Fraud vs Phishing

50% of security leaders rank threat detection and alerting among their top AI-for-security priorities, followed by fraud detection (43%) and phishing detection and response (42%).

31% of small and mid-market business owners say their company has been targeted by a generative-AI scam or fraud attempt within the past 12 months.

47% of enterprise identity-based attacks are discovered manually: 22% via coworker reports, 15% via internal audits, and 10% via external notifications

Prior to day one, HR leaders claim ownership of identity risk in 53% of cases while IT and security teams claim 17%

52% of independent insurance agents say they have observed an increase in claims related to generative-AI scams or fraud attempts.

Nearly 90% of HR leaders report heightened concern over hiring fraud

Half of the general population have experienced an AI-related scam in the past year.

Half of all IRS scams come by phone call.

MrBeast appears in roughly 30% of impersonation scams tracked by Malwarebytes.

TsarBot targeted 450 banking apps and accounted for 58% of its global activity.

CopyBara targeted 446 banking apps.

Hook targeted 385 banking apps.

70% of young adults ages 18 to 22 experienced an AI-related scam in the past year.

50% of the general population experienced an AI-related scam in the past year.

24% of young adults have been a victim of an extortion scam.

Between 89% and 95% of email phishing attachments lead to credential theft efforts.

93% of voice phishing attacks keep the victim on the line long enough for social engineering to begin.

50% of security leaders rank threat detection and alerting among their top AI-for-security priorities, followed by fraud detection (43%) and phishing detection and response (42%).

Organisations are most comfortable authorising autonomous agents for threat intelligence enrichment and correlation (49%), phishing email quarantine or deletion (47%), and malware removal and system remediation (46%).

Senior executives specializing in IP law rate phishing as a top concern at 39%

79% of chief information security officers report at least one e-mail phishing, spear-phishing, or business e-mail compromise incident in the last 12 months.

Custom fake CAPTCHAs grow by 437% from Q1 to Q2 2026.

OAuth device-code phishing surges by 483.7% from Q1 to Q2 2026.

Google's name appears in scam content at least twice as often as Amazon's name.

39% of phishing messages featured novel social engineering techniques.

Vishing intrusions increased by 2x in 1H 2026.

17% of reported cybercrime cases in Africa in 2025 involved online scams, including phishing.

Monthly device code phishing attempts increased 15x in 1H 2026.

In the first half of 2026, 67% of phishing emails passed DMARC.

VIP users were targeted in 25.8% of phishing attacks.