In today’s digitally connected world, cybercrime is no longer just about hacking systems-it’s about hacking people. Social engineering, the psychological manipulation of individuals into divulging confidential information, has become one of the most potent weapons for cybercriminals in Bangladesh and beyond.

From fake bKash/Nagad/Rocket/Bank Cards refund calls to impersonated Facebook profiles luring users into financial traps, social engineering attacks are growing alarmingly. Most victims are not tech illiterate-but trustful, and attackers exploit exactly that.

Our investigations at the Cyber Crime Investigation Division (CCID), DMP, reveal that many high-profile cyber frauds originate not from sophisticated malware, but from simple human deception. Criminals use social media, voice phishing (vishing), fake job offers or emotional manipulation to extract OTPs, passwords, or personal details.
Here are the different types of cybercrime, categorized by method and intent:
✅ 1. Financial Cybercrime: Phishing (fake emails/SMS to steal info); Online banking/Mobile finance fraud; Credit card cloning; Investment scams; Cryptocurrency fraud.
✅ 2. Identity & Data Theft: Social media account hacking; NID/Passport data misuse; SIM swapping; Deepfake misuse for impersonation.
✅ 3. Cyber Harassment & Exploitation: Cyberbullying; Revenge porn, Blackmail using private images, Online stalking (cyberstalking), Fake profile creation.
✅ 4. Hacking & Unauthorized Access: Website defacement, System intrusion/server breach, Ransomware attacks, IoT device hacking.
✅ 5. Cyber Terrorism & Misinformation: Spreading extremist propaganda, Fake news to incite panic or violence, Denial-of-service (DoS) attacks on critical systems.
✅ 6. Child Exploitation: Child sexual abuse material (CSAM), Online grooming, Use of dark web for trafficking
✅ 7. Intellectual Property & Content Crimes: Software piracy, Illegal streaming/movie download sites, Copyright & trademark violation.
✅ 8. Corporate Espionage: Data breaches to steal business secrets, Employee email spoofing, Business Email Compromise (BEC).
Key Risks We Face: Mobile Financial Services (MFS) Fraud, Phishing Links via SMS/WhatsApp, Deepfake & AI-generated Identity Scams, Fake NGO or COVID-era aid fraud schemes.
What Can the Public Do? Never share OTPs or PINs, even with someone claiming to be from a bank or police, Verify links and caller identity before taking action, Report suspicious activity to 999 or the DMP Cyber Help Desk, To prevent cybercrime effectively, both individuals and organizations should follow a combination of technical, behavioral, and legal measures.
✅ For Individuals: 1. Use Strong Passwords: Use complex, unique passwords; enable 2FA (Two-Factor Authentication), 2. Be Cautious of Links & Messages: Never click suspicious links (phishing), especially from unknown sources, 3. Update Software Regularly: Keep apps, OS, antivirus up to date to fix security holes, 4. Secure Social Media & MFS Accounts: Use privacy settings; avoid sharing personal info publicly, 5. Avoid Public Wi-Fi for Financial Transactions: Use VPN if necessary, 6. Report Quickly: Call 999 or contact DMP Cyber Help Desk (CCID) or nearby Police Station if you’re a victim.
✅ For Organizations: 1. Employee Awareness Training: Regular sessions on phishing, fraud, and secure data handling, 2. Install Firewalls & Antivirus: Use endpoint security and intrusion detection systems, 3. Backup Critical Data: Regular encrypted backups to prevent ransomware loss, 4. Monitor & Log Activities: Track system and user activities to detect anomalies early, 5. Implement Access Controls: Grant access only on a “need-to-know” basis
✅ Legal & Policy Measures: Promote awareness of laws like Cyber Protection Ordinance, 2025 & Pornography Control Act, 2012; Enforce strict KYC in MFS/banking; Encourage responsible use of social media; Support and empower law enforcement cyber units.

Call to Action:

Law enforcement is evolving, but public awareness is our strongest defense. Cybercrime is not just a tech issue-it’s a social one. Together, we can fight it.
Written By: Md Golam Rosul
Cybercrime Investigator
Cyber Crime Investigation Division
Dhaka Metropolitan Police