Infographic

Survey Infographic: Identity and Information Security Attacks

Arkose Labs conducted a 2023 survey of identity and information security professionals at a major industry event to find out what types of attacks they're experiencing today. These findings indicate cybercrime is ongoing and must be addresses to neutralize threats such as financial loss, privacy violations, and service disruption.  

What You’ll Learn

  • Which digital threats are hitting organizations the hardest today A breakdown of the most common attack vectors—human/social engineering, bot-driven abuse, and SMS toll fraud—and why these are so costly.
  • What types of online attacks security teams are seeing across industries A clear summary of the broad attack categories respondents reported, including credential stuffing, reverse-proxy phishing, internal SSO abuse, synthetic fraud, and cybercrime-as-a-service.
  • How bots are driving multiple forms of digital fraud simultaneously Insight into how automated attacks fuel fake accounts, credential stuffing, in-app abuse, scraping, and workflow manipulation.
  • Why SMS toll fraud is a growing financial blind spot An understanding of why most businesses cannot quantify their losses—and why SMS-based fraud (and SMS pumping) quietly drains budgets.
  • How Arkose Labs helps organizations neutralize automated threats An overview of long-term bot mitigation capabilities, risk-based detection, and warranties designed to safeguard high-risk workflows.

FAQ

What are the most common digital attacks affecting organizations today?

Respondents identified human/social engineering, bot-driven fraud, and SMS toll fraud as the top threats. These attacks rely on deception, automation, and infrastructure manipulation to achieve financial gain or unauthorized access.

Why is SMS toll fraud so costly—and so difficult to measure?

Despite being widespread, SMS toll fraud often goes undetected because losses spread across billing systems, telecom relationships, and authentication workflows. Nearly two-thirds of respondents could not estimate their annual cost, highlighting a major visibility gap for security and finance teams.

How does Arkose Labs help businesses defend against these attacks?

Arkose Labs provides adaptive bot mitigation and account security across SMS toll fraud, credential stuffing, new account fraud, scraping, API abuse, and inventory hoarding. The platform disrupts attacker incentives and is the only vendor offering warranties covering SMS toll fraud and credential stuffing losses.

Survey Infographic: Identity and Information Security Attacks