Banking Fraud, Scams, and Cybercrime Statistics (2026)

Introduction

Banking Fraud, Scams, and Cybercrime Statistics: In recent years, banking fraud, scams, and cybercrime have become a serious threat to our daily lives. In today’s busy routine, billions of people use mobile banking, cards, and online payments, and the associated risks are also increasing.

Earlier, online fraudsters often relied on cash, cards, or direct bank access. Today, they can steal money through phishing links, scanners, fake messages, cloned websites, OTP, or by taking control of a phone number (SIM). Common tricks include phishing emails, false “KYC update” alerts, identity theft, account takeover, card skimming, and attacks that lock bank systems for ransom. Such crimes affect both customers and banks: customers may lose savings and feel stressed, while banks incur additional costs and lose trust.

This article on Banking Fraud, Scams, and Cybercrime Statistics includes several current analyses and insights that explain the major types of scams, how attackers operate, and simple steps to stay safe.

Editor’s Choice

1. By 2025, the global cost of cybercrime is projected to reach approximately USD 10.29 trillion, representing an 11.61% increase over the previous year.
2. According to Soax.com’s analyses, investment fraud accounted for the largest losses at USD 4,570.27 million, followed by business email compromise (USD 2,946.83 million) and tech support scams (USD 924.51 million).
3. Meanwhile, the payment fraud rate rose to 80% in 2023 and then fell slightly to 79% in 2024.
4. Globally, approximately 65% of financial organisations were hit by ransomware attacks.
5. As of 2024, approximately 64% of Americans reported credit card fraud as the most common issue, followed by data breaches (32%) and account hacking (31%).
6. In cyber fraud campaigns, financial brands were most often targeted (39.5%), followed by retail (21.4%) and technology (12.5%).
7. Among people aged 60 years and above, there were 101,068 complaints and total losses of USD 3,400 million.
8. Phishing and spoofing dominate cybercrime, with APWG reporting 1,003.94 attacks in the first quarter of 2025.
9. A BioCatch report, based on data from financial institutions serving nearly 350 million consumers across five continents, found scam attempts rose 65% in the past year.
10. By 13 August 2025, estimates indicated that the digital payment fraud market had reached approximately USD 50 billion by the end of 2024.
11. From April 14 to 24, 2025, approximately 73% of U.S. adults experienced at least one online scam or attack.
12. In the United States, approximately 30% of Americans experienced an online scam in 2025.
13. In 2025, credit card fraud is expected to account for approximately 38% of FTC identity-theft complaints, with 323,000 cases reported in the first half of the year.
14. 57% of global banks lost more than USD 500,000 to direct fraud, and more than 25% reported losses exceeding USD 1 million.

General Cyber Crime Statistics

• According to brightdefense.com, cybercrime costs are projected to reach approximately USD 10.5 trillion per year by 2025, with annual growth of approximately 15%.
• The WEF projects that it will rank as the world’s 3rd-largest economy; by 2027, it may reach USD 23 trillion, 175% higher than in 2022.
• Meanwhile, the average breach cost decreased from USD 4.88 million (2024) to approximately USD 4.4 million (2025), a 9% decrease.
• Ransom payments increased by 500%, resulting in USD 2 million, and non-recoveries averaged USD 2.73 million.
• Ransomware damages are projected to reach approximately USD 275 billion per year by 2031, and cyber-insurance premiums may reach approximately USD 29 billion by 2027.
• Claims fell 4% for firms under USD 25 million in revenue (approximately 73K each) but rose 23% for USD 25 million to USD 100 million firms (USD 129K).
• Global security spending is forecast at USD 212 billion by 2025, with the cybersecurity market projected at USD 424.97 billion by 2030 (13.8% CAGR) and cryptojacking solutions at USD 64.87 billion by 2033.
• Many SMBs allocate 5%-20% of their IT budgets and spend about USD 2,700 per employee; phishing penalties rose by 144%.
• Meanwhile, the tech sector was targeted for the 7th consecutive year.
• Verizon also reports that median ransom demands equal 1.34% of revenue (for 80% of cases, 0.13%-8.30%).
• Only 4% of complaints involve direct financial loss, and 62% of money-driven breaches involve extortion.

(Source: thesslstore.com)

• The infographic reported that the median ransomware payment had skyrocketed by 500% in 2024.
• Approximately USD 55 billion was stolen through business email compromise scams, both domestic and international, between October 2013 and December 2023.
• Meanwhile, 32% of phishing impersonation attacks in Q4 2024 had leveraged Microsoft’s brand and reputation.
• Cybercrime costs were expected to exceed USD 12 trillion by 2025.
• The North Korean state-linked hacker group TraderTraitor had stolen USD 1.5 billion from Bybit’s cryptocurrency exchange.
• Moreover, passport data averaged USD 600 on the dark web, and 50% of BEC emails were crafted using generative AI.
• 55% of brand impersonation attacks originated from companies’ own brands.

Global Banking Sector Statistics by Rising Fraud, Scams, and Cybercrime Losses

Types Of Banking Fraud Statistics

• According to coinlaw.io, banking fraud shows that phishing scams affected 52% of victims, whereas card-not-present fraud accounted for 63% of card-related losses.
• Malware and spyware attacks rose by 22%, and account takeover fraud increased by 19%.
• Unauthorised wire transfers and cryptocurrency wallet scams led to USD 2 billion and USD 3 billion in losses, respectively.
• Lastly, check fraud made up 7% of reported cases.

Cybercrime Type Causing The Greatest Harm

• According to Soax.com’s analyses, Investment fraud represented the primary driver of financial harm, resulting in total losses of USD 4,570.27 million.
• Business email compromise ranked second most damaging, accounting for USD 2,946.83 million in damages.
• Tech support scams caused a significant financial impact, with total losses reaching USD 924.51 million.
• Personal data breaches led to USD 744.21 million in losses, while confidence and romance fraud cost victims USD 652.54 million.
• General data breaches accounted for USD 534.39 million, followed by government impersonation scams at USD 394.06 million.
• Non-payment or non-delivery schemes resulted in USD 309.64 million in losses, and credit card or check fraud accounted for USD 173.62 million.
• Real estate fraud caused USD 145.24 million in damages, slightly exceeding the USD 134.51 million caused by advanced fee scams.
• Identity theft losses totalled USD 126.20 million, followed by lottery, sweepstakes, and inheritance scams, which totalled USD 94.50 million.
• Extortion schemes cost victims USD 74.82 million, while employment-related scams resulted in USD 70.23 million in losses.
• Ransomware attacks resulted in USD 59.64 million in reported damages, and SIM swap fraud totalled USD 48.79 million.
• Overpayment scams and botnet activities accounted for USD 27.95 million and USD 22.42 million, respectively.
• Phishing and spoofing incidents caused USD 18.72 million in losses, followed by threats of violence, which caused USD 13.53 million in losses.
• Harassment or stalking resulted in USD 9.67 million in damages, and intellectual property rights or counterfeit crimes resulted in USD 7.55 million in damages.
• Crimes against children accounted for USD 2.03 million in losses, while malware-related incidents accounted for USD 1.21 million.
• Miscellaneous cybercrime categories accounted for an additional USD 240.05 million of the total financial impact.

Cost Of Cybercrime Statistics

(Reference: soax.com)

• As of 2024, the cost of cybercrime was USD 9.22 trillion, with a 13% increase from last year, resulting in USD 8.15 trillion (in 2023).
• By 2025, the cost is projected to reach approximately USD 10.29 trillion, up 11.61% from last year.
• Followed by 2026: USD 11.36 trillion (+10.4%), 2027: USD 12.43 trillion (+9.42%), 2028: USD 13.82 trillion (+11.18%), and 2029: USD 15.63 trillion (+13.1%).

Organisations Experiencing Attempted And/Or Actual Payments Fraud Analyses

(Source: usbank.com)

• Overall, the payment fraud rate reached 82% in 2018, followed by 81% in 2019, 74% in 2020, 71% in 2021, and 65% in 2022.
• Meanwhile, the rate rose to 80% in 2023 and then fell slightly to 79% in 2024.

Financial Organisations Affected By Ransomware Attacks

(Reference: cybelangel.com)

• Globally, approximately 65% of financial organisations were hit by ransomware attacks, up from 64% in 2023.
• Financial organisations further claimed that ransomware attacks rose from 34% in 2021 to 55% in 2022.

U.S. Financial Cyberattack Data Violations

(Reference: statista.com)

• In the United States, the number of data-breach cases in the financial services industry due to cyberattacks totalled 744 in 2023.
• The total number of data violation cases remained at 268 in 2022, followed by 279 (2021), 138 (2020), and 172 (2019).

Financial Cybercrime Types In The U.S.

(Reference: statista.com)

• As of 2024, approximately 64% of Americans reported credit card fraud as the most common issue, followed by data breaches (32%) and account hacking (31%).
• About 23% reported online banking scams, 14% reported phishing attempts, and only 2% mentioned other types of financial cybercrime.

Indian Industries Most Abused In Cyber Fraud Campaigns

(Source: the420.in)

• In cyber fraud campaigns, financial brands were most often targeted (39.5%), followed by retail (21.4%) and technology (12.5%).
• Moreover, smaller shares came from telecommunication (9.1%) and travel and leisure (8.6%).
• Abuse was less common in real estate (2.5%) and insurance (1.9%).

Cybercrime Money Lost Statistics By Age Group

(Source: soax.com)

• Among people aged 60 years and above, there were 101,068 complaints and total losses of USD 3,400 million.
• Meanwhile, the average loss per complaint accounted for USD 33,640.72.

Furthermore, other demographic analyses are stated in the table below:

Cybercrime Costs Analyses By State & Territory

Top Cybercrime Attack Statistics

(Source: deepstrike.io)

• Phishing and spoofing dominate cybercrime, with APWG reporting 1,003.94 attacks in the first quarter of 2025.
• Ransomware continues with a more than 73% YoY increase and more than USD 1 billion in crypto ransoms.
• Meanwhile, business fraud has collectively cost USD 51 billion globally, and non-ransom malware has experienced a 349% surge in email-borne detections.
• Identity fraud in the U.S. reached USD 27.2 billion in 2024, and data breaches incurred an average cost of USD 4.45 million in 2023.

Banking Scams Statistics

• A BioCatch report, based on data from financial institutions serving nearly 350 million consumers across five continents, found scam attempts rose 65% in the past year.
• It reported a 100% increase in voice phishing (vishing), a 63% increase in attempted romance scams, and a 42% increase in attempted investment scams, while SMS phishing increased 10-fold.
• Purchase scams remained the most common type, with attempts up 14%.
• Additionally, consumers lose USD 1.03 trillion each year, and the U.S.
• Clients also observed a 15% decline in impersonation scams and launched Scams360 in July.

Digital Payments Fraud Statistics

(Source: cloudfront.net)

• The digital payment fraud market reached around USD 50 billion by the end of 2024.
• Only 1 in 120 online transactions was termed as potentially fraudulent.
• Credit card fraud accounted for the largest share, with 38% of all digital payment fraud.
• In online banking fraud trends, synthetic identity fraud accounted for the largest share (80%, followed by account takeover (28%), refund fraud (25%), and P2P payment platform fraud (19%).

Americans’ Experience With Online Scams And Attacks

(Source: pewresearch.org)

• From April 14 to 24, 2025, approximately 73% of U.S. adults experienced at least one online scam or attack.
• The most common issue was stolen card details and fake charges (48%).
• Another 36% paid for counterfeit or undelivered items and received no refund.
• Account takeovers affected 29%, and 24% shared personal information after a scam message or call.
• Fewer people reported ransomware (10%) or fake investment losses (7%).

Online Scam Experiences By Demographics

• In the United States, approximately 30% of Americans experienced an online scam in 2025.
• Followed by 22% experienced two scams, 22% (three or more), and 73% (at least one).

Other demographic analyses in the U.S. are mentioned below:

Bank-Fraud Statistics By Identity Theft & Account Takeover

• The Federal Trade Commission reported that 2024 saw 6.5 million consumer reports, including more than 1.1 million identity theft reports.
• The biggest identity-theft categories were credit card (449,032 reports), loan/lease (176,400), bank account (114,608), and other identity theft (358,993).
• According to Javelin’s 2025 Identity Fraud Study, identity fraud, including account takeover (ATO), resulted in USD 27.2 billion in consumer losses in 2024, a 19% increase.
• Alloy’s 2025 State of Fraud Report found that 60% of financial institutions/fintechs, and about 70% of enterprise banks, reported fraud rising.
• More than 1 million in direct losses, and 64% planned new identity-risk investments.
• According to a NICE survey, 66% reported a major impact from ATO, 54% reported identity theft, and 72% reported close monitoring of phishing.
• In addition, Veriff reported that, in 2025, deepfakes accounted for 1 in 20 ID-check failures.

By Phishing Scams and Social Engineering

• The APWG reported that phishing attacks totalled 1,003,924 in the first quarter of 2025, with online payment and banking targeted in 30.9% of incidents.
• In the second quarter, phishing attacks totalled 1,130,393 (an increase of 13% from the previous quarter).
• The Financial Institutions sector is the most targeted, accounting for 18.3% of all phishing attempts.
• The total number of number of number of attacnumber of ks declined to 892,494 in the third quarter of 2025, and financial institutions accounted for 13.2% of incidents.
• Meanwhile, QR-code traps surged to 716,306 unique malicious codes, up 13% from Q2, and exceeded 3 million over the past 12 months.
• The FBI’s report logged 859,532 complaints and USD 16 billion in phishing and spoofing losses on April 23, 2025.
• IC3 also shows that 21,442 BEC cases totalling USD 2,770,151,146.

Credit Card Fraud Statistics

(Reference: coinlaw.io)

• In 2025, credit card fraud is expected to account for approximately 38% of FTC identity-theft complaints, with 323,000 cases reported in the first half of the year.
• In the U.S., 81% of fraud losses originated from card-not-present transactions as online shopping continued to grow.
• 68% of victims detected fraud through bank alerts or statements rather than through real-time tracking.
• India and Brazil reported a 29.5% increase in credit card fraud cases in 2025, linked to the expansion of digital payments.
• Dark-web selling increased by 20%, with 14.5 million U.S. card records listed.
• Globally, one fake card transaction happens every 14 seconds, while the U.S. recorded USD 13.7 billion in losses.

Financial Impact On Banks And Consumers

• In 2024, global banking fraud costs were expected to pass USD 45 billion as attacks became more advanced, according to coinlaw.io.
• For financial institutions, each fraud incident costs about USD 4.3 million, including investigation, recovery, and regulatory fines.
• Consumer confidence declined by 15%, and 4 out of 10 people reported hesitating to adopt new banking technology.
• Fraud-related lawsuits against banks increased by 8%.
• Businesses lost USD 14 billion, with small firms making up 47% of reported cases.
• The sector spent USD 12.6 billion on anti-fraud tools and services, up 20% year over year, while insurance claims jumped 26%.

Financial Cybersecurity Regulation Challenges

• The top issue was the presence of too many or conflicting regulations across countries (34%), particularly in the U.S.
• Meanwhile, 25% reported that meeting cyber-regulation requirements was not a challenge.
• Resource constraints, such as limited money or people, affected 22%.
• A smaller share reported their country or industry lacked cyber regulations (9%).
• Others found requirements technically too hard to meet (7%) or not appropriate for their organisation (3%).
• Regulatory complexity accounted for 34%, while capability and fit concerns accounted for 3%.

The Rise of AI-Driven Fraud (Deepfakes & Voice Cloning)

• According to Deloitte research, Generative AI-enabled fraud across the financial sector is projected to reach approximately $40 billion annually by 2027, a massive escalation from $12.3 billion in 2023.
• According to McAfee, Scammers can now create a functional voice clone with as little as 3 to 20 seconds of audio, achieving 85% to 95% accuracy with the original person.
• Fourthline state that Deepfake-related fraud losses exceeded $410 million in the first half of 2025 alone, with individual successful incidents now frequently exceeding $680,000 per event.
• JMB Financial Managers reports, Global deepfake fraud incidents surged by 700% in the first quarter of 2025 compared to the previous year, highlighting the rapid adoption of these tools by criminal networks..
• According to IBM X-Force, AI-powered phishing and social engineering attacks are now 192 times faster to produce than manual efforts, allowing a single attacker to generate in one day what previously took a team months to coordinate.
• As of 2026, more than 40% of financial professionals have directly encountered deepfakes used in fraud attempts, while 90% of institutions report that fraudsters are actively using generative AI in their daily operations.
• Approximately 82.6% of all phishing emails now contain AI-generated content, leading to click-through rates of 54%, compared to just 12% for traditional non-AI phishing.
• Synthetic identity document fraud, often paired with deepfake video to bypass “liveness” checks during bank onboarding, increased by 378% in the lead-up to 2026.
• According to Vectra AI, in one high-profile case of AI-enabled social engineering, a single deepfake video call involving a synthetic CFO resulted in a $25.6 million loss for a single firm.
• Consumer vulnerability is high: 77% of victims who received a message from an AI voice clone reported losing money, with 36% losing between $500 and $3,000.
• Monthly media-reported AI content incidents, including deepfakes and retail scams, reached nearly 500 per month by January 2026, a tenfold increase since 2020.
• Multi-step, coordinated fraud attacks leveraging AI rose by 180% year-on-year, signalling a shift toward complex, “fewer but smarter” criminal operations.
• Industry surveys indicate that 75% of consumers now feel more vulnerable to financial fraud due to the proliferation of AI, while 68% consider identity theft their primary digital concern.
• According to Statista, as of early 2026, 1 in 17 teenagers has already been targeted by deepfake content, indicating that scammers are harvesting voice and image data from younger, highly active social media users.
• The World Economic Forum reports that 73% of CEOs have been personally affected by cyber-enabled fraud or know someone in their professional network who has been affected in the past year.

The Industrialised “Scam-as-a-Service” Economy (2026)

• According to Cybersecurity Ventures, Cybercrime has evolved into the world’s third-largest economy, with annual global losses projected to reach $10.5 trillion in 2025 and continue rising through 2026, marking a 15% year-over-year increase.
• As per DeepStrike, the barrier to entry for financial fraud has vanished, as criminals can now rent a professional phishing kit for approximately $250 per month or purchase a basic malware package with a step-by-step tutorial for just $50.
• Flare reports that Banking remains the primary target for organised cybercrime, with approximately 82% of all multi-target phishing “combo kits” sold on the dark web including specialised tools to impersonate major financial institutions.
• Modern phishing kits have transitioned from simple fake websites to “Adversary-in-the-Middle” (AiTM) systems that can intercept live session cookies and bypass multi-factor authentication (MFA) in real time.
• Advanced subscription models for banking attack infrastructure now range from $150 to $1,500 per month, offering non-technical buyers features like dedicated hosting and automated exfiltration via Telegram bots.
• A criminal making a modest $34 monthly investment in pre-packaged fraud tools can generate an estimated $25,000 in monthly illicit revenue by targeting retail banking customers.
• According to Keepnet Labs, The industrialization of these attacks has made phishing the origin of 91% of successful cyberattacks across the financial sector, as AI-enhanced kits increase user click rates by up to 4x compared to traditional methods.
• Financial institutions are seeing a surge in “Phishing-as-a-Service” (PhaaS) offerings, which accounted for over 54% of all threat-related posts on dark web messaging platforms like Telegram in early 2026.
• As per Flare 2026 Report, The “fraud trifecta” preferred by these automated kits consists of banking, e-commerce (76% of kits), and PayPal (75% of kits), designed to maximize the speed of cash-outs from a single victim.
• Banking Trojans and info-stealers are sold as “stealer logs” on specialised dark web markets like STYX and Russian Market, where breached credentials and payment data for thousands of accounts are traded daily.
• Individuals in the banking sector who fall victim to phishing lose an average of $225 per successful attack, while the total cost of a single phishing-related breach for a financial organisation has risen to roughly $4.9 million.
• According to Astra Security, in 2026, a cyberattack is estimated to occur every 39 seconds, fueled by the widespread availability of automated tools that require no coding knowledge to operate.

Conclusion

Banking fraud, scams, and cybercrime are increasing rapidly as criminals exploit technology and people’s trust to steal money and personal information. As online banking becomes more popular, crimes such as phishing texts, fake apps, identity theft, and unauthorised account access are on the rise.

To prevent such fraud incidents, banks need to implement stronger security measures, round-the-clock transaction monitoring, and clear guidance for customers. Similarly, users need to remain vigilant, verify messages and links, create strong passwords, and report suspicious activity immediately. When protection improves, rules are enforced, and awareness increases, fraud can be reduced, and digital banking remains secure.