The Threat Landscape

Read those rows as a system, not a list. Scams are no longer a teenager with a fake website. They are industrialized: phishing-as-a-service kits cost under $500, operate from forced-labor compounds in Southeast Asia, and pivot money through professional laundering networks within minutes. In 85% of bridge hacks, funds moved before the incident was even disclosed. The attacker does not need to be smarter than you — they need to be faster than disclosure.

Two asymmetries define 2025–2026. First, AI is the multiplier: LLMs let one operator run fluent multi-language conversations, deepfake face-swaps handle “video verification,” and bots orchestrate fund movement. TRM finds AI-enabled scam activity up ~500% in a year. Second, under-reporting is massive: some categories are under-counted by up to 85%. Every number in this module is a floor, not a ceiling.

Who bears the loss is skewed. Americans 60+ lost $4.432B in crypto fraud alone in 2025 — more than double the 50s cohort — and FBI Operation Level Up found 78% of victims did not know they were being scammed. This is not a “don’t be dumb” problem. It is a persuasion-engineering problem.