The Perfect Storm

April 30, 2026 by ThreatMark

April’s developments highlight a more intricate fraud landscape. AI is enabling more scalable and sophisticated attacks, enforcement actions are reshaping targeting strategies, and regulatory pressure is rising unevenly across the ecosystem.

1. State of Fraud in the US

Two major US agencies released their latest fraud statistics in April—and the numbers are not looking good. The FBI’s annual Internet Crime Complaint Report recorded over 1 million complaints in 2025, a new peak, alongside $21 billion in losses from cyber-enabled crime, also the highest level to date and up 26% year over year.

Investment fraud remains the primary driver, accounting for nearly 49% of all scam-related losses, while phishing and spoofing remain the most frequently reported attack types. For the first time, the IC3 report includes a section on artificial intelligence, linked to nearly $893 million in losses. The same pattern appears in data from the Federal Trade Commission (FTC), which received 3 million fraud reports in 2025, with losses reaching $15.9 billion, up more than 27% year over year. These figures likely represent only a baseline, as many victims never report cybercrime.

2. AI Creates a “Perfect Storm” for Scammers

TIME published a deep dive into scam operations and the role of AI, citing Infoblox research. It points to a shift from social engineering toward advanced remote access trojans (RATs) that operate as surveillance tools with near-complete device control.

While AI is widely known for enabling fake scripts, chatbots, images, and deepfakes, its impact is also structural. As it displaces entry-level tech jobs, it is making recruitment into scam operations easier. People who were once trafficked into scam compounds are now increasingly joining willingly. This results in a perfect storm, where AI tools, advanced malware, and economic pressure drive more capable and damaging industrial-scale fraud.

3. Scammers Shift Focus to the Global South

TIME also highlights a shift in global targeting patterns. Following recent Western and Chinese enforcement actions, scammers are moving from English- and Chinese-speaking victims to targets in the Global South.

This reflects both lower perceived risk and the assumption that populations across Latin America and Africa are less familiar with scam tactics and lack access to advanced security tools.

4. Scams and Identity Theft Dominate Cybercrime in Costa Rica

Cybercrime in Costa Rica is overwhelmingly driven by online fraud and identity theft. According to a report by Costa Rica’s National University (UNA), these categories account for 84% of all cybercrime.

The data points to a broader trend: cybercriminals are increasingly using social engineering to exploit trust and pressure victims into action.

5. UK Payments Sector Calls for Greater Scrutiny of Online Platforms

A recent whitepaper from the Payments Association highlights an imbalance in fraud liability across the UK’s regulatory framework.

While banks and payment service providers have faced mandatory APP fraud reimbursement since late 2024, the digital platforms where many scams originate operate without comparable financial liability. In a fraud landscape where around two-thirds of reported APP fraud cases originate on online platforms, this gap is clear.

The paper calls for a shared liability model, including mandatory advertiser verification, defined timelines for removing fraudulent content, financial penalties for repeated failures, and real-time intelligence sharing between technology firms and the payments industry.

6. Scams Scale Where Digital Reach Is Cheapest

According to new FTC data, social media has become the most expensive entry point for consumer scams. In 2025, reported losses from scams that originated on social platforms hit $2.1 billion, nearly 30 percent of all reported scam losses and eight times higher than in 2020.

The financial impact is concentrated. Investment scams alone drove more than $1.1 billion in losses, while shopping scams remained the most frequently reported. The FTC points to the structural advantage social platforms offer scammers: low-cost reach, rich behavioral data, and ad tools that mirror those used by legitimate businesses. As scams increasingly originate inside mainstream digital ecosystems, the data reinforces a central tension in the fraud landscape. Control and liability remain misaligned with where fraud exposure is actually created, accelerating the perfect storm already reshaping prevention strategies.

7. ACI Targets Multi-Rail Complexity with a Unified Payment Platform

Multi-rail payments are becoming a structural burden for US banks. With 58% of instant-payment-enabled institutions now running both FedNow and RTP in parallel, compliance, fraud monitoring, and exception handling are increasingly duplicated across rails. At the same time, new Nacha rules introduced in March 2026 require risk-based fraud monitoring across ACH, further increasing the cost of fragmented systems.

ACI Worldwide’s expansion of its cloud-native Connetic platform responds to this pressure, unifying eight payment networks into a single environment with fraud detection embedded directly into transaction workflows.

Multi-rail complexity is now a board-level cost line. Fraud prevention is part of that calculation, with behavioral intelligence offering a rail-agnostic layer that can be applied consistently across both legacy and real-time payment systems.

8. Ireland Exposes the Scale of Everyday Fraud

New research from the Central Bank of Ireland highlights how embedded fraud has become in everyday economic activity. Thirty‑five percent of adults have experienced fraud or scams, yet 38 percent of victims never report the incident. Reported payment fraud reached €160 million in 2024, but the true impact is likely higher due to persistent underreporting.

The data shows fraud risk is driven less by demographics and more by online behavior. Victims who report fraud are far more likely to recover funds, while non‑reporting sharply reduces recovery and weakens visibility across the system. As incidents remain unseen, risk signals degrade and scams scale faster.

Banking Threat Bulletin highlights the stories shaping global fraud prevention and customer protection. Stay informed. Strengthen trust. Protect your customers.