Colombia faces 2,803 cyberattacks a week

FortiGuard Labs recorded an average of 2,803 cyberattacks a week against organizations in Colombia during the first quarter of 2026, according to Portafolio. The firm described tactics aimed at stealing credentials, obtaining sensitive information and diverting payments. Recent coverage has also added warnings about digital fraud targeting users and companies in the country.

What tactics are being seen?

Available reporting shows a broad mix of fraud schemes that combine impersonation, access theft and money diversion. El Colombiano reported cases of phishing, identity theft, malware, ransomware and credential theft in Colombia, while Portafolio added payroll fraud as a practice that alters employees’ bank accounts or impersonates identities to divert disbursements.

In the same vein, Portafolio said credential theft can open the door to corporate and financial platforms. The risk is not limited to email or social networks. It also affects internal payment processes and sensitive movements inside organizations.

What do the sources recommend?

The recommendations in the reports focus on tightening access and watching for signs of misuse. El Colombiano suggested enabling multifactor authentication and checking credit history regularly to detect unfamiliar products or transactions.

Noticias RCN, in a warning attributed to Bogotá’s city government, reported scams in which criminals pose as representatives of financial institutions or virtual assistants and ask for passwords, verification codes or dynamic passcodes. In that report, the guidance attributed to the Financial Superintendence was to verify alerts through official channels and not share credentials.

What other data appears in the reports?

Some publications provide figures or institutional totals, although with attributions that require review. La República reported that the Superintendence of Industry and Commerce had received 40,316 identity theft complaints since 2020, according to a statement attributed to the agency.

DPL News, for its part, attributed to the Police Cyber Center more than 64,000 reports of digital scams in Colombia during 2025, including impersonation of financial institutions, fraudulent messages and WhatsApp account theft. Diario del Sur also reported a high-risk alert attributed to ColCERT about 27 Colombian organizations exposed to admin interfaces and 2,436 compromised interfaces, with a recommendation to enforce two-factor authentication for administrative and VPN access.