Identity Theft Statistics 2026 – Most Common Types and Victims

Identity theft continues to affect millions of Americans as criminals gain access to personal, financial, and digital information. About 22% of Americans have experienced identity theft at some point in their lives.

Digital attacks now account for a larger share of identity crime. Hacked phones, compromised computers, stolen credentials, account takeovers, synthetic identities, and AI-assisted impersonation can expose several accounts at once.

Multiple incidents are also becoming more common.

Stolen credentials or identifying information can lead to financial fraud, new-account applications, employment fraud, or unauthorized access across several institutions.

Key Identity Theft Statistics for 2026

Recent figures show a sharp increase in reported fraud and identity crime, along with a shift toward device compromise and simultaneous incidents.

Attack methods are also changing. Unauthorized access to computers and mobile devices rose 78% year over year, increasing its share of identity compromises to 27.2% compared with 15.3% previously.

Scams involving victims sharing personal information moved in the opposite direction, dropping to 36.1% of compromises compared with 43.1% a year earlier.

Using a vpn can help protect internet traffic on unsecured networks, reducing exposure when using public Wi-Fi.

Most Common Types of Identity Theft

Identity theft covers several forms of misuse, but financial fraud continues to account for the largest share. New-account fraud and account takeover also represent major parts of attempted identity misuse.

Financial Identity Theft

Financial identity theft accounts for more than 40% of cases, making it the most common broad category.

Credit card fraud generated more than 450,000 reports in 2024, including over 400,000 cases involving newly opened credit card accounts.

Losses vary sharply by payment method. Bank transfer and payment fraud caused more than $2 billion in consumer losses, compared with about $275 million tied to credit card fraud.

New Account Fraud

New account fraud occurs when stolen personal information is used to apply for a financial product or service in another person’s name.

Detection may not occur until an unfamiliar account appears on a credit report, bill, collection notice, or account alert.

Account Takeover

Account takeover occurs when a criminal gains control of an account that already belongs to another person.

About 37.9% of attempted identity misuse cases involved account takeovers.

Targets can include bank accounts, credit cards, email accounts, mobile accounts, social media profiles, and payment services. Stolen passwords, phishing, malware, and compromised devices can all provide access.

SIM swapping creates an additional risk because attackers can take control of a victim’s phone number and intercept SMS authentication codes.

Employment and Child Identity Theft

Employment-related identity misuse has increased and now represents a significant risk for both adults and minors.

Employment identity theft generated 37,556 reports in 2024, a 20% year-over-year increase.

Fraudulent employment also accounted for 40% of identity misuse cases involving children and dependents.

Children face a particular detection problem because credit files and financial records may go unchecked for years. Identification numbers belonging to minors can be used to open accounts, obtain credit, or create fraudulent employment records.

Synthetic and Digital Identity Theft

Synthetic identity fraud combines legitimate identifying information with fabricated details. A real Social Security number may be paired with a fake name, address, or date of birth.

Estimated losses are substantial. Synthetic identity fraud costs U.S. banks roughly $6 billion per year.

One major case reportedly involved more than 7,000 synthetic identities connected to about $200 million in pandemic relief fraud.

How Identity Theft Happens in 2026

Identity criminals increasingly use technical access, phishing, account-warning scams, employment scams, breached data, and publicly available information.

Hacked devices have become especially important. Unauthorized computer and mobile-device access increased 78% and accounted for 27.2% of reported compromises.

Other common attack channels include several high-volume methods:

• Phishing emails were linked to 371,651 fraud reports.
• Account-problem scams were the highest-volume scam type, with 74% of victims sharing high-value personally identifiable information.
• Employment scams ranked as the second-most-common scam category and collected particularly large amounts of personal information.
• About 24% of identity-theft victims had also experienced a data breach.

Large breaches can create long-term risk because stolen data may continue circulating for years. A 2017 Equifax breach exposed personal information belonging to roughly 147 million people, including Social Security and driver’s license numbers.

Who Is Most Likely to Be a Victim?

Risk patterns differ by age. Younger and middle-aged adults account for a larger share of reports, while older victims can face heavier financial losses.

Identity Theft by Generation

Millennials account for the largest portion of reported victims.

Millennials therefore account for more than four in ten reports in the demographic data.

Older Adults

Older adults account for a smaller share of reported cases but can lose substantially more money when fraud occurs.

Victims over age 70 experience a median loss exceeding $1,000.

Bank-account fraud also represents a larger share of identity theft among Baby Boomers than among other generations, increasing the risk of major losses involving savings.

Children

Children can be targeted long before they begin using credit products themselves. Fraud may remain unnoticed until a credit check, employment verification, loan application, or other financial event exposes it.

Employment misuse is particularly prominent. About 40% of identity misuse cases involving children and dependents were connected to fraudulent employment.

Identification numbers belonging to children have also been used to open accounts or obtain credit, including cases involving relatives or acquaintances.

How Much Do Identity Theft Victims Lose?

Financial damage varies widely, with many victims losing hundreds of dollars and a smaller group facing losses above $10,000.

Median fraud loss reached approximately $497 per victim in 2024.

Recovery can also take a long time. Cases handled through the IRS Identity Theft Victim Assistance program have an average recovery period of about 22 months.

Financial damage is closely tied to lower resolution rates. Among victims with no financial loss, 53% reported resolving their cases. Resolution fell to 9% among victims with financial impacts.

Among victims experiencing three or more financial impacts, 0% reported resolution.

Biggest Identity Theft Trends in 2026

Several changes define identity crime in 2026, with device compromise, multiple simultaneous incidents, synthetic identities, and AI-assisted impersonation becoming more important.

Unauthorized device access increased by 78%, making hacked computers and phones one of the fastest-growing compromise methods.

Multi-layered identity crime is also increasing. About 25.6% of victims now experience two or more incidents at the same time.

AI adds another tool for impersonation. Criminals can generate voices, faces, and video that imitate executives, coworkers, relatives, or financial representatives.

Fraud detection has improved in some areas. Attempted misuse caught by financial institutions increased by 26.8%.

Summary

Financial identity theft accounts for more than 40% of cases, making it the largest broad category of identity crime.

Millennials account for 42% of reported victims, while adults over age 70 experience median losses above $1,000.

Device compromise and multi-layered fraud are among the clearest 2026 changes. Unauthorized computer and mobile-device access increased 78%, while 25.6% of victims experienced two or more identity-crime incidents simultaneously.

Modern identity theft can affect several accounts or institutions after a single credential, device, or piece of identifying information is compromised.