TL;DR: Crypto scams and fraud stole an estimated $17 billion in 2025, with impersonation scams growing 1400% year over year and AI-enabled scams proving 4.5 times more profitable than traditional scams, according to Chainalysis. The pattern is no longer isolated fraud but industrialized criminal infrastructure that security, fraud, IAM, and identity verification teams must treat as a governance problem, not a user-awareness problem.
Editorial analysis by NHI Mgmt Group, based on content published by Chainalysis: “Record $17 Billion Estimated Stolen in Crypto Scams and Fraud in 2025 as Impersonation Tactics and AI Enablement Surge”.
By the numbers:
- Impersonation scams grew 1400% year over year in 2025.
- The average scam payment increased from $782 in 2024 to $2,764 in 2025.
Key questions
Q: What control fails first when crypto scams use impersonation and deepfakes?
A: The first failure is usually trust verification, not authentication technology.
Q: Why do AI-enabled scams become more profitable than traditional fraud?
A: AI improves scam economics by making messages more convincing, enabling better personalisation, and letting operators run more conversations at once.
Q: What signs show a fraud operation is becoming industrialised?
A: Look for reusable domains, phishing kits, scripted support flows, repeated wallet patterns, and laundering through the same service providers or DeFi paths.
Practitioner guidance
- Tighten identity proofing at high-risk moments Require stronger verification when users request wallet changes, account recovery, support escalation, or transaction approvals.
- Add out-of-band confirmation for financial changes Use a second trusted channel for any transfer, beneficiary, or security-setting change that could be triggered by impersonation.
- Instrument support channels for impersonation abuse Log and correlate support interactions, callback requests, and password-reset flows to spot coordinated fraud patterns.
Bottom line: AI-enabled crypto scams have moved beyond opportunistic fraud into a repeatable industrial model that combines impersonation, phishing, laundering, and synthetic media.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
AI-enabled fraud is now a governance problem, not a campaign problem. The article shows that scams are increasingly industrialised across content generation, impersonation, hosting, and laundering. That means the control objective is no longer simply blocking bad messages, but governing how trust is issued, authenticated, and recovered across customer-facing journeys. For identity teams, the practitioner conclusion is that fraud controls must sit inside the identity lifecycle, not beside it.
A question worth separating out:
Q: How should teams govern customer support when impersonation risk is high?
A: Support should never be allowed to override identity verification just because a request sounds urgent or emotionally plausible. High-risk requests need independent challenge steps, audit trails, and separation between assistance and account or payment changes. That reduces the chance that a convincing impersonator can turn support into an attack path.
👉 Read our full editorial: AI-enabled crypto scams are industrializing faster than controls