Mashtrimet që lidhen me rezervimet dhe ofertat turistike, mesazhet phishing, rrjetet Wi-Fi publike, humbja ose vjedhja e pajisjeve dhe ekspozimi i tepërt i informacionit në rrjetet sociale janë disa nga rreziqet që duhen marrë në konsideratë gjatë udhëtimit.

Autoriteti Kombëtar për Sigurinë Kibernetike (AKSK) rekomandon disa masa të thjeshta për të mbrojtur pajisjet, llogaritë dhe të dhënat tuaja gjatë pushimeve.

Përpara nisjes, përgatitni edhe pajisjet për udhëtim

Përditësoni sistemin operativ dhe aplikacionet në telefon, tablet apo laptop. Përditësimet korrigjojnë dobësi të njohura të sigurisë dhe reduktojnë mundësinë e shfrytëzimit të tyre.

Aktivizoni autentifikimin me shumë faktorë (MFA) në llogaritë kryesore, veçanërisht në email, rrjete sociale dhe shërbime që përmbajnë të dhëna personale ose financiare. Përdorni fjalëkalime të forta dhe unike dhe shmangni përdorimin e të njëjtit fjalëkalim në disa llogari.

Krijoni gjithashtu një kopje rezervë (backup) të fotografive, dokumenteve dhe të dhënave të rëndësishme. Aktivizoni funksionet për lokalizimin, bllokimin ose fshirjen në distancë të pajisjes dhe përdorni PIN, fjalëkalim ose autentifikim biometrik për kyçjen e saj.

Kujdes me rezervimet dhe ofertat turistike online

Një ofertë shumë më e lirë se alternativat e tjera, një faqe që imiton një hotel apo kompani ajrore, ose një mesazh që kërkon pagesë urgjente mund të jetë pjesë e një skeme mashtrimi.

Rezervimet duhet të kryhen përmes faqeve dhe platformave të besueshme. Kontrolloni me kujdes adresën e faqes përpara se të vendosni të dhëna personale apo bankare. Nëse merrni një email ose SMS të papritur që ju kërkon të konfirmoni rezervimin, të përditësoni të dhënat e pagesës apo të klikoni një lidhje, verifikoni kërkesën përmes faqes ose aplikacionit zyrtar.

Mos u bazoni vetëm te pamja profesionale e një faqeje. Faqet mashtruese mund të kopjojnë logot, fotografitë dhe elementet grafike të kompanive të njohura.

Wi-Fi publik nuk do të thotë gjithmonë Wi-Fi i sigurt

Rrjetet publike Wi-Fi në aeroporte, hotele, bare apo ambiente turistike kërkojnë kujdes të veçantë. Persona keqdashës mund të krijojnë rrjete me emra të ngjashëm me rrjetet legjitime për të bindur përdoruesit të lidhen me to.

Përpara lidhjes, verifikoni emrin e saktë të rrjetit me stafin e ambientit. Për veprime sensitive, si përdorimi i shërbimeve bankare, administrimi i llogarive të rëndësishme apo transmetimi i informacionit konfidencial, preferoni internetin celular ose një lidhje tjetër të besueshme.

Çaktivizoni gjithashtu lidhjen automatike me rrjetet Wi-Fi kur nuk ju nevojitet.

Edhe karikimi në vende publike kërkon kujdes

Në aeroporte, stacione dhe ambiente të tjera publike mund të gjenden porta USB për karikimin e telefonit. Kur është e mundur, përdorni karikuesin tuaj të lidhur me një prizë elektrike ose një power bank.

Kjo shmang lidhjen e drejtpërdrejtë të pajisjes me porta USB publike të panjohura ose potencialisht të manipuluara.

Mos ndani më shumë informacion sesa duhet

Fotografitë dhe videot janë pjesë e pushimeve, por publikimi në kohë reale mund të zbulojë më shumë informacion nga sa mendojmë.

Një postim mund të tregojë vendndodhjen tuaj, hotelin ku po qëndroni ose faktin që banesa juaj është bosh. Fotografitë e kartave të imbarkimit, rezervimeve apo dokumenteve të udhëtimit mund të përmbajnë emra të plotë, numra rezervimi, barkode, kode QR ose të dhëna të tjera që nuk duhet të bëhen publike.

Kontrolloni cilësimet e privatësisë dhe mendoni përpara se të ndani vendndodhjen ose dokumente që lidhen me udhëtimin. Kur nuk është e nevojshme, shmangni publikimin e vendndodhjes në kohë reale.

Skanoni kodet QR, por kontrolloni përpara se të vazhdoni

Kodet QR përdoren gjerësisht në restorante, transport, parkingje dhe atraksione turistike. Megjithatë, një kod QR mund t’ju drejtojë edhe në një faqe të rreme.

Përpara se të vendosni kredenciale ose të kryeni një pagesë, kontrolloni adresën që hapet pas skanimit. Nëse kodi duket i mbivendosur me një ngjitëse, i modifikuar ose ju drejton në një adresë të dyshimtë, mos vazhdoni.

Nëse humbni telefonin, veproni menjëherë

Humbja ose vjedhja e një telefoni nuk është vetëm humbje e pajisjes. Telefoni mund të përmbajë email, fotografi, dokumente, aplikacione bankare dhe sesione aktive në shumë llogari.

Nëse pajisja humbet ose vidhet, përdorni funksionin e lokalizimit dhe bllokimit në distancë. Nëse është e nevojshme, ndryshoni fjalëkalimet e llogarive kritike dhe kontaktoni operatorin celular për bllokimin e kartës SIM.

Në rast se pajisja përmban të dhëna apo akses në sisteme të punës, njoftoni menjëherë strukturën përgjegjëse për IT ose sigurinë kibernetike në institucionin apo organizatën tuaj.

Kujdesi digjital duhet të udhëtojë me ju

Pushimet na largojnë përkohësisht nga rutina, por jo nga rreziqet online. Përditësimi i pajisjeve, aktivizimi i MFA-së, verifikimi i mesazheve dhe rezervimeve, përdorimi i kujdesshëm i rrjeteve publike dhe mbrojtja e informacionit që ndajmë janë masa të thjeshta që mund të parandalojnë incidente me pasoja serioze.

Para se të niseni për pushime, kontrolloni jo vetëm dokumentet dhe bagazhet, por edhe sigurinë e pajisjeve dhe llogarive tuaja.

Siguria kibernetike nuk bën pushime.

The meeting focused on the steps that can be taken to translate this cooperation into concrete actions, including the organization of meetings between AKSK experts and their Spanish counterparts, with the aim of identifying areas of mutual interest and fostering closer collaboration in cybersecurity.

Published on April 17, 2026
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=iGKo
—–END PGP PUBLIC KEY BLOCK—–

During the visit, the director participated in two high-level international panels, held bilateral meetings with counterparts from Saudi Arabia and Oman, discussed promoting cooperation with other Gulf countries, and agreed to sign an international agreement with the United States Telecommunications Training Institute (USTTI), further strengthening Albania’s role in the global cybersecurity ecosystem.

Albania, a success story in building digital resilience

In a panel on cyber law and regulating the technological revolution, Mr. Tafa shared Albania’s experience in strengthening the legal and institutional framework for cybersecurity, through alignment with the NIS2 Directive, the adoption of the new law on cybersecurity and the implementation of 21 by-laws, of which 16 have already been finalized.

He stressed the importance of building a sustainable digital framework, supported by institutional cooperation, professional capacity development and the involvement of the private sector, to ensure sustainability and long-term protection against growing risks.

In the discussion, Albania was praised as a success story, ranking among the top 20 countries in the world for cybersecurity, according to the Global Cybersecurity Index – an achievement that reflects the legal and institutional reforms undertaken in recent years.

Albania’s approach to gender equality in cyberspace

In a panel dedicated to empowering women in cyberspace, the director of AKSK highlighted the need for immediate and measurable action, through building clear pathways from education to leadership, incorporating gender indicators into national strategies, and creating flexible and secure work environments.

He highlighted that gender equality should be treated as an essential pillar of global cyberspace security, emphasizing that only through coordinated and responsible action can real sustainability and inclusiveness be achieved in this strategic sector.

New collaborations with Saudi Arabia and Oman

Within the framework of the forum, the director held official bilateral meetings with his counterparts from the Kingdom of Saudi Arabia and the State of Oman, where concrete cooperation initiatives and joint projects to strengthen national capacities in the field of cybersecurity were discussed.

In the meeting with the National Cyber ​​Security Authority of the Kingdom of Saudi Arabia (NCSA), Mr. Tafa presented two concrete cooperation projects:

• the establishment of the National Center of Excellence for Cyber ​​Security, with the assistance of NCSA;
• the creation of the Center for Monitoring, Response and Management of Cyber ​​Incidents for the Health Sector in Albania.

The Saudi side expressed its willingness to formalize the cooperation through a concrete action plan and to sign a cooperation agreement between the two institutions.

At the meeting with the National Cyber ​​Security Authority of the State of Oman, the project for establishing a joint training platform to increase professional capacities in the public and private sectors was presented. The parties agreed to proceed with the signing of a cooperation agreement, which will formalize this partnership.

Expanding cooperation with other Gulf countries

During his stay in Riyadh, the director also held meetings with representatives of Qatar, Kuwait and Bahrain, with a focus on:

• developing capacities to face the risks arising from Artificial Intelligence and Quantum Computers, and
• building a Quantum Resistance Layer for critical national infrastructures.

These meetings paved the way for expanding regional cooperation and creating new technological and institutional partnerships in support of digital sustainability.

Signing of the agreement with the United States Telecommunications Training Institute (USTTI)

Following the meeting between the Director General of AKSK and the Executive Director of USTTI, it was agreed to sign a Memorandum of Understanding (MoU) to strengthen human capacities in the field of cybersecurity, through the development of training programs, the exchange of best practices and the sharing of professional experiences.

In line with the global mission of USTTI, AKSK will serve as a success story and example of international cooperation, sharing its experience with countries in Latin America and Africa.

Albania in the focus of international media

During the forum, the AKSK director was also part of a series of interviews for international media, where he shared Albania’s vision for building a sustainable, inclusive and collaborative ecosystem in cybersecurity, highlighting the country’s growing role on the global stage.

Through these commitments, Albania reaffirmed its role as a reliable partner and contributor to the international cybersecurity agenda, advancing regional and inter-institutional cooperation to strengthen digital resilience.

Thanks to the close interinstitutional cooperation between Raiffeisen Bank, AKEP, and AKSK, immediate action was taken to block the malicious activity and disable access to the phishing site, effectively halting the further spread of this smishing-type cyberattack.

Such fraudulent SMS messages aim to trick citizens into clicking on suspicious links and revealing sensitive financial information. Due to rapid intervention and continuous monitoring, no impact was reported on Albanian citizens.

🚨 A reminder for all citizens:
✅ Do not click on suspicious links from unknown sources.
✅ Never share personal or banking information via SMS or social media.
✅ Always verify the official websites of banks or institutions.
✅ Seek assistance from a cybersecurity expert when in doubt.
✅ Report any similar cyberattack attempts.

🤝 AKSK thank AKEP and Raiffeisen Bank for their prompt cooperation, and we encourage citizens to continue reporting suspicious cases!

This year, we organized policy roundtables in Tirana, Berlin and Brussels to discuss how we can bring the Western Balkans closer to EU’s cybersecurity mechanisms and policies, and every one of these roundtables all participants shared a call on the European Union to take a bold and strategic step: enable the phased integration of the WB6 into the European Union Agency for Cybersecurity (ENISA). This process should begin by granting observer status and developing a clear roadmap toward full membership.

The EU has acknowledged that digital transition is central to its future. Through initiatives such as the Growth Facility for the Western Balkans, the EU has emphasized that the digital resilience of the Western Balkans is crucial for convergence with the EU. But while rhetoric recognizes the digital challenge, the instruments for cybersecurity integration should be open to candidate countries. ENISA, a critical actor in safeguarding the EU’s digital infrastructure, currently offers no formal pathway for WB6 participation beyond third-country cooperation. This is not to say that there is no cooperation between ENISA and WB6; in fact, ENISA and its leadership have been very active in supporting WB6. However, we need to develop this relationship further. Considering that the EU is seeking ideas on how to advance gradual integration, ENISA is a perfect option, as it is common sense and mutually beneficial for the EU and our region.

A crucial opportunity to do so is now on the table. The European Commission is currently revising the EU Cybersecurity Act, which defines the mandate, scope, and structure of ENISA. This presents a timely opportunity to introduce the necessary legal provisions that would enable EU candidate countries to obtain observer status. Such a change would not only reflect the geopolitical reality of enlargement but also allow the WB6 to contribute meaningfully to Europe’s cyber resilience today, not just after accession.

The Western Balkans are not on the sidelines of the EU’s digital periphery; they are in the middle of it. Cyber incidents in one part of Europe are never truly local. The 2022 cyberattacks in Albania served as a wake-up call, highlighting how hostile actors exploit institutional gaps and regional vulnerabilities. Fragmentation in cybersecurity capacity across the WB6 increases the continent’s overall exposure.

What the Western Balkans need today is operational integration. In terms of advanced relations with ENISA and observer status for our region, this means participating in ENISA’s knowledge networks, contributing to its certification framework, and aligning with its incident response standards. Phased integration into ENISA is the most effective way to develop further and enhance the region’s capacity to prevent, detect, and respond to cyber threats, while also promoting legal and institutional convergence with EU norms. The EU leadership and leaders from member states have already made it clear they support gradual integration. ENISA, in this context, is a no-brainer.

The readiness is there. Most countries in the region have already established national cybersecurity agencies and adopted strategies aligned with the European Union’s Network and Information Security (NIS) Directive. But aligning with the EU Cybersecurity Act and participating meaningfully in ENISA’s work requires more than domestic reform; it requires access.

We propose a three-tiered approach. First, the EU should amend the Cybersecurity Act to allow for observer status for WB6 countries that meet basic legal and institutional criteria. This model already exists for EEA countries, such as Norway and Iceland. Second, ENISA and the European Commission should conduct feasibility assessments and provide technical support to help the WB6 meet integration benchmarks. Third, a formal roadmap for full membership should be established, linked to each country’s progress in EU accession and compliance with ENISA standards.

In the framework of the IGNITA initiative supported by the Open Society Foundations – Western Balkans, the Kosovar Centre for Security Studies (KCSS), has published a policy paper on ENISA where this roadmap is fully elaborated, as well as outlining the state of play in WB6 concerning cybersecurity, what needs to happen for the region to be ready for observs stats and arguments why such a status should enabled.

Critically, this integration must be uniform across the region. Fragmented bilateral arrangements would only entrench asymmetries. Instead, the EU should pursue a coherent regional approach, building on the momentum of the Berlin Process and the common priorities identified in the Reform and Growth Facility. The leaders’ conclusions from the Berlin Process Summit in Tirana in 2023 endorse the integration of the Western Balkans into the EU’s cybersecurity frameworks.

From the EU’s perspective, the phased integration of WB6 into ENISA would demonstrate the tangibility of the commitment to enlargement. It would also serve as a practical step toward resilience, reducing the attack surface of the European Digital Single Market. Cybersecurity is, by its nature, transnational. So, it must be its governance.

To be clear, we are not advocating shortcuts. Integration into ENISA must be earned through reform and alignment with EU norms. However, the EU must do its part by opening the door and making it clear that compliance will be rewarded with participation.

In the framework of the IGNITA initiative supported by the Open Society Foundations – Western Balkans, the Kosovar Centre for Security Studies (KCSS), has published a policy paper outlining the state of play in WB6 concerning cybersecurity, what needs to happen for the region to be ready for observer status and arguments why such a status should be enabled for WB6.

For the Western Balkans, joining ENISA would institutionalize cooperation, embed a culture of standards, and foster mutual accountability in a policy area where margins of error are shrinking. It would also send a powerful message to citizens in our region that European integration is happening across different sectors, it is tangible and a living process that delivers.

As the European Commission pushes for the implementation of the Reform and Growth Facility and as it reviews the EU Cybersecurity Act, the time to act is now. Cybersecurity integration for the Western Balkans must begin with institutional bridges. ENISA is the ideal starting point.

*This article was originally published on European Western Balkans: https://europeanwesternbalkans.com/2025/07/11/53121/ 

Authors: Dr Igli Tafa and Mentor Vrajolli