FBI IC3: Internet Crime Losses Top $20B in 2025

Record $20.877 billion in reported losses from cyber-enabled fraud in 2025 (1,008,597 complaints), a 26% increase year-over-year. Investment scams drove ~$8.65B of losses, business email compromise ~$3.05B and tech-support scams ~$2.13B, while crypto was tied to >$11.3B in losses and people 60+ filed 201,266 complaints linked to ~$7.7B. FBI field offices and consumer advocates are urging rapid reporting and preservation of records, increasing regulatory and reputational pressure on crypto and fintech firms.

Analysis

The immediate market reaction will be bifurcated: vendors that sell custody, identity verification and enterprise detection tooling should see persistent budget tailwinds while front‑end consumer fintechs and permissionless crypto rails face de‑risking and higher operating costs. Expect large custodians and regulated exchanges to capture premium spreads on ‘safe’ on‑ramps as firms and retail channel partners prefer counterparty recovery prospects over cheaper, self‑custody UX.

Operationally, this drives a two‑layer demand shock: (1) near term (weeks–months) for spike buying of incident response, MFA, and transaction monitoring, and (2) medium term (6–24 months) for structural investments in KYC/AML, insurance retentions and engineering changes to prevent social‑engineering flows. Vendors with sticky SaaS contracts and telemetry‑driven upsell paths will convert incident spikes into recurring revenue; professional services heavy vendors will see lumpier effects.

Second‑order winners include custody arms of traditional custodians (banks) and cloud security integrators who can offer bundled recovery and forensic services; second‑order losers are unregulated wallet providers, decentralized protocols without dispute resolution and small fintechs with high customer acquisition costs that will face both higher chargebacks and compliance headwinds. M&A activity should accelerate among mid‑cap security and ID firms because acquirers can shortcut product roadmaps and buy signal coverage cheaply relative to organic build.

Catalysts to monitor: enforcement/regulatory guidance timelines (6–18 months) and a spate of high‑profile recovery successes or large insurer payouts which could calm flows; conversely, a concentrated series of recoveries by attackers or another high‑value chain exploit would materially re‑rate risk premia across crypto‑adjacent equities within days. Trade windows: headline volatility for 0–3 months, policy and contract renewals for 3–18 months, structural market share shifts over 2+ years.

Key Decisions for Investors

• Long enterprise security (CrowdStrike, CRWD) — buy 6–12 month call spreads or 1–2% net equity exposure. Rationale: security budgets reaccelerate and telemetry monetization improves; target 20–35% upside if renewal momentum holds, capped downside ~12–18% if macro forces broad IT spend cuts.
• Long regulated crypto custody / exchange (Coinbase, COIN) on pullbacks >15% — 6–12 month horizon. Rationale: custody and institutional services should reprice higher; size 1–2% portfolio with stop at 12% below entry. Risk: accelerated regulatory constraints could compress volume and earnings in the next 6–12 months.
• Pair trade: long CRWD / short Robinhood (HOOD) equal notional for 3–6 months. Rationale: security vendor benefits vs retail fintech reputational/compliance hit. Expected asymmetry: 2x upside capture on the long leg vs 1x downside on the short if headlines persist; keep pair delta neutral and cap allocation to 1% portfolio.
• Hedge tail risk in fintechs with crypto exposure (Block, SQ) — buy 3–6 month puts (small size, 0.5–1% portfolio) rather than outright short equities. Rationale: protects against rapid volume and account base declines from renewed trust erosion; cost is premium decay if headlines fade.
• Long identity verification / custody infrastructure acquirables (OKTA or mid‑cap ID vendors) — accumulate on 10–20% dips with 12–24 month horizon. Rationale: expect M&A and persistent contract expansion; upside driven by recurring ARR multiple expansion, downside capped by integration risk and competitive pricing pressure.