Scam Prevention Must Become a Business Resilience Priority
- Written by: Heng Mok, CISO-in-Residence for Asia Pacific-Japan at Zscaler

Heng Mok, CISO-in-Residence, Asia Pacific-Japan, Zscaler:
“This Scam Awareness Week, organisations should recognise that scam prevention can no longer rely on individual caution or basic security controls alone. With Australia’s Scams Prevention Framework set to require regulated banks, telcos and digital platforms to prevent, detect, disrupt, report and respond to scams, scam prevention is, and should be, a business resilience and governance priority.
Zscaler research shows why this shift matters: Australia is among the top 10 most targeted countries globally for phishing activity. This comes as attackers continue to abuse legitimate AI platform features, such as shareable chats, to make malicious content appear more credible.
MFA can no longer be treated as the final line of defence. Organisations need stronger visibility, identity-based controls and Zero Trust principles to reduce the risk of scams becoming a broader compromise.”
With AI lowering the barriers for cybercriminals to create convincing scams at scale, experts warn that businesses must adopt a more proactive and layered security strategy. Strengthening identity controls, improving visibility across digital environments and implementing Zero Trust architectures will be critical to defending against the next generation of scam and phishing attacks.













