Notifications
Clear all
Topic starter
22/06/2026 9:52 am
TL;DR: Cybercrime now exceeds 30% of recorded offenses in over half of surveyed Asia-Pacific countries, with INTERPOL also citing more than 135,000 ransomware-related attacks, a 92% rise in DDoS incidents, and 5.5 phishing clicks per 1,000 people each month. The security lesson is broader than fraud: identity governance, cloud access, and response capacity are being outpaced together.
NHIMG editorial — based on content published by SumSub: INTERPOL warns cybercrime exceeds 30% of recorded crime in much of Asia-Pacific
By the numbers:
- Cybercrime now accounts for more than 30% of recorded offenses in over half of the Asia and South Pacific countries surveyed by INTERPOL.
- Distributed denial-of-service attacks increased by 92% year over year.
- 5.5 in every 1,000 people clicked a phishing link each month, around twice the global average.
Questions worth separating out
Q: How should security teams reduce the risk of phishing-led compromise in high-growth regions?
A: Security teams should prioritise phishing-resistant authentication, close account recovery weaknesses, and harden helpdesk verification before focusing on broader user education.
Q: Why do ransomware and cloud abuse often overlap with identity failures?
A: Ransomware operators frequently rely on stolen credentials, privileged access, or abused service accounts to move laterally and disable recovery.
Q: What do security teams get wrong about cybercrime growth in Asia-Pacific?
A: They often treat the problem as a pure detection or law-enforcement issue.
Practitioner guidance
- Tighten phishing-resistant authentication across high-value accounts Prioritise users, helpdesk personnel, finance teams, and cloud administrators first.
- Reduce standing privilege in cloud and administrative workflows Map privileged human accounts, service accounts, and delegated workflows that can reach ransomware-critical systems.
- Treat service accounts as part of fraud and ransomware defence Inventory non-human identities that can modify records, trigger payments, or move laterally.
What's in the full analysis
SumSub's full article covers the regional threat detail this post intentionally leaves at the strategic level:
- Country-by-country survey context from INTERPOL’s member responses across Asia and the South Pacific.
- The underlying crime patterns behind scams, phishing, ransomware, and DDoS activity in the region.
- Private-sector threat detection figures cited by INTERPOL, useful for comparing public and commercial telemetry.
- Law-enforcement capacity gaps and why they matter for enterprise response planning.
👉 Read SumSub's analysis of INTERPOL's Asia-Pacific cybercrime assessment →
APAC cybercrime surge: what it means for IAM and fraud teams?
Explore further
22/06/2026 10:31 am
APAC cybercrime growth is exposing an identity governance problem, not just a law-enforcement problem. When more than 30% of recorded offences are cybercrime in a majority of surveyed countries, the gap is no longer isolated incident handling. The real issue is that human identity controls, cloud entitlement discipline, and machine identity governance are being stressed at the same time. Practitioners should treat regional threat growth as a governance signal, not a statistics slide.
A few things that frame the scale:
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job, according to the 2026 Infrastructure Identity Survey.
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security.
A question worth separating out:
Q: Who is accountable when phishing leads to ransomware or fraud?
A: Accountability sits across identity governance, security operations, and the business owners of the compromised workflow. If the initial access path was a recovery process, privileged account, or service account, then the control owner for that identity must be part of the response. The governance question is not just who was attacked, but which identity control failed to constrain the blast radius.
👉 Read our full editorial: APAC cybercrime pressure is exposing weak identity controls
