The Scale of Reported Losses
The FBI's 2025 IC3 annual report records 1,008,597 complaints and $20.877 billion in reported losses, with losses up 26% from 2024. The report describes an average of almost 3,000 complaints a day. Investment-related fraud was the largest component of reported losses, followed by business email compromise and tech-support scams. Business email compromise alone accounted for $3,046,598,558.
Keep the measurement beside the figures: these are complaints and losses reported to IC3. They do not provide the odds that a particular payment will be fraudulent or a prediction of what one business will lose. For a buyer considering investigative work, the practical question is which events and transactions need to be documented in the actual matter.
What Business Email Compromise Is
IC3 describes business email compromise, or BEC, as a scam targeting businesses or individuals working with suppliers or businesses that regularly make wire transfers. Fraudsters compromise email accounts or other communications through social engineering or computer intrusion to conduct unauthorized transfers. The report includes phone numbers and virtual meeting applications among the communications that may be compromised.
That definition suggests a useful way to frame an inquiry: identify the payment instruction, the channel carrying it, the claimed sender, and the resulting transfer. Avoid reducing the question to whether one email looked convincing. Build a sequence showing what was requested, what was approved, and what was sent, while distinguishing confirmed records from a participant's recollection.
The First Hours Matter
IC3 says time is of the essence after discovering a fraudulent transfer. Its guidance is to contact the financial institution immediately and request a recall of the funds, along with any necessary indemnification documents. The report also notes that financial institutions have different policies, so the assistance available needs to be established with the institution involved.
Regardless of the amount lost, IC3 recommends filing a complaint with full transaction details. It says it may be able to assist financial institutions and law enforcement in freezing funds; that is a possibility, not an assurance of recovery. Keep a record of the transaction details supplied, the recall request, and subsequent responses. Organizing an investigation should support the urgent bank response rather than become a reason to defer it.
Florida in the National Picture
Florida ranked third by complaint count in the 2025 report, with 71,843 complaints, behind California and Texas. This is a ranking by complaints, not by the amount lost or the probability of fraud for an individual resident. Keeping that distinction explicit prevents the state figure from being used to answer a different question.
For a Florida business or individual reviewing a suspected transfer, begin with the records of that transaction. National and state figures provide context; the payment trail and communications define the questions for the particular inquiry. A reported total cannot establish who authorized a payment or explain why an instruction changed.
Where Investigators and Records Work Fit
A useful scope can focus on organizing communications, documenting the sequence of events, and researching relevant records through lawful channels. Define the question before commissioning work: is the immediate need a transaction chronology, a clearer account of the instructions received, or an organized file for counsel? Name the documents expected in the deliverable and identify gaps that the available material cannot resolve.
Coordinate that scope with counsel and the financial institution so requests and findings reach the appropriate people. Preserve the distinction between what a document says, what a person recalls, and what remains uncertain. The guide to records research explains the wider importance of identifying sources and reading them carefully. No investigative proposal should be treated as a promise that transferred money will be returned.
Prevention Is a Process
A payment-change review can start with a clear procedure: pause the change, verify it through a known channel, and record who approved the decision. Establish the verification route in advance rather than relying on contact details supplied in the disputed instruction. Treat this as a planning question for the people responsible for payments and communications.
Ask how the process will work when someone is absent or an instruction arrives under time pressure. Give the team a named route for unresolved questions and a clear point at which a payment remains on hold. These are useful topics for a corporate-security review, alongside the incident responsibilities discussed above. A readable procedure gives reviewers something concrete to examine when deciding whether the response matched the plan.