Facts + Statistics: Identity theft and cybercrime

The scope of identity theft

According to the Aite-Novarica Group, 47 percent of Americans experienced financial identity theft in 2020. The group’s report, U.S. Identity Theft: The Stark Reality, found that losses from identity theft cases cost $502.5 billion in 2019 and increased 42 percent to $712.4 billion in 2020. The group explains that the huge increase was fueled by the high rate of unemployment identity theft during the pandemic, as increased and extended unemployment benefits made the sector an attractive target for fraudsters.

Identity theft and fraud complaints

The Consumer Sentinel Network, maintained by the Federal Trade Commission (FTC), tracks consumer fraud and identity theft complaints that have been filed with federal, state and local law enforcement agencies and private organizations. There were 4.8 million complaints received by the FTC in 2020, up 45 percent from 3.3 million in 2019, mostly due to the 113 percent increase in identity theft complaints.  In 2020, 1.4 million complaints were for identity theft, up from 651,000 in 2019. Identity theft complaints accounted for 29 percent of all complaints received by the FTC, up from 20 percent in 2019. About 2.2 million reports were fraud complaints and 1.2 million involved other complaints.

Of the 1.4 million identity theft complaints, almost one-third involved government benefits applied for or received. According to Equifax, federal stimulus payments were an easy target for criminals and were the number one COVID-19 scam. New credit card accounts fraud was the next largest identity theft scam, accounting for about 30 percent of all identity theft complaints. Imposter scams were the second-worst overall category of FTC complaints, with almost one-half million reports.

Of the 2.2 million fraud cases, 34 percent reported money was lost. Consumers reported losing more than $3.3 billion to fraud, an increase of $1.5 billion from 2019. The median amount consumers paid in these cases was $311. Twenty-two percent of imposter scam complaints reported money lost, totaling about $1.2 billion.

The top five states for identity theft ranked by the number of reports per population were Kansas, Rhode Island, Illinois, Nevada and Washington. (See chart below). For fraud and other complaints, the top five states were Nevada, Delaware, Florida, Maryland, and Georgia.

Identity Theft And Fraud Reports, 2016-2020 (1)

 

(1) Percentages are based on the total number of Consumer Sentinel Network reports by calendar year. These figures exclude "Do Not Call" registry complaints.

Source: Federal Trade Commission, Consumer Sentinel Network.

View Archived Graphs

Top Five Types of Identity Theft, 2020 (1)

 

Type of identity theft Number of reports Percent of total top five
Government benefits applied for/received 394,324 32.0%
Credit card fraud—new accounts 365,597 29.7
Miscellaneous identity theft (2) 281,434 22.9
Business/personal loan 99,667 8.1
Tax fraud 89,391 7.3
Total, top five 1,230,413 100.0%

(1) Consumers can report multiple types of identity theft. In 2020, 15 percent of identity theft reports included more than one type of identity theft.
(2) Includes online shopping and payment account fraud, email and social media fraud, and medical services, insurance and securities account fraud, and other identity theft.

Source: Federal Trade Commission, Consumer Sentinel Network.

View Archived Tables

Identity Theft By State, 2020 (1)

 

State Reports per
100,000
population (2)
Number of
reports
Rank (3) State Reports per
100,000
population (2)
Number of
reports
Rank (3)
Alabama 354 17,376 21 Montana 228 2,439 32
Alaska 127 926 47 Nebraska 113 2,182 49
Arizona 380 27,661 14 Nevada 740 22,801 4
Arkansas 579 17,470 8 New Hampshire 169 2,301 38
California 373 147,382 15 New Jersey 362 32,125 19
Colorado 361 20,762 20 New Mexico 165 3,454 40
Connecticut 191 6,821 35 New York 345 67,202 23
Delaware 449 4,374 13 North Carolina 288 30,176 26
D.C. 368 2,595 18 North Dakota 166 1,266 39
Florida 472 101,367 11 Ohio 222 25,893 33
Georgia 654 69,487 7 Oklahoma 349 13,797 22
Hawaii 271 3,835 28 Oregon 176 7,432 37
Idaho 132 2,353 45 Pennsylvania 265 33,886 29
Illinois 1,066 135,038 3 Puerto Rico 52 1,663 52
Indiana 257 17,306 30 Rhode Island 1191 12,621 2
Iowa 96 3,022 50 South Carolina 373 19,193 15
Kansas 1,483 43,211 1 South Dakota 72 637 51
Kentucky 127 5,693 47 Tennessee 281 19,182 27
Louisiana 473 21,976 10 Texas 465 134,788 12
Maine 534 7,183 9 Utah 292 9,366 25
Maryland 343 20,718 24 Vermont 130 810 46
Massachusetts 661 45,575 6 Virginia 183 15,632 36
Michigan 244 24,370 31 Washington 712 54,247 5
Minnesota 146 8,246 44 West Virginia 148 2,646 43
Mississippi 371 11,048 17 Wisconsin 154 8,986 41
Missouri 222 13,653 33 Wyoming 151 875 42

(1) Includes the District of Columbia and Puerto Rico.
(2) Population figures are based on the 2019 U.S. Census population estimates.
(3) Ranked per complaints per 100,000 population. States with the same number of complaints per 100,000 population receive the same rank.

Source: Federal Trade Commission, Consumer Sentinel Network.

View Archived Tables

See also the Identity Theft section of our website Click here.

Top 10 Writers Of Identity Theft Insurance By Direct Premiums Written, 2020 (1)

($000)

Rank Group/company Direct premiums written (2) As a percent of
total direct
premiums written
1 Nationwide Mutual Group $33,005 13.9%
2 State Farm  32,694 13.7
3 Travelers Companies Inc. 23,812 10.0
4 Hanover Insurance Group Inc. 13,352 5.6
5 Liberty Mutual 13,174 5.5
6 Allstate Corp. 10,630 4.5
7 Farmers Insurance Group of Companies 10,430 4.4
8 American Family Insurance Group 10,138 4.3
9 Erie Insurance Group 8,917 3.7
10 Mercury General Corp. 6,614 2.8

(1) Includes stand-alone policies and the identity theft portion of package policies. Does not include premiums from companies that cannot
report premiums for identity theft coverage provided as part of package policies.
(2) Before reinsurance transactions.

Source: NAIC data, sourced from S&P Global Market Intelligence, Insurance Information Institute.

View Archived Tables

Cybercrime

The Identity Theft Research Center (ITRC), in its annual data breach report, announced that in 2021 there were a record 1,862 data compromises in the U.S., a 68 percent increase over 2020 and 23 percent over the previous all-time high of 1,506. According to the report, 294 million people had their data compromised in 2021 compared to 310 million in 2020. The report notes that ransomware-related data breaches are expected to overtake phishing as the number one root cause of data compromises in 2022 based on the current growth rate.

The insurance industry was the most frequent target of ransomware attacks in the first half of 2021, accounting for almost 25 percent of all ransomware attacks on Accenture’s clients. Consumer goods and services, and telecommunications ranked second and third, according to Accenture.

The 2021 Cost of a Data Breach Report, a global study sponsored by IBM Security and conducted by the Ponemon Institute, found that the average data breach cost rose from $3.86 million in 2020 to $4.24 million in 2021. Costs remained highest in the U.S., rising to $9.05 million from $8.64 million in 2020. Ransomware attacks were costlier than other types of data breaches with an average cost of $4.62 million. The percentage of companies where ransomware was a factor in the breach was 7.8 percent. Malicious attacks that destroyed data in destructive wiper-style attacks cost an average of $4.69 million.

According to modeler CyberCube, rating agency AM Best and insurance and reinsurance broker Aon, a $12.5 billion industry loss from non-physical damage could transfer to property carriers if a major event occurs, triggering a one-in-100-year loss in the U.S. property insurance market. This loss figure suggests that the U.S. property insurance market is exposed to $9.5 billion of attritional losses and $3 billion of catastrophic losses.

 

 

View Archived Graphs

The IC3 said in its Internet Crime Report 2020 that 2020 complaints and dollar losses were the highest since the center began tracking cybercrime statistics in 2000. In 2020 the IC3 received and processed 791,790 complaints, a 69 percent increase from 467,361 in 2019. Losses to individuals and businesses totaled $4.2 billion, up 20 percent from 2019. Business email compromise continued to cause the most losses, with about $1.8 billion in losses, followed by confidence or romance fraud, with $600.2 million in losses.

View Archived Graphs

Top 10 States By Number Of Cybercrime Victims And By Losses, 2020 (1)

 

Rank State Number Rank State Losses ($ millions)
1 California 69,541 1 California $621.5
2 Florida 53,793 2 New York 415.8
3 Texas 38,640 3 Texas 313.6
4 New York 34,505 4 Florida 295.0
5 Illinois 20,185 5 Ohio 170.2
6 Pennsylvania 18,636 6 Illinois 150.5
7 Washington 17,229 7 Missouri 115.9
8 Nevada 16,110 8 Pennsylvania 108.5
9 New Jersey 14,829 9 Virginia 101.7
10 Maryland 14,804 10 Colorado 100.7

(1) Based on the total number of complaints submitted to the Internet Crime Complaint Center via its website from each state where the complainant provided state information.

Source: Internet Crime Complaint Center.

View Archived Tables

Top 10 Writers Of Cybersecurity Insurance By Direct Premiums Written, 2020 (1)

($000)

Rank Group/company Direct premiums written (2) As a percent of
total direct
premiums written
1 Chubb Ltd. $404,144 14.7%
2 AXA XL 293,025 10.7
3 American International Group (AIG) 228,425 8.3
4 Travelers Companies Inc. 206,817 7.5
5 Beazley Plc 177,746 6.5
6 AXIS Capital Holdings Ltd. 133,550 4.9
7 CNA Financial Corp. 119,612 4.4
8 Fairfax Financial Holdings 108,543 4.0
9 Hartford Financial Services 102,865 3.7
10 BCS Insurance Co. 86,583 3.2

(1) Includes stand-alone policies and the cybersecurity portion of package policies. Does not include premiums from companies that cannot report premiums for cybersecurity coverage provided as part of package policies.
(2) Before reinsurance transactions.

Source: NAIC data, sourced from S&P Global Market Intelligence, Insurance Information Institute.

View Archived Tables

Additional resources

Federal Trade Commission

Internet Crime Complaint Center

Back to top