Identity Verification Statistics 2026: KYC & Fraud Data

Identity verification statistics for 2026 show a market under pressure from three directions: US identity fraud losses hit $27.3 billion, deepfake fraud surged 1,100%, and global AML fines still totaled $3.8 billion in 2025\.

Every statistic on this page links to its original source. We update it as new annual reports land; for rolling updates between editions, see Zyphe's KYC & IDV vendor breach tracker and AML enforcement tracker.

Identity verification statistics: the headline numbers

Identity fraud statistics 2026: growth and losses

1. US consumers lost $27.3 billion to identity fraud in 2025, affecting roughly 18 million victims, according to Javelin Strategy & Research's 2026 Identity Fraud Study.
2. Combined identity fraud and scam losses reached $38 billion in 2025 across 36 million US victims, down $9 billion and 4 million victims from 2024 (Javelin).
3. New-account fraud victims jumped 31% in a single year, from 4.2 million in 2024 to 5.4 million in 2025, the sharpest rise of any fraud category (Javelin).
4. The global identity fraud rate was 2.2% of all verification attempts in 2025, down from 2.6% in 2024 but still above 2023's 2.0%, per Sumsub's Identity Fraud Report 2025-2026, which analyzed more than 4 million fraud attempts.
5. High-quality, sophisticated fraud attacks rose 180% over 2024 to 2025 even as raw attempt volumes fell. Fraudsters are trading volume for sophistication (Sumsub).
6. Synthetic identity document fraud surged more than 300% in the US, as generative AI made fake passports, IDs, and biometric data cheap to produce (Sumsub).
7. Synthetic identity is now the single largest first-party fraud method at 21% of attempts, ahead of chargeback abuse (16%) and application fraud (14%) (Sumsub).
8. Victims spent an average of 10.4 hours resolving identity fraud in 2025, up from 9.5 hours in 2023 (Javelin).
9. The FBI logged $20.9 billion in internet crime losses for 2025, with identity-theft losses among older Americans surging 70%, per FBI IC3 data reported by Fox News.

Deepfake fraud statistics

Deepfakes moved from novelty to default attack tooling in under three years. This is why deepfake detection is now a core KYC requirement, not an add-on.

1. Deepfake fraud grew 1,100% between 2024 and 2025, the fastest-growing attack vector in identity verification (Sumsub).
2. Deepfakes account for 11% of first-party fraud attempts globally, making them a top-four fraud method (Sumsub Identity Fraud Report 2025-2026).
3. UK deepfake fraud attempts rose 94% year over year (Sumsub).
4. One in five biometric fraud attempts now involves a deepfake, and deepfake selfie use surged 58% in 2025 (Entrust 2026 Identity Fraud Report).
5. Injection attacks, feeding synthetic video directly into the verification stream, rose 40% year over year (Entrust).
6. A deepfake attack occurred every five minutes in 2024, alongside a 244% surge in digital document forgeries (Entrust).
7. Deepfakes went from 0.1% to 6.5% of all fraud attempts in three years, a 2,137% increase, per Signicat's AI-driven identity fraud analysis (via Bright Defense's deepfake statistics roundup).

KYC statistics: what compliance actually costs

1. Financial institutions spend $206.1 billion a year globally on financial crime compliance (KYC, AML screening, and monitoring) per the LexisNexis Risk Solutions True Cost of Financial Crime Compliance study.
2. US and Canadian institutions carry $61 billion of that annual cost (LexisNexis Risk Solutions).
3. EMEA institutions spend $85 billion a year on financial crime compliance (LexisNexis Risk Solutions).
4. 99% of US and Canadian financial institutions reported rising compliance costs, and 98% in EMEA said the same (LexisNexis US/CA, LexisNexis EMEA).
5. KYC and compliance technology costs rose at 79% of organizations in a single year, and 70% of institutions named cost-cutting a top-two priority (LexisNexis Risk Solutions).

For a full breakdown of where that money goes (headcount, tooling, remediation), see our guide to the real cost of KYC compliance.

Onboarding drop-off and conversion statistics

1. 68% of European consumers abandoned a financial services onboarding application in the previous year, up from 63% in 2020, per Signicat's Battle to Onboard research.
2. European financial institutions lose more than €5 billion a year to poor customer onboarding, according to Signicat research reported by The Fintech Times.

Every abandoned application is acquisition spend written off at the last step. Zyphe reports typical verification in under one minute; our KYC onboarding guide covers how flow design drives completion.

AML fines 2026: enforcement totals

1. Global fines for AML, KYC, sanctions, and CDD failures totaled $3.8 billion in 2025, down from $4.6 billion in 2024 and $6.6 billion in 2023 (Fenergo annual fines report).
2. Enforcement shifted regions in 2025: North American fines fell 58% while EMEA penalties rose 767% and APAC rose 44% (Fenergo).
3. France became the world's second-largest AML enforcer at $1.11 billion in 2025, behind the US ($1.676 billion); the year's single largest penalty was a $985 million French fine against a Swiss bank (Fenergo).
4. Nearly a quarter of the ten highest-value AML fines in 2025 involved digital asset firms (Fenergo).
5. Regulatory penalties spiked 417% in H1 2025 versus the prior half-year, showing how lumpy enforcement can be within a single year (Fenergo).
6. In March 2026, FinCEN imposed an $80 million penalty on Canaccord Genuity, the largest Bank Secrecy Act fine ever levied on a broker-dealer (Holland & Knight analysis).
7. The SEC and FINRA brought a combined 46 AML/CFT enforcement actions against broker-dealers during the period covered by the Canaccord assessment (Holland & Knight).
8. The benchmark for single-institution exposure remains TD Bank's record $1.3 billion FinCEN penalty (part of a roughly $3 billion multi-agency resolution in October 2024\) (FinCEN); we unpack the compliance lessons in our TD Bank $3 billion AML analysis.

Running 2026 totals, action by action, live on Zyphe's AML enforcement tracker.

Data breach statistics: identity data under attack

1. 2025 set an all-time record of 3,322 data compromises in the US, a 79% jump over five years (Identity Theft Resource Center 2025 Annual Data Breach Report).
2. Financial services was the most-breached industry in 2025 with 739 compromises, ahead of healthcare (534) and professional services (478) (ITRC).
3. 278.8 million breach victim notices went out in 2025, down 79% from 2024's 1.37 billion only because 2025 lacked a mega-breach, not because breaches slowed (ITRC).
4. 70% of 2025 breach notices contained no information about the attack, up from 65% in 2024 and 45% in 2023 (ITRC).
5. The global average cost of a data breach was $4.44 million in IBM's 2025 report, the first decline in five years (IBM Cost of a Data Breach, via CyberScoop), before rebounding roughly 12% to a record \~$5 million in the 2026 edition (Infosecurity Magazine).
6. A financial services breach costs $5.56 million on average, second only to healthcare (IBM 2025 industry data, via DataBreachCost.com).

These numbers explain why identity verification vendors themselves have become prime targets: they concentrate passports, selfies, and addresses for millions of users in one place. Zyphe is a decentralized identity verification and compliance platform that verifies users without storing PII in any central vendor database. Identity data is sharded across decentralized storage with user-held encryption keys, so there is no honeypot to breach. Zyphe reports this architecture cuts data-breach risk by roughly 90% versus centralized vendors. See why your KYC vendor is your biggest data breach risk and how decentralized PII storage removes the target entirely. Incidents involving IDV and KYC vendors are logged in our KYC/IDV breach tracker.

The pattern across all 37 statistics: fraud is getting more sophisticated, breaches keep hitting the vendors that hoard identity data, and regulators keep fining the firms that fall behind. If you want verification that converts in under a minute without building a PII honeypot, book a Zyphe demo.

How to cite this page

Cite as: "Identity Verification & KYC Statistics 2026," Zyphe, updated August 2026, zyphe.com/resources/blog/identity-verification-statistics. All statistics link to their original sources above; please cite the primary source alongside this page where possible. Journalists and analysts may reuse individual statistics with attribution.