In 2023, Meta removed 2.3 billion fake social media accounts, while UK fraud reporting hit 3.2 million cases. Yet the biggest losses often come from how people respond online, not just what security tools can block. Between delayed incident recovery and persistent privacy habits, Social Media Insecurity looks less like an isolated scam problem and more like a system that keeps feeding on trust.
Key Takeaways
- 3.2 million cases of fraud were reported in the UK in 2023 (Action Fraud)—highlighting the scale of fraud that social engineering can amplify through social media.
- 61% of breaches required malware removal or system rebuilding (IBM report)—cost drivers consistent with response after compromise through social engineering.
- 42% of breaches were discovered by security team (Verizon DBIR)—relevant to monitoring and responding to social-channel threats.
- 52% of organizations cited lacking internal security talent as a driver for longer response times (ISC2 workforce research)—affecting handling of social-media security events.
- 45% of organizations reported using social media for customer interaction in 2024—expanding the attack surface for social-media insecurity.
- 91% of data breaches were caused by human error (per IBM Security analysis presented in IBM’s 2024 Cost of a Data Breach materials)—human factors often connect to social media scams and impersonation.
- 2.3 billion fake social-media accounts were removed globally in 2023 by Meta—illustrating ongoing ecosystem insecurity via fake/inauthentic behavior.
- $3.9 billion was lost to impersonation scams in 2023 (FBI IC3)—often distributed through social channels.
- 62% of adults who use social media in the UK report that they never read privacy policies (Ofcom)—implying persistent privacy insecurity exposure.
- 40% of surveyed consumers said they are less likely to share personal information after seeing scam content online—behavioral insecurity affecting social media participation.
- 56% of respondents said they have seen fake profiles impersonating people or organizations on social media (NCSC/UK guidance survey findings published by researchers)—measuring observed insecurity artifacts.
- 81% of security teams use automated blocklists or deny lists (industry survey)—blocking known scam domains and links shared on social media.
- The mean time to respond (MTTR) to security incidents was 9 days in 2023 (IBM Security benchmark), showing how delayed response can worsen the fallout from social-engineering compromises
- 37% of global organizations use AI for threat detection in 2024 (industry survey), increasing automated defenses against social-engineering content and account abuse patterns
- 91% of survey respondents said they can recognize at least one phishing indicator, indicating training and awareness can reduce vulnerability to social engineering delivered via social links
From fraud and impersonation scams to slow response times, social media insecurity is already costing millions.
Related reading
01 · Category
Security Exposure1 stats
01
3.2 million cases of fraud were reported in the UK in 2023 (Action Fraud)—highlighting the scale of fraud that social engineering can amplify through social media.
Interpretation
Security Exposure Interpretation
In the UK, 3.2 million reported fraud cases in 2023 show how social media can materially magnify social engineering risks and create major security exposure.
02 · Category
Detection & Response3 stats
01
61% of breaches required malware removal or system rebuilding (IBM report)—cost drivers consistent with response after compromise through social engineering.
02
42% of breaches were discovered by security team (Verizon DBIR)—relevant to monitoring and responding to social-channel threats.
03
52% of organizations cited lacking internal security talent as a driver for longer response times (ISC2 workforce research)—affecting handling of social-media security events.
Interpretation
Detection & Response Interpretation
With only 42% of breaches detected by the security team and 61% requiring malware removal or system rebuilding, organizations need stronger detection and response for social-channel threats, while the fact that 52% cite talent shortages helps explain why fixing these incidents can take too long.
03 · Category
Attack Surface4 stats
01
45% of organizations reported using social media for customer interaction in 2024—expanding the attack surface for social-media insecurity.
02
91% of data breaches were caused by human error (per IBM Security analysis presented in IBM’s 2024 Cost of a Data Breach materials)—human factors often connect to social media scams and impersonation.
03
2.3 billion fake social-media accounts were removed globally in 2023 by Meta—illustrating ongoing ecosystem insecurity via fake/inauthentic behavior.
04
YouTube removed 8.9 million videos for policy violations in Q4 2023 (Google transparency reporting)—showing large-scale insecure content removal.
Interpretation
Attack Surface Interpretation
As social media use for customer interaction rose to 45% in 2024, the attack surface keeps expanding, and the proof is stark in the scale of insecurity, with 2.3 billion fake accounts removed globally in 2023 and YouTube removing 8.9 million policy-violating videos in Q4 2023.
04 · Category
Financial Impact1 stats
01
$3.9 billion was lost to impersonation scams in 2023 (FBI IC3)—often distributed through social channels.
Interpretation
Financial Impact Interpretation
In the Financial Impact category, the FBI IC3 reports that $3.9 billion was lost to impersonation scams in 2023, showing how heavily social media channels are being used to drive real monetary losses.
05 · Category
User Behavior6 stats
01
62% of adults who use social media in the UK report that they never read privacy policies (Ofcom)—implying persistent privacy insecurity exposure.
02
40% of surveyed consumers said they are less likely to share personal information after seeing scam content online—behavioral insecurity affecting social media participation.
03
56% of respondents said they have seen fake profiles impersonating people or organizations on social media (NCSC/UK guidance survey findings published by researchers)—measuring observed insecurity artifacts.
04
27% of users reported clicking on a phishing link at least once during a workplace training program (PhishMe benchmark), connecting human behavior to social-engineering success
05
19% of consumers said they would not be willing to share information even with privacy safeguards, indicating persistent distrust influenced by scam exposure
06
38% of adults reported using social media for news or current events, increasing the likelihood of encountering misinformation and scam content distributed through social platforms
Interpretation
User Behavior Interpretation
User behavior shows persistent insecurity, with 62% of UK social media adults never reading privacy policies and 56% having seen fake profiles, suggesting many people still engage with platforms despite repeatedly encountering warning signs.
More related reading
06 · Category
Controls & Mitigation1 stats
01
81% of security teams use automated blocklists or deny lists (industry survey)—blocking known scam domains and links shared on social media.
Interpretation
Controls & Mitigation Interpretation
With 81% of security teams relying on automated blocklists or deny lists, controls and mitigation efforts are heavily anchored in proactive blocking of known scam domains and links shared on social media.
07 · Category
Operational Cost1 stats
01
The mean time to respond (MTTR) to security incidents was 9 days in 2023 (IBM Security benchmark), showing how delayed response can worsen the fallout from social-engineering compromises
Interpretation
Operational Cost Interpretation
In the Operational Cost category, a 9-day mean time to respond to security incidents in 2023 indicates that slower incident handling can directly drive higher costs after social-engineering compromises.
08 · Category
Mitigation & Defense3 stats
01
37% of global organizations use AI for threat detection in 2024 (industry survey), increasing automated defenses against social-engineering content and account abuse patterns
02
91% of survey respondents said they can recognize at least one phishing indicator, indicating training and awareness can reduce vulnerability to social engineering delivered via social links
03
56% of organizations reported deploying CAPTCHA or bot management to protect account creation/login flows, reducing fake profile creation that fuels social-media insecurity
Interpretation
Mitigation & Defense Interpretation
In mitigation and defense, 37% of organizations using AI for threat detection alongside 91% who recognize phishing indicators and 56% deploying CAPTCHA or bot management shows that layered, automated safeguards plus human awareness are cutting down the social-engineering and account-abuse pathways driving social media insecurity.
09 · Category
Regulatory & Governance6 stats
01
2.6 million enforcement actions against abusive accounts were taken by EU platforms under the Digital Services Act during the first year of implementation (European Commission DSA transparency reporting), indicating regulatory pressure on harmful account behavior
02
The EU Digital Services Act requires very large online platforms to submit risk assessments at least annually, creating compliance obligations that affect moderation against scams and impersonation
03
UK regulator Ofcom received 1.6 million complaints about online harms in 2023 (Ofcom annual report), indicating governance activity around online safety and scam content exposure
04
The EU’s GDPR provides for administrative fines up to €20 million or 4% of global annual turnover for certain infringements, shaping governance incentives to protect user accounts and data
05
UK Online Safety Act creates duties for platforms to assess and mitigate risks including fraud and impersonation, increasing governance mechanisms addressing social-media insecurity
06
Under NIS2 in the EU, essential and important entities must take appropriate technical and organizational measures, affecting incident readiness against social-engineering-enabled breaches
Interpretation
Regulatory & Governance Interpretation
In the Regulatory and Governance category, EU platforms took 2.6 million enforcement actions against abusive accounts under the Digital Services Act in the first year, while UK regulators recorded 1.6 million complaints about online harms in 2023, showing rapidly escalating oversight and compliance pressure specifically targeting scams and impersonation.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Thomas Lindqvist. (2026, February 13). Social Media Insecurity Statistics. Gitnux. https://gitnux.org/social-media-insecurity-statistics
MLA
Thomas Lindqvist. "Social Media Insecurity Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/social-media-insecurity-statistics.
Chicago
Thomas Lindqvist. 2026. "Social Media Insecurity Statistics." Gitnux. https://gitnux.org/social-media-insecurity-statistics.
Sources & references
26 datasets cited across this report · attribution is report-level
actionfraud.police.uk
ibm.com
verizon.com
gartner.com
transparency.meta.com
transparencyreport.google.com
ic3.gov
ofcom.org.uk
cloudflare.com
isc2.org
consumer.ftc.gov
ncsc.gov.uk
moodys.com
phishlabs.com
phishme.com
oecd.org
pewresearch.org
digital-strategy.ec.europa.eueur-lex.europa.eu
legislation.gov.uk
+6 additional datasets cited (not shown individually)