Data Report

Who Actually Gets Scammed in America?

Federal fraud and survey data show sharp divides in who gets scammed, how often, and how much they lose (and it's not who you think).

Illustrative composition representing generational fraud risk across age cohorts in the United States.

Content Written By:

Daniel Grainger

Founder, Ranking Atlas

Published March 2026

Key Takeaways

  • Americans aged 50 to 64 record the highest identity theft rate in the country at 10.9% (BJS). They sit at the intersection of peak earnings, the most active credit lines, and the largest investable assets, yet remain online at roughly the same scale as younger cohorts. The group treated as low-risk in most public fraud messaging is in fact the most exposed.
  • Adults in their twenties get caught most often, but adults aged 80 and over lose roughly four times more per incident ($1,650 vs $417, FTC). Younger victims are picked off in volume by low-stake scams like fake jobs, delivery texts, and marketplace fraud. Older victims are picked off less often, but by attacks that exploit deeper trust: impersonated relatives, fraudulent investments, urgent transfer instructions from someone posing as a bank or family member. The result is fewer events, each one capable of clearing decades of savings.
  • Social media now extracts money from 70% of the victims it reaches, the highest conversion rate of any fraud channel (FTC). Email is the inverse: 25% of all fraud reports but only 11% convert to a loss. Inboxes have become noisy enough that targets ignore them, while social platforms still carry the implicit trust of a curated feed.
  • Mobile banking is now the primary account-access method for 48.3% of US households, up from 5.4% a decade ago (FDIC). The device that delivers most fraud now also handles most banking, so the contact, persuasion, and transfer can all take place on the same screen.
  • Only 6.6% of identity theft victims report the crime to police, and just 18% report to the FTC or FBI (BJS, AARP). Two-thirds resolve fraud privately through their bank, where the case is closed and never enters federal statistics. The FTC's own model places true 2023 losses between $23.7 billion and $158.3 billion, against the $10 billion officially recorded. Every published fraud figure is an undercount.

Identity Theft Rate Peaks Among Americans Aged 50 to 64

The Bureau of Justice Statistics asks a clean question every few years through the National Crime Victimization Survey: in the past twelve months, did anyone misuse your personal information? The most recent published wave (2021) is the cleanest population-level estimate of identity theft prevalence in the United States. The survey covers 263 million Americans aged 16 or older.

The result by age band:

Age group BJS victimisation rate (12-month) 2024 US population Implied affected population
16–171.4%9,070,885~127,000
18–247.0%31,363,181~2.2 million
25–348.9%46,453,864~4.1 million
35–499.9%65,833,273~6.5 million
50–6410.9% (highest)62,148,032~6.8 million
65+8.6%55,747,169~4.8 million

Source: BJS NCJ 306474, Table 2 (2021 survey data). Population denominators: US Census Bureau NC-EST2024-AGESEX-RES. Implied affected population applies 2021 BJS rates to 2024 Census figures for directional illustration.

Roughly 1 in 9 Americans aged 50 to 64 experienced identity theft in a single twelve-month window. Adults over 65, despite being the primary target of fraud-awareness campaigns, recorded a lower victimisation rate than every working-age cohort above 35.

The BJS data does not explain why the 50 to 64 cohort tops the chart. It shows the cohort with the most active credit accounts and the largest investable assets carries the highest fraud frequency.

Adults Over Eighty Lose Four Times More Per Incident Than Adults in Their Twenties

If victimisation rate is the first dimension of fraud risk, financial loss is the second. The FTC Consumer Sentinel Network Data Book 2024 tracks both whether complainants reported losing money and how much they lost. The two metrics move in opposite directions across the age curve.

Age group % reporting a fraud loss Median loss per incident Total reported losses
20–2944%$417$430M
30–3935%$450$810M
40–4938%$500$971M
50–5940%$520$1.18B
60–6951%$691$1.01B
70–7924%$1,000$887M
80+21%$1,650$319M

Source: FTC Consumer Sentinel Network Data Book 2024, p. 13.

Younger Americans are caught by fraud more often; older Americans are caught less often but lose more when they are. The 80+ group loses 4 times more per incident than the 20 to 29 group.

Preventing fraud among younger adults reduces the number of incidents. Preventing fraud among older adults reduces catastrophic financial losses. Generic awareness campaigns treat them as one problem and solve neither.

Social Media Converts Seven in Ten Fraud Attempts to a Financial Loss

The FTC also tracks how fraud reaches its victims. Among complaints where the contact method was identified, social media and websites or apps are now the two channels most likely to extract money from the target.

Contact method % of reports % with dollar loss Aggregate loss Median loss
Social media13%70%$1,858M$1,500
Website or app12%68%$976M$990
Mail3%62%$470M$1,000
Phone call19%19%$948M$1,000
Text16%12%$1,072M$633
Email25%11%$502M$600
Online ad or pop-up3%40%$246M$180

Source: FTC Consumer Sentinel Network Data Book 2024, p. 12. Based on 1,509,002 reports with contact method identified out of 2,600,678 total fraud reports.

Email is the most common contact method (25% of reports) but the lowest conversion to actual loss (11%). The volume of email-based fraud still produces $502M in aggregate reported losses, while the per-attempt success rate is low.

Social media inverts that. Only 13% of fraud reports identify social media as the contact method, but when fraud arrives via social media, 70% of complainants report a financial loss, by some distance the highest conversion rate of any channel.

The same digital surface that delivers most fraud now also handles most banking. The FDIC's 2023 household survey records 48.3% of US banked households using mobile banking as their primary account access method, up from 5.4% a decade earlier.

Weighing Frequency, Volume, and Severity Together Puts Ages 50 to 64 First

The preceding sections present each source separately. The question no individual source answers is which age cohort faces the greatest overall fraud burden when victimisation, complaint volume, and loss severity are weighed together.

The Generational Fraud Risk Index combines those three dimensions into a single composite score per age band. Three components feed the score:

  • Victimisation rate (40%): BJS identity theft prevalence.
  • Complaint volume (25%): FTC complaints per capita.
  • Financial severity (35%): likelihood and scale of financial loss.

Each component is normalised 0 to 100 across the five cohorts using min-max scaling, then combined with the weights above.

Rank Cohort Vic score (40%) Volume score (25%) Severity score (35%) Composite Primary driver
#1Ages 50–64100.063.382.284.6Highest BJS victimisation rate; strong volume and severity
#2Ages 25–3448.7100.045.560.4Highest per-capita complaint volume of any cohort
#3Ages 35–4974.417.152.652.4Second-highest BJS victimisation rate (9.9%)
#4Ages 65+41.00.0100.051.4Highest severity score; volume suppressed by underreporting
#5Ages 18–240.049.50.012.4Lowest victimisation rate; lowest severity score

Component scores normalised 0 to 100 within each dimension. Composite = 40% Victimisation + 25% Volume + 35% Severity.

Ages 50 to 64 rank first because they are the only cohort scoring above the midpoint on all three dimensions simultaneously. Ages 65+ rank fourth despite topping the severity dimension. Remove the underreported volume component and the cohort moves to second; the 65+ ranking is a data infrastructure problem as much as a risk ranking.

The 50 to 64 finding survives every reweighting of the index. The 65+ finding does not. The federal data infrastructure systematically underestimates fraud exposure among the cohort that loses the most per incident.

Only One in Twenty Identity Theft Victims Reports the Crime to Police

Every number in this report sits on top of a reporting layer that captures a small fraction of actual fraud activity.

Data point Figure Source
Identity theft victims who reported to police (2021)6.6%BJS NCJ 306474
Existing credit card ID theft victims who reported to police2.7%BJS NCJ 306474
Fraud victims who reported to FTC or FBI (2025 survey)18%AARP 2025
Fraud victims who reported to local law enforcement20%AARP 2025
Fraud victims who contacted financial institution67%AARP 2025
Fraud victims who warned family or friends instead40%AARP 2025
Fraud victims who told no one6%AARP 2025

Sources: BJS Victims of Identity Theft 2021 (NCJ 306474). AARP 2025 Fraud Survey, p. 11.

The FTC's own underreporting analysis of 2023 figures produced two scenario estimates: a conservative $23.7 billion and an upper bound of $158.3 billion in true fraud losses. The agency reported $10 billion that year. Both scenarios place true losses at multiples of the published figure.

The BJS 2021 data records that the primary reason victims did not report identity theft to police was that the matter was handled in another way, most commonly by the victim or their financial institution. 67% of AARP respondents contacted their bank or card issuer after being defrauded. Roughly two-thirds of fraud is resolved through private channels that produce no public record.

Until reporting to federal agencies produces a tangible benefit to the reporter, the data infrastructure that policymakers, researchers, and the press rely on will continue to undercount fraud.

Methodology

This report synthesises data from six federal and nationally representative sources. All figures are drawn directly from published primary sources or calculated using disclosed methodology from those sources.

Where rates, population-level comparisons, or age-normalised metrics appear in this report, they are calculated using published denominators and identified as derived. These sources measure different dimensions of fraud and are not arithmetically addable.

Limitations

BJS published its 2021 wave with a redesigned questionnaire and explicitly states that the figures are not comparable to prior years. Trend interpretation across the BJS series is not supported by this report.

FTC Consumer Sentinel data captures complaints filed with the agency or its partners. It is not a population-level estimate. Demographic patterns inside the dataset depend on which groups are most likely to report, and underreporting varies by age and cohort.

The Generational Fraud Risk Index weights victimisation 40%, complaint volume 25%, and severity 35%. Other reasonable weight schemes would shift the rankings inside the cohorts that scored near the middle. The 50 to 64 cohort stays first across every weighting tested; the 65+ ranking is sensitive to the volume component.

The FDIC household survey measures banking access and channel use, not fraud. It is used here only to establish how mobile banking penetration has changed across the same decade in which mobile-borne fraud has scaled.

The AARP 2025 Fraud Survey is a probability-based national sample with a stated confidence interval of plus or minus 3.4 percentage points (n=1,423). Reporting-rate figures from that source should be read with that margin in mind.

Federal fraud reporting is voluntary and varies in capture rate across age, geography, and channel. Every aggregate figure in this report is a floor estimate, and the gap between reported and actual losses is itself one of the findings.

For a different cut of this data, additional regional or demographic breakouts, or methodology questions, contact contact@ranking-atlas.com.

Ranking Atlas is a specialist data campaigns firm. We turn proprietary data, commissioned research, and original analysis into stories and studies that earn authoritative coverage.

For methodology questions, additional data cuts, or research enquiries: contact@ranking-atlas.com.