Cloudflare Warns: 1 in 20 Emails Carry Hidden Threats

Crypto News Exploits

Written by Aaron S.,

Editor-In-Chief

Last Updated: December 16, 2025

Key Takeaways

Around 5.6% of global emails contained malicious content in 2025, with November seeing nearly 1 in 10 messages flagged;
Deceptive links (52%) and impersonation (38%) were the main methods used in harmful emails to steal data or money;
Crypto users face high risk, as phishing scams keep rising and lost funds can’t be recovered once transferred.

Stop overpaying - start transferring money with Ogvio. Sign up, invite friends & grab Rewards now! 🎁

Cloudflare Warns: 1 in 20 Emails Carry Hidden Threats

BITDEGREE IN YOUR SOCIAL FEED

Cloudflare has published its 2025 year-in-review report showing that a share of global email traffic carries harmful intent.

The company’s report found that about 5.6% of all emails sent over the past year contained malicious content, roughly 1 in 20 messages.

In November, nearly 1 in 10 emails contained harmful material, almost double the yearly average. Cloudflare said this spike shows how quickly online threats can grow.

How to Pick the Right DeFi dApp? (Dos and Don’ts Explained)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

The company describes malicious emails as messages intended to steal information, money, or account access. Many of them look like normal communication but include hidden traps, such as fake login pages or attachments designed to collect personal data.

Around 52% of harmful messages contained a misleading link that could trick recipients into revealing sensitive details. Another 38% relied on impersonation.

People involved in cryptocurrency are a frequent target. Cloudflare noted that phishing attacks against crypto traders and investors have become more common and more advanced.

Once a user clicks a fake link or transfers funds to a scam address, the loss is usually permanent, as cryptocurrency transactions cannot be reversed.

The report also examined domain names commonly used in these attacks. The top-level domain “.christmas” was the most abused, with over 92% of its email traffic marked as malicious and about 7% labeled as spam.

Other domains commonly linked to harmful activity included “.lol”, “.forum”, “.help”, “.best”, and “.click”.

Recently, Anthropic and the Machine Learning Alignment & Theory Scholars found that artificial intelligence (AI) models can autonomously exploit smart contracts in simulations. How? Read the full story.