Identity Theft and Account Takeover Threats Surge in APAC

• •Over 30% of reported crimes in APAC are now cybercrimes, with phishing and social engineering leading.
• •Attackers are increasingly targeting established accounts, shifting focus from initial onboarding.
• •Organizations are urged to adopt identity-centric security strategies to combat evolving threats.

Cybercriminals in the Asia-Pacific region are increasingly targeting identity theft and account takeover (ATO) attacks. Interpol's report indicates that over half of the surveyed countries now see cybercrime as accounting for 30% of all reported crimes, with phishing and social engineering as primary methods. Attackers are shifting focus from credential theft to stealing identities, exploiting vulnerabilities in identity verification processes. Financial institutions are particularly affected, as ATO attacks become more sophisticated, leveraging stolen credentials and AI techniques. Traditional security measures are proving inadequate, prompting organizations to rethink their identity-centric security strategies. The IDC forecasts a significant increase in security spending, particularly in identity governance, reflecting this urgent need for better protection. As organizations adapt, they must balance security measures with user experience to avoid friction in digital interactions.