Federal fraud and survey data show sharp divides in who gets scammed, how often, and how much they lose (and it's not who you think).
Content Written By:
Daniel Grainger
Founder, Ranking Atlas
Published March 2026
The Bureau of Justice Statistics asks a clean question every few years through the National Crime Victimization Survey: in the past twelve months, did anyone misuse your personal information? The most recent published wave (2021) is the cleanest population-level estimate of identity theft prevalence in the United States. The survey covers 263 million Americans aged 16 or older.
The result by age band:
| Age group | BJS victimisation rate (12-month) | 2024 US population | Implied affected population |
|---|---|---|---|
| 16–17 | 1.4% | 9,070,885 | ~127,000 |
| 18–24 | 7.0% | 31,363,181 | ~2.2 million |
| 25–34 | 8.9% | 46,453,864 | ~4.1 million |
| 35–49 | 9.9% | 65,833,273 | ~6.5 million |
| 50–64 | 10.9% (highest) | 62,148,032 | ~6.8 million |
| 65+ | 8.6% | 55,747,169 | ~4.8 million |
Source: BJS NCJ 306474, Table 2 (2021 survey data). Population denominators: US Census Bureau NC-EST2024-AGESEX-RES. Implied affected population applies 2021 BJS rates to 2024 Census figures for directional illustration.
Roughly 1 in 9 Americans aged 50 to 64 experienced identity theft in a single twelve-month window. Adults over 65, despite being the primary target of fraud-awareness campaigns, recorded a lower victimisation rate than every working-age cohort above 35.
The BJS data does not explain why the 50 to 64 cohort tops the chart. It shows the cohort with the most active credit accounts and the largest investable assets carries the highest fraud frequency.
If victimisation rate is the first dimension of fraud risk, financial loss is the second. The FTC Consumer Sentinel Network Data Book 2024 tracks both whether complainants reported losing money and how much they lost. The two metrics move in opposite directions across the age curve.
| Age group | % reporting a fraud loss | Median loss per incident | Total reported losses |
|---|---|---|---|
| 20–29 | 44% | $417 | $430M |
| 30–39 | 35% | $450 | $810M |
| 40–49 | 38% | $500 | $971M |
| 50–59 | 40% | $520 | $1.18B |
| 60–69 | 51% | $691 | $1.01B |
| 70–79 | 24% | $1,000 | $887M |
| 80+ | 21% | $1,650 | $319M |
Source: FTC Consumer Sentinel Network Data Book 2024, p. 13.
Younger Americans are caught by fraud more often; older Americans are caught less often but lose more when they are. The 80+ group loses 4 times more per incident than the 20 to 29 group.
Preventing fraud among younger adults reduces the number of incidents. Preventing fraud among older adults reduces catastrophic financial losses. Generic awareness campaigns treat them as one problem and solve neither.
The preceding sections present each source separately. The question no individual source answers is which age cohort faces the greatest overall fraud burden when victimisation, complaint volume, and loss severity are weighed together.
The Generational Fraud Risk Index combines those three dimensions into a single composite score per age band. Three components feed the score:
Each component is normalised 0 to 100 across the five cohorts using min-max scaling, then combined with the weights above.
| Rank | Cohort | Vic score (40%) | Volume score (25%) | Severity score (35%) | Composite | Primary driver |
|---|---|---|---|---|---|---|
| #1 | Ages 50–64 | 100.0 | 63.3 | 82.2 | 84.6 | Highest BJS victimisation rate; strong volume and severity |
| #2 | Ages 25–34 | 48.7 | 100.0 | 45.5 | 60.4 | Highest per-capita complaint volume of any cohort |
| #3 | Ages 35–49 | 74.4 | 17.1 | 52.6 | 52.4 | Second-highest BJS victimisation rate (9.9%) |
| #4 | Ages 65+ | 41.0 | 0.0 | 100.0 | 51.4 | Highest severity score; volume suppressed by underreporting |
| #5 | Ages 18–24 | 0.0 | 49.5 | 0.0 | 12.4 | Lowest victimisation rate; lowest severity score |
Component scores normalised 0 to 100 within each dimension. Composite = 40% Victimisation + 25% Volume + 35% Severity.
Ages 50 to 64 rank first because they are the only cohort scoring above the midpoint on all three dimensions simultaneously. Ages 65+ rank fourth despite topping the severity dimension. Remove the underreported volume component and the cohort moves to second; the 65+ ranking is a data infrastructure problem as much as a risk ranking.
The 50 to 64 finding survives every reweighting of the index. The 65+ finding does not. The federal data infrastructure systematically underestimates fraud exposure among the cohort that loses the most per incident.
Every number in this report sits on top of a reporting layer that captures a small fraction of actual fraud activity.
| Data point | Figure | Source |
|---|---|---|
| Identity theft victims who reported to police (2021) | 6.6% | BJS NCJ 306474 |
| Existing credit card ID theft victims who reported to police | 2.7% | BJS NCJ 306474 |
| Fraud victims who reported to FTC or FBI (2025 survey) | 18% | AARP 2025 |
| Fraud victims who reported to local law enforcement | 20% | AARP 2025 |
| Fraud victims who contacted financial institution | 67% | AARP 2025 |
| Fraud victims who warned family or friends instead | 40% | AARP 2025 |
| Fraud victims who told no one | 6% | AARP 2025 |
Sources: BJS Victims of Identity Theft 2021 (NCJ 306474). AARP 2025 Fraud Survey, p. 11.
The FTC's own underreporting analysis of 2023 figures produced two scenario estimates: a conservative $23.7 billion and an upper bound of $158.3 billion in true fraud losses. The agency reported $10 billion that year. Both scenarios place true losses at multiples of the published figure.
The BJS 2021 data records that the primary reason victims did not report identity theft to police was that the matter was handled in another way, most commonly by the victim or their financial institution. 67% of AARP respondents contacted their bank or card issuer after being defrauded. Roughly two-thirds of fraud is resolved through private channels that produce no public record.
Until reporting to federal agencies produces a tangible benefit to the reporter, the data infrastructure that policymakers, researchers, and the press rely on will continue to undercount fraud.
This report synthesises data from six federal and nationally representative sources. All figures are drawn directly from published primary sources or calculated using disclosed methodology from those sources.
Where rates, population-level comparisons, or age-normalised metrics appear in this report, they are calculated using published denominators and identified as derived. These sources measure different dimensions of fraud and are not arithmetically addable.
BJS published its 2021 wave with a redesigned questionnaire and explicitly states that the figures are not comparable to prior years. Trend interpretation across the BJS series is not supported by this report.
FTC Consumer Sentinel data captures complaints filed with the agency or its partners. It is not a population-level estimate. Demographic patterns inside the dataset depend on which groups are most likely to report, and underreporting varies by age and cohort.
The Generational Fraud Risk Index weights victimisation 40%, complaint volume 25%, and severity 35%. Other reasonable weight schemes would shift the rankings inside the cohorts that scored near the middle. The 50 to 64 cohort stays first across every weighting tested; the 65+ ranking is sensitive to the volume component.
The FDIC household survey measures banking access and channel use, not fraud. It is used here only to establish how mobile banking penetration has changed across the same decade in which mobile-borne fraud has scaled.
The AARP 2025 Fraud Survey is a probability-based national sample with a stated confidence interval of plus or minus 3.4 percentage points (n=1,423). Reporting-rate figures from that source should be read with that margin in mind.
Federal fraud reporting is voluntary and varies in capture rate across age, geography, and channel. Every aggregate figure in this report is a floor estimate, and the gap between reported and actual losses is itself one of the findings.
For a different cut of this data, additional regional or demographic breakouts, or methodology questions, contact contact@ranking-atlas.com.
This guide explains how AI answer engines choose which brands to cite, and what produces the editorial pattern that puts you in the answer.
Software that can be vibe-coded by a small team has lost all pricing power, while AI-resistant SaaS categories raised entry-tier prices up to three times faster than inflation.
2,286 named individuals from 2,520 AI responses across ChatGPT, Claude, Gemini, and Perplexity. Women made up 20.5% of named ICT experts against a 28% workforce baseline.
Ranking Atlas is a specialist data campaigns firm. We turn proprietary data, commissioned research, and original analysis into stories and studies that earn authoritative coverage.
For methodology questions, additional data cuts, or research enquiries: contact@ranking-atlas.com.
Social Media Converts Seven in Ten Fraud Attempts to a Financial Loss
The FTC also tracks how fraud reaches its victims. Among complaints where the contact method was identified, social media and websites or apps are now the two channels most likely to extract money from the target.
Source: FTC Consumer Sentinel Network Data Book 2024, p. 12. Based on 1,509,002 reports with contact method identified out of 2,600,678 total fraud reports.
Email is the most common contact method (25% of reports) but the lowest conversion to actual loss (11%). The volume of email-based fraud still produces $502M in aggregate reported losses, while the per-attempt success rate is low.
Social media inverts that. Only 13% of fraud reports identify social media as the contact method, but when fraud arrives via social media, 70% of complainants report a financial loss, by some distance the highest conversion rate of any channel.
The same digital surface that delivers most fraud now also handles most banking. The FDIC's 2023 household survey records 48.3% of US banked households using mobile banking as their primary account access method, up from 5.4% a decade earlier.