A growing disconnect between perceived digital awareness and actual vulnerability is exposing millions of users in the Middle East, Turkiye and Africa (META) region to online scams, according to a recent survey by Kaspersky.
The report reveals that while a significant proportion of users express confidence in their ability to identify scams, real-world exposure remains widespread, highlighting a persistent gap between awareness and behaviour in an increasingly complex cyber threat environment.
According to the findings, 36 percent of respondents across the META region said they had encountered an online scam or attempted fraud within the past year. More concerning, 37 percent admitted they had fallen victim to such schemes, leading to financial losses or compromised personal data.
The data suggests that cyber threats are not only frequent but also effective, with attackers leveraging a wide range of channels to reach potential victims.
Social media platforms emerged as the most common entry point, with 49 percent of affected users reporting scam encounters through these channels. Investment and financial fraud attempts followed closely at 48 percent, reflecting the growing sophistication of schemes targeting users’ financial decisions.
Other prevalent tactics include phishing emails, which impacted 43 percent of respondents, as well as fake delivery or postal scams, reported by 41 percent. The spread of these methods across multiple platforms points to an increasingly diversified threat landscape, where cybercriminals adapt quickly to user behaviour and digital trends.
Despite the scale of exposure, user confidence remains notably high. The survey found that 80 percent of respondents believe they can recognise an online scam, with 34 percent expressing strong confidence in their ability to avoid falling victim.
This level of self-assurance, analysts say, may be contributing to reduced vigilance, as users who overestimate their ability to detect threats are less likely to adopt cautious online practices.
Protective behaviours among respondents also reveal inconsistencies. While 57 percent reported using strong and unique passwords, fewer users demonstrated more advanced or consistent security habits. Only 36 percent said they regularly verify website links before clicking, and 34 percent avoid using public Wi-Fi for sensitive activities.
The adoption of dedicated cybersecurity tools remains limited, with just 40 percent of respondents using a security solution, leaving a large segment of users exposed to potential threats. Notably, 6 percent indicated they do not use any form of security protection at all.
Routine maintenance of digital security also appears weak. Only 35 percent of respondents said they update passwords and review security settings regularly, while 41 percent do so occasionally. A further 19 percent rarely take such actions, and 5 percent never review their security settings.
Seifallah Jedidi, head of consumer channel for META at Kaspersky, said the findings highlight the urgent need for stronger cybersecurity awareness and more disciplined user behaviour.
“While individual habits such as password hygiene and cautious browsing are essential, they should be complemented by reliable security solutions and regular security updates to effectively mitigate modern cyber threats,” Jedidi noted.
Kaspersky also reminded consumers of basic online safety rules, including verifying unsolicited messages or links even when they appear legitimate, and never sharing confidential information such as one-time passwords sent via SMS or push notifications.
It further advised users to limit the sharing of sensitive personal or work-related information online, avoid entering payment details on questionable websites, and remain cautious of offers that appear too good to be true, which are often fraudulent.
The cybersecurity firm also urged users to install trusted security solutions with updated databases capable of detecting phishing sites, scams and spam, stressing that consistent digital hygiene remains critical in reducing exposure to evolving online threats.
