（Original article in Japanese by Makoto Shibata was published for FinTech Journal on May. 11, 2026）　https://www.sbbit.jp/article/fj/184958

The article examines how cybercrime is evolving based on the FBI’s latest Internet Crime Report and discusses the implications for Japan’s financial sector. It argues that cybercrime is no longer primarily a technology problem, but increasingly a challenge of financial system design and customer behavior.

FBI Internet Crime Report 2025: https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf

According to the FBI’s 2025 report, more than one million cybercrime complaints were submitted in the United States, with total reported losses reaching approximately US$21 billion, a 26% increase from the previous year. Cryptocurrency-related crimes accounted for the largest share of losses, exceeding US$11 billion. The report also introduced a dedicated section on artificial intelligence (AI) for the first time, highlighting nearly US$900 million in damages linked to AI-enabled fraud. Criminals are increasingly using AI to generate phishing messages, impersonate executives, and steal credentials.

A notable trend is the shift from traditional “system intrusion” attacks to social engineering. Investment scams, business email compromise (BEC), technical support fraud, romance scams, and identity theft now account for the majority of financial losses. Rather than hacking financial institutions directly, criminals manipulate victims through social media, messaging platforms, and other communication channels, convincing them to initiate legitimate-looking transactions themselves. The article notes that approximately 85% of reported losses are linked to such social engineering schemes.

The author argues that Japan is already experiencing the same structural transformation. SNS-based investment fraud, romance scams, and other forms of deception have caused substantial losses, demonstrating that cybercrime increasingly targets human decision-making rather than technical vulnerabilities. As a result, financial institutions must expand their focus beyond cybersecurity to include monitoring customer behavior and transaction intent. The article introduces the concept of “Know Your Purpose,” suggesting that institutions should assess the legitimacy and context of transactions, not merely verify customer identity.

Another key issue is the growing complexity of money flows. Criminals often move funds across multiple layers, including bank transfers, money transfer operators, and cryptocurrency exchanges. The report warns that as Japan develops a regulatory framework for stablecoins and digital assets, similar risks may become embedded within the financial system. Effective countermeasures will therefore require cooperation across banking, payments, and cryptocurrency sectors rather than institution-by-institution responses.

The article also highlights the importance of combating fraudulent account creation and account trafficking. Stronger identity verification through technologies such as My Number card IC-chip authentication, combined with industry-wide sharing of suspicious account information, could significantly disrupt criminal networks. Likewise, in an era of instant payments, the ability to detect and freeze suspicious transactions in real time becomes as important as payment speed itself.

Finally, the article emphasizes the dual role of AI. While AI enables more sophisticated fraud, it can also be used to enhance behavioral analytics and anomaly detection. The discussion references concerns surrounding advanced AI models such as Anthropic’s Claude Mythos, which reportedly demonstrated the ability to identify and exploit software vulnerabilities, highlighting the growing cyber risks associated with rapid AI development.

The article concludes that Japan’s financial industry should prioritize three actions: implementing customer-behavior-based risk management, strengthening real-time data sharing across the industry, and building infrastructure capable of immediately delaying, suspending, or freezing suspicious transactions. The ultimate challenge is to create a financial system that balances convenience with security and positions financial institutions as critical social infrastructure for preventing fraud.