Topic starter
22/06/2026 9:52 am
TL;DR: Cybercrime now exceeds 30% of recorded offenses in over half of surveyed Asia-Pacific countries, according to SumSub citing INTERPOL, while phishing, scams, ransomware, and DDoS pressure are all rising alongside faster cloud and digital finance adoption. Identity governance, cloud access, and response capacity are being outpaced together, not separately.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “INTERPOL Warns Cybercrime Exceeds 30% of Recorded Crime in Much of Asia-Pacific”.
By the numbers:
- Cybercrime now accounts for more than 30% of recorded offenses in over half of the Asia and South Pacific countries surveyed by INTERPOL.
- Distributed denial-of-service attacks increased by 92% year over year.
Key questions
Q: Where do identity controls fail first when cybercrime scales across APAC?
A: They fail first at the trust boundary where identity proofing, authentication, and transaction approval are disconnected.
Q: Why do phishing and scam campaigns create such large downstream losses?
A: Because the attacker is not just stealing a login.
Q: What are the warning signs that cloud access is becoming a fraud risk?
A: Look for privileged sessions that reach financial or customer workflows, repeated approval exceptions, sudden changes in payout paths, and identity events that do not line up with normal user behaviour.
Practitioner guidance
- Strengthen identity verification at high-risk entry points Harden onboarding, password reset, and transaction approval flows where phishing and scam activity can turn quickly into account takeover or payment fraud.
- Review privileged cloud access paths Map which cloud and financial workflows can be reached from a single stolen credential, token, or delegated approval path, then tighten the trust chain around them.
- Unify fraud and IAM telemetry Correlate login events, session anomalies, payout changes, and case-management signals so fraud teams and IAM teams see the same attack pattern early.
Bottom line: APAC’s cybercrime surge is exposing identity controls as a shared weak point across fraud, cloud access, and incident response.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
22/06/2026 10:31 am
Identity control is now a regional resilience issue, not a narrow IAM concern. When cybercrime exceeds 30% of recorded crime in multiple APAC countries, the discipline has moved beyond account administration. Fraud, cloud access, and incident response are now linked because attackers exploit whichever trust boundary is weakest. Practitioners should treat identity assurance as a core part of national and enterprise cyber resilience, not a support function.
A question worth separating out:
Q: Should organisations prioritise phishing defence or cloud access governance first?
A: They should sequence them together, because the attacker benefits when one control is strong but the next one is weak. Phishing defence reduces entry, while cloud access governance limits what a captured identity can do. In high-growth digital environments, treating them separately leaves an attacker room to convert a single compromise into broad operational impact.
👉 Read our full editorial: APAC cybercrime pressure is exposing weak identity controls