Key Takeaways
- • $21 billion in aggregate cybercrime losses affected more than 1 million Americans in 2025, representing a significant expansion of financial crime exposure across retail and institutional investor populations.
- • Cryptocurrency theft accounts for 52% of total losses at $11 billion, indicating that digital asset security remains a critical vulnerability for individual and institutional holders despite years of industry maturation.
- • Investment scams represent the second-largest loss category at $8.6 billion, demonstrating persistent vulnerability to fraud schemes targeting retail investors seeking alternative investment opportunities.
- • AI-enabled attacks emerged as a discrete threat vector, generating $893 million in losses and signaling a new dimension of cybercrime risk that combines machine learning exploitation with social engineering tactics.
Summary
Cybercrime losses in 2025 reached $21 billion across more than 1 million American victims, according to reporting compiled by Tom's Hardware. This figure underscores the expanding financial risk posed by digital security breaches, fraud schemes, and emerging attack methodologies targeting both retail and sophisticated investors.
Cryptocurrency theft dominated the loss profile, accounting for $11 billion or approximately 52% of total cybercrime damages. This substantial figure reflects ongoing challenges in securing digital asset wallets, exchange accounts, and custody arrangements, despite regulatory advances and institutional adoption of blockchain-based systems. The scale of crypto-related losses indicates that security practices at both the individual and platform level continue to lag behind the sophistication of threat actors.
Investment scams represented the second-largest loss vector at $8.6 billion, targeting Americans seeking exposure to alternative investments and non-traditional asset classes. These schemes typically exploit information asymmetries and the complexity of specialized investment products to defraud retail and less-sophisticated institutional participants.
AI-related cyberattacks emerged as a discrete and growing threat category, generating $893 million in losses during 2025. These attacks leverage machine learning and artificial intelligence capabilities to enhance phishing, deepfake fraud, and automated social engineering at scale, representing an acceleration in attack sophistication that outpaces traditional cybersecurity defenses.
The concentration of losses in crypto assets and investment fraud highlights structural vulnerabilities in emerging asset classes and non-regulated financial channels, creating material risk considerations for alternative investment allocators and institutional players expanding into digital assets.
Cryptocurrency theft dominated the loss profile, accounting for $11 billion or approximately 52% of total cybercrime damages. This substantial figure reflects ongoing challenges in securing digital asset wallets, exchange accounts, and custody arrangements, despite regulatory advances and institutional adoption of blockchain-based systems. The scale of crypto-related losses indicates that security practices at both the individual and platform level continue to lag behind the sophistication of threat actors.
Investment scams represented the second-largest loss vector at $8.6 billion, targeting Americans seeking exposure to alternative investments and non-traditional asset classes. These schemes typically exploit information asymmetries and the complexity of specialized investment products to defraud retail and less-sophisticated institutional participants.
AI-related cyberattacks emerged as a discrete and growing threat category, generating $893 million in losses during 2025. These attacks leverage machine learning and artificial intelligence capabilities to enhance phishing, deepfake fraud, and automated social engineering at scale, representing an acceleration in attack sophistication that outpaces traditional cybersecurity defenses.
The concentration of losses in crypto assets and investment fraud highlights structural vulnerabilities in emerging asset classes and non-regulated financial channels, creating material risk considerations for alternative investment allocators and institutional players expanding into digital assets.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.