As the telecommunications sector in Asia rapidly moves towards 5G technology, cloud-native architectures, and digital services, operators throughout the region contend with intensifying cyber threats. These threats, which range from data breaches to scams and fraud within mobile networks, impact not only businesses, but also a considerable number of consumers. Consequently, governments and mobile operators are implementing stricter regulations and enhancing enforcement strategies. In addition, they are investing in more sophisticated security systems to safeguard national networks.
Increasing Cybersecurity Risks and Consumer Fraud in the Region
The Asia Pacific region has experienced some of the highest levels of mobile fraud, digital scams, and identity-based attacks globally. A 2025 report commissioned by GSMA revealed that the percentage of consumers who fell victim to scams increased from 31% to 43% over the past year. Additionally, 81% of those surveyed said they are willing to switch financial providers to achieve better security. Consumers prefer solutions that prioritize verification, offer a confirmation-of-payee feature, provide safer payment tools, and allow for simple “official call-back only” habits for enhanced protection.
Cybersecurity trust in Southeast Asia is dwindling as the number of cyber scams continue to rise. A significant number of mobile users have reported encounters with fraudulent calls, SMS, and online impersonation attempts. According to the GSMA’s Intelligence 2024 Report on Telco Security Landscape and Strategies – Asia Pacific, there is an urgent need for innovative telecom security solutions.
Telecom Operators Enhancing Defenses and Security Practices
Asian governments have started to enact laws and establish regulatory frameworks aimed at protecting critical infrastructure and personal data. These measures obligate telecom operators to bolster their networks’ security.
In China, the Cybersecurity Law, the Data Security Law, and the Personal Information Protection Law (PIPL) regulate telecom operators. These laws demand strict protection of critical information infrastructure, data handling, security reviews, and compliance obligations. As a result, operators are compelled to integrate security measures from the inception of their projects.
In South Korea, the Personal Information Protection Act (PIPA) regulates telecom operators. The legislation mandates the implementation of measures to securely handle data, maintain accountability, and safeguard user privacy. Though primarily regulating data protection rather than network infrastructure security, PIPA forms a crucial regulatory framework for safeguarding personal data as 5G networks and virtualization continue to grow across the country.
In Japan, the Cybersecurity Basic Act and related national cybersecurity strategies guide the broad infrastructure protection framework. Telecom operators, including those exploring advanced network innovations such as virtualized RAN or 6G-ready systems, are expected to comply with government-endorsed security standards, threat-sharing mechanisms, and incident-response protocols.
In the Philippines, national cyber defenses are progressively strengthening. The Cybercrime Prevention Act of 2012 (RA 10175) and the National Cybersecurity Plan 2023-2028 establish a legal framework and outline strategies for enhancing resilience across critical infrastructure.
Several major telecommunications firms are investing in AI-based network analytics to bolster security and operational efficiency. For instance, Globe Telecom deploys AI and machine learning for anomaly detection across its infrastructure. Similarly, PLDT is mitigating phishing, DDoS attacks, and other cyber threats through its cybersecurity operations center and collaboration with government agencies.
India, driven by its enormous telecom market, has introduced some of the region’s most comprehensive cybersecurity rules. CERT-In mandates prompt incident reporting, strict log retention for 180 days, and real-time collaboration with national cyber emergency response teams. The Department of Telecommunications now requires 5G network elements to be procured from trusted vendors under the Trusted Telecom Portal policy.
Singapore has set up a robust cybersecurity framework for its telecom sector. Under the Cybersecurity Act, telecom and infocomm systems can be designated as Critical Information Infrastructure (CII), which mandates operators to implement a cybersecurity code of practice, conduct audits, and quickly report incidents.
Building Collective Defense: Collaboration, Standards, and Shared Cyber Intelligence
Given the scale and interconnectedness of modern telecom networks, many operators acknowledge the limitations of tackling cyber threats individually. As a result, collaborative initiatives, public-private partnerships, and industry-wide frameworks are emerging as fundamental strategies for defense.
The theme of the 19th edition of the Telecom Review Leaders’ Summit was ‘Tech Intelligence Beyond Mobility.’ The event held in Dubai, UAE, facilitated discussions among leading experts on the evolving challenges of protecting information in an increasingly connected world. The summit served as a collaborative platform for telecom-based cybersecurity collaboration, standardization, and knowledge sharing.
The Need for Collective Defense, Transparency, and Regulatory Backing in Asia
The security challenge faced by Asia’s telecom sector is not limited to individual operators or markets. Scams, fraud, cross-border intrusion threats, and the growing complexity of virtualized networks have necessitated a regional and systemic response.
The continual rise in consumer fraud, data protection failures, and regulatory scrutiny necessitates treating cybersecurity in the same vein as infrastructure policy, consumer protection, and national security. To cope with these risks, operators need to prioritize transparency, share threat intelligence, and adopt common security standards. Regulators should support these efforts with clear rules, consistent enforcement, and incentives that reward genuine compliance.
By embracing an approach that combines strong governance, robust technical controls, and cross-border collaboration, Asia’s telecom sector can build networks that not only offer connectivity but also provide meaningful protection for users in an increasingly hostile digital environment.
Questions & Answers
What is the current state of cybersecurity in Asia’s telecom industry?
The telecom industry in Asia is grappling with increasing cybersecurity risks, including data breaches, scams, and fraud within mobile networks. Governments and mobile operators are responding by implementing stricter regulations, enhancing enforcement strategies, and investing in advanced security systems.
What measures are being taken to improve cybersecurity in Asia’s telecom industry?
Governments across Asia are enacting laws and regulatory frameworks to protect critical infrastructure and personal data. Telecom operators are obligated to bolster their network security and are investing in AI-based network analytics to enhance security and operational efficiency.
What strategies are recommended for managing cybersecurity risks in the telecom industry?
Telecom operators need to prioritize transparency, share threat intelligence, and adopt common security standards. Regulators should support these efforts with clear rules, consistent enforcement, and incentives that reward genuine compliance. Collaborative initiatives, public-private partnerships, and industry-wide frameworks are also recommended.
