Cybercrime Hits Record High: FBI Reports $16.6 Billion in Losses for 2024
FBI 2024 IC3 Report: Key Findings and Security Implications – 33% Increase in Cybercrime Losses
The IC3's 25th annual report logged 859,532 complaints and a 33% jump in losses. Here is what the data means for your business.
Reported cybercrime losses hit a record $16.6 billion in 2024, up 33% in a single year - and most of it came from fraud, not exotic hacking.
The IC3 report is useful precisely because it counts real dollars from real complaints, not projections. Its 25th-anniversary edition makes one thing clear: the biggest losses are not from Hollywood-style breaches but from fraud that tricks people into sending money. That is good news for a prepared business, because those are exactly the attacks that ordinary controls stop.
Where the $16.6 Billion Went
Fraud, not malware, is where the money is lost.
Investment fraud, business email compromise, and tech support fraud were the three most costly categories in the 2024 report.
Fraud made up the overwhelming majority of losses. Cryptocurrency showed up in $9.32 billion of reported losses - much of it tied to investment scams - which is why "double-check before you send" has become a core security habit, not just a finance one.
Who Got Hit Hardest
Small businesses, older adults, and critical infrastructure carried the losses.
Ransomware stayed the top threat to critical infrastructure, and Americans over 60 lost close to $4.9 billion.
- Older adults. People over 60 filed the most complaints and lost nearly $4.9 billion - a 43% jump in losses over 2023, led by tech support, romance, and crypto scams.
- Critical infrastructure. More than 4,800 critical-infrastructure organizations reported an impact, with data breaches and ransomware the most common problems.
- Ransomware overall. Complaints rose 9%, the IC3 tracked 67 new variants, and the most reported families included Akira, LockBit, RansomHub, FOG, and Play.
- Small and midsize businesses. SMBs remain attractive targets - valuable data, lighter defenses - and an average loss near $19,000 per complaint can be crippling for a small company.
The through-line is that attackers follow the path of least resistance and biggest payout. For most businesses, that path runs through email and payments.
What Your Business Should Do
The defenses match the threats - and none of them are exotic.
Because fraud and BEC dominate the losses, email and payment controls give you the most protection per dollar.
- Turn on MFA everywhere. Multi-factor authentication blocks most account takeovers behind BEC, even when a password leaks.
- Verify payment changes out of band. Confirm any request to change bank details or wire funds by phone, using a known number - the single best defense against BEC and funds-transfer fraud.
- Train your team. Regular phishing and fraud awareness training turns employees into the people who catch the scam.
- Keep tested, offline backups. Backups separated from your network let you recover from ransomware without paying.
- Monitor and plan. Continuous monitoring plus a tested incident response plan shortens the time between an attack and its containment.
Would Your Team Catch a $2.77 Billion Scam?
CinchOps builds the email, payment, and backup defenses that stop the fraud and ransomware driving the IC3's record numbers. Find out where you stand.
Talk to CinchOpsWhat strikes me about the IC3 numbers every year is how ordinary the attacks are. It is not zero-day wizardry - it is a fake invoice, a spoofed CEO, a wire that goes to the wrong account. That is why the fixes are ordinary too: MFA, a phone call to verify, a trained team. Boring beats billions.
Defense Against the Fraud That Costs the Most
CinchOps protects the email accounts and payment processes that drive most cybercrime losses - MFA, filtering, training, monitoring, and backups - as part of our cybersecurity and managed IT services.
Explore CinchOps cybersecurity →How CinchOps Helps Secure Your Business
CinchOps is a Katy, Texas managed IT services provider serving businesses across the Houston metro, turning national cybercrime data into local protection.
- Email security and MFA. Filtering and authentication against the BEC and phishing behind billions in losses.
- Payment-fraud safeguards. Processes and training so a spoofed request never becomes a wire transfer.
- Security awareness training. Helping staff recognize the fraud that drives most complaints.
- Backup and disaster recovery. Offline, tested backups for fast recovery from ransomware.
- 24/7 monitoring and response. Continuous watch and a tested plan to contain incidents quickly.
Do not become a line in next year's report. Contact CinchOps to strengthen your defenses today.
Frequently Asked Questions
What is the FBI IC3 2024 report?
It is the annual Internet Crime Report from the FBI's Internet Crime Complaint Center (IC3), summarizing cybercrime complaints and losses reported by the public. The 2024 edition, its 25th, recorded a record $16.6 billion in losses across 859,532 complaints.
How much did cybercrime losses rise in 2024?
Reported losses rose 33% over 2023, reaching $16.6 billion - the highest total the IC3 has recorded. The average reported loss was roughly $19,000 per complaint.
What caused the most losses?
Fraud dominated. Investment fraud led at $6.57 billion, followed by business email compromise at $2.77 billion and tech support fraud at $1.46 billion. Cryptocurrency was involved in $9.32 billion of reported losses.
Are small businesses at risk from these threats?
Yes. Business email compromise and funds-transfer fraud - two of the costliest categories - target businesses of every size, and SMBs often have lighter defenses. An average loss near $19,000 can be severe for a small company.
What is the most effective single defense?
For the fraud that drives most losses, verifying payment and bank-detail changes by phone using a known number - combined with MFA on email - stops the majority of business email compromise and funds-transfer fraud.
