Identity theft protection service NordProtect surveyed U.S. respondents about 22 scam types, asking whether they had encountered each and whether they fell victim. Analysts then calculated the ratio of victims to encounters to gauge the effectiveness of the most popular methods for swindling money or compromising digital identity.
The findings show that card cloning or skimming is the most effective scam in the United States, with 45% of encounters resulting in victims, followed by cryptocurrency scams (44%) and romance scams (38%).
“Card cloning and cryptocurrency scams aren’t just effective — they’re ideal for criminals. Crypto scams are popular because they’re high payoff and low risk — once funds are sent, they’re probably gone forever. Card cloning is the ‘classic rock’ of fraud — it’s old, but it still works thanks to the large number of payment cards in circulation and people not checking statements regularly,” says Tomas Sinicki, managing director at NordProtect.
According to the research, the top 10 most effective scams (with percentage of victims as a share of encounters indicated) are:
1. Card cloning or skimming (45%)
2. Cryptocurrency scams (44%)
3. Romance scams (38%)
4. Calls from fake customer support or banks (37%)
5. Fake QR codes (37%)
6. Fake app scams (35%)
7. Impersonation of a friend or relative asking for money (35%)
8. Fake loan offers (33%)
9. Fake online shops (33%)
10. Fake product or service listings on legitimate platforms (32%)
Despite their high effectiveness, card cloning or skimming and crypto scams aren’t the most common. The most frequently encountered scams are phishing emails (31%), calls from fake customer support or banks (20%), and fake job offers (20%).
“The reason the most effective scams aren’t the most common is the barrier to entry. Card cloning and crypto scams still require knowledge and effort, while phishing scams have the lowest barriers to entry for beginner scammers. Phishing is like the flu of the digital world — it’s everywhere, and it’s easy to catch,” Sinicki adds.
However, that doesn’t make phishing less dangerous. Survey responses show that people who lost personal information, like photos or health data, often reported encountering phishing emails (29%) or messages from fake customer support or banks (23%). Those who suffered identity theft also frequently mentioned phishing emails (23%).
How to protect yourself from scams
A layered defense — proactive monitoring, strong digital hygiene, and a clear response plan — offers the best protection. If your personal data may have been compromised, Tomas Sinicki recommends:
- Changing your passwords. Prioritize email, banking, social media, and any service storing payment details. Don’t reuse old passwords. If one service may be compromised, assume similar passwords elsewhere are at risk. Use strong, unique passwords.
- Enabling multi-factor authentication (MFA). Doing so helps to reduce the risk of unauthorized access even if a password is compromised.
- Reviewing bank and card statements. Check all transactions and report unauthorized charges immediately.
- Monitoring your credit. Watch for new accounts, unexpected inquiries, or sudden score changes — signs of identity theft.
- Being wary of unexpected communication. Verify emails, calls, or texts requesting financial info or urgent action. If it sounds too good to be true, it probably is.
- Checking public records. Identity theft can extend beyond finances. Address any signs that your name is linked to criminal activity you didn’t commit.
- Considering identity theft protection services. While technology alone cannot stop social engineering, trusted solutions such as NordProtect offer comprehensive support for victims of various types of online fraud.
Methodology
The survey was commissioned by NordProtect and conducted by Cint December 15-17, 2025. The survey’s target group was online users in the United States of America aged 18-74. The number of respondents was 1,004. Quotas were placed on age, gender, and place of residence.
About NordProtect
NordProtect is a comprehensive identity theft protection service designed to keep users’ identity safe. With features like 24/7 dark web monitoring, credit activity tracking and security alerts, users can stay informed about potential threats and take action to protect themselves right away. Additionally, NordProtect helps users to get financial help and expert support if they fall victim to identity theft, cyber extortion or online fraud. For more information: www.nordprotect.com
