The rise of “passport‑by‑investment” schemes marketed from Dubai has sparked debate over their legality, durability and data‑privacy implications. Two distinct models dominate the market: outright fraudulent passport sales and structured citizenship‑by‑investment (CBI) programs that operate through private partnerships.
Fraudulent “Mexican” Passports
- Some agencies claim to obtain “exception” Mexican passports for clients in Dubai, presenting the document as a premium service.
- Mexico does not issue passports from abroad, and the scheme involves falsifying citizenship approval before delivering a passport.
- This model is widely regarded as an outright fraud, exposing buyers to legal penalties and loss of the purported document.
Sao Tome and Principe CBI Sold via Dubai
- A legitimate CBI program exists in Sao Tome and Principe, where investors can acquire citizenship by meeting financial criteria.
- The process is marketed from Dubai: payments, document collection, and a blockchain‑based record of citizenship are handled locally.
- While the government of Sao Tome authorises the program, the involvement of a private firm in Dubai creates a gray‑area legal situation.
Key considerations
- Legal status – At present the arrangement appears legal, provided the private firm operates under a formal agreement with the issuing country. Future changes—such as a five‑year contract expiry, a regime shift in Sao Tome, or the private firm’s closure—could jeopardise the passport’s validity.
- Renewal and continuity – If the private partner ceases operations, the holder may need to approach the Sao Tome embassy or travel to the country for renewal, a process that can be uncertain for smaller states with limited consular infrastructure.
- Data privacy – Dubai’s strict data‑protection laws give local authorities and the private firm access to applicants’ personal information, including wealth sources, family trees, banking history and prior citizenships. This data is often shared with third‑party due‑diligence firms and may be transmitted to foreign intelligence agencies, creating a “black‑box” risk for applicants.
Citizenship‑by‑Investment vs. Citizenship‑by‑Exception (CBM)
The industry is shifting toward Citizenship‑by‑Exception (CBM) models, which grant residency or limited citizenship rights without full naturalisation. CBMs tend to be more resilient to EU or international scrutiny.
- Serbia – Offers a CBM that is widely used and supported by service providers.
- Malta – Transitioned from a CBI to a CBM to avoid EU crackdowns; the program remains legal and regulated.
- Albania and Georgia – Provide legitimate CBM pathways with clear procedural guidelines.
- Austria – Offers a high‑cost CBM for ultra‑high‑net‑worth individuals; generally not recommended unless the applicant has substantial surplus capital.
- Mexico – Features a “citizenship by exception” route that requires a two‑year waiting period, making it less immediate than a pure CBI.
Practical Advice for Prospective Applicants
- Verify government endorsement – Ensure the issuing country has an official, publicly documented agreement with the private facilitator.
- Assess longevity – Consider the stability of the private firm and the duration of the contract; a five‑year term may be insufficient for long‑term planning.
- Plan for renewal – Clarify the process for passport renewal or re‑issuance after the private partnership ends; confirm whether the embassy will handle future requests.
- Evaluate data exposure – Understand that personal and financial data will be stored in Dubai and may be shared with external intelligence or law‑enforcement agencies.
- Compare alternatives – Weigh CBM options (Serbia, Malta, Albania, Georgia) against full CBI programs, especially if multi‑generational citizenship is a goal.
Risks Summary
| Risk | Description |
|---|---|
| Legal ambiguity | Private‑partnered CBIs may become invalid if contracts lapse or political changes occur. |
| Company failure | Closure of the Dubai facilitator could leave applicants without a clear renewal path. |
| Data privacy | Extensive personal data is collected, stored in Dubai, and potentially shared with third parties. |
| Regime change | New governments may revoke or alter agreements, affecting the validity of the passport. |
In conclusion, while Dubai‑based passport services can provide a convenient gateway to citizenship, applicants must scrutinise the legal framework, longevity of the private partnership, and data‑privacy implications. For those seeking durable, multi‑generational citizenship, established CBM programs in Serbia, Malta, Albania, Georgia, or similar jurisdictions may offer a more secure alternative.
