US Government Cyberscam Response Ineffective, Report Finds
Congressional Report Finds US Response to Cyberscams 'Fragmented'
Related Entities
Organizations
Other
MITRE ATT&CK Techniques
Full Report
Executive Summary
A new report from the Democrats on the U.S. Congress's Joint Economic Committee (JEC) has delivered a scathing assessment of the federal government's response to the escalating crisis of global cyberscams. The investigation, released on October 27, 2026, found the U.S. effort to be "dangerously fragmented" and largely ineffective, resulting in devastating financial losses for American citizens. The report highlights a lack of a unified strategy among federal agencies, a failure to hold private sector companies accountable for their role in facilitating scams, and an abysmal rate of fund recovery for victims. With Americans losing nearly $18 billion to online fraud in 2025, the committee is urging legislative action to overhaul the nation's approach to combating this pervasive threat.
Regulatory Details
The JEC investigation, led by Senator Maggie Hassan and Representative Don Beyer, identified several critical failures in the current U.S. government framework:
- Lack of Coordination: There is no single, coordinated strategy across federal agencies like the FBI, Secret Service, and State Department. Agencies do not even maintain a unified accounting of funds lost, seized, or returned.
- Poor Recovery Rates: The amount of money returned to victims is a minuscule fraction of the losses. The FBI reported returning just $336 million of the nearly $18 billion lost in 2025.
- No Private Sector Accountability: Unlike the UK and EU, the U.S. has not established liability for financial institutions or social media platforms that fail to prevent the abuse of their services for fraud. This lack of incentive hinders proactive prevention efforts.
- Insufficient International Engagement: The report notes that State Department funding cuts eliminated an anti-scam training program in Bangladesh, a country identified as an emerging hub for scam operations.
To address these deficiencies, the report calls on Congress to pass the bipartisan ReportScams.Gov Act, which would mandate a unified federal strategy and create a centralized portal for victim reporting and assistance.
Affected Organizations
The report primarily scrutinizes the performance of U.S. government agencies, including the Joint Economic Committee, FBI, Secret Service, and Department of State. However, the ultimate victims are the American public, and the report also implicates private sector entities like banks and social media companies for not doing enough to prevent fraud.
Impact Assessment
The financial and emotional toll on American citizens is immense, with losses amounting to over $2 million every hour in 2025. The report concludes that the current fragmented government response provides little hope for victims seeking to recover their money. This failure not only harms individuals but also erodes trust in digital platforms and financial institutions. Furthermore, the unchecked flow of funds to transnational criminal organizations, often operating from hostile or uncooperative nations, fuels a global criminal ecosystem and may have national security implications.
Enforcement & Penalties
A key finding of the report is the distinct lack of enforcement and penalties, particularly for private sector platforms that are exploited by scammers. The report's authors argue that without financial liability or stronger regulatory pressure, these companies have little incentive to invest significantly in anti-fraud measures. The proposed legislation aims to create a more robust framework where both government and industry are held more accountable.
Compliance Guidance
While the report is directed at government policy, it contains important takeaways for businesses:
- Proactive Fraud Prevention: Financial institutions and tech platforms should anticipate increased regulatory pressure to implement stronger anti-fraud controls. This includes better user verification, transaction monitoring for scam-like patterns, and faster response to takedown requests.
- Victim Support: Companies whose platforms are used for scams should develop clearer and more supportive processes for victims to report incidents and receive assistance.
- Information Sharing: The private sector should enhance information sharing with law enforcement and each other to more quickly identify and disrupt large-scale scam campaigns.
Timeline of Events
MITRE ATT&CK Mitigations
User Training
Public awareness and user training campaigns are a key defense against falling victim to cyberscams.
Pre-compromise
Proactive threat intelligence sharing and disruption operations against scam infrastructure are needed to get ahead of the problem.
D3FEND Defensive Countermeasures
To address the issues raised in the JEC report, financial institutions and social media platforms must implement robust Web Session Activity Analysis. This involves monitoring user sessions in real-time for indicators of fraudulent activity. For example, a bank could detect if a legitimate user's session is hijacked by analyzing for sudden changes in device fingerprint, geographic location, or behavior, such as rapidly adding a new payee and attempting a large wire transfer. For social media, this could mean detecting an account that suddenly begins sending hundreds of identical, scam-like direct messages. By baselining normal user behavior and alerting on high-risk deviations, companies can proactively intervene—by locking an account, requiring step-up authentication, or blocking a transaction—before a victim loses money. This directly addresses the report's call for more private sector accountability.
Timeline of Events
The Joint Economic Committee releases its report on the U.S. government's response to cyberscams.
Sources & References
Article Author
Jason Gomes
• Cybersecurity PractitionerCybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Editorial Standards & Analyst Review
CyberNetSec.io uses automation to assist source monitoring, deduplication, observable extraction, and structured intelligence generation. Published analysis follows human-defined editorial standards and adds defensive context including MITRE ATT&CK, D3FEND, STIX, and Sigma where applicable. Read our editorial policy.
Tags
📢 Share This Article
Help others stay informed about cybersecurity threats
🎯 MITRE ATT&CK Mapped
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
🧠 Enriched & Analyzed
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
🛡️ Actionable Guidance
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
🔗 STIX Visualizer
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
⚡ Sigma Generator
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.