West Midlands UK Cyber Crime Statistics

West Midlands UK Cyber Crime Key Insights

• Consumer fraud remains the most widespread cyber crime across the West Midlands - Consumer fraud accounted for 38.6% of all reports (7,884 incidents) and £22.6 million in losses (30.1%), making it the most common cyber crime by a considerable margin. Its combination of high incident volumes and substantial financial losses means it continues to pose the greatest day-to-day threat.
• Investment fraud causes the greatest financial damage despite relatively few reports - Investment fraud represented just 7.8% of reported incidents, yet accounted for 45.2% of all financial losses (£34 million). With an average loss of £21.3k per report, it demonstrates how lower-volume fraud can still inflict the greatest financial harm.
• Cyber dependent crime creates significant operational risk rather than direct financial loss - Cyber dependent offences accounted for 24.7% of all reports (5,050 incidents) but only 0.3% of financial losses (£234.3k). The disparity suggests many incidents involve disruption, ransomware attempts, malware or unauthorised access where the immediate financial impact is limited, but operational consequences may be significant.
• Financial impact varies dramatically between crime types - Average losses ranged from just £46 per cyber dependent incident to more than £21k for investment fraud, highlighting that report volumes alone do not reflect overall business risk. Some of the least frequently reported crimes produce the greatest financial consequences.
• Cyber crime continues to affect both individuals and organisations in different ways - While individuals generated the majority of reported incidents, organisational attacks were generally associated with much higher average losses in categories such as banking, corporate and investment fraud. The data reinforces that cyber criminals tailor their methods depending on whether they are targeting people or businesses.

Individuals

• Working-age adults remain the primary targets for cyber criminals - Individuals aged 20–59 accounted for more than 72% of all reports, with those aged 30–39 recording the highest number of incidents (20.6%). Regular use of digital banking, online shopping and connected services continues to increase exposure.
• Financial losses increase significantly with age - Although reports decline after middle age, financial losses rise sharply. Individuals aged 60–69 suffered the greatest financial losses (£14.4 million), while those aged 80–89 experienced the highest average loss among sizeable age groups (£7.4k per report).
• Consumer fraud dominates reports, but investment fraud dominates financial losses - Consumer fraud remained the most commonly reported offence, while investment fraud generated almost half of all financial losses (49.8%) despite accounting for only 8.1% of reports.
• Older victims lose substantially more money per incident - Average financial losses rose steadily with age, from around £2k per report among people aged 20–29 to £6.5k for those aged 60–69. This suggests criminals continue to target older victims with higher-value frauds.
• Cyber dependent crime remains widespread but financially limited - More than one in four reports (25.1%) involved cyber dependent crime, yet these incidents accounted for just 0.4% of financial losses. The data indicates that many attacks focus on compromising devices and accounts rather than directly stealing money.

Organisations

• Consumer and banking fraud dominate organisational reporting - Together, consumer (41.9%) and banking fraud (37.2%) accounted for almost 80% of all organisational reports, highlighting that financially motivated fraud remains the principal cyber threat facing organisations.
• Banking fraud represents the greatest financial risk to organisations - Banking fraud generated £4.1 million in losses (48.1%), making it the most financially damaging organisational crime type. With average losses of £12.3k per incident, successful attacks frequently result in substantial financial harm.
• Corporate fraud delivers the highest average financial impact - Corporate fraud represented just 10 reported incidents, yet generated an average loss of £71.9k per report. Although uncommon, successful attacks against organisations can be exceptionally costly.
• Limited companies bear the overwhelming majority of organisational cyber crime - Limited companies accounted for 72.7% of organisational reports and 64.5% of financial losses, reflecting both their prevalence within the UK economy and their attractiveness as cyber crime targets.
• Every business type is represented in the data - From sole traders and charities to PLCs and LLPs, every organisational structure recorded cyber crime incidents. While the scale varies considerably, the findings reinforce that no organisation is too small or too specialised to become a target.

West Midlands UK Cyber Crime Statistics Breakdown

Crime Types

By report volume

Insights for Report Volume

• Consumer fraud remains the most common cyber crime category – Accounting for 38.6% of all reports (7,884), consumer fraud continues to dominate the cyber crime landscape across the West Midlands. Its volume exceeds every other category by a considerable margin, highlighting the ongoing prevalence of online shopping scams, phishing attacks, and marketplace fraud targeting members of the public.
• Cyber dependent crime represents a quarter of all reported incidents – With 24.7% of reports (5,050), offences such as hacking, malware, ransomware, and unauthorised system access remain a significant threat. Their high reporting volume reinforces the importance of maintaining strong cyber security controls alongside employee awareness.
• Advance fee fraud remains a major source of reports – Advance fee fraud accounted for 19.1% of all reports (3,893), making it the third most reported crime type. Criminals continue to exploit fake investments, loans, inheritance claims, and other schemes that persuade victims to make upfront payments with the promise of larger future returns.
• Banking and investment fraud generate comparatively fewer reports – Together, Banking (9.0%) and Investment (7.8%) fraud represented just 16.8% of all reports (3,433 incidents). While these crimes occur less frequently than consumer fraud, they often involve higher financial losses per victim, making them disproportionately damaging.
• Corporate and public sector incidents remain comparatively rare – Corporate (0.7%) and Public Sector (0%) reports together accounted for fewer than 1% of all recorded incidents. Although relatively uncommon, attacks against organisations frequently have wider operational and financial consequences than the report volume alone suggests.

By financial losses

Insights for Financial Losses

• Investment fraud accounted for almost half of all financial losses – Despite representing just 7.8% of reports (1,596 incidents), investment fraud resulted in £34 million in losses, accounting for 45.2% of all financial harm across the West Midlands. With an average loss of £21.3k per report, it remains by far the most financially damaging cyber crime category.
• Consumer fraud caused the second-highest financial losses – Consumer fraud generated £22.6 million in losses, representing 30.1% of the regional total. Combined with its position as the most frequently reported crime type, this demonstrates both the scale and widespread impact of scams targeting everyday consumers.
• Banking fraud delivered disproportionately high losses – Banking fraud accounted for 12.9% of total financial losses (£9.7 million) from only 9.0% of reports. The average loss of £5.3k per incident is almost double that of consumer fraud, highlighting the significant financial impact when criminals gain access to bank accounts or payment systems.
• Cyber dependent crime remained high in volume but low in direct financial loss – Although cyber dependent offences represented 24.7% of all reports (5,050 incidents), they accounted for just 0.3% of total losses (£234.3k). With an average direct loss of only £46 per report, the figures suggest that many of these incidents involve operational disruption rather than immediate financial theft.
• Corporate and public sector incidents remained relatively uncommon but expensive – Together, corporate and public sector offences represented less than 1% of all reports, yet their average losses reached £5.8k and £16.8k per incident respectively. While infrequent, attacks against organisations can result in substantial financial consequences when they do occur.

West Midlands UK Cyber Crime Statistics for Individuals

Crime Types

By report volume

Insights for Individual Report Volume

• Consumer fraud remained the most common cyber crime affecting individuals – Accounting for 38.5% of all reports (7,509 incidents), consumer fraud was the most frequently reported offence among individuals in the West Midlands. Online shopping scams, fake marketplaces and phishing attacks continue to expose large numbers of people to financial crime.
• Cyber dependent crime affected one in four individual victims – Cyber dependent offences represented 25.1% of reports (4,903 incidents), making them the second most common category. The figures underline the continued prevalence of malware, hacking, ransomware and unauthorised access targeting personal devices and online accounts.
• Advance fee fraud generated one in five reports – With 3,885 reports (19.9%), advance fee fraud remained a significant threat to individuals. Fraudsters continue to exploit promises of loans, prizes, investments and inheritance payments that require victims to make an upfront payment before receiving the supposed reward.
• Banking and investment fraud accounted for a relatively small share of incidents – Together, Banking (7.7%) and Investment (8.1%) fraud represented 15.8% of all reports (3,083 incidents). Although reported less frequently than consumer fraud, these offences often result in considerably higher financial losses per victim.
• Corporate and public sector incidents were almost non-existent among individual victims – Corporate (0.7%) and Public Sector (0%) reports together accounted for less than 1% of all individual incidents. This reflects the fact that these offences predominantly target organisations rather than private individuals.

By financial losses

Insights for Individual Financial Losses

• Investment fraud caused half of all financial losses suffered by individuals – Although investment fraud accounted for just 8.1% of reports (1,579 incidents), it generated £33.2 million in losses, representing 49.8% of all financial harm. With an average loss of £21k per report, it remained by far the most financially damaging crime type affecting individuals.
• Consumer fraud combined high volume with substantial financial impact – Consumer fraud resulted in £19.8 million in losses, accounting for 29.7% of the total. As the most frequently reported crime type, its combination of high incident volumes and consistent financial losses makes it one of the most significant threats facing individuals.
• Advance fee and banking fraud together accounted for almost one-fifth of losses – Advance fee (£7.6 million) and Banking (£5.6 million) fraud collectively represented 19.8% of total financial losses. While far less costly than investment fraud overall, both continue to inflict significant financial harm through scams, account compromise and payment fraud.
• Cyber dependent crime generated minimal direct financial losses – Despite accounting for 25.1% of all reports (4,903 incidents), cyber dependent crime resulted in just £234.3k in direct losses, or 0.4% of the regional total. The average loss of only £48 per report suggests that many incidents involve disruption, data loss or system compromise rather than immediate financial theft.
• Corporate and public sector incidents were rare among individuals – Corporate and public sector offences together accounted for just 0.2% of total financial losses, with combined losses of approximately £166k. Their low reporting volume reflects the fact that these crime types are primarily associated with organisations rather than private individuals.

Age Demographics

By report volume

Insights for Report Volume via Age Demographics

• People aged 30–39 recorded the highest number of reports – Individuals aged 30–39 accounted for 20.6% of all reports (3,990 incidents), making them the most frequently targeted age group in the West Midlands. Their high level of online activity across banking, shopping and digital services is likely to contribute to this elevated exposure.
• Working-age adults accounted for the vast majority of reported incidents – Combined, people aged 20–59 represented 72.4% of all reports (14,027 incidents). This demonstrates that cyber criminals overwhelmingly target those who are most economically active and regularly use digital services for both work and personal life.
• Reports declined steadily after the age of 60 – While individuals aged 60–69 still accounted for 11.4% of reports, this fell to 8.3% among those aged 70–79 and 3.6% for those aged 80–89. Although older adults report fewer incidents overall, they often experience higher average financial losses when they do become victims.
• Teenagers and children accounted for very few incidents – Those aged under 20 represented just 4.1% of all reports, with 772 reports among 10–19 year olds and only 20 reports involving children aged 0–9. This reflects lower exposure to the financial products and online services most commonly exploited by cyber criminals.
• Reports among those aged 90 and over were extremely rare – Individuals aged 90–99 accounted for just 67 reports (0.3%), while only two incidents were recorded among people aged 100 and over. Although the number of incidents is minimal, older victims can still experience significant personal and financial consequences when targeted.

By financial losses

Insights for Financial Losses via Age Demographics

• Individuals aged 60–69 suffered the highest financial losses – Although they accounted for only 11.4% of reports, people aged 60–69 experienced £14.4 million in losses, representing 21.6% of the regional total. With an average loss of £6.5k per report, this age group experienced the greatest financial impact overall.
• Financial losses peak later than report volumes – While 30–39 year olds recorded the highest number of reports (20.6%), the largest financial losses were concentrated among those aged 60–69. This suggests that older victims tend to lose significantly more money per incident, despite experiencing fewer cyber crime reports overall.
• People aged 50 and over accounted for more than half of all financial losses – Combined, individuals aged 50–59, 60–69, 70–79 and 80–89 accounted for 54.7% of total losses (£36.4 million). This highlights the disproportionate financial impact cyber crime has on older adults compared with younger age groups.
• Average losses increased steadily with age – The average financial loss rose from £2k per report among those aged 20–29 to £3.1k (30–39), £3.5k (50–59) and £6.5k (60–69), before reaching £7.4k for individuals aged 80–89. While incident numbers decline with age, the financial consequences become substantially more severe.
• The oldest age groups experienced the highest losses per incident – Individuals aged 100 and over recorded an average loss of £30.5k per report, although this was based on just two incidents. Excluding this very small sample, those aged 80–89 experienced the highest average loss (£7.4k), reinforcing the significant financial risks cyber criminals pose to older victims.

West Midlands UK Cyber Crime Statistics for Organisations

Crime Types

By report volume

Insights for Organisational Report Volume

• Consumer fraud was the most frequently reported crime affecting organisations – Consumer fraud accounted for 41.9% of all organisational reports (375 incidents), narrowly exceeding banking fraud. This suggests organisations remain frequent targets of scams involving purchases, suppliers, online marketplaces and payment requests.
• Banking fraud represented more than a third of organisational incidents – With 333 reports (37.2%), banking fraud was the second most common offence affecting organisations. The high reporting volume reflects the continued threat posed by payment diversion fraud, account compromise and unauthorised financial transactions.
• Cyber dependent crime remained a significant organisational threat – Cyber dependent offences accounted for 16.4% of reports (147 incidents). Although reported less frequently than consumer and banking fraud, attacks involving malware, ransomware and unauthorised system access continue to pose substantial operational risks for organisations.
• Consumer and banking fraud dominated organisational reporting – Together, consumer and banking fraud accounted for 79.1% of all organisational reports (708 incidents). This demonstrates that the majority of cyber crime reported by organisations centres on financial fraud rather than direct attacks against IT infrastructure.
• Advance fee, corporate, investment and public sector incidents remained uncommon – Combined, these four categories accounted for just 4.3% of all organisational reports (39 incidents). While comparatively rare, many of these incidents can still result in significant financial losses when organisations are successfully targeted.

By financial losses

Insights for Organisational Financial Losses

• Banking fraud caused almost half of all organisational financial losses – Banking fraud resulted in £4.1 million in losses, accounting for 48.1% of the total. With an average loss of £12.3k per report, it represents the single greatest source of direct financial harm to organisations in the West Midlands.
• Consumer fraud combined high report volumes with significant financial impact – Consumer fraud accounted for £2.8 million in losses (32.8%) across 375 reported incidents. While the average loss per incident (£7.5k) was lower than banking fraud, its high frequency makes it a major financial risk for organisations.
• Corporate fraud was relatively rare but exceptionally costly – Although there were only 10 corporate fraud reports (1.1%), they generated £719.2k in losses. With an average loss of £71.9k per incident, corporate fraud had the highest financial impact per report of any organisational crime category.
• Investment fraud produced fewer incidents but substantial losses – Investment fraud accounted for just 17 reports (1.9%), yet resulted in £786.5k in losses. The average loss of £46.3k per report demonstrates how infrequent investment scams can still inflict considerable financial damage on organisations.
• Cyber dependent crime generated no direct financial losses – Despite accounting for 147 reports (16.4%), cyber dependent crime recorded no direct financial losses in this dataset. This suggests many incidents involved operational disruption, attempted compromise or recovery activity rather than immediate monetary theft, although the wider business impact may still have been significant.

Business Types

By report volume

Insights for Organisational Report Volume via Business Types

• Limited companies accounted for almost three-quarters of all organisational reports – Limited companies recorded 614 reports, representing 72.7% of all incidents. Their dominance reflects the fact that they make up the largest proportion of UK businesses and present the greatest opportunity for cyber criminals targeting organisations.
• 'Other' business types formed the second largest category – Organisations classified as Other accounted for 79 reports (9.3%), making them the second most frequently reported business type. This broad category demonstrates that cyber crime affects organisations of all structures, not just traditional companies.
• PLCs and sole traders experienced similar levels of reporting – Sole traders (49 reports, 5.8%) and PLCs (47 reports, 5.6%) recorded almost identical numbers of incidents. Despite their very different sizes and operating models, both business types experienced a comparable share of reported cyber crime.
• Charities were not immune to cyber crime – Charitable organisations accounted for 35 reports (4.1%), demonstrating that organisations with a social purpose continue to attract attention from cyber criminals. Limited resources and reliance on donations can make charities attractive targets for fraud and cyber attacks.
• Partnerships and LLPs represented only a small proportion of incidents – Partnerships (1.8%) and LLPs (0.7%) together accounted for just 21 reports, highlighting that cyber crime reports among these business structures were relatively uncommon compared with limited companies.

By financial losses

Insights for Organisational Financial Losses via Business Types

• Limited companies accounted for almost two-thirds of organisational losses – Limited companies suffered £5.5 million in losses, representing 64.5% of the total. While they also recorded the highest number of incidents, their average loss of £9k per report demonstrates the significant financial impact cyber crime continues to have on the UK's most common business structure.
• PLCs experienced the highest average losses among major business types – Although PLCs accounted for just 5.6% of reports (47 incidents), they suffered £695.2k in losses, with an average loss of £14.8k per report. This was the highest average financial impact among business types with a meaningful number of incidents.
• 'Other' organisations recorded substantial financial losses – Organisations classified as Other experienced £721.1k in losses (8.5%) across 79 reports. With an average loss of £9.1k per incident, this category demonstrates that cyber criminals target a broad range of organisational structures beyond traditional company types.
• Sole traders and charities experienced relatively modest financial losses – Sole traders (£247.3k) and charities (£162.3k) together accounted for 4.8% of total losses. However, average losses of £5k and £4.6k per report respectively show that successful attacks can still have a meaningful financial impact on smaller organisations.
• Partnerships and LLPs accounted for very little direct financial loss – Partnerships (£25k) and LLPs (£1.4k) together represented just 0.3% of total financial losses. While relatively uncommon, organisations of every legal structure remain potential targets and should not assume their size or business type provides protection from cyber crime.

About The Data - West Midlands UK Cyber Crime Statistics

Based on a rolling 12 months of data from Report Fraud.

Data is provided by the following police forces: Staffordshire, Warwickshire, West Mercia, and West Midlands

The West Midlands UK cyber crime statistics data is extracted from the NFIB Fraud and Cyber Crime dashboard between 01/01/2025 and 31/12/2025.

Only 'cyber-enabled' fraud and cyber crime offences amounting to a crime under the Home Office Crime Recording rules are included.

Cyber-enabled crimes are traditional crimes, which can be increased in their scale or reach by use of computers, computer networks or other forms of IT.

Information reports and crimes reported directly from partner agencies and industry are not included at this time and will account for differences to Office for National Statistics figures for fraud offences in the same period.

For more information relating to different types of fraud and cyber crime please see the A-Z of fraud section on the Report Fraud website.

Limitations

West Midlands UK cyber crime statistics data is based on victim selection during the reporting process and this has not been verified.

Losses are based on loss amounts as reported in Report Fraud recorded crimes and these have not been verified. Where possible, efforts have been made to review losses reported in excess of £500k but further investigation may be required to determine if loss amounts are a true reflection of the financial impact of the reported crime.

Extreme outliers have been removed to limit data skew.

Crime Types

See crime type definitions in the main cyber crime stats article.

Regional Breakdown

Below is a list of regions that our cyber crime research is broken down into:

• London
• South East
• South West
• North West
• North East
• East
• East Midlands
• West Midlands
• Yorkshire & Humber
• Scotland
• Wales
• Northern Ireland

Further Reading

For more information about West Midlands UK cyber crime statistics, take a look at the following sources:

• Cyber Security Breaches Survey 2025 - UK Gov
• National Cyber Security Centre
• Office for National Statistics