The numbers no longer shock in isolation — they demand context. In 2025, cryptocurrency scams received at least $14 billion on-chain, crypto fraud complaints to the FBI hit a record 181,565, and the average victim lost more in a single scam payment than most people earn in a month.

Across both hacks and fraud combined, the crypto industry lost $3.4 billion to hacks in 2025 and over $1 billion more through April 2026 — but those headline figures obscure the quieter, more pervasive damage caused by scams that target everyday users rather than protocol treasuries. Investment fraud, rug pulls, AI deepfakes, phishing, and forced-labor scam compounds are the real mass-market threat.

This article maps the scam and fraud side of that picture: who’s being targeted, which tactics are dominating, and what the data says about where this is heading.

Overall Scale of the Problem

2026 — Early Data and Accelerating Trends

What the 2026 data already shows is a shift in attacker strategy rather than just scale. Signature phishing losses jumped 207% in January 2026 versus December 2025, according to Scam Sniffer, draining $6.27 million from 4,741 victims. Notably, the victim count actually fell 11% even as stolen value surged — just two victims accounted for 65% of all January phishing losses. Security researchers call this “whale hunting”: scammers abandoning mass campaigns to focus on fewer, wealthier targets.

Address poisoning reinforced the same trend. In January 2026, one investor lost $12.25 million after copying a fraudulent address from their own transaction history. A month earlier, in December 2025, another victim lost $50 million the same way, per Scam Sniffer. Furthermore, the APWG’s Q1 2026 Phishing Activity Trends Report recorded 971,181 phishing attacks — a 13.8% increase over Q4 2025. A notable new vector: cybercrime gangs are increasingly targeting telecom sector brands, shifting away from the crypto-native phishing that dominated previous quarters.

On the enforcement side, 2026’s first four months produced more action against pig-butchering networks than the entire preceding decade combined, per CryptoTimes. The DOJ Scam Center Strike Force had already recovered $580 million in crypto within its first three months. By April 23, authorities had additionally restrained $701.96 million linked to money laundering and seized 503 fake investment websites.

AI, meanwhile, crossed a new threshold in 2026. The FBI’s IC3 Annual Report logged 22,000+ AI-related fraud complaints in 2025, causing $893 million in losses. As AI tools grow cheaper and more accessible, that figure is expected to climb sharply. Consequently, Deloitte projects generative AI-enabled fraud losses in the US alone could reach $40 billion by 2027 — growing at a 32% compound annual rate.

2025 — The Baseline

Cryptocurrency scams received at least $14 billion on-chain in 2025, according to Chainalysis — up from $9.9 billion initially reported for 2024, a figure that Chainalysis later revised to approximately $12 billion upon recalculation.

How Much Did the Average Scam Cost Victims?

The average scam payment surged from $782 in 2024 to $2,764 in 2025 — a 253% year-over-year increase. That single number captures the shift happening in the fraud market: scammers are running fewer operations but targeting higher-value victims more precisely.

Meanwhile, TRM Labs recorded illicit crypto volume reaching an all-time high of $158 billion in 2025, up 145% from $64.5 billion in 2024. Even so, illicit volume as a share of overall crypto activity actually fell slightly — from 1.3% to 1.2% — as the broader market grew faster than fraud volumes. TRM also recorded $23 billion in verified fraud and an additional $12 billion tied to community complaints, putting total estimated fraud scheme inflows at roughly $35 billion for the year.

What the FBI’s IC3 Report Reveals

The FBI’s Internet Crime Complaint Center (IC3) 2025 Annual Report is the most authoritative US government source on crypto fraud losses. Key findings include:

• $11.366 billion in total crypto fraud losses reported — a 22% year-over-year increase
• 181,565 cryptocurrency-related complaints filed — up 21% from 2024
• Average loss per complaint: $62,604
• $7.2 billion in cryptocurrency investment fraud specifically — the single highest source of financial loss to Americans in 2025
• $6.1 billion in victim funds flowing to Pyramid and Ponzi schemes — a 49% increase versus 2024
• 13 individual Ponzi/pyramid schemes exceeded $100 million in incoming victim funds — up from just 6 in 2024

2024 — Setting the Baseline

In 2024, the FTC reported a median investment scam loss of $9,300 per US victim, rising to $10,000 through Q3 2025. US victims paid approximately $563 million in cryptocurrency to investment scams during Q1–Q3 2024 — a figure that climbed to $863 million in the same period of 2025, a $300 million year-over-year jump.

Bitcoin teller machine (BTM) fraud losses hit a record $389 million in 2024 — up sharply from just $114 million in 2023. That number moderated slightly to $333.5 million in 2025, but the underlying infrastructure powering these scams — impersonation of government officials and law enforcement — continued to expand.

Notable Scam & Fraud Events (2025–2026)

The table below summarizes the most significant individual scam and fraud events of the period. Unlike exchange hacks, these events targeted users directly — through deception, impersonation, forced-labor compounds, and fraudulent investment schemes.

Sources: Chainalysis 2026 Crypto Scam Report, FBI IC3, DOJ, Brooklyn DA, Sumsub

Mantra Network (OM) Collapse (2025 | ~$5.5B)

The single most damaging rug pull of 2025 was the Mantra Network (OM) token collapse in early 2025. According to BYDFi, the incident accounted for approximately 92% of all early-2025 rug pull losses — pushing the early-year total to nearly $6 billion versus just $90 million in the same period of 2024. As a result, the collapse wiped out billions in retail investor value that had accumulated on artificial tokenomics and opaque team token allocations.

MetaYield Farm — February (2025 | $290M)

In February 2025, MetaYield Farm vanished with $290 million in user deposits — making it the single largest confirmed rug pull of the year. The project had attracted capital via yield farming promises amplified through social media promotion on Telegram and Discord. Funds proved irrecoverable. The event consequently became a case study in how sophisticated marketing can mask a fundamentally fraudulent product.

Coinbase Insider Breach & Impersonation Campaign (2025 | $180–400M)

In 2025, attackers bribed overseas Coinbase employees to access internal systems, compromising the personal data of roughly 97,000 users — approximately 1% of monthly active customers. Projected losses from the resulting fraud range between $180 million and $400 million. The attackers demanded a $20 million ransom; Coinbase refused, instead offering that sum as a reward for information leading to the criminals’ arrest. Authorities later arrested a former customer service agent in India for allegedly accepting $250,000 in bribes.

The stolen data was rapidly weaponized. In December 2025, the Brooklyn District Attorney’s office indicted Ronald Spektor, a 23-year-old Brooklyn resident, for orchestrating a cryptocurrency scam that defrauded victims of nearly $16 million. Spektor and his co-conspirators impersonated Coinbase customer service representatives, contacted users with alarming claims about unauthorized account access, and convinced them to transfer crypto to “secure” wallets under scammer control. The case was a textbook example of how a data breach becomes the raw material for a follow-on impersonation campaign.

E-ZPass Scam (November 2025 | ~$1B)

In November 2025, researchers identified a Chinese-speaking cybercriminal group known as “Darcula” — also called the Smishing Triad — behind a massive SMS phishing operation. The group leveraged software from a vendor called “Lighthouse,” a Chinese-language provider offering phishing kits at tiered pricing: $50 for full-feature development, $30 for proxy development, and $20 for version updates.

The E-ZPass toll-fee scam scheme reached 330,000 texts in a single day as part of a broader campaign that amassed approximately $1 billion over three years — duping more than 1 million people in at least 121 countries, per the Chainalysis 2026 Crypto Scam Report. The Lighthouse vendor itself received over 7,000 deposits and accumulated over $1.5 million in cryptocurrency across three years of operation.

Tickmilleas (December 2025 | $315M)

On December 2, 2025, the US government seized the domain tickmilleas[dot]com — core infrastructure for a transnational crypto investment fraud network operating out of the Tai Chang scam compound along the Myanmar-Thailand border. Federal affidavits identified multiple victims, with individual reported losses reaching up to $125,000 per victim.

The broader Tai Chang scam network is linked to hundreds of victims, with over 400 suspected targets losing an estimated $90 million. The US government ultimately filed civil forfeiture complaints tracking over $225.3 million in cryptocurrency tied to the broader underlying fraud network, according to the Chainalysis 2026 Crypto Scam Report.

Prince Group Sanctions (October 2025 | $15B)

In October 2025, the US Department of Justice and the UK Foreign Office jointly sanctioned the Prince Group and dozens of its affiliates. Prince Group chairman Chen Zhi allegedly oversaw Cambodian forced-labor scam compounds that powered large-scale cryptocurrency fraud targeting victims worldwide. Transnational money-laundering networks linked to the group moved more than $15 billion in illicit proceeds tied to scam activity, according to Chainalysis’ 2026 Crypto Scam Report.

Jian Wen Money Laundering (November 2025 | $400M)

In November 2025, the UK’s Metropolitan Police secured convictions in what became the world’s largest confirmed cryptocurrency seizure: over 61,000 Bitcoin, valued at approximately $400 million at the time of recovery. The seizure was linked to Chinese national Zhimin Qian — also known as Yadi Zhang — who had orchestrated a multibillion-pound investment fraud in China that victimized more than 128,000 people between 2014 and 2017.

The case demonstrated that even funds laundered across years and multiple jurisdictions remain traceable. UK authorities described it as a landmark moment for global crypto asset recovery.

How Crypto Scams Are Evolving

AI & Deepfakes: Fraud’s New Infrastructure

Artificial intelligence is no longer a peripheral threat to crypto users — it has become operational infrastructure for fraud. According to CoinLaw, AI deepfakes in fraud surged approximately 700% in 2025, with AI-generated deepfake technology driving $4.6 billion in crypto scams and comprising 40% of all high-value cases.

The economic advantage is measurable. Chainalysis found that scams with on-chain links to AI vendors extract $3.2 million per operation versus $719,000 for scams without — 4.5 times more revenue per scheme. Moreover, AI-linked operations generated $4,838 in median daily revenue versus $518 for non-AI fraud, and conducted 35.1 average transfers per day versus 3.89.

AI phishing emails evaded spam and security filters in 68% of attempts. Consequently, synthetic identities generated via AI made up 34% of fake exchange account registrations in 2025.

Source: CoinLaw; Sumsub

Social Media: The Primary Distribution Channel

Social platforms have become the dominant channel for crypto fraud distribution. According to CoinLaw, 56% of all 2025 cryptocurrency scams originated from social media platforms — primarily Instagram, Telegram, and X (formerly Twitter). Specifically:

• Meta platforms drove 38% of reported crypto scam leads
• Telegram operated over 1,500 active scam channels promoting fake airdrops and investment opportunities
• Fraudulent YouTube livestreams mimicking Bitcoin giveaways defrauded viewers of $120 million
• TikTok scams targeting Gen Z surged 145%, leveraging fake influencer testimonials
• WhatsApp groups facilitated $310 million in crypto theft via bogus trading signals
• LinkedIn recruitment scams for crypto jobs rose 67% year-over-year
• Influencer-driven fraud campaigns surged 54% overall, with fake Elon Musk endorsements comprising 32% of all social media scam attempts

Rug Pulls: Fewer, Larger, Harder to Recover From

Rug pulls — projects launched with the express intent to defraud investors and disappear — remain one of the most damaging and least recoverable categories of crypto fraud. According to Phemex, rug pulls drained an estimated $1.8 billion from investors in 2025 (excluding the Mantra OM collapse); DEXTools places the figure at $2.8 billion when including all chains, with the majority occurring on Solana and BSC.

The defining shift in 2025 was not frequency but scale. Rug pull incident counts actually fell roughly 66% year-over-year — but average losses per incident rose sharply. As a result, the average amount stolen per rug pull climbed to approximately $510,000 in 2025. Recovery rates typically run under 5% of stolen funds, per CoinLaw.

• 62% of meme coins launched in 2025 were flagged as potential scams within 30 days of launch, per BYDFi
• 80% of rug pull traffic was driven through social media — Telegram and Discord dominating promotion
• 70% of all rug pull victims had invested less than $10,000 each
• 14% of the total 2025 scam cases were NFT rug pulls

Phishing, Wallet Drains & Impersonation

Beyond large-scale organized fraud, the retail-level threat landscape in 2025 was equally alarming in aggregate:

• Personal wallet compromises reached 158,000 incidents affecting at least 80,000 unique victims, with total individual losses hitting $713 million — down 52% from $1.5 billion in 2024 as awareness improved
• Impersonation scams surged 1,400% year-over-year in 2025 — making it the fastest-growing crypto threat vector of the year
• Phishing and address-poisoning attacks caused approximately $83.8 million in wallet-related losses across up to 17 million affected addresses
• Ransomware attacks targeting crypto holders rose 75% to 72 recorded incidents in 2025, with losses reaching $40.9 million

Who Is Being Targeted: Demographic Patterns

Elder Fraud — The Hardest-Hit Group

Older adults have become the most heavily targeted demographic in crypto fraud, and the losses reflect that targeting clearly. According to the FBI and AARP data, adults aged 60 and over reported nearly $4.9 billion in all-fraud losses in 2024 — more than any other US age group.

By 2025, that figure reached $4.4 billion specifically in cryptocurrency-related fraud across 44,555 complaints, per the FBI IC3 2025 Annual Report. Investment scams — including fake trading platforms and romance scams — alongside fraudulent crypto ATM transactions account for the bulk of those stolen funds. Key data points include:

• BTM (Bitcoin teller machine) fraud: $333.5 million in losses in 2025 across more than 12,000 complaints
• The most common social engineering approach used against seniors: impersonation of government officials and law enforcement
• Adults 60+ filed 33,300+ complaints with the FBI’s IC3 in 2024 alone, suffering over $2.8 billion — roughly one-third of all US crypto fraud losses for that year

Gen Z & Social Media Targeting

At the other end of the age spectrum, younger users face a distinct but equally aggressive threat model. TikTok-based scams targeting Gen Z surged 145% in 2025, leveraging fake influencer testimonials and peer-driven FOMO marketing to promote fraudulent token projects and fake investment platforms. The pipeline is seamless: social media drives discovery, Telegram groups provide the “community,” and wallet drains or rug pulls deliver the exit.

Retail Investors & Meme Coin Risk

Retail investors with smaller stakes bore the overwhelming majority of rug pull losses. 70% of all rug pull victims in 2025 had invested less than $10,000 each — meaning the damage is widely distributed across a large number of small accounts rather than concentrated in a few large positions. That distribution makes recovery, reimbursement, and enforcement significantly harder.

Furthermore, BYDFi’s data shows that 62% of meme coins launched in 2025 were flagged as potential scams within 30 days of launch — signaling that the meme coin market, particularly on Solana and BSC, has become a primary vehicle for retail fraud at scale.

Regulatory & Legal Landscape: What’s Being Done

US Enforcement Actions

The US enforcement response to crypto fraud escalated meaningfully in 2026. On March 6, 2026, President Trump signed an Executive Order directing US agencies to prioritize cybercrime, fraud, and predatory schemes targeting Americans’ savings, according to IRS Criminal Investigation.

That same agency coordinated an international takedown of scam centers in 2026 that led to at least 276 arrests, with alleged managers and recruiters of Ko Thet, Sanduo, and Giant scam companies charged in San Diego. Additionally, FBI Operation Level Up — a joint operation with the US Secret Service — had notified approximately 9,000 victims of cryptocurrency investment fraud as of April 2026, saving an estimated $562 million, per the FBI.

Global Enforcement — 2025 Actions

International enforcement in 2025 produced recoveries at scale. The table below captures the major coordinated actions:

Sources: CoinLaw, Chainalysis, FBI IC3, DOJ

Regulatory Frameworks

At the regulatory level, 2025 saw significant tightening across major jurisdictions:

• EU MiCA: mandated 100% identity verification for crypto transactions over €1,000
• Japan FSA: revoked four VASP licenses for KYC non-compliance — the highest number on record
• UK FCA: reported a 28% drop in reported crypto scams following enhanced KYC enforcement
• South Korea: reduced onboarding fraud by 39% through centralized crypto ID systems
• FATF Travel Rule: implemented in 85 jurisdictions, covering 73% of global crypto activity, with 79% of VASPs found KYC-compliant as of Q3 2025, per CoinLaw

Global crypto fraud rates among customer verification attempts held flat at 2.2% from 2024 to 2025 — up from 1.5% in 2023, according to Sumsub’s State of the Crypto Industry 2026. The rate’s stabilization suggests enforcement is keeping pace with growth, but not yet reducing the underlying fraud rate.

What’s Still Not Working

Despite enforcement progress, structural gaps remain wide. Over 92% of crypto fraud cases involved privacy-enhancing tools such as mixers and tumblers — a gap that current regulation has yet to meaningfully close, according to CoinLaw. A UN panel of experts estimated that illicit cyber activity funds approximately 40% of North Korea’s weapons development programs — a geopolitical dimension to crypto fraud that no domestic enforcement effort can resolve alone.

The Coinbase insider breach underlined a persistent truth: even platforms with robust technical safeguards can fall victim to human error. A code vulnerability did not enable the breach — bribed employees did. This serves as a reminder that the most exploitable point in any security system is the people inside it.

References

1. Luker. Crypto Security Report. Metamask.io. Published May 2026. Accessed June 1, 2026. https://metamask.io/news/crypto-security-report-2026
2. Dan. Every Major DeFi Hack in 2026 So Far and Why Bridge Exploits Keep Getting Bigger. Phemex.com. Published April 20, 2026. Accessed June 1, 2026. https://phemex.com/blogs/defi-hacks-2026-bridge-exploits-explained
3. Defillama. DeFi Hacks – Total Value Lost by Protocol – DefiLlama. DefiLlama. Published 2026. Accessed June 1, 2026. https://defillama.com/hacks/total-value-lost
4. Bonner W. Crypto Hacks and DeFi Runs – Bank Policy Institute. Bank Policy Institute. Published April 23, 2026. Accessed June 1, 2026. https://bpi.com/crypto-hacks-and-defi-runs/
5. Crystal Intelligence. The 10 Biggest crypto hacks in history. Crystal Intelligence Analytics for Crypto Compliance. Published June 25, 2021. Accessed June 1, 2026. https://crystalintelligence.com/investigations/the-10-biggest-crypto-hacks-in-history/
6. Elad B. Crypto Exchange Hacks and Security Statistics 2025: Trends, Hacks, and Prevention. CoinLaw. Published March 25, 2025. Accessed June 1, 2026. https://coinlaw.io/crypto-exchange-hacks-and-security-statistics/
7. Cryip.co. Crypto Hacks Report in Q1 2026: $450M Lost Across Phishing, Exploits, and Infrastructure Attacks | Cryip. Cryip.co. Published April 2026. Accessed June 1, 2026. https://cryip.co/crypto-hacks-report-q1-2026/
8. Chainalysis. Blocked. Chainalysis.com. Published 2026. Accessed June 1, 2026. https://www.chainalysis.com/blog/crypto-scams-2026/
9. TRM Labs. 2026 Crypto Crime Report Illicit Crypto Trends & Typologies | TRM Labs. Trmlabs.com. Published 2026. Accessed June 1, 2026. https://www.trmlabs.com/reports-and-whitepapers/2026-crypto-crime-report
10. FBI Internet Crime Complaint Center. Annual Reports – Internet Crime Complaint Center (IC3). Ic3.gov. Published 2024. Accessed June 1, 2026. https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf
11. Cryptocurrency and AI Scams Bilk Americans of Billions. Cryptocurrency and AI Scams Bilk Americans of Billions | Federal Bureau of Investigation. Federal Bureau of Investigation. Published 2019. Accessed June 1, 2026. https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions
12. Caporal J. Study: Crypto and Investment Scams Skyrocket in 2020 and 2021. The Motley Fool. Published July 7, 2021. Accessed June 1, 2026. https://www.fool.com/research/crypto-investment-scams/
13. Elad B. Cryptocurrency Fraud Trends Statistics 2025: Analyzing Trends and Prevention Measures. CoinLaw. Published June 18, 2025. Accessed June 1, 2026. https://coinlaw.io/cryptocurrency-fraud-trends-statistics/
14. Elad B. Rug Pull Statistics 2026: Shocking Data You Need Now. CoinLaw. Published January 6, 2026. Accessed June 1, 2026. https://coinlaw.io/rug-pull-statistics/
15. AliceOnChain. How to Spot a Rug Pull 2026: 12-Point Free Detection Checklist. DEXTools News. Published February 16, 2026. Accessed June 1, 2026. https://www.dextools.io/tutorials/how-to-spot-a-rug-pull-2026-checklist
16. Dan. How to Spot a Crypto Rug Pull Before It Happens and the Five Red Flags That Work Every Time. Phemex.com. Published April 13, 2026. Accessed June 1, 2026. https://phemex.com/academy/how-to-spot-crypto-rug-pull-red-flags
17. Miah S. Biggest Crypto Hacks in History. Webopedia. Published February 28, 2025. Accessed June 1, 2026. https://www.webopedia.com/crypto/learn/biggest-crypto-hacks/
18. IRS Criminal Investigation. Coordinated takedown of scam centers leads to at least 276 arrests; alleged managers and recruiters charged in San Diego | Internal Revenue Service. Irs.gov. Published 2026. Accessed June 1, 2026. https://www.irs.gov/compliance/criminal-investigation/coordinated-takedown-of-scam-centers-leads-to-at-least-276-arrests-alleged-managers-and-recruiters-charged-in-san-diego