FRAUD HOTSPOTS
Where fraud is run from, where it lands, and who is getting caught: 77 countries in 9 regions, taken from three independent indexes (Oxford World Cybercrime Index, Sumsub Fraud Index 2025, GI-TOC Global Organized Crime Index 2025) plus Interpol, Chainalysis, FTC, FBI IC3 and national regulators.
An index rank describes a country's criminal networks or its exposure, never its people. Estimates are labelled. September 2026.
$442B
LOST TO FRAUD WORLDWIDE IN 2025
Interpol Global Financial Fraud Threat Assessment 2026 (victim losses)
$6.75B
CRYPTO STOLEN BY NORTH KOREA, ALL-TIME
Chainalysis, Dec 2025 ($2.02B of it in 2025)
220K+
PEOPLE HELD IN SCAM COMPOUNDS
UN OHCHR 2023: 120,000+ in Myanmar, 100,000+ in Cambodia (estimates)
$48B
E-COMMERCE FRAUD A YEAR
Juniper Research estimate (publisher's figure)
THE MAP▸
93 countries. Tap a dot to open that country's page: who was born there, who operated there, its top fraud methods and its profile.
PolandPanamaGreeceSouth AfricaBrazilAustraliaGeorgiaSerbiaBosnia and HerzegovinaPuerto RicoMaltaNorth KoreaBangladeshPakistanCambodiaMyanmarPhilippinesBulgariaAustriaThailandUkraineMontenegroCanadaGermanyMaldivesNetherlandsSaint LuciaSri LankaHong KongAntigua and BarbudaBahamasCubaLithuaniaRussiaRomaniaBelarusMoldovaKazakhstanChinaJapanSouth KoreaTaiwanNew ZealandLaosVietnamIndonesiaMalaysiaSingaporeIndiaNepalNigeriaGhanaCôte d'IvoireSenegalCameroonBeninKenyaTanzaniaUgandaEthiopiaRwandaZimbabweAngolaMozambiqueIranIsraelSaudi ArabiaTurkeyEgyptMoroccoIraqLebanonJordanQatarAlgeriaUnited StatesMexicoColombiaArgentinaPeruEcuadorParaguayVenezuelaJamaicaTrinidad & TobagoUnited KingdomFranceSpainItalySwedenSwitzerlandIrelandLuxembourg
SLIDE THE MAP SIDEWAYS · TAP A BEAM
Map: Natural Earth country outlines (public domain), redrawn by TraceChain. Equirectangular projection.
EVERY COUNTRY — TOP FRAUD METHODS165▸
93 countries: the 77 on the Hotspot Map, in its order, then every other country our cases touch. The methods come from the Global Fraud Encyclopedia's country cross-reference and from the cases tied to that country. Tap a country for its page, a method for its page.
🇷🇺Russia#1 WCI ▸
#1 Pig Butchering (Romance-Investment Scam)Encyclopedia ▸#3 RansomwareEncyclopedia · our cases ▸#7 Money LaunderingEncyclopedia · our cases ▸#22 PhishingEncyclopedia · our cases ▸
12 cases in our files tied here
🇺🇦Ukraine#2 WCI ▸
#3 RansomwareEncyclopedia · our cases ▸#22 PhishingEncyclopedia · our cases ▸#31 Credential StuffingEncyclopedia ▸#7 Money Launderingour cases ▸
6 cases in our files tied here
🇧🇾BelarusWCI top 20 ▸
Fraud types: Ransomware infrastructure, money laundering
🇲🇩MoldovaGI-TOC flagged ▸
Fraud types: Money laundering, banking fraud
🇬🇪GeorgiaSumsub flagged ▸
Fraud types: Call center scams, identity fraud
🇰🇿KazakhstanEmerging ▸
Fraud types: Crypto mining fraud, investment scams
🇨🇳China#3 WCI ▸
#13 Gift Card Fraud / DrainingEncyclopedia ▸#22 PhishingEncyclopedia · our cases ▸#23 NFC Relay / Ghost TapEncyclopedia ▸#24 Digital Skimming (Magecart)Encyclopedia ▸
13 cases in our files tied here
🇰🇵North Korea#7 WCI ▸
#2 State-Sponsored Crypto TheftEncyclopedia · our cases ▸#19 Crypto Exchange HackEncyclopedia · our cases ▸#25 DeFi Protocol ExploitEncyclopedia · our cases ▸#3 Ransomwareour cases ▸
4 cases in our files tied here
🇯🇵JapanLow source / High target ▸
2 cases in our files tied here
🇰🇷South KoreaWCI top 15 ▸
2 cases in our files tied here
🇹🇼TaiwanLow source ▸
1 case in our files tied here
🇵🇭PhilippinesGI-TOC flagged ▸
#1 Pig Butchering (Romance-Investment Scam)Encyclopedia · our cases ▸#51 SextortionEncyclopedia ▸#43 Lottery / Sweepstakes Scamour cases ▸
1 case in our files tied here
🇦🇺AustraliaLow source / High target ▸
#4 Ponzi Schemeour cases ▸#29 Pyramid Scheme / MLM Fraudour cases ▸#35 Cryptocurrency Ponzi / HYIPour cases ▸
1 case in our files tied here
🇳🇿New ZealandLow source / High target ▸
Fraud types: Investment scam victim, romance scam victim
🇲🇲Myanmar#1 GI-TOC (8.08) ▸
#1 Pig Butchering (Romance-Investment Scam)Encyclopedia · our cases ▸#7 Money LaunderingEncyclopedia · our cases ▸#33 Money Mule Recruitmentour cases ▸#43 Lottery / Sweepstakes Scamour cases ▸
4 cases in our files tied here
🇰🇭CambodiaGI-TOC flagged ▸
#1 Pig Butchering (Romance-Investment Scam)Encyclopedia · our cases ▸#7 Money LaunderingEncyclopedia · our cases ▸#43 Lottery / Sweepstakes Scamour cases ▸#83 Shell Company Fraudour cases ▸
4 cases in our files tied here
🇹🇭ThailandTransit hub ▸
#29 Pyramid Scheme / MLM Fraudour cases ▸#35 Cryptocurrency Ponzi / HYIPour cases ▸#1 Pig Butchering (Romance-Investment Scam)our cases ▸#6 Card-Not-Present (CNP) Fraudour cases ▸
4 cases in our files tied here
🇻🇳Vietnam#16 Sumsub ▸
Fraud types: Call center scams, pig butchering participation, card fraud
🇮🇩Indonesia#2 Sumsub ▸
#8 Securities Fraud / Insider Tradingour cases ▸#4 Ponzi Schemeour cases ▸#83 Shell Company Fraudour cases ▸#85 Pump and Dumpour cases ▸
3 cases in our files tied here
🇲🇾Malaysia#27 Sumsub ▸
#7 Money Launderingour cases ▸#5 Business Email Compromise (BEC)our cases ▸#20 Wire Fraudour cases ▸#30 Embezzlementour cases ▸
2 cases in our files tied here
🇸🇬SingaporeLow source / Enforcement hub ▸
#7 Money Launderingour cases ▸#8 Securities Fraud / Insider Tradingour cases ▸#12 Account Takeover (ATO)our cases ▸#20 Wire Fraudour cases ▸
5 cases in our files tied here
🇮🇳India#10 WCI / #4 Sumsub ▸
#27 Impersonation Scam (Government)Encyclopedia ▸#28 Tech Support ScamEncyclopedia ▸#53 Vishing (Voice Phishing)Encyclopedia ▸#72 Debt Collection ScamEncyclopedia ▸
1 case in our files tied here
🇵🇰Pakistan#1 Sumsub ▸
#100 Diploma / Credential FraudEncyclopedia ▸#5 Business Email Compromise (BEC)our cases ▸#7 Money Launderingour cases ▸#8 Securities Fraud / Insider Tradingour cases ▸
2 cases in our files tied here
🇧🇩Bangladesh#7 Sumsub ▸
1 case in our files tied here
🇱🇰Sri Lanka#10 Sumsub ▸
1 case in our files tied here
🇳🇵NepalEmerging ▸
Fraud types: Mobile money fraud, lottery scams, identity fraud
🇳🇬Nigeria#5 WCI · GI-TOC 7.32 ▸
#5 Business Email Compromise (BEC)Encyclopedia · our cases ▸#16 Romance Scam (Traditional)Encyclopedia ▸#21 Advance Fee Fraud (419 Scam)Encyclopedia · our cases ▸#22 PhishingEncyclopedia ▸
4 cases in our files tied here
🇬🇭GhanaWCI top 15 ▸
#16 Romance Scam (Traditional)Encyclopedia · our cases ▸#21 Advance Fee Fraud (419 Scam)Encyclopedia ▸#90 Kickback SchemeEncyclopedia ▸#5 Business Email Compromise (BEC)our cases ▸
2 cases in our files tied here
🇨🇮Côte d'IvoireInterpol flagged ▸
Fraud types: Romance scams, advance fee fraud, lottery scams
🇸🇳Senegal#19 Sumsub ▸
Fraud types: Mobile money fraud, identity fraud, telecom scams
🇨🇲CameroonInterpol flagged ▸
Fraud types: Romance scams, advance fee, mobile money fraud
🇧🇯BeninInterpol flagged ▸
Fraud types: BEC, romance scams, advance fee fraud
🇿🇦South Africa#7 GI-TOC (7.43) ▸
#32 SIM Swap FraudEncyclopedia ▸#80 Elder Financial AbuseEncyclopedia ▸#4 Ponzi Schemeour cases ▸#29 Pyramid Scheme / MLM Fraudour cases ▸
1 case in our files tied here
🇹🇿Tanzania#5 Sumsub ▸
Fraud types: Mobile money fraud, SIM swap, identity fraud
🇺🇬Uganda#6 Sumsub ▸
Fraud types: Mobile money fraud, SIM swap, investment scams
🇪🇹EthiopiaMost targeted globally (2024) ▸
Fraud types: Malware victim, identity fraud, telecom fraud
🇷🇼Rwanda#8 Sumsub ▸
Fraud types: Investment fraud, social engineering, mobile fraud
🇿🇼Zimbabwe#21 Sumsub ▸
Fraud types: Identity fraud, mobile money fraud, Ponzi schemes
🇦🇴AngolaSumsub flagged ▸
Fraud types: Identity fraud, oil sector corruption, investment scams
🇲🇿MozambiqueEmerging ▸
Fraud types: Hidden debt scandal, investment fraud
🇸🇦Saudi Arabia#3 MENA ▸
Fraud types: Ransomware victim, identity theft victim, improving enforcement
🇪🇬EgyptInterpol flagged ▸
Fraud types: Ransomware victim, identity fraud, BEC participation
🇲🇦MoroccoInterpol flagged ▸
1 case in our files tied here
🇮🇶IraqInterpol flagged ▸
Fraud types: Investment scams, telecom fraud, identity fraud
🇱🇧LebanonGI-TOC 7.30 ▸
Fraud types: Financial fraud, Ponzi schemes, money laundering, crypto fraud
🇯🇴JordanMENA target ▸
Fraud types: Ransomware victim, phishing, identity fraud
🇶🇦QatarMENA target ▸
Fraud types: Ransomware victim, targeted by hacktivism
🇩🇿Algeria#23 Sumsub ▸
Fraud types: Identity fraud, telecom fraud, phishing
🇺🇸United States#4 WCI / #1 Victim ▸
#4 Ponzi SchemeEncyclopedia · our cases ▸#6 Card-Not-Present (CNP) FraudEncyclopedia · our cases ▸#8 Securities Fraud / Insider TradingEncyclopedia · our cases ▸#9 Healthcare FraudEncyclopedia · our cases ▸
70 cases in our files tied here
🇧🇷Brazil#12 Sumsub ▸
#39 Banking TrojanEncyclopedia ▸#80 Elder Financial AbuseEncyclopedia ▸#4 Ponzi Schemeour cases ▸#7 Money Launderingour cases ▸
4 cases in our files tied here
🇲🇽Mexico#3 GI-TOC (7.68) ▸
#41 Forex FraudEncyclopedia ▸#56 Timeshare Fraud / Resale ScamEncyclopedia ▸#29 Pyramid Scheme / MLM Fraudour cases ▸#30 Embezzlementour cases ▸
1 case in our files tied here
🇦🇷Argentina#3 LATAM ▸
Fraud types: Ransomware victim, banking fraud, identity theft, money muling
🇵🇪PeruLATAM flagged ▸
Fraud types: Ransomware victim, identity fraud, telecom scams
🇪🇨Ecuador#4 GI-TOC (7.48) ▸
Fraud types: Money laundering, fraud, organized crime crossover
🇵🇾Paraguay#4 GI-TOC (7.48) ▸
Fraud types: Money laundering, contraband, financial fraud
🇻🇪VenezuelaGI-TOC flagged ▸
Fraud types: Investment scams, crypto fraud, government corruption
🇹🇹Trinidad & TobagoRegional flagged ▸
Fraud types: Identity fraud, card fraud, investment scams
🇨🇦CanadaLow source / High target ▸
#7 Money Launderingour cases ▸#8 Securities Fraud / Insider Tradingour cases ▸#4 Ponzi Schemeour cases ▸#5 Business Email Compromise (BEC)our cases ▸
6 cases in our files tied here
🇬🇧United Kingdom#8 WCI ▸
#15 Friendly Fraud / Chargeback AbuseEncyclopedia ▸#38 Real Estate FraudEncyclopedia ▸#60 Pension / Retirement FraudEncyclopedia ▸#7 Money Launderingour cases ▸
11 cases in our files tied here
🇩🇪GermanyEnforcement leader ▸
#8 Securities Fraud / Insider Tradingour cases ▸#6 Card-Not-Present (CNP) Fraudour cases ▸#22 Phishingour cases ▸#24 Digital Skimming (Magecart)our cases ▸
3 cases in our files tied here
🇫🇷FranceModerate ▸
#7 Money Launderingour cases ▸#8 Securities Fraud / Insider Tradingour cases ▸#19 Crypto Exchange Hackour cases ▸#40 Check Fraudour cases ▸
3 cases in our files tied here
🇳🇱NetherlandsEnforcement hub ▸
1 case in our files tied here
🇪🇸SpainModerate ▸
Fraud types: Investment fraud, romance scams, crypto fraud
🇸🇪SwedenLow source ▸
#29 Pyramid Scheme / MLM Fraudour cases ▸#35 Cryptocurrency Ponzi / HYIPour cases ▸#40 Check Fraudour cases ▸
2 cases in our files tied here
🇨🇭SwitzerlandMoney laundering hub ▸
Fraud types: Money laundering, banking secrecy exploitation, crypto hub
🇮🇪IrelandLow ▸
Fraud types: Corporate tax arbitrage, emerging crypto fraud
🇱🇺Luxembourg#1 Fraud Resilience (Sumsub) ▸
Fraud types: Lowest fraud vulnerability in the world
🇦🇬Antigua and Barbudanot on the Hotspot Map ▸
#4 Ponzi Schemeour cases ▸#8 Securities Fraud / Insider Tradingour cases ▸#44 Bribery / Corruptionour cases ▸
1 case in our files tied here
🇦🇹Austrianot on the Hotspot Map ▸
1 case in our files tied here
🇧🇸Bahamasnot on the Hotspot Map ▸
#8 Securities Fraud / Insider Tradingour cases ▸#20 Wire Fraudour cases ▸#30 Embezzlementour cases ▸
2 cases in our files tied here
🇧🇦Bosnia and Herzegovinanot on the Hotspot Map ▸
1 case in our files tied here
🇧🇬Bulgarianot on the Hotspot Map ▸
#29 Pyramid Scheme / MLM Fraudour cases ▸#35 Cryptocurrency Ponzi / HYIPour cases ▸#7 Money Launderingour cases ▸
2 cases in our files tied here
🇨🇺Cubanot on the Hotspot Map ▸
1 case in our files tied here
🇬🇷Greecenot on the Hotspot Map ▸
1 case in our files tied here
🇭🇰Hong Kongnot on the Hotspot Map ▸
#8 Securities Fraud / Insider Tradingour cases ▸#20 Wire Fraudour cases ▸#30 Embezzlementour cases ▸#2 State-Sponsored Crypto Theftour cases ▸
3 cases in our files tied here
🇱🇹Lithuanianot on the Hotspot Map ▸
#5 Business Email Compromise (BEC)our cases ▸#20 Wire Fraudour cases ▸#46 Invoice / Procurement Fraudour cases ▸#83 Shell Company Fraudour cases ▸
1 case in our files tied here
🇲🇻Maldivesnot on the Hotspot Map ▸
1 case in our files tied here
🇲🇹Maltanot on the Hotspot Map ▸
#5 Business Email Compromise (BEC)our cases ▸#7 Money Launderingour cases ▸#33 Money Mule Recruitmentour cases ▸
1 case in our files tied here
🇲🇪Montenegronot on the Hotspot Map ▸
1 case in our files tied here
🇵🇱Polandnot on the Hotspot Map ▸
1 case in our files tied here
🇵🇷Puerto Riconot on the Hotspot Map ▸
1 case in our files tied here
🇱🇨Saint Lucianot on the Hotspot Map ▸
1 case in our files tied here
🇷🇸Serbianot on the Hotspot Map ▸
1 case in our files tied here
PICK A REGION▸
🇷🇺🇺🇦🇷🇴🇧🇾🇲🇩🇬🇪EASTERN EUROPE & CIS7 countries🇨🇳🇰🇵🇯🇵🇰🇷🇹🇼🇵🇭EAST ASIA & PACIFIC8 countries🇲🇲🇰🇭🇱🇦🇹🇭🇻🇳🇮🇩SOUTHEAST ASIA8 countries🇮🇳🇵🇰🇧🇩🇱🇰🇳🇵SOUTH ASIA5 countries🇳🇬🇬🇭🇨🇮🇸🇳🇨🇲🇧🇯WEST AFRICA6 countries🇿🇦🇰🇪🇹🇿🇺🇬🇪🇹🇷🇼EAST & SOUTHERN AFRICA9 countries🇮🇷🇮🇱🇦🇪🇸🇦🇹🇷🇪🇬MIDDLE EAST & NORTH AFRICA12 countries🇺🇸🇧🇷🇲🇽🇨🇴🇦🇷🇵🇪AMERICAS12 countries🇬🇧🇩🇪🇫🇷🇳🇱🇪🇸🇮🇹WESTERN & NORTHERN EUROPE10 countries
WHO LEADS EACH FRAUD TYPE
Crypto Theft (State)
North Korea
$6.75B all-time; $2.02B in 2025, 76% of hacks of crypto services (Chainalysis). Lazarus Group.
BEC / Romance Scams
Nigeria, Ghana, Côte d'Ivoire
US romance-scam losses $1.14B in 2023 (FTC, from all countries). 'Yahoo Boys'; Black Axe.
Pig Butchering (Industrial)
Myanmar/Cambodia/Laos (Chinese-led)
$43.8–75B a year (estimates). Hundreds of thousands held in compounds (UN).
Card Fraud (Victim)
United States
42% of global losses on 26% of volume. No SCA mandate
Card Fraud (Source)
Russia, Romania, Ukraine
Russian forums dominate. Romanian 'Hackerville'
Gift Card ORC
China → United States
$1B+ drained annually. Project Red Hook
NFC Relay (Ghost Tap)
China (tooling) → Global
300%+ surge H1 2025. Chinese-language FaaS
Banking Trojans
Brazil, Russia
Grandoreiro, Guildma. Pix fraud. Exported globally
Friendly Fraud
United States, UK
36% of all fraud (Mastercard). 83.4% of merchants report an increase.
Synthetic Identity
United States
$23B globally. AI deepfakes. $3.3B of credit extended to synthetic identities.
Call Center Scams
India, Jamaica
Tech support + IRS impersonation + lottery scams
SIM Swap Fraud
Kenya, South Africa, Colombia
M-Pesa + mobile banking targeted. Spreading regionally
Money Laundering Hub
UAE, Switzerland, UK, Singapore
Real estate + banking + crypto used for transit
Government/State Fraud
Angola, Myanmar, Cambodia
Political elites involved in or protecting fraud (GI-TOC; US sanctions).
Identity Fraud (Volume)
Pakistan, Indonesia, Nigeria
#1, #2, #3 on Sumsub fraud vulnerability index
THE INDEXES — WHAT EACH ONE MEASURES
World Cybercrime Index (Oxford, PLOS ONE, Apr 2024). 92 experts rated 100 countries across 5 categories. Measures where cybercriminals operate FROM. Top 10: Russia, Ukraine, China, USA, Nigeria, Romania, North Korea, UK, Brazil, India.
Sumsub Fraud Index 2025. 112 countries ranked by fraud VULNERABILITY — fraud activity, access to resources, government action and economic health. Measures where it is easiest to commit fraud. Least protected: Pakistan, Indonesia, Nigeria, India, Tanzania. Most protected: Luxembourg.
Global Organized Crime Index 2025 (GI-TOC). All organized crime scored 0–10. Financial crime is now the most pervasive criminal market (6.21/10, growing fastest). Top: Myanmar 8.08, Colombia 7.82, Mexico 7.68, Ecuador and Paraguay 7.48. Covers all crime, not just fraud.
Interpol Africa Cyberthreat Assessment 2025. Cybercrime is 30%+ of all reported crime in West and East Africa. Operation Serengeti (2024): 1,006 arrests in 19 countries. Operation Red Card (2024–25): 306 arrests in 7 countries.
Chainalysis (Dec 2025). North Korea stole $2.02B in 2025 (76% of hacks of crypto services). Total crypto theft $3.4B. North Korea all-time: $6.75B.
BioCatch LATAM 2025–2026. Social engineering +155%. Stolen-device fraud +344%. Mexico account takeover +324%. 88% of fraud on mobile.
Interpol Global Financial Fraud Threat Assessment (2026). About $442B lost to fraud worldwide in 2025. AI and deepfakes accelerating.
Figures the desk checked are corrected in data/hotspots.json (editorial_changes). Other figures are the publisher's research and are labelled by source. The indexes measure different things: a high Sumsub rank means a country is easy to defraud, not that its people commit fraud.