FBI IC3 Reports $17.6 Billion in Cyber-Fraud Losses in 2025

Summary
The FBI’s 2025 IC3 report recorded $17.6 billion in cyber-enabled fraud losses, 85% of total reported losses. It also highlighted ransomware activity, AI-related complaints and cryptocurrency-linked theft.
Key points
- Cyber-enabled fraud accounted for $17.6 billion in reported losses, 85% of total financial losses reported to IC3 in 2025.
- Investment fraud led reported losses at $8.6 billion, followed by business email compromise at more than $3 billion and tech support fraud at $2.1 billion.
- The FBI said it is investigating more than 200 ransomware variants, actors and enablers; it identified 63 new variants in 2025.
- IC3 received 3,611 ransomware-related complaints tied to more than $32 million in reported losses, up from 3,156 complaints and just over $12 million in 2024.
- About 22,000 complaints involving AI were associated with roughly $893 million in reported losses; cryptocurrency-related losses exceeded $11.3 billion.
- People aged 60 and older filed 201,266 complaints linked to about $7.7 billion in reported losses; ransomware affected 14 of 16 U.S. critical infrastructure sectors.
Article Details
- Publisher
- FBI Internet Crime Complaint Center (IC3)
- Report Period
- 2025
- Scope
- IC3-reported cybercrime losses and complaints, including fraud, ransomware, AI-related complaints, and cryptocurrency theft.
- Sample Size
- 1,008,597 complaints received by IC3 in 2025.
- Key Statistics
- Cyber-enabled fraud accounted for $17.6 billion in reported losses, 85% of total losses, and 45% of complaints in 2025.
- Investment fraud accounted for $8.6 billion in losses; business email compromise scams caused over $3 billion, and tech support fraud caused $2.1 billion.
- The FBI identified 63 new ransomware variants in 2025; 3,611 related complaints reported more than $32 million in losses. The FBI was investigating over 200 ransomware variants, actors, and enablers.
- Approximately 22,000 complaints involving AI were associated with roughly $893 million in reported losses; cryptocurrency-related losses exceeded $11.3 billion.
- Ransomware affected 14 of the 16 U.S. critical infrastructure sectors in 2025.
