Understanding Account Takeover Fraud and How to Protect Yourself

Account takeover fraud (ATO) is a prevalent form of cybercrime, where perpetrators unlawfully gain access to your online accounts and exploit them for financial gain or to steal personal information. In this article, we will delve into the various methods used by scammers to perpetrate ATO and provide actionable steps to safeguard your accounts from such fraudulent activities.

How Do Account Takeovers Occur?

Criminals employ several tactics to execute ATO, including:

• Utilizing phishing attacks to deceive you into disclosing your login information through deceptive emails, texts, or phone calls.
• Deploying malware and spyware to extract sensitive data from your devices in real-time.
• Deploying Deceptive and impersonating websites to capture personal and sensitive information including your banking login ID and password.

How Do I Know If I Am On a Fake Website?

The easiest way to tell that you’re on a fake website is when the domain name doesn’t match the official website for the company. For example, scammers often use domain names that are similar to — or even contain — the official URL within the fake domain name.

Here are a few examples of how scammers spoof website domains:

• BankoffAmerica.com (adding an extra “f”)
• Paypal.com.secure-site.com (in this case, the domain name is actually “secure-site.com” not “paypal.com”)
• WaImart.com (using a capital “i” instead of a lower case “l”)
• Netflix-support.net (combining a spoofed domain with a different domain extension)
• Delivery.ips.com (adding “delivery” to the URL in hopes that you won’t notice they’ve spelled “UPS” as “IPS”)

The bottom line: Always check that you’re on the right domain before entering sensitive information. Unless you’re sure that you’re on a company’s official domain, you could be dealing with a fake website. 

Be Familiar with Valid Meriwest Website Domains

Approved Website Domain:

• meriwest.com
• www.meriwest‌.com
• apply.meriwest.com
• info.meriwest.com
• cu.meriwest.com
• [anything].meriwest.com

Approved Digital Banking Login Domain:

• www.mymeriwest‌.com or mymeriwest.com

Approved Meriwest Partner Domains:

• www.meriwestmortgage.com or meriwestmortgage.com
• www.mwwealthadvisors.com or mwwealthadvisors.com
  
   

Implications of an Account Takeover

When scammers successfully gain control of your online banking, they can wreak havoc by accessing and manipulating sensitive information, initiating unauthorized transfers, and making fraudulent transactions using your debit/credit cards. The consequences of ATO can be severe, leading to financial losses and potential exposure of personal data.

Warning Signs of Account Takeover Fraud

Be vigilant for the following indicators of ATO:

• Unrecognized charges or credits in your account, especially small deposits aimed at validating your account.
• Unauthorized changes to your contact information and account settings.
• Fraud alerts from your financial institution regarding suspicious activities in your accounts.
  
   

Response to an Account Takeover

If you suspect an account takeover, take immediate action:

• Update your online banking credentials and scrutinize your transaction history for any unauthorized activity.
• Disable compromised cards via your mobile banking app and promptly notify your financial institution of the breach.
• Implement robust security measures, such as antivirus software and unique, complex passwords, to fortify your defense against future ATO attempts.

Proactive Measures to Safeguard Your Accounts

To mitigate the risk of ATO, adopt the following preventive strategies:

• Never reuse passwords across multiple accounts and implement strong, unique passwords combined with 2-factor authentication.
• Regularly monitor and manage active login sessions across your online accounts, logging out unrecognized devices promptly.
  Install reputable antivirus software to shield against malware designed to steal sensitive information.
• Watch out for deceptive copy-cat domains and impersonating websites that may try to trick you into sharing sensitive information or engaging in fraudulent activities.

Conclusion

Account takeover fraud poses a significant threat to individuals' financial security and privacy. By staying informed about the methods employed by scammers and adhering to proactive security measures, you can significantly reduce the risk of falling victim to ATO. Empower yourself with the knowledge and tools needed to safeguard your online accounts and mitigate the potential impact of account takeover fraud.