Account Takeover (ATO)
A form of third-party fraud where an attacker gains control of a legitimate account and uses it to transact or extract value.
Account takeover (ATO) occurs when an attacker compromises a legitimate account — through phishing, credential stuffing, SIM swaps, or social engineering — and uses it to move money or open new lines.
Why it is costly
ATO targets already-funded, already-trusted accounts, so losses can be large and fast. It is a leading risk for brokerage and wealth platforms; see who Instnt is for.
Insuring the loss
Monitoring reduces ATO frequency; insurance covers the residual loss when it succeeds anyway. This is part of what Identity Fraud Loss Insurance indemnifies.
Chargeback Liability
The financial responsibility a business bears when a customer disputes a transaction and the payment is reversed.
False Decline
A legitimate customer wrongly rejected by fraud controls — a hidden revenue loss that grows as thresholds tighten.
First-Party Fraud
Fraud in which a real person uses their own or a manipulated identity to obtain goods, credit, or services they never intend to repay.
Synthetic Identity Fraud
Fraud committed using a fabricated identity that combines real and fake information to pass verification and open accounts.