How Criminal Networks Are Changing Tacticsto Stay Ahead of Developing Defenses TA BL E O F CO N T E N TS 03Introduction 04Global RisksTransaction patterns, attack patterns, identity abuse and fraud 09Changing TacticsAs agentic commerce grows, cross-border fraud is rising and synthetic identities have become a global problem 19Across the Customer JourneyTransaction volume and attack risks across core touchpoints 24Regional TrendsIdentity abuse, transaction and attack patterns and networked fraud by region 39Industry TrendsTrends for financial services, ecommerce, communications, gaming & gambling and health insurance 46Conclusion 47AppendixGlossary, methodology and data process Global Attack Rates Are On the Rise Again traffic seen in the data. But traditional automated(bot) traffic was evolving, with evidence of moresophisticated simulation of human behavior. Theclassification of automated traffic is evolving, andorganizations need to prepare for better detectionand interpretation of a range of automated trafficthat will surely be directed to their digital servicesover the months and years ahead.As anticipated, risk associated with gaming and 2025 saw steady digital transaction growth inLexisNexis® Digital Identity Network® globally.But fraud attacks grew faster, especially in the ecommerce and gaming and gambling sectors,pushing the global attack rate up 8% after a periodof relative stability in 2024. While perhaps not yet thefraud storm that some have predicted would bedriven by an AI-fueled increase in scam sophisti-cation and automation, there are indeed signs ofshifting patterns, with a much noisier identity abuseindex than has been seen in recent years. Fraud iscontinuing to evolve around the world, regulationsare being updated and fraud detection capabilitiesare being enhanced.Attack growth was predominantly through browser IN ADDITION TO TRENDS AND ANALYSISFROM OUR INTELLIGENCE NETWORK,SEVERAL SPECIFIC TOPICS WILL BEEXPLORED FURTHER, INCLUDING: ▶The emergence of agentic commerce▶The power of a network for reducingcredit card fraud▶Cross-border fraudulent money transfer▶Collaborations and consortia in the UK gambling rose considerably in 2025 (attack rate up76% YOY), as a growing global digital customer baseand the operators themselves came under attack.The industry generally saw the most transactiongrowth (up 20% YOY), but attacks grew much faster(up 84% YOY.) Consumer accounts are under attackin the same way as any other accounts with potentialmonetary value, but the digital services themselvesalso provide fraudsters with a range of opportunitiesincluding bonus abuse and collusion.For the first time in several years, the EMEA attack channels, resulting in a significant shift in the balanceof attacks between browser and mobile app. Thevolume of mobile app attacks halved in 2025, withreductions across all regions except for EMEA, whilebrowser attacks increased dramatically. We haveseen attack risk via the mobile app steadily increasethe last few years, and the decline seen in 2025 mayreflect that organizations are focusing on firming uptheir fraud detection for mobile app attacks afterhistorically considering it a safe channel.Bot attacks were up 59% in 2025, with growth rate rose, driven by increases in large markets suchas the UK, France and Germany. Attack growth waslinked to increased account takeover attempts, asfraudsters looked to exploit weaknesses in traditional3rd party fraud prevention when defenses shiftedfocus to stopping authorized scams. The attack rateglobally at login almost doubled (up 89%), driven bygrowth specifically in the ecommerce and gamingand gambling industries. Bot attacks were up59% this year, and thegaming and gamblingattack rate rose 76%. especially targeting ecommerce and gaming andgambling. Agentic commerce was still very much inits infancy in 2025, with only small volumes of such Global Risks A N A LY S I S O F T H E J A N - D E C 2 0 2 5 D ATA Y E A R LexisNexis® Risk Solutions analyzed more than 116 billion transactionsfor this Cybercrime Report—a new record, and up 12% from last year.Double-digit growth continued in new account creations and payment transactions. Global Highlights BY TRANSACTIONS AUTOMATED BOT ATTACKS HUMAN-INITIATED ATTACKS All events analyzed in our Digital Identity Network® solution Events where the attacker is code Events where the attacker is human Automatedbot volume YOY Global transactionvolume YOY Human-initiatedattack rate YOY Financial servicesattack rate YOY Financial servicestransactions YOY Financial servicesbot volume YOY Ecommercetransactions YOY Ecommercebot volume YOY Ecommerceattack rate YOY Communications, mobile and mediabot volume YOY Communications, mobile and mediaattack rate YOY Communications, mobile and mediatransactions YOY Gaming and gamblingtransactions YOY Gaming and gamblingbot volume YOY Gaming and gamblingattack rate YOY Global Transaction Patterns, By the Numbers Ten