Akamai Report: AI-Driven Digital Deception Is Escalating Enterprise Fraud and Shrinking Phishing Lifespans
Key Highlights
- ➤Online scam detections approximately doubled to ~6.4 million in Q1 2026
- ➤Phishing attack lifespan fell from 48 days to 22 days
- ➤High- and critical-risk login activity reached 26.6% of attempts
- ➤Commerce accounted for 41.1% of total login attempts
- ➤Nearly 70% of phishing threats impersonated technology, financial, or commerce brands
Expert Statements
Patrick Sullivan, Chief Technology Officer, Security Strategy at Akamai
“The fight against fraud is no longer just an isolated financial function; it is a critical, cross-functional cybersecurity imperative”
Patrick Sullivan, Chief Technology Officer, Security Strategy at Akamai
“As autonomous AI agents and synthetic identities redefine how customers interact with brands, threat actors are exploiting these same vectors to conduct business logic abuse and zero-click data exfiltration.”
Ofer Wolf, Senior Vice President and General Manager of Enterprise Security, Akamai
“Ransomware is no longer just malware; it is a full-fledged criminal operating model centered on extortion.”
Ofer Wolf, Senior Vice President and General Manager of Enterprise Security, Akamai
“To counter these industrialized operations, CISOs must focus on early disruption: minimizing access via Zero Trust, enforcing microsegmentation to block lateral movement, and hunting for persistent C2 infrastructure before leverage is established.”
Key takeaways * Online scams approximately doubled in volume, surpassing traditional phishing for the first time in Q1 2026. * The majority of malicious domains that targeted enterprise networks during the reporting period impersonated high tech, financial services, and commerce brands. * The phishing attack lifespan declined from 48 days (Q4 2025) to 22 days (Q2 2026). CAMBRIDGE, Mass., Oct. 29, 2026 (GLOBE NEWSWIRE) -- Highlighting the increasing security risks posed by AI, Akamai (Nasdaq: AKAM) today released its latest State of the Internet (SOTI) report: AI-Driven Digital Deception: The Fraud and Abuse Report 2026. The report reveals a dramatic evolution in the digital threat landscape, where threat actors are leveraging AI and automated infrastructure to bypass traditional security perimeters, exploit the entire account lifecycle, and abuse corporate brand trust.
According to the research, online scams — ranging from fake retail domains and social recruitment traps to spoofed event portals — surpassed traditional phishing for the first time in Q1 2026, with detections approximately doubling from ~3.2 million to ~6.4 million. Concurrently, the operational lifespan of phishing attacks dropped by more than 50% (from 48 days in Q4 2025 to just 22 days in Q2 2026), forcing enterprise defenders into a race against fast-rotating attacker infrastructure.
Get started
Create a free account to read the full story.