Tabby Emirates Voucher Email Error: What Happened, Why You Got It & What To Do Now

Imagine opening your inbox on a quiet Friday morning to see an email from Tabby—a name you trust—telling you that you have just won a Dh5,000 Emirates flight voucher. Your heart races. You start planning a trip. Then, barely an hour later, another email arrives crushing that excitement: “Sorry, that was sent in error.”

If this happened to you on June 26, 2026, you are not alone. Thousands of UAE residents received the erroneous “You won” email, leading to confusion, disappointment, and serious questions about data privacy. In this comprehensive guide, we break down exactly what went wrong, how Tabby is handling the fallout, and what you should do if your personal details—including your Emirates ID—were submitted.

📧 What Is the Tabby Emirates Voucher Email Error?

The Tabby Emirates voucher email error refers to a mass communication mistake made by Tabby, the UAE-based buy-now-pay-later platform, on the morning of Friday, June 26, 2026. Customers who had participated in a promotional raffle—by spending a minimum of Dh500 on their Tabby Card between May 20 and June 21, 2026—received an email with the subject line indicating they had won an Emirates flight voucher worth Dh5,000 (approximately $1,360).

The problem? They had not actually won. The email was sent to a broad list of participants, including many who were not selected as winners. The message included a form asking recipients to submit their delivery details and Emirates ID to claim the prize.

Within approximately one hour, Tabby sent a follow-up email retracting the announcement and apologizing for the error. The incident sparked widespread discussion on social media, with many customers initially believing the original email might be a phishing scam.

⏱️ Full Timeline: How the Email Error Unfolded

Understanding the sequence of events helps clarify how a single automated email triggered a nationwide customer service issue. Here is the complete timeline:

As one Dubai resident, Rob Scott, described to The National: “I got the email telling me I had won at 10:30am and the second message at 11:37am, saying it had been sent in error. I didn’t even apply for the raffle. I thought, this is great. Then I heard from a couple of other people who received the message too. I had to check it wasn’t a scam at first.”

📢 Tabby’s Official Apology & Response

Tabby moved quickly to contain the reputational damage. In an official statement provided to The National and other media outlets, the company acknowledged the mistake in clear, unambiguous language:

The company also emphasized accountability:

Actions Tabby Has Taken

• Form Closure: The prize claim form linked in the original email was immediately shut down to prevent further submissions.
• Data Deletion Promise: Tabby confirmed that any personal information submitted before the form was closed—including Emirates ID details—has not been used and will be safely deleted.
• Internal Review: A formal review has been launched to determine how the erroneous email was triggered.
• Enhanced Controls: Additional safeguards have been implemented to prevent similar communication errors in future promotional campaigns.
• Direct Outreach: All affected customers received a follow-up apology email correcting the mistake.

🔒 Is Your Personal Data Safe?

This is the question that matters most. The erroneous email asked recipients to provide their Emirates ID—one of the most sensitive pieces of personal identification in the UAE. Understandably, many customers who submitted this information are now concerned about identity theft, fraud, or unauthorized data usage.

Here is what we know:

Our expert take: While Tabby’s response appears swift and transparent, we recommend that any customer who submitted their Emirates ID should monitor their accounts for unusual activity over the next 90 days as a standard precaution. The UAE’s data protection laws, including the Personal Data Protection Law (PDPL), require companies to handle such incidents with transparency and accountability.

✅ What To Do If You Received the Email

If you were one of the customers who received the erroneous “You won” email, here is a clear action plan. Follow these steps to protect yourself and stay informed:

🛡️ How to Spot Similar Email Errors in the Future

While the Tabby email came from an official domain, the confusion it caused highlights an important lesson: even legitimate companies can send emails that look like scams when they contain unexpected requests for sensitive data. Here are expert tips to protect yourself:

Red Flags to Watch For

• Urgency and Surprise: Winning a contest you do not remember entering is a classic red flag. Legitimate wins usually come with prior confirmation or clear entry records.
• Requests for Sensitive ID: No company should ask for your full Emirates ID or passport details via an email form without prior secure authentication.
• Generic Greetings: Mass emails that say “Dear Customer” rather than your name can indicate a bulk send that may not be properly targeted.
• Mismatched Links: Always hover over links to verify they lead to the company’s official domain (e.g., tabby.ai) before clicking.

Best Practices for Email Verification

1. Verify independently: Instead of clicking email links, log into your Tabby app directly to check for notifications or messages.
2. Check sender domains carefully: Scammers often use domains like tabby-support.com instead of tabby.ai.
3. Use the UAE’s official channels: Report suspected phishing to the UAE’s Cybersecurity Council or your telecom provider.
4. Enable two-factor authentication (2FA): Protect your Tabby and banking accounts with 2FA wherever possible.

💬 Customer Reactions: What People Are Saying

The incident quickly gained traction across social media platforms. On Reddit’s r/UAE community, users shared their experiences and confusion. Many expressed a mix of disappointment and relief—disappointment at not actually winning, but relief that the email was an error rather than a sophisticated phishing attempt.

Some customers, like Rob Scott, had already begun planning trips based on the false win notification. Others were more concerned about the data privacy implications, noting that submitting an Emirates ID to a form that turned out to be erroneous felt like a breach of trust, even if no malicious intent was involved.

The speed of Tabby’s correction—roughly one hour—was noted by some as responsible crisis management, while others argued that an error of this magnitude should never have occurred in the first place, particularly when sensitive identification documents were requested.

❓ Frequently Asked Questions (FAQ)

🎯 TL;DR — The Bottom Line

📚 Related Reading

• Sky Go App Not Working?
• Jury Duty Scam Calls
• How to Change the IndiHome WiFi Password