INTERPOL Flags Sharp Rise in Phishing, Ransomware and AI Scams Across Asia-Pacific

INTERPOL says cybercrime in Asia and the South Pacific is climbing fast, and the gap between attackers and defenders is widening across most of the region.

The finding comes from INTERPOL's 2025/2026 Asia and South Pacific Cyberthreat Assessment Report, an annual stocktake the agency uses to brief member states and coordinate cross-border operations. The report points to a "dramatic increase" in offences tied to rapid digitalization, growing internet penetration, the spread of new technologies, and organized criminal networks that have learned to move money and infrastructure across jurisdictions faster than police can follow.

Phishing tops the list.

INTERPOL describes it as the most widespread vector in the region, used both as a standalone fraud play and as the entry point for heavier intrusions. The assessment ties phishing to credential theft feeding initial access brokers, who in turn sell footholds into corporate networks to ransomware affiliates. That supply chain — well documented in Europe and North America — is now firmly entrenched across Southeast Asia and the Pacific.

Ransomware remains the highest-impact category. The report flags continued targeting of healthcare, government, manufacturing and financial services, with operators tailoring ransom demands to local economic conditions. Smaller Pacific nations, where incident response capacity is thin, are increasingly hit by groups that previously focused on Western targets. INTERPOL does not name specific crews in the public summary, but the techniques described track with affiliates of the major Russian-speaking RaaS brands still dominating leak-site activity.

AI-enabled fraud is the fastest-growing line item.

INTERPOL points to deepfake-driven business email compromise, voice-cloned executive impersonation, and generative AI used to mass-produce phishing lures in local languages — a particular problem in a region with hundreds of dialects that previously offered some natural friction against foreign scam operations. Pig-butchering investment fraud, much of it run out of scam compounds in Myanmar, Cambodia and Laos, is increasingly automated with large language models handling the early conversational grooming.

The report also flags a cybersecurity maturity disparity as a structural problem. Advanced economies including Singapore, Japan, South Korea and Australia have national CERTs, mandatory breach reporting and active law enforcement cyber units. Many Pacific Island states have none of those. Criminal groups route infrastructure through the weaker jurisdictions and target victims in the wealthier ones.

INTERPOL is pushing for expanded participation in its Operation Synergia line of takedowns and broader intelligence sharing through its Singapore-based Cybercrime Directorate. The full assessment is available through INTERPOL's cybercrime portal.

Whether member states fund the response at the scale the numbers demand is the open question.