Super Poll revealed that the public is worried about cyberattacks and fears losing assets without recovery. They acknowledged that online scammers have been active in the past six months and proposed a five-point plan to address cybersecurity risks.
On 1 Nov 2026 GMT+7, Associate Professor Dr. Nopadol Kannika, founder of Super Poll, disclosed survey results on "Cybersecurity Risks and Confidence in Financial Services." The study surveyed 1,248 people across all professions nationwide from 30–31 Oct 2026 GMT+7, using a mixed method of online self-responses and interviews. It examined concerns about system breaches, unauthorized account access, data leaks, and the need for consumer protection in financial services. The survey covered online banking and digital asset platforms, assessing overall provider system risks, user account risks, and scams aimed at extracting information or money, to clearly reflect each problem type.
The survey found that 69.7% worry about unauthorized account access or transactions, 85.2% fear personal and financial data leaks, and 73.8% are concerned about not receiving timely assistance when incidents occur.
Regarding experiences in the past six months, 85.1% reported being targeted by online scammers through messages such as SMS, LINE, or phone calls attempting to deceive them, while 18.9% had actually lost money or assets due to scams.
As for what the public expects from service providers, 87.4% want systems to detect and block suspicious transactions, 91.9% desire emergency help channels available 24/7, and 90.3% want quick alerts when incidents happen, including explanations of which data or assets may be affected and what actions users should take.
Additionally, 95.3% want clear, fair processes to verify damages and consider compensation with progress tracking, while 83.4% want independent security assessments disclosed at a level understandable to the public without compromising system security.
When asked about factors building confidence in services, 86.1% prioritized the ability to prevent and contain incidents, 82.4% valued straightforward communication, and 80.9% stressed fair treatment of victims. The priority ranking was based on actual survey results.
Super Poll recommended that regulators, banks, and digital asset providers use these findings to enhance consumer protection covering prevention, detection, incident containment, alerting, and recovery, with clear responsibilities and timelines for public tracking. They should promote practical public knowledge, such as verifying contact channels before sharing information, not revealing passwords or verification codes, using appropriate authentication methods, and knowing how to report incidents. Concurrently, systems should reduce user errors, and cybersecurity must be measurable before and after incidents. The public should know who protects their money and data, and how help will be provided if problems arise.
Once attacked, the best approach is to limit damage, safely recover, and promptly compensate while addressing root causes. Organizations should prepare five mechanisms before incidents:
1. Emergency decision-making authority
2. Manuals and rehearsed response systems
3. Separate, clean recovery systems
4. Liquidity and clear compensation criteria
5. Coordination networks and protocols to immediately contact relevant parties
