CRIM2010 Chap.10 Identity Crime, Email Compromise and Organised Fraud
Identity Crime, Email Compromise and Organised Fraud
Identity crime has two parts: obtaining someone’s identity and misusing it, most often for fraud. This chapter covers definitions and methods from skimming and pretexting to pharming and card cracking, the 2026 Australian Cybercrime Survey’s identity-crime figures, a 2026 study of who avoids disclosing personal information, and the gap between theft and discovery.
It then analyses business email compromise through a $600,000 invoice fraud and closes with organised crime groups, the UN definition, their models and the market view of why arrests rarely end a trade.
Response matters as much as prevention. Victims sit at the centre of a dispersed network of banks, agencies, police and credit reporting bodies, and they often carry the burden of passing information between them.
The chapter’s figures on delayed discovery and self-detection show why faster organisational alerts and simpler reporting would reduce harm.
What this chapter covers
- 01
Obtaining an identity and misusing it
- 02
Theft-to-discovery gap
- 03
Survey figures on identity crime
- 04
Skimming, pretexting and pharming
- 05
Business email compromise
- 06
Organised crime groups and networks
Worked example · free
Reading the drop in breach exposure
- 1Points. 25.3 − 19.7 = 5.6 percentage points.
- 1Relative fall. 5.6 ÷ 25.3 = 0.221, about a 22% drop in breach exposure among respondents.
- 1Context. One in five respondents still experienced identity crime, so harm remained common.
- 1Limit. The survey is an opt-in quota sample, so the change describes respondents, not all Australians.
Key terms
- Identity fabrication
- Creating a fictitious identity.
- Identity manipulation
- Altering one’s own identity.
- Pretexting
- Using publicly available details to seem legitimate and draw out more sensitive information.
- Pharming
- Tampering with host files or DNS so that a correct web address leads to a fake site.
- Card cracking
- Using bots to guess the extra card details needed to use a stolen card number.
- Organised criminal group
- Under the UN Convention, a structured group of three or more acting together for material benefit.
- Doxing
- Publishing someone’s personal information to harm them, often alongside stalking or harassment.
- Skimming
- Copying card data with a hidden device or by an insider, sometimes with a camera recording PINs.
Identity Crime, Email Compromise and Organised Fraud FAQ
What did the 2026 survey find about identity crime?
Some 20.6% of respondents reported identity crime or misuse within the past year, and 16.0% had a financial account compromised. Among identity-crime victims, 29.6% lost money and 13.9% paid to deal with the consequences, while breach exposure fell from 25.3% to 19.7%.
Who is targeted by business email compromise?
Executives whose details are public, finance staff who handle payments, HR managers holding employee records, and new staff who cannot easily verify a sender. One compromised mailbox can also be the entry point for a larger ransomware attack.
Why do arrests rarely end organised crime markets?
The market view holds that demand for illicit goods and services persists, so when leaders are removed, new offenders and enterprises fill the gap. The UNODC framed organised crime as a set of illicit activities in which various people happen to be involved at any one time.
How can businesses prevent email compromise?
The lecture lists six practices: a secure email service that flags suspicious senders, multi-factor sign-in, staff training to spot domain mismatches, stricter security defaults, sender authentication through SPF, DKIM and DMARC, and payment platforms that authenticate invoices. Verifying changes to bank details matters most.
What is the difference between identity theft and identity crime?
Identity theft means assuming an existing identity, living or deceased, with or without consent. Identity crime is the broader term for offences that use a fabricated, manipulated or stolen identity to facilitate other crimes, which is why it covers more than theft alone.
Assessment move
Learn the theft-to-discovery figures, 36 and 62 days and 68% self-detection, and the main 2026 survey percentages. Build a two-column list of methods and what each exploits, so you can match counter-measures to them. For business email compromise, practise linking the six controls to situational categories. For organised crime, memorise the four UN criteria and the four ways an offence becomes transnational.
Then practise linking each email control to a situational prevention category.
Working through Identity Crime, Email Compromise and Organised Fraud in CRIM2010? Sia is AskSia’s AI Sociology tutor — ask any CRIM2010 Identity Crime, Email Compromise and Organised Fraud question and get a clear, step-by-step explanation grounded in how CRIM2010 is taught and assessed. Read this chapter free, then take your hardest questions to Sia.
