2020 Internet Crime Report Summary
Introduction
The 2020 Internet Crime Report highlights the surge in cybercrime during the year of the global pandemic. Cybercriminals exploited the increased reliance on technology and the vulnerability of specific groups, such as medical workers and families seeking financial assistance, through various fraudulent schemes. The FBI's Internet Crime Complaint Center (IC3) played a critical role in combating these crimes, receiving a record number of complaints and losses.
IC3 Overview
- Mission: Provide a reliable reporting mechanism for cybercrime and support law enforcement in investigations.
- Complaints and Losses:
- 791,790 complaints in 2020, with reported losses exceeding $4.1 billion.
- A 69% increase in complaints compared to 2019.
- Core Functions:
- Receive and analyze complaints.
- Develop effective alliances with industry partners.
- Assist in recovery efforts and investigative analysis.
Hot Topics for 2020
Business Email Compromise (BEC)
- Complaints: 19,369.
- Losses: $1.8 billion.
- Description: Sophisticated scams targeting businesses and individuals, often involving social engineering and computer intrusion.
- Trends:
- Increased use of identity theft and cryptocurrency.
- Scammers used stolen identities to establish bank accounts and transfer funds.
IC3 Recovery Asset Team (RAT)
- Success in 2020:
- Incidents: 1,303.
- Losses: $462,967,963.72.
- Frozen Funds: $380,211,432.04.
- Success Rate: 82%.
- Functions:
- Liaison between law enforcement and financial institutions.
- Streamlines communication and freezing of fraudulent funds.
- Goals:
- Identify fraudulent accounts.
- Stay ahead of emerging trends.
- Foster information sharing between partners.
Tech Support Fraud
- Complaints: 15,421 from 60 countries.
- Losses: $146 million, a 171% increase from 2019.
- Victims: 66% over 60 years old, experiencing 84% of the losses.
- Common Tactics:
- Posing as customer support representatives.
- Directing victims to wire transfers or purchase prepaid cards.
Ransomware
- Complaints: 2,474.
- Losses: $29.1 million.
- Common Infection Methods:
- Email phishing campaigns.
- Exploiting RDP vulnerabilities.
- Software vulnerabilities.
- FBI Advice:
- Do not pay ransoms.
- Report incidents to IC3 to aid in tracking and prevention.
Victims by Age Group
| Age Range |
Total Count |
Total Loss |
| Under 20 |
23,186 |
$70,980,763 |
| 20 - 29 |
70,791 |
$197,402,240 |
| 30 - 39 |
88,364 |
$492,176,845 |
| 40 - 49 |
91,568 |
$717,161,726 |
| 50 - 59 |
85,967 |
$847,948,101 |
| Over 60 |
105,301 |
$966,062,236 |
Top 20 International Victim Countries (Excluding the US)
| Country |
Total Complaints |
| United Kingdom |
216,633 |
| Canada |
5,399 |
| India |
2,930 |
| Greece |
2,314 |
| Australia |
1,807 |
| France |
1,640 |
| Germany |
1,578 |
| Mexico |
1,164 |
| Belgium |
1,023 |
| Netherlands |
450 |
| Brazil |
951 |
| Philippines |
898 |
| South Africa |
1,754 |
| Spain |
618 |
| Colombia |
418 |
| Hong Kong |
407 |
| Nigeria |
443 |
| Pakistan |
443 |
| China |
442 |
| Italy |
728 |
Top 10 States by Number of Victims
- 1. California
- 2. New York
- 3. Florida
- 4. Texas
- 5. Georgia
- 6. Illinois
- 7. Pennsylvania
- 8. Michigan
- 9. Ohio
- 10. Washington
Top 10 States by Victim Loss
- 1. California
- 2. New York
- 3. Florida
- 4. Texas
- 5. Georgia
- 6. Illinois
- 7. Pennsylvania
- 8. Michigan
- 9. Ohio
- 10. Washington
2020 Crime Types by Victim Count
| Crime Type |
Total Victims |
| Phishing/Vishing/Smishing/Pharming |
241,342 |
| Non-Payment/Non-Delivery |
108,869 |
| Extortion |
76,741 |
| Personal Data Breach |
45,330 |
| Identity Theft |
43,330 |
| Spoofing |
28,218 |
| Misrepresentation |
24,276 |
| Confidence Fraud/Romance |
23,751 |
| BEC/EAC |
19,369 |
| Credit Card Fraud |
17,614 |
| Employment |
16,879 |
| Tech Support |
15,421 |
| Real Estate/Rental |
13,638 |
| Advanced Fee |
13,020 |
| Government Impersonation |
12,827 |
| Overpayment |
10,988 |
| Other |
10,372 |
2020 Crime Types by Loss
| Crime Type |
Total Loss |
| BEC/EAC |
$1,866,642,107 |
| Confidence Fraud/Romance |
$600,249,821 |
| Investment |
$336,469,000 |
| Non-Payment/Non-Delivery |
$265,011,249 |
| Identity Theft |
$219,484,699 |
| Spoofing |
$216,513,728 |
| Real Estate/Rental |
$213,196,082 |
| Personal Data Breach |
$194,473,055 |
| Tech Support |
$146,477,709 |
| Credit Card Fraud |
$129,820,792 |
| Corporate Data Breach |
$128,916,648 |
| Government Impersonation |
$109,938,030 |
| Other |
$101,523,082 |
| Advanced Fee |
$83,215,405 |
| Extortion |
$70,935,939 |
| Employment |
$62,314,015 |
| Lottery/Sweepstakes/Inheritance |
$61,111,319 |
| Phishing/Vishing/Smishing/Pharming |
$54,241,075 |
| Overpayment |
$51,039,922 |
| Civil Matter |
$24,915,958 |
| Misrepresentation |
$19,707,242 |
| Malware/Scareware/Virus |
$6,904,054 |
| Harassment/Threats of Violence |
$6,547,449 |
| IPR/Copyright/Counterfeit |
$5,910,617 |
| Charity |
$4,428,766 |
| Denial of Service/TDoS |
$512,127 |
| Gambling |
$3,961,508 |
| Re-shipping |
$3,095,265 |
| Crimes Against Children |
$660,044 |
| Hacktivist |
$50 |
| Terrorism |
$0 |
Key Statistics
- Total Complaints (Last 5 Years): 2,211,396.
- Total Losses (Last 5 Years): $13.3 billion.
- Complaints in 2020: 791,790.
- Losses in 2020: $4.1 billion.
- Average Complaints Per Day: Over 2,000.
- Average Complaints Per Year: Over 440,000.
Additional Information
- Elder Justice Initiative:
- Focused on financial fraud targeting individuals over 60.
- In 2020, 105,301 complaints from victims over 60, with losses over $966 million.
- IC3 plans to release a dedicated report on elder fraud in 2021.
- Descriptors:
- Social Media: 35,439 complaints.
- Virtual Currency: 35,229 complaints.
- These descriptors are used for tracking purposes only.
Conclusion
The 2020 Internet Crime Report underscores the increasing sophistication and prevalence of cybercrime, particularly during the pandemic. The IC3 played a crucial role in addressing these challenges through robust reporting mechanisms, investigative support, and recovery efforts. The report also emphasizes the need for public vigilance and education against cyber threats, especially targeting vulnerable populations like the elderly.