Cybercrime has become one of the most serious issues affecting modern societies as technology and internet access continue to expand rapidly. In Sri Lanka, digital transformation has significantly improved communication, banking, education, business, and public services. Smartphones, social media platforms, electronic commerce systems, online banking services, and digital Government platforms have made life more convenient and efficient for citizens. However, this growing dependence on digital systems has also created opportunities for cybercriminals to exploit weaknesses in both technology and human behaviour. Therefore, cybercrime is now not only a technical issue but also a major social, economic, and national security challenge that requires urgent attention.
Cybercrime refers to illegal activities carried out using computers, mobile devices, networks, or the internet. These include hacking, phishing, online financial fraud, identity theft, ransom-ware attacks, cyber bullying, social media impersonation, misinformation, and data breaches. Unlike traditional crimes, cybercrimes can occur instantly and across borders, making them difficult to trace and prevent. Cybercrime is a leading global issue, replacing traditional crime, as it offers lower risks for criminals. Criminals can operate anonymously from anywhere in the world, often targeting multiple victims at once. This borderless nature highlights the limitations of traditional law enforcement systems in dealing with modern digital threats.
Online financial fraud
One of the most common cybercrimes in Sri Lanka is online financial fraud. Cybercriminals often impersonate banks, Government institutions, or trusted organisations through fake emails, messages, phone calls, or websites. Their aim is to trick people into revealing sensitive information such as passwords, automated teller machine personal identification numbers, bank account details, and one-time passwords. Fake online shopping pages and fraudulent investment schemes are also widespread. Many victims lose money due to a lack of awareness or trust in digital communications. This shows that cybercriminals frequently exploit human psychology, such as fear, urgency, and trust, rather than relying only on technical weaknesses.
Social media platforms have also contributed to rising cyber risks. While they provide benefits for communication, education, and business, they are also used for cyber bullying, harassment, identity theft, fake account creation, and misinformation.
False information can spread rapidly through digital platforms, leading to confusion, misinformation, and broader social harm. While young people are among the most frequent users of digital technologies and social media, cybercrime affects individuals across all age groups. Research indicates that factors such as digital literacy, cyber security awareness, and educational background play a significant role in determining an individual’s vulnerability to cyber threats, regardless of age. However, younger users may face increased risks due to their higher levels of online engagement and, in some cases, limited ability to recognise and respond to online threats effectively. Additionally, cyber bullying remains a serious concern, as it can result in significant emotional and psychological distress for those affected.
According to the Computer Emergency Readiness Team (CERT), the National Cyber Security Strategy of Sri Lanka last year (2025) – 2029, states that cybercrime reports have increased in recent years. Common cases include hacked accounts, phishing attacks, malware infections, and data leaks. However, the actual number of incidents is likely higher because many victims do not report them. Reasons include embarrassment, fear of reputational damage, and the lack of trust in reporting systems. This shows the need for stronger awareness and better reporting mechanisms.
A major challenge in preventing cybercrime is low public awareness of cyber security. Many users still use weak passwords, click suspicious links, and share personal data without caution. Important safety practices such as two-factor authentication and software updates are often ignored. Elderly people, students, and new internet users are particularly vulnerable due to limited digital literacy. This highlights that technological growth must be matched with proper education to ensure safety.
Another challenge is the rapid development of technology. Cybercriminals now use advanced tools such as artificial intelligence, deep fakes, and automated malware systems. These technologies allow them to carry out more complex and harder-to-detect attacks. Therefore, cyber security experts and law enforcement agencies struggle to keep up. Cyber security has therefore become a constantly evolving field that requires continuous updates and innovation.
Limitations in cyber security infrastructure
Sri Lanka also faces limitations in cyber security infrastructure and skilled professionals. The National Cyber Security Strategy of Sri Lanka 2025–2029 states that many small and medium-sized businesses cannot afford advanced security systems, making them easy targets. Outdated software and weak protection increase risks further. In addition, many skilled information technology professionals leave the country for better opportunities abroad, creating a shortage of cyber security experts. This weakens the national capacity to respond to cyber threats effectively.
Legal and enforcement challenges also make cybercrime difficult to control. Since offenders often operate from different countries, investigation and prosecution require international cooperation. Although Sri Lanka has introduced cyber laws and data protection policies, enforcement is still limited in some areas. Digital evidence collection and tracking criminals remain complex processes. This shows that laws alone are not enough without strong implementation and technical support.
Cybercrime has serious economic impacts. Businesses suffer financial losses, data breaches, and reputational damage. Recovery costs can be high, and customer trust is often reduced. On a national level, cybercrime can slow digital development by making people less confident in online services. At the national level, cybercrime can hinder digital transformation efforts by reducing public trust and confidence in online services and digital platforms.This affects long-term economic growth and innovation.
The social impacts are also significant. Victims of cybercrime may experience stress, anxiety, and emotional trauma. Privacy violations and identity theft can damage relationships and personal well-being. In severe cases, cyber-attacks on Government systems or infrastructure can disrupt essential services and threaten national security. Therefore, cyber security is not only a technical issue but also a social concern.
Education plays an important role in reducing cybercrime. Schools and universities can teach digital literacy, online safety, and responsible internet use. Awareness campaigns through media can also help educate the public about cyber risks. Without strong efforts in education, it is difficult to build a safe digital society.
Organisations in Sri Lanka are already working to improve cyber security. The CERT provides awareness programs, training, and incident response support. Banks and telecom companies have introduced stronger security measures such as fraud detection systems and two-factor authentication. International cooperation also helps improve cyber security knowledge and technology.
Limited resources
Sri Lanka’s cyber security policies aim to strengthen national resilience, improve digital governance, and increase awareness. However, implementation remains weak due to limited resources, the lack of skilled professionals, and poor coordination between institutions. This shows that policies must be supported by practical action and investment to be effective.
To address cybercrime effectively, Sri Lanka needs a comprehensive approach. This includes improving public awareness, expanding digital education, upgrading cyber security infrastructure, strengthening laws, and encouraging cooperation between Government and private sectors. Encouraging ethical hacking practices and making cyber security solutions more affordable for small businesses can further strengthen their protection against cyber threats.
In conclusion, cybercrime is one of the most serious challenges facing Sri Lanka in the digital era. As technology continues to grow, cyber threats will also increase in complexity. Addressing this issue requires awareness, education, strong laws, skilled professionals, and cooperation from all sectors of society. Although Sri Lanka has made progress in cyber security, gaps in implementation, infrastructure, and awareness still remain. A secure digital future depends on the combined efforts of Government, institutions, businesses, and individuals working together responsibly.
The writer is a Manager for Cyber Security and Infrastructure
--------------------
The views and opinions expressed in this column are those of the author, and do not necessarily reflect those of this publication