Key Takeaways
- $1.17B total losses – Americans lost over a billion dollars to identity theft across six years (2020–2025)
- Two-year rebound – losses have risen in both 2024 (+38%) and 2025 (+7%), confirming the post-2023 recovery is not a one-off spike
- Higher-value attacks – criminals now focus on banking and merchant account takeovers versus petty theft
- Enable MFA everywhere – unique passwords and multi-factor authentication are your best defense
The Story Behind the Numbers
The chart shows identity-theft losses rising to a high in 2021, sliding for two straight years, and rebounding across both 2024 and 2025. Reported losses were $219M in 2020, $278M in 2021 (peak), $189M in 2022, $126M in 2023 (low), $174M in 2024, and $186M in 2025. Over six years, the total reaches approximately $1.17B, with an average near $195M per year.
That swing matters: after dropping 32% in 2022 and another 33% in 2023, losses jumped 38% in 2024 – and continued climbing 7% into 2025. Two consecutive years of growth after a trough is a clearer signal than a single-year bounce. Fewer petty cases likely reach law enforcement, while targeted account takeovers and synthetic identities drive larger losses when they do. The takeaway: fewer reports don’t equal lower risk – watch average loss per case, harden logins, and reduce exposed data.
Why This Data is Important
Losses, not just case counts, show financial risk. The continued rebound through 2025 reinforces that criminals are focusing on higher-value hits – compromising banking and merchant accounts, reusing leaked passwords, and moving money quickly once inside. At the same time, banks and platforms now filter many small-dollar attempts, so minor incidents may be resolved without official reports while the costly cases are still recorded.
For everyday users, the practical response is to reduce what can be abused: unique passwords, strong multi-factor authentication, and fewer exposed identifiers. On untrusted networks, masking your IP limits passive tracking and data collection. Also consider separating identities for sign-ups with anonymous email.
Looking Ahead: Future Outlook
With losses rising in back-to-back years and the six-year total now crossing $1B, expect continued upward pressure unless attacker tactics shift. Criminals will keep testing weak recovery flows, reused passwords, and poorly secured email accounts.
Treat average loss per incident as an early warning: if it rises while complaints stay flat or fall, risk is concentrating in fewer, more damaging cases. The most reliable path is steady hardening over time – enable MFA on every important account, add passkeys where available, turn on real-time bank and card alerts, and prune old or unused accounts that create extra exposure.
Source & Methodology
We analyzed the Identity Theft category in the FBI IC3 annual data (2020-2025) and visualized complaint losses from those tables. Year-to-year changes and commentary reflect the trend shown in the chart. Data reflects reported incidents only and likely understates the true number of victims.