What the FBI IC3 Internet Crime Report 2025 Means for AML Teams

FBI IC3 Internet Crime Report 2025: Key AML Takeaways for Compliance Leaders

Cybercrime is no longer solely an information security issue—it has become one of the largest drivers of global financial crime. The FBI’s 2025 Internet Crime Report demonstrates how fraud, cryptocurrency abuse, artificial intelligence, business email compromise (BEC), and social engineering have converged into an increasingly sophisticated criminal ecosystem. For AML professionals, the report provides valuable intelligence on emerging typologies, high-risk payment channels, and evolving customer vulnerabilities that should shape risk management strategies.

Cybercrime Losses Cross Another Record High

The FBI’s Internet Crime Complaint Center (IC3) received 1,008,597 complaints in 2025—the first time complaints exceeded one million in a single year. Reported financial losses reached $20.877 billion, representing a 26% increase over 2024, with an average reported loss of $20,699 per victim. Over the past decade, reported losses have surged dramatically, increasing from approximately $1 billion in 2015 to nearly $21 billion in 2025, illustrating that financial crime has become increasingly profitable for organized criminal networks.

For AML teams, this trend signals that traditional fraud controls are no longer sufficient. Criminal groups are operating like multinational businesses, leveraging automation, digital payment rails, and global money mule networks to rapidly move illicit proceeds before institutions can react.

Investment Fraud Continues to Cause the Greatest Financial Damage

While phishing remained the most frequently reported cybercrime with 191,561 complaints, it was investment fraud that inflicted the greatest financial damage. Investment scams generated approximately $8.65 billion in reported losses, accounting for more than 40% of all reported financial losses.

Other major loss categories included:

• Business Email Compromise (BEC): $3.05 billion
• Tech Support Fraud: $2.13 billion
• Personal Data Breaches: $1.31 billion
• Confidence/Romance Scams: $929 million
• Government Impersonation: $798 million

The disparity between complaint volumes and financial losses is particularly significant. Phishing generated the highest number of complaints but comparatively modest financial losses, whereas investment fraud generated fewer complaints but significantly larger individual losses. This suggests criminals are increasingly prioritizing high-value victims over high-volume attacks.

Cryptocurrency Remains the Preferred Channel for Financial Crime

The report reinforces cryptocurrency’s growing role in cyber-enabled financial crime. IC3 recorded 181,565 cryptocurrency-related complaints, with associated losses exceeding $11.36 billion. Cryptocurrency investment fraud alone accounted for $7.2 billion in reported losses, making it the single largest financial crime category in the report.

Transaction analysis further illustrates how payment methods vary across fraud typologies:

• 72% of investment fraud losses involved cryptocurrency.
• 86% of BEC losses were transmitted via wire transfers or ACH.
• Government impersonation and tech support scams relied on a mix of cryptocurrency, wire transfers, prepaid cards, and cash.
• Extortion schemes demonstrated highly diversified payment methods, making detection more challenging.

For financial institutions, these findings highlight the importance of strengthening blockchain analytics, virtual asset transaction monitoring, mule account detection, and real-time payment screening.

Cyber-Enabled Fraud Now Accounts for Most Financial Losses

Cyber-enabled fraud represented only 45% of all complaints, yet generated 85% of all reported financial losses, totaling $17.7 billion. This demonstrates that financially motivated cybercrime—not traditional malware—is now the primary driver of financial crime exposure.

The five most damaging cyber-enabled fraud categories were:

1. Investment Fraud
2. Business Email Compromise
3. Tech Support Scams
4. Confidence/Romance Scams
5. Government Impersonation

These schemes increasingly combine identity theft, social engineering, fake investment platforms, cryptocurrency transfers, and cross-border money laundering, making them particularly difficult for financial institutions to detect through traditional rule-based monitoring.

AI Is Becoming an Enabler of Financial Crime

The report identifies 22,364 AI-related complaints associated with approximately $893 million in reported losses. Although AI-enabled fraud remains a relatively new category, its rapid emergence suggests criminals are increasingly exploiting generative AI to improve phishing campaigns, impersonation attacks, synthetic identities, and fraudulent communications.

For AML and fraud teams, AI introduces new challenges that extend beyond cybersecurity. Traditional behavioral indicators may become less reliable as criminals generate convincing identities, customer communications, and investment solicitations at scale.

Elder Financial Exploitation Continues to Escalate

Individuals aged 60 and above remained the most financially impacted demographic, filing 201,266 complaints with reported losses of approximately $7.75 billion—more than double the losses experienced by any other age group.

The report also highlights the growing prevalence of sextortion, with more than 75,000 submissions received during 2025. Cryptocurrency investment scams, government impersonation, and tech support fraud continued to disproportionately affect older individuals due to larger available savings and increased susceptibility to social engineering.

These findings reinforce the need for financial institutions to implement enhanced customer protection measures, transaction alerts, and targeted awareness initiatives for vulnerable customers.

Ransomware Remains a Critical Infrastructure Threat

Although ransomware accounted for relatively few complaints compared to fraud, it remained one of the most significant threats to critical infrastructure.

IC3 received more than 3,600 ransomware complaints, reporting losses exceeding $32 million. The most frequently reported ransomware variants included:

• Akira
• Qilin
• INC./Lynx/Sinobi
• BianLian
• Play
• RansomHub
• LockBit
• Dragonforce
• SAFEPAY
• Medusa

The FBI identified 63 new ransomware variants during 2025—an average of more than five new variants every month. Healthcare, financial services, government facilities, and critical manufacturing remained among the most heavily targeted sectors.

While ransomware is typically viewed as an information security issue, its financial implications—including extortion payments, account compromise, and laundering of ransom proceeds—place it firmly within the scope of AML risk management.

Rapid Intervention Can Prevent Significant Financial Losses

One of the report’s most encouraging findings is the effectiveness of the IC3 Recovery Asset Team (RAT) and Financial Fraud Kill Chain (FFKC).

During 2025:

• 3,900 fraud incidents were processed.
• Criminals attempted to steal $1.16 billion.
• Authorities successfully froze approximately $679 million, achieving an overall 58% recovery success rate.

The program also successfully recovered substantial funds for victims over the age of 60 and organizations operating within critical infrastructure sectors.

These results highlight the importance of rapid reporting, immediate payment recalls, and close coordination between financial institutions, law enforcement, and regulators.

What This Means for AML Compliance Programs

The IC3 report illustrates that financial crime is becoming increasingly technology-driven, borderless, and professionally organized. Compliance teams should consider several strategic priorities:

• Strengthen controls around cryptocurrency transactions and virtual asset exposure.
• Enhance monitoring for Business Email Compromise, investment fraud, and account takeover activity.
• Expand AI-enabled fraud detection capabilities alongside traditional AML monitoring.
• Improve mule account identification using behavioral analytics and network intelligence.
• Implement stronger customer protection measures for elderly and vulnerable customers.
• Increase collaboration between AML, fraud, cybersecurity, and incident response teams to accelerate intervention when suspicious activity is detected.

Final Thoughts

The FBI’s 2025 IC3 Internet Crime Report demonstrates that cyber-enabled financial crime has evolved into one of the most significant threats facing financial institutions worldwide. Criminals are increasingly blending investment fraud, cryptocurrency, artificial intelligence, business email compromise, and sophisticated social engineering into highly profitable operations capable of generating billions in illicit proceeds. For AML compliance leaders, the report reinforces that effective financial crime prevention now depends on integrating fraud detection, cyber intelligence, transaction monitoring, and rapid response into a unified risk management strategy. Institutions that adapt to these evolving threats will be significantly better positioned to detect emerging typologies, protect customers, and disrupt illicit financial flows before losses occur.