Online Scams Surge as Cybercriminals Pivot Toward Direct Financial Exploitation

The digital landscape has become significantly more perilous for consumers and businesses alike, as new data indicates a dramatic shift in the tactics employed by threat actors. According to the latest State of the Internet (SOTI) report from Akamai, detections of online scams have doubled within a one-year window, spanning from July 2025 to June 2026. This surge marks a strategic pivot by cybercriminals who are increasingly prioritizing direct methods of revenue generation, moving away from traditional data-harvesting operations to focus on immediate financial extraction.

The report, which incorporates specialized intelligence from partner Bolster AI, reveals a significant milestone in the evolution of cybercrime: for the first time, general scam activity has officially overtaken phishing as the primary threat vector. The scale of this increase is stark. Between July and September 2025, Akamai recorded 3.2 million online scams. By the period of April to June 2026, that figure had ballooned to approximately 6.4 million. This category of crime is broad and encompasses a range of malicious activities, including the proliferation of fraudulent online stores, sophisticated investment scams, deceptive tech support schemes, and various forms of direct payment fraud.

Industry experts suggest that this shift reflects a maturation in the business models of criminal syndicates. By bypassing the intermediary step of credential theft—which requires subsequent monetization on the dark web—threat actors are now engaging directly with victims to facilitate immediate monetary loss.

The Convergence of Cybersecurity and Business Logic

The rise in these threats necessitates a fundamental change in how organizations view fraud prevention. Patrick Sullivan, CTO of security strategy at Akamai, emphasized that the traditional siloed approach to financial fraud is no longer sufficient. "The fight against fraud is no longer just an isolated financial function; it is a critical, cross-functional cybersecurity imperative," Sullivan stated.

The complexity of these attacks is being driven by rapid advancements in technology. As autonomous AI agents and the emergence of synthetic identities begin to fundamentally alter the way customers interact with brands and online services, threat actors are closely mirroring these developments. Cybercriminals are actively exploiting these same technological vectors to conduct "business logic abuse"—attacks that exploit the legitimate functions of an application to commit fraud—and to carry out zero-click data exfiltration, where sensitive information is harvested without requiring any interaction from the victim.

While scams have taken the lead in volume, the report notes that traditional phishing has not disappeared; rather, it has evolved into a more aggressive and efficient enterprise. Phishing, which Akamai defines as attempts to steal sensitive information such as authentication credentials and personal data through the impersonation of trusted brands, saw a 61% increase during the same period.

This growth is fueled by a "phishing-as-a-service" ecosystem, characterized by the widespread availability of reusable phishing kits and industrialized attack infrastructure. Furthermore, the integration of generative AI into these toolsets has significantly reduced the operational lifespan of phishing campaigns. In the fourth quarter of 2025, the average lifespan of a phishing attack was approximately 48 days. By the second quarter of 2026, that window had been compressed to just 22 days—a reduction of more than 50%.

The report highlights that adversaries are using AI to generate dynamic, context-aware templates and produce multilingual lures at massive scale. These tools allow for condition-aware evasion, which helps attackers bypass legacy security defenses while simultaneously lowering the costs of launching large-scale campaigns. However, the report also notes that the defensive side of the industry is adopting similar technologies. Security teams are increasingly utilizing AI to compress the time required for incident investigation, reducing workflows from days to less than an hour. Through automated indicator analysis, infrastructure clustering, and rapid evidence collection, organizations are better positioned to disrupt these attacks before they reach the victim.

The Profound Human Impact of Digital Fraud

Beyond the technical metrics of attack volume and infrastructure, the most harrowing aspect of the current fraud landscape is the human toll. A recent report published on October 28 by the non-profit Identity Theft Resource Center (ITRC) underscores the devastating psychological aftermath of these crimes, revealing that over 80% of scam victims in the United States have reported experiencing suicidal thoughts following an incident.

The ITRC suggests that this crisis is exacerbated by deep-seated self-blame and the persistent social stigma associated with falling victim to a scam. However, the organization also points to a systemic failure it calls "institutional ghosting," which intensifies the mental anguish of those affected. When victims attempt to seek recourse, they often find that the institutions they rely on for protection—such as banks, retailers, or government agencies—are unresponsive or dismissive.

The data paints a grim picture of the victim experience. Nearly nine in ten general consumer scam victims reached out to an organization for assistance, only to be met with silence or a lack of follow-up. Even more concerning is that 67.2% of victims reported that the organizations they contacted made them feel as though the crime was their own fault. This lack of institutional support does not just leave victims isolated; it leaves them uniquely vulnerable to secondary victimization.

Desperate to recover their losses, victims often fall prey to secondary "recovery scams." In these schemes, third-party bad actors reach out to victims, promising to recover stolen funds, repair damaged credit, or track down the original scammers for a fee. The ITRC report found that 78.9% of general consumer scam victims paid a fee to these recovery services. Among those who specifically reported experiencing suicidal ideation, that figure climbed to 90.9%. By contrast, only 6.5% of scam victims who successfully connected with the ITRC ended up falling for these follow-up scams, highlighting the critical importance of legitimate support networks in the wake of financial crime.

As cybercriminals continue to integrate AI-driven automation into their fraud campaigns, the frequency and sophistication of these scams are expected to grow. For both consumers and the institutions tasked with protecting them, the data suggests that the current environment requires a more proactive, empathetic, and technologically advanced response to prevent not only financial loss but also the catastrophic human impact of modern digital fraud.