Key Takeaways
- Identity theft complaints peaked in 2021, hit a five-year low in 2023, then rebounded sharply to 31,675 in 2025
- Pandemic-era spike has cooled – but the trend has now reversed, not stabilized
- Targeted attacks still succeed despite better defenses against mass scams
- Use unique passwords and multi-factor authentication to reduce risk
The Story Behind the Numbers
The chart shows a clear arc: complaints rose to a high in 2021, then fell hard in 2022–2023, then began climbing again. Reports dropped from the 2021 peak of 51,629 to a five-year low of 19,778 in 2023 – but that floor didn’t hold. A modest uptick to 21,403 in 2024 was an early warning. By 2025, complaints jumped to 31,675 – a 48% increase from 2024 alone.
This tells us two things. First, the pandemic-era spike has cooled relative to its 2021 peak. Second, identity theft is not fading – it is actively rebounding. The stabilization narrative no longer holds. Everyday precautions matter more than ever, especially on public Wi-Fi and within reused accounts. In fact, Americans lost about $1.17B total to identity theft over six years (2020-2025), which shows the impact remains substantial even when complaint counts fall.
Why This Data is Important
When complaints declined through 2023, it suggested that defenses improved against “spray-and-pray” scams, while more targeted attacks still get through. The 2025 rebound changes the read. It likely reflects a new wave of account takeovers and data-breach-fueled fraud – criminals cycling through credentials exposed in large leaks. Banks and platforms filter small-dollar fraud automatically, so the real number of victims almost certainly exceeds what reaches the FBI.
That broader harm shows up in the national loss totals as well. Reported U.S. cybercrime losses reached about $20.9B in 2025. For individuals, reducing exposed data and minimizing account reuse matter more than ever. Start with strong, unique passwords and multi-factor authentication, then limit tracking by masking your IP on risky networks and separating identities for sign-ups with anonymous email.
Looking Ahead: Future Outlook
The 2025 spike suggests complaint counts may keep climbing toward – though likely not reaching – the 2021 peak. Average losses per incident can also keep rising as criminals target higher-value accounts and automate takeover tactics. Pressure will stay on weak passwords, reused credentials, and insecure recovery flows. The most realistic plan is incremental: tighten authentication, watch account alerts, and shrink your data trail while using a VPN on untrusted networks. A VPN is not a lock against identity theft, but it does help keep your traffic private on risky networks while you harden the rest of your setup.
Source & Methodology
We analyzed the Identity Theft category in the FBI IC3 annual data (2020–2025) and visualized complaint counts from those tables. Year-to-year changes and commentary reflect the trend shown in the chart. Data reflects reported incidents only and likely understates the true number of victims.