One in four EU citizens says they have fallen victim to online fraud, while more than one-third of victims report being targeted more than once, according to a briefing published on Friday by the European Parliamentary Research Service (EPRS).
Online fraud is one of the fastest-growing areas of organised crime, both in scale and sophistication, the EPRS said. Automation, artificial intelligence and online services that offer criminal tools are making it easier for fraudsters to operate.
Around 80% of consumers said they had received messages linked to attempted fraud. Law enforcement operations targeting fraud networks have uncovered computers, automated calling systems, caller-ID spoofing tools and SIM cards from multiple countries.
Data cited by the EPRS from a 2026 European Union Agency for Fundamental Rights report showed significant differences among member states. In Greece and Romania, 11% of respondents said they had been victims of online fraud, compared with 39% in Estonia and Luxembourg.
Online shopping scams most common
The most common type of online fraud involves offenders posing as sellers of goods or services, accounting for 35% of reported victims.
Cases in which fraudsters impersonate a relative, or claim to be seeking help on behalf of a relative, account for 25% of victims, while 24% involve offenders posing as businesses or professional contacts.
Scams involving individuals pretending to represent banks affect 22% of victims, while investment fraud accounts for 20%. So-called romance scams make up 11%, and cases involving offenders posing as police officers account for 10%.
In investment scams, fraudsters attempt to persuade victims to invest money in non-existent or misleading investment products, including cryptocurrencies, real estate, gold and other assets.
The EPRS noted that some newer tactics involve the use of artificial intelligence to create fake advertisements purporting to be endorsed by well-known public figures.
In impersonation scams, fraudsters may pose as representatives of banks, police forces, customs authorities or tax departments in an attempt to obtain money, banking details or other personal information.
Fraud compounds
The EPRS also highlighted the operation of organised online fraud compounds, describing them as large-scale enterprises run by international criminal organisations with significant technological and logistical support.
These centres may employ anywhere from hundreds to several thousand people. According to the briefing, many of those working in such operations are themselves victims of forced labour and human trafficking.
The International Organization for Migration estimates that at least 300,000 people have been trafficked for such purposes in Southeast Asia. In 2023, the United Nations reported that at least 120,000 people in Myanmar and around 100,000 in Cambodia were working in online fraud operations.
Adults aged 25 to 39 appear to be more exposed to online fraud than other age groups, with nearly one in three reporting they had fallen victim, compared with 19% among people aged 55 and over. The EPRS said the difference is likely linked to greater internet exposure and usage among younger adults.
EU measures
According to the EPRS, the European Union's existing framework for tackling online fraud includes measures covering cybersecurity, police cooperation, consumer rights and victim protection.
The Digital Services Act is one of the EU's main tools for combating fraud on large online platforms, requiring platforms to provide users with mechanisms to report scam-related content and to respond to complaints concerning fake online shops, misleading listings and financial fraud.
The NIS2 Directive strengthens the cybersecurity framework, while the Instant Payments Regulation requires payment service providers to offer a free payee-verification service.
Europol also supports member states in investigating cross-border fraud, including organised telephone and financial scams.
Source: CNA
