Cyber Security Council: Stolen logins drive majority of financial attacks

The UAE Cyber Security Council has urged residents to take extra care when handling financial information online, warning that banking and payment data remain among the top targets for cybercriminals.

The Council said fraudsters are increasingly using both direct attacks on bank accounts and indirect methods such as identity theft, where criminals first gain access to email or personal accounts before stealing financial details.

As part of its weekly awareness campaign, the Council stressed that simple precautions can significantly reduce the risk of falling victim to online fraud, including being cautious when sharing financial information and ensuring data is securely protected at all times.

Residents are being advised to rely on secure payment methods, avoid storing bank details on mobile phones or personal computers, and regularly monitor their bank accounts for unusual activity. The Council also warned against engaging with fake advertisements or unverified messages, noting that scammers now use advanced technology to convincingly imitate the branding and identities of banks and trusted financial institutions.

The Council highlighted that around 60 per cent of cyberattacks begin with stolen login details, urging users to avoid saving passwords on unsecured devices, enable two-factor authentication, keep software updated, and remove untrusted applications.

It also warned against using public or free Wi-Fi networks for banking or financial transactions, recommending strong, unique passwords for financial accounts and the activation of instant bank alerts to flag suspicious activity quickly.

The guidance forms part of the Council’s "Cyber Pulse" awareness campaign, now in its second year, which aims to promote safer online behaviour, raise digital awareness, and support the UAE’s wider efforts to build a secure and resilient cyberspace amid rapid technological change.