Quick Summary
In 2023, online scams inflicted $10 billion in losses on U.S. users, with shopping scams being the most prevalent. A study analyzed 607,000 scam domains and found that 149,000 devices are exposed daily, with 10.2 million IPs encountering shopping scams. This highlights the significant risk posed by various scam types, including financial and cryptocurrency scams, and the need for increased user awareness and protection measures.
The Securityish Brief
The research presented at the NDSS 2025 conference focused on the alarming rise of online scams, which have caused $10 billion in losses in the U.S. alone in 2023. The study, conducted by the Norton Research Group and other collaborators, analyzed 607,000 scam domains accessed by 25.1 million IP addresses over several months. It categorized these domains into seven types of scams: shopping, financial, cryptocurrency, gambling, dating, funds recovery, and employment scams.
Among the findings, shopping scams were the most frequently encountered, with 10.2 million IPs reporting exposure. Cryptocurrency scams followed, affecting 653,000 IPs. The study revealed that, on average, 149,000 devices are exposed to online scams daily, with desktop devices showing a higher exposure rate than mobile devices.
Understanding User Exposure to Scams
The research indicates that scam domains typically remain active for a median of 11 days. Furthermore, a significant portion of users, approximately 9.2 million (13.3%), engaged with advertisements promoting these scams, primarily on social media platforms like Facebook, which hosted 59% of these ads.
This study is crucial as it sheds light on the various ways users are exposed to scams and the geographical variations in scam prevalence. It emphasizes the need for users and organizations to be vigilant and proactive in recognizing and mitigating the risks associated with online scams.
As online scams continue to evolve, understanding the landscape of these threats is essential for enhancing cybersecurity measures and protecting personal and financial information.
Key Takeaways
- Be cautious when clicking on advertisements, especially on social media, as they may lead to scams.
- Regularly monitor your financial accounts for any unauthorized transactions or suspicious activity.
- Educate yourself about different types of scams, including shopping and cryptocurrency scams, to recognize potential threats.
- Use security software that can help detect and block access to known scam domains.
- Report any suspected scams to relevant authorities to help combat online fraud.
Key Terms & Concepts
- Scam Domains: In this article, scam domains refer to websites created to deceive users for financial gain.
- IP Address: An IP address is a unique identifier assigned to each device connected to the internet, used to locate and identify devices.
- Online Scams: Online scams are fraudulent schemes conducted over the internet aimed at tricking individuals into giving up money or personal information.
Read the original article here: https://securityboulevard.com/2026/01/ndss-2025-ctrlaltdeceive-quantifying-user-exposure-to-online-scams/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
