Cybersecurity Resilience in Nepal: A Critical Imperative for a Rapidly Digitalizing Economy

Nepal stands at a pivotal moment in its digital evolution. With digital adoption accelerating across all sectors—banking, government, commerce, and everyday consumer life—the nation is simultaneously experiencing unprecedented growth and unprecedented risk. This dual reality framed the discussions at a recent high‑level cybersecurity workshop focused on strengthening cyber resilience, where stakeholders from the financial sector, government, law enforcement, and international partners convened to address emerging threats and strategic priorities.

A Nation Rapidly Digitalizing—and Increasingly Exposed

Digital connectivity in Nepal has expanded at record speed. By 2025, more than 16.5 million Nepalis were online, representing over 55% of the population, with over 39 million mobile connections—exceeding the country’s total population. The digital ecosystem has enabled broader financial inclusion, streamlined services, and increased access to essential platforms.

However, this rapid adoption has been mirrored by a rise in cyber threats. Hackers, scammers, and organized cybercriminal groups are targeting Nepal’s expanding digital infrastructure. Data breaches, ransomware attacks, phishing campaigns, identity theft, and social media‑related crimes continue to grow annually. According to national incident records, cybercrime in Nepal is surging with over 18,900 cases reported in the fiscal year 2024-25, averaging over 50reported cases per day, underscoring the urgency for collective action.

Pressure Points in the Financial Sector

Nepal’s banking industry has undergone profound digital modernization. Digital banking, mobile wallets, instant payments, and several integrated financial platforms have greatly improved customer experience and operational efficiency. At the same time, the interconnected nature of these systems has widened the threat surface.

Cyberattacks targeting banks have grown more sophisticated and coordinated. Incidents such as phishing‑driven fraud, data leaks, unauthorized transactions, and system disruptions illustrate the vulnerabilities of an interconnected ecosystem. A single breach has the potential to affect hundreds of thousands of customers, disrupt operations, and erode trust in the financial system.

Past security incidents—both domestic and international—serve as reminders of what is at stake. Breaches have compromised critical government platforms, banking networks, and service providers in Nepal. Global incidents, such as the well‑known SWIFT system attack on Bangladesh Bank in 2016, demonstrate how cybercrime can infiltrate even the most secure institutions and inflict far‑reaching economic consequences.

The Need for Coordination, Preparedness, and Shared Responsibility

Cyber risks do not affect isolated organizations; they threaten the entire financial and digital ecosystem. Effective protection requires collaborative defense, strategic coordination, and real‑time information sharing among stakeholders. Regulators, banks, law enforcement, government agencies, and private‑sector partners must operate with synchronized priorities and clear communication channels.

In recent years, sector‑wide awareness and preparedness programs have expanded across Nepal. Workshops, dialogues, and capacity‑building initiatives have strengthened foundational understanding of cyber threats. These initiatives now extend to the provincial level, ensuring that institutions beyond major cities gain access to cybersecurity training and guidance.

A major initiative highlighted at the workshop is the upcoming cybersecurity awareness and capacity‑building program across all seven provinces, conducted in partnership with VISA. This outreach is expected to benefit banks, financial institutions, and regional stakeholders, promoting a unified approach to resilience.

Aligning National Goals With Cybersecurity Priorities

Cybersecurity is now recognized as a critical national priority—integral to digital governance, economic stability, and national security. Governmental bodies and regulatory agencies are increasingly emphasizing cybercrime control, framework modernization, and stronger oversight of digital systems.

For Nepal to safeguard its digital future, alignment between government policies, regulatory expectations, and industry practices is essential. Strengthening cyber resilience is not merely a defensive necessity but a foundational requirement for sustaining public trust, financial stability, and long‑term digital transformation.

Toward a More Resilient Cyber Future

The overarching message was clear: building a cyber‑resilient Nepal requires cohesive action, timely coordination, and strengthened preparedness across all institutions engaged in the country’s digital transformation. Cybersecurity is no longer a technical issue managed in isolation—it is a national imperative requiring leadership, investment, and unified commitment.

As Nepal accelerates toward a digital economy, the resilience of its financial and technological infrastructure will define the strength and security of its future.

This article is developed based on the speech delivered by Mr. Surendra Raj Regmi, CEO, Global IME Bank, at the program “Cyber Security in the Digital Economy”, on January 28, 2026, organized by Kathmandu FinTek.