cybercrime Law that touches almost every resident and business in the Sultanate: the rules protecting digital wallets, cards, and online payments. As Times of Oman reported on August 29, 2026, Royal Decree 61/2026 creates three distinct criminal offences for anyone who steals, misuses, or forges electronic payment data, with penalties running up to three years in prison and fines as high as OMR 10,000 per offence. The timing matters: Oman's digital payment volumes have been growing at a pace few other parts of the economy can match.

Key Takeaways

• Royal Decree 61/2026 replaced Oman's 2011 Cybercrime Law and took effect on June 8, 2026
• A dedicated chapter now creates three separate offences covering payment-data theft, fraudulent use, and forgery of electronic payment means
• The law lands as Oman's digital payment gateway transactions jumped 76.3% to RO 3.2 billion in a single year
• Other chapters of the same law cover online privacy, minors, and organised cybercrime
• Legal entities, not just individuals, can now be held liable for cybercrimes committed on their systems

🛡️ What Is Oman's New Cybercrime Law?

Royal Decree No. 61/2026 was issued on June 1, 2026, published in Official Gazette issue 1651 on June 7, 2026, and came into force the following day, according to the official decree record. It repeals and replaces the Sultanate's older Cybercrime Law, Royal Decree 12/2011, which had been in place for 15 years before this update. Muscat Daily described the update as establishing comprehensive regulations for the responsible use of digital media alongside stronger national security safeguards.

The law is organised into multiple chapters covering everything from misuse of information technology equipment to organised cybercrime groups. One of the most practically important sections for everyday residents and businesses is the chapter dealing specifically with electronic payment means, which is what has drawn fresh legal commentary this week.

💳 Three New Offences to Protect Your Digital Wallet

According to the Times of Oman explainer, the law defines an "electronic payment means" broadly, as any tool, whether a smart card, mobile wallet, or electronic money storage device, that lets someone obtain money, goods, or services, or make payments and transfers through information technology. Dr Mohammed Ibrahim Al Zadjali, founding partner of Mohammed Ibrahim Law Firm, told Times of Oman that "the law provides for three separate offences involving electronic payment means, each targeting a distinct form of misuse."

📈 Why Now? Oman's Digital Payments Boom

The timing of this legal clarity is not coincidental. Local electronic payment gateway transactions in Oman reached roughly RO 3.2 billion, a 76.3% jump compared to 2024, with transaction volumes climbing from 67 million to 168 million in a single year, according to Central Bank of Oman figures reported by Oman Observer. QR-code payments grew even faster, up 133.5% year on year, roughly tripling in value.

That kind of growth has consequences: more digital wallets, more cards on file, more merchants accepting contactless payments, and more surface area for the kind of fraud the new law's payment chapter is designed to punish. As Oman pushes toward its growing ecosystem of local and regional digital payment gateways, a clear legal framework for punishing payment fraud is arguably as important to adoption as the payment rails themselves.

🔍 Beyond Payments: Privacy, Minors, and Organised Cybercrime

The electronic payment chapter is only one part of a much broader law. Earlier explainers from Times of Oman and Oman Observer detailed how Royal Decree 61/2026 also criminalises unauthorised recording, interception, or publication of private communications and images, restricts the exploitation of children under 15 and domestic workers in online media, and creates a dedicated chapter targeting organised criminal groups that use information technology to commit offences.

Taken together, the law functions as a broad update to Oman's digital rulebook, covering everything from a stolen debit card number to manipulated images and coordinated online scam networks, reflecting how much more of daily life, commerce, and communication in Oman now runs through digital channels than it did when the original 2011 law was written.

🏢 What This Means for Oman's Fintechs and Businesses

For Oman's growing base of fintech firms, payment gateways, and e-commerce platforms, the updated law brings two practical implications. First, clearer criminal categories and penalties give businesses a firmer legal basis to pursue cases when customers or merchants are defrauded through their platforms. Second, the law's provisions on the liability of legal entities mean companies, not just individual employees, can face consequences if cybercrimes are facilitated through inadequate systems or controls.

That raises the bar for basic cybersecurity hygiene, fraud monitoring, and data handling across any Omani business that touches electronic payments, from banks and telecom operators to the smaller SaaS and e-commerce startups that have been a recurring feature of Oman's tech scene this year.

🎯 Connection to Vision 2040

Oman Vision 2040 sets a target of growing the digital economy's contribution to GDP from roughly 2% today toward 10% by 2040, a goal that depends heavily on public trust in digital payments, e-government services, and online commerce. A modern cybercrime framework that specifically addresses payment fraud, rather than relying on a 2011-era law written before mobile wallets and QR payments were common, is a structural piece of that trust-building effort, alongside parallel moves like the Telecommunications Regulatory Authority's recent rules tightening control over customer telecom data.

Why This Matters for Oman

Fast-growing digital payment adoption only sticks if people trust it. By spelling out exactly what counts as payment fraud, and attaching real penalties, Oman's updated Cybercrime Law gives banks, fintechs, and everyday users a clearer legal backstop as cash increasingly gives way to cards, wallets, and QR codes. For a Sultanate betting a meaningful share of its economic diversification on digital commerce, that legal foundation is as much a piece of infrastructure as the payment gateways and 5G networks it protects.