What is Email Account Takeover Fraud?

by Theresa Nguyen 5 min read June 25, 2024

With more consumers online, bad actors are taking the opportunity to commit more financial crimes, such as account takeover fraud. This online scheme resulted in nearly $13 billion in losses in 2023, up from $11 billion in 2022.1 So, what do organizations need to know about this form of identity theft? And how can they prevent it?

Let’s explore one type of account takeover fraud: email account takeover.

What is email account takeover?

Email account takeover occurs when a fraudster gains access to a legitimate user’s email account through data breaches that expose credentials, purchasing from the dark web, or phishing scams. It’s usually one of the first steps in a broader account takeover scheme.

Once fraudsters have access to a consumer’s email or social media account, they have access to the private information in that consumer’s inbox: financial statements, health records, and other forms of PII. Fraudsters can also now use the consumer’s email to impersonate them with friends, family, financial institutions or other businesses they interact with.  

They can also gain access to other accounts and here’s where email account takeover becomes more dangerous. In this attack, the fraudster gains access to an email or mobile account. Once they have an email, they start by trying to guess the user’s password, commonly called a brute force attack, or through password spraying, where they use commonly used passwords, i.e. ‘password’ or ‘123123 A recent Google survey found that 65% of people use the same password for some or all of their online accounts. This, along with a corresponding email address can give fraudsters further entre into a consumers other accounts. If unsuccessful, they’ll then execute a ‘forgot password’, password reset, or onetime password. Then, they take over the victim’s account with their financial institution to facilitate the transfer of funds from the compromised account.

  • 57% of businesses are experiencing rising fraud losses associated with account opening and account takeover.2

While email account takeover can be quickly executed, detecting it can take time. Unlike credit card fraud, where an individual may soon notice suspicious activity, an email account takeover can go undetected for longer. The owner may not realize until later that their account has been compromised, especially with a dormant account or secondary account they use less. As a result, criminals have more time to facilitate additional attacks.

LEARN MORE: Explore 2024 fraud trends listed by Experian.

How does it affect your organization?

Account takeover fraud doesn’t just impact consumers, it can result in significant financial losses for organizations. For example, if your organization offers credit products, you might have to cover the costs of disputing chargebacks, card processing fees, or providing refunds. In the case of a data breach, you may have to pay fines against your organization for not properly protecting consumer information.

  • Nearly two-thirds of consumers say they’re very or somewhat concerned with online security.3

But email account takeover isn’t just costly — it can damage your organization’s reputation. Consumers expect organizations to have proper security measures in place to protect their information. If a data breach occurs, your security can seem weak, leading consumers to lose trust in your organization. As a result, they may potentially take their business elsewhere.

The importance of prevention

While consumers listed identity theft as their top concern when conducting activities online, they’re still interacting, opening new accounts, and transacting digitally.4 Coupled with the rise of account takeover fraud and associated losses, it’s more crucial than ever for organizations to accurately detect and prevent these attacks. To do this, they must have a proactive fraud prevention strategy in place.

Account takeover fraud prevention requires your business to maintain and continuously reaffirm confidence in the identity data you collect. Your team can monitor, segment, and proactively act on customer identities that display a higher risk of fraud than was determined at account origination through risk-based fraud detection models, machine learning, and advanced analytics.

Experian offers many flexible solutions, including:

  • CrossCore® Solutions are best practice-based groupings of fraud and identity products that enable organizations to solve common to complex issues. For example, our fraud risk solutions include email and phone intelligence to improve verification for thin-files and other challenging populations. Experian offers phone/carrierbased matching capabilities with address validity and occupancy data for >95% of U.S. households.
  • FraudNet is a device intelligence solution that analyzes hundreds of device attributes and prevents fraud on all digital channels. Combining contextual data, behavioral data, and device data, it bridges the gap between physical and digital identity to achieve fraud capture rates that exceed industry averages.

To further alleviate account takeover fraud, your organization can offer educational resources for fraud prevention. Using various, strong passwords across their accounts, and changing them regularly, is a foundational way consumers can help ensure their accounts are secure. Leveraging user names that are different from your email can also help. If a fraudster is able to takeover an account and initiate a lost password request, and that password is used for other accounts, that fraudster now has the credentials they need to further defraud that consumer. By spreading awareness about identity fraud risks and providing best practices for prevention, you can better protect your organization and consumers.

LEARN MORE: Building a multilayered fraud and identity strategy with CrossCore Solutions

Partnering with Experian

Email account takeover, along with other types of fraud, can be detected and prevented with the right partner. Experian’s fraud management solutions can help your organization accurately verify customers and assess risk with our account takeover and fraud management solutions.

Explore Experian’s account takeover solutions and watch an on-demand recording of our Fraud Risk and Identity Verification Solutions tech showcase.

Learn more Watch tech showcase

1 Identity Fraud Cost Americans $43 Billion in 2023, AARP.

2-4 2023 U.S. Identity and Fraud Report, Experian.

Related Posts

Why Distribution Matters in Income and Employment Verification 

Verification has become an increasingly important area of focus in mortgage lending, but success is about more than just coverage. In the latest episode of the Chrisman Commentary Podcast, Experian's Jamie Norris, Senior Manager of Strategic Alliances, shares why distribution and integration are increasingly the keys to driving adoption, automation, and better borrower experiences.  Why Distribution Matters in Verification  As lenders continue to pursue faster, more efficient mortgage processes, verification solutions must fit seamlessly into the systems they already use. Norris explains how Experian's strategy is focused on helping lenders access trusted income and employment data while minimizing workflow disruption by making Experian Verify accessible across loan origination systems (LOS), point-of-sale platforms, underwriting technologies, and reseller networks.  Building a Smarter Verification Strategy  The conversation explores why lenders benefit from having access to multiple verification providers, how they can optimize verification strategies to maximize automation while minimizing costs and borrower friction, and why an "instant-first" approach is gaining momentum across the industry.  Looking Ahead: AI, Automation, and the Future of Mortgage Lending  Norris also discusses how AI-driven underwriting and decisioning are reshaping mortgage technology. As lending platforms become increasingly automated, real-time verification data is expected to support faster decisioning and more streamlined borrower experiences.  She shares Experian's vision for expanding its verification ecosystem and delivering a broader suite of solutions that meet lenders wherever they work.  Listen to the full episode above to hear Jamie's insights on verification strategy, partner integrations, AI-enabled lending, and what's next for mortgage automation. 

August 18, 2026 by Ted Wentzel
The Email Address as Your Most Powerful Identity Signal

The why behind Experian's acquisition of AtData What happens when a comprehensive email intelligence database joins a global leader in data, analytics and fraud prevention? The acquisition of AtData adds 25+ years of building a complete view of email as an identity signal. Financial institutions can recognize, engage and protect customers unlocking a new standard for the way their teams work and the customer experience. That's what Experian's acquisition of AtData delivers. How we got here Not all email addresses tell the same story. Some are newly created. Some exhibit bot-like patterns. Some are inconsistent with every other signal you have about that person. Imagine a real customer. You have a job. You shop online. You have a primary email from your employer, a personal Gmail you've used for 15 years, and an old Yahoo address you still use for shopping because you've been using it since college. You're an engaged customer who interacts with brands, makes purchases and pays bills on time. But each system sees a different version of you. When you apply for credit, the lender sees one email. When you shop, the retailer sees another. When you sign up for a service, you might use the third. For financial institutions: You slow down the approval process to manually verify identity or approve applicants without the full picture. For retailers: You can't tell which version of "customer" is the most engaged, so you either over-mail or under-serve. For fraud systems: Sees a new account created under one email and flags it as suspicious because it doesn't have the history. This was the original problem AtData was built to solve in 1999. Twenty-five years later, that problem didn’t go away, it became more complex. Email fragmentation and device sharing are more common, and identity theft is more sophisticated. Capabilities that now work together Experian has built sophisticated identity and fraud solutions backed by consumer data resources and decades of expertise in credit and risk. AtData brought the ability to assess whether an email address is trustworthy, reachable and consistent—at scale, in real time. Experian is now making email intelligence foundational, not optional. This matters for: Fraud prevention and risk management: Distinguishing a returning customer from a new threat. Knowing whether an email is newly created, exhibiting bot-like patterns or inconsistent with other identities is crucial. Compliance: Building audit trails that can explain identity decisions. Email data history and behavioral signals create the documentation needed to defend your decisions. Credit: Verifying identity in a world where traditional signals are shifting. Email signals provide a persistent, durable identifier that confirms who someone actually is. Marketing: Reaching the right person across email, mail and digital channels. Email intelligence reveals which addresses are actively engaged and reachable. Research shows email remains one of the highest-ROI marketing channels outperforming paid search and social advertising1. The problem every marketer faces: You end up burning budget on addresses that bounce, are unmonitored or are associated with users who never open mail. For credit marketing specifically, email enables faster, more targeted delivery of firm offers across channels, something that's increasingly important in a post-cookie world. "Email is a persistent identifier in a fragmented world. It's what connects a person's postal address, phones, devices, behaviors—the full picture of who they are. By embedding that into our infrastructure, we're not just adding another data point. We're fundamentally improving how businesses understand who their customers are."- Ashley Knight, Senior Vice President, Financial Services and Data Why now? AI is reshaping how decisions are made in every industry. Models are getting faster, more automated and more embedded in core workflows. But AI is only as effective as the data behind it. Fragmented data + fast models = faster, larger-scale misclassifications. In an era of synthetic identities, AI agents, deepfakes and AI-generated activity, the value of durable, persistent, real-world data signals has increased dramatically. Deloitte’s Center for Financial Services projects that generative AI could drive fraud losses in the U.S. up to $40 billion by 2027, a 32% growth rate since 2023. And email sits at the center of it with business email compromise already being one of the most common and costly fraud types. People change phones, move homes and swap devices, but they often hold onto their email for years. That's the signal that protects your business, and the one we've built into the core of how we help you make decisions with confidence. View the press release here

August 6, 2026 by Zohreen Ismail
Building Financial Opportunity Through Purpose-Driven Partnership

Discover how the National Urban League and Experian partner to expand financial literacy and create economic opportunity.

August 6, 2026 by Scarlet Nickel

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe