In Kazakhstan, cybercrime has once again moved to the center of the state agenda. At an expanded government meeting, President Kassym-Jomart Tokayev instructed the government, together with the relevant agencies, to comprehensively reconsider approaches to ensuring cybersecurity and protecting citizens’ personal data.

In his speech, the head of state specifically stressed that amid digital transformation it is citizens who become the most vulnerable link. According to him, massive personal data leaks, internet fraud and the use of artificial intelligence in criminal schemes have become a new reality — both globally and within the country.

The statement came amid a continuing rise in digital risks. Phone and online fraud, phishing, fake services, fraudulent investment offers and schemes involving taking out loans through social engineering are increasingly discussed in the public agenda. In these scenarios, attackers typically use psychological pressure, number spoofing, messages on behalf of government agencies or banks, as well as attempts to obtain SMS codes and access to users’ devices.

The President noted that measures to counter cybercrime are already being taken and recalled the work of the National Anti-Fraud Center. According to him, thanks to this structure, fraudulent operations against 90 thousand citizens were prevented. At the same time, the nature of the threats is becoming more complex: criminal schemes quickly adapt to new digital services, and fraudsters are making more active use of automation and AI tools to make attacks more convincing.

Special attention in the speech was paid to the protection of personal data. The President stressed that the protection of citizens’ digital data should be approached systematically rather than in a fragmented way. In effect, this means moving from targeted response measures to a broader model in which prevention, interagency coordination, technological solutions and liability for violations are strengthened simultaneously.

At the same time, data and explanations confirming the scale of the problem continue to be published in the country. According to information presented at a specialized briefing, since its launch the Anti-Fraud Center has recorded more than 111 thousand incidents, of which over 90 thousand were classified as fraud. The most common schemes include fake online stores, various types of online deception, pseudo-investment projects, social media fraud and credit fraud.

For the law enforcement and financial system, this means that the fight against cybercrime has long gone beyond “individual criminal cases” and has become a question of the resilience of the digital economy. The more services, payments and communications move online, the higher the cost of mistakes in data protection, anti-fraud and informing citizens.

Against this backdrop, statements about the need to reconsider approaches to cybersecurity look like an attempt to strengthen the state’s response to a new wave of digital threats. Further steps are expected to involve coordination between law enforcement agencies, financial institutions and digital agencies, as well as stronger personal data protection and prevention of online fraud.