Most of us would make the logical assumption that young people, having grown up with smartphones practically welded to their palms, are naturally better equipped to navigate the internet’s darker corners. Older generations are the ones clicking sketchy links and falling for phishing emails—right?
The data actually tells a different story. According to Bitdefender’s 2025 Consumer Cybersecurity Survey, which polled more than 7,000 consumers across seven countries, younger users aged 16–34 are getting scammed at roughly double the rate of those aged 55 and over: around 20 percent versus 9.7 percent. Additional studies out of the UK have found the picture to be equally as stark: research from the UK Safer Internet Centre found that 46 percent of 8–17-year-olds have already been scammed online, while a Birkbeck, University of London study found that nearly a third of 18–24-year-olds in England and Wales had been defrauded in the past 12 months, a higher percentage than any other age group.
The Oversharing Paradox
Being comfortable online isn’t the same as being careful, and one of the biggest risk factors for younger consumers is the sheer volume of personal information they broadcast on social media.
Bitdefender’s survey found that younger users are prolific posters of life events, photos, personal videos, and milestones. All this is content that cybercriminals can harvest to craft targeted scams. Bitdefender found that about half (51 percent) of 16–24-year-olds post personal videos, compared to just 17 percent of over-55s. (Think: "get ready with me" clips that reveal a teen’s bedroom and daily routine, or day-in-my-life vlogs that map out a young adult’s commute and workplace.) Each post is a data point a scammer can use.
Younger users are also the heaviest consumers of the platforms where scams thrive. Social media has overtaken email as the top scam delivery channel (34 percent of fraud attempts, per Bitdefender’s data), with TikTok and Instagram—platforms dominated by under-35s—proving particularly fertile ground.
Unlike email, where an unsolicited message from a stranger immediately raises red flags, social media is built on discovery, e.g., following accounts you've never heard of or tapping through to a product link from an influencer's story. That's normal behaviour on these platforms, which is exactly what makes a well-crafted scam so hard to distinguish.
Speed Over Safety
Growing up digital also breeds a particular kind of impatience, and scammers know how to exploit it. Bitdefender’s data showed that 60 percent of 16–24-year-olds accept all cookies without review, compared to 39 percent of internet users over the age of 55. Three-quarters of all users barely skim or completely ignore terms and conditions.
There’s a telling correlation: scam victims are far more likely to accept all cookies (60 percent) than non-victims (46 percent). And this casual attitude toward data-sharing feeds the profiling that makes personalised scams possible in the first place.
The Shame Factor
There’s another dimension to this problem that often goes undiscussed. The UK Safer Internet Centre found that 47 percent of young people say “embarrassment” is the biggest barrier to seeking help after being scammed, followed by fear of being blamed (41 percent) and worrying about getting into trouble (40 percent). Over a quarter of young scam victims said they blamed themselves.
This matters because unreported scams are unresolved scams. If a young person doesn’t tell anyone they’ve been defrauded, they’re unlikely to recover lost funds, and the scammer moves on unchecked. The stigma around being “too smart to get scammed” is, ironically, making the problem worse.
How to Fight Back
A few targeted changes can dramatically reduce your risk. If you’re under 35, here are some steps worth taking.
Audit Your Digital Footprint. Search your own name and scroll through your public profiles with a scammer’s eye. Could someone piece together your routine, your workplace, or your pet’s name from what’s publicly visible? Tighten privacy settings and think twice before sharing voice or video content with the world.
Treat DMs From Strangers Like Cold Calls. A generation that would never answer an unknown phone number will happily reply to a direct message from an account they’ve never interacted with. If someone you don’t know sends an unsolicited message (especially one with a link, a time-limited offer, or an emotional hook), assume it’s a scam until proven otherwise.
Stop Accepting Cookies on Autopilot. Every “Accept All” click hands over data about your browsing habits and interests. Take the extra two seconds to manage your settings or reject non-essential trackers.
Set Up a “Family Safe Word.” AI voice-cloning scams are on the rise, with fraudsters often impersonating relatives in distress. Agree on a code word with close friends and family that you can use to verify any urgent, unexpected requests, whether by phone, voice note, or video call.
Talk About It if It Happens. Getting scammed doesn’t mean you’re gullible; most of these campaigns are conducted by seasoned criminals. Report the incident to Action Fraud, contact your bank if money is involved, and tell someone you trust. Silence only benefits the scammer.
Being a digital native is an advantage, but it’s not armour. The same confidence that makes younger consumers comfortable online can also make them complacent. In 2026, the smartest thing you can do is pair that fluency with a healthy dose of suspicion.
Explore Bitdefender's suite of home security solutions to protect your data and devices in 2026 and beyond.