Identity Theft Statistics 2026: The Numbers Every American Should Know
Last Updated: September 2026 | Sources: FTC, FBI IC3, Javelin Strategy & Research, ITRC
Identity theft affected 36 million Americans in 2025, with combined fraud and scam losses reaching $38 billion per Javelin Strategy & Research. The FBI’s IC3 reported $20.9 billion in total cybercrime losses — a 26% increase over 2024 — with adults over 60 accounting for $7.7 billion of that total. Data compromises hit 3,322 in 2025, credential theft surged 160%, and AI-enabled fraud grew 1,210% year-over-year.
All figures are sourced from the FTC Consumer Sentinel Network, FBI Internet Crime Complaint Center (IC3), Javelin Strategy & Research, the Identity Theft Resource Center (ITRC), and Recorded Future.
Key Numbers at a Glance
| Statistic | Figure | Source |
|---|---|---|
| FTC identity theft reports filed (2024) | 1,135,270 | FTC Consumer Sentinel |
| Year-over-year increase in reports | +9.5% | FTC |
| FBI IC3 total cybercrime losses (2025) | $20.9 billion | FBI IC3 2025 Report |
| Combined fraud + scam losses (2025) | $38 billion | Javelin 2026 Study |
| Elder fraud losses, 60+ (2025) | $7.75 billion | FBI IC3 |
| New identity theft victim (US) | Every 4.9 seconds | FTC data |
| Americans who have experienced ID theft | 22% | FTC surveys |
| Data compromises recorded (2025) | 3,322 | ITRC 2025 Annual Report |
| Five-year increase in data compromises | 79% | ITRC |
| Credential theft surge (2025) | +160% YoY | Recorded Future |
| Stolen logins from infected hosts (2025) | 1.8 billion | Recorded Future |
| Average loss per identity theft case (2026) | ~$1,600 | Javelin |
| Global identity fraud cost (2026 projected) | $50+ billion | Industry estimates |
FTC Report Data: Who’s Being Hit
By Age Group
Adults in their 30s account for the largest share of FTC identity theft complaints, but older adults suffer the highest median losses when fraud occurs.
| Age Group | Report Share | Median Loss When Loss Occurs |
|---|---|---|
| 18–29 | 16% | $400 |
| 30–39 | 30% | $497 |
| 40–49 | 23% | $543 |
| 50–59 | 15% | $718 |
| 60–69 | 9% | $880 |
| 70–79 | 5% | $1,000 |
| 80+ | 2% | $1,650 |
The pattern: younger adults encounter more fraud attempts. Older adults encounter fewer but more targeted attacks — primarily bank wire fraud and impersonation schemes — and lose significantly more per incident.
Adults over 60 suffer the highest total losses at $7.7 billion in 2025 per FBI IC3 — more than double the next-closest age group. They report less frequently but lose far more per incident.
Most Common Types of Identity Theft (2024)
| Type | Share of Reports |
|---|---|
| Credit card fraud (new accounts) | 40% |
| Government documents / benefits fraud | 18% |
| Loan or lease fraud | 14% |
| Employment or tax-related fraud | 11% |
| Bank / financial account fraud | 9% |
| Phone or utilities fraud | 6% |
| Other | 2% |
Credit card fraud has ranked #1 every year since 2019.
Data Breach Statistics
The ITRC 2025 Annual Report confirmed a record 3,322 data compromises — a 79% five-year jump.
The ITRC Q1 2026 analysis recorded 780 data compromises generating nearly 140 million victim notices in just the first quarter alone.
Largest Data Breaches Contributing to Identity Theft Risk
| Breach | Year | Records Exposed |
|---|---|---|
| National Public Data (NPD) | 2024 | 2.7 billion records |
| Change Healthcare | 2024 | 190 million medical records |
| Ticketmaster / Live Nation | 2024 | 560 million records |
| AT&T | 2024 | 73 million records |
| Equifax | 2017 | 147 million records |
| Yahoo | 2013–2016 | 3 billion records |
The cumulative effect: Most Americans’ SSNs, addresses, and financial data are now available on criminal markets from historical breaches alone — regardless of whether they’ve been directly targeted. Learn exactly what happens when your SSN is exposed.
Financial Losses by Fraud Type (FBI IC3 2025)
The FBI IC3 received 859,532 complaints in 2025 with total losses of $20.9 billion — a 26% increase over 2024’s $16.6 billion. Here is how those losses break down by crime type:
| Crime Type | Total Losses (2025) | YoY Change |
|---|---|---|
| Investment scams | $8.2 billion | +47% |
| Business email compromise (BEC) | $2.8 billion | +16% |
| Tech support / customer support | $1.5 billion | +12% |
| Personal data breach | $1.4 billion | — |
| Confidence / romance scams | $1.1 billion | +22% |
| Government impersonation | $785 million | +99% |
| Cryptocurrency (cross-cutting) | $9.3 billion | +66% |
Investment scams — primarily “pig butchering” schemes that combine romance-style grooming with fraudulent crypto platforms — now account for more losses than all other categories combined. Government impersonation nearly doubled year-over-year, driven by AI voice cloning and caller ID spoofing.
Losses by Age Group (FBI IC3 2025)
| Age Group | Complaints | Total Losses | Avg Loss Per Victim |
|---|---|---|---|
| Under 20 | 31,254 | $67 million | $2,145 |
| 20–29 | 112,069 | $563 million | $5,024 |
| 30–39 | 153,293 | $1.7 billion | $11,090 |
| 40–49 | 167,066 | $2.96 billion | $17,716 |
| 50–59 | 124,820 | $3.7 billion | $29,644 |
| 60+ | 201,266 | $7.75 billion | $38,500 |
Adults 60+ file 20% of all complaints but account for 37% of all dollar losses. Per-victim losses increase sharply with age — a 60+ victim loses nearly 8 times more on average than a victim in their 20s.
Year-Over-Year Trends
FBI IC3 Total Losses (All Ages)
| Year | Total Losses | Complaints | YoY Loss Change |
|---|---|---|---|
| 2020 | $4.2 billion | 791,790 | — |
| 2021 | $6.9 billion | 847,376 | +64% |
| 2022 | $10.3 billion | 800,944 | +49% |
| 2023 | $12.5 billion | 880,418 | +21% |
| 2024 | $16.6 billion | 859,532 | +33% |
| 2025 | $20.9 billion | 859,532 | +26% |
Total losses have increased 398% in five years — from $4.2 billion in 2020 to $20.9 billion in 2025.
Elder Fraud Trend (60+)
| Year | Losses (60+) | Complaints (60+) |
|---|---|---|
| 2020 | $966 million | 105,301 |
| 2021 | $1.7 billion | 92,000+ |
| 2022 | $3.1 billion | 88,262 |
| 2023 | $3.4 billion | 101,068 |
| 2024 | $4.9 billion | 147,127 |
| 2025 | $7.75 billion | 201,266 |
Elder fraud losses have grown 702% since 2020 — outpacing overall cybercrime growth by a wide margin.
Identity Theft by Method
Not all identity theft happens online. The FTC and FBI data show that fraud reaches victims through multiple channels — and the mix is shifting.
Online vectors (growing):
- Phishing emails and smishing (SMS phishing) remain the most common initial contact method, accounting for roughly 30% of identity theft complaints
- Social media scams generated $2.1 billion in losses in 2025 — 8 times higher than 2020 — with Facebook producing more losses than any other platform
- Infostealer malware harvested 1.8 billion credentials from 5.8 million infected devices in 2025
- Data broker exposure enables targeted phishing by providing scammers with names, addresses, phone numbers, and family details
Offline vectors (persistent):
- Mail theft led to $688 million in check fraud in a single six-month period, with mailbox theft increasing 87% between 2019 and 2022
- Dumpster diving — discarded financial statements, pre-approved credit offers, and medical records remain a source of stolen personal information
- Familiar fraud — 90% of elder financial exploitation is committed by family members or trusted individuals, often through power of attorney abuse
- Physical document theft — wallets, purses, and stolen mail account for approximately 25% of identity theft cases where the method is known
AI-Driven Fraud: The 2026 Threat Shift
Credential theft surged 160% in 2025, with 1.8 billion logins stolen from 5.8 million infected hosts, per Recorded Future data released in March 2026.
The mechanism has changed. In 2026, the leading credential theft vector is not database breaches — it is infostealer malware installed on individual devices that silently harvests:
- Saved browser passwords
- Session cookies and authentication tokens
- Autofill data (addresses, card numbers)
- Banking app credentials
- Crypto wallet keys
These “stealer logs” are sold on criminal markets within hours of collection, giving attackers real-time access to victims’ accounts before passwords are even changed.
AI grandparent scams: The FBI reported a sharp increase in AI voice-cloning scams targeting seniors — criminals use publicly available voice samples to impersonate grandchildren or family members in distress. Seniors over 60 lost $7.7 billion to fraud in 2025 per FBI IC3 — a 59% increase over the prior year. For a comprehensive look at these threats and how to counter them, see our senior identity theft prevention guide.
Deepfake fraud: Deepfake-related losses hit $1.1 billion in the U.S. in 2025, tripling from the prior year. AI can now clone a voice from just 3 seconds of audio — enough for a convincing phone call to a grandparent or a colleague authorizing a wire transfer. The largest single deepfake case: a Hong Kong finance employee was tricked into transferring $25.6 million after a video call convincingly impersonated the company’s CFO using AI-generated video.
Synthetic identity fraud: Criminals combine real SSNs (often from children or deceased individuals) with fabricated names and addresses to create fake identities that pass standard verification. These synthetic identities are increasingly difficult to detect and can build credit for years before discovery.
Child Identity Theft Statistics
Children are 51 times more likely to be identity theft victims than adults, per Javelin/Carnegie Mellon CyLab research.
- An estimated 1 in 50 children fall victim to identity theft each year — roughly 1 to 1.7 million children annually
- The average victim is 12 years old when theft occurs — but doesn’t discover it until age 18–21, when applying for credit or a first apartment
- 75% of child identity theft victims know the perpetrator — typically a parent, relative, or trusted adult
- The PowerSchool breach in December 2024 exposed 62 million student records — the largest-ever breach of U.S. K-12 data
- FTC child identity theft reports surged 40% between 2021 and 2024
- Children’s SSNs are particularly valuable because they have no credit history — making fraudulent applications harder to flag
For a complete breakdown including protection steps, see our guide on protecting your child’s identity online.
Recovery Statistics
| Metric | Figure |
|---|---|
| Average time to discover identity theft | 3–6 months |
| Average time to fully resolve | 6 months–2 years |
| Average hours spent resolving | 100–200 hours |
| Percentage who fully recover financially | ~80% |
| Victims reporting emotional distress | 67% |
| Victims re-targeted after initial theft | 1 in 4 |
The discovery window matters most. FTC research documents that when fraud is discovered within five months, losses stayed under $5,000 in 82% of cases. When discovery took six months or longer, losses exceeded $5,000 in 44% of cases. Every month of undetected fraud compounds the damage.
Geographic Distribution: Highest-Risk States (2024)
States with the highest identity theft reports per 100,000 residents:
| Rank | State | Reports per 100K |
|---|---|---|
| 1 | Georgia | 678 |
| 2 | Florida | 541 |
| 3 | Nevada | 489 |
| 4 | California | 412 |
| 5 | Texas | 398 |
| 6 | Delaware | 387 |
| 7 | Illinois | 356 |
| 8 | New York | 342 |
| 9 | Arizona | 318 |
| 10 | Maryland | 301 |
The Miami–Fort Lauderdale and Atlanta–Sandy Springs metro areas have consistently ranked #1 and #2 nationally for per-capita identity theft complaints for multiple consecutive years.
The Detection Advantage: Why Monitoring Matters
The single most important variable in identity theft outcomes is how quickly it’s detected.
| Detection Timing | Cases with <$5,000 Loss | Cases with >$5,000 Loss |
|---|---|---|
| Within 5 months | 82% | 18% |
| 6+ months | 56% | 44% |
Services that provide real-time alerts — for credit inquiries, new account openings, dark web exposures — exist specifically to compress this window. Every day of earlier detection meaningfully changes the outcome. When an alert does arrive, responding correctly within the first hour determines whether the exposure stays an alert or becomes a loss.
Sources: FTC Consumer Sentinel Network 2024 Annual Report; FBI IC3 2024 and 2025 Annual Reports; Javelin Strategy & Research 2026 Identity Fraud Study; ITRC 2025 Annual Report; Recorded Future 2026 Credential Theft Analysis. Statistics updated September 2026.
Related: Best Identity Theft Protection Services | How to Prevent Identity Theft | What To Do If Your Identity Is Stolen | How to Freeze Your Credit | Mail Identity Theft | Famous Identity Theft Cases
