Global Cybercrime Statistics 2026: Trends and Impact
Table of Contents
- Common Types of Cyber Threats & Their Impacts
- What is Cybercrime? A Comprehensive Overview
- The Rise of Advanced Persistent Threats (APTs)
- How Phishing & Social Engineering Tactics Have Evolved
- Ransomware-as-a-Service (RaaS) Business Model
- The Impact of Cybercrime on the Global Economy & Cyber-Enabled Crime
- Indirect Costs of Cybercrime (Legal, Reputational, and Compliance)
- Economic Damage by Industry & Region
- The Soaring Cost of Cybercrime: 2024 to 2026 and Future Projections
- Top Cybersecurity Threats & Emerging Trends in 2026
- Ransomware Attacks Escalate & New Variants Appear
- AI-Powered Cyber Attacks and the Role of Generative AI
- Cloud Misconfigurations and Exposed Services
- Conclusion
- FAQs on Global Cybercrime Statistics 2026
Viewed alongside broader cybersecurity statistics, cybercrime has evolved into one of the biggest threats to businesses, governments, and individuals worldwide. With the rapid advancement of technology, cybercriminals are leveraging sophisticated techniques to exploit vulnerabilities and conduct cyberattacks at an unprecedented scale. From financial fraud to state-sponsored cyber warfare, the cybercrime landscape is more volatile than ever before. This 2026 edition keeps 2024 figures as a historical baseline and adds the newest 2025 and 2026 data from the FBI, IBM, Verizon, Chainalysis, and Europol.
For the full breakdown of reported losses, attack vectors and industry data, see our cybercrime statistics for 2026.
Key global cybercrime statistics at a glance:
- $20.9 billion in losses from 1,008,597 complaints reported to the FBI IC3 in 2025 (complaints filed mainly by US victims; not a global total), up from $16.6 billion in 2024.
- $11.4 billion lost in 181,565 cryptocurrency-related IC3 complaints in 2025; crypto investment fraud alone caused $7.2 billion, the largest loss category.
- Over $3.4 billion in crypto stolen in 2025 (January to early December), including the $1.5 billion Bybit hack and at least $2.02 billion taken by North Korea-linked groups (Chainalysis).
- $4.99 million average global data breach cost in 2026, a record, versus $4.44 million in 2025 and $4.88 million in 2024; the US average reached $11.5 million (IBM).
- $12.2 trillion projected annual cybercrime damages by 2031 (Cybersecurity Ventures projection, August 2026).
Common Types of Cyber Threats & Their Impacts
What is Cybercrime? A Comprehensive Overview
Cybercrime refers to criminal activities carried out using computers or digital networks, typically involving financial fraud, identity theft, or system hacking. Attackers use various tactics to steal sensitive data, extort organizations, or disrupt critical systems.
The Rise of Advanced Persistent Threats (APTs)
APTs are sophisticated cyberattacks carried out by highly skilled threat actors, often backed by nation-states. They involve prolonged, stealthy infiltration of high-value targets such as government agencies and large corporations.
How Phishing & Social Engineering Tactics Have Evolved
- AI-generated Phishing Emails – Attackers use AI to craft highly convincing messages.
- Deepfake Attacks – Cybercriminals deploy fake audio/video messages for fraud.
- Spear Phishing & Business Email Compromise (BEC) – Targeted attacks on executives.
Ransomware-as-a-Service (RaaS) Business Model
Hackers now offer ransomware as a service, allowing non-technical criminals to launch cyberattacks. Ransomware gangs operate like traditional businesses, offering tech support and profit-sharing. LockBit and Conti defined the model; in 2025 the variants most reported to the FBI IC3 were led by Akira, Qilin, and INC/Lynx.
The Impact of Cybercrime on the Global Economy & Cyber-Enabled Crime
Indirect Costs of Cybercrime (Legal, Reputational, and Compliance)
Cyberattacks cause more than direct financial loss; they also lead to long-term repercussions such as regulatory fines, class-action lawsuits, and diminished customer trust.
Economic Damage by Industry & Region
- Healthcare: The average healthcare breach cost $7.42 million in 2025 and $6.64 million in 2026, according to IBM's Cost of a Data Breach Report, keeping healthcare among the costliest sectors.
- Finance: Account takeovers and business email compromise (BEC) drain billions from banks and their customers. The FBI IC3 recorded $3.05 billion in BEC losses in 2025, up from $2.77 billion in 2024, and IBM puts the average financial-sector breach at about $6.3 million in 2026.
- E-Commerce and consumers: Phishing/spoofing remained one of the most reported crimes to the FBI IC3, with 191,561 complaints in 2025 (193,407 in 2024). Phishing was also the top breach vector in IBM's 2025 report, at 16% of breaches and $4.8 million on average.
The Soaring Cost of Cybercrime: 2024 to 2026 and Future Projections
- Global cybercrime damages (projection): Cybersecurity Ventures projected $10.5 trillion a year in 2025, up from $3 trillion in 2015, and in August 2026 forecast growth slowing to about 2.5% a year, reaching roughly $12.2 trillion annually by 2031. These are modeled estimates, not measured losses.
- AI-driven cyberattacks: The FBI IC3 logged 22,364 AI-related complaints with $893 million in losses in 2025, and IBM's 2026 study found 1 in 4 malicious breaches were AI-enabled, costing about $6 million on average.
- Ransomware payments: Chainalysis tracked on-chain ransom payments falling to about $820 million in 2025 from a revised $892 million in 2024, as more victims refuse to pay (69% of ransomware victims did not pay in the Verizon 2026 DBIR).
Top Cybersecurity Threats & Emerging Trends in 2026
1. Ransomware Attacks Escalate & New Variants Appear
- Ransomware complaints to the FBI IC3 rose to 3,611 in 2025 from 3,156 in 2024, and ransomware appeared in 48% of breaches in the Verizon 2026 DBIR, up from 44% in the 2025 DBIR.
- Industries most affected: The top ransomware variants reported to IC3 in 2025 most impacted Critical Manufacturing, Healthcare and Public Health, and Government Facilities.
2. AI-Powered Cyber Attacks and the Role of Generative AI
- AI-Generated Deepfake Scams – Cybercriminals impersonate executives for fraud.
- AI-Enabled Malware – IBM’s 2026 Cost of a Data Breach Report says the rise in AI-powered attacks was led by deepfake impersonation and AI-enabled malware.
- Europol's view: The Europol IOCTA 2026 calls fraud the fastest-growing area of organised crime and warns that generative AI, encrypted platforms, and residential proxies make scams more convincing and criminals harder to trace.
3. Cloud Misconfigurations and Exposed Services
Misconfigured cloud settings, exposed services, and stolen credentials remain common paths into cloud environments. The Verizon 2026 DBIR found vulnerability exploitation was the top initial access vector at 31% of breaches, and third-party involvement reached 48%. Authorized penetration testing can validate whether exposed cloud services, access controls, and segmentation weaknesses are exploitable in practice.
Conclusion
From the 2024 baseline to the record breach costs and $20.9 billion in FBI-reported losses of 2025-2026, the cybercrime landscape continues to evolve, making cybersecurity a top priority for businesses and individuals alike. Organizations must invest in proactive security strategies, AI-based detection, and regulatory compliance to stay ahead of emerging threats.
FAQs on Global Cybercrime Statistics 2026
- What is the projected global financial impact of cybercrime? Cybersecurity Ventures projected $10.5 trillion a year in 2025 and about $12.2 trillion by 2031 (both projections). Measured losses reported to the FBI IC3 reached $20.9 billion in 2025, up from $16.6 billion in 2024.
- How has ransomware evolved? It is more widespread but earns less per attack: ransomware appeared in 48% of breaches in the Verizon 2026 DBIR, while Chainalysis tracked ransom payments falling to about $820 million in 2025 as more victims refuse to pay. Attackers increasingly lean on data-leak extortion and AI-assisted intrusion.
- Which industries are most affected by cybercrime? – By ransomware complaints to the FBI IC3 in 2025, critical manufacturing, healthcare and public health, and government facilities were most affected; by IBM’s 2026 breach-cost data, healthcare ($6.64 million) and financial services (about $6.3 million) had among the costliest breaches.
- What cybersecurity strategies can businesses implement? – Zero Trust security, AI-driven threat detection, and employee training.
- How can individuals protect themselves from cybercrime? – Use multi-factor authentication, secure passwords, and avoid phishing scams.