Global Cybercrime Damages: A Baseline for Frontier AI Risk Assessment

• URL: http://arxiv.org/abs/2603.20570v1
• Date: Sat, 21 Mar 2026 00:01:45 GMT
• Title: Global Cybercrime Damages: A Baseline for Frontier AI Risk Assessment
• Abstract summary: Current estimates of global cybercrime damages vary from tens of billions to tens of trillions of dollars, with little systematic evaluation of their reliability.<n>We establish a more rigorous baseline by surveying 27 existing estimates, critically evaluating their methodologies, and constructing a composite estimate from three independent sources.<n>We estimate total global cybercrime damages at approximately $500 billion USD annually (90% CI: $100 billion-$1 trillion)
• Score: 0.0
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: AI companies and governments are increasingly concerned about frontier AI systems enabling cybercrime, yet defining meaningful capability thresholds requires knowing the scale of cybercrime today. Current estimates of global cybercrime damages vary from tens of billions to tens of trillions of dollars, with little systematic evaluation of their reliability. We establish a more rigorous baseline by surveying 27 existing estimates, critically evaluating their methodologies, and constructing a composite estimate from three independent sources: a nationally representative UK business victimization survey scaled globally, US individual victimization data scaled globally, and global cybersecurity spending figures. Large-sample victimization surveys capture losses directly from victims, avoiding both the reporting bias in law enforcement and industry databases and the heavy modeling assumptions of macroeconomic approaches. We focus on quantifiable economic damages -- direct losses, response costs, and defense spending -- excluding harder-to-measure costs such as intellectual property theft and reputational damage. We estimate total global cybercrime damages at approximately \$500 billion USD annually (90% CI: \$100 billion-\$1 trillion). At this baseline, an AI-driven increase of about 20% would add \$100 billion or more, reaching thresholds some companies identify as warranting additional mitigations. However, cybercrime data remains too incomplete for such incremental increases to be directly detectable, and defensive applications of AI may partially offset offensive gains. Our methodology narrows plausible damage estimates from multiple orders of magnitude to a more confident baseline, providing a foundation for decision-making about AI-related cybercrime risk.

Related papers

• Prioritization of Risks from Artificial Intelligence: A Delphi Study of 272 International Experts [115.34779081791287]
  We report results from a three-round Delphi study conducted late 2025 with 272 international AI experts.<n>Experts rated 24 AI risks on harm probability and severity, sector and actor vulnerability, actor responsibility, and overall concern.
  arXiv  Detail & Related papers  (2026-06-03T06:14:41Z)
• CyberGym-E2E: Scalable Real-World Benchmark for AI Agents' End-to-End Cybersecurity Capabilities [66.48570184296857]
  CyberGym-E2E is a large-scale and realistic end-to-end cybersecurity benchmark.<n>It comprehensively evaluates AI agents' abilities across the full lifecycle of vulnerability discovery, PoC generation, and patch generation.<n>The benchmark consists of 920 real-world vulnerabilities across 139 different open-source projects.
  arXiv  Detail & Related papers  (2026-06-03T05:06:37Z)
• Cybercrime Victimization Among Young Adult Males Aged 18--20: A Post-Pandemic Analysis of Converging Risk Factors [0.0]
  From 2022 to 2024, individuals aged 20--29 submitted 191,787 complaints to the FBI Internet Crime Complaint Center.<n>This study presents an original risk factor analysis and theoretical synthesis, representing the first integration of criminological, neurological, and behavioral evidence for this demographic sub-cohort.
  arXiv  Detail & Related papers  (2026-05-30T03:00:12Z)
• Toward Quantitative Modeling of Cybersecurity Risks Due to AI Misuse [50.87630846876635]
  We develop nine detailed cyber risk models.<n>Each model decomposes attacks into steps using the MITRE ATT&CK framework.<n>Individual estimates are aggregated through Monte Carlo simulation.
  arXiv  Detail & Related papers  (2025-12-09T17:54:17Z)
• Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition [101.86739402748995]
  We run the largest public red-teaming competition to date, targeting 22 frontier AI agents across 44 realistic deployment scenarios.<n>We build the Agent Red Teaming benchmark and evaluate it across 19 state-of-the-art models.<n>Our findings highlight critical and persistent vulnerabilities in today's AI agents.
  arXiv  Detail & Related papers  (2025-07-28T05:13:04Z)
• Scoring the Unscorables: Cyber Risk Assessment Beyond Internet Scans [7.449694025927039]
  We show that it is feasible to build a highly accurate cyber risk assessment model using public and readily available technology signatures.<n>Our study shows that there is a strong relationship between these technology signatures and an organization's cybersecurity posture.
  arXiv  Detail & Related papers  (2025-06-07T00:44:09Z)
• CyberGym: Evaluating AI Agents' Real-World Cybersecurity Capabilities at Scale [45.97598662617568]
  We introduce CyberGym, a large-scale benchmark featuring 1,507 real-world vulnerabilities across 188 software projects.<n>We show that CyberGym leads to the discovery of 35 zero-day vulnerabilities and 17 historically incomplete patches.<n>These results underscore that CyberGym is not only a robust benchmark for measuring AI's progress in cybersecurity but also a platform for creating direct, real-world security impact.
  arXiv  Detail & Related papers  (2025-06-03T07:35:14Z)
• Dynamic Risk Assessments for Offensive Cybersecurity Agents [12.321586952717878]
  We argue that assessments should take into account the varying degrees of freedom that an adversary may possess.<n>We show that adversaries can improve an agent's cybersecurity capability on InterCode CTF by more than 40% relative to the baseline.
  arXiv  Detail & Related papers  (2025-05-23T21:18:59Z)
• AILuminate: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons [62.374792825813394]
  This paper introduces AILuminate v1.0, the first comprehensive industry-standard benchmark for assessing AI-product risk and reliability.<n>The benchmark evaluates an AI system's resistance to prompts designed to elicit dangerous, illegal, or undesirable behavior in 12 hazard categories.
  arXiv  Detail & Related papers  (2025-02-19T05:58:52Z)
• A Data-Driven Predictive Analysis on Cyber Security Threats with Key Risk Factors [1.715270928578365]
  This paper exhibits a Machine Learning(ML) based model for predicting individuals who may be victims of cyber attacks by analyzing socioeconomic factors. We propose a novel Pertinent Features Random Forest (RF) model, which achieved maximum accuracy with 20 features (95.95%) We generated 10 important association rules and presented the framework that is rigorously evaluated on real-world datasets.
  arXiv  Detail & Related papers  (2024-03-28T09:41:24Z)
• RCVaR: an Economic Approach to Estimate Cyberattacks Costs using Data from Industry Reports [8.45831177335402]
  This article introduces the Real Cyber Value at Risk (RCVaR), an economical approach for estimating cybersecurity costs. RCVaR identifies the most significant cyber risk factors from various sources and combines their quantitative results to estimate specific cyberattacks costs for companies.
  arXiv  Detail & Related papers  (2023-07-20T17:52:47Z)
• Measurement-driven Security Analysis of Imperceptible Impersonation Attacks [54.727945432381716]
  We study the exploitability of Deep Neural Network-based Face Recognition systems. We show that factors such as skin color, gender, and age, impact the ability to carry out an attack on a specific target victim. We also study the feasibility of constructing universal attacks that are robust to different poses or views of the attacker's face.
  arXiv  Detail & Related papers  (2020-08-26T19:27:27Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.