Akamai Report: AI-Driven Digital Deception Surges as Online Scams Double Globally

Akamai’s latest State of the Internet report reveals that AI-driven online scams have overtaken traditional phishing for the first time, with detections doubling to 6.4 million in early 2026. For fintech leaders, this shift signals a move toward hyper-automated fraud infrastructure that bypasses legacy security, requiring a fundamental rethink of account lifecycle protection and brand trust.

What was announced

The report, titled "AI-Driven Digital Deception: The Fraud and Abuse Report 2026," details a massive shift in how threat actors operate. According to the research, online scams—including fake retail domains, social recruitment traps, and spoofed event portals—surpassed traditional phishing in Q1 2026. Detections of these scams jumped from approximately 3.2 million to 6.4 million. This surge is attributed to higher financial returns for attackers compared to simple credential harvesting.

The speed of these attacks has also increased significantly. The operational lifespan of phishing attacks dropped by more than 50%, falling from 48 days in Q4 2025 to just 22 days in Q2 2026. This rapid rotation of infrastructure, often powered by Phishing as a Service (PhaaS) toolkits and bulk domain registration, allows attackers to evade static blocklists. Furthermore, the report found that 26.6% of all recorded login attempts were classified as high- or critical-risk. Notably, 40% of this high-risk traffic consisted of account verification requests, suggesting that adversaries are systematically validating email addresses before launching large-scale credential stuffing campaigns.

Industry-specific data shows that the commerce sector is the primary target, accounting for 41.1% of total login attempts. High technology and financial services brands remain the most impersonated, representing 41.6% and 18.9% of phishing threats, respectively. Geographically, the Asia-Pacific (36.4%) and Latin America (37.8%) regions recorded the highest proportions of high-risk login activity.

The companies involved

Akamai (Nasdaq: AKAM) is a global leader in cloud computing and cybersecurity, providing services that protect and deliver digital experiences. The company has evolved from its origins as a Content Delivery Network (CDN) into a comprehensive security provider, offering solutions for bot management, DDoS protection, and Zero Trust architecture. Within the organization, the Enterprise Security Group, led by Senior Vice President and General Manager Ofer Wolf, focuses on industrialized threats like ransomware and lateral movement within corporate networks.

The company plays a pivotal role in the global financial ecosystem by securing the infrastructure used by major banks, fintechs, and retail platforms. Akamai’s State of the Internet (SOTI) reports are widely regarded as benchmarks for understanding global traffic patterns and emerging cyber threats. By leveraging its massive global edge platform, the company is able to observe and analyze billions of daily transactions, providing a unique vantage point on how automated botnets and AI-driven tools are being deployed against enterprise targets.

What FF News has reported before

FF News has closely followed Akamai’s expanding role in securing the future of digital transactions. In late 2025, we covered how Akamai and Visa Join Forces to Secure the Next Era of Agentic Commerce, a partnership designed to protect the emerging world of AI-driven automated payments. This followed our report on Smarter Security: Akamai and Seraphic Team Up to Simplify SSE with Secure Enterprise Browsing, which detailed the company’s efforts to streamline secure service edge (SSE) deployments. More recently, the industry has seen the practical application of these technologies, as reported in Visa Unlocks Agentic Commerce in Europe: AI Agents Now Executing Live Retail Transactions, highlighting the very AI-agent interactions that Akamai’s latest report identifies as a new vector for fraud.

What this means

The "industrialization" of fraud is no longer a future threat; it is the current reality for the financial sector. The halving of attack lifespans suggests that traditional, reactive security measures—such as blacklisting known malicious IPs—are becoming obsolete. The industry is under immense pressure to move toward intent-based behavioral inspection that can identify "low-and-slow" attacks that mimic legitimate user behavior. As agentic commerce becomes mainstream, the distinction between a helpful AI assistant and a malicious autonomous agent will become the primary battleground for fintech security. This shift forces a move away from perimeter defense toward deep microsegmentation and continuous verification across the entire account lifecycle.