India’s ‘back office’ reputation under threat amid rise in sophisticated cyber scams

India’s ‘back office’ reputation under threat amid rise in sophisticated cyber scams
India’s hard-won reputation as the world’s back office, built on trusted call-centre and IT services, is coming under pressure as increasingly sophisticated cyber scam networks emerge within the same digital ecosystem that underpins its outsourcing success.

A police raid late last month on a Hyderabad call centre that allegedly trained tele-callers to mimic Australian accents has sharpened those concerns, with analysts warning that organised fraud rings could erode confidence in India’s service industry.

According to local media reports, the callers had contacted Australian citizens by falsely warning that their computer systems had been hacked or compromised, then coaxed them into handing over remote access that allegedly enabled the criminals to infiltrate bank accounts.

The stolen funds were redirected to other Australian bank accounts before being transferred to India through illegal channels.

“These operations are no longer ‘old school’ crude phishing outfits, but are professional units replete with linguistic training and cross-border coordination, signalling a shift from low-skill fraud to high-sophistication social engineering ecosystems,” said Raj Kapoor, president of the India Blockchain Alliance think tank.

The manner in which the tele-callers were trained to imitate Australian accents suggested a structured fraud economy, complete with training modules and managerial oversight, he said. “This mimics the organised cyber-fraud hubs seen in Southeast Asia.”

Southeast Asia – particularly Cambodia, Myanmar and Laos – has become a global hub for cybercrime due to a convergence of weak rule of law, authoritarian protection and economic desperation.

The stakes for India to prevent such crime are higher than those for other Asian countries because of its thriving US$150 billion outsourcing industry, analysts say.

“The primary threat is reputational damage – global clients may question whether Indian service providers can adequately vet operations and prevent brand impersonation,” said Anndy Lian, a Singapore-based adviser to governments on blockchain and IT.

Fraudsters leveraging India’s cost advantages and skilled workforce for criminal enterprises created a systemic risk for legitimate businesses, he said.

Lian suggested that India introduce measures for call centres such as stringent “know your customer” procedures to verify client identities and financial profiles, and establish a centralised cybercrime intelligence to prevent such offences.

The Chinese criminal gangs behind Southeast Asia’s scam centres

Industry executives say such institutional and technological tools need to be used in tandem with joint law enforcement with other countries because the manner in which the Hyderabad-based call centre secured information about Australian citizens points to a cross-border network.

“This raises serious questions about data brokerage, leaks from private companies, and unsecured digital ecosystems where personal information is traded like a commodity,” Kapoor said.

A UN report from October 2024 estimated that financial losses from online scams targeting victims in East and Southeast Asia were between US$18 billion and US$37 billion in 2023. These operations leverage advanced technology like AI and deepfakes to exploit victims, and challenge weak legal frameworks.

According to Kapoor, cybercrime thrives because it functions like an open market, with scripts and tech tools being bought and sold.

Indian-origin cyber syndicates were increasingly plugging into transnational scam infrastructures, especially those operating out of Myanmar, Cambodia, Laos, and parts of Africa and the Middle East, he said.

“Indian gangs are using these global marketplaces to outsource operations, hire foreign specialists or collaborate with offshore crime-as-a-service providers.”

Experts say such cooperation allows overseas gangs to exploit India’s large labour pool while masking their own footprints.

The establishment of a sophisticated cybercrime network is a worry for India’s rapidly digitising economy. According to an Indian government report in late October, more than 86 per cent of households are now connected to the internet with the aim of easing citizen services that range from payment transactions to healthcare.

India’s Information Technology Act 2000, which serves as the bedrock of the country’s cyber law framework, is aimed at addressing offences such as impersonation and cheating through computer resources, but industry executives warn enforcing the law against sophisticated cyber criminals across the country’s vast and diverse landscape is a task fraught with challenges.

Fake call centres like the one in Hyderabad exploit regulatory gaps, digital anonymity and the ease of VoIP (Voice over Internet Protocol) – which enables phone calls over broadband internet – to mask their geographic origins, according to Amritraj Kaushal, an advocate in India’s Supreme Court.

“Traditional policing tools struggle against such hybrid fraud structures, which merge local recruitment with international command centres,” he said.

Indian authorities say they envision industry-led collaborative centres that would continuously monitor multiple systems and layers within the country’s complex digital ecosystem.

Niharika Karanjawala-Misra, principal associate at law firm Karanjawala and Co, said scaling up public awareness through campaigns would be key to preventing such cybercrimes.

“Once the scam has been committed, no matter how quickly and efficiently authorities act, not only is it close to impossible to recover the full amount taken fraudulently from the victims, the kingpins of such fraud operations often escape punishment, sometimes conducting the operations virtually from foreign countries,” she said.

Industry executives also called for cross-border cooperation between law enforcement agencies to boost crime prevention.

“If criminal networks can globalise, coordinate across continents, and evolve technologically in real time, why are our protective frameworks still confined within outdated borders, old laws and reactive policing?” Kapoor said.

He urged Indian authorities to upgrade their cybersecurity infrastructure against modern digital crime, or risk only firefighting against scammers.

 

Source: https://www.scmp.com/week-asia/economics/article/3335229/indias-back-office-reputation-under-threat-amid-rise-sophisticated-cyber-scams

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j

Crypto Cyber Resilience in 2024: Strategies for safeguarding crypto assets

Crypto Cyber Resilience in 2024: Strategies for safeguarding crypto assets

With digital assets becoming a bigger player in the global economy, everyone’s buzzing about “crypto cyber resilience.” It’s no surprise – 2024 has seen some seriously high-tech hacks, phishing attacks, and other cyber threats targeting cryptocurrency. This article dives into the current state of crypto security. We’ll explore what companies and individuals can do to protect their digital treasures, and how to build strong defenses against these ever-evolving cyber attacks. We’ll also compare these challenges to the Wild West days of fintech, highlighting how the threats and solutions have transformed alongside the crypto landscape.

The Current State of Crypto Cyber Resilience

Cryptocurrency, while promising unprecedented financial opportunities, has also introduced a host of new vulnerabilities. According to Chainalysis, cryptocurrency-related crime hit an all-time high in 2022, with illicit addresses receiving $14 billion worth of cryptocurrencies. This figure underscores the critical need for robust security measures in the crypto space.

In 2024, the landscape of crypto cyber resilience is defined by an ongoing arms race between cybersecurity experts and cyber criminals. The rise of decentralised finance (DeFi) platforms has particularly exacerbated the issue. These platforms, while democratizing access to financial services, have also become prime targets for hackers. For instance, in 2022, the DeFi sector saw a staggering $53.5 billion in losses due to hacks and exploits, as reported by IntoTheBlock

What Companies Should Do to Enhance Crypto Cyber Resilience

  1. Implement Multi-Factor Authentication (MFA): One of the fundamental steps companies can take is to enforce multi-factor authentication (MFA). MFA adds an extra layer of security by requiring users to provide two or more verification factors to gain access to their accounts. This significantly reduces the risk of unauthorised access, as attackers would need to compromise multiple forms of authentication.
  2. Adopt Cold Storage Solutions: Storing the majority of crypto assets in cold storage, which is offline storage, can drastically reduce the risk of theft. Unlike hot wallets, which are connected to the internet and hence more vulnerable to hacks, cold wallets are immune to online attacks.
  3. Regular Security Audits and Penetration Testing: Regular security audits and penetration testing are crucial in identifying and mitigating vulnerabilities. Companies should engage with cybersecurity firms to conduct thorough assessments of their systems and rectify any weaknesses. This proactive approach helps in staying ahead of potential threats.
  4. Educate Employees and Users: Human error remains one of the biggest threats to cybersecurity. Companies must invest in comprehensive training programs to educate employees and users about phishing, social engineering attacks, and safe practices for handling crypto assets. Knowledgeable users are less likely to fall victim to scams.
  5. Implement Robust Incident Response Plans: Having a well-defined incident response plan is essential for minimising the impact of a cyber attack. This plan should include steps for immediate containment, eradication of the threat, and recovery of affected systems. It should also outline communication strategies to inform stakeholders and mitigate reputational damage.
  6. Leverage Advanced Cryptographic Techniques: Employing advanced cryptographic techniques such as zero-knowledge proofs and homomorphic encryption can enhance data privacy and security. These techniques allow for the verification of transactions and computations without exposing sensitive data.


Preventing Hacks, Phishing, and Other Cyber Threats

The prevention of cyber threats in the crypto space requires a multi-faceted approach that addresses both technological and human factors. Here are some strategies:

  1. Strengthen Network Security: Ensuring that network infrastructure is secure is paramount. This includes using firewalls, intrusion detection systems, and regular monitoring to detect and block suspicious activities. Network segmentation can also help contain breaches and prevent them from spreading.
  2. Employ Blockchain AnalyticsBlockchain analytics tools can help track and analyse transactions across the blockchain. These tools are valuable in identifying suspicious patterns and potentially fraudulent activities. Companies like Chainalysis and Elliptic offer services that provide insights into the flow of funds and help in tracing the origins of illicit transactions.
  3. Use Smart Contract Auditing: Smart contracts are the backbone of many DeFi platforms, and their security is critical. Regular auditing of smart contracts by specialized firms can identify vulnerabilities and ensure that they function as intended. This reduces the risk of exploits that could lead to significant financial losses.
  4. Promote User Awareness: User awareness campaigns can educate investors and users about common phishing tactics and how to avoid them. Encouraging the use of hardware wallets, which require physical confirmation for transactions, can also add an extra layer of security.
  5. Adopt Decentralised Security Measures: Decentralised security measures, such as decentralised autonomous organisations (DAOs) for security, can leverage the collective intelligence of the community to identify and mitigate threats. This collaborative approach can be more effective than traditional centralised security models.


Comparing Crypto Cyber Resilience to Fintech Security

The fintech era, which saw the rise of digital banking and online financial services, laid much of the groundwork for current cybersecurity practices. However, there are distinct differences between the security needs of traditional fintech and the current crypto landscape:

  1. Centralisation vs. Decentralisation: Traditional fintech services are typically centralised, with security measures focused on protecting centralised servers and databases. In contrast, cryptocurrencies operate on decentralised networks, such as blockchain, where security must be distributed across all nodes. This decentralisation presents unique challenges and requires innovative security solutions.
  2. Regulatory Frameworks: The regulatory frameworks governing traditional financial institutions are well-established and comprehensive. Cryptocurrencies, however, exist in a relatively nascent regulatory environment. While regulations like the EU Cyber Resilience Act are emerging, there is still a lack of uniformity and clarity in many jurisdictions, making it harder to establish standardised security protocols.
  3. Nature of Assets: Traditional financial assets are often backed by physical or legal guarantees (e.g., government bonds, insurance). Cryptocurrencies, being purely digital, lack these tangible assurances. This intangibility makes them more susceptible to cyber threats, emphasising the need for robust digital security measures.
  4. Evolving Threat Landscape: The threat landscape in the fintech era was largely confined to phishing attacks, malware, and hacking attempts aimed at centralised systems. In the crypto world, the rise of quantum computing poses a significant threat to cryptographic algorithms that underpin digital currencies. Additionally, the anonymity and irreversibility of cryptocurrency transactions make them attractive targets for cybercriminals.


Conclusion: Building a Resilient Future for Crypto

The future of cryptocurrency hinges on the industry’s ability to build robust cyber resilience. As the crypto market continues to grow, so too does the incentive for cybercriminals to exploit vulnerabilities. Companies must adopt a holistic approach to security, integrating advanced technologies, rigorous protocols, and comprehensive user education.

To survive, the industry needs to build a fortress around security, with cutting-edge tech, bulletproof protocols, and everyone on the same page about staying safe.

Here’s the good news: companies can seriously toughen their defenses by using double-verification logins (multi-factor authentication), keeping most crypto offline in secure storage (cold storage), and having regular security checkups (audits). Plus, educating users about crypto scams is like giving them a shield against online attacks.

But that’s not all. Crypto needs its own special security suit, not just hand-me-downs from the traditional finance world (fintech). Decentralised security measures and keeping up with new regulations are crucial for navigating this ever-changing landscape.

Here’s the key: everyone needs to work together. Companies, cybersecurity experts, and even regulators need to join forces to build a strong defense around the entire crypto ecosystem. By working as a team, we can make sure the exciting potential of crypto isn’t overshadowed by cyber threats.

 

Source: https://ciosea.economictimes.indiatimes.com/blog/crypto-cyber-resilience-in-2024-strategies-for-safeguarding-crypto-assets/111074132

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j