Full Report
Brunei has raged up its efforts to fight cyber threats and online scams, with Minister of Transport and Infocommunications Yang Berhormat Pengiran Dato Seri Setia Shamhary bin Pengiran Dato Paduka Haji Mustapha revealing that 82 fraudulent websites and 557 phone numbers have been blocked since 2024. These actions were taken in collaboration with various agencies to protect citizens from cyber risks. The minister shared this information during the 21st Legislative Council session, responding to a question raised by Yang Berhormat Haji Mohd Salleh bin Haji Othman on the ministry’s initiatives to tackle smartphone hacking and scams. He emphasized that blocking fraudulent websites and phone numbers used for scams remains a continuous effort, undertaken in coordination with the Royal Brunei Police Force (RBPF), Unified National Networks (UNN), and local service providers. Brunei Key Initiatives to Combat Online Scams To strengthen Brunei’s cybersecurity framework, multiple measures and standard operating procedures (SOPs) have been put in place to handle complaints related to scam calls and fraudulent SMS. These SOPs ensure swift action against reported numbers and websites used in cyber fraud. A major initiative in tackling illegal activities involving calls and SMS is the re-registration of prepaid SIM cards. Implemented by the Authority for Info-communications Technology Industry of Brunei Darussalam (AITI) in collaboration with UNN, Datastream Digital Sdn Bhd, Progresif Sdn Bhd, and imagine Sdn Bhd, the programme runs from January 2 to December 31. Re-registration helps maintain an updated user database, aiding law enforcement in preventing the misuse of SIM cards for fraudulent activities, including scams and the spread of fake news. As of February 1, a total of 55,148 prepaid users, representing 13% of users, have re-registered their SIM cards. Efforts are ongoing to encourage more users to comply. Public Awareness and Collaboration AITI, along with service providers, continues to implement public awareness initiatives. Collaborating with Brunei Darussalam Central Bank (BDCB), RBPF, and non-governmental organizations, AITI has been conducting briefing sessions for senior citizens and youth to educate them about online security risks. Awareness materials such as posters and video clips have also been produced. Furthering the proactive approach, Cyber Security Brunei (CSB) held a workshop during last year’s cybersecurity conference, involving law enforcement agencies, BDCB, and Brunei’s three major banks. The workshop introduced technological methods to enhance fraud detection through the Fraud Intelligence Platform. CSB is considering adopting this platform to monitor and counter online scams effectively. A digital portal is also in development to serve as a public reference for identifying elements used in scams and fraud activities. Additionally, efforts are being made to introduce a mobile app with functionalities similar to the portal, allowing users to easily report and track scam activities. Strengthening Digital Safety and Fact-Checking AITI has established a centralized fact-checking platform to combat misinformation and scams. This platform plays a crucial role in verifying and disseminating authentic information to increase public awareness of online threats. As a result of these efforts, law enforcement agencies have successfully arrested individuals linked to online fraud, with several cases brought to court. Regulating Social Media and Protecting Children Online Responding to a query from Yang Berhormat Hajah Safiah binti Sheikh Haji Abdul Salam regarding measures to balance children’s social media usage with technological needs, the minister stated that Brunei is reviewing regional strategies, particularly from ASEAN and Australia. Through platforms like the ASEAN Digital Senior Ministers Meeting and the ASEAN Senior Officials Meeting Responsible for Information, Brunei is working towards a collective approach in addressing harmful social media content. AITI is in direct contact with Meta (which owns Facebook, WhatsApp, and Instagram) to discuss safeguarding children from online crimes and inappropriate content. Last year, a working visit by Brunei’s National Cyber Security Committee to Meta’s Singapore office facilitated discussions on tackling cybersecurity threats, including fake news, online fraud, and AI misuse. Following these discussions, Meta agreed to appoint a focal contact point for collaboration with RBPF and AITI. The company also conducted workshops covering basic subscriber information management, refresher courses, and self-management platform training for Brunei’s cybersecurity agencies. Blocking Immoral Websites and Challenges in Content Regulation The minister also highlighted Brunei’s ongoing efforts to block websites that violate the Internet Code of Practice. Over the past five years, 135 websites containing immoral elements have been blocked. However, regulating content on social media remains a challenge, as platforms operate under varying community standards depending on their country of origin. A major obstacle in blocking harmful content is the use of Virtual Private Networks (VPNs), which allow users to bypass restrictions and access restricted content. To address this, AITI is working with key government agencies, including the Ministry of Education, the Ministry of Religious Affairs, and the Ministry of Culture, Youth, and Sports, to implement public awareness campaigns on responsible internet usage. In July last year, AITI also updated its online safety guidebook, providing parents and educators with steps to protect children from inappropriate online content. Additionally, the Brunei Computer Emergency Response Team (BruCERT) continues to educate the public through various programs focused on cybersecurity best practices. Towards a Safer Digital Future Brunei is also engaging with the International Telecommunication Union (ITU) to develop a comprehensive framework for children’s online safety. Discussions are underway to organize workshops involving key agencies to refine existing regulations and implement more effective digital safety measures. With a multi-agency approach and continuous public engagement, Brunei is reinforcing its cybersecurity infrastructure to counter online scams, protect children from digital harm, and ensure a secure online environment for all users.
Analysis Summary
# Industry News: Brunei Escalates Cyber Defense Against Online Fraud and Harmful Content
## Summary
Brunei's Authority for Info-communications Technology Industry (AITI) has significantly enhanced national cybersecurity by blocking 82 scam websites and 557 fraudulent phone numbers, signaling a stringent regulatory push against online crime. This action is part of a broader national strategy involving inter-agency collaboration, public awareness campaigns, and engagement with international bodies like the ITU to create a safer digital environment, especially for children.
## Key Details
- Date: March 5, 2025 (Date of publication, referencing recent activity)
- Companies Involved: Authority for Info-communications Technology Industry (AITI), Brunei Computer Emergency Response Team (BruCERT), various government ministries.
- Category: Regulatory Enforcement/National Cybersecurity Initiative
## The Story
The action was driven by AITI to combat growing instances of online scams and harmful content. Beyond blocking scam sites and fraud numbers, the government is focused on long-term resilience. Efforts include collaborating with the Ministry of Education, Religious Affairs, and Culture/Youth/Sports on public awareness, updating online safety guidebooks, and leveraging BruCERT for best practice education. A major challenge recognized is the circumvention of these blocks via VPNs and navigating content regulation on international social media platforms. Brunei is also working with the International Telecommunication Union (ITU) to develop a comprehensive framework for children’s online safety.
## Business Impact
### For the Companies Involved
- **AITI/Government Agencies:** Enhanced regulatory posture, potentially increasing workload for enforcement and public education teams. Demonstrates commitment to digital stability, which is crucial for attracting digital economy investment.
### For Competitors
- This is a national regulatory action, not commercial competition. However, it sets a precedent for rigorous consumer protection in the regional digital space.
### For Customers
- **General Public:** Increased immediate protection against identified online scams and fraudulent contact methods.
- **Parents/Educators:** Access to updated guidelines and educational resources aimed at protecting minors online.
### For the Market
- The market in Brunei is signaled to become more regulated concerning online activities, potentially increasing compliance burdens for local and international digital service providers operating or targeting users there. It highlights a growing global trend where nation-states prioritize direct enforcement against cybercrime infrastructure.
## Technical Implications
The reliance on blocking mechanisms suggests traditional perimeter defense strategies are in use. The acknowledgement of VPNs as a major obstacle indicates that future national strategies may need to incorporate deeper application-layer inspection or greater collaboration with ISPs to manage traffic integrity, though this remains technically challenging and controversial regarding privacy.
## Strategic Analysis
- **Market Positioning:** Brunei is positioning itself as a jurisdiction serious about digital safety and consumer trust, aiming to mitigate risks associated with rapid digital transformation.
- **Competitive Advantage:** A proactive stance on scam reduction enhances the country's reputation as a secure place for digital transactions, potentially attracting risk-averse businesses.
- **Challenges:** Regulating content on foreign-owned social media platforms and the use of VPNs present significant technical and jurisdictional hurdles that require sophisticated, potentially controversial, solutions.
## Industry Reactions
Specific analyst reactions are not detailed in the summary, but the action itself implies validation for cybersecurity vendors offering threat intelligence and take-down services, as government reliance on such measures increases.
## Future Outlook
- Expect continued efforts to expand the scope of blocked content/numbers as threat actors adapt.
- Watch for announcements regarding the specific outcomes of collaboration with the ITU on the children's online safety framework, which could influence regional security standards.
- Increased enforcement targeting the technical means users employ to bypass blocks (like VPN traffic).
## For Security Professionals
This serves as a case study in national-level defensive coordination against prevalent cybercrime vectors (scams and fraud). Security teams should note the importance of cross-ministerial cooperation (e.g., education, religious affairs) in holistic cybersecurity defense, moving beyond purely technical measures to encompass public education and policy integration.