Over the past year, Uzbekistan has experienced more than 12 million cyberattacks.

In recent years, there has been a significant increase in cybercrimes related to malicious online activities. For instance, in 2024, over 12 million attempts to carry out cyberattacks were recorded, while in 2023, this figure stood at 11 million, as reported by Kun.uz from the Cybersecurity Center.

Additionally, the number of fraud reports received in 2024 rose by 34% compared to 2023. Approximately 35% of all inquiries pertain to payment card fraud.

It is noted that one of the main reasons for the increase in fraud is the growing number of bank card users. At the beginning of the year, their number was less than 40 million, but it has now surpassed 55 million.

Identifying criminals and recovering funds stolen through cyber fraud is extremely challenging. The process of identifying perpetrators is complicated by the fact that fraud can be committed by anyone from anywhere in the world.

Fraud Trends

The primary wave of fraud intensified after the pandemic, as people began to actively use online services. Previously, most fraudulent activities occurred via phone calls, where criminals posed as bank employees and, under various pretenses, asked victims to enter a one-time code received via SMS. This allowed the perpetrators to gain access to banking details. Currently, the share of such schemes has significantly decreased: from 95% to 12-13%.

Now, most inquiries are related to viral programs distributed through APK files in the Telegram messenger. Users downloaded unknown files, believing they were useful applications. After installation, these programs requested important permissions, including access to SMS, phone calls, and phone numbers. The acquired information was then sent to the criminals' server.

“Hello, Mom”

Another common method of fraud has become calls known as “Hello, Mom.” Criminals impersonate a “relative” involved in a traffic accident and ask for money to resolve the issue. Such scams have primarily been observed in Tashkent, predominantly among the Russian-speaking population. It is believed that criminals using this method operated from outside the country, which is why they less frequently deceived Uzbek-speaking citizens.

People are more likely to fall for such tricks when addressed by name and surname and when their residential address is mentioned. However, this information can be obtained in various ways and is even available online.

Fake Transfer

This method of deception involves receiving an SMS notification about a certain amount of money being credited to your bank card. Then, a call comes from an unknown number, claiming that money was mistakenly transferred to you and asking you to return it.

Scammers attempt to evoke sympathy by discussing their problems: claiming it's their last money, that they've lost their job, or that they need funds for medical treatment, etc. All of this is merely an attempt to distract your attention. Sometimes the callers offer to keep a small part of the money as a “bonus for your troubles.”

In such moments, you should never transfer money under any circumstances. It’s better to seek assistance from your bank and verify whether an incorrect transfer actually occurred.

How to Protect Yourself from Fraudsters?

Start by checking the source, paying attention to the web address of the page you are reading. Engage in critical thinking. Most fake news is designed to elicit strong emotions, such as fear and anger.

Criminals often employ psychological tricks to deceive their victims. They try to create a sense of urgency, demanding immediate action. By threatening significant changes to bank accounts, fines, or legal consequences, criminals attempt to intimidate you into complying with their demands.

Recently, there have been increasing cases where criminals impersonate employees of well-known companies and government institutions. Using formal language, they create an illusion of trust and safety.

Criminals may call and introduce themselves as bank employees, claiming that someone is trying to withdraw money from your card. They will suggest transferring funds immediately to a secure account to avoid problems. Under no circumstances should you follow their instructions: do not transfer money, do not install suspicious applications, and do not click on links.

Do not share personal information and your card details, including the CVC/CVV code (the three-digit code on the back of the card), verification codes, and PIN codes. Remember, legitimate companies will never ask you for passwords or access codes over the phone or via SMS.

Iroda Tulyasheva