The dark side of Southeast Asia's e-commerce boom

The dark side of Southeast Asia's e-commerce boom

In the vibrant digital landscape of Southeast Asia, a silent threat is undermining the region's explosive e-commerce growth: cyber fraud.

Dr Joshua Dwight, an RMIT University lecturer and researcher specialising in digital fraud, warns that the same technological accessibility driving Southeast Asia's digital transformation is creating unprecedented opportunities for cyber criminals.

In Vietnam alone, where over half the population shops online, the e-commerce sector is expected to grow by 18% this year, reaching US$22 billion in value. This is the third fastest growth rate behind the Philippines (23%) and Thailand (19%). However, with this rapid growth comes an equally rapid evolution of digital threats.

"E-commerce is highly targeted because it is very easy to access and hard to control," said Dr Dwight, highlighting a critical vulnerability in the region's digital ecosystem.

Cyber criminals employ various tactics to exploit e-commerce platforms. "They might create a fake website that connects you to the real e-commerce website, with the same look and feel. While the fake site forwards your information to the actual platform to complete legitimate purchases, it simultaneously collects your data for future fraud," Dr Dwight explained.

Beyond such deceptive interfaces, attackers can target e-commerce platforms directly. They can launch denial-of-service attacks to break down the website or attempt malicious code injection attacks to breach the platform's security. 

The RMIT academic added that even the advertising systems can be compromised – platforms sometimes fall victim to "malvertising" where seemingly legitimate advertisements lead users to fraudulent sites. Many organisations, such as social media, do not conduct due diligence on the “marketers” to verify whether they are real companies or not. They usually just concentrate on the ad sales.

In Vietnam, the National Cyber Security Centre's weekly reports are alarming: the majority of the identified phishing websites in the reports are fake bank or e-commerce platforms. Dr Dwight said that these might not be isolated incidents but part of a systematic, tech-enabled criminal infrastructure.

Beyond phishing and direct attacks

Scam compounds are a related issue that Dr Dwight is investigating in collaboration with a non-profit organisation. This is a rising crime in Southeast Asia where criminals use job sites and social media to recruit people into fake jobs, human trafficking them into facilities in Myanmar and Cambodia to commit cyber crime. Such crimes include but are not limited to e-commerce fraud.

What makes these crimes particularly harmful is their escalating impact. As Dr Dwight explained, there can be significant second-level harm. What starts as a seemingly simple online scam can rapidly transform into more severe crimes: human trafficking, forced labour, money laundering, and even physical assault.

Deviant behaviours are also a common, yet often overlooked, aspect of e-commerce fraud. These activities usually take advantage of business policies focused on providing a great customer experience such as free shipping and returns.

“You have people who buy a product and it gets shipped to them, but they falsely claim that they did not receive it. Most of the time the e-commerce sites will give a refund because they are trying to make the customer experience as nice as possible,” Dr Dwight said.

“Or somebody might open an online shop and get their friends writing hundreds of positive reviews. That is not necessarily illegal, but not exactly ethical either. Yet, such deviant behaviours can cost consumers and e-commerce sites a lot of money.”

Consumer shopping online E-commerce is growing rapidly in Southeast Asia. (Photo: Mymemo - stock.adobe.com)

The delicate balance: Convenience vs. security

For e-commerce platforms, preventing fraud is a complex challenge. "They have an ethical dilemma," Dr Dwight explained.

"Do they accept potential losses from fraud, or do they risk losing customers by implementing stringent security measures? With rising competition among e-commerce sites, any extra friction in the customer’s buying journey might deter them from completing a transaction.”

Dr Dwight advocates for a multi-stakeholder approach: Merchants need to strengthen their capabilities to identify and mitigate risks. The identity verification processes are particularly important, though this remains challenging in markets where digital adoption is rapidly outpacing security infrastructure.

"Some merchant sites allow a guest checkout, some require account creation. But even with account creation, someone can use a SIM card and stolen information to create a fake account that platforms do not or cannot properly verify with the account holder," he noted.

For users, Dr Dwight emphasised the importance of vigilance, particularly in Southeast Asian markets where data privacy protections may be less robust. "Even just your address, full name and phone number would be enough to do quite a bit of harm. Try not to share your information unnecessarily, and always verify links before clicking,” he warned.

Government regulators and law enforcement face their own challenges in the region. "It's very difficult for law enforcement in Southeast Asia to handle these types of crimes because many of them are small scale and cross-border," said Dr Dwight. This highlights the need for enhanced regional cooperation and standardised cybercrime response protocols.

Contact Dr Joshua Dwight for deeper insights into:

  • Emerging fraud patterns in Southeast Asian e-commerce
  • The impact of scam compounds on digital economies
  • Strategies for balancing user experience with robust security
  • The human and technological dimensions of cyber crime

Please send your media enquiries to communications@rmit.edu.vn.

Related news