The reports
UK data breaches
3,600 incidents in a single ICO quarter, the £14m Capita fine, and all 6.5 million Co-op members exposed.
ICO · UK Finance 🌍Global Scam Report
What the major annual reports say about the state of online fraud, channel by channel.
Europol · ENISA · FBI 🤖Generative AI & voice deepfakes
How artificial intelligence changed the scale and realism of voice scams.
FBI · Pindrop 📡SIM farms & criminal call centers
The industry behind millions of fake numbers and fake accounts — dismantled in 2025.
Europol 🕵️Documented criminal networks: the Lazarus case
A group stealing billions in crypto assets by infiltrating real companies.
FBI · CISA · Microsoft 📱Fake QR codes & quishing
A package, a parking meter, a poster — the QR code has become a fraud vector in its own right.
FBI · FTC 🇬🇧The UK's own "Chat Control"
Not the EU's Chat Control — the Online Safety Act, Ofcom's Technology Notice powers, and the Apple encryption standoff.
Status as of 26/07/2026 🔞UK under-16 social media ban
Announced June 2026, going further than Australia: platforms, penalties, and what's still just a consultation.
UK Government · Ofcom 🎲The Mathematics of Manipulation
Why scams work: the probability demonstration, official figures, one scenario at a time.
USPS · FTC · UK Finance · Australia Post 🧭Exposure Profiles
Not a risk profile — a situation. What your everyday life makes statistically probable, one profile at a time.
Senior · Teen · Professional · Job seeker 💼Recruitment fraud
Losses have multiplied fivefold in four years — the fake job offer that costs real money.
FTC · BBB 📈Why fraud is exploding right now
The synthesis: five documented factors combining at once, not just one.
Series synthesis 🔭Threats 2030
What cybersecurity agencies project for the coming years — sourced, no speculation.
ENISA 🧭Hybrid threats
How a hybrid threat works — the mechanism, not the geopolitics.
Hybrid CoE · ENISA 🕳️Dark web
What really sells on dark web markets, and how your credentials pass through them.
Europol 🕸️Emerging phishing techniques
Two techniques that now bypass two-factor authentication and automated filters.
Microsoft · Trustwave 💬The evolution of smishing
$470 million lost by text in 2024 in the US — five times more than in 2020.
FTC · FBI 📵Caller ID spoofing
How a number can show a fake identity, and why technical verification is still incomplete.
FCC 💔Romance scams
$1.16 billion in losses in nine months — what the numbers say, without judgment.
FTC · FBI 🇺🇸US Fraud Report
$20.9 billion lost, over 1 million complaints — what the FBI's IC3 and the FTC report for 2025.
FBI / IC3 · FTC 🗂️US Data Breaches
3,322 breaches tracked in 2025, a $177M AT&T settlement — how leaked data fuels personalized scams.
ITRC · HHS OCR 🔗From Leak to Scam
$3.5 billion lost to imposter scams in 2025 — the exact mechanism connecting a data breach to the call that empties an account.
FTC · FBI / IC3 🪙Crypto investment scams
$9.3 billion lost in 2024 — how rug pulls, pig-butchering platforms and fake exchanges actually work.
FBI / IC3 · SEC · CFTC · DOJ 🗃️SMS & call bombing: when a number overwhelms you
Hundreds of texts or calls in minutes, no apparent reason. Bombing isn't a bug — it's an automated harassment or diversion tool. How to protect yourself.
🗃️Wangiri: the "one ring" phone scam
A missed call, a single ring. Calling back can cost you dearly: how the wangiri scam exploits your instinct to call back, and what Ofcom does about it.
OfcomMore reports follow regularly, along with country-specific reports and coverage in additional languages. This page grows with each new publication.
Our method
Every figure cited in The Threat Laboratory comes from a real, identified report, organization or authority — never a vague "gut feel" estimate. The full list of dated sources is public.
Go further
Our sourcing methodology → read it here.