after information about threats from the Belarusian hacker group FrostyNeighbor, which masquerades as official structures, the launch of a new wave of the #ShakhrayGoodbye campaign by the NBU, Cyberpolice, and the State Special Communications Service shows another side of cybersecurity — the fight for the digital hygiene of citizens themselves. The partnership with ESET will add the necessary expertise to the project.

Official instructions and campaign details are available on the special NBU portal: promo.bank.gov.ua/stopfraud/.

The human factor as the main target of attackers

Antivirus company ESET in Ukraine has officially become a partner of a large-scale information campaign on payment security #ShakhraiGoodbye. The organizers emphasize that modern cybercriminals are increasingly less likely to directly hack into technical systems of banks, instead focusing on social engineering - psychological pressure, manipulation and haste of users. About 90% of financial losses occur due to the fact that people disclose their data themselves.

The Cybercrime Paradox (2025-2026 Results)

  • Reduction in the number of attacks: in 2025, the total number of fraudulent card transactions decreased by approximately 5% (about 256 thousand cases were recorded).

  • Losses are rising: Despite an overall decline in the number of incidents, the scale of financial losses has increased by almost a quarter to an impressive UAH 1,4 billion. This indicates that the schemes of criminals have become much more sophisticated, and the average check per theft has increased significantly.

ESET's expert role in the project

ESET's expert role in the project

As a leading cybersecurity expert, ESET will focus on explaining the complex technical aspects of fraud:

  • Methods for recognizing voice forgery (video and audio deepfakes) and phishing emails.

  • Behavior patterns of scammers in spam emails and instant messengers.

  • Protecting your financial phone number and recognizing pseudo-jobs or fake investment platforms.

  • Algorithms for checking websites and chatbots before entering payment details.

HiTech Expert Take

For HiTech Expert, we note: in 2026, when Ukraine builds an Agentic State and implements state AI services (like Diya.AI), cyber hygiene becomes a basic survival skill in the infospace. NBU statistics prove that the best protection is awareness. While software developers update security systems (for example, new biometric barriers in Android 17), the #ShakhrayGoodbye campaign teaches users not to give up the keys to their wallets voluntarily.

🛡️ 5 golden rules of payment security from ESET and the NBU


🛡️ 5 golden rules of payment security from ESET and the NBU

1. Keep the “secret triangle” with you

Never, under any circumstances, give out three things to anyone: your card PIN, the three-digit code on the back (CVV/CVC), and one-time passwords from SMS or push notifications from your bank. Bank employees or the Cyber ​​Police will never ask for them.

2. Protect your financial number

Your phone number is the key to your money. Prevent your mobile operator from remotely replacing your SIM card or switch to a contract service with a passport. This will make it impossible for fraudsters to reissue your card.

3. Enable biometrics instead of passwords

Wherever possible (banking apps, messengers, crypto wallets), set up fingerprint or Face ID login. As new security standards (for example, in Android 17) demonstrate, biometrics is the most reliable barrier that cannot be stolen or spied on.

🛡️ 5 golden rules of payment security from ESET and the NBU

4. The “hotline” rule for suspicious calls

If you receive a call from “the bank,” “security services,” or “police” threatening to block your account or demanding that you transfer money to a “safe account,” hang up immediately. Call the bank yourself at the number on the back of your card.

5. Check links before paying

Before entering your card details for an online purchase or payment for services, always check the website address. Fraudsters often create clones of well-known services that differ only by one letter in the name (phishing). If in doubt, use the official verification service on the cyber police website or the #ShakhraiGoodbye campaign.

#FraudGoodbye


💡 Life hack for HiTech Expert readers:

For online shopping on unfamiliar sites, always use a virtual or online card. Transfer exactly the amount you intend to spend to it immediately before making a purchase. This way, your main account will always remain safe.