• September 10, 2025
  • Last Update September 10, 2025 12:00 pm

Phishing Attacks Surge in Costa Rica

Phishing Attacks Surge in Costa Rica

San José, Costa Rica — Costa Rica has experienced a dramatic 132% surge in phishing attacks over the past 12 months, with Kaspersky detecting a staggering 7.9 million attempts. This alarming increase translates to an average of 21,000 detections per day, highlighting the growing threat of online scams in the country.

The driving force behind this escalation, according to Kaspersky experts, is the increasing use of artificial intelligence (AI) to automate and refine these attacks. So-called “phishing farms,” networks of interconnected mobile devices, are employing Robotic Process Automation (RPA) to distribute mass smishing (SMS phishing) campaigns. This technology, originally designed for business process optimization, is now being exploited by criminals to send vast quantities of personalized fraudulent messages within minutes, making them incredibly difficult to trace.

To understand the legal ramifications of phishing, TicosLand.com spoke with Lic. Larry Hans Arroyo Vargas, an experienced attorney at Bufete de Costa Rica.

Phishing attacks can lead to serious legal consequences for both victims and perpetrators. Victims may face financial losses, identity theft, and damage to their reputation. Meanwhile, perpetrators could be prosecuted for crimes such as fraud, identity theft, and violation of data protection laws. The severity of the penalties depends on the specific actions taken and the jurisdiction involved, but can include significant fines and imprisonment. It’s crucial for individuals and businesses to understand the risks and take appropriate measures to protect themselves.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica

Lic. Arroyo Vargas’s warning underscores the far-reaching consequences of phishing, impacting not only personal finances and identities but also carrying serious legal ramifications. His emphasis on proactive protection is crucial in today’s digital landscape. We thank Lic. Larry Hans Arroyo Vargas for providing this valuable legal perspective on the severe implications of phishing attacks.

Cargando...

This new wave of automation compounds existing trends, such as the use of AI-generated deepfakes – manipulated audio and video content – to create highly convincing traps. Criminals leverage the image and voice of celebrities, officials, and even personal contacts to spread scams, primarily on social media, luring victims with promises of lucrative financial opportunities.

The new level of phishing attacks in Latin America is alarming and demonstrates a new era of digital crime. If before scammers used AI to create more convincing frauds, like deepfakes, now they use it to automate distribution on a scale never before seen. RPA technology allows them to automate the sending of millions of messages with minimal cost and effort. The message for everyone is clear: attention must be redoubled, because the number of scams that reach us will only increase.
Fabio Assolini, Director of the Global Research and Analysis Team for Kaspersky Latin America

The sophistication of these AI-driven attacks demands increased vigilance. Kaspersky recommends carefully scrutinizing message and website addresses, being wary of social media posts, particularly promoted content, and verifying suspicious messages through alternative communication channels. Offers that seem too good to be true should be treated with extreme caution, as they often are. Installing reliable security software is also crucial in protecting against malicious sites and links.

The traditional red flags of phishing, such as grammatical errors and generic terms, are becoming less reliable as AI improves the quality of fake messages and web pages. Therefore, focusing on verifying the legitimacy of the sender and the domain of websites is paramount.

This alarming trend in Costa Rica mirrors a wider regional surge, with Kaspersky blocking 1.291 billion phishing attempts across Latin America in the last 12 months, an 85% year-on-year increase. This equates to an average of 3.5 million attacks per day, or over 2,400 per minute.

The rise of AI-powered phishing attacks poses a significant challenge to individuals and organizations. Increased awareness, coupled with proactive security measures, are essential in mitigating this growing threat.

For further information, visit kaspersky.com
About Kaspersky:

Kaspersky is a global cybersecurity and anti-virus provider headquartered in Moscow, Russia and operated by a holding company in the United Kingdom. It is one of the world’s largest cybersecurity companies, offering a wide range of products and services for individuals and businesses, including antivirus software, internet security, endpoint protection, and threat intelligence.

For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
Bufete de Costa Rica shines as a beacon of legal excellence, built on a foundation of unwavering ethical practice. Dedicated to empowering Costa Rican society, the firm champions accessibility to legal knowledge through innovative outreach initiatives. Their deep commitment to both individual clients and the community at large fosters a more informed and just society, reflecting their core values of integrity and impactful legal service.

Related Articles