A new INTERPOL assessment finds cybercrime escalating rapidly across the region, driven by digitalization gaps, organised criminal networks, and emerging technology abuse.
Summary
- INTERPOL’s 2025/2026 Asia and South Pacific Cyberthreat Assessment Report documents a dramatic increase in regional cybercrime activity.
- Phishing has emerged as the most widespread threat across the Asia-Pacific region.
- Ransomware and AI-enabled scams are also identified as significant and growing concerns.
- Rapid digitalization, uneven cybersecurity maturity, and organised criminal networks are cited as primary accelerants.
- The disparity in defensive capability between countries in the region creates systemic exposure that crosses borders.
A Regional Threat Landscape Under Pressure
INTERPOL has released its 2025/2026 Asia and South Pacific Cyberthreat Assessment Report, and the picture it paints is one of sustained and accelerating criminal activity. The report describes a dramatic increase in cybercrime across the region, attributing the trend to several converging factors: rapid digitalization, expanding internet penetration, the adoption of new technologies, and the growing sophistication of organised criminal networks operating across national boundaries.
Phishing Leads the Threat Count
Of all the threats catalogued, phishing has emerged as the most widespread. This is not a surprising finding for security professionals, but its top-ranking status across a diverse region spanning some of the world’s most and least connected economies underscores how durable and adaptable phishing remains as a criminal method. It requires relatively low technical overhead, scales effectively, and continues to find success against both individuals and enterprises.
Ransomware and AI Scams Add Complexity
Beyond phishing, the report identifies ransomware and AI-enabled scams as significant threats on the rise. The inclusion of AI-assisted fraud reflects a shift that many security teams are already tracking in their own environments — criminals are beginning to operationalise generative and assistive AI tools to make social engineering more convincing, automate targeting, and reduce the cost of running large-scale deception campaigns. The report does not specify particular AI tools or techniques in the available summary, but the trend aligns with broader intelligence from other jurisdictions.
Uneven Maturity Is the Region’s Structural Weakness
Perhaps the most strategically significant observation in the INTERPOL report is the acknowledgement of a disparity in cybersecurity maturity across the region. In practical terms, this means that a well-resourced financial institution in Singapore or Australia may have robust defences, while a supply chain partner or regional subsidiary operating in a less mature environment does not. Attackers exploit exactly these kinds of gaps. Organised criminal networks are not constrained by the same borders and regulatory frameworks that define an organisation’s security perimeter, and they will consistently find the path of least resistance.
Organised Crime Is the Engine
The report is explicit that organised criminal networks are a primary driver of the increase. This is a meaningful distinction from opportunistic or lone-actor cybercrime. Organised groups bring resources, specialisation, and persistence. They can sustain campaigns over time, adapt to defensive measures, and coordinate across multiple attack types — using phishing to gain initial access, ransomware to monetise that access, and fraud operations to launder or extract value from compromised systems and identities.
Why it matters
For CISOs with operations, customers, partners, or supply chains in the Asia-Pacific region, this report is a prompt to reassess third-party and subsidiary risk. The threat is not confined to any single country, and the weakest link in a regional supply chain can become the entry point for a well-resourced criminal group. The rise of AI-enabled scams also warrants a review of awareness training content — if your phishing simulations and user education were designed before generative AI became a criminal tool, they may no longer reflect what employees will actually encounter. Organisations with regional footprints should also consider whether their security baselines and monitoring coverage are consistent across all locations, or whether gaps exist that mirror the maturity disparities INTERPOL has flagged at a national level.
What to do now
- Review third-party and supply chain risk assessments for partners and subsidiaries operating across Asia-Pacific, particularly in markets with lower cybersecurity maturity.
- Ensure phishing awareness training accounts for AI-enhanced social engineering techniques, which may produce more convincing and personalised lures than traditional campaigns.
- Assess whether ransomware response plans and backups are consistently implemented across all regional offices and not only in primary markets.
- Confirm that security monitoring and detection coverage extends to regional operations, not just headquarters or primary data centres.
- Engage with industry and government threat-sharing forums relevant to your sector and region to maintain visibility on emerging organised criminal tactics.
