According to AMLBot monitoring, approximately two-thirds of cryptocurrency security incidents in 2025 were driven by social engineering rather than technical vulnerabilities. An AMLBot report shows that 65% of the cases it reviewed last year involved access and response failures, including compromised devices, weak verification, and detection delays, rather than vulnerabilities in the blockchain or smart contracts themselves. Among various fraud cases, investment scams accounted for the highest proportion at 25%, followed by phishing at 18%, and compromised devices at 13%. In the past three months, identity theft attacks have resulted in at least $9 million in digital asset losses. AMLBot CEO Slava Demchuk stated that identity theft is the most destructive method of social engineering scams, with attackers often impersonating exchange support teams, investment partners, or project managers. Users should be wary of urgent requests involving fund transfers or wallet access.