Why is this important
Exemption from fraudulent loans will protect thousands of victims who are now being prosecuted by collectors for debts processed by criminals. Cybercrime has increased 68 times (since 2020) — a critical level. The 1.2 trillion soum ($100 million) loss for 2025 hits citizens and businesses. The lack of personal data protection, open company databases, and weak cybersecurity of banks create conditions for attacks.
What happened
- The Ministry of Internal Affairs proposed to exempt citizens from microloans issued by fraudsters;
- Cybercrime has increased 68 times since 2020 — 46 thousand in 2025, with a loss of 1.2 trillion;
- It is planned to block suspicious accounts around the clock;
- Create a registry of personal data operators, tighten the responsibility;
- Mirziyoyev instructed to strengthen the Cybersecurity Center and introduce 7 new expert reviews.
Exemption from fraudulent loans
Fraudsters are issuing microloans to citizens through stolen passports, hacked OneIDs, and fake powers of attorney. Victims learn about debts when collectors demand repayment. Now the courts do not release from obligations — it is difficult to prove fraud.
New proposal from the Ministry of Internal Affairs: automatic exemption from microloans issued without knowledge if fraud is detected.
Round-the-clock account lock
The system will automatically block suspicious bank accounts 24/7 if there are signs of fraud: mass transfers, unusual operations, attempts to withdraw large soums.
Register of personal data operators
- Problem: companies store customer data in open databases — passports, phones, addresses. Leaks lead to fraud.
- Solution: create a registry of operators (banks, telecoms, internet providers, e-commerce), mandate data encryption, establish cybersecurity standards.
Strengthening of responsibility
Administrative and criminal liability will be introduced for leakage, misuse, and sale of personal data: fines of up to 500 million soums, license revocation, and imprisonment.
Cybercrime
- 68-fold increase: since 2020, cybercrimes have soared from ~670 to 46 thousand in 2025.
- Damage: 1.2 trillion soums ($100 million) for 2025 — losses of citizens and businesses from embezzlement, fraud, and extortion.
- Methods: phishing (stealing passwords), OneID hacking, fake bank websites, ransomware, SIM-swap (seizure of phone numbers).
New types of crimes
- Attacks on “smart” devices: breaking into smart homes, surveillance cameras, spy cars, extortion.
- Crypto-asset theft: breaking into crypto-wallets, exchanges, deceiving investors through fake projects.
Strengthening the Cybersecurity Center
Mirziyoyev instructed to increase the capacity of the Ministry of Internal Affairs Center: increase staff, purchase equipment, introduce 7 new examinations for the prompt detection of cybercrimes (blockchain analysis, IoT hacking, phishing, extortionists).
Context
- Cybercrime is the #1 threat: a 68-fold increase demonstrates the scale of the problem. Digitalization without proper protection created conditions for attacks.
- Micro-loans and fraud: the MFO market grows by 30-40% annually, but the lack of protection allows fraudsters to process loans based on other people’s documents. “Loan ban” (150 thousand users) partially solves the problem, but does not exempt from already issued loans.
- Open databases: Many companies store personal data without encryption. Leaks are sold on the dark web for $100-1000, used for fraud.
- Weak cyber security of banks: banking systems are not sufficiently protected from attacks. DDoS, phishing, hacking allow you to steal millions.
