By Verónica Grondona, Markus Meinzer, Nara Monkam, Alison Schultz, Gonzalo Villanueva

This study presents a new, multidisciplinary method to assess countries’ vulnerabilities to illicit financial flows (IFFs) in different economic channels. Acknowledging that money laundering involves legitimate financial channels and regulatory gaps, our approach combines quantitative data on bilateral economic activities with a qualitative assessment of the regulatory frameworks of trade and investment partners. Using publicly available and contemporary data along with a legal analysis focused on the loopholes that can be exploited for IFFs, the proposed methodology addresses the limitations of current National Risk Assessments (NRAs) and offers an accessible and cost-effective approach that can be applied for anti-money laundering. We illustrate the effectiveness of our approach by analyzing IFF vulnerabilities in Nigerian inward foreign direct investment, Brazilian outward portfolio investment, and Indonesian imports demonstrating its potential to refine and enhance National Risk Assessments

By Isabella Voce and Anthony Morgan

This study examines the experiences of 331 Australian individuals and small to medium enterprise (SME) owners who were victims of ransomware. We used survey data to understand how they were targeted and the vulnerabilities that were exploited in private and work-related settings.

Most ransomware victims had received multiple ransom messages in the past 12 months. SME owners were more likely to have received multiple messages and to have previously paid a ransom. Strong messaging should dissuade SME owners from making these payments, which increase the chances of repeat victimisation.

SME owners reported impacts on many devices. The affected devices were also more likely to have been a work-issued device or a personal device used for work. SME owners were also more likely than other victims to report that the ransomware had spread to other workplace devices, systems or email accounts. The results highlight both the human element in victimisation and the need for technological solutions to protect business owners from ransomware and its harmful effect

By Hal S. Stern and Daniel L. Cork, Editors

Cybercrime poses serious threats and financial costs to individuals and businesses in the United States and worldwide. Reports of data breaches and ransomware attacks on governments and businesses have become common, as have incidents against individuals (e.g., identity theft, online stalking, and harassment). Concern over cybercrime has increased as the internet has become a ubiquitous part of modern life. However, comprehensive, consistent, and reliable data and metrics on cybercrime still do not exist - a consequence of a shortage of vital information resulting from the decentralized nature of relevant data collection at the national level.

Cybercrime Classification and Measurement addresses the absence credible cybercrime data and metrics. This report provides a taxonomy for the Federal Bureau of Investigation for the purpose of measuring different types of cybercrime, including both cyber-enabled and cyber-dependent crimes faced by individuals and businesses, and considers the needs for its periodic revision. This report was mandated by the 2022 Better Cybercrime Metrics Act (BCMA).

Washington, DC: The National Academies Press., 2025. 160p.

By The Swedish National Council for Crime Prevention

This report focuses on how circumstances and situations that make fraud possible are targeted by fraud prevention measures. The report also includes recommendations for different crime prevention actors.