A Systematic Review of Cloud Computing Security Risks in E-Commerce

Cloud computing facilitates scalable infrastructure, distributed applications and the management of large volumes of customer and transaction data in e-commerce, but poses risks to customer information, payment data, credentials, application programming interfaces (APIs), and cloud storage. This paper presents an exploratory analysis of cloud security risks in e-commerce based solely on secondary data; no primary data were collected. Three public Indian government data sources were examined: NCRB cyber-crime statistics by crime head and State/UT for 2014–2023, National Cyber Crime Reporting Portal (NCRP) cyber-fraud totals to 28 Feb 2025, and CERT-In incident counts for 2018–2023, together with CSA, OWASP, PCI DSS, and peer-reviewed literature. Registered cyber-crime cases rose from 9,622 in 2014 to 86,420 in 2023; computer 11 related, fraud, cheating, data-theft, and forgery heads made up 83.7% of 2023 cases; and three States accounted for 58.9%. None of the datasets identify cloud or e-commerce contexts, so they serve as contextual indicators, and risk themes (misconfiguration, IAM, APIs, data exposure, monitoring) are compared qualitatively with stated evidence levels rather than likelihood–impact scores. Security controls and practical recommendations are discussed.