Identity theft is a growing problem that affects millions worldwide. A recent NordVPN survey revealed that 65% of people worry about identity theft more than any other threat [1]. The fear makes sense — losing control of your personal and financial information can turn your life upside down, causing stress, financial loss, and emotional pain. Identity theft statistics paint a clear picture of just how serious this issue is. In 2024, the FTC handled over 1.1 million identity theft cases, a sharp rise from previous years [2]. This rise isn’t a coincidence. Fraudsters are constantly developing new ways to steal information. The good news is that knowing the risks and some of the key identity theft statistics can empower you to protect yourself.

Violeta Lyskoit
October 29, 2025
Black Friday’s best price on identity theft protection
Get up to 70% off!
Get the Deal
30-day money-back guarantee
View promotion details.
Identity theft is the act of stealing someone’s personal information and illegally assuming their identity. Criminals behind this fraud target both individuals and businesses, which often store large amounts of sensitive employee or customer data. How criminals use the stolen information determines the type of identity theft.
Identity theft happens all over the world, but some regions experience higher rates of identity fraud than others. Factors like economic conditions, local regulations, and the types of documents fraudsters target all play a role. Research from Entrust Corporation helps explain these differences and shows where identity theft is more common [3].
The Asia-Pacific (APAC) region has an average fraud rate of 6.8%, the highest in the world. Fraud rates represent the percentage of fraudulent transactions or incidents compared to the total number of transactions handled by businesses or systems in the region. For example, a fraud rate of 6.8% means that approximately 6.8 out of every 100 transactions or activities are flagged as fraudulent.
Many identity thieves in this region target documents like the Indian tax ID and Pakistani national ID card because they are easy to forge. Some of these documents are old paper versions or have widely available online templates, which makes them ideal tools for fraud.
The Americas are close behind, with an average identity fraud rate of 6.2%. This region saw the biggest increase in fraud cases in 2024. As more people use digital services, fraudsters take advantage of weak security measures, making the Americas a growing target for identity theft.
In contrast, Europe, the Middle East, and Africa (EMEA) have lower identity fraud rates. Europe, in particular, benefits from strict rules on identity verification, such as Know Your Customer (KYC) regulations, and strong protections for cryptocurrencies. Government-issued documents in this region are also more secure compared to less technologically advanced documents used in other parts of the world.
In 2001, reported cases of identity theft totaled 86,250, but by 2024, that figure soared to over 1.1 million, representing an increase of more than 1,200%. This explosive growth shows how fast identity theft has evolved as the world turned more digital.
Year | # of cases | Year | # of cases | Year | # of cases |
2001 | 86,250 | 2009 | 278,360 | 2017 | 370,915 |
2002 | 161,977 | 2010 | 251,074 | 2018 | 444,338 |
2003 | 215,240 | 2011 | 279,191 | 2019 | 649,390 |
2004 | 246,909 | 2012 | 369,958 | 2020 | 1,388,532 |
2005 | 255,687 | 2013 | 290,098 | 2021 | 1,434,477 |
2006 | 246,214 | 2014 | 332,545 | 2022 | 1,107,004 |
2007 | 259,314 | 2015 | 490,085 | 2023 | 1,036,855 |
2008 | 314,587 | 2016 | 398,356 | 2024 | 1,135,291 |
While we’ve seen some fluctuations in the numbers in recent years, identity theft continues to be a problem.
Customer Sentinel Network revealed several major types of identity theft in 2024, with increases and decreases in cases measured against the previous year.
The most common types of identity theft in 2024. Credit card fraud is in the lead at 40% of all cases, followed by other types of ID fraud at 33%, loan and lease fraud at 16%, bank account fraud at 10%, employment/tax fraud at 8%, and government benefits fraud at 6%.
In 2024, young adults aged 20-39 submitted the largest number of identity theft cases. Those aged 30-39 reported the most incidents, with 291,807 cases, followed by the 20-29 age group, which reported 187,195 cases. Fraudsters tend to target young adults more often because they spend a lot of time on online platforms and are more likely to rely on digital services.
Although older adults report fewer cases overall, this demographic is still at significant risk. For example, individuals aged 50-59 reported 135,758 cases in 2024, while those aged 60 and up reported a combined total of 129,880 cases.
While the total number of incidents is lower compared to younger groups, older victims of identity theft often experience greater financial losses per incident [5]. Across all these age groups, credit card fraud was the most common type of identity theft.
However, young people under 19 aren’t immune either. In 2024, they reported 21,420 cases of identity theft — most of these involved tax or employment fraud.
Identity theft victims by age group in 2024.
Identity theft happens for many reasons. The most common causes include data breaches, phishing, weak password practices, online fraud, and insider threats. These factors can expose personal data, which criminals can then exploit to commit various forms of identity theft.
Survey results from the general public and individuals who sought help from the Identity Theft Resource Center (ITRC) provide a clearer picture of how these factors contribute to identity theft [4].
Data breaches are the leading cause of identity theft. In 2024, 81% of participants surveyed from the general population and 79% of victims who sought help from the ITRC said they received at least one data breach notification. Among them, 43% reported multiple breach notifications (2-5), a sharp rise from 29% in 2023.
Many victims experience repeated targeting — 49% of individuals from the general population who experienced identity theft in 2024 were repeat victims. Despite this alarming trend, some people fall victim to "breach fatigue," a sense of helplessness and exhaustion from the constant stream of data breach notifications. As a result, they may ignore these alerts, putting themselves at further risk.
Phishing scams remain one of the easiest and most harmful ways criminals steal identities. Fraudsters use different types of phishing, including fake emails, texts, or calls, to impersonate trusted companies or organizations and convince victims to share personal data.
Among the participants surveyed by the ITRC, 10% of the general population and 12% of victims who sought help from the organization identified themselves as victims of a phishing scam.
The rise of mobile platforms, social networks, and e-commerce has made internet fraud one of the fastest-growing causes of identity theft. In 2024, the FTC received 22,258 cases of email and social media fraud, a 14% increase from the previous year.
Among the participants surveyed by the ITRC, 29% of the general population and 7% of victims who sought help from the organization indicated unauthorized access to their social media accounts as the specific form of identity theft they experienced.
Only 41% of respondents from the general population survey said they avoided reusing passwords across accounts, leaving the majority of respondents at risk for credential-stuffing attacks, where stolen passwords are tested across multiple platforms.
Even tools like password managers, which help secure accounts, remain underused — only 43% of participants from the general public and 27% of individuals who sought help from the ITRC reported using one.
Adding to this risk, 17% of survey respondents from the general public and 10% of people who asked the ITRC for help admitted to clicking on malicious links.
Hackers, dishonest employees, and third-party system weaknesses often exploit small businesses, making them easy targets for fraud. In 2024, 51% of business breaches were linked to malicious insiders, such as employees or contractors misusing their access to sensitive data.
External threat actors, such as hackers, caused another 50% of breaches. Additionally, 38% of breaches were caused by compromised third-party vendors, which exposed customer information.
The most common causes of identity theft in 2024. These include data breaches, phishing, online fraud, weak password practices, hackers, insider threats, and third-party vendor vulnerabilities.
The consequences of identity theft extend far beyond financial loss, often causing emotional distress, behavioral changes, and lengthy recovery processes for victims. Survey results from the ITRC reveal clear patterns of how identity theft impacts and disrupts victims' lives.
Identity theft takes an emotional toll on victims. In 2024, 95% of people who sought help from the ITRC and 87% of individuals surveyed from the general public (who may or may not have been victims of an identity crime and who had not contacted the ITRC for help) reported experiencing emotional consequences, including anxiety, frustration, and loss of trust in others.
Among victims who sought help with recovery from identity theft, 60% reported struggling to trust others. Among the general population, 21% reported experiencing similar feelings.
The percentage of identity theft victims seeking recovery help who reported thinking about suicide decreased from 16% in 2023 to 12% in 2024 — a significant improvement following years of increasing rates since 2019. However, these numbers are still higher than the historical average of 2-4% in 1999-2020.
Important: Identity theft can take a deep emotional toll, but you don’t have to face the burden alone. If you or someone you care about feels overwhelmed or struggles with thoughts of suicide or self-harm, please know that help is always within reach.
Contact the 988 Suicide & Crisis Lifeline by calling or texting 988. Alternatively, you can reach out to the Crisis Text Line by texting “home,” “start,” or “hola” to 741741 to connect with a trained volunteer crisis counselor. These resources are here to support you through this difficult time.
Identity theft doesn’t only affect individuals — it often puts strain on their relationships with other people. The financial and emotional burden of resolving fraud can lead to stress, frustration, and tension in relationships with family members, friends, and coworkers.
Victims may feel isolated or unsupported, which can add to their emotional struggle. During a prolonged recovery process, this stress can affect daily interactions with others, which can further lead to increased feelings of vulnerability and frustration.
Among those who sought help from the Identity Theft Resource Center (ITRC), 29% reported that identity theft strained their relationships with family. Similarly, 33% of the general public said they argued more with family. Identity theft also impacted friendships, with 31% of general consumers and 17% of those who got in touch with the ITRC for help saying they got into more arguments with friends.
Trust was another major issue — 18% of general consumers and 26% of those who sought help from the ITRC said they struggled to trust their family, while 16% and 30%, respectively, felt they could no longer trust their friends.
Identity theft often prompts victims to reevaluate and improve their personal security practices, especially those who seek expert help. In 2024, victims who contacted the ITRC took steps to strengthen their digital security. More than half, 58%, of them started using multi-factor authentication (MFA) to secure their accounts.
Victims also adjusted their online behaviors. Sixty percent of ITRC-supported individuals actively avoided clicking on suspicious links in emails or texts, compared to 52% of the general population who said they did the same.
Their social media habits also changed, with 57% of ITRC-supported victims reducing their online activity to protect their privacy. In comparison, 47% of the general public reported doing the same.
Despite these security improvements, many victims still hesitated to invest in tools like identity and credit monitoring. Only 22% of victims who sought expert help used these services, and only 41% of the general population adopted them.
This hesitancy may stem from various reasons, such as the cost of paid services, lack of understanding of how they work, or limited access to resources. These numbers highlight the importance of raising awareness and providing accessible solutions to help people protect their personal information.
Identity theft often leaves victims dealing with long-term financial stress and practical hurdles. Among those who sought help, 36% reported being contacted by debt collectors for accounts fraudulently opened in their name. Nearly 48% of these individuals still had unresolved identity theft cases at the time of the survey, with recovery often taking months or longer.
Victims frequently faced challenges such as catching up on bills, resolving fraudulent accounts, and proving their identity. For instance, 30% of those who sought help reported difficulties verifying their identity after an incident.
In the ongoing fight against identity theft and fraud, small and medium-sized businesses have greatly increased their investments in prevention and security measures.
In 2024, nearly 88% of surveyed small businesses provided fraud prevention training to their staff, while 67% strengthened security measures, such as introducing better access controls. Additionally, 65% adopted new security tools to address vulnerabilities and reduce the risks associated with identity theft.
Identity theft can harm the reputations of both individuals and businesses. For individuals, it can create mistrust with employers, landlords, or financial institutions, especially if the stolen information is misused for actions like submitting fraudulent applications or accumulating unpaid debts.
Among people who got help from the ITRC, 9% said their relationship with their boss became tense. In comparison, 31% of the general public said they experienced similar problems with their employers.
The impact can be even more severe for businesses. A single data breach can erode years of trust built with customers, leading to lost loyalty, challenges in acquiring new clients, and reputational harm in the marketplace.
Survey data shows the impact of cyber incidents that result in identity theft: 48% of businesses lost customer trust, 46% saw a decrease in revenue, and 42% experienced employees leaving their jobs.
Reporting identity theft is a critical step in recovering from the crime, and thankfully, most victims who have had their identity stolen take this important step. Nearly 9 in 10 (88%) of general consumers reported their cases, often starting with key organizations.
Victims who sought help from the ITRC often reported their cases to more than just one institution.
However, not everyone takes action. Among general consumers, 12% didn’t reach out to any organization for help after realizing their personal information had been stolen or misused. Among those who didn’t seek help, 23% said they didn’t know who to contact, and 8% said they didn’t trust anyone to help.
This gap in reporting shows a lack of awareness and trust in available resources. Many victims feel overwhelmed, unsure of where to get help, or doubtful that support organizations can make a difference.
Identity theft recovery can be a long and stressful process, and for some, the road to resolution seems almost never ending. Data from the ITRC shows just how varied recovery timelines can be.
For most individuals surveyed from the general population, the recovery process was relatively quick. Nearly half (48%) resolved their case within one week, while 21% needed between one week and one month to address the issue. However, not everyone had the same experience — 14% of these victims said their case remained unresolved at the time of the survey.
For those who sought help from the ITRC, the timeline was much longer. Only 12% of victims resolved their case within a week, and another 12% recovered within one to three months. Some cases required even more time, with 10% saying it took six months to a year to resolve all issues. Nearly 48% of these victims said their case was still ongoing.
Criminals are always finding new ways to commit identity theft by taking advantage of technology and security gaps. Staying aware of these trends can help you recognize the risks and prepare for them if the worst happens.
Below are the key statistics and facts about identity theft featured in this article for easy reference:
Identity theft is on the rise. Criminals are continually adapting and exploiting technology, data breaches, and weak points in security systems, which makes both individuals and businesses increasingly vulnerable to fraud.
Keeping track of every account, credit report, and transaction can be overwhelming. An identity theft protection service like NordProtect does the heavy lifting by monitoring your personal information and alerting you to suspicious activity. Don’t wait until you become another case study — take control of your safety today.
Holiday scams
are up.
Prices are
down.
Save 70% on identity theft
protection today
Get the Deal
30-day money-back guarantee
View promotion details.
[1] Šlekytė, I. "NordVPN research reveals: One in three people fall victim to online scams," NordVPN, 2025. [Online]. Available: https://www.nordvpn.com/blog/scam-experience-research/
[2] Federal Trade Commission, "Consumer Sentinel Network: Data Book 2024," FTC, 2024. [Online]. Available: https://www.ftc.gov/system/files/ftc_gov/pdf/csn-annual-data-book-2024.pdf
[3] Entrust Corporation, "2025 Identity Fraud Report," Entrust, 2025. [Online]. Available: https://www.entrust.com/sites/default/files/documentation/reports/2025-identity-fraud-report.pdf
[4] Identity Theft Resource Center, “The 2024 Consumer Impact — Business Impact Report,” ITRC, 2024. [Online]. Available: https://www.idtheftcenter.org/wp-content/uploads/2024/10/ITRC2024ConsumerandBusinessImpactReport.pdf
[5] Federal Trade Commission, "Percentage Reporting a Fraud Loss and Median Loss by Age," Tableau Public. [Online]. Available: https://public.tableau.com/app/profile/federal.trade.commission/viz/FraudReports/AgeFraudLosses
[6] TransUnion, "State of Omnichannel Fraud in H1 2024," Chicago, IL, USA, 2024. [Online]. Available: https://www.transunion.com/content/dam/transunion/us/business/collateral/report/GFS-24-2917612-TruVa-H22024UpdateStateofOmnichannelFraud-RPR-US-EN_US.pdf
[7] Lyskoit, V. “Inside the marketplace for stolen travel documents: A NordVPN and Saily project,” NordVPN, 2025. [Online]. Available: https://nordvpn.com/blog/stolen-travel-documents-research/
Violeta is a copywriter who turns cybersecurity from confusing to clear. She helps people stay a step ahead of identity thieves with simple, practical advice.
Black Friday’s best price on identity theft protection
Get up to 70% off!
Get the Deal
30-day money-back guarantee
View promotion details.
The credit scores provided are based on the VantageScore 3.0® credit score by TransUnion® model. Lenders use a variety of credit scores and may utilize a different scoring model from VantageScore 3.0® credit score to assess your creditworthiness.
You have numerous rights under the FCRA, including the right to dispute inaccurate information in your credit report(s). Consumer reporting agencies are required to investigate and respond to your dispute but are not obligated to change or remove accurate information that is reported in compliance with applicable law. While this plan can provide you assistance in filing a dispute, the FCRA allows you to file a dispute for free with a consumer reporting agency without the assistance of a third party.
No single product can fully prevent identity theft or monitor every single transaction.
Some features may require authentication and a valid Social Security Number to activate. To access credit reports, scores, and/or credit monitoring services (“Credit Monitoring Services”), you must successfully pass your identity authentication with TransUnion®, and your VantageScore 3.0® credit score file must contain sufficient credit history information. If either of these requirements is not met, you will not be able to access our Credit Monitoring Services. It may take a few days for credit monitoring to start after a successful enrollment.
NordProtect's dark web monitoring service scans various sources where users' compromised personal information is suspected of being published or leaked, with new sources added frequently. However, there is no guarantee that NordProtect will locate and monitor every possible site or directory where consumers' compromised personal information is leaked or published. Accordingly, we may not be able to notify you of all your personal information that may have been compromised.
Identity and cyber protection benefits are available to customers residing in the U.S., including U.S. territories and the District of Columbia, with the exception of residents of New York and Washington. Benefits under the Master Policy are issued and covered by HSB Specialty Insurance Company. You can find further details and exclusions in the summary of benefits.
Our identity theft restoration service is part of a comprehensive identity theft recovery package that offers a reimbursement of up to $1 million for identity recovery expenses. To access the support of an identity restoration case manager, you must file a claim with HSB, which NordProtect has partnered with to provide the coverage. HSB is a global specialty insurance company and one of the largest cyber insurance writers in the U.S.