During 2025, 71 percent of Colombians encountered at least one fraud attempt involving identity theft, according to data from DataCrédito Experian. This surge in digital crime has left a majority of the population feeling vulnerable, with 95 percent of citizens reporting that these incidents occur frequently throughout the country, and 70 percent stating they know someone within their close circles who has been a victim.
The rise of vishing tactics
The practice of vishing—a form of social engineering where criminals use phone calls to impersonate trusted entities—has become a primary tool for these fraudulent attempts. Victims are often contacted by individuals claiming to represent well-known organizations, creating a false sense of urgency to bypass security checks. This is particularly prevalent during high-demand commercial periods, such as Black Friday, Cyber Days, and the Christmas season, which are often accompanied by an increase in suspicious transactions and fraudulent maneuvers. Telephone calls have occupied a central role among these tactics.
“In the case of vishing, it is not only about the technology they use, but about their ability to build trust,” said Nicolás Vargas, Truecaller manager in Colombia.
Nicolás Vargas, Truecaller manager in Colombia
Data from the agency indicates that 20 percent of those who experienced fraud received a call from someone pretending to be a representative of a recognized company. These attackers often use known information to sound legitimate, pressuring the recipient to act quickly before they can verify the caller’s identity.
Fraudsters use fake websites and links to steal data
While phone calls are a significant threat, criminals also utilize fraudulent websites and malicious applications to steal credentials. Among those who reported being targeted, 25 percent noted that the website or application they encountered appeared authentic, and 17 percent interacted with a link that seemed legitimate. The agency warns that attackers use these methods to compromise accounts and personal data, sometimes even attempting to sell the stolen information to third parties.
“Cybercriminals may try to obtain personal or banking data, verification codes, or information related to the victim’s accounts. They may try to direct the victim to fraudulent websites or convince them to install some program under the guise of helping to solve the alleged problem,” Kaspersky experts stated.
Kaspersky experts
Criminals may also use artificial intelligence tools to mimic the voices of executives, suppliers, or coworkers, a tactic designed to trick businesses into making unauthorized payments or changing banking details.
Citizens adopt defensive habits against digital threats
Despite the high frequency of these attacks, 67 percent of Colombians report that they have not received formal training on how to prevent digital fraud. To mitigate risk, researchers and agencies advise adopting specific defensive habits. According to the DataCrédito Experian study, 57 percent of citizens now avoid answering calls from unknown numbers, 55 percent refrain from clicking on suspicious links, and 51 percent limit themselves to using only well-known platforms or applications.
- Avoid sharing passwords, financial data, or verification codes over the phone.
- End suspicious calls immediately and contact the entity directly through their official channels.
- Verify any alleged account alerts or charges by logging into the institution’s official website or application.
- Refrain from installing software or enabling remote access to devices based on unsolicited requests.
“Fraud prevention begins with information and with understanding that we can all incorporate simple care habits into our digital life,” said Jacob Sandberg, vice president of Experian Consumer Services.
Jacob Sandberg, vice president of Experian Consumer Services
Furthermore, 56 percent of Colombians believe that education campaigns regarding digital security are among the most effective tools for preventing fraud.
Corporate security challenges
Beyond individual consumers, businesses face an increasing volume of threats. According to FortiGuard Labs, companies dealt with an average of 2,803 cyberattacks per week during the first quarter of 2026. These attacks often involve malware, payroll fraud, or the distribution of manipulated versions of banking applications intended to deceive customers. In response, organizations like the Banco de Bogotá have urged entities to strengthen internal controls, identify common attack patterns, and confirm any financial requests via a second, previously validated communication channel.