Nine in 10 Gen Z respondents across the Asia-Pacific experienced at least one cyber incident in the past year, even as the generation reports the highest confidence navigating the digital world, according to new research from Kaspersky.

The study, conducted by Kaspersky’s internal market research centre among 7,200 respondents across 18 countries in March 2026, found that while 67 per cent of APAC Gen Z respondents feel confident online, only 26 per cent believe they possess advanced knowledge of digital threats and how to protect themselves.

A confidence-preparedness gap across the region

Confidence levels varied widely by market. Indonesia (77 per cent) and Vietnam (71 per cent) reported the highest digital confidence among APAC Gen Z, ahead of India (67 per cent), China (66 per cent) and Thailand (65 per cent). Malaysia recorded the lowest at 54 per cent.

That confidence does not consistently translate into protective habits. Across the region:

• Only 26 per cent of APAC Gen Z use antivirus software for their smartphones, the lowest share among all generations surveyed
• Just 35 per cent change their passwords regularly, compared with 53 per cent of Baby Boomers
• 75 per cent name their smartphone as their main device for regular internet use
• Only a third regularly back up important data from their phones

Reported incidents among Gen Z respondents included social media account hacks, personal data leaks, scams, investment fraud and loss of access to gaming accounts.

Smartphones hold Gen Z’s most valuable data

The research found that photos and personal documents are considered critically important by 38 per cent of Gen Z respondents globally, with passwords and login credentials rated critical by a further 30 per cent. Kaspersky noted that a compromised smartphone can expose photographs, identity documents, email accounts, social media profiles and financial services all at once.

“Gen Z has grown up online, so digital services often feel intuitive and familiar to them. However, familiarity should not be confused with security expertise. Being able to navigate apps, platforms and devices confidently does not necessarily mean being able to identify scams, manage passwords securely or protect personal data,” said Irina Ermilova, Vice President for Consumer Product Management at Kaspersky.

“Our findings reveal a significant gap between digital confidence and digital preparedness among Gen Zs in APAC, which is particularly concerning given that their constant connectivity also makes them particularly attractive targets for cybercriminals. There is an urgent need to improve digital literacy and strengthen cyber defences so that users of all generations can stay both confident and secure online,” said Adrian Hia, Managing Director for Asia Pacific at Kaspersky.

Kaspersky is urging users to treat cybersecurity as an ongoing habit rather than a reaction to an incident, recommending comprehensive security tools, password managers and VPNs on public Wi-Fi. The company has also launched an interactive online game, “Case 404”, aimed at teaching Gen Z users to spot scams and phishing attempts.