LIVE · cybersecurity feed
Live wire
security

UK Fraud Cases Hit Record High in 2026

Cifas data finds account takeover and identity fraud are driving a surge in fraud cases

zeroday.news ·

Fraud cases in the UK reached an unprecedented high in the first half of 2026, with over 220,000 incidents filed with the National Fraud Database (NFD) between January and June. This represents the highest volume ever recorded for a six-month period, according to Cifas, the non-profit organization that manages the NFD and the Insider Threat Database.

Identity fraud was a significant contributor to this surge, increasing by 9% year-on-year to nearly 130,000 cases. Scammers primarily targeted bank accounts and plastic cards, which together accounted for 68% of these identity fraud incidents. Impersonation incidents where a victim's real address was used also saw a 12% year-on-year rise. While "false identity" filings decreased by 35% in the banking and telecoms sectors, Cifas noted ongoing concerns regarding synthetic identities, AI-enabled impersonation, and digitally manipulated documents.

Account takeover cases also drove the increase in fraud, with nearly 40,000 incidents recorded, a 5% year-on-year rise. Within this category, online retail incidents jumped by 84% and card account incidents by 59%. Unauthorized SIM-swap cases experienced a dramatic 402% increase, reaching 4,109 incidents and now constituting 10% of all filings, up from 2% a year prior.

Young adults are increasingly involved in fraud, both as victims and perpetrators. Although victims aged 61 and over still represent the largest demographic for identity fraud, the 21-30 age group saw the most significant increase, with cases rising by almost a third (32%). Concurrently, individuals under 30 accounted for a majority (57%) of money muling cases, with 17% of these being under 21.

Cases linked to money muling surged by 69% annually in the first half of 2026, with over 13,000 filings in the NFD. This activity now makes up 30% of all "misuse of facility" cases, which involve the genuine account holder misusing an account or product. Part of this increase is attributed to improved detection methods and the introduction of a new filing reason, "funds received – money muling," in 2025.

Cifas CEO Mike Haley emphasized that identity fraud now accounts for three-fifths of all cases in the NFD, underscoring the value of personal information to criminals. He stated that stolen personal data frequently serves as the initial entry point for various criminal activities, including opening new accounts, taking over existing facilities, or supporting broader illicit operations. Haley also highlighted the critical importance of early intervention, education, awareness, and prevention, particularly for younger individuals who are increasingly vulnerable to fraud risks as criminals adapt their tactics and leverage digital channels.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

ICO Urges Police to Improve Data Governance in Facial Recognition Rollouts

The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations

patch

Brinqa acquires PlexTrac to bring validated remediation to exposure management

Brinqa has announced its acquisition of PlexTra, adding the ability to verify that remediation efforts have actually worked. The combined capabilities uniquely position Brinqa to identify and prioritize the exposures that matter most, drive remediation, and validate that fixes hold, closing the CTEM loop. “We’ve spent over a decade building the platform enterprise security teams trust to prioritiz

vulnerability

943 Patches Rolled Out With Oracle’s August 2026 Security Update

The fixes resolve over 1,000 vulnerabilities across two dozen products, including over 460 remotely exploitable bugs. The post 943 Patches Rolled Out With Oracle’s August 2026 Security Update appeared first on SecurityWeek.

ai

OpenAI puts major frontier AI training run on hold over cyber risks

OpenAI temporarily paused reinforcement learning (RL) training on its latest models intended for deployment for two weeks while it hardened and red-teamed research environments and expanded monitoring. “Our largest planned frontier RL run remains on hold while we conduct smaller-scale training and evaluations to assess model behavior, validate our safeguards, and establish more evidence of alignme

breach

50,000 Stripe Secrets Leaked in Public Code

Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours. Ransomnews researchers have documented a large-scale leak of Stripe merchant API keys found exposed in public code repositories, GitHub Actions logs, and misconfigured web servers, with over 50,000 unique keys identified in total. The research […]

security

Cyberattack forces UT San Antonio to delay start of fall semester

The University of Texas at San Antonio pushed back the start of its fall semester by three days after a cyberattack targeted its academic network over the weekend. Classes that were due to begin on Wednesday, August 19 will now start on Monday, August 24. UT San Antonio is one of the largest universities in Texas, serving more than 42,000 students. According to a statement issued by Andrea Marks,