In 2025, fraud by manipulation reached new heights, representing 516 million euros, or 41.6% of total losses related to payment methods. This alarming increase is fueled by the exploitation of stolen data during massive leaks, allowing fraudsters to personalize their phishing attacks. Discover how these practices are evolving and how they impact victims.
The essentials to remember
- Fraud by manipulation generated 516 million euros in losses in 2025, representing 41.6% of total losses related to payment methods.
- Fraudsters use stolen data to personalize their phishing attacks, making their messages more credible.
- Courts decide on a case-by-case basis whether to reimburse victims, depending on the severity of their negligence.
Imagine receiving an apparently legitimate call from your bank, followed by an email and an SMS confirming the discussed information. You suspect nothing until you realize you are the victim of a well-orchestrated scam. This situation is increasingly common as fraudsters perfect their techniques by exploiting stolen data. In 2025, a multitude of people, of all ages and social backgrounds, were targeted by such attacks, and you could be next.
The figures for 2025: increasing fraud
In 2025, scams by manipulation accounted for 516 million euros in losses, a significant increase compared to the previous year. This type of fraud, which includes techniques such as personalized phishing and phone manipulation, saw its share rise from 32.1% to 41.6% of losses related to payment methods. This increase is partly due to the increased use of stolen data to target victims.
According to Denis Beau, first deputy governor of the Bank of France, fraudsters exploit this data to give more credibility to their fraudulent messages. This information often comes from previous data leaks, affecting various organizations, from sports federations to the public operator France Travail. Hackers collect information such as phone numbers, postal addresses, and IBANs, which they then use to personalize their attacks.
Concrete cases: court decisions and reimbursements
Courts assess the reimbursement of victims individually, taking into account their potential gross negligence. For example, the Angers Court of Appeal ordered Crédit Agricole to reimburse 11,593 euros to a fraud victim because the scam’s staging was particularly sophisticated. However, in the case of a BNP Paribas client, the judges considered that her repeated errors constituted gross negligence, and she was not reimbursed.
Judicial decisions therefore vary depending on the context and the victim’s behavior. Banks are obliged to reimburse their clients unless gross negligence is proven, which can be a complex subject of debate in court.
Stolen data: the engine of fraud personalization
Data leaks have exploded in recent years, with a 107% increase in 2025. These breaches affect various organizations, allowing fraudsters to collect a multitude of personal information. This data is then used to create convincing phishing messages that often mimic legitimate communications from banks or other institutions.
As a result, it becomes increasingly difficult for potential victims to distinguish fraudulent messages from authentic ones, hence the importance of remaining vigilant and taking extra precautions to protect personal information.
Protecting personal data to prevent fraud
Consumers and businesses must strengthen their security measures to protect their personal data. Using complex passwords, enabling two-factor authentication, and remaining vigilant against suspicious communications are crucial steps to protect against fraud.
Businesses, on the other hand, must invest in robust security systems and train their employees to recognize and report phishing attempts. Cooperation between the public and private sectors is also essential to effectively combat these constantly evolving threats.
The impact of data leaks on digital security
Data leaks increase the vulnerability of online users. These incidents expose sensitive information that can be used for fraud or targeted attacks. Companies must adopt advanced cybersecurity solutions to prevent breaches and protect their customers’ information.
Public awareness is also crucial to reduce the risks associated with data leaks. By informing users about potential threats and good security practices, it is possible to limit the impact of breaches and strengthen the digital resilience of society.
FAQ on fraud by manipulation and data leaks
What is fraud by manipulation?
Fraud by manipulation involves using techniques such as personalized phishing and phone manipulation to deceive victims and obtain their personal or financial information.
How do fraudsters use stolen data?
Fraudsters exploit stolen data to personalize their attacks, making their messages more credible and increasing their chances of success.
How do courts decide on the reimbursement of victims?
Courts assess each case individually, taking into account the potential gross negligence of the victim. They compare the number of alerts ignored by the victim to the degree of sophistication of the fraud.
What measures should be taken to protect against fraud by manipulation?
To protect oneself, it is advisable to use complex passwords, enable two-factor authentication, and remain vigilant against suspicious communications. Businesses should also invest in robust security systems.