Japanese financial markets are reeling from an unprecedented wave of unauthorized trading activity. Hackers have broken into thousands of brokerage accounts since early 2025, stealing credentials and executing trades worth hundreds of millions of dollars. It’s a mess. And it’s getting worse by the day.

The numbers are staggering. What started as 43 compromised accounts in February exploded to over 3,300 by mid-April. That’s a lot of angry investors. Fraudulent transactions jumped from just 33 to more than 1,450 during the same period, churning approximately $710 million in fraudulent trades. Investigators found that these unauthorized trades were primarily facilitated through stolen login information acquired from convincing phishing sites.

The scale of this breach is mind-boggling—from dozens to thousands of victims in weeks, with hundreds of millions in fraudulent trades.

The hackers’ playbook? Pretty straightforward, really. They break in, sell off victims’ Japanese stocks, then use the cash to buy specific stocks—often cheap Chinese or American ones. Classic pump-and-dump scheme, just with stolen accounts. Clever, in a criminal sort of way.

Phishing attacks have been the main weapon of choice. Fake websites that look exactly like legitimate brokerage portals trick users into handing over their logins. Malware does the rest. Some attackers are even sending phishing emails warning about the very scam they’re perpetrating. Talk about irony.

Major firms are feeling the heat. Rakuten Securities, Nomura, SBI Securities, SMBC Nikko—they’re all scrambling to contain the damage. Some have temporarily suspended buy orders for specific stocks. Too little, too late?

Japan’s regulatory bodies aren’t sitting idle. The Financial Services Agency issued urgent warnings while the Japan Securities Dealers Association is pushing for stronger multi-factor authentication. Experts recommend carefully verifying website authenticity before entering any login credentials. The Securities and Exchange Surveillance Commission is watching for market manipulation. They might need to call in the police soon.

Brokerages are reportedly covering customer losses, but individual victims have still reported personal losses in the millions of yen. Small comfort when your account’s been emptied and filled with penny stocks you never wanted.

This digital heist shows no signs of slowing down. Japanese investors, consider yourselves warned.