The Login Dilemma: Shopping in the Age of Account Takeovers

Account takeover attacks (ATOs) are on the rise: fraudsters have learned that while ATOs require a little more effort, they yield better rewards than basic CNP fraud. ATOs also cause a great deal more harm. To customers, they can feel like a personal attack, and the compromised information fraudsters obtain through ATOs can have a lasting impact. Merchants, on their end, may suffer residual damage to their bottom-line. Earlier this year, Riskified conducted our most comprehensive survey to date on account security.  Participants included 4,000 online shoppers and 425 merchants. We learned why store accounts are so critical to shoppers and merchants, and saw how ATOs drive a wedge between them, damaging brands’ hard-earned reputation.

This report explores how cybercriminals obtain legitimate login credentials, examines key MOs, and breaks down the variety of fraudulent schemes available to these bad actors once they breach an account. Read to discover actionable insights on customers’ and retailers’ attitudes towards account takeovers, and learn tips to detect a bad actor at the first point of contact: the login.