How to Scale Enforcement Against Cybercrime

TL;DR

Cyber-enabled fraud should be treated as ordinary crime that local police can investigate, measure, and disrupt. Effective enforcement depends on fast reporting, practical questions, officer support, reliable observational data, and department-wide processes that replace automatic referrals or premature case closure. The NYPD pilot found that victim demographics and financial harm differed sharply from officers’ assumptions.

Transcript

Hey, everybody. Thanks for coming. It is a... I'm excited anyway. I wanna talk about... I wanna take this thing off. I wanna talk about, um, how, how policing typically works in the United States and to an extent in Europe, and I'm... we're dealing with some European partners. But generally speaking, when I'm talking about this, I'm talking about t... Read More

Key Insights

• Cyber-enabled fraud is still crime, and local police already possess many of the interviewing, evidence-gathering, and intervention skills needed to address it. Treating every digital element as a specialized federal matter can interrupt ordinary investigative processes before useful action is attempted.
• Premature case closure is a structural enforcement problem because patrol officers and detectives may stop investigating after hearing terms such as Bitcoin or cyber. The resulting referral reflex prevents departments from applying standard investigative methods, identifying patterns, and building accurate records of victimization.
• Cybercrime victim demographics differ from common police assumptions. The NYPD pilot found a mean victim age of forty-two, with people aged twenty to twenty-nine forming the largest single group, contradicting the belief that these offenses primarily affect older residents.
• Reporting behavior can distort cybercrime statistics because people differ in their willingness to contact police. The speaker notes that wealthier, whiter, and older people are more likely to report, creating biases that complicate conclusions about who is victimized and how frequently offenses occur.
• Observational police data can reveal patterns that voluntary surveys miss. The NYPD examined people who requested help, received an officer response, and had their circumstances investigated, allowing the department to compare victim demographics, scam characteristics, losses, and locations using operational records.
• Rapid intervention can sometimes recover transferred funds. After officers learned that an elderly victim had recently sent money through a money service business, they contacted the business promptly and recovered the money because they asked when and how the transfer occurred.
• Cybercrime measurement is necessary for resource allocation. The speaker argues that a department should know total losses, average losses, leading scams, victim demographics, and geographic patterns before it can compare cyber-enabled crime with offenses that already receive specialized task-force attention.
• Department-wide cybercrime enforcement requires practical training and continuing support, not only a small group of technical specialists. The pilot aimed to make officers recognize cyber-enabled incidents as actionable crimes and provide them with questions, guidance, and assistance during time-sensitive investigations.

Questions & Answers

Q: How can police departments investigate cyber-enabled crime at scale?

Police departments can investigate cyber-enabled crime at scale by integrating it into ordinary patrol and detective workflows. Officers should take reports, ask practical questions, preserve available evidence, identify time-sensitive opportunities, and receive support when unfamiliar digital or financial elements appear. Departments also need consistent measurements of losses, scam types, victim demographics, and geography so leaders can recognize patterns and allocate attention appropriately.

Q: Why do local cybercrime investigations often end prematurely?

Local investigations often end prematurely because officers interpret words such as Bitcoin or cyber as signs that a case belongs exclusively to federal authorities or technical specialists. Patrol officers may close the matter after recommending an FBI referral, while detectives may declare that all leads are exhausted. This response prevents ordinary interviewing, evidence collection, transaction tracing, and rapid intervention from being attempted.

Q: Who is affected by cyber-enabled crime according to the NYPD pilot?

The NYPD pilot found that cyber-enabled crime affected people across demographic groups rather than only older residents. The mean victim age was forty-two, and people aged twenty to twenty-nine were the largest single age group observed. Most identified victims were women. Black and white New Yorkers were underrepresented in the data, while Asian New Yorkers were significantly overrepresented, surprising the investigators.

Q: Why are cybercrime victim statistics difficult to interpret?

Cybercrime victim statistics are difficult to interpret because police data reflects both victimization and willingness to report. The speaker says wealthier, whiter, and older people are more likely to call police, while others may avoid reporting altogether. These differences create reporting and confirmation biases, so recorded cases cannot automatically be treated as a complete representation of every victim or incident in the community.

Q: What made the NYPD cybercrime data different from voluntary surveys?

The NYPD gathered observational data from people who called police for assistance. Officers responded, observed who had requested help, and investigated what occurred. This approach differed from relying only on voluntary survey responses. It gave the department operational information about reported incidents, including victim characteristics, financial losses, scam patterns, and locations, while still leaving acknowledged biases caused by unequal reporting behavior.

Q: How did officers recover money from a recent fraud transfer?

Officers recovered the money by acting soon after learning that an elderly victim had sent it through a money service business to the Dominican Republic. The pilot team asked how the payment was made and when it occurred, then directed local officers to the business. Although the business initially resisted, police followed up and obtained the victim’s money because the transfer had been reported quickly.

Q: What cybercrime metrics should a police department track?

A police department should track the amount of money victims lose, the average loss per incident, the most common scams, the demographics of victims, and the geographic distribution of reports. The speaker argued that lacking these basic measurements left the NYPD unable to describe the problem clearly. Reliable metrics help leaders compare cyber-enabled crime with other offenses and decide where enforcement resources belong.

Q: Does cybercrime enforcement always require elite technical specialists?

Cybercrime enforcement does not always require an elite group of technical specialists. The speaker argues that many cyber-enabled incidents remain recognizable crimes involving deception, victims, payments, evidence, and suspects. Local officers already know how to interview people, gather facts, contact businesses, and pursue leads. Specialized expertise can help, but treating every case as technically inaccessible discourages timely and useful police action.

Summary & Key Takeaways

• Traditional policing begins with a victim report, a preliminary investigation, evidence collection, and referral to detectives. Cyber-enabled cases often break this process because words such as Bitcoin or cyber prompt officers to refer victims elsewhere or close cases, even when familiar investigative methods and immediate local action could help.

• The NYPD pilot sought observational evidence from people who called police and received an in-person response. Its findings challenged assumptions that cybercrime mainly affects older people. Victims crossed demographic groups, younger adults formed the largest single age group observed, women represented most identified victims, and Asian New Yorkers were significantly overrepresented.

• Scaling enforcement requires departments to measure losses, common scams, victim demographics, and geographic patterns while giving officers useful training and operational support. A rapid response helped recover a victim’s recently transferred money, illustrating that timely questions and ordinary police intervention can sometimes produce results without highly specialized forensic capabilities.