FinCEN crypto fraud report: what 33,904 filings and $12.7 billion actually show

FinCEN has published a striking financial trend analysis on crypto fraud: 33,904 filings covering around $12.7 billion in reported financial activity tied to digital asset investment fraud. Press coverage usually rounds those numbers to 33,000 filings and $13 billion. FinCEN is the US agency charged with combating financial crime, and it draws on reporting data from across the financial sector. So what do these FinCEN filings really say about scam centres, crypto scams and possible money flows, and what do they not say? One point first: crypto as a whole is not under blanket suspicion. What the agency analyses is suspicious, reported activity in specific risk contexts.

The numbers are a risk signal, not a loss statement

The FinCEN analysis rests on BSA filings, reports made under the Bank Secrecy Act, submitted between September 8, 2023 and December 31, 2025. The precise values are 33,904 filings and around $12.7 billion in reported financial activity. Rounding that to “more than 33,000” and “about $13 billion” is a journalistic shorthand, not an extra finding.

That sum cannot be equated with actual fraud losses. It can include attempted and completed transactions, inflows and outflows, transfers between accounts held by the same customer, repeat or supplementary filings, erroneous entries and even lawful activity in the vicinity of a suspicious event, as FinCEN notes in its financial trend analysis. Because the agency sorts by filing date, the underlying incidents may have begun well before the window under review. For readers, that means a high volume of filings mainly shows that financial institutions are spotting recurring risk patterns. It is not a precise map of every perpetrator, victim or actual loss.

Why a suspicious activity report is not a verdict

A suspicious activity report means that an institution subject to reporting duties has informed the competent authority about a transaction where there may be knowledge, suspicion or reasonable grounds to suspect financial crime. FinCEN filings are therefore leads for analysis and investigation, not evidence, and certainly not criminal convictions. A filing can trigger an investigation, but it has to be tested against additional proof before it becomes a solid finding.

One simple test helps place any headline of this kind: is this a filing, an administrative finding or a court ruling? In earlier remarks FinCEN itself stressed that suspicious activity reports serve as starting information for investigations rather than as verified findings of fact. The $12.7 billion is therefore neither an amount seized nor a fraud loss established in court.

How cross-border fraud networks operate

Scam centres are organised, often cross-border structures that can run or support digital fraud through a division of labour. The operating model frequently follows a similar pattern, without allowing any sweeping claims about particular groups or countries: victims are approached through fake contacts or phishing, payment processing follows, and the funds are then passed on and obscured across accounts, wallets, service providers or different jurisdictions. Alongside the fraud operations themselves, FinCEN describes supporting service networks for account opening, phishing and money laundering, as well as professional launderers.

Money laundering means deliberately concealing the origin of unlawfully obtained assets. Fraud and money laundering are legally distinct areas of assessment, yet they often overlap in the practical transaction chain. That is precisely why individual wallet freezes achieve only so much: authorities and platforms also have to examine the pooling of funds, transfers across several addresses, switches between services and cross-border payout routes, as FinCEN sets out in its alert on scam centres. As a documented risk that cannot be generalised, INTERPOL also reports that scam centres have in some cases been linked to human trafficking and forced online fraud work, which cannot be read across to every site or every worker.

What prevention and controls can achieve

Consumer protection at system level covers education, transparent reporting channels, risk-based checks and cooperation between platforms, payment service providers and authorities. Concrete control measures, which are not to be read as individual investment or legal advice, include monitoring unusual transaction patterns, identity and account verification, scrutiny of unusual conversion or payout routes, and escalation to the competent bodies where risk signals are solid.

In Europe, EU Regulation 2023/1113 requires crypto asset service providers to supply information on the originator and the beneficiary for certain crypto transfers, and to apply risk-based procedures where that information is missing. Anomalies can feed into the decision on whether to file a report, and depending on the risk, suspending, rejecting or returning a transfer comes into consideration, as the relevant EU regulation provides. Prevention can lower risk and make money flows visible earlier. Criminal assessment, confiscation and prosecution, however, remain the task of the competent authorities and courts.

FinCEN data: the reading that holds up

The FinCEN report on crypto fraud points to a substantial, internationally organised risk. The 33,904 filings and around $12.7 billion in reported activity are relevant warning signals, but not a court-proof attribution of every single transaction. Crypto scams, money laundering and scam centres are connected parts of a possible payment chain that still have to be kept analytically apart. Durable consumer protection comes from prevention and robust platform processes, while unpicking complex networks additionally requires cross-border cooperation and investigations that stand up.