Kathmandu. As the festive season approaches in Nepal, there is a rapid increase in digital payments and online transactions. However, taking advantage of this opportunity, there is also a risk of cybercriminals increasing their activities.

In this context, the Information Security Response Team Nepal has issued a Cyber Security Advisory 2026 directing the banking sector, payment service providers and the general public to adopt high alertness.

According to the Cyber Security Advisory 2026 issued by Information Security Response Team Nepal, there is a high possibility of deadly cyber-attacks like phishing, ransomware, and distributed denial of service targeting financial systems and personal accounts during the festival.

5 Key Security Standards for Financial Institutions and Payment Gateways

The Information Security Response Team Nepal’s Cyber Security Advisory 2026 focuses on five technical safeguards for banks, financial institutions, payment system operators, and digital financial app service providers.

The security operation center should be activated round the clock to immediately identify suspicious activities that may take place in the online transaction and system.

Strict filtering will be implemented to prevent fake emails and messages coming in the name of festive discounts, offers, or gifts from entering the institutional system.

The servers, VPNs and mobile banking apps are updated with timely security patches and run-time application self-protection technology.

To prevent DDoS attacks that disrupt services, it is important to coordinate with the ISP to activate the anti-DDoS system and maintain a secure offline backup of key data.

It will automatically track unusual or high-value transactions and immediately suspend accounts or take action if suspicious activity is detected.

3 Important Cybersecurity Tips for Consumers

The Cyber Security Advisory 2026 has advised consumers to take the following three main precautions to avoid financial fraud during the festive season.

Do not accidentally click on attractive links such as “cashback”, “gifts”, or “lottery” that appear on social media, SMS or WhatsApp.

No bank or digital wallet asks for OTP, PIN or password through phone or message. Do not share these details with anyone.

Do not make mobile banking or online payments using open Wi-Fi available at bus parks, cafes, or public places.

Where to contact in case of cyber fraud or incident?

If you are a victim of any suspicious online activity, phishing messages, or banking fraud, contact your concerned bank or financial institution immediately and block the account. Also, the Cyber Security Advisory 2026 has been requested to register the details of the incident with the Cyber Bureau of Nepal Police.