Verified Confidence: high
Primary source found; it says the same thing, the scope matches, and it is reasonably current.
Safe rephrasing
Among malicious emails Cloudflare caught in 2025, 52% contained deceptive links, 38% identity deception and 32% brand impersonation (up from 23% in 2024).
What the source says
Deceptive links were the top malicious email threat category in 2025 , found in 52% of messages, up from 43% in 2024 . ... Identity deception (38%) and brand impersonation (32%) were growing threats in 2025, up from 35% and 23% respectively in 2024.
Cloudflare Radar — Cloudflare Radar 2025 Year in Review
- Commonly cited as
- "Brand impersonation in phishing is rising"
- True origin
- Cloudflare Radar — Cloudflare Radar 2025 Year in Review
- Type
- Reference fact: A frequently needed number or rule taken directly from a primary source (e.g. Pew, Census, IAB/PwC, FTC), with its as-of date.
- Year
- 2025
- Data as of
- 2025 (year to date, through early December)
- Last checked
- Method & sample
- Malicious messages identified by Cloudflare Email Security, 2025; a message can fall into several categories.
- Drift between quote and source
- Shares of malicious messages, not of all email; categories overlap
- Interest
- Cloudflare sells network and security services.