Blogs

50 Credit Card Fraud Statistics for 2026

author
SecureTrust by VikingCloud Team
Published
November 11, 2026

50 Credit Card Fraud Statistics for 2026

Credit card fraud continues to cost small businesses thousands of dollars per case in the U.S., and threats are growing in sophistication and volume.

To illustrate the current state of the landscape, we’ve brought together 50 key credit card fraud statistics from trusted sources including INTERPOL, Mastercard, Visa, Nilson Report, Experian, and the Bank Policy Institute (BPI).

Key takeaways:

  • Credit card fraud is continuing to cost businesses tens of billions of dollars worldwide every year.
  • Most credit card users in the U.S. have experienced fraud, with just over half doing so multiple times.
  • Card-Not-Present (CNP) and phishing attacks remain the biggest card fraud threats, exacerbated by growing AI usage and a broadening digital attack surface.
  • Consumers are warier than ever about the data they share and purchases they make online, but many are unaware of the protections available to them.

How Common Is Credit Card Fraud?

While statistics show global fraud losses are falling year-over-year, businesses still lose billions of dollars annually. In the U.S., credit card fraud remains the most common type of identity theft. What’s more, it impacts most credit card users nationwide.

Global and U.S. Fraud Volume

  • It’s estimated that global fraud losses reached $442 billion in 2025. (INTERPOL)
  • Fraud losses in the U.S. amounted to more than $15.9 billion in 2025. (CNBC)
  • The FTC notes that the number of fraud complaints reported in 2025 reached more than three million. (FTC)

Card Fraud as a Share of Overall Payment Fraud

  • Global payment card fraud losses reached $33.41 billion in 2024, based on a volume of $51.92 trillion. (Nilson Report)
  • This figure fell 1.2% from credit card fraud losses the year before. (Nilson Report)
  • Credit card fraud is the most common type of identity theft in the U.S.. The FTC received almost 598,000 reports of credit card fraud in 2025.  (FTC, via Experian)
  • An estimated 61 million credit card holders in the U.S. have experienced some kind of fraud. (Security.org)
  • In the same survey, 51% of holders reported having experienced fraud multiple times. (Security.org)

How Fraudsters Target Merchants and Cardholders

The most common credit card fraud methods include CNP fraud (where stolen details are used and a physical card is not required) and phishing (where scammers pretend to be trustworthy entities to access data).

To help combat common vectors such as CNP attacks, many merchants rely on  Address Verification Service (AVS) checks, though an AVS mismatch isn’t a reliable fraud detector on its own.

Traditional network hacking, account takeover, and skimming and point-of-sale (POS) attacks remain popular with cybercriminals.

Let’s dive a little deeper into the most common strategies and their effects.

Online and Card-Not-Present Fraud

  • It’s estimated that CNP fraud accounts for almost three-quarters of card fraud losses in the US. (Finextra)
  • This estimate is higher in other territories, with CNP accounting for more than eight in ten cases in the UK, and around nine in ten in Australia. (Finextra)
  • Phishing accounted for up to 73.2% of global fraud incidents in 2025. (AppGate)
  • In 2025, the majority of credential theft attacks (63.2%) were reportedly linked to authentication systems, suggesting that attackers were focusing on specific targets, not random marks. (Recorded Future)

Physical and Account-Based Fraud

  • Skimming, a type of physical card compromise, costs consumers and financial institutions more than $1 billion every year. (FBI)
  • Investment in protection against POS tampering at physical venues is growing at a CAGR of 13.1% leading up to 2033. (DataIntelo)
  • Card testing fraud is another growing vector. Mastercard Threat Intelligence has reportedly identified more than five million card-testing transactions worldwide since launch. (Mastercard)
  • Account takeover fraud accounts for around 32% of all e-commerce fraud. (Statista, via Worldpay)

The Financial Toll of Credit Card Fraud

Credit card fraud doesn’t just harm consumers, but impacts smaller firms’ profitability and reputation, potentially creating short-term costs and loss of business. From chargebacks to operational costs, the effects of even a single fraudulent transaction can ripple, making ecommerce payment security all the more important.

  • It’s estimated that 3.2% of merchants’ ecommerce revenue, worldwide, was lost to payment fraud in 2025. (Merchant Risk Council)
  • Mid-market businesses are projected to lose an average of 4.5% ecommerce revenue to payment fraud in 2026, higher than rates anticipated for SMBs (3.4%) and enterprises (3.2%) (Merchant Risk Council)
  • Every chargeback costs merchants an average of $128 thanks to internal and third-party fees. (Mastercard)
  • The global value of chargebacks worldwide is expected to reach $46.1 billion in 2029. (Mastercard)
  • 91% of consumers would consider abandoning a brand if they experience fraud during a transaction. (Mastercard)
  • Merchants and small businesses also feel operational impacts. Through friendly fraud attacks, for example, it’s estimated each case results in a $78 loss to operational overhead and chargebacks. (Visa)
  • Around 72% of small businesses surveyed by the Public Private Strategies Institute (PPSI) experienced fraud, ransomware, or scams in 2025. In terms of material loss, credit card fraud and phishing were the most reported attacks. (PPSI)
  • Payment fraud costs for these businesses average almost $60,000. (PPSI)

Who Is Most at Risk?

Small businesses often feel the impact of credit card fraud more than enterprises due to having fewer resources and less financial resilience. However, businesses in hospitality, direct retail, and luxury goods are considered prime targets regardless of size. Consumers of all ages are impacted by credit card fraud, but the majority of cases occur to people in their 30s.

  • In the U.S., people aged 30 to 39 are most likely to experience identity theft, with credit card fraud being the most common type. (FTC, via The Motley Fool)
  • Businesses with greater fraud exposure include online retailers and subscription platforms. (Ramp)
  • Small businesses are more likely to experience more serious damage from credit card fraud, compared to larger enterprises. (Ramp)
  • Industries at higher risk of credit card fraud than most include those that have high product value and deliver digital products. Travel, hospitality, technology, and luxury markets, for example, are prime targets. (Ramp)
  • Fuel stations are key targets for card skimming, while e-commerce and digital retail are considered the most at risk of CNP scams. (Clearly Payments)
  • Up to 84% of consumers engage in “risky” behaviors that exacerbate credit card fraud risk, such as using weak passwords, shopping on unsecured networks, and failing to check statements regularly. (CNBC)

What Consumers Think About Credit Card Fraud

Cardholders are more wary than ever regarding what they share and how they pay online. Post-scam actions vary by person, but it is clear many people are unaware of protections they are entitled to.

  • Up to 74% of people surveyed by IPSOS BVA and IDEMIA Group are concerned about fraud via digital tools, and 53% feel more vulnerable now than five years ago. (IDEMIA Group)
  • 75% of global consumers are more concerned about cybersecurity impacts and risks compared to two years ago. (Harris, via Mastercard)
  • Up to 97% of people impacted by fraud adjust their behaviors online, including what they share and how they pay. (LSEG)
  • Just 13% of people fully understand the protections available to them in the event of scams, despite many already using security tools. (LSEG)
  • After experiencing a scam, 37% of victims check company legitimacy more frequently, and 46% are more cautious about paying online. (LSEG)
  • Around 29% of victims have lost trust in companies and/or people after fraud incidents. (LSEG)

How and When Fraud Gets Discovered

Thanks to real-time fraud detection tools, businesses and consumers can spot suspicious activity in seconds or minutes, depending on platforms and technologies used. However, this also means fraudsters are becoming more efficient and sophisticated to evade justice.

Our research also shows that few people report credit card fraud to authorities, instead preferring to inform their banks and issuers, if at all.

  • By using AI and machine learning, the U.S. Department of the Treasury prevented and recovered more than $4 billion in the 2024 fiscal year. (U.S. Department of the Treasury)
  • In 2025, while 96% of victims of credit card fraud in the U.S. recovered the money they lost, only around 8% reported it to law enforcement. (Security.org)
  • In the same year, 22% of U.S. credit card fraud victims experienced repeat fraud charges from a repeat merchant. This is up from 12% in 2024. (Security.org)
  • BPI research, based on the Consumer Financial Protection Bureau (CFPB) Making Ends Meet Survey, states that around 53% of fraud victims report their most recent incidents to banks or credit card companies. (BPI)
  • The same research indicates that 4% reported incidents to federal agencies. (BPI)

How Merchants and Cardholders Can Reduce Fraud Risk

Businesses can adopt controls such as advanced payment authentication, real-time threat detection through machine learning, and verification tools  such as AVS and Card Verification Value (CVV)  to protect against CNP fraud.

However, smaller firms should prioritize PCI compliance for small businesses to safeguard the card data they process. The PCI DSS breaks down thorough steps all businesses should take to ensure their card payment controls are airtight against threats.

Alongside PCI DSS compliance, statistics show advanced technologies are increasingly helping to fortify businesses against evolving threats:

  • Technology such as advanced authentication solutions measurably  reduces fraud for card issuer clients. Visa, for example, states that its Visa Secure technology boosts authorization rates by 4% on average, with a 7-basis point reduction in fraud. (Visa)
  • Adoption of AI to help combat fraud has also delivered some positive results. Mastercard reports that 42% of card issuers and 26% of acquirers surveyed have saved up to $5 million from using AI as part of preventive strategies. (Mastercard)
  • Cardholders can take many protective steps to reduce the risk of credit card fraud, yet only 37% of financial scam victims change their passwords after the event. (Security Magazine)

Where Credit Card Fraud Is Headed

Our research shows that credit card fraud will only increase in volume and become more expensive for businesses by the decade’s end. However, this does not mean threat prevention is in vain; rather, it is a call to action to stay PCI compliant as threats evolve.

  • The Nilson Report estimates that, by 2030, payment card fraud losses will top $41.06 billion, and by 2034, $48.50 billion, as card volumes increase alongside. (Nilson Report)
  • Identity fraud sophistication is accelerating (such as with the use of deepfakes, bots, and automation), with “sophisticated cases” reportedly growing year over  year to 2025. (BNY)
  • AI-enabled and enhanced fraud is 4.5 times more profitable than traditional attack methods and vectors. (INTERPOL)
  • Digital transaction volumes increased by 18% through 2025, indicating that the potential attack surface size is only expanding. (Sift)
  • 71% of small business owners surveyed by PPSI believe AI will make fraud and ransomware more common, with 76% of attack victims confirming AI was involved in their cases. (PPSI)
  • Businesses are expected to invest in advanced fraud prevention at scale, with the credit card fraud detection platform market expected to grow at a CAGR of 13.51% to 2034. (Fortune)

Conclusion

Our research shows that credit card fraud awareness and PCI compliance matter  more each year as fraudsters adopt new, more profitable ways to defraud businesses and consumers.  Most importantly, they should be ongoing responsibilities, with cybersecurity and physical fraud protections remaining priorities on your agenda.

Staying PCI compliant is vital to protecting your customers and your own interests against evolving threats. SecureTrust takes the compliance guesswork off your plate. Learn more about our small business solutions and get started today.

Sources

INTERPOL. (2026, March 17). INTERPOL-UNODC global summit ends with call to action against fraud surge. INTERPOL. Retrieved September 15, 2026, from https://www.interpol.int/en/News-and-Events/News/2026/INTERPOL-UNODC-global-summit-ends-with-call-to-action-against-fraud-surge

Agostino, S. (2026, June 26). Imposter scams led fraud reports to the FTC for fifth straight year in 2025, causing $3.5 billion in losses. CNBC Women & Wealth. Retrieved September 24, 2026, from https://www.cnbc.com/2026/06/26/imposter-scams-led-fraud-reports-to-ftc-in-2025-3point5-billion-losses.html

Federal Trade Commission. (2026, March 25). FTC Testifies before the Joint Economic Committee on Agency’s Efforts to Combat Fraud. FTC Press Releases. Retrieved September 24, 2026, from https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-testifies-joint-economic-committee-agencys-efforts-combat-fraud

The Nilson Report. (2026, January 7). Global Card Fraud Losses at $33 Billion. Yahoo! Finance. Retrieved September 15, 2026, from https://finance.yahoo.com/news/global-card-fraud-losses-33-170800960.html

Luthi, B., and Bennett, P. (2026, August 31). How Common Is Credit Card Fraud?. Experian. Retrieved September 15, 2026, from https://www.experian.com/blogs/ask-experian/how-common-is-credit-card-fraud/

Frew, P., and Petrino, G. (2026, June 2). 61 Million Americans Faced Credit Card Fraud in the Last Year. Security.org. Retrieved September 15, 2026, from https://www.security.org/digital-safety/credit-card-fraud-report/

Brown, C. (2026, July 20). AVS Mismatch: Why Your Customer's Card Got Declined and What to Do. SecureTrust. Retrieved September 15, 2026, from https://www.securetrust.com/blog/avs-mismatch

Jain, R. (2025, November 13). The Future of Digital Trust: Why CNP Fraud Has Become a Global Flashpoint. Finextra. Retrieved September 24, 2026, from https://www.finextra.com/blogposting/29839/the-future-of-digital-trust-why-cnp-fraud-has-become-a-global-flashpoint

AppGate. (2026, April 29). Phishing Drove 73.2% of Global Fraud Incidents in 2025, According to New Fraud Beat Report from 360 Fraud Protection by AppGate. AppGate. Retrieved September 15, 2026, from https://www.appgate.com/news-press/global-fraud-report-2025-phishing

Langrock, S., and Smilyanets, D. (2026, March 16). 2025 Identity Threat Landscape Report. Recorded Future. Retrieved September 15, 2026, from https://www.recordedfuture.com/blog/identity-trend-report-march-blog

FBI. (n.d.). How We Can Help You: Skimming. FBI. Retrieved September 15, 2026, from https://www.fbi.gov/how-we-can-help-you/common-frauds-and-scams/skimming

Sharma, R., Chandola, V., and Bhat, S. (2025, September). POS Fraud Monitoring at Venues Market. DataIntelo. Retrieved September 15, 2026, from https://dataintelo.com/report/pos-fraud-monitoring-at-venues-market

Baisden, S. (2026, August 5). How card testing can reveal emerging fraud and cyber risks. Mastercard. Retrieved September 15, 2026, from https://www.mastercard.com/global/en/news-and-trends/Insights/2026/how-card-testing-can-reveal-emerging-fraud-and-cyber-risks.html

Worldpay. (2023). E-commerce fraud trends merchants should know about. Worldpay. Retrieved September 15, 2026, from https://www.worldpay.com/en-GB/insights/articles/ecommerce-fraud-trends-merchants

Hagdahl, J. (2025, June 30). Ecommerce Payment Security: Protect Every Transaction. SecureTrust. Retrieved September 15, 2026, from https://www.securetrust.com/blog/e-commerce-balancing-speed-to-market-and-payment-security

Merchant Risk Council. (2026). 2026 Global Payments and Fraud Report. MRC Learning. Retrieved September 24, 2026, from https://merchantriskcouncil.org/learning/mrc-exclusive-reports/global-payments-and-fraud-report

Mastercard. (2026, June 8). What’s the true cost of a chargeback for businesses?. Mastercard. Retrieved September 15, 2026, from https://www.mastercard.com/global/en/news-and-trends/Insights/2025/what-s-the-true-cost-of-a-chargeback-in-2025.html

Mastercard. (2025, August 18). $362 billion in fraud: How insights can help reduce losses — and improve the digital experience. Mastercard. Retrieved September 15, 2026, from https://www.mastercard.com/global/en/news-and-trends/Insights/2025/362-billion-in-fraud-how-insights-can-help-reduce-losses-and-improve-the-digital-experience.html

Craven, S. (n.d.) Quoted in Friendly fraud explained: prevention and solutions. Visa. Retrieved September 15, 2026, from https://corporate.visa.com/en/solutions/visa-protect/insights/friendly-fraud.html

Ahmad, N. (2026, April 9). Press Release: New National Survey of Small Businesses: Fraud, Scams and Ransomware Impose a $131 Billion “Hidden Tax” on Main Street. PPSI. Retrieved September 15, 2026, from https://www.ppsi.org/fraud-scams-ransomware-press-release

Caporal, J. (2026, January 12). Identity Theft and Credit Card Fraud Statistics for 2025. The Motley Fool. Retrieved September 15, 2026, from https://www.fool.com/money/research/identity-theft-credit-card-fraud-statistics/

Naef, V. (2026, March 30). How credit card fraud impacts businesses. Ramp. Retrieved September 15, 2026, from https://ramp.com/blog/financial-impact-of-card-fraud

Clearly Payments. (2024, July 16). Fraud Risk by Industry in Payments. Clearly Payments. Retrieved September 15, 2026, from https://www.clearlypayments.com/blog/fraud-risk-by-industry-in-payments/

Ermey, R. (2025, February 21). Are your online habits safer than most? 84% of credit cardholders engage in at least 1 risky behavior, survey finds. CNBC. Retrieved September 15, 2026, from https://www.cnbc.com/2025/02/21/most-credit-cardholders-have-at-least-one-risky-habit.html

IDEMIA Group. (2026, September 3). Consumers Around the World Face an Important Gap Between Digital Adoption and Cybersecurity Awareness, Reveals IDEMIA Secure Transactions Study. IDEMIA Group. Retrieved September 15, 2026, from https://www.idemia.com/press-release/consumers-around-world-face-important-gap-between-digital-adoption-and-cybersecurity-awareness-reveals-idemia-secure-transactions-study-2026-09-03

Mastercard. (2025, October 6). When it comes to fraud, a sense of insecurity and even inevitability, global survey shows. Mastercard. Retrieved September 15, 2026, from https://www.mastercard.com/gb/en/news-and-trends/stories/2025/consumer-cybersecurity-survey.html

LSEG. (2026, March). After the scam: The emotional and financial impact of global fraud. LSEG Risk Intelligence. Retrieved September 15, 2026, from https://www.lseg.com/en/risk-intelligence/resources/white-paper/global-fraud-report-2026

LSEG. (2026, March 17). After the scam: The emotional and financial impact of global fraud (Press Release). LSEG. Retrieved September 15, 2026, from https://www.lseg.com/en/media-centre/press-releases/2026/After-the-scam-emotional-financial-impact-global-fraud

U.S. Department of the Treasury. (2024, October 17). Treasury Announces Enhanced Fraud Detection Processes, Including Machine Learning AI, Prevented and Recovered Over $4 Billion in Fiscal Year 2024. U.S. Department of the Treasury: Press Releases. Retrieved September 15, 2026, from https://home.treasury.gov/news/press-releases/jy2650

Grodzicki, D. (2026, July 10). A Post-Pandemic Consumer-Centered View of Frauds and Scams: Incidence, Exposure and Reporting. BPI. Retrieved September 15, 2026, from https://bpi.com/a-post-pandemic-consumer-centered-view-of-frauds-and-scams-incidence-exposure-and-reporting/

SecureTrust. (n.d.). PCI Compliance for Small Businesses. SecureTrust. Retrieved September 15, 2026, from https://www.securetrust.com/solutions/pci-compliance-for-small-business

Makhani, F. (2026, May 4). PCI DSS Compliance: Everything You Need to Know. SecureTrust. Retrieved September 15, 2026, from https://www.securetrust.com/blog/pci-dss-compliance

Visa. (n.d.). 3D Secure: your guide to safer transactions. Visa. Retrieved September 15, 2026, from https://corporate.visa.com/en/solutions/visa-protect/insights/3d-secure.html

Mastercard. (2026, July 9). AI is helping banks save millions by transforming payment fraud prevention. Mastercard. Retrieved September 15, 2026, from https://www.mastercard.com/global/en/news-and-trends/Insights/2026/ai-is-helping-banks-save-millions-by-transforming-payment-fraud-prevention.html

Security Staff. (2023, November 30). 37% of adults change passwords following a scam. Security Magazine. Retrieved September 15, 2026, from https://www.securitymagazine.com/articles/100188-37-of-adults-change-passwords-following-a-scam

Peng, S., and Francisco, S. (2026, April 17). AI and Payments Fraud: An Evolving Landscape. BNY. Retrieved September 15, 2026, from https://www.bny.com/corporate/global/en/insights/ai-and-payments-fraud-an-evolving-landscape.html#accordion-bb642639e8-item-148f932d77

INTERPOL. (2026, March 16). INTERPOL report warns of increasingly sophisticated global financial fraud threat. Retrieved September 15, 2026, from https://www.interpol.int/en/News-and-Events/News/2026/INTERPOL-report-warns-of-increasingly-sophisticated-global-financial-fraud-threat

Sift. (2026). The State of Payment Fraud and Account Takeover. Sift: Q1 2026 Digital Trust Index. Retrieved September 15, 2026, from https://sift.com/index-report-q1-2026/

Fortune Business Insights. (2026, August 31). Credit Card Fraud Detection Platform Market Size, Share & Industry Analysis, By Component, By Deployment, By Technology (AI, Big Data, Predictive Analytics, Biometrics), and Regional Forecast, 2026-2034. Fortune Business Insights. Retrieved September 15, 2026, from https://www.fortunebusinessinsights.com/credit-card-fraud-detection-platform-market-118393

SecureTrust. (n.d.). For Small Businesses. SecureTrust. Retrieved September 15, 2026, from https://www.securetrust.com/small-business-solutions

author

SecureTrust

More Blogs

Stay up-to-date on the latest happenings in Cybersecurity and PCI Compliance.
View All Blogs
September 16, 2026
Card Testing Fraud: How to Detect and Stop It (SMB Guide)
July 30, 2026
'Do Not Honor' Decline Code: What It Means and How to Handle It
July 20, 2026
AVS Mismatch: Why Your Customer's Card Got Declined and What to Do