More than 218,000 identity theft complaints strike Colombia's financial system in six months
The figure, reported by the country's banking association, reflects the growth of digital fraud and the sophistication of criminal organisations operating in cyberspace.
More than 218,000 identity theft complaints strike Colombia's financial system in six months
The first half of the year left a concerning balance for the national banking sector: 218,031 complaints from clients who were victims of fraud through misuse of their personal data. The figure, disclosed by the association that brings together the country's financial entities, shows that cybercrime is no longer a marginal phenomenon but a structural threat that grows unceasingly.
Scammers have perfected their tactics. They no longer limit themselves to cloning cards or sending fraudulent emails; now they construct complete profiles with stolen information, open accounts in the names of third parties and move funds through digital platforms. The technological transformation experienced by the nation—with the mass adoption of mobile payments, online shopping and internet banking—has, while making daily life easier, also expanded the attack surface for those who profit from others' information.
A striking detail from the report is that although the general percentage of suspicious operations fell to 2.3% during 2025, the most vulnerable moment in the process is no longer the transaction but registration. Opening a new account became the riskiest stage, with 7.2% of attempts classified as fraudulent. This shift in the focus of criminal activity requires rethinking where and how the user is protected.
The phenomenon is not exclusive to national territory. International organisations such as INTERPOL warn that networks dedicated to this type of crime operate in a transnational manner, with cells that coordinate across borders to exploit gaps in verification systems in different countries. The global assessment by the police organisation indicates that financial fraud has diversified in volume and sophistication, affecting identities, platforms and entire economies.
Faced with this reality, Congress approved Law 2573 of 2026, a regulation that tightens the obligations of digital companies in data protection and identity validation. The legislation establishes that ensuring client security ceases to be a voluntary good practice and becomes a legal duty. Those who fail to meet the standards could face sanctions.
Representatives of the private sector acknowledge the dilemma they face. On one hand, stricter controls may deter consumers seeking speed; on the other, permissiveness exposes institutions to million-pound losses and reputational damage. A survey cited by executives in the area indicates that eight out of ten local firms believe that fear of being defrauded reduces the number of people who complete their online registrations, and that more than half have detected an increase in abandonment of procedures due to security requirements considered excessive.
According to specialists, the bet is on developing tools that analyse user behaviour in real time without creating unnecessary friction. Risk-based models and behavioural biometrics allow detecting anomalies during browsing without requiring the honest client to complete multiple verification steps. The challenge for the second half will be for companies to manage to implement these solutions in time to comply with what the new law requires.
_Source: ITSitio_
Source: Google News CO — Crime