2026 Bad Bot Report: Bad Bots in the Agentic Age

In 2025, AI-driven bot attacks surged 12.5x compared to the previous year.

Financial services accounted for 24% of all bot attacks and 46% of account takeover incidents.

27% of bot attacks targeted APIs, allowing bots to bypass user interfaces and interact directly with backend systems at machine speed.

Bots now account for over half of all internet traffic.

In 2025, bots made up more than 53% of all web traffic, up from 51% the previous year, while human activity fell to 47%.