Pakistan recorded more than 5 million cyberattacks in the first three quarters of 2025, as the country's rapidly expanding digital economy left users and institutions dangerously exposed, according to a report by Maldives Insight. The surge coincides with a period of accelerated adoption of online banking, mobile payments and e-commerce — growth that has outpaced cybersecurity awareness at nearly every level.

Scale of the Threat

The Maldives Insight report documented more than 166,000 banking malware attacks and over 126,000 spyware incidents during the same period. Official figures cited in the report show Pakistan recorded over 500 cybersecurity incidents in 2025, up from 410 incidents in 2024 — a year-on-year rise that tracks a broader 35 per cent increase in cybercrime. More than 73,000 complaints were reportedly filed nationwide during the year, driven largely by WhatsApp hacking, online fraud and financial scams.

Digital Expansion Driving Vulnerability

Around 90 per cent of retail transactions in Pakistan were conducted through digital channels during FY25, while mobile banking and e-wallet usage expanded sharply. The country's Raast instant payment system processed hundreds of millions of transactions, reflecting a decisive shift toward a cash-light economy. Smartphones have increasingly become all-in-one banking platforms, payment tools and personal data repositories — making them high-value targets for cybercriminals.

Yet the report found that many users remain unfamiliar with basic online safety practices, including strong password management, multi-factor authentication and phishing detection. Weak passwords and poor data protection habits have created significant vulnerabilities across both individual users and institutions.

How Attackers Are Exploiting the Gap

Cybercriminals are increasingly exploiting human behaviour rather than relying solely on technical exploits, the report noted. Fake calls, fraudulent websites and malicious links have become primary attack vectors. Government departments, businesses, educational institutions and telecommunications providers have all been targeted alongside individual consumers.

Data Privacy Under Scrutiny

Concerns over data privacy have intensified amid reports that sensitive personal information and identity-related data have surfaced on illicit online marketplaces. Authorities reportedly disputed some claims regarding the origin of the leaked data, but the incidents have raised broader questions about data governance frameworks and security oversight in the country.

What Comes Next

The report's findings underscore a structural challenge: Pakistan's digital infrastructure is expanding faster than the regulatory and awareness ecosystem that should protect it. Without a concerted push on cybersecurity literacy, stronger institutional defences and clearer data governance rules, analysts warn the attack surface will only widen as digital adoption deepens.