← All countries
United States
High scam pressureInvestment/pig-butchering scams, tech-support fraud, and ransomware lead FBI IC3 loss reports.
Last reviewed 2026-09-01 · sources below
What the landscape looks like
- FBI IC3 data consistently ranks investment fraud (including crypto “pig butchering”) as the highest-loss category, ahead of tech-support and romance scams.
- Ransomware crews increasingly use valid credentials from infostealer logs rather than exploits — password reuse is the entry point.
- Smishing now impersonates toll agencies, delivery carriers, and banks with near-identical sender IDs.
Highest-loss category (IC3)
Investment fraud
Common entry point
Stolen credentials, not exploits
Official adviser
CISA
Dominant scams & red flags
Pig-butchering investment scam
A “wrong number” contact grooms the victim into a fake trading app showing rising profits, then blocks withdrawals (“taxes/fees”).
- Unsolicited trading mentor
- App outside official stores
- Withdrawal requires extra payment
Tech-support refund scam
Pop-up or call claims a virus/refund; victim grants remote access or buys gift cards to “secure” funds.
- Remote-access request
- Gift-card or crypto payment
- Threats of account closure
Protect yourself — checklist
- Never install remote-access software for an unsolicited “support” caller.
- Verify investment platforms against regulator listings before depositing.
- Use authenticator-app 2FA and unique passwords; check breach exposure quarterly.
Run the free checks before your next transaction
Official advisories & reporting
- FBI Internet Crime Complaint Center (IC3) (FBI)
- CISA alerts & known exploited vulnerabilities (CISA)
- Report to FBI Internet Crime Complaint Center (IC3)
Defensive use only — please read
- These checks use public records and threat-intelligence feeds. A “clean” result means “not seen in the sources checked”, never “guaranteed safe”.
- Check only addresses, numbers, and handles you own or have a genuine reason to verify. Looking up another person without a lawful basis may violate India's DPDP Act 2023 and IT Act 2000.
- We never display passwords, dumps, or stolen data — only aggregate safety signals and what to do next.
- Victim of fraud or harassment? Report at cybercrime.gov.in (India) and contact local police in an emergency — this site is not emergency response.