Account takeover

Account takeover occurs when an unauthorised person gains control of an existing user account. In payment fraud, the attacker may then misuse saved payment methods. A known account's history can make a transaction appear more trustworthy than it is.[1] This differs from using stolen card details without accessing the customer account.

For a costly order, a recently changed delivery address combined with unusual purchasing behaviour may warrant review before dispatch. It is a signal, not proof of fraud. Protect staff accounts as well: compromise there can cause different harm from a hijacked customer login.