Mobile threat detections per user jump 49% across APAC; What Indian consumers need to know

Mobile users across the Asia-Pacific region are facing increasingly sophisticated cyber threats, with scammers using fake promotions, malicious apps, phishing links and AI-powered deception to target consumers.

According to Kaspersky's latest data, the average number of mobile threat detections per affected user across eight APAC markets rose 49% year-on-year in the first quarter of 2026, increasing from 4.9 to 7.3 detections per user. The increase was recorded across all eight markets, even as the total number of affected users declined.

READ THIS: Is your child’s phone safe? Adult content exposure nearly 3x higher on Android devices: Report

India records 18,187 mobile threat detections

India recorded 18,187 mobile threat detections during the quarter, making it one of the region's largest markets by volume. Indonesia recorded 15,163 detections. The figures come amid the rapid expansion of mobile-first services and smartphone usage across APAC.

For Indian consumers, Kaspersky said the Rewardsteal Trojan remains active. It disguises itself as reward or giveaway applications to steal sensitive information. The Thamera Trojan has also resurfaced and can hijack devices to create fraudulent social media accounts at scale.

Fake offers and messages 

Cybercriminals are increasingly reaching consumers outside traditional email scams. Malicious links are being distributed through text messages, messaging apps, social media, fake job offers, cryptocurrency giveaways and digital promotions.

DON'T MISS: Rs 1.5 crore 'boss scam' in Ahmedabad unravels network of 4,500 SIM cards linked to China and Pakistan

Attackers also use fake domains, typosquatting and convincing copies of trusted brands to trick users into sharing credentials or personal information. Compromised messaging accounts can make malicious links appear to come from someone the victim already trusts.

AI is making scams harder to spot

AI is adding another layer of sophistication. In another study, Kaspersky found that 66% of scam victims believed AI had been used against them, including through AI-written messages, cloned voices and deepfake images or videos. More than half of successful scams studied were completed in under 30 minutes.

Choon Hong Chee, Head of Consumer Channel for APAC at Kaspersky, said: “Across APAC, mobile threats are becoming increasingly sophisticated, with cybercriminals combining stealthy attack techniques, persistent malware and AI-powered deception to target consumers. As scams become more convincing and harder to spot, staying protected requires security that can detect threats proactively, even before users realise they are under attack.”

ALSO READ: Landmark hit: Iranian hackers pull off historic cyber attack to paralyze British power plant 

How consumers can protect themselves

Consumers are advised to verify apps before downloading them, remain cautious about “free reward” or cashback offers and review app permissions carefully. Users should also enable multi-factor authentication, verify links received through messages and social media, and keep operating systems and applications updated.

For smartphone users, the warning is less about avoiding digital services and more about using them carefully. A suspicious reward, urgent message or unfamiliar link can take only seconds to click, but verifying it first can help protect personal information, accounts and money.