Older victims bore the largest share, losing nearly $2.8 billion, much of it to bogus investment sites.