The Scams That Take the Most Money, and the Pause That Stops Them

In 2025, people filed 3 million fraud reports with the Federal Trade Commission and said they lost $15.9 billion. The year before it was 2.6 million reports and more than $12 billion. That's roughly a 25% jump in a single year, and it is the highest figure the FTC has ever recorded.

Hold that number loosely, in the direction of "too low." It counts only what people reported, and most fraud is never reported at all — reporting means telling a stranger at a federal agency that you were taken, and plenty of people would rather eat the loss than say it out loud.

What's useful in the FTC's data isn't the total. It's the shape. A few categories account for most of the money, and they share a structure that's recognizable once you've seen it drawn out.

Where the money actually goes

The category people report most often and the category that takes the most money are not the same category. That distinction matters, because it means the scam you hear about constantly is not the scam most likely to empty your accounts.

• Investment scams took the most money in 2025 — $7.9 billion, roughly half of all reported fraud losses. These are the fake trading platforms, the crypto "advisors," the WhatsApp groups full of people posting screenshots of gains. Our guide to investment scam red flags covers the mechanics in detail.
• Imposter scams were the most reported, as they have been every year since 2020: more than a million reports and over $3.5 billion lost. Nearly one in three fraud reports the FTC received last year was an imposter scam of some kind.
• Within imposter scams, business impersonators took nearly $1 billion, with banks the single most impersonated business. Government impersonators took about $920 million, up from $789 million the year before.
• Social media is where a huge share of this now starts. Nearly 30% of people who reported losing money to a scam in 2025 said it began on a social platform, with $2.1 billion in reported losses — eight times the 2020 figure. More money was reported lost to scams starting on Facebook alone than to text and email scams combined.

Of that $2.1 billion from social media, $1.1 billion was investment fraud — more than half. Shopping scams were reported more often (over 40% of social media scam reports involved ordering from an ad), but they cost less per person. Someone loses $80 on a jacket that never arrives. Someone else loses their retirement account to a trading platform that was a website and nothing else.

The five parts almost every one of these has

Scam categories look wildly different from the outside — a romance, a job, a security alert, a tax bill. Structurally they are close to identical, because they all have to solve the same problem: getting money out of a stranger who has no reason to give it.

1. Contact you didn't initiate. A call, a text, a pop-up, a friend request, a comment on your post. You were not looking for this.
2. A reason to feel something fast — fear, usually, or hope. Your account has been compromised. Your grandson is in jail. Your Social Security number turned up in a drug case. You've been selected.
3. An authority figure to make the story hold. A bank fraud officer, a Microsoft technician, a federal agent, a lawyer. Often a relay: the fake tech support person transfers you to the fake government investigator.
4. Pressure to keep it to yourself. Don't tell the teller why you're withdrawing. Don't discuss an active investigation. This is the step that turns a bad hour into a catastrophic one, because the best defense against every scam on this list is one skeptical person hearing the story out loud.
5. A payment method that works like cash. Gift card numbers. Wire transfers. Cryptocurrency, frequently through a Bitcoin ATM. Bank transfers. Cash handed to a courier. In the FTC's data on older adults with losses over $10,000, gold bars written in as the payment method show up often enough to be its own line.

If a request has all five, it does not matter how well the story hangs together. The story is a delivery mechanism. The five parts are the scam.

The payment method is the tell — and the arithmetic is brutal

Every payment rail has a different reversibility. Nobody explains this at the moment it matters, so here it is:

• Credit card: strong. Federal law caps your liability for unauthorized charges at $50, and issuers routinely waive it. Disputes of billing errors get a formal process with deadlines.
• Debit card: weaker, and it gets worse with delay. Report within two business days of learning about the loss and you're capped at $50. Miss that window and the cap becomes $500. Miss the 60-day statement window and you can be on the hook for everything that happened after it.
• Wire transfer, gift card, cryptocurrency: effectively cash. You can and should call the company immediately and ask them to reverse it. Sometimes, very occasionally, an unclaimed wire gets clawed back. Plan on nothing.
• Bank transfer you authorized yourself, including Zelle: this is the one people misunderstand. If you were tricked into sending it, you authorized the transfer. That is legally different from someone stealing your card number, and banks treat it differently.

The FTC's own guidance on paying a scammer opens with the sentence "your money might be gone already." That is the honest baseline. Report anyway — report to the payment company within hours, not days — but do it knowing that most scam losses are never recovered. Anyone who tells you otherwise is either selling something or is the second half of the scam.

The one thing that defeats most of them

Every scam above requires you to act while the pressure is still on. That's not decoration; it's structural. The story cannot survive twenty minutes of independent checking, so the script is built to prevent twenty minutes from happening.

So take the twenty minutes. The script is short:

I'm going to hang up now and call you back at the number on my statement. If you're really from the bank, that will reach you.

Then hang up, and dial the number printed on the back of your card or on a bill — never the number the caller gave you, never the number in the pop-up, never the number in the text. A real fraud department will have a record of the call. A scammer will have evaporated.

For a call claiming a family member is in trouble, same principle, different move: hang up and call that person on the number you already have. If you can't reach them, call someone else in the family. The FTC warns that voice cloning now makes "but it sounded exactly like him" worthless as evidence — a few seconds of audio from a public video is enough. Ask something a scammer couldn't know. The dog's name. Where you were at Thanksgiving.

Things not to do

A few reflexes that feel productive and are not:

• Don't press 1 to be removed from a robocall list. It confirms a human answered, which is the single most valuable thing you can tell an illegal caller.
• Don't call the number in a security pop-up. Real security warnings never include a phone number. That's the whole point of the pop-up.
• Don't hire a "recovery service" that contacts you after a loss. Victim lists get resold, and the second call is very often the same operation coming back for the remainder. No legitimate firm cold-calls scam victims promising to get their money back.
• Don't move money to "protect" it. There is no federal safe locker, no protected account, no wallet the government will hold your funds in. The FTC says flatly that it will never tell you to transfer money, withdraw cash, or buy gold.
• Don't buy an identity theft protection subscription in the aftermath. A credit freeze at all three bureaus is free, more effective, and takes twenty minutes — our review of identity protection services makes the full case.

Where to report, and what reporting actually does

Reporting will probably not get your money back. It's still worth doing, and it takes ten minutes.

1. Call the payment company first — card issuer, bank, wire service, gift card issuer, crypto exchange. Speed is the only lever you have here.
2. Report to the FTC at ReportFraud.ftc.gov. If your identity was used, use IdentityTheft.gov instead, which builds a recovery plan and generates the report creditors ask for.
3. Report to your state attorney general. States bring their own consumer protection cases and often move on local operations the federal agencies won't touch.
4. If it started as an unwanted call, add a report at DoNotCall.gov. The FTC releases reported numbers to carriers each business day for call-blocking tools.

It compounds, slowly. Reports are the raw material behind the FTC's Impersonation Rule cases — a dozen enforcement actions and more than $70 million returned to consumers — and behind the 40 fraud actions the agency brought in fiscal 2025. None of that is fast and none of it is a refund, but it runs on reports.

If you got taken: this is a professionally run industry with scripts, call centers, quality control, and years of iteration on what works. Being fooled by it is not a character flaw, and the shame is the part that keeps people from calling their bank on day one — which is the only day that ever matters. Make the call.