2 min read
Definition
Account takeover follows a leaked password, a phishing success or credential reuse. Once in, the attacker may change details, add users or attempt to move money.
Why it matters for your business
Two-factor authentication, unique passwords and alerts stop the vast majority of takeovers and catch the rest early. If you suspect one, act fast — see reporting suspected fraud.
Related reading
Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Reporting suspected fraud to Credit Corp
If you spot something wrong — a scam pretending to be us, a strange login, an unexpected change — report it…
Read →
Managing trusted devices and active sessions
Your account keeps a list of the devices and browsers currently signed in. Reviewing it — and removing…
Read →
Credential stuffing
Credential stuffing is an automated attack that tries username-and-password pairs leaked from one site…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.