Throughout 2025, our teams have analysed Cleafy ’s discoveries across the mobile threat ecosystem, and the direction of travel is unmistakable: mobile fraud has entered a fully industrialised, on-device era. The four principal malware families identified this year—Albiriox, Klopatra, PlayPraetor, and SuperCardX—signal a decisive shift in how fraud is orchestrated, delivered, and scaled globally.

In this document we share an overview of the threat landscape seen in 2025, analysing the main risks for financial institutions and what to look out for in the next future to stay ahead of advanced fraud.