2 weeks Ago
P akistan has reached a pivotal moment in its economic evolution, one where ambition and prudence must advance in lockstep. The government’s recent establishment of the Pakistan Crypto Council marks a bold step towards modernising the country’s financial architecture. However, as the digital tide rises, so too does the risk of systemic disruption.
The challenge now is to harness the promise of digital finance without sleepwalking into a cybersecurity crisis. The PCC’s composition, which brings together regulators, legal experts, industry leaders and academics, demonstrates Islamabad’s increasing appreciation for the transformative potential of digital finance. From central bank digital currencies to block-chain based land registries, this technology holds the promise of addressing some of Pakistan’s deepest economic wounds: informality, corruption, inefficiency and exclusion.
Given a large unbanked population and rapid digital adoption, decentralised finance could be the breakthrough needed to unlock true financial inclusion. For a nation brimming with youthful energy, the idea of leapfrogging legacy financial systems in favour of more agile, tech-enabled alternatives is understandably appealing. However, technology, despite its potential, is not a panacea.
A recent World Bank report, Cybersecurity Economics for Emerging Markets , provides a sobering counterpoint. Drawing on data from 190 countries, it outlines a 21 percent annual increase in cyberattacks from 2014 to 2023. Upper-middle-income countries like Pakistan have experienced the most significant rise in digital ambition.
The conclusion is clear: developing nations are now firmly in the crosshairs, often lacking the institutions, expertise or policy infrastructure to mount an impregnable defence. As Pakistan builds its digital financial infrastructure, its vulnerability to cyber threats will grow in lockstep. The digitisation of public services, banking and even elections brings undeniable efficiency and new exposure.
The 2022 ransomware attack in Costa Rica that paralysed more than 20 government departments and forced a national emergency declaration is a cautionary tale. The economic cost was estimated at 2.4 percent of GDP.
For Pakistan, already faced with fiscal constraints and macroeconomic uncertainty, a similar incident will be catastrophic. Cyberattacks are no longer isolated disruptions. They are systemic shocks having the power to ripple through supply chains, financial markets and public confidence.
A single breach in a government database or a major bank could stall investor interest and derail reform efforts for years. Pakistan’s cybersecurity readiness remains alarmingly limited. The World Bank has warned that most developing nations fall behind in crucial areas, including regulatory frameworks, research funding, public awareness and industry development.
If Pakistan hopes to see meaningful adoption of digital finance, it must embed cyber security into every layer of policy, from sandbox frameworks for fin-tech start-ups to the design of CBDCs and beyond. Pakistan has made some progress, with institutions, such as the National Response Centre for Cyber Crime and the Pakistan Computer Emergency Response Team leading the way. Nevertheless, cybersecurity expenditure remains minimal in comparison to global standards.
The disparity between ambition and preparedness is widening and poses significant risks. In this context, the creation of the PCC must be viewed as timely and essential. However, the council must not be allowed to operate in isolation.
Innovation and security cannot be treated as parallel tracks. Digital finance is fundamentally a matter of trust. That trust hinges not just on ease of use or product design but also on the security of users’ data, assets and identities.
If Pakistan hopes to see meaningful adoption of digital finance, it must embed cybersecurity into every layer of policy, from sandbox frameworks for fin-tech start-ups to the design of CBDCs and beyond. Too often in emerging markets, digital innovation is treated as a standalone goal, with risk relegated to an afterthought. That is a luxury Pakistan cannot afford.
Structural weaknesses in the cybersecurity ecosystem must also be acknowledged. Market failures abound, from information asymmetries and poor incentives for investment to the widespread externalisation of third-party risks. For a country where SMEs form the backbone of the economy, affordable and accessible cyber protection is not simply good governance; it is vital to national economic resilience.
Equally urgent is the need to invest in talent. The global shortfall in cybersecurity professionals exceeded four million in 2023. In Pakistan, the skills gap is particularly pronounced outside military or intelligence circles.
If the country is serious about digital finance, it must also be serious about building domestic cyber expertise through academic partnerships, R&D incentives and global collaboration. If managed effectively, the returns could be substantial. According to the World Bank, if a developing country can reduce its incidence of major cyber incidents from the top quartile to the bottom over a decade, its GDP per capita could increase by as much as 1.
5 percent. For Pakistan, with one of the youngest populations in South Asia and a rapidly digitising economy, this is a reward worth striving for. Pakistan is at a fork in the digital road.
One path leads to a future characterised by inclusion, efficiency and innovation, underpinned by resilience and trust. The other, though quicker, is more precarious and risks constructing a digital economy on unstable ground, vulnerable to the very shocks that have humbled far wealthier nations. The choice facing policymakers is clear.
The digital rupee could emerge as a symbol of empowerment and modernisation, or it could become an unprotected vault in a cyber storm. The writer is a senior lecturer in finance, leading international and trans-national education at Birmingham City University’s College of Accountancy, Finance and Economics..
