Cybercrime victims lose an average of $9,468 each, costing the world’s economy $1.24trn a year

Cybercrime costs often invoke astronomical figures, so you’d be forgiven for thinking each country has in-depth reports on the subject and knows the cost of these crimes. However, as our study demonstrates, cybercrime is still severely underreported by police, government entities, and victims.

The true monetary value of cybercrime remains largely unknown. However, by examining the top 100 countries by GDP and looking at the cybercrime reports available and the figures and categories involved, we can form an understanding of just how much impact cybercrime has on global economies each year.

Our report focuses less on automated, wide-scale attacks and more on targeted crimes that seek to exploit individuals, steal someone’s data, or illegally access computer systems or networks.

We found figures for 78 countries, but only 27 reported the monetary damages involved.

Below, we explore what the true cost of cybercrime to victims may be, what each country’s reporting rate is, and how the cybercrime landscape has changed in each country.

Key findings

According to our estimates:

  • 103.9 million people fall victim to cybercrimes globally each year, or more than 1,577 victims per 100,000 people
  • The average victim loss is $9,468 per crime
  • Victims lose an estimated $1.24 trillion to cybercrime annually

Calculating the cost of cybercrime to victims

According to our estimates, more than $534.9 billion per year has been lost to cybercrime across the top 100 countries by GDP that we’ve covered. Globally, this amounts to just over $1.24 trillion, which, if it were a country’s GDP, would put it in 20th place.

Based on our estimate that 1,577 victims per 100,000 people fall victim to cybercrime each year and a current world population of 8.3 billion, this amounts to 130.9 million victims of cybercrime globally. At a cost of $9,468 to each crime, victims collectively lose almost $1.24 trillion each year.

An astronomical figure, but, when we compare it to others quoted—experts anticipated the global cost of cybercrime was set to reach $10.5 trillion in 2025—it’s a drop in the ocean. Our figures account for victim loss only. They do not take into account the various other factors we mention below.

The top 10 countries with the biggest losses to cybercrime

Where figures were available for reported crimes (those with fully estimated crime figures and losses haven’t been included), the following countries showed the biggest estimated losses:

  1. United States: 6.7 million victims losing $138.9 billion
  2. Spain: 3.3 million victims losing $30.9 billion
  3. France: 2.3 million victims losing $22 billion
  4. Sweden: 2 million victims losing $18.5 billion
  5. Turkey: 1.7 million victims losing $16.1 billion
  6. Russia: 4.4 million victims losing $16.1 billion
  7. India: 18.8 million victims losing $15.7 billion
  8. China: 1.2 million victims losing $11.5 billion
  9. South Korea: 1.4 million victims losing $10.8 billion
  10. Germany: 840,000 victims losing $8 billion

How did we estimate the cost of cybercrime?

To try and estimate the cost of cybercrime for each country based on the reported figures available (those released by the police or government–not estimated by other entities or studies), it’s important we discuss the significant limitations of any cybercrime cost estimates.

First, the term “cybercrime” can entail a whole host of crimes. From an online data breach to a flurry of botnet attacks, the sheer scale of cybercrime is vast and, to some extent, unknown. While our study focuses less on automated, wide-scale attacks and more on targeted crimes that seek to exploit individuals, steal someone’s data, or illegally access computer systems or networks, there’s still a vast difference between each police or government report on cybercrime.

For example, in 2025, Uganda’s Annual Crime Report (PDF) noted that 412 cyber (computer) crimes had been reported, while India’s Ministry of Home Affairs (MHA) report noted 2.81 million cases in 2025. India’s report discusses investment scams, sextortion, digital arrest scams, and AI-driven fraud. No breakdown is available for Uganda.

Second, cybercrimes are heavily underreported both in terms of victims reporting the crimes and governments creating reports about cybercrime levels in their countries. For example, numerous government figures place the level of reporting at just 15 percent, including the FBI and the European Union Agency for Fundamental Rights.

Third, different cybercrimes have vastly different average losses, from hundreds to thousands of dollars. We only need to look at the IC3’s latest report to see this. On average, victims of cybercrime lost $20,699. But victims of phishing/spoofing scams lost $1,127, while victims of Business Email Compromise (BEC) scams lost over 100 times this amount ($123,005).

These three dramatically different figures can further vary depending on what the reporting entity counts as a loss. Lost time, replacement computers, police time, recovery costs, and a whole host of other factors could be mixed in.

However, if we focus on victim losses only (which all of the reports we’ve found focus on), we can create an “across-the-board” average for each country that encompasses a number of different cybercrimes. If we incorporate this with the other known figures across various different countries and reports, we can estimate a global average for the cost of cybercrimes. We use that average to create estimates for other countries and worldwide.

Here are the monetary figures we were able to find for 27 countries:

Based on the figures we do have (for both number of victims and losses), we can calculate an average loss per cybercrime case for the countries where monetary values are unavailable. Using the average losses across the countries listed above, we calculate an overall average loss of $9,468 per case.

Please note: no figures for the number of victims impacted were available for Cameroon or Kazakhstan, so these haven’t been used in the average per case.

For countries where the number of cybercrimes is unavailable, we apply the average cases per 100,000 people to get a figure. Based on the figures available in the 78 reports we found, an average of 240 out of 100,000 people reported being a victim of cybercrime in the last year.

Then, we apply our estimated loss to the number of reported crimes in each country where a monetary value is unavailable. Finally, based on the fact that only 15 percent of cybercrimes are reported, this allows us to estimate that the real number of victims across the top 100 countries by GDP is actually almost 76.3 million, which equates to 1,577 victims per 100,000 people.

This gives us a figure of $534.9 billion in victim losses across the countries we covered. Globally (based on a population of 8.3 billion people) we estimate 130.9 million victims and losses of $1.24 trillion.

Which countries have seen the biggest increases or decreases in cybercrimes year on year?

According to the annual reports from the countries we’ve covered, we can see which countries have seen the biggest increases or decreases in the number of cybercrimes reported. Only those with reporting figures available for two consecutive years (within the last three years) have been included to ensure the most recent data is used.

The country with the largest increase is Uruguay with a 200 percent year-on-year increase (from 2024 to 2025). Crimes increased from 14,264 to 42,768. The government does note that the increase is, in part, due to the improvement of threat intelligence information, which has provided more accurate figures.

Four other countries also saw increases of 100 percent or more. These were:

  • Jordan with an increase of 175 percent from 2,457 in 2023 to 6,758 in 2024
  • Pakistan with an increase of 106 percent from 73,000 in 2024 to 150,542 in 2025
  • Kenya with an increase of 104 percent from 173 in 2023 to 353 in 2024

In contrast, 22 countries saw decreases in their figures. The most significant decreases were:

  • Ukraine with a decrease of 46 percent from 50,181 in 2024 to 26,913 in 2025
  • Macau with a decrease of 39 percent from 2,056 in 2024 to 1,249 in 2025
  • China with a decrease of 33 percent from 272,864 in 2024 to 182,000 in 2025

Top 10 countries with the highest cybercrime reporting rates

The figures below are based on the number of cybercrimes reported per 100,000 people. It’s important to note here that this is not a country-by-country comparison of cybercrime rates. As we’ve seen, a country with a high number of reported cybercrimes isn’t necessarily suffering from a higher rate of cybercrimes than a country with a lower figure. Rather, the reporting system there may be more acute and the umbrella term “cybercrime” may include crimes that other countries don’t recognize or include in their statistics.

  1. Sweden – 2,736 cybercrime victims per 100,000 people
  2. Uruguay – 1,264 cybercrime victims per 100,000 people
  3. Spain – 1,022 cybercrime victims per 100,000 people
  4. United Kingdom – 1,010 cybercrime victims per 100,000 people
  5. Singapore – 711 cybercrime victims per 100,000 people
  6. Austria – 684 cybercrime victims per 100,000 people
  7. Switzerland – 641 cybercrime victims per 100,000 people
  8. Belgium – 622 cybercrime victims per 100,000 people
  9. Finland – 577 cybercrime victims per 100,000 people
  10. Luxembourg – 538 cybercrime victims per 100,000 people

Based on the figures reported by each country, Sweden, Uruguay, Spain, and the UK all have reporting figures of over 1,000 per 100,000 people.

At the other end of the scale are Bangladesh and Uganda where reporting figures are less than 1 per 100,000 people.

Conclusion

When we analyze the monetary values involved and see the minimal amounts that tend to be recovered from cybercrime cases, it’s not hard to see why many criminals are eyeing up the cyber market. With such huge gains and little to no risk, it’s a win-win for cybercriminals and a lose-lose for the rest of us.

The lack of transparency and reporting around these types of crimes makes it difficult to gauge the true extent of the problem. Many industry reports create astronomical figures that are difficult to comprehend, but until we’re able to see the real cost of these crimes on a country-by-country basis, cybercriminals will continue to have the upper hand. Lack of reporting will lead to a loss in victim confidence (and a reluctance to report the crime), gaps in the awareness of these types of crimes, and inadequate legislation and criminal procedures to hold cybercriminals to account.

A country-by-country breakdown of cybercrime figures

Below, you can see the latest reporting figures for each country we’ve covered. Stats include the year-to-year changes and the types of cybercrimes that are being reported.

Algeria

  • According to the Central Office for Combating Cybercrime, there were 3,064 cybercrime cases in 2025 compared to 2,870 in 2024–a 7 percent decrease

Angola

  • 1,430 cybercrimes registered throughout 2024, according to Angola’s Criminal Investigation Services (SIC)

Argentina

  • The annual report from the Specialized Cybercrime Unit (UFECI) noted 34,468 cases in 2024, up from 28,456 in 2023
  • CERT registered 438 cases in 2024 (not included in addition to the above figures to avoid duplication). This was a 16 percent increase on 2023’s figure (379)

Australia

  • Over 84,700 reports of cybercrime to ReportCyber in FY2024-25, a three percent decrease from FY2023-24
  • Identity fraud was the most reported crime, increasing by 8 percent
  • Publicly reported common vulnerabilities and exposures increased by 28 percent
  • Ransomware accounted for 11 percent of all incidents

Austria

  • 62,328 cybercrimes reported to the Federal Ministry of the Interior in 2024–a decrease of just over five percent from 2023 (65,864 cases)
  • Fraud accounted for the most cases (31,768)

Azerbaijan

  • 1,799 criminal acts committed using information technologies were recorded in 2025
  • 632 of these were cyber theft
  • Losses of 22 million Manat (USD $12.9 million) were reported in 2024. The Ministry of Internal Affairs estimated that this would double in 2025

Bangladesh

  • 188 reported incidents by the Cyber Threat Intelligence Unit of BGD e-GOV CIRT in 2024

Belarus

  • In 2024, the government reported that cybercrimes in Belarus were going to exceed the 20,000 mark
  • In 2025, this number decreased by six percent (18,800)
  • Belarusians lost 54 million rubles to these crimes (USD $19.18 million)

Belgium

  • 73,290 cases reported to national police in 2025–an increase of 9% from 2024 (67,319 cases)

Bolivia

  • 3,768 cases of cybercrime were registered nationwide in 2023

Brazil

  • The National Cybercrime Reporting Center, run by the non-governmental organization SaferNet, recorded 87,689 new complaints, which was an increase of over 28 percent from 2024 (68,286)
  • The majority of the complaints (72%) related to images of child abuse and sexual exploitation. The use of AI is said to have contributed to a rise in the number of reports in this category
  • Reports of misogyny, violence, or discrimination against women appear second in the ranking, with 8,728 cases

Cameroon

  • Cybercrime caused losses of CFA 1.027 billion (USD $1.8 million) in 2025

Canada

  • 85,669 incidents throughout 2025. A slight increase on 2024’s figure (85,502)
  • Nearly 50 percent of incidents related to fraud (36,839), just over 10 percent related to child porn (7,435), and nearly 8 percent related to indecent/harassing communications (5,583)

Chile

  • In 2024, the Chilean National Police registered 620 cybercrimes, while the Investigative Police noted 1,685 (total of 2,305)
  • 1,576 were noted in 2023 (189 by the CNP and 1,387 by the PDI)

China

  • The number of cybercrimes decreased significantly from 2025 to 2024, dropping from 272,864 to 182,000

Colombia

  • 62,299 cybercrime cases in 2025–a decrease of 20 percent from 2024 (77,666)
  • The most reported crimes were theft by computer and similar means, unauthorized access to a computer system, and violation of personal data

Costa Rica

  • Up to the end of August 2025, 10,598 cybercrimes were reported, which exceeds the total for 2024 (10,398)
  • During the first half of 2025, the OIJ said Costa Ricans’ losses exceeded ₡2.6 billion (approx. USD $4.8 million)

CĂ´te d’Ivoire

  • 12,100 cases of cybercrimes reported in 2024–an increase of nearly 49 percent from 8,132 in 2023
  • FCFA 6,960,903,038 (USD $12.5 million) was lost to these crimes in 2024, which was a decrease from 2023 (FCFA 9,206,106,267)

Croatia

  • 2,390 cases reported in 2024, a 17.6 percent increase on the previous year’s figure

Cuba

  • 2,600 cybercrimes were reported to the National Cybersecurity Center and Security Operations Center from January to September 2023

Czech Republic

  • 21,137 cases reported in 2025–a 14 percent increase from 2024 (18,495)
  • Cybercrime made up 12.4 percent of all registered crimes

Denmark

  • 28,960 IT-related financial crimes were reported in 2025–a 27 percent decrease from 2024’s figures (39,670)

Ecuador

  • 4,004 cybercrimes reported up to May 2025
  • 9,458 reported throughout all of 2024

Finland

  • 32,449 reports were made to the police in 2024 regarding cyber-assisted fraud crimes
  • Criminal proceeds from 5,450 of these crimes amounted to at least €84.2 million (USD $97.7 million)
  • Phishing was the most commonly reported crime (around 4,000 reports), followed by investment fraud (790 cases). Phishing scams saw losses of €37.8 million and investment fraud losses of €30.8 million

France

  • 348,000 digital offences registered in 2024, up from just over 278,700 in 2023 (25%)

Germany

  • 126,034 cybercrimes reported in 2025, down from 131,391 in 2024

Ghana

  • 2,008 cases registered in the first half of 2025, compared to 1,317 during the same period of 2024
  • GH¢14.94 million (USD $1.35 million) was lost in the first half of 2025

Guatemala

  • 583 cybercrimes reported from January to June 2024

Hong Kong

  • 19,080 cases of cybercrime in the first seven months of 2025. 0.9% lower than 2024
  • These crimes cost HK$ 3.6 billion (USD $460 million)

Hungary

  • 22,722 online fraud cases were registered in 2025
  • Damage from these cases decreased to HUF 9 billion (USD $28.8 million) from HUF 10 billion (USD $32 million)

India

  • 2.815 million cybersecurity incidents were reported in 2025, up from 2.268 million in 2024
  • Losses of â‚ą225 trillion (USD $2.36 billion) in 2025

Indonesia

  • 3,331 cases registered in 2024, down from 4,210 in 2023

Iran

  • During 2025, 1,799 cases of crimes committed using information technology were recorded in the country.

Iraq

  • Cyber-fraud complaints doubled in 2024 to 4,000, costing victims hundreds of millions of dinars

Ireland

  • The Garda National Cyber Crime Bureau received 624 new cases in 2024, with an additional 674 cases being closed in the same year. New cases increased from 380 in 2023 and closed cases from 655

Israel

  • 2025 was a record year for cyber threats. 26,500 reports were registered, up by 55% from 2024
  • Phishing was the most common attack, accounting for 52 percent of the reports
  • The National Cyber ​​Directorate estimates that cyber attacks alone cost the Israeli economy 12 billion NIS (USD $4.02 billion)

Italy

  • 26,873 reports of cybercrime were noted in 2024, down from 30,034 in 2023 – 10.5% decrease

Japan

    • 15,108 arrests made for cybercrimes in 2025, up from 13,164 in 2024
  • Note: as this figure is for arrests only, the number of cybercrimes carried out is likely much higher but this is the only overall figure available

Jordan

  • 6,758 cases registered in 2024, which is a 175% increase from 2023 (2,457)

Kazakhstan

  • From January to October 2025, there were 23,000 internet fraud cases registered. A total of 22,500 were registered in 2024
  • From January to October 2025, losses from cybercrime reached 16.4 billion tenge (USD $34.6 million)–unclear figures on the number of cases

Kenya

  • 353 cases of cyber fraud were registered in 2024, up from 173 in 2023
  • Organizations in Kenya lost KSh 29.9 billion (USD $230 million) to cybercrime in 2025 (noted in November)

Kuwait

  • 5,323 cases noted in 2025, up 31.1 percent from 2024

Latvia

  • 2,894 cases registered by CERT in 2025

Lithuania

  • 3,874 cyber incidents were reported in 2024, which is about 63% more than the previous year (2,378)
  • The use of malicious social engineering methods to extract sensitive information was the most common crime, accounting for 59% of all incidents

Luxembourg

  • Luxembourg’s public prosecutors dealt with 3,700 cases of cybercrime in 2023

Macau

  • In the first three quarters of 2025, 195 cases of telephone fraud, 436 cases of online fraud, and 306 cases of computer fraud were recorded, representing decreases of 45, 285, and 275 cases, respectively, when compared to the same period of 2024

Malaysia

  • 66,204 cases of cybercrime were reported to the Malaysian police in 2025. This is a 87% increase from 2024 (35,368)
  • Losses to these crimes reached RM2.97 billion in 2025 (USD $729.6 million)

Mexico

  • In 2025, the Cyber ​​Police received a total of 21,105 reports, with the main ones being illegal debt collection through threats (4,710) and cyberbullying (4,520)
  • 17,552 reports were received in 2024

Morocco

  • 13,643 cybercrime cases were reported in 2025–a 64 percent increase from 2024 (8,333)

The Netherlands

  • 5,717 cybercrimes reported in 2025–an 18 percent decrease from 2024 (7,010)
  • 2,559 cases had been reported from January to May of 2026, which is a slight increase from the same period of 2025 (2,629)

New Zealand

  • 5,064 incidents reported to the National Cyber Security Center in 2025–a 19% decrease from 2024 (6,249)
  • 2025 saw losses of NZD $29.1 million (USD $16.55 million)
  • 1,164 reports had been received in Q1 of 2026 with losses of NZD $5.6 million recorded (up by 76% from the previous quarter)

Oman

  • 140 cases of cybercrime in 2023, compared to 126 in 2022
  • Cases related to online content also increased to 2,686 in 2023 from 2,519 in 2022

Pakistan

  • The National Cyber Crime Investigation Agency (NCCIA) received 150,542 complaints of cybercrime throughout 2025. 81,996 were related to financial fraud
  • This figure is double 2024’s (73,000)
  • Over 60% of cybercrime complaints submitted to the NCCIA are linked to online fraud and loan app scams, with financial losses surpassing Rs. 3 billion annually (USD $10.8 million)

Paraguay

  • 2,610 cybersecurity incidents were recorded in 2025. 35% of these were phishing attacks
  • 2025’s figure is a 45% increase from 2024

Peru

  • At the start of November 2025, 35,820 reports of cybercrimes had been registered by the Public Prosecutor’s Office
  • Throughout all of 2024, 42,161 attacks had been registered

The Philippines

  • In 2023, 21,300 cyber-related complaints were received. This decreased by 32% in 2024 to 14,531
  • In 2024, 10,004 complaints of online scams were recorded by the Cybercrime Investigation and Coordinating Center (not included as a separate figure). These resulted in losses of P198 million (USD $3.2 million)

Poland

  • 1,946 cases of cybercrime were investigated by the police in 2025, up from 1,253 in 2024
  • PLN 537 million (USD $142.04 million) was lost in these cases in 2025

Portugal

  • 24,392 computer crimes were registered by the national police in 2024, down from 25,733 in 2023

Puerto Rico

  • 4,108 people were victims of cybercrime in Puerto Rico in 2025, which amounted to losses of USD $44,266,380–an 83 percent increase in victims (2,241 in 2024) but half the loss noted in 2024 (USD $91.4 million)

Romania

  • 7,340 cybercrimes registered in 2025–a 6.5 percent increase on 2024’s figures (6,893)

Russia

  • Total number of cybercrimes committed in 2025 dropped to 663,000 from 775,000 in 2024
  • The amount of material damage recorded in 2025 was RUB 189.5 billion (USD $2.413 billion)

Singapore

  • There were 41,974 cases of cybercrimes in 2025, a drop of nearly 14,000 from 2024 (55,810)
  • Overall, funds lost to scams in 2025 were SGD $1.1 billion in 2024 (USD $717 million)

Slovakia

  • The National Cyber ​​Security Center recorded 1,650 reported cyber incidents in 2025. In 2024, there were only 1,178

Slovenia

  • 6,196 cybersecurity incidents investigated in 2025–a 35 percent increase from 2024’s figure (4,587)
  • The total amount of reported online fraud crimes in 2025 amounted to EUR €40.4 million (USD $47.25 million), which is a 33% increase compared to 2024. There were 2,607 cases of online fraud in 2025

South Korea

  • 208,920 cases of cybercrime reported to the police in 2024–an increase of 25% on 2023’s figures (167,688)
  • Total damages amounted to KRW 2.4062 trillion (USD $1.627 billion)

Spain

  • 489,248 cybercrime cases registered in 2025, rising from 464,801 in 2024 (up 5%)

Sri Lanka

  • 12,650 cybersecurity complaints recorded in 2025

Sweden

  • 292,800 IT crimes reported in 2025, with 175,600 of these being online fraud

Switzerland

  • 57,761 digital crimes reported in 2025–a 2 percent decrease on 2024’s figure of 59,034

Tanzania

  • 1,464 cybercrimes reported to the police in 2025, compared to 1,281 in 2024

Thailand

  • In 2025, cybercrimes reached 380,378 and THB 25,195,936,027 (USD $788 million) in losses

Turkey

  • In 2025, the government logged 255,309 offences related to data processing systems–down from 263,701 in 2024 (down 3%)

Uganda

  • 412 cybercrimes reported in 2025–a 13% decrease on 2024’s figures (474)
  • Cybercrimes led to a loss of UGX 5,311,689,146 (USD $1.44 million)
  • UGX 231.6 million (USD $62,700) was recovered

Ukraine

  • Cybercrimes declined significantly frrom 50,181 in 2024 to 26,913 in 2025 (down 46%)
  • Losses from cybercrimes increased, however, jumping from UAH 539.9 million (USD $12.4 million) in 2024 to UAH 766.4 million (USD $17.6 million) in 2025

United Kingdom

  • England and Wales. 692,000 cases of fraud and computer misuse in England and Wales from April 2024 to March 2025. A significant decline from the same period the year before (1,022,000) – note: cybercrime in Northern Ireland is also referred to Action Fraud, included in these figures
  • 14,120 cybercrimes noted in Scotland in 2024/25, down from 16,890 in 2023/24
  • Action Fraud data showed reported incidents increased from 28,770 in 2021 to 39,504 in 2025. Reported losses from cyber crimes totalled over ÂŁ12.3 million (USD $16.6 million) in 2021 and fell to ÂŁ6 million (USD $8.12 million) in 2025

United States

  • 1,004,489 cybercrime complaints were received in 2025–a 17 percent increase from 2024’s figures (857,291)*
  • Losses to these cybercrimes amounted to over USD $20.8 billion

*Excludes Puerto Rico, as this is listed separately

Uruguay

  • 42,768 incidents reported in 2025–a 200 percent increase on 2024’s figures (14,264)

Uzbekistan

  • Cybercrimes reached 62,440 in 11 months of 2025, up from 58,800 throughout all of 2024
  • 1 trillion 890 billion soums lost in the first 11 months of 2025 (USD $155 million)

Data researchers: Justin Schamotta, Rebecca Moody

Sources

For a full list of sources, please request access here (stating your name and reason for request).