A study from the Better Business Bureau found that only 11% of identity theft involves online methods. Half of, just over 5% of the total, online identity theft comes from spyware installed on users machines. As comparison, greater than 30% comes as a result of a lost purse or wallet. Second and third on the list are friends / relatives and employees with access to personal information.
Most interesting (to me at least) is that customers who use online banking tend to notice fraudulent more quickly. Online users average $551 lost compared to $4,543 lost by those who found the fraud on paper statements.