Security & Privacy
How many people fall victim to online scams every day?
A live count of people falling victim to internet fraud worldwide
Roughly 3.5 victims every second.
Source: FBI IC3 Annual Report 2024; global scaling. View on dashboard →
What is online fraud?
Online fraud includes investment scams, phishing, identity theft, business email compromise, and romance scams. The FBI's IC3 has published annual reports since 2000. In 2025: over 1 million complaints, losses exceeding $20.8 billion (+26% from 2024), the first time reported losses surpassed $20 billion. Globally it is far bigger: most victims never report. Global cyber fraud losses are estimated at $1-2 trillion per year.
Online fraud by the numbers
FBI IC3 2025: over 1 million complaints, losses exceeding $20.8 billion (+26% from 2024), the first year above $20 billion
FBI / IC3FBI IC3 2025: AI-enabled fraud tracked for the first time, with 22,000 complaints and nearly $900 million in losses
FBI / IC3Investment fraud (primarily crypto scams) caused $8.6 billion in losses in 2025; cryptocurrency investment scams alone: $7.2 billion
FBI / IC3Since IC3 was founded in 2000, over 9 million complaints have been received, totalling $95+ billion in losses
FBI / IC3Only an estimated 10-15% of cybercrime victims ever report to law enforcement
FBI / IC3Verizon DBIR 2025: 22,052 security incidents and 12,195 confirmed data breaches analysed – the highest ever; ransomware in 44% of breaches (+37%); third-party involvement doubled to 30%; vulnerability exploitation as initial access +34%
VerizonAPWG Q2 2025: 1,130,393 phishing attacks – the largest quarterly total since Q2 2023; QR-code phishing targeted 1,642 brands; social media scams grew 51–843% quarter-to-quarter in 2025
APWGAPWG full-year 2025: 3.8 million phishing attacks total (+1% vs 3.76M in 2024); BEC wire-transfer attacks jumped 136% in Q4 2025; SMS phishing surged in H2
APWGWhat this means for you
The FBI received over 880,000 complaints in 2023, but estimates suggest only 15% of fraud victims ever report it. That means the real number of people harmed each year could be in the tens of millions globally. If you have used the internet for more than a few years, you have almost certainly encountered a scam attempt without realising it.
The most dangerous scams today are not the obvious "Nigerian prince" emails. They are investment fraud (including crypto), impersonation scams (posing as government agencies or banks), and pig-butchering, long-term relationship-building before a financial "opportunity" is introduced. These are engineered to be convincing.
A practical rule: no legitimate organisation will ever urgently demand payment via gift card, cryptocurrency, or wire transfer. If you feel rushed to act on a financial decision you did not initiate: stop, verify independently, and do not use the contact details provided in the suspicious message.
Online scam victims vs. phishing emails, today
Billions of phishing emails go out each day, only a tiny fraction find a victim, but that fraction represents millions of real people harmed.
The anatomy of an online scam: how criminals find victims at scale
Two decades of rising losses
The FBI's IC3 has tracked internet crime since 2000, providing a 25-year longitudinal dataset. Annual reported losses grew from hundreds of millions in the early 2000s to $20.8 billion in 2025, the first year above $20 billion. The trajectory steepened sharply after 2019, driven by the rise of cryptocurrency-enabled investment fraud ("pig butchering" scams), business email compromise, and sophisticated phishing operations run by organised crime groups in Southeast Asia, Eastern Europe, and West Africa. COVID-19 dramatically accelerated the trend: IC3 received 68% more complaints in 2020 than 2019.
The tip of the iceberg
IC3 data is widely understood to represent only 10-15% of actual cybercrime victimisation. Most victims don't report. This implies the true US annual victim count is 5-10 million, with global losses potentially reaching $1-2 trillion annually. The Global Anti-Scam Alliance (GASA) surveys millions of consumers globally and consistently finds that approximately 25-30% of adults have been targeted by scams in any given year, with 5-10% suffering financial loss.
How online fraud has grown: 2016-2025
FBI IC3 complaint volumes have grown 188% since 2016, with losses hitting $16 billion in 2024. The shift to cryptocurrency-based fraud post-2019 dramatically increased per-victim losses.
Online fraud victims, growth comparison
| Year | Rate | Est. per day | Context |
|---|---|---|---|
| 2016 | 1/sec | 86K | BEC scams emerge |
| 2020 | 3/sec | 242K | COVID fraud surge (+68% vs 2019) |
| 2022 | 3/sec | 242K | Crypto investment scams dominate; $10B losses first time |
| 2024 | 3/sec | 276K | AI-enabled fraud; pig-butchering scams |
| 2025 | 4/sec | 302K | First year above $20B; AI fraud tracked; BEC and crypto scams dominate |
| 2027 (forecast) | 5/sec | 389K | AI-generated deepfake audio/video scams proliferate |
Key turning points in online fraud
- 2000FBI IC3 (then IFCC) established, first systematic US cybercrime reporting centre
- 2015Business Email Compromise (BEC) emerges as major category; $246M in reported US losses
- 2020COVID-19 drives 68% surge in IC3 complaints to 791,790; pandemic fraud dominates
- 2022US reported losses exceed $10 billion for the first time, cryptocurrency investment scams lead
- 2024$16 billion in reported US losses; investment fraud ($6.5B) and elder fraud ($4.8B) set records
- 2025$20.8 billion in reported US losses, first time above $20B; AI-enabled fraud tracked for the first time; 1M+ complaints filed
Research findings on online fraud
| Year | Finding | Value | Source |
|---|---|---|---|
| 2016 | IC3 received 298,728 complaints; $1.33 billion in losses | 299K complaints/year | FBI / IC3 |
| 2019 | IC3 received 467,361 complaints; $3.5 billion in losses | 467K complaints/year | FBI / IC3 |
| 2020 | IC3 received 791,790 complaints (68% jump vs 2019); $4.2 billion in losses, COVID fraud surge | 792K complaints/year | FBI / IC3 |
| 2021 | IC3 received 847,376 complaints; $6.9 billion in losses; ransomware complaints +62% | 847K complaints/year | FBI / IC3 |
| 2022 | IC3 received 800,944 complaints; $10.3 billion in losses, first time exceeding $10B | 801K complaints/year | FBI / IC3 |
| 2023 | IC3 received 880,418 complaints; $12.5 billion in losses | 880K complaints/year | FBI / IC3 |
| 2024 | IC3 received 859,532 complaints; losses exceeding $16 billion (+33%); crypto investment scams $5.8B | 860K complaints/year | FBI / IC3 |
| 2025 | IC3 received 1,000,000+ complaints; losses $20.8 billion (+26%); first time above $20B; AI-enabled fraud tracked separately for first time: 22,000 complaints, $900M losses; BEC: $3B+ | 1M complaints/year | FBI / IC3 |
How the number is calculated
The live rate uses a 4-step extrapolation from FBI IC3 2025 data. Step 1 (directly measured): 1 million+ US complaints filed, $20.8 billion in losses. Step 2 (assumed): reporting rate estimated at 10-15% from comparison of IC3 and FTC Consumer Sentinel data — meaning the true US victim count is approximately 7-10 million/year; uncertainty range ×2. Step 3 (assumed): global multiplier of ~8× applied based on Europol and UN cybercrime estimates for the ratio of global to US fraud victims — this is the most uncertain step; uncertainty range ×2-3×. Step 4: ÷ 31,557,600 seconds ≈ 3.5/sec (mid) or 1.8/sec (conservative). The counter uses the 3.5/sec mid-estimate. The FBI IC3 report is the most rigorous public dataset for US cybercrime, but the global extrapolation carries significant uncertainty.
Sources used: FBI Internet Crime Complaint Center (IC3) Annual Reports 2000-2025 - FBI IC3 Internet Crime Report 2024 - GASA / Feedzai - Global State of Scams Report 2024 - FBI IC3 Internet Crime Report 2025 - APWG Phishing Activity Trends Report Q2 2025 (largest quarterly total since Q2 2023: 1,130,393 attacks; QR-code phishing targeting 1,642 brands) - APWG Phishing Activity Trends Report Q3 2025 - Verizon Data Breach Investigations Report 2025 (22,052 incidents, 12,195 confirmed breaches – record; 44% ransomware, 30% third-party involvement, released Apr 23 2025). Full methodology: methodology page.
Frequently asked questions
- How many online scam complaints does the FBI receive per year?
- The FBI IC3 received over 1 million complaints in 2025 with losses exceeding $20.8 billion, a 26% increase from 2024. This is the first time reported cybercrime losses surpassed $20 billion. Since 2000, IC3 has received over 9 million complaints totalling more than $95 billion in losses.
- What are the most common online scams?
- By complaint volume (2025): phishing/spoofing, extortion, and personal data breach. By financial loss: investment fraud ($8.6B), BEC ($3B+), and cryptocurrency investment scams ($7.2B). For the first time, the FBI also tracked AI-enabled fraud separately: 22,000 complaints, nearly $900 million in losses.
- Who is most at risk from online scams?
- People over 60 suffer the most total losses: $4.8 billion in 2024 and rising (FBI IC3). Adults 30-49 report the highest complaint volumes. Young adults increasingly fall victim to investment and cryptocurrency scams. AI-enabled fraud disproportionately affects all age groups due to its increasing sophistication.
How the online fraud estimate is sourced and cross-checked
The primary source is the FBI's Internet Crime Complaint Center (IC3), which has published annual Internet Crime Reports since 2000. IC3 data is used by US federal prosecutors, the FTC, and Congressional oversight committees. The 10-15% reporting rate estimate is derived from comparison of IC3 data with Federal Trade Commission Consumer Sentinel Network reports.
Sources
FBI Internet Crime Complaint Center (IC3) Annual Reports 2000-2025 - FBI IC3 Internet Crime Report 2024 - GASA / Feedzai - Global State of Scams Report 2024 - FBI IC3 Internet Crime Report 2025 - APWG Phishing Activity Trends Report Q2 2025 (largest quarterly total since Q2 2023: 1,130,393 attacks; QR-code phishing targeting 1,642 brands) - APWG Phishing Activity Trends Report Q3 2025 - Verizon Data Breach Investigations Report 2025 (22,052 incidents, 12,195 confirmed breaches – record; 44% ransomware, 30% third-party involvement, released Apr 23 2025). Full methodology: methodology page.
Explore related statistics: Phishing emails - Romance scam money lost - Cyberbullying victims, and the live AnythingCounter dashboard.