Hub · Cybersecurity

Cybersecurity in Kazakhstan

Data leaks, fraud schemes, personal data protection and corporate security — without panic, with concrete step-by-step instructions.

Topic navigation

Choose a topic

Latest

Latest in this section

Guides

Useful guides

Reader trust

How we cover technology

«The main cybersecurity rule: a 30-second pause protects better than any antivirus.»

Cifrum.kz covers cyber threats in Kazakhstan without panic but with concrete step-by-step instructions.

  • We rely on official sources: Ministry of Digital Development of Kazakhstan, Astana Hub, second-tier banks, peer-reviewed publications.
  • Every analysis is cross-checked with industry practitioners, engineers and executives.
  • Two-step editorial fact-checking and explicit disclosure of any conflicts of interest.
  • No sponsored content disguised as editorial material.
FAQ

Common questions

+What to do if you sent money to fraudsters via Kaspi?
First — immediately call the bank (1408 for Kaspi) and block the card. Second — file a police report (102) with the fraudster's phone number, transfer time and amount. Third — submit an official request through the mobile app asking the bank to halt the transaction. If the money hasn't been withdrawn from the recipient's account yet, there is a chance to reverse it.
+How to check if your data has leaked in Kazakhstan?
There are no government services in Kazakhstan to check leaks by IIN. Use international services like haveibeenpwned.com (by email) and dehashed.com. If data has leaked — change all passwords, enable 2FA, replace EDS via eGov.
+What's the penalty for spreading personal data in Kazakhstan?
Under the Code of Administrative Offences, fines for individuals — up to 60 MCI, for officials — up to 200 MCI, for legal entities — up to 1,000 MCI. Under the Criminal Code (Art. 147) for illegal collection or distribution — up to 3 years of imprisonment.
+Who has the right to demand an IIN in Kazakhstan?
IIN may be requested by government bodies providing services, banks opening accounts or issuing credit, notaries and medical institutions. Private companies — only with legal grounds (e.g. an employment contract). Shops and trade outlets have no right to demand an IIN.
+What is social engineering in plain language?
Social engineering is manipulating a person into giving fraudsters money, passwords or data themselves. A call from the "bank security service", an email from the "boss", a fake login page — that's social engineering. According to Kazakh bank statistics, 80% of fraud cases are exactly social engineering.
Editorial contacts

Contact the editors

Cifrum · Tsifrovoy RUM

Got a story, tip or question on this section?

Reach the editorial team by phone, email, messengers or via the contact form on /kontakty/.

071400, Republic of Kazakhstan, Semey,
26 Kabanbay Batyr St., office 227
Scroll to Top