How Asia-Pacific has become a top target for online scams, phishing, and identity theft

As we take time off from our busy schedules to celebrate holidays with loved ones, beware of the “Cyber-Grinch” or you might have to pay more than what you originally planned for. Scams are everywhere, and they are hidden in plain sight.

By purchasing a gift, chatting online, connecting to a public unsecured WiFi network, or even by just clicking on an attachment in an email, you could become a victim of online scams, phishing, and identity theft.

In 2022, it was found that one in four online shoppers in the Asia-Pacific region became victim of online scams, not only through shopping but also via romance scams. With cybercriminals becoming ever more sophisticated, many people found themselves totally blindsided by these attacks. 

Anyone can fall victim to scams, phishing, and identity theft

In an APAC Consumer Cybersecurity Survey, two out of three respondents said they encountered online scams in the last 12 months. The most common types of scam were online shopping (21%), social media (18%), and investment (15%).

While we may think nothing of working, shopping, and socializing online, even the smallest slip-up could leave anyone vulnerable. By simply clicking on a suspicious link, logging into a new device, or using a weak password could leave an opening for malicious scammers to take advantage of you. Do you feel safe?

Your children’s online activity can raise an even bigger concern. The recent pandemic forced children to study online, thus increasing their time spent on the internet and their exposure to threats through online learning, online games and social media. In addition, hackers have recognized that parents share devices with their children without teaching them about cybersecurity, even though children spend more time online than ever before.

A study by LexisNexis Risk Solutions revealed that the cost of shopping scams in Asia-Pacific reached almost US$ 4 for every transaction made. Online shopping scams involve scammers pretending to be legitimate online sellers, either with a fake website or a fake ad on a genuine retailer site. In addition, scammers steal customers’ payment card data, which is then sold to dark web marketplaces. Although online shoppers may notice deals that appear too good to be true under normal circumstances, holiday seasons can give scammers a chance to push advertising into overdrive and target online shoppers while their guard is down.

As the Internet became a new place to find love, romance scams left thousands of people with a hoax partner and an empty wallet. In Kaspersky’s report with a total of 1,618 respondents, it was revealed that almost 45% of online users in Southeast Asia lost money because of romance scams, with nearly a quarter of the respondents admitting to losing US$5,000-10,000. As people adjusted to the “new normal” after the pandemic, romance scammers preyed on those looking for companionship. Romance scammers typically start off by creating a bond with the victim, leading to unwarranted solicitations for money and other items to settle some emergencies. These demands usually come in the form of requests for money via gift cards, cryptocurrency, prepaid debit cards, a bank transfer, or a wire transfer. 

In Southeast Asia, job scams led to thousands of people being lured by social media advertisements promising well-paid jobs in Cambodia, Laos and Myanmar (for instance). Upon accepting these jobs, the victims were forced to work up to 18 hours a day to defraud strangers worldwide via the internet. According to Human Rights Watch, the scammers started by recruiting skilled, tech-savvy workers who had lost jobs during the pandemic and were desperate. Reponses by the national authorities are up to the level of the current crisis caused by those “call centers”, and the victims are often treated as criminals due to their involvement in the scams, instead of being considered victims of human trafficking.

Over the past few years, countries in Southeast Asia have been the fastest growing economies in the world, increasing demand on technology, internet bandwidth, and unfortunately also data breaches. Each data breach in ASEAN countries costs an average of US$ 2.62 million. In today’s world, it is unsettling to see how easy it is for criminals to steal your identity without even touching your physical ID, wallet, or phone. When criminals gain access to your personal information—full name, social security number, birthday, etc.—they can do serious damage to your career, reputation, credit history, and even leave you with a criminal record.

How to stay safe

Imagine receiving a phone call from a trusted person informing you of a difficult situation, and that you need to download an application to resolve this. Next, you are locked out of all your devices and online platforms. Worst of all, you lose all your life savings permanently. Would you know what to do?

If not, you are not alone. Those who are not sure how to proceed should look to local authorities or experts before tackling the issue head-on. Prevention is better than a cure, and to be aware of its existence is a good starting point. 

Scams, phishing, and identity theft can come in many forms such as phone calls, text messages, links, and impersonations. However, it is most important to know that scams exist. Some simple steps include using strong passwords for all your accounts online, spotting the signs and involving others, being careful of what you click on if a message seems suspicious, taking your time when you receive an offer, and being secure by double checking if the source is legitimate.

Always consider that the approach may potentially be a scam. Lastly, remember that if it looks too good to be true, it probably is indeed...

If you are a victim of cybercrime, before making any hasty decision, you should immediately report it to the appropriate local authorities. Legal professionals and cyber security experts can provide guidance on the right course of action, so you do not have to face the issue alone. 

Developing cybersecurity policies

Cyber-attacks surge during the holiday season worldwide. Now more than ever, it is important to stay vigilant. In 2023, The United Nations Office on Drugs and Crime (UNODC) is launching the KnowScam regional campaign to raise awareness and prevent damages due to online scams, phishing, and identity theft. Read the UNODC report on Darknet Cybercrime Threats to Southeast Asia to learn more about this issue. Visit UNODC's 2021 RansomAware campaign website for more information on ransomware.

* * *

Editor’s Note: This article was provided by United Nations Office on Drugs and Crime.