Deepfakes vs Phishing

74% of US enterprise security leaders have encountered or suspect a deepfake attack in the past year.

Only 10% of US enterprise security leaders report having purpose-built tools to address deepfake threats.

49% of organizations that experienced or suspected a deepfake attack also experience follow-on cyberattacks such as ransomware.

41% of chief information security officers report at least one social engineering incident involving a deepfake during an employee audio call in the previous 12 months.

36% of chief information security officers report at least one social engineering incident involving a deepfake during a video call in the previous 12 months.

19% of young adults have been a victim of a deepfake or virtual kidnapping scam.

8% of the general population have been a victim of a deepfake or virtual kidnapping scam.

67% are concerned about GenAI-based Voice Attacks and Deepfake Impersonation.

In the UK, more than half of CISOs identify deepfake impersonation attacks as a major threat to their organisation.

36% of restaurant leaders feel not at all or only somewhat prepared for a socially engineered deepfake video or voice attack.

30% of restaurants experienced AI-generated voice or video impersonating executives to authorize fraudulent payments in the past year.

85% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is hard to tell a scam apart from the real thing, up from 66% in 2025.

88% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is becoming harder to tell what online content is genuinely human or real.

Exposure to AI fraud or scams is 67% for Gen Z, 51% for Millennials, 46% for Gen X, and 30% for Boomers and older.

31.3% of IT and security professionals rate deepfake voice and video technology as "extremely impactful" among emerging threat trends.

Between 89% and 95% of email phishing attachments lead to credential theft efforts.

93% of voice phishing attacks keep the victim on the line long enough for social engineering to begin.

50% of security leaders rank threat detection and alerting among their top AI-for-security priorities, followed by fraud detection (43%) and phishing detection and response (42%).

Organisations are most comfortable authorising autonomous agents for threat intelligence enrichment and correlation (49%), phishing email quarantine or deletion (47%), and malware removal and system remediation (46%).

Senior executives specializing in IP law rate phishing as a top concern at 39%

79% of chief information security officers report at least one e-mail phishing, spear-phishing, or business e-mail compromise incident in the last 12 months.

Custom fake CAPTCHAs grow by 437% from Q1 to Q2 2026.

OAuth device-code phishing surges by 483.7% from Q1 to Q2 2026.

Google's name appears in scam content at least twice as often as Amazon's name.

39% of phishing messages featured novel social engineering techniques.

Vishing intrusions increased by 2x in 1H 2026.

17% of reported cybercrime cases in Africa in 2025 involved online scams, including phishing.

Monthly device code phishing attempts increased 15x in 1H 2026.

In the first half of 2026, 67% of phishing emails passed DMARC.

VIP users were targeted in 25.8% of phishing attacks.