Skip to main content
Mallory

FBI says cyber fraud losses hit $17.6 billion as crypto scams topped $11 billion

cryptocurrency-platform-riskbusiness-email-compromisecybercrime-service-ecosystemcritical-infrastructure-threatransomware-group-operation
Updated April 27, 2026 at 06:01 PM12 sources
Share:
FBI says cyber fraud losses hit $17.6 billion as crypto scams topped $11 billion

Get Ahead of Threats Like This

Know if you're exposed. Before adversaries strike.

The FBI’s Internet Crime Complaint Center reported more than 1,008,597 cybercrime complaints in 2025, with cyber-enabled fraud driving $17.6 billion in losses and accounting for 85% of all reported losses. Investment fraud caused the most damage at $8.6 billion, followed by business email compromise at more than $3 billion and tech support fraud at $2.1 billion. Older adults were hit especially hard, with people aged 60 and above filing 201,266 complaints tied to about $7.7 billion in losses, while California, Texas, and Florida recorded the highest complaint volumes.

Cryptocurrency-related crime was a major driver of the surge, with Americans reporting $11.4 billion in crypto scam losses across 181,565 complaints, up 22% from the prior year. The FBI said many cryptocurrency investment scams are sophisticated, long-running schemes linked to organized criminal enterprises in Southeast Asia that use trafficked people as forced labor. The bureau also warned that ransomware remained a persistent threat, investigating more than 200 ransomware variants, actors, and enablers after identifying 63 new variants; ransomware complaints rose to 3,611 with more than $32 million in losses, and attacks affected 14 of 16 U.S. critical infrastructure sectors.

Timeline

  1. Apr 27, 2026

    FTC says social media scams caused over $2.1 billion in U.S. losses in 2025

    The U.S. Federal Trade Commission reported that Americans lost more than $2.1 billion to scams that began on social media in 2025. FTC data said nearly 30% of people who reported losing money to a scam said the fraud started on social platforms, with Facebook accounting for the most reported losses.

  2. Apr 8, 2026

    U.S. launches Scam Center Strike Force targeting Southeast Asian fraud compounds

    U.S. authorities formed the U.S. Attorney’s Office District of Columbia Scam Center Strike Force to investigate scam compounds in Southeast Asia and disrupt the infrastructure supporting related fraud operations. The initiative was highlighted alongside the FBI’s 2025 IC3 fraud reporting.

  3. Apr 6, 2026

    FBI says fraud intervention efforts froze over $679 million in 2025

    In its 2025 IC3 reporting, the FBI highlighted expanded disruption efforts including Operation Winter Shield, Operation Level Up, and Financial Fraud Kill Chain interventions. The agency said these actions helped freeze more than $679 million in fraudulent transfers.

  4. Apr 6, 2026

    FBI highlights AI-related fraud in IC3 annual report for the first time

    In its 2025 IC3 report, released in early April 2026, the FBI said it tracked more than 22,000 AI-related fraud complaints tied to nearly $893 million in losses. The agency also linked AI-enabled business email compromise schemes to more than $30 million in losses to businesses.

  5. Apr 6, 2026

    FBI publishes IC3 report detailing 2025 cybercrime and fraud losses

    In early April 2026, the FBI released its IC3 annual report summarizing 2025 cybercrime trends, including more than $20.8 billion in total reported losses and major increases in fraud, cryptocurrency theft, and ransomware activity.

  6. Jan 31, 2026

    Chainalysis reports up to $17 billion lost globally to crypto scams in 2025

    In January 2026, Chainalysis separately reported that as much as $17 billion in cryptocurrency was lost worldwide to scams and fraud during 2025.

  7. Dec 31, 2025

    FBI identifies 63 new ransomware variants over the last year

    In its annual reporting, the FBI said it is investigating more than 200 ransomware variants, actors, and enablers, and identified 63 new ransomware variants over the prior year.

  8. Dec 31, 2025

    Ransomware complaints and losses rise across U.S. critical infrastructure in 2025

    The FBI said ransomware complaints increased to 3,611 in 2025, with losses exceeding $32 million, up from 3,156 complaints and just over $12 million in 2024. It also reported that 14 of 16 U.S. critical infrastructure sectors were hit by ransomware attacks during the year.

  9. Dec 31, 2025

    Cryptocurrency-related scams generate $11.3B-$11.4B in U.S. losses in 2025

    The FBI said Americans reported roughly $11.3 billion to $11.4 billion in cryptocurrency-linked losses in 2025, with 181,565 complaints and a 22% year-over-year increase. The agency highlighted sophisticated investment scams often tied to organized criminal enterprises in Southeast Asia.

  10. Dec 31, 2025

    Cyber-enabled fraud drives $17.6 billion in reported 2025 losses

    The FBI reported that cyber-enabled fraud accounted for 85% of all reported cybercrime losses in 2025, totaling $17.6 billion. Investment fraud caused the largest losses at $8.6 billion, followed by business email compromise and tech support fraud.

  11. Dec 31, 2025

    IC3 records more than 1 million cybercrime complaints in 2025

    During 2025, the FBI's Internet Crime Complaint Center received 1,008,597 complaints, reflecting a broad rise in reported cybercrime and fraud affecting Americans.

See the full picture in Mallory

Mallory subscribers get deeper analysis on every story, including:

Impact Assessment

Who’s affected and how

Technical Details

Deep-dive technical analysis

Response Recommendations

Actionable next steps for your team

Indicators of Compromise

IPs, domains, hashes, and more

AI Threads

Ask questions and take action on every story

Advanced Filters

Filter by topic, classification, timeframe

Scheduled Alerts

Get matching stories delivered automatically

Related Stories

Chainalysis Reports Surge in Crypto Scams Driven by Impersonation and AI-Enabled Fraud

Chainalysis Reports Surge in Crypto Scams Driven by Impersonation and AI-Enabled Fraud

Chainalysis reported that **cryptocurrency scams and fraud generated an estimated $17B in victim losses in 2025**, making it the largest year on record in its tracking, with at least **$14B observed on-chain** and expectations that totals will rise as additional illicit addresses are identified. The report attributes the increase to the continued industrialization of scam operations and infrastructure, including *phishing-as-a-service*, AI-generated deepfakes, and professional money-laundering networks, alongside major scam categories such as **pig butchering/romance scams** and HYIP-style schemes. Chainalysis also assessed that scam efficiency increased materially, citing a **253% YoY rise in average scam payment** (from **$782 in 2024** to **$2,764 in 2025**) and noting that **AI-enabled scams** can be significantly more profitable than traditional approaches. A key driver highlighted was the rapid growth of **impersonation scams**, which Chainalysis said rose roughly **1,400% YoY**, with average payments to those clusters up more than **600%**. One example cited was an **E‑ZPass-themed smishing campaign** that used fake toll-payment texts and lookalike sites to deceive victims; Chainalysis linked this activity to the Chinese-speaking group **“Darcula” / “Smishing Triad,”** and referenced reporting and legal action describing tooling and templates used to scale these lures. Separately, reporting on **AI deepfake impersonation** shows similar social-engineering dynamics outside of “crypto-only” contexts, including deepfakes impersonating religious figures to solicit donations and promote fraudulent crypto-related offers, reinforcing the report’s broader finding that **AI-assisted impersonation** is increasing the reach and credibility of scams.

1 months ago
Surge in Crypto-Linked Illicit Finance and Investment Fraud

Surge in Crypto-Linked Illicit Finance and Investment Fraud

Blockchain intelligence reporting indicated **illicit cryptocurrency flows hit a record $158B in 2025**, a sharp increase attributed largely to **sanctions-linked activity** (notably Russia-associated networks and stablecoin usage), broader **state and state-aligned adoption of crypto for financial infrastructure** (including Russia, Iran, and Venezuela), and improved attribution/intelligence sharing that surfaced previously unattributed flows. The same reporting highlighted continued criminal monetization via crypto, including **$2.87B stolen across 150 hacks in 2025** (with the largest share concentrated in a small number of incidents) and roughly **$35B sent to scam schemes**, dominated by investment-style fraud. Belgian authorities separately reported escalating **investment fraud losses in H2 2025**, with more than **€10.5M** lost via fraudulent trading platforms often marketed as crypto-related, and an additional **€9.5M+** tied to “exclusive” investment advice pushed through **WhatsApp groups**. In response, Belgium’s CCB/partners promoted public reporting and expanded disruption via the **Belgian Anti-Phishing Shield (BAPS)**, with the FSMA able to submit suspected fraudulent sites for blocking/redirection to warning pages to reduce victimization.

1 months ago
Ongoing Cryptocurrency Scams and Thefts Targeting Individuals and Infrastructure

Ongoing Cryptocurrency Scams and Thefts Targeting Individuals and Infrastructure

Multiple forms of cryptocurrency-related fraud and theft continue to impact individuals and organizations. Ongoing email and web-based scams promise large Bitcoin payouts, luring victims to fake chatbot sites and requiring them to pay conversion fees to criminal-controlled wallets. These campaigns often abuse platforms like telegra[.]ph and Google Forms to create convincing phishing pages. Meanwhile, the FBI reports a significant and rising trend in Bitcoin ATM fraud, with Americans losing at least $333 million in 2025, and scammers frequently targeting older victims. Law enforcement actions have included lawsuits against ATM providers accused of enabling or profiting from fraudulent transactions. In addition to direct scams, sophisticated attacks have leveraged previous data breaches to facilitate cryptocurrency theft. Investigations have traced ongoing wallet-draining attacks to the 2022 LastPass breach, where attackers obtained encrypted password vaults containing private keys and seed phrases. Victims with weak master passwords have been especially vulnerable, with stolen funds laundered through Russian exchanges. These incidents highlight the evolving tactics of cybercriminals in exploiting both technical vulnerabilities and social engineering to steal cryptocurrency assets.

1 months ago

Get Ahead of Threats Like This

Mallory continuously monitors global threat intelligence and correlates it with your attack surface. Know if you're exposed. Before adversaries strike.