Enterprises Under Attack: Quarterly Threat Actor Patterns | Released Q4 2025

In Q3 2025, fake account creation accounted for 46% of all fraudulent activity.

In Q3 2025, SMS toll fraud attacks targeting the gaming sector increased by 125%.

In Q3 2025, SMS toll fraud targeting the fintech sector grew by 97%, alongside a major spike in human fraud farm activity.

SMS toll fraud now comprises 78% of all attacks on the gig economy, up from 48% a year prior.

In Q3 2025, SMS toll fraud malicious traffic surged by 67% over Q2 2025, making it the fastest-growing attack type of the quarter.

In Q3 2025, the gig economy experienced 51% fewer attacks but 49% more malicious traffic, resulting in a 300% increase in average attack size.