Impostor scams: $3.5B in losses highlights summer social engineering threats

The summer surge in scam activity is not just a consumer problem—it's a direct cybersecurity threat vector. Impostor scams rely on sophisticated social engineering to bypass technical defenses, making them a persistent challenge for security teams. With $3.5 billion in losses last year, the financial motivation for attackers is clear, and the seasonal trend demands heightened vigilance from CISOs and security awareness programs.

Summer is peak season for scams, and 2025 data reveals that impostor scams alone drained $3.5 billion from Americans—nearly three times the losses recorded just five years earlier. This dramatic surge, documented by a PeopleFinders analysis drawing on data from Norton, the Federal Trade Commission, and the California Department of Financial Protection and Innovation, underscores how seasonal consumer behavior creates a rich hunting ground for fraudsters. As vacation planning, impulse spending, and increased sharing of personal data collide over the summer months, scammers exploit the heightened vulnerability through impersonation of trusted entities, vacation rental fraud, and fraudulent purchase schemes.

“

Summer is peak season for scams, and 2025 data reveals that impostor scams alone drained $3.5 billion from Americans—nearly three times the losses recorded just five years earlier.

The mechanics of these summer scams are rooted in social engineering. Fraudsters pose as vacation rental hosts, government officials, or even family members, leveraging urgency and emotional triggers. With travel bookings spiking and consumers in a relaxed, high-spend mindset, traditional vigilance drops. The $3.5 billion figure for impostor scams in 2025 alone represents a massive transfer of wealth to criminal enterprises, and it likely undercounts the full scope, as many victims do not report. The five-year tripling trend indicates that fraudsters are refining their tactics faster than consumers and institutions can adapt, aided by the proliferation of AI-generated deepfakes and voice cloning that make impersonation more convincing.

While official government statistics on seasonal scam spikes are sparse, advisories from the FTC and California’s DFPI confirm that summer is a critical window. The data from Norton further emphasizes that digital platforms—social media, messaging apps, and fraudulent websites—are the primary vectors. For example, fake Airbnb listings, phishing emails offering too-good-to-be-true travel deals, and text messages impersonating banks about “suspicious charges” are all common. In many cases, the red flags are subtle: slight URL misspellings, pressure to act immediately, requests for payment via untraceable methods like gift cards or cryptocurrency, and reluctance to communicate through official channels.