Netcraft wins five more top US banks as takedowns rise

Netcraft has added five of the top 12 US financial institutions as customers for its digital risk protection services. It now works with seven of the top 12 US financial institutions and nine of the world's top 15 banks.

The cybercrime disruption company passed 4.1 million takedowns for 2026 in early September, exceeding its full-year total for 2025. It attributed the increase to customer growth, rising volumes of AI-driven attacks, and broader coverage across domains, phone scams, and social media impersonation.

The latest customer gains reflect continued demand from banks for services that identify and remove phishing sites, fraudulent domains, fake social media accounts, malicious advertising, mobile applications, messaging-based scams, and other online threats. Financial institutions face a broad attack surface, with criminals using multiple channels to imitate trusted brands and target customers.

Netcraft said its approach combines large-scale threat detection with automated validation, evidence gathering, and takedown work across internet infrastructure. It argues that banks increasingly want services that move beyond detection to operational disruption.

"Earning the trust of five more of the U.S.'s largest banks represents another critical moment in the growth and evolution of Netcraft. Surpassing 4.1 million takedowns also shows the scale and scope of the impact we have on the global threat ecosystem. These are important milestones for Netcraft, and their real value lies in the criminal infrastructure removed and the harm prevented. Our commitment to building solutions that support our mission to protect the world from cybercrime remains the reason we grow," said Ryan Woodley, Chief Executive Officer at Netcraft.

Bank demand

The expansion in the financial sector comes as banks seek to reduce the workload on internal security teams while responding more quickly to external threats. Online fraud campaigns now often span websites, messaging services, social platforms, phone lines, and paid advertisements, making manual response slower and more difficult.

One customer described the operational effect of broader automated monitoring and takedown support. A Vice President for Brand Protection at a leading US financial institution said: "Netcraft is detecting threats our previous coverage was missing and getting them taken down quickly. The automation is fantastic across social, phishing, phone numbers, and ads. We're seeing strong results that continue to save our team many hours each week. The solution has become a key element of our security stack."

Attack volumes

Netcraft linked the rise in takedown activity to an increase in AI-assisted scams and phishing operations. Criminal groups are using automation and generative AI tools to create larger volumes of more convincing attacks, often tailoring content across several channels at once.

That shift has changed the economics of online fraud. Cybersecurity providers and banks have argued that spotting malicious content is only part of the task, because criminal campaigns can still generate returns unless the supporting infrastructure is removed quickly.

Repeated takedowns can raise costs for attackers by shortening the time scams remain active and reducing returns from each campaign, according to Netcraft. The company added that a larger customer base improves its detection and classification work because each takedown yields more data on criminal methods and infrastructure.

The group said it has blocked more than 230 million multi-channel threats to date and currently removes nearly one-third of the world's phishing sites. Its customer base spans banks, government bodies, and private-sector organisations, with the latest gains showing particular momentum in financial services.

The figures also underline the pressure on banks to protect customers beyond their own networks, especially when fraud originates on third-party platforms or through domains and phone numbers outside a bank's direct control. In that environment, external monitoring and rapid intervention have become more central to fraud prevention strategies.