💻 Cybercrime Risk in Georgia

Cybercrime Risk in Georgia

The cybercrime risk indicator measures a country's vulnerability to digital crime — from phishing and bank fraud to state-sponsored cyberattacks and the overall maturity of national cybersecurity structures. With a score of 60/100 and global rank {{RANK}} of {{TOTAL}} countries, Georgia sits in the middle range: the country has made visible progress in digital security infrastructure, but faces a challenge typical of emerging digital economies — technological development outpacing security culture.

Digital Infrastructure and Vulnerabilities

Georgia has invested heavily in e-government over the past 15 years. Authorities, tax administration, land registry and the judicial system are largely digitised. Tbilisi has a pervasive public Wi-Fi network and very affordable, highly available broadband. This digitalisation surge has advanced Georgia in the UN E-Government Index regionally — but also creates new attack surfaces. The more that economic activity, administration and private life move online, the more attractive these systems become to cybercriminals.

Phishing and Online Fraud

The most common cyberattack on individuals in Georgia is phishing: fake SMS messages and emails posing as banks, tax or customs authorities, requesting credential entry. Since the large influx of expats and Russian emigrants (2022–2024), English- and Russian-language phishing campaigns have become more active. Georgian banks (TBC Bank, Bank of Georgia) have introduced mandatory two-factor authentication and transaction limits — significantly reducing individual loss risk, but not eliminating it entirely.

Public Wi-Fi Security Risks

Tbilisi is known for numerous high-quality cafés and co-working spaces with fast, free Wi-Fi. This convenience has a downside: unencrypted or weakly secured networks are potential entry points for man-in-the-middle attacks and data interception. Anyone conducting sensitive business communications over unknown networks should use a VPN — not primarily because of state surveillance, but because of criminal actors.

CERT-GE and State Cybersecurity

Georgia's Computer Emergency Response Team (CERT-GE), part of the Justice Ministry, is the institutional anchor of national cybersecurity. It coordinates responses to national cyber incidents, issues security guidance for businesses and authorities, and works with international partners. Georgia has ratified the Budapest Convention on Cybercrime and is part of the international cooperation network. Institutional capacity has grown, but remains below EU standards in key areas.

Cyber Threats from State Actors

Georgia has historically been the target of state-supported Russian cyberattacks. The most prominent case occurred during the August War of 2008: coordinated DDoS attacks took down Georgian government, news and banking websites. Since then, the Georgian government has invested considerably in cyber resilience, and similar large-scale attacks have been repelled. For private individuals, the state cyberattack scenario is generally of limited relevance — it primarily affects critical infrastructure.

What Expats Should Know

Practical recommendations for Georgia residents:

• Banking: TBC Bank and Bank of Georgia have capable mobile apps with good 2FA — use and activate them
• VPN: Always use a VPN on public Wi-Fi; reputable VPN providers are not blocked in Georgia
• Phishing awareness: Never click links in SMS from unknown numbers; never enter banking details via email
• Device security: Enable full-device encryption on laptops and mobile devices

Summary: A score of 60/100 places Georgia as a country with moderate cybercrime risk — similar to many European transition economies. The main real threat for individuals is phishing and bank fraud, not sophisticated state hacking. With standard security practices the risk is well manageable.

This article was created on April 14, 2026