Online Scam Detections Double in Global Report
As phishing attack windows shrink to 22 days, attackers are leveraging automation to prioritize high-volume scams.
Updated on Oct. 30, 2026 in Cybersecurity
Live Poll
Do you trust the security of the online services you use every day?
Akamai’s latest report shows that online scam detections doubled to 6.4 million in Q1 2026, surpassing traditional phishing in total volume. This shift marks a notable trend in how attackers are moving away from long-running phishing campaigns to more aggressive tactics.
Why it matters
The migration toward online scams is driven by higher financial returns and improved efficiency in bypassing security perimeters. As attackers leverage AI and rapid infrastructure rotation, the lifespan of traditional phishing threats has collapsed.
Phishing attack lifespans dropped to 22 days, less than half the 48-day average observed in Q4 2025. Meanwhile, 26.6% of all recorded login traffic is now categorized as high or critical risk, with 40% of those attempts specifically targeting account verification processes.
The players
Akamai
A global content delivery network and cloud security provider that monitors internet traffic patterns and threat vectors.
The details
Attackers are increasingly deploying phishing-as-a-service toolkits and bulk domain registration to evade traditional blocklists. By utilizing AI-driven automated infrastructure, threat actors can rotate their digital presence rapidly, effectively shortening the attack window before security systems can blacklist them. This agility forces a shift in strategy, as commerce brands face 41.1% of all login traffic, while high-tech and financial sectors remain the most impersonated targets.
Timeline
Q4 2025: Phishing attack lifespan reached 48 days.
Q1 2026: Online scam detections increased to 6.4 million.
Q2 2026: Phishing attack lifespan decreased to 22 days.
- 2026-10-30
Akamai published its State of the Internet report.
The Tech Race
This development tracks a significant acceleration in the adversarial cycle, where the average threat lifespan has fallen from 48 days to 22 days. It underscores a shift where attackers are prioritizing high-volume, automated scams over the more static, persistent phishing campaigns of the past.
Security teams should prioritize defenses against automated, AI-driven login attempts as 40% of high-risk traffic now targets verification flows. Regions including Asia-Pacific and Latin America remain high-risk, recording high and critical risk login attempt rates of 36.4% and 37.8% respectively.
The takeaway
The drastic reduction in phishing lifespans suggests that static perimeter defenses are becoming obsolete against modern automated threats. Security professionals should monitor the next quarterly figures to see if the surge in scam volume forces a permanent shift toward proactive authentication monitoring.
Further reading
For a deeper look into how digital threats are evolving, visit our section on Cybersecurity.
Source note: This article includes information reported by Financial IT.
Live Poll
Do you trust the security of the online services you use every day?
