Cyber Attackers May Fake Balances to Cause Customer Panic and Make Mistakes

Pakistan’s National Cyber Emergency Response Team (National CERT) has issued a fresh advisory warning banks and critical infrastructure operators about the growing use of artificial intelligence in cyber attacks.

The advisory, released earlier this week, highlights a rise in AI tools, automated bots, botnets and agentic systems. These technologies allow attackers to scan for weaknesses faster, steal login details at scale and launch coordinated assaults.

Banks and Payment Systems Under Pressure

Financial institutions face particular risks. Attackers could target core banking systems, digital platforms, payment gateways and customer apps.

One highlighted scenario involves manipulating account balances displayed on mobile apps. Customers might see incorrect figures and panic, even though the actual money in their accounts remains untouched.

Other warning signs include sudden spikes in automated login attempts, repeated failed sign-ins, unusual API requests and gaps between core records and information displayed to customers.

What Ordinary Users Can Do

Cybersecurity experts say ordinary citizens can reduce their exposure through a few practical steps.

First, users should limit how much personal and banking information they share online. Attackers often collect data from social media or deceive people through phone calls, messages and suspicious links. Users should avoid unknown links and never share one-time passwords with anyone who contacts them.

Four in Five Karnataka Petrol Pumps Found Selling Excess Ethanol-Blended Fuel

Second, customers should strengthen account protection. They should enable multi-factor authentication on banking and other online accounts, keep backup codes safe and use the privacy settings available in most apps.

Third, users should keep their phones and apps updated. Outdated software creates easy entry points for attackers. Customers should install updates promptly and avoid downloading apps from unofficial sources.

Shared Responsibility for Digital Safety

The advisory stresses that banks should strengthen multi-factor authentication, monitor automated activity and reconcile transactions independently. They should also check that customer-facing information matches their core banking systems.

Critical infrastructure operators have also been asked to limit remote access, separate IT and operational networks, and maintain backup procedures.

While institutions carry the main burden of defence, individual habits still matter. Simple precautions can stop many common attacks before they reach banking systems.

Staying alert to unexpected calls or messages, verifying balance changes directly with the bank and keeping devices updated remain essential everyday protections for users across the country.