Identity Theft Statistics 2026: The Numbers Every American Should Know
Last Updated: May 2026 | Sources: FTC, FBI IC3, Javelin Strategy & Research, ITRC
This page compiles the most current identity theft and fraud statistics from primary government and research sources. All figures are sourced from the FTC Consumer Sentinel Network, FBI Internet Crime Complaint Center (IC3), Javelin Strategy & Research, and the Identity Theft Resource Center (ITRC).
Key Numbers at a Glance
| Statistic | Figure | Source |
|---|---|---|
| FTC identity theft reports filed (2024) | 1,135,270 | FTC Consumer Sentinel |
| Year-over-year increase in reports | +9.5% | FTC |
| Identity fraud losses (2024) | $12.5–16.6 billion | Javelin / FBI IC3 |
| Combined fraud + scam losses (2025) | $38 billion | Javelin 2026 Study |
| New identity theft victim (US) | Every 4.9 seconds | FTC data |
| Americans who have experienced ID theft | 22% | FTC surveys |
| Data compromises recorded (2025) | 3,322 | ITRC 2025 Annual Report |
| Five-year increase in data compromises | 79% | ITRC |
| Credential theft surge (2025) | +160% YoY | Recorded Future |
| Stolen logins from infected hosts (2025) | 1.8 billion | Recorded Future |
| Average loss per identity theft case (2026) | ~$1,600 | Javelin |
| Global identity fraud cost (2026 projected) | $50+ billion | Industry estimates |
FTC Report Data: Who’s Being Hit
By Age Group
Adults in their 30s account for the largest share of FTC identity theft complaints, but older adults suffer the highest median losses when fraud occurs.
| Age Group | Report Share | Median Loss When Loss Occurs |
|---|---|---|
| 18–29 | 16% | $400 |
| 30–39 | 30% | $497 |
| 40–49 | 23% | $543 |
| 50–59 | 15% | $718 |
| 60–69 | 9% | $880 |
| 70–79 | 5% | $1,000 |
| 80+ | 2% | $1,650 |
The pattern: younger adults encounter more fraud attempts. Older adults encounter fewer but more targeted attacks — primarily bank wire fraud and impersonation schemes — and lose significantly more per incident.
Adults over 60 suffer the highest total losses at $4.8 billion per FBI IC3. Boomers report less frequently but lose more per incident.
Most Common Types of Identity Theft (2024)
| Type | Share of Reports |
|---|---|
| Credit card fraud (new accounts) | 40% |
| Government documents / benefits fraud | 18% |
| Loan or lease fraud | 14% |
| Employment or tax-related fraud | 11% |
| Bank / financial account fraud | 9% |
| Phone or utilities fraud | 6% |
| Other | 2% |
Credit card fraud has ranked #1 every year since 2019.
Data Breach Statistics
The ITRC 2025 Annual Report confirmed a record 3,322 data compromises — a 79% five-year jump.
The ITRC Q1 2026 analysis recorded 780 data compromises generating nearly 140 million victim notices in just the first quarter alone.
Largest Data Breaches Contributing to Identity Theft Risk
| Breach | Year | Records Exposed |
|---|---|---|
| National Public Data (NPD) | 2024 | 2.7 billion records |
| Change Healthcare | 2024 | 190 million medical records |
| Ticketmaster / Live Nation | 2024 | 560 million records |
| AT&T | 2024 | 73 million records |
| Equifax | 2017 | 147 million records |
| Yahoo | 2013–2016 | 3 billion records |
The cumulative effect: Most Americans’ SSNs, addresses, and financial data are now available on criminal markets from historical breaches alone — regardless of whether they’ve been directly targeted. Learn exactly what happens when your SSN is exposed.
AI-Driven Fraud: The 2026 Threat Shift
Credential theft surged 160% in 2025, with 1.8 billion logins stolen from 5.8 million infected hosts, per Recorded Future data released in March 2026.
The mechanism has changed. In 2026, the leading credential theft vector is not database breaches — it is infostealer malware installed on individual devices that silently harvests:
- Saved browser passwords
- Session cookies and authentication tokens
- Autofill data (addresses, card numbers)
- Banking app credentials
- Crypto wallet keys
These “stealer logs” are sold on criminal markets within hours of collection, giving attackers real-time access to victims’ accounts before passwords are even changed.
AI grandparent scams: The FBI reported a sharp increase in AI voice-cloning scams targeting seniors — criminals use publicly available voice samples to impersonate grandchildren or family members in distress. Seniors over 60 lost $4.8 billion to fraud in 2024 per FBI IC3. For a comprehensive look at these threats and how to counter them, see our senior identity theft prevention guide.
Synthetic identity fraud: Criminals combine real SSNs (often from children or deceased individuals) with fabricated names and addresses to create fake identities that pass standard verification. These synthetic identities are increasingly difficult to detect.
Child Identity Theft Statistics
Children are 51 times more likely to be identity theft victims than adults, per Javelin/Carnegie Mellon CyLab research.
- An estimated 10% of American children’s Social Security numbers have been used by someone else
- The average victim is 12 years old when theft occurs — but doesn’t discover it until applying for credit or a first apartment, often at 18–21
- 915,000 children were victims of identity theft in 2022 per FTC data
- Children’s SSNs are particularly valuable because they have no credit history — making fraudulent applications harder to flag
Recovery Statistics
| Metric | Figure |
|---|---|
| Average time to discover identity theft | 3–6 months |
| Average time to fully resolve | 6 months–2 years |
| Average hours spent resolving | 100–200 hours |
| Percentage who fully recover financially | ~80% |
| Victims reporting emotional distress | 67% |
| Victims re-targeted after initial theft | 1 in 4 |
The discovery window matters most. FTC research documents that when fraud is discovered within five months, losses stayed under $5,000 in 82% of cases. When discovery took six months or longer, losses exceeded $5,000 in 44% of cases. Every month of undetected fraud compounds the damage.
Geographic Distribution: Highest-Risk States (2024)
States with the highest identity theft reports per 100,000 residents:
| Rank | State | Reports per 100K |
|---|---|---|
| 1 | Georgia | 678 |
| 2 | Florida | 541 |
| 3 | Nevada | 489 |
| 4 | California | 412 |
| 5 | Texas | 398 |
| 6 | Delaware | 387 |
| 7 | Illinois | 356 |
| 8 | New York | 342 |
| 9 | Arizona | 318 |
| 10 | Maryland | 301 |
The Miami–Fort Lauderdale and Atlanta–Sandy Springs metro areas have consistently ranked #1 and #2 nationally for per-capita identity theft complaints for multiple consecutive years.
The Detection Advantage: Why Monitoring Matters
The single most important variable in identity theft outcomes is how quickly it’s detected.
| Detection Timing | Cases with <$5,000 Loss | Cases with >$5,000 Loss |
|---|---|---|
| Within 5 months | 82% | 18% |
| 6+ months | 56% | 44% |
Services that provide real-time alerts — for credit inquiries, new account openings, dark web exposures — exist specifically to compress this window. Every day of earlier detection meaningfully changes the outcome.
Sources: FTC Consumer Sentinel Network 2024 Annual Report; FBI IC3 2025 Annual Report; Javelin Strategy & Research 2026 Identity Fraud Study; ITRC 2025 Annual Report; Recorded Future 2026 Credential Theft Analysis. Statistics updated May 2026.
Related: Best Identity Theft Protection Services | How to Prevent Identity Theft | What To Do If Your Identity Is Stolen | How to Freeze Your Credit | Best Identity Theft Protection for Seniors | Famous Identity Theft Cases | Senior Identity Theft Guide
