Online Scams Surge as Phishing Lifespans Shrink
New data from Akamai shows rapid shifts in global threat tactics and increased risks for commerce.
Updated on Oct. 30, 2026 in Cybersecurity
Live Poll
Do you trust the security of the online services you use every day?
Online scams doubled in detection volume during early 2026, marking a pivotal shift where they have surpassed traditional phishing attacks in frequency. Akamai reports that attackers are increasingly leveraging automated infrastructure and AI to bypass standard security defenses.
Why it matters
The rise in online scams is driven by higher financial returns for threat actors compared to traditional methods. Meanwhile, shortened phishing lifespans make it significantly harder for security teams to track and mitigate active threats before they cause damage.
Online scam detections doubled to 6.4 million in Q1 2026, while the average lifespan of phishing attacks dropped to 22 days from 48 days in Q4 2025. Additionally, 26.6% of all login attempts were categorized as high or critical risk.
The players
Akamai
A global cloud services and cybersecurity company that monitors internet traffic and publishes periodic reports on digital threat landscapes.
The details
Attackers are utilizing phishing-as-a-service toolkits, bulk domain registration, and fast-rotating infrastructure to evade security blocklists. High-technology brands remain the primary target for impersonation, accounting for 41.6% of all recorded phishing threats.
Timeline
Q4 2025: Phishing attack lifespans reached 48 days.
Q1 2026: Online scam detections increased to 6.4 million, surpassing traditional phishing.
Q2 2026: The average lifespan of a phishing attack dropped to 22 days.
- 2026-10-30
Akamai released its State of the Internet report.
The Tech Race
The transition from traditional phishing to rapid-fire online scams signals a shift toward AI-driven, automated threat infrastructure that renders legacy blocklists obsolete. This development marks a clear departure from the 48-day phishing lifespan baseline, forcing a defensive reset across the industry.
Users should be aware that high-tech and commerce brands are frequently targeted, meaning account verification requests are often used as a vector for credential theft. Vigilance during login processes is essential given that over a quarter of all login traffic now registers as high or critical risk.
The takeaway
The drastic reduction in the lifespan of phishing attacks means that traditional security measures are no longer sufficient to stop threats in real time. Organizations and individuals must prioritize robust, multi-layered authentication to combat the rise of AI-powered scam infrastructure.
Further reading
For more information on evolving digital threats, visit the Cybersecurity section.
Source note: This article includes information reported by Financial IT.
Live Poll
Do you trust the security of the online services you use every day?
