Risk
4/4/2008
04:18 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Internet Fraud Loss For 2007 Tops $239 Million

The dollar loss reported from Internet crime reached an all-time high in 2007, while the number of reported crimes was lower than in each of the last three years.

The dollar loss reported from Internet crime reached an all-time high in 2007, according to the Internet Crime Complaint Center's (IC3) 2007 Internet Crime report.

The IC3 serves to field complaints about online crime on behalf of the Federal Bureau of Investigation and the National White Collar Crime Center.

The IC3 received 206,884 complaints in 2007 through its Web site, fewer than the number submitted in 2006 (207,492), 2005 (231,493), or 2004 (207,449). With the addition of other methods of complaint, IC3 received 219,553 complaints last year.

IC3 referred 90,008 complaints to the appropriate law enforcement authorities for investigation, most of which alleged fraud and financial loss. The dollar loss for referred complaints totaled $239.09 million, with a median loss of $680 per complainant. This represents an increase over the 2006 total of $198.44 million.

James E. Finch, assistant director of the FBI's cyberdivision, appears to believe that a significant number of people are not reporting Internet crimes. "The Internet presents a wealth of opportunity for would-be criminals to prey on unsuspecting victims, and this report shows how extensive these types of crime have become," he said in a statement. "What this report does not show is how often this type of activity goes unreported. Filing a complaint through IC3 is the best way to alert law enforcement authorities of Internet crime."

The report indicates that in complaints that could be linked to a perpetrator, more than 75% of cybercriminals were men and that half resided in California (15.8%), Florida (10.1%), New York (9.9%), Texas (7%), Illinois (3.6%), Pennsylvania (3.5%), or Georgia (3.1%).

When perpetrators were measured per 100,000 people, the District of Columbia had the most, with 99.10 per 100,000, followed by Nevada (65.45), Delaware (41.98), and Florida (40.73).

Counting by country, the United States had the most cybercriminals, with 63.2%, followed by the United Kingdom (15.3%) and Nigeria (5.7%).

It bears repeating that these numbers do not reflect overall Internet crime activity in these countries. Rather, they represent statistics drawn specifically from the more than 90,000 IC3 complaints investigated.

Men reported larger losses than women, with their median losses coming to $765 and $552, respectively.

E-mail was the most common means (73.6%) by which cybercriminals made contact with their victims, followed by Web pages (32.7%), phone contact (18%), and postal mail (10.1%). "The anonymous nature of an e-mail address or a Web site allows perpetrators to solicit a large number of victims with a keystroke," the report explains.

By far the most common type of fraud reported was auction fraud (35.7%) and nondelivery of merchandise (24.9%). Compared with 2006, these figures represent a 20.5% decrease and a 31.1% increase, respectively.

Other types of fraud reported were confidence fraud (6.7%), credit/debit card fraud (6.3%), check fraud (6%), computer fraud (5.3%), identity theft (2.9%), financial institution fraud (2.7%), threat (1.6%), and Nigerian letter fraud (1.1%).

The report notes that auction fraud may be overrepresented among complaints because eBay, the leading online auction site, provides its users with links to the IC3 site as part of its anti-fraud efforts.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5208
Published: 2014-12-22
BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbit...

CVE-2014-7286
Published: 2014-12-22
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.

CVE-2014-8896
Published: 2014-12-22
The Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to modify ...

CVE-2014-8897
Published: 2014-12-22
Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 ...

CVE-2014-8898
Published: 2014-12-22
Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 ...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.