Phishing as the Most Widespread Cyberthreat
According to the document, phishing is now the most widespread and costly type of cybercrime in the region.
One‑third of the countries surveyed said they had over 10,000 phishing incidents between January 2024 and March 2025. On top of that, people in the Asia‑Pacific region click on phishing links about twice as often as the rest of the world, roughly 5.5 clicks per 1,000 users each month, versus the global average of 2.9.
Perhaps the biggest takeaway is how much AI is changing things. INTERPOL warns that criminals are now using deepfakes, voice cloning, AI‑driven phishing, automated scams, and AI‑powered social engineering to pull off their attacks.
Interestingly, discussions about deepfakes on underground forums and Telegram channels used by Southeast Asian cybercriminals jumped 600% between February and June 2024.
INTERPOL’s March 2026 ‘Global Financial Fraud Threat Assessment’ says AI‑powered scams are notably more profitable than traditional ones. The agency flagged agentic AI systems that can automate a lot of the dirty work, like scoping out targets, building victim profiles, running phishing campaigns, and even handling extortion.
Ransomware Remains a Massive Threat
The report estimates that the region saw over 135,000 ransomware attacks in 2024, with financial services, manufacturing, and real estate the hardest-hit sectors.
Apart from simply encrypting files, modern ransomware steals sensitive data, threatens to leak it, uses regulatory rules to pile on pressure, targets executives directly, and runs double or triple-extortion campaigns. Nowadays, ransomware-as-a-service (RaaS) is also rising in use, where criminal groups sell their attack tools to affiliates.
Related: Scammers Steal Over $400,000 Via Fake Uniswap Google Ads