The Central Bank of Estonia’s annual Payment Fraud Report found that total losses increased 87.4% to EUR 25.3 million in 2025, while reported incidents rose about 14% to 34,900. Card fraud remained the most common form of payment fraud, but credit transfer fraud generated the largest losses. Businesses lost more than EUR 10 million, up from EUR 3 million in 2024, as fraudsters increasingly targeted small businesses through multistage telephone scams, business email compromise and invoice fraud. Businesses represented only 15% of credit transfer fraud cases but incurred 54% of the associated losses, with an average loss of EUR 9,270 compared with EUR 1,570 for individuals. Losses from ATM fraud more than tripled and exceeded e-commerce fraud losses, often after victims were manipulated into withdrawing cash or surrendering cards and PIN codes. Because victims frequently authorized transactions or disclosed security information, they bore 96% of credit transfer fraud losses and 84% of card fraud losses.