Photo: Pexels
A police operation you've probably never heard of just wrapped up with numbers that are hard to believe: more than 960 arrests, 123.7 million online fraud attempts blocked, and over $39 billion in fraud-linked money and digital assets identified. It ran for three months, spanned 30 countries, and targeted the exact scams that hit ordinary online shoppers every day.
Here is the detail that should worry you most. The operation named just 15,500 victims. The real number of people hit is far, far higher — because fewer than 5% of fraud victims ever file a report, according to the FTC's own research. The FBI says Americans reported losing $20.9 billion to internet crime in 2025. The FTC's estimate of the true cost of fraud, accounting for everyone who stayed silent, runs as high as $195.9 billion for a single year.
This article explains what "Operation Confrontation Ghost" actually uncovered, how modern e-commerce fraud really works, and the nine rules that genuinely protect you — whether you buy or sell online.
The scale of the problem nobody wants to talk about
The headline figures keep getting worse, year after year. In 2025, the FBI's Internet Crime Complaint Center received 1,008,597 complaints — the first time in the center's 25-year history that reports crossed one million. Reported losses hit $20.877 billion, up 25.8% on the year. The FTC's Consumer Sentinel Network logged 3 million fraud reports and $15.9 billion in losses, up from $12.5 billion in 2024. Reported fraud losses have now risen for six straight years and are up nearly 430% since 2020.
And those are only the reported numbers. The Global Anti-Scam Alliance and Feedzai surveyed 46,000 people across 42 countries and estimated the true global cost of scams at $442 billion. Fifty-seven percent of adults worldwide said they had been targeted. The gap between the $442 billion survey estimate and the national reported figures isn't a data error — it reflects how scams are built. As one analysis of the data put it, criminal networks deliberately target people who are least likely to report: embarrassed, unsure where to complain, and doubtful anything will happen across borders.
Social media is now the front door. The FTC found that Americans lost at least $2.1 billion in 2025 to scams that started on social media — eight times the 2020 figure. Investment scams that began on social platforms cost $1.1 billion. More than 40% of people who lost money through a social-media scam blamed shopping-related ads, most of which led to "unfamiliar websites." The majority of these scams started on Facebook, with WhatsApp and Instagram in second and third place. Impersonation scams alone drew over a million FTC complaints and nearly $3.5 billion in reported losses.
Two newer categories are climbing fast. FBI data puts cryptocurrency-related losses at $11.3 billion, and the agency reported $893 million lost to AI-driven fraud — including voice cloning for fake "family in distress" calls and deepfakes in investment pitches. Older adults absorbed $352 million of those AI-scam losses.
What "Operation Confrontation Ghost" actually did
The operation ran from July 1 to September 30, 2026, led by the UAE's Ministry of Interior. It pulled in law enforcement from 30 countries — including the UK, Japan, South Korea, Canada, Italy, France, the Netherlands, Brazil, Singapore, and China — alongside INTERPOL, the Global Anti-Scam Alliance, and 13 private-sector partners spanning technology, digital platforms, and financial services. The partner list is revealing in itself: Meta, TikTok, Mastercard, Crypto.com, Trend Micro, Huawei, Feedzai, and Group-IB all took part. The fraud economy touches every part of the digital stack, so fighting it required all of them in one room.
The campaign focused on three categories: AI-enabled fraud, financial fraud conducted through digital platforms, and online sextortion. The results, announced October 21 at a UAE-hosted side event in Vienna during the UN's 13th Conference of the Parties to the Convention against Transnational Organized Crime, were striking:
- More than 960 defendants arrested, 3,500+ additional suspects identified
- Over $39 billion in fraud-linked funds and digital assets identified (recovery efforts are ongoing — the figure covers identified assets, not yet recovered money)
- 123.71 million online fraud attempts thwarted worldwide
- 4,126 bank accounts blocked, 570+ social media accounts closed, 29 fraud centers raided
- 15,500 victims identified, 9,000+ pieces of intelligence exchanged across borders
- Tokenization technology credited with securing more than 4 billion financial transactions per month
Dr. Monica Kathina Juma, executive director of the UN Office on Drugs and Crime, said online platforms and financial accounts let fraudsters move proceeds while hiding their origins, and called for stronger defenses and closer coordination between countries. Colonel Dana Al Marzouqi of the UAE Interior Ministry's International Affairs Bureau put it more bluntly: cross-border partnerships are essential because fraud networks deliberately exploit platforms and financial infrastructure across jurisdictions.
The 7 scams targeting online shoppers right now
Fraud operations run like businesses — the 29 raided centers had staff, scripts, and shifts. Here are the seven plays they run against shoppers, in rough order of how often they show up in the complaint data.
1. The fake store. A polished ad on social media promises brand-name goods at impossible prices. The same too-good-to-be-true deals flood feeds around Black Friday. The site looks professional, checkout works, your card is charged — and nothing ever ships. The FTC's finding that 40% of social-media scam victims lost money through shopping ads to "unfamiliar websites" is mostly this scam.
2. Non-delivery and counterfeits from marketplace sellers. The listing is real-looking, the price is 50% below retail, and either the package never arrives or what arrives is a cheap knockoff. Dispute windows are short, and the seller account vanishes before you file.
3. Phishing and impersonation. Fake "your package is being held" texts, fake bank security emails, fake customer-service numbers planted in search results. Impersonation drew over a million FTC complaints in 2025. The rule is simple: never click the link in the message — go to the company's real site yourself.
4. Triangulation fraud. This one is clever and worth understanding. A fraudster lists genuine, desirable products cheaply on a marketplace. When you buy, they order the same item from a legitimate retailer using a stolen credit card, shipped straight to your address. You get a real product and leave a happy review — while you unknowingly sit in the middle of a money-laundering chain. When the card theft is discovered, the trail leads through you.
5. AI-powered scams. Voice cloning that mimics a relative in trouble, deepfake videos pitching "guaranteed" investments, AI-written messages that no longer carry the broken-English tells of old phishing. The FBI counted $893 million in AI-scam losses in 2025, and this is the fastest-growing category in the data.
6. Romance-to-investment ("pig butchering"). It starts as a friendly conversation on social media or a dating app, slowly turns to investing, and ends at a fake trading platform showing fake profits. Victims are encouraged to deposit more before the "platform" freezes withdrawals. Investment scams were the FTC's top loss category in 2025 at $7.9 billion.
7. Refund and overpayment scams. A "buyer" sends a fake payment confirmation for more than the price and asks you to refund the difference — the original payment never existed. Sellers get hit by this one as often as buyers get hit by the others.
Why they're so hard to catch
Three structural problems protect the fraud economy. First, it is industrial. The 29 fraud centers raided in this operation weren't lone hackers in basements — they were staffed operations running shifts, scripts, and performance targets. When one center is raided, the playbook, the staff, and the tooling move elsewhere.
Second, it is cross-border by design. The victim is in one country, the bank account in another, the social media ad served from a third, and the "store" hosted in a fourth. No single police force has jurisdiction over the whole chain, which is exactly why it took a 30-country coalition plus INTERPOL to dent it — and even then, the operation's own figures describe assets identified, not criminals convicted.
Third, the reporting gap is enormous. Fewer than 5% of mass-market fraud victims file a federal complaint, per FTC research. People feel embarrassed, the individual loss feels too small to bother with, and nobody believes a report filed in one country will move police in another. Every unreported scam is a data point the system never gets — and the 9,000 intelligence items exchanged during Confrontation Ghost show how much these operations depend on shared data.
There is also an uncomfortable truth about the platforms. The FTC's September 2026 proposed rulemaking on impersonation scams notes that fraudsters use the same advertising and targeting tools that platforms sell to legitimate businesses — and that platforms profit from optimizing and serving those ads regardless of whether the advertiser is real. The FTC's consumer protection chief, Christopher Mufarrige, said impersonation scams "are no longer the work of isolated con artists; they are sophisticated, highly engineered operations powered by the same advertising and targeting tools that platforms sell to legitimate businesses." A lawsuit filed against Meta has separately claimed the company misled users about scam ads. Closing 570 social media accounts sounds impressive until you remember new ones can be created in minutes.
9 rules that actually protect you
You can't fix the global fraud economy from your phone. But you can make yourself a bad target. These nine habits are the ones investigators and consumer agencies keep repeating, because they work.
1. Search the store's name plus "scam" or "complaint" before you buy. This is the FTC's own advice, and it catches an astonishing number of fake stores — victims post warnings faster than scammers can rebrand.
2. Pay by credit card, not by transfer. Credit cards carry chargeback rights: if the goods never arrive, your bank can reverse the charge. Bank transfers, wire payments, and cryptocurrency are effectively one-way streets — the FTC data shows over $4 billion lost through bank transfers and crypto in 2025 alone. Never send either to a seller you haven't verified.
3. Read the URL letter by letter. Scam sites live on lookalike domains — one swapped letter, a different suffix, a hyphen where there shouldn't be one. Check for a real contact address, a phone number, and a returns policy. Legitimate businesses publish all three.
4. Reverse-image-search the product photos. If the same "exclusive" product shots appear on ten unrelated sites, you're looking at a template scam, not a store.
5. Treat 40%-below-market prices as a warning, not a bargain. Real retailers have real costs. A price that ignores them is either counterfeit, non-existent, or stolen goods moving through a triangulation scheme.
6. Never click delivery-text links. "Your package is held — click here" is the most successful phishing lure in e-commerce. Open your carrier's site or app directly and check tracking there.
7. Keep screenshots and receipts. Save the listing, the confirmation, and every message. If you need a chargeback or a police report, evidence you collected in thirty seconds is what makes the case.
8. Report it, even if the money is gone. File with the FTC at reportfraud.ftc.gov, the FBI's IC3, or the UK's Action Fraud. Your report becomes one of the intelligence items that operations like Confrontation Ghost run on — the 9,000 exchanged items started as individual complaints like yours.
9. Use tokenized payments where you can. Apple Pay, Google Pay, and similar wallets replace your card number with a one-time token the merchant never sees. The operation credited tokenization with securing 4 billion transactions a month — it's the closest thing to a structural fix available to shoppers today.
If you sell online, fraud hits you too
Buyers aren't the only targets. Sellers face chargeback fraud — a customer receives the goods then claims they didn't — account takeovers, and fake payment confirmations like the overpayment scam above. If you sell on marketplaces, three habits pay for themselves: keep tracking numbers for every shipment, photograph higher-value items before packing, and use signature confirmation above your personal loss threshold. And never accept off-platform payments to "save fees" — the moment the transaction leaves the marketplace, its buyer and seller protections leave with it.
What the $39 billion figure really tells us
Step back from the headlines and the numbers tell a subtler story. The operation identified $39 billion in fraud-linked assets but named only 15,500 victims. That gap is the whole problem in miniature: law enforcement can increasingly follow the money, but the victim map is a rounding error of reality. With roughly 95% of victims never reporting, the 123.7 million thwarted attempts is the truer measure of the fraud economy's size — and it's aimed squarely at ordinary people buying ordinary things.
The second thing the numbers say is that the decisive battle isn't in anyone's inbox. It's at the payment layer. Four billion tokenized transactions a month is a structural defense: the card number never reaches the merchant, so there's nothing to steal. AI is sharpening the attack — cloned voices, deepfake pitches, ad-optimized impersonation — but the same technology flags anomalies at the payment layer in milliseconds. The arms race that matters is infrastructure versus infrastructure, and shoppers win it by choosing payment methods that keep them on the defended side.
The third is the platform question, and it's the one still unresolved. As long as scam advertisers can buy the same targeting tools as legitimate businesses, takedowns will stay one step behind — 570 accounts closed, replacements live within the hour. The FTC's September 2026 rulemaking asks whether platforms should be required to stop impersonation ads before they ever reach consumers. Until that gets answered, the practical defense is yours: the payment method you choose and the five minutes of verification you do before you click buy.
Frequently asked questions
How can I tell if an online store is legitimate?
Check the domain's age with a WHOIS lookup — scam stores are usually weeks old. Look for independent reviews (not just testimonials on the site), a physical address, a working phone number, and a clear returns policy. Search the store name plus "scam" or "complaint." And sanity-check the prices: 40% below every competitor is a red flag, not a deal.
I already paid a scammer. What should I do now?
Contact your bank or card issuer immediately and request a chargeback — hours matter, especially for debit payments. Save every screenshot, confirmation email, and message as evidence. Then file a report with the FTC or FBI IC3 (or Action Fraud in the UK). And ignore anyone offering to "recover" your money for a fee — recovery services are a common second-wave scam.
Is it safe to buy from social media ads?
Treat unfamiliar advertisers as guilty until proven innocent. In 2025, over 40% of Americans who lost money to a social-media scam blamed shopping ads, most leading to unfamiliar websites, according to the FTC. If you do buy, prefer the platform's own checkout (like Facebook or TikTok Shop) where purchase protections apply, and always pay by credit card.
Can I get my money back after an online scam?
It depends on how you paid. Credit cards offer the strongest chargeback rights and the best odds. Debit cards are weaker but still worth disputing quickly. Bank wires and cryptocurrency are almost never recoverable once sent. Whatever the method, report fast — and report to the authorities too, since your complaint feeds the intelligence that powers crackdowns like Confrontation Ghost.
Why do scams keep coming back after big crackdowns?
Because the economics still favor the scammers. Operations are cross-border, cheap to rebuild, and staffed like businesses. Only about 5% of victims report, so most of the damage never enters the statistics. And the advertising infrastructure that delivers victims — social platforms' own ad tools — is still for sale to anyone with a credit card.
What is the single safest way to pay online?
A credit card, or a tokenized wallet like Apple Pay or Google Pay that never shares your real card number with the merchant. Both give you dispute rights and limit what a compromised store can steal. Never pay a stranger by bank transfer, wire, gift cards, or cryptocurrency — those payments are final, which is exactly why scammers demand them.
The bottom line
The $39 billion will get the headlines, but the number that matters is 123.7 million — the fraud attempts stopped in just three months. That's the true size of the machine aimed at online shoppers, and no single crackdown dismantles it. What works is smaller and entirely in your hands: pay by credit card, verify before you buy, never click the link in the text message, and report what happens. Five minutes of caution is worth more than any antivirus.
For more guides on buying and selling safely online, visit abdulrahimmughal.com.
Sources
- INTERPOL, "Cyber-enabled scams" (including e-commerce fraud) — interpol.int
- FBI Internet Crime Complaint Center (IC3), "FBI Sees Rise In Online Shopping Scams" — ic3.gov
- Deconflict, "What Operation Confrontation Ghost Shows About Scam Networks" (23 October 2026) — deconflict.com