Cybercrime is tightening its grip across the UK, with thousands of people falling victim to scams, account hacks and online fraud every year.

From phishing emails to sophisticated data breaches, criminals are becoming more organised, and more costly, leaving households and businesses counting the price. New research from Protect My Data has revealed exactly where the risks are highest. The study analysed 45 UK police force areas using data from the National Fraud Intelligence Bureau, ranking them based on cybercrime reports per 1,000 people, alongside total reported incidents and financial losses to show the true scale of the threat.

UK’s cybercrime hotspots revealed: The City of London takes the top spot as the UK’s most targeted area, recording 4.78 reports per 1,000 people, the highest rate in the country. Despite just 41 reported cases, total losses hit £394,200, highlighting how attacks here are often high-value, likely targeting financial firms and wealthy individuals. Bedfordshire ranks second with 1,728 reports and 2.45 incidents per 1,000 residents.

While total losses sit at £91,700, the consistent volume suggests widespread targeting of both individuals and small businesses. Close behind is Humberside, which logged 1,742 incidents and 1.86 per 1,000 people, though losses are far lower at £13,100, pointing to frequent but smaller-scale scams. Thames Valley sees one of the highest volumes with 3,721 reports and £272,800 in losses, showing a steady stream of attacks across a large population.

Meanwhile, Hertfordshire stands out for the severity of incidents, with £329,800 lost and £275 per 1,000 residents. London’s wider Metropolitan Police area records the biggest overall impact, with a staggering 10,949 reports and £4.5 million lost, the highest total in the UK. Elsewhere, Nottinghamshire (1,308 reports, £63,900 lost), Essex (2,089 reports, £155,300 lost), Cumbria (439 reports, £10,200 lost) and Kent (2,011 reports, £102,400 lost) round out the top 10, all showing steady cyber activity affecting both residents and businesses.

The areas least targeted by hackers: At the other end of the scale, Police Scotland reports the lowest cybercrime rate at just 0.06 per 1,000 people. While total losses still reach £168,500, the risk per resident remains far lower than in England’s busiest regions.

Guernsey sees just eight reported incidents and £2,300 in losses, making it one of the safest areas in the UK for cybercrime. PSNI follows with 843 reports and a low rate of 0.44 per 1,000 people, while Dyfed Powys (0.73 per 1,000) and Gwent (0.78 per 1,000) also rank among the least affected, though incidents are still present. Peter Nguyen, privacy expert at Protect My Data, said: Cybercrime in the UK has shifted from random scams to more targeted attacks, especially in areas where there is more money or more digital activity.

“Criminals are becoming more organised and are focusing on quality as well as quantity. Phishing emails and text scams are still the most common attacks we’re seeing, but account takeovers and data breaches are growing quickly. People often don’t realise how much personal information they’ve already shared online, and that makes them easier targets.

“One of the biggest mistakes people make is trusting messages that feel urgent. If you get an email or text asking you to act quickly, especially involving money or personal details, that’s usually a red flag. Taking a moment to double-check can prevent a lot of damage. Simple steps can make a big difference.

“Use strong, unique passwords, turn on two-factor authentication, and avoid clicking on links from unknown sources. Most attacks rely on human error, so being cautious is your best defence.” The study ranks UK police force areas most likely to be targeted by cyber hackers based on reports per 1,000 population.

Total report numbers and reported financial losses are included as supporting context to show the overall scale and impact of cybercrime in each area.