Scammers are hiring as identity theft victims will get less protection in 2025 – San Diego Union-Tribune

If you’re looking for a job in 2025 and have no moral and ethical scruples, you might be in luck: the cybercrime job market is expected to expand.

This according to a report by the Identity Theft Resource Center, a San Diego-based nonprofit organization that is a leading national expert in cyber security education, research and victim support.

The center made that and four other predictions for 2025, which focus primarily on changes in enforcement policy and resource allocation priorities under the incoming presidential administration. While the predictions relate to regulations, legislation and the business environment, there is no doubt that each of the predictions has direct consequences for consumers.

“Professional cybercriminal organizations are preparing for a hiring boom to take advantage of the power of artificial intelligence and the lack of enforceable cybersecurity standards in the U.S.,” the cybercrime recruiting report said. “Easy-to-use tools that don’t require a high level of technical skills allow criminals to target organizations, looking for known and unknown software bugs that can be exploited for a ransomware or cyber attack that leads to a data breach. Job postings seeking software testers are already appearing on job boards used by cybercriminals.”

In the same report, the nonprofit self-criticized its predictions for 2024 and found that it was perfect in two out of five predictions. For the other three, he underestimated the scale of criminal activity and how difficult it would become to protect Americans’ identities from thieves. A harrowing statistic she shared: 12 percent of identity theft victims who contacted the nonprofit for help in 2024 shared thoughts of ending their lives because the impact of the theft was so devastating.

Here’s what else to expect in 2025, according to the Identity Theft Resource Center:

1. Less support from government and law enforcement agencies to fight cybercrime

“Federal government priorities under the new administration are likely to depress critical areas such as identity crime prevention, cybercrime enforcement, cybersecurity regulations and victim assistance program funding. Federal, state and local governments and the non-governmental organizations (NGOs) that victims rely on to navigate complex fraud cases will see fewer resources allocated. A significant reduction in law enforcement involvement in identity crime investigations is also likely,” the report said.

2. Less money for victims of identity theft crimes

If the first prediction holds true and fewer identity crimes are investigated and prosecuted, then fewer criminal fines and asset forfeitures will be available to fuel the 40-year-old Crime Victims Act Fund, the report said. “The consequences will be significant: fewer resources for service providers like ITRC, fewer victims receiving help, and a reduced ability to address the ripple effects of identity crime.”

A computer screen showing a cartoon criminal — Phishing is a way that cybercriminals try to steal sensitive data. (Associated Press)

3. Federal regulations will take precedence over state regulations

The nonprofit expects federal regulators to loosen reporting requirements for cyberattacks and data breaches. In tandem, “the number of states expected to adopt their own privacy and cybersecurity laws and regulations will grow beyond the current 20 states that have them. That’s good news for residents of those states, but a state-by-state approach creates confusion for people and businesses and a system where geography determines protections and support services. It is also a compliance burden for organizations operating in multiple states.”

4. The return to self-regulation

In the 1990s and 2000s, industries developed best practices and standards around cybersecurity, the report said. It will become a trend again. “As federal government regulations decrease in the new year, look for voluntary self-regulation to bounce back when it comes to identity and cybersecurity.” There is another downside, the report concludes: “Without mandatory requirements, sophisticated fraud enterprises will take advantage of inconsistent protections, leading to increased identity crime and consumer mistrust. Businesses will face greater financial and reputational risks from breaches and fraud that stricter regulatory frameworks would help prevent.”