Web of Cybercrime in Nepal: Challenges, Legal Hurdles, and Solutions for a Secure Digital Space
3rd September 2026, Kathmandu
Explore the rising wave of cybercrime in Nepal, key trends in social media and financial fraud, legal challenges with the Electronic Transactions Act, and essential solutions for a secure digital future.
Web of Cybercrime in Nepal
Information and communication technology has rapidly transformed into the core bedrock of modern governance, economic growth, and everyday social life in Nepal.
As digital public services, electronic banking, online payments, digital education, and e-commerce expand at an unprecedented scale, they bring a darker downside: a sharp and consistent rise in cybercrime in Nepal.
No longer just an isolated technical glitch, cybercrime has evolved into a critical multi-dimensional threat impacting the rule of law, national security, economic stability, individual privacy, and fundamental human rights.
1. The Escalating Scale of Cybercrime in Nepal
Data from the Nepal Police Cyber Bureau highlights a persistently high volume of digital threats. In the fiscal year 2082/83 (2025/26), authorities registered 20,526 cybercrime complaints, following 18,926 complaints in 2081/82 and 19,730 in 2080/81.
The manifestation of cybercrime is diverse, encompassing unauthorized system access, data breaches, website hacking, identity theft, online scams, phishing, cyberbullying, blackmail, and severe violations of personal privacy.
Social Media as a Primary Vector
Recent records indicate that mainstream social networking applications are heavily exploited by malicious actors. Total registrations for the fiscal year 2082/83 highlight prominent platforms:
Facebook and Messenger: 7,123 complaints
TikTok: 6,776 complaints
WhatsApp: 3,105 complaints
Telegram: 1,031 complaints
Instagram: 628 complaints
The Surge in Financial Digital Frauds
With the rapid rollout of digital banking and electronic payment wallets, financial fraud has intensified. According to the Financial Information Unit (FIU) of Nepal Rastra Bank, prevalent scam trends include fake parcel or gift scams, identity spoofing, bogus online business ventures, one-time password (OTP) manipulation, and unauthorized intrusions into bank and digital wallet accounts.
Advertisement
Police complaints regarding financial fraud leaped to 7,723 in fiscal year 2024/25, marking a massive surge compared to 4,112 complaints the previous year.
2. Outdated Legal Frameworks: The Electronic Transactions Act Challenge
Nepal’s primary legislative defense against cyber threats remains the Electronic Transactions Act, 2063 (2006). While Sections 45 and 46 penalize unauthorized computer access and system damage, and Section 47 regulates illegal electronic content (carrying penalties up to one lakh rupees in fines, five years imprisonment, or both), the framework struggles to keep up with modern complexities.
The Act predates advanced technological ecosystems. Addressing modern crimes such as artificial intelligence deepfakes, cryptocurrency-related fraud, ransomware attacks, cloud crimes, and cross-border cyber assaults requires sweeping legal overhauls.
Future laws must clearly define offenses, manage digital evidence, clarify service provider liabilities, protect victims, and govern international investigative jurisdictions.
3. Balancing Cybersecurity with Human Rights and Free Speech
Efforts to combat cybercrime must not infringe upon democratic values. Criminalizing legitimate civic expression, investigative journalism, or fair public criticism under the guise of cyber-regulation threatens open governance.
Legislative boundaries between actual cyber offenses and protected public criticism must remain precise and proportional. Robust judicial oversight and strict reliability standards for digital evidence are essential to protect human rights while ensuring security.
4. Strategic Solutions for a Secure Digital Future
Mitigating digital threats requires a comprehensive, multi-layered national approach:
Institutional Coordination: Cybersecurity cannot rest solely on the shoulders of the Nepal Police. Effective synergy is vital among IT ministries, Nepal Rastra Bank, telecommunication providers, commercial banks, fintech wallets, ISPs, and private stakeholders.
Cross-Border Cooperation: Because servers, financial endpoints, and cyber attackers often operate internationally—such as massive cross-border crypto scam networks exceeding three billion rupees linked between Nepal and India—mutual legal assistance and international policing frameworks are indispensable.
Citizen Cyber Hygiene: Individuals must act as the first line of defense by deploying strong multi-factor authentication (MFA), avoiding suspicious links, keeping banking credentials private, and validating unsolicited financial calls.
Three-Tier Systemic Reform: Long-term success relies on enacting human rights-friendly cyber laws, upgrading digital forensic and investigative capabilities, and extending continuous digital literacy training from basic schools up to public administrative sectors.
Conclusion
Cybersecurity is no longer a secondary component of technological development; it is an absolute pillar of national security and clean governance. By integrating legal clarity, advanced institutional capacity, ongoing public awareness, and robust cross-border cooperation, Nepal can successfully build a safe, reliable, and rights-respecting digital society.
(The author is an Under Secretary at the Government of Nepal.)
For more: Web of Cybercrime in Nepal
